3.2.1

What's Changed

• Add support for v1 admissionReviewVersions by @jacksgt in #125

New Contributors

• @jacksgt made their first contribution in #125

Full Changelog: 3.2.0...3.2.1

3.2.0

What's Changed

• Make cert-manager certs duration configurable by @alexcern in #120
• Enable setting admissioncontroller annotations by @Sir-Jacques in #121

New Contributors

• @alexcern made their first contribution in #120
• @Sir-Jacques made their first contribution in #121

Full Changelog: 3.1.0...3.2.0

3.1.0

Changelog

• Support extra environment variables in opa and kube-mgmt containers

3.0.0

Changelog

⚠️⚠️⚠️ BREAKING CHANGE

• incompatible with cert-manager 1.6 #117

2.0.1

Changelog

ValidatingWebhookConfiguration v1beta1 fail for kubernetes 1.22 (#112)

2.0.0

Changelog

⚠️⚠️⚠️BREAKING CHANGES

• Dedicated section admissionController in values.yaml for configuring admission controller webhook
• Admission controller can be disabled via values.yaml
• Chart version synchronized with kube-mgmt version
• Version is maintained via git tags, no file modifications needed
• Release is created only on git tag push
• Better default watch namespaces (#95)
• By default only OPA is installed, mgmt and admission controller are disabled
• Simplify liveness / readiness check configuration
• RBAC installation simplified
• OPA is upgraded to 0.32.0
• By default json is used for log formatting
• kube-mgmt is compiled with golang 1.15.0

v0.12.1

Fix helm chart certificate generated to have it working with newer Go versions not supporting some deprecated X509 Certificate configs (#86).

v0.12

This release bumps the alpine base image to address a vulnerability (#84). This release also fixes synching of policies from all namespaces (#55).

v0.11

This release fixes the logging issue reported in #49. kube-mgmt will no longer log error messages about being unable to Status objects.

v0.10

This release updates kube-mgmt to perform all of the resync operations in one request as opposed to a DELETE followed by several PUTs. This method is more efficient, requires less locking in the OPA server, and makes the resync operation operate atomically.