Release v0.5.6

What's Changed

• Removed: delete old healthz endpoint by @modulitos in #231
  • You can upgrade by reading the /healthz endpoint from the application port (default 443) instead of the metrics port (default 9999)
• update upstream dependency to v1.31.0-rc.0 by @shizuchanw in #234

New Contributors

• @shizuchanw made their first contribution in #234

Full Changelog: v0.5.5...v0.5.6

Release v0.5.5

What's Changed

• feat: cannonical label for skipping pod identity webhook by @DerekTBrown in #216
• Unify healthcheck endpoint port with application port by @modulitos in #229

New Contributors

• @DerekTBrown made their first contribution in #216
• @modulitos made their first contribution in #229

Full Changelog: v0.5.4...v0.5.5

v0.5.4: Merge pull request #224 from jaidevmane/updating-k8s-client-libraries…

…-and-go-version

updating k8s client version to 1.30 and go version to 1.22.2

v0.5.3

What's Changed

• update golang.org/x/crypto and golang.org/x/net to newest version by @tingrui-AWS-EKS-auth in #204
• Repo controlled build go version by @xdu31 in #206
• Adjust min serviceaccounttoken expiration to 10min by @gauravpriyolkar in #207
• Update k8s.io libraries to v0.29.1 to support sidecar containers by @DanielCKennedy in #209
• gracefully terminate on SIGTERM by @kmala in #211
• update kubernetes client version by @tingrui-AWS-EKS-auth in #214
• Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0 by @haoranleo in #220
• fix build error by @nnmin-aws in #221
• Upgrade go-jose to v4.0.1 by @jstuever in #217
• Update .go-version to 1.21.8 by @sushanth0910 in #223

New Contributors

• @xdu31 made their first contribution in #206
• @gauravpriyolkar made their first contribution in #207
• @DanielCKennedy made their first contribution in #209
• @kmala made their first contribution in #211
• @haoranleo made their first contribution in #220
• @nnmin-aws made their first contribution in #221
• @jstuever made their first contribution in #217
• @sushanth0910 made their first contribution in #223

Full Changelog: v0.5.2...v0.5.3

v0.5.2

What's Changed

• Update container credentials method to use a different mount path by @philljie in #196
• add metric to emit number of pods using sts web identity or container credentials by @minj131 in #198
• Don't push if there is no token or secret for dockerhub by @nckturner in #199
• Bump golang.org/x/net from 0.9.0 to 0.17.0 by @dependabot in #195

New Contributors

• @minj131 made their first contribution in #198
• @dependabot made their first contribution in #195

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• Upgrade Go compiler to version 1.21 and update base image version by @a-hilaly in #191

New Contributors

• @a-hilaly made their first contribution in #191

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• Delete sam by @vpineda1996 in #160
• Update Dockerfile to use Golang1.19 as builder by @tingrui-AWS-EKS-auth in #161
• fix S3 url in instructions for self hosted setup by @matskiv in #162
• Update to newer k8s 1.25.6 as vendored dependency by @dims in #170
• add tests for grpc health probes and seccompProfile by @dims in #171
• Remove CSR check from deploy-config by @chickenbeef in #172
• fix: Reintroduce mutatingwebhook.yaml by @raykrueger in #177
• Enable cross-compilation in Dockerfile by @chewong in #184
• Use eks-distro go-runner as the base image by @chewong in #186
• Update golang.org/x/* packages by @chewong in #185
• Compose full IAM ARN from role name or alias by @zewolfe in #169
• Add support for container credentials method by @philljie in #189

New Contributors

• @vpineda1996 made their first contribution in #160
• @tingrui-AWS-EKS-auth made their first contribution in #161
• @matskiv made their first contribution in #162
• @dims made their first contribution in #170
• @chickenbeef made their first contribution in #172
• @raykrueger made their first contribution in #177
• @chewong made their first contribution in #184
• @zewolfe made their first contribution in #169
• @philljie made their first contribution in #189

Full Changelog: v0.4.0...v0.5.0

v0.4.0

Changes since v0.3.0

• Add option to pass configmap with mapping between SA and IAM role (#142, @olemarkus)
• add cert manager deployment (#139, @prasita123)
• Add warning for --in-cluster=true to README (#138, @nckturner)
• Use certwatcher to support mounting cert-manager certificates. (#134, @colinhoglund)

v0.3.0

Changes since v0.2.0

• Fix serviceaccount regional sts annotation not taking effect unless flag is true (#120, @wongma7)
• add metrics for knowing adoption (#122, @jyotimahapatra)
• Refactor service account cache to accept informer arg and unit test it (#117, @wongma7)
• Add additional log statements and update client-go (#92, @shravan-achar)
• Add a debug handler to list cache contents and log mutation decision (#90, @shravan-achar)
• README: add documentation for running containers as non-root (#88, @josselin-c)
• patch pod spec even if it's already been patched (#62, @yangkev)
• Fix panic in cache informer (#70, @mfojtik)
• Change master branch image tag and update README (#81, @josselin-c)
• Add github worflow to automate docker image creation (#80, @josselin-c)
• deploy: add sideEffects to webhook (#79, @sjenning)
• Add attribution document to container (#76, @josselin-c)
• Update Makefile to delete created tls cert (#60, @Smuggla)
• Update ecr login command for both aws-cli v1 and v2 (#53, @int128)

v0.2.0

Changes since v0.1.0

• Making changes for finding the oidc discovery endpoint in README.md (#19, @bhks)
• Fix jsonpatch operation if no volumes are present (#18, @FaHeymann)
• Added K8s 1.16 compatible kid to jwks JSON (#13, @micahhausler)
• Removed key id from jwks JSON hack script (#9, @micahhausler)
• Added self-hosted cluster setup guide (#7, @micahhausler)