Releases: stolostron/config-policy-controller
Releases · stolostron/config-policy-controller
v2.12.0
ACM 2.12.0 released November 6, 2024.
Changes:
- Update quay version in test by @JustinKuli in ocm-io/268 via #909
- Update the recreateOption documentation based on feedback by @mprahl in ocm-io/270 via #916
- Update kubernetes-dependency-watches to v0.8.1 by @mprahl in ocm-io/271 via #934
- Add renovate configuration by @dhaiducek in #942
- Make ConfigurationPolicy event driven by default by @mprahl in ocm-io/274 for ACM-11666 via #957
- Retry evaluating the policy if a mapping error occurs by @mprahl in ocm-io/275 via #959
- Refactor to split up handleObjectTemplates and help understandability by @JustinKuli in ocm-io/276 via #961
- Use controller-runtime to protect metrics endpoint by @zyjjay in ocm-io/261 for ACM-8346 via #963
- Address comments from #276 by @mprahl in ocm-io/278 via #964
- Modify metrics options to account for deprecation of kube-rbac-proxy by @zyjjay in ocm-io/281 for ACM-8346 via #968
- Add observedGeneration to OperatorPolicy status by @JustinKuli in ocm-io/282 for ACM-12804 via #970
- Add user-defined compliance messages by @JustinKuli in ocm-io/280 for ACM-12423 via #972
- E2E Tweaks/Fixes by @dhaiducek in ocm-io/279 via #974
- Fix a bug when no namespace selector is specified by @mprahl in ocm-io/283 via #974
- Split kind.yaml workflow into parallel jobs by @JustinKuli in #988
- Update go-template-utils to v6.1.1 by @mprahl in ocm-io/288 via #989
- Use
--server-side
fornull
test by @dhaiducek in ocm-io/289 via #997 - Update to Go v1.22 by @dhaiducek in #1016
- Add sprig functions to customMessage templating by @JustinKuli in ocm-io/293 via #1023
- Add ocm-polices namespace by @yiraeChristineKim in ocm-io/294 for ACM-13609 via #1028
- Clean policies in ocm namespace after test by @yiraeChristineKim in ocm-io/295 via #1035
- Update go-template-utils to v6.3.0 by @mprahl in ocm-io/297 via #1037
- Sync common Makefile by @dhaiducek in ocm-io/299 via #1039
- Add a DryRun CLI by @JustinKuli in ocm-io/298 for ACM-14161 via #1041
- Small dryrun improvements by @JustinKuli in ocm-io/300 via #1044
- More dryrun improvements by @JustinKuli in ocm-io/302 via #1048
- Uninstall scenario improvements by @JustinKuli in ocm-io/303 via #1056
Bug Fixes:
- Restrict reported overlaps to enforced policies by @JustinKuli in ocm-io/269 for ACM-12207 via #912
- Fix help messages in compliance messages getting removed on next eval by @mprahl in ocm-io/273 for ACM-12631 via #947
- Ignore imagePullSecrets and secrets on ServiceAccounts by @JeffeyL in ocm-io/272 for ACM-12270 via #950
- Use the controller-runtime cache to get the decryption key by @mprahl in ocm-io/284 for ACM-11497 via #978
- Ensure pod restart when target kubeconfig changes by @zyjjay in ocm-io/285 for ACM-12933 via #982
- BUG: event-driven mode not requeueing some enforcement errors by @JustinKuli in ocm-io/290 via #1015
- Guard against nil pointer value in status error by @mprahl in ocm-io/296 for ACM-14422 via #1036
- Correct details list when templates are removed by @JustinKuli in ocm-io/301 for ACM-14550 via #1044
- Handle SCC annotations in namespaces by @JustinKuli in ocm-io/305 for ACM-12507 via #1060
Full Changelog: v2.11.0...v2.12.0
(Compiled partially automatically, then adjusted by @JustinKuli - apologies for any omissions or errors)
v2.11.0
ACM 2.11.0 was released July 18, 2024.
Changes:
- Upgrade
controller-gen
by @dhaiducek in ocm-io/206 via #733 - Reduce debug logs for operatorpolicy test by @JustinKuli in ocm-io/209 via #739
- Sync common Makefile by @dhaiducek in ocm-io/224 via #780
- MustNotHave mode for OperatorPolicy by @JustinKuli in ocm-io/222 for ACM-9287 via #793
- Validate the subscription name by @mprahl in ocm-io/225 via #794
- Fix handling of undefined fields for
mustonlyhave
by @dhaiducek in ocm-io/223 via #797 - Skip checking the operator group namespace existence when it's invalid by @mprahl in ocm-io/226 via #797
- Handle stuck deletes better in OperatorPolicy by @JustinKuli in ocm-io/227 for ACM-9287 via #806
- Set default subscription values when not specified by @mprahl in ocm-io/228 for ACM-10561 via #807
- Add a launch.json for local development by @mprahl in ocm-io/229 for ACM-10885 via #810
- Update the operator policy messages by @mprahl in ocm-io/231 via #824
- Update controller-runtime to 0.17.3 by @JeffeyL in ocm-io/232 for ACM-10835 via #829
- Make the capitalization consistent of operator policy messages by @mprahl in ocm-io/234 via #830
- Create missing namespaces for operator policy by @mprahl in ocm-io/237 for ACM-11403 via #840
- OperatorPolicy Templates by @JustinKuli in ocm-io/235 for ACM-10858 via #845
- Stop modifying spec.versions directly in musthaveInstallPlan by @mprahl in ocm-io/238 via #845
- Fix status reporting inconsistency in mustnothave mode by @zyjjay in ocm-io/240 via #853
- Hosted mode Testing for OperatorPolicy by @yiraeChristineKim in ocm-io/242 for ACM-11255 via #866
- Reduce number of related InstallPlans by @JustinKuli in ocm-io/239 for ACM-11025 via #866
- Add support for recording the diff in the ConfigurationPolicy status by @mprahl in ocm-io/246 for ACM-11421 via #870
- Small improvements to recordDiff by @mprahl in ocm-io/248 via #875
- Update kubernetes-dependency-watches to v0.7.0 by @mprahl in ocm-io/250 via #875
- Delete the hosting test namespace before the hosted test namespace by @mprahl in ocm-io/251 via #875
- Add upgradeApproval field to OperatorPolicy by @JustinKuli in ocm-io/249 for ACM-11268 via #875
- Upgrade addon-framework to 0.9.3 by @xuezhaojun in ocm-io/254 via #875
- Update to UBI 9 to match downstream by @mprahl in ocm-io/255 via #878
- Add the recreateOption to the object template by @mprahl in ocm-io/253 for ACM-11846 via #878
- Update Go packages by @dhaiducek in ocm-io/257 for ACM-11664 via #881
- Implement new ComplianceConfig field by @zyjjay in ocm-io/252 for ACM-11023 via #889
- Update CRD descriptions by @dhaiducek in ocm-io/218 for ACM-8992 via #893
- ACM-11453 Fix flaky subscription constraints not satisfiable condition by @JustinKuli in ocm-io/258 via #895
- Make the watch namespace on OperatorPolicy conditional by @mprahl in ocm-io/263 via #899
- Use suggested namespaces of packages by @JustinKuli in ocm-io/266 for ACM-12057 via #901
- Update quay version in test by @JustinKuli in ocm-io/268 via #911
- Update the recreateOption documentation based on feedback by @mprahl in ocm-io/270 via #917
- Update kubernetes-dependency-watches to v0.8.1 by @mprahl in ocm-io/271 via #935
Bug Fixes:
- Adjust polarity of condition when CSV not found by @JustinKuli in ocm-io/210 for ACM-10190 via #742
- Change undetermined OperatorPolicy names to '-' by @JustinKuli in ocm-io/211 for ACM-10202 via #743
- Change unnamed related object from * to - by @yiraeChristineKim in ocm-io/212 for ACM-8782 ACM-8782 via https://github.com/stolostron/conf...
v2.10.1
ACM 2.10.1 was released on April 11, 2024
Bug Fixes:
- Change unnamed related object from
*
to-
by @yiraeChristineKim in ocm-io/212 for ACM-8782 via #763
Full Changelog: v2.10.0...v2.10.1
(Compiled partially automatically, then adjusted by @JustinKuli - apologies for any omissions or errors)
v2.10.0
ACM 2.10.0 was released March 20, 2024
Changes:
- Allow OperatorPolicy to create OLM subscriptions by @zyjjay in ocm-io/162 for ACM-6597 via #577
- Update to go-template-utils v4.0.0 by @mprahl in ocm-io/167 for ACM-7652 ACM-7398 via #603
- Require
objectDefinition
andremediationAction
by @dhaiducek in ocm-io/183 via #667 - Add diff logging by @dhaiducek in ocm-io/191 for ACM-9072 via #694
- Handle preexisting operator in ocm-io/192 for ACM-9283 via #701
- Return a subscription from
handleSubscription
by @JustinKuli in ocm-io/198 via #706 - Implement OperatorPolicy health checks for CSV by @JeffeyL in ocm-io/196 via #710
- Enable status reporting for CatalogSource in OperatorPolicy by @zyjjay in ocm-io/195 for ACM-9285 via #716
- Handle InstallPlan approval based on spec.versions by @JustinKuli in ocm-io/199 for ACM-9286 via #716
- Include the compliance history database IDs in compliance events by @mprahl in ocm-io/200 for ACM-6889 via #716
- Allow configuring a default namespace for operators by @JustinKuli in ocm-io/204 via #724
- Add more validation to the OperatorPolicy by @JustinKuli in ocm-io/207 for ACM-9993 via #726
- Emit fewer OperatorPolicy events by @JustinKuli in ocm-io/208 via #727
Bug Fixes:
- Fix compliance when created resource has a status by @JustinKuli in ocm-io/161 for ACM-7020 via #575
- Add an error when apiVersion is missing by @JustinKuli in ocm-io/163 for ACM-7127 via #580
- Check all items in lists by @JustinKuli in ocm-io/164 for ACM-7889 via #593
- Don't attempt to merge
mustonlyhave
list by @dhaiducek in ocm-io/165 for ACM-7799 via #595 - Fix items in nested lists not always being matched by @JustinKuli in ocm-io/168 via #608
- Handle values omitted from the API server in arrays of objects by @mprahl in ocm-io/172 for ACM-8391 via #622
- Verify with the API server if an empty map is equal to nil by @mprahl in ocm-io/171 for ACM-7810 via #627
- Fix a bug related to unnamed objects by @mprahl in ocm-io/178 for ACM-8731 via #646
- ACM-8739: ACM Policy that applies stringdata in a secret regression with templates by @JeffeyL in ocm-io/179 for ACM-8739 via #648
- Stop the NS controller manager during hosted mode uninstalls by @mprahl in ocm-io/180 for ACM-8826 via #656
- Fix checking the controller installation state at startup by @mprahl in ocm-io/181 for ACM-8826 via #661
- Stop getting the K8s version of target cluster in uninstall mode by @mprahl in ocm-io/184 for ACM-8826 via #671
- Stop refreshing the discovery when in uninstall mode by @mprahl in ocm-io/185 for ACM-8826 via #674
- Adjust polarity of condition when CSV not found by @JustinKuli in ocm-io/210 for ACM-10190 via #744
- Change undetermined OperatorPolicy names to '-' by @JustinKuli in ocm-io/211 for ACM-10202 via #745
- Filter out unrelated subscription resolution failures by @mprahl in ocm-io/214 for ACM-10195 via #749
Full Changelog: v2.9.0...v2.10.0
(Compiled partially automatically, then adjusted by @JustinKuli - apologies for any omissions or errors)