Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release v0.23.0 #614

Merged
merged 1 commit into from
Apr 5, 2022
Merged

Release v0.23.0 #614

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 35 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,41 @@

All notable changes to this project are documented in this file.

## 0.23.0

**Release date:** 2022-04-05

This prerelease adds some breaking changes around the use and handling of kubeconfigs
files for remote reconciliations. Implements health checks for kubernetes jobs and
updates documentation.

SOPS implementation was refactored to include various improvements and extended code
coverage. Age identities are now imported once and reused multiple times, optimising
CPU and memory usage between decryption operations.

**Breaking changes**:

- Use of file-based KubeConfig options are now permanently disabled (e.g.
`TLSClientConfig.CAFile`, `TLSClientConfig.KeyFile`, `TLSClientConfig.CertFile`
and `BearerTokenFile`). The drive behind the change was to discourage
insecure practices of mounting Kubernetes tokens inside the controller's container file system.
- Use of `TLSClientConfig.Insecure` in KubeConfig file is disabled by default,
but can enabled at controller level with the flag `--insecure-kubeconfig-tls`.
- Use of `ExecProvider` in KubeConfig file is now disabled by default,
but can enabled at controller level with the flag `--insecure-kubeconfig-exec`.

Improvements:
- Add kubeconfig flags
[#593](https://github.com/fluxcd/kustomize-controller/pull/593)
- sops: various improvements and tests
[#607](https://github.com/fluxcd/kustomize-controller/pull/607)
- docs/spec/v1beta2: fix recommended settings typo
[#609](https://github.com/fluxcd/kustomize-controller/pull/609)
- Implement health check for Kubernetes jobs
[#608](https://github.com/fluxcd/kustomize-controller/pull/608)
- Update KubeConfig documentation
[#611](https://github.com/fluxcd/kustomize-controller/pull/611)

## 0.22.3

**Release date:** 2022-03-29
Expand Down
2 changes: 1 addition & 1 deletion config/manager/kustomization.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,4 +5,4 @@ resources:
images:
- name: fluxcd/kustomize-controller
newName: fluxcd/kustomize-controller
newTag: v0.22.3
newTag: v0.23.0
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ require (
github.com/cyphar/filepath-securejoin v0.2.3
github.com/dimchansky/utfbom v1.1.1
github.com/drone/envsubst v1.0.3
github.com/fluxcd/kustomize-controller/api v0.22.3
github.com/fluxcd/kustomize-controller/api v0.23.0
github.com/fluxcd/pkg/apis/acl v0.0.3
github.com/fluxcd/pkg/apis/kustomize v0.3.2
github.com/fluxcd/pkg/apis/meta v0.12.1
Expand Down