CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

0.22.0 (2024-05-22)

Features

• add expose service entry for internal cluster traffic (#356) (1bde4cc)
• add reconciliation retries for CRs (#423) (424b57b)
• uds common renovate config (#391) (035786c)
• uds core docs (#414) (a35ca7b)

Bug Fixes

• mismatched exemption/policy for DropAllCapabilities (#384) (d8ec278)
• pepr mutation annotation overwrite (#385) (6e56b2a)
• renovate config grouping, test-infra (#411) (05fd407)
• renovate pepr comment (#410) (a825388)

Miscellaneous

• deps: update keycloak (#390) (3e82c4e)
• deps: update keycloak to v24.0.4 (#397) (c0420ea)
• deps: update keycloak to v24.0.4 (#402) (e454576)
• deps: update neuvector to v9.4 (#381) (20d4170)
• deps: update pepr to 0.31.0 (#360) (fbd61ea)
• deps: update prometheus-stack (#348) (49cb11a)
• deps: update prometheus-stack (#392) (2e656f5)
• deps: update uds to v0.10.4 (#228) (1750b23)
• deps: update uds-k3d to v0.6.0 (#398) (288f009)
• deps: update velero (#350) (e7cb33e)
• deps: update zarf to v0.33.2 (#394) (201a37b)

0.21.1 (2024-05-02)

Bug Fixes

• slim-dev monitoring handling (#383) (79927aa)

Miscellaneous

• updating keycloak chart version to align with image (#378) (a60fe2a)

0.21.0 (2024-04-30)

Features

• add monitor to operator, fix monitoring setup (#256) (bf67722)

Bug Fixes

• loki s3 overrides (#365) (3545066)
• update neuvector values for least privilege (#373) (7f4de4f)

Miscellaneous

• add debug logging to endpointslice watch (#359) (da3eb5a)
• deps: update grafana to v7.3.9 (#353) (4a70f40)
• deps: update istio to v1.21.2 (#258) (51c6540)
• deps: update keycloak (#349) (2ef1813)
• deps: update keycloak to v0.4.2 (#375) (b0bb8e4)
• deps: update zarf to v0.33.1 (#368) (296e547)
• move api service watch to reconcile (#362) (1822bca)
• refactor promtail extraScrapeConfigs into scrapeConfigs (#367) (2220272)
• trigger eks nightly when related files are updated (#366) (6d6e4e0)

0.20.0 (2024-04-20)

Features

• add keycloak sso realm values (#352) (74436ea)
• add saml and attribute/mapper support for keycloak in uds pepr operator (#328) (c53d4ee)
• enable sso for neuvector (#351) (597353e)
• keycloak PVC customization (#341) (f8eae2a)

Bug Fixes

• add nightly uds-bundle.yaml to release-please extras for updates (#346) (d1b3071)

Miscellaneous

• deps: update grafana (#339) (52e6c1b)
• deps: update neuvector (#333) (010e287)
• deps: update pepr (#340) (e71ba4a)
• deps: update prometheus-stack (#301) (143eca3)
• deps: update to keycloak 24 (#336) (1153ba0)
• deps: update uds-identity-config to 0.4.1 (#355) (8485931)

0.19.0 (2024-04-12)

Features

• add nightly testing eks (#250) (543b09d)

Bug Fixes

• drop path normalization to MERGE_SLASHES to allow apps to handle encoded slashes (#330) (26e965f)
• loki bucket configuration service_account and namespace (#332) (9518634)

Miscellaneous

• deps: update grafana (#257) (c98e566)
• deps: update metrics-server (#298) (691fd87)
• deps: update pepr (#324) (2ef0f96)
• deps: update pepr to v0.28.7 (#321) (e7206bb)
• deps: update promtail (#74) (6a112b5)
• deps: update zarf to v0.32.6 (#282) (443426d)
• deps: update zarf to v0.33.0 (#325) (f2a2a66)
• update codeowners (#338) (c419574)

0.18.0 (2024-03-29)

Features

• switch loki to simple scalable (#156) (1661b15)

Bug Fixes

• add kubeapi egress for neuvector enforcer (#291) (87fc886)
• pepr ironbank renovate update (#299) (287e40d)
• release workflow k3d image (#316) (e7835e0)
• unwanted exemption deletions (#290) (50b0cd4)

Miscellaneous

• add debug output to release workflow (#285) (5f96865)
• deps: update dependency defenseunicorns/uds-common to v0.3.6 (#261) (1b5398b)
• deps: update githubactions (#242) (1eb2e2c)
• deps: update pepr to v0.28.6 (#300) (86b43e4)
• deps: update prometheus-stack (#190) (f9a605a)
• deps: update uds-k3d to v0.6.0 (#240) (6a26523)
• deps: update velero (#260) (f352008)
• main: release 0.18.0 (#286) (40e6b7b)
• support headless keycloak admin user (#307) (a0e51b6)

0.17.0 (2024-03-22)

Features

• introduce sso secret templating (#276) (e0832ec)

Bug Fixes

• add keycloak to dev bundle and rename (#262) (f9b905c)
• registration robot check form id (#269) (c6419b9)
• sticky sessions for keycloak in ha (#281) (5ccd557)

Miscellaneous

• align mutation annotations (#268) (f18ad4d)
• deps: update loki (#209) (03ca499)
• deps: update pepr to v0.28.6 (#254) (54ef7de)
• deps: update zarf to v0.32.5 (#243) (ee93612)
• typo fix in README.md (#280) (f9727e0)

0.16.1 (2024-03-16)

Bug Fixes

• arm64 packages / bundles creation (#264) (425fa18)

0.16.0 (2024-03-15)

Features

• add velero package (#210) (a272945)
• operator: add events and improve lifecycle ops (#245) (502c044)

Bug Fixes

• ocsp lookup egress policy (#255) (77c38f2)

Miscellaneous

• add flavor to pepr build task (#238) (29bf8a3)
• deps: update grafana (#144) (6987927)
• deps: update neuvector (#73) (50f6c90)
• test artifacts before publish (#198) (9732f32)

0.15.1 (2024-03-11)

Bug Fixes

• keycloak: only use PVC for devMode (#241) (a6e6023)

Miscellaneous

• annotate mutations in policies (#236) (cc9db50)
• deps: update zarf to v0.32.4 (#203) (05c903e)

0.15.0 (2024-03-07)

Features

• add policy exemptions (#165) (196df88)

Miscellaneous

• deps: update dependency defenseunicorns/uds-common to v0.2.2 (#232) (083ae0c)
• deps: update githubactions to de90cc6 (#215) (f79eed0)

0.14.5 (2024-03-06)

Bug Fixes

• valueFrom in KeyCloak statefulset.yaml (#229) (189a5ce)

0.14.4 (2024-03-05)

Bug Fixes

• remove spec from secret yaml (#226) (e4b5848)

0.14.3 (2024-03-05)

Bug Fixes

• keycloak: add missing postgres host and port secret keys (#224) (0c4d775)

0.14.2 (2024-03-04)

Bug Fixes

• basic validations for packages (#208) (9eba3af)
• keycloak volume permissions, UI update (#223) (4454d3e)
• kubeapi netpol generation now also includes the ip from the kubernetes service (#219) (0a83d02)

Miscellaneous

• deps: update uds to v0.9.2 (#200) (e4b54fe)
• deps: update uds-k3d to v0.5.0 (#186) (164bf5f)

0.14.1 (2024-03-04)

Bug Fixes

• hotfix for publishing workflows (#217) (5fefa01)

0.14.0 (2024-03-04)

Features

• add keycloak (#147) (f99d3d5)

Miscellaneous

• deps: update dependency defenseunicorns/uds-common to v0.2.1 (#205) (1b01407)
• deps: update githubactions to v19 (#204) (d65acd4)
• deps: update loki to v5.43.3 (#199) (40f1554)
• deps: update metrics-server (#123) (fb25a97)

0.13.1 (2024-02-21)

Bug Fixes

• revert "chore: support deselection of metrics-server" (#196) (25a408d)

0.13.0 (2024-02-20)

Features

• add authservice to uds-core (#153) (b0b33b9)

Bug Fixes

• validating/mutating webhook networkpolicies and mtls (#192) (b01e629)

Miscellaneous

• add security.md (#189) (bf7c1d2)
• deps: update githubactions (#179) (7797e25)
• deps: update githubactions to ebc4d7e (#183) (77357e7)
• deps: update githubactions to v3 (#181) (70c5ddf)
• deps: update istio to v1.20.3 (#163) (e45de0e)
• deps: update loki to v5.43.0 (#180) (bab5f7a)
• deps: update loki to v5.43.1 (#182) (6cc5fc7)
• deps: update loki to v5.43.2 (#191) (0ec0cd4)
• deps: update pepr to v0.25.0 (#164) (e7b8212)
• deps: update uds to v0.9.0 (#173) (b91a90d)
• deps: update zarf to v0.32.3 (#155) (2f0a1a7)
• support deselection of metrics-server (#193) (289a0fe)

0.12.0 (2024-02-09)

Features

• introduce advancedHTTP for expose field & change podLabels to selector (#154) (1079267)

Miscellaneous

• deps: pin dependencies (#79) (bfab11e)
• remove retry-action action on registry1 docker login (#160) (eea0c93)

0.11.1 (2024-02-08)

Bug Fixes

• non-vendored zarf command refs (#157) (fe183a9)

0.11.0 (2024-02-07)

Features

• added initial oscal files (#145) (9600d5f)

Bug Fixes

• network policy to allow metrics-server ingress (#148) (f1d434a)

Miscellaneous

• deps: update grafana to v7.2.5 (#136) (a271270)
• deps: update grafana to v7.3.0 (#142) (5e960c0)
• deps: update loki (#131) (61250b0)
• deps: update pepr to v0.24.1 (#134) (6474a1c)
• deps: update prometheus-stack (#128) (625622a)
• deps: update uds to v0.8.1 (#141) (fa79065)
• deps: update zarf to v0.32.2 (#133) (91502c6)
• readme updates & use UDS CLI for zarf (#137) (21de0ce)
• renovate updates (#140) (b71a013)

0.10.0 (2024-01-26)

Features

• add Istio VirtualService Requestmatch to UDS Operator (#129) (a207197)

Miscellaneous

• deps: update grafana to v10.3.1 (#132) (09e028c)
• deps: update istio to v1.20.2 (#75) (671f977)

0.9.2 (2024-01-24)

Miscellaneous

• deps: update grafana (#80) (ccb2c12)
• deps: update loki (#72) (98134bb)
• deps: update pepr (#116) (bfa7352)
• deps: update prometheus-stack (#81) (19bedb6)
• deps: update uds to v0.6.2 (#107) (7b7220e)
• deps: update uds-k3d to v0.3.1 (#89) (5d54cd1)
• refactor ci for releases to remove certain artifacts (#125) (c08a062)

0.9.1 (2024-01-22)

Bug Fixes

• update missing flavor create inputs in publish step (#118) (a0233eb)

0.9.0 (2024-01-21)

Features

• add Zarf Flavors to support Iron Bank & upstream images (#63) (232c256)

0.8.1 (2024-01-18)

Bug Fixes

• remove loki gateway anti-affinity (#111) (2cba42e)

0.8.0 (2024-01-16)

Features

• add UDS Operator and consolidate UDS Policies (#66) (395c1c4)

Miscellaneous

• adding unit test for registerExemptions() (#105) (5e71fcf)
• deps: update pepr to v0.22.2 (#104) (0555353)

0.7.4 (2024-01-13)

Bug Fixes

• change pepr error policy to reject (#99) (10772e2)

Miscellaneous

• deps: update pepr to v0.22.0 (#102) (941902d)

0.7.3 (2024-01-11)

Bug Fixes

• add test for disallow selinux options and handle checking for us… (#96) (88b969e)

Miscellaneous

• deps: update uds to v0.5.3, zarf to v0.32.1, and uds-k3d to 0.3.0 (#77) (596f9d8)
• open the aperture for pr workflow triggering (#90) (d8a72f2)
• simplify promtail values for scrape configs (#94) (6c2513b)

0.7.2 (2024-01-09)

Bug Fixes

• wait on istio proxies (#87) (51cd5a0)

Miscellaneous

• kick off ci (1afc3a4)

0.7.1 (2024-01-08)

Bug Fixes

• loki local storage (#84) (b9505bb)

Miscellaneous

• deps: update pepr (#76) (50de920)

0.7.0 (2024-01-05)

Features

• update security policy to use provided user, group, and fsgroup (#82) (6d641ce)

Miscellaneous

• initial renovate config (#67) (2cd19d8)

0.6.2 (2023-12-11)

Miscellaneous

• add minio deploy time bundle variable override definitions (#58) (ca28e7b)
• refactor validate.yaml file name and task name (#62) (92a04ea)

0.6.1 (2023-12-07)

Bug Fixes

• resolve istio job termination container status logic issue (#55) (c0142c2)

0.6.0 (2023-12-05)

Features

• introduce Pepr common policies (#50) (54182b4)

Miscellaneous

• conform to latest uds bundle schema (#52) (14dad38)

0.5.0 (2023-11-19)

Features

• expose tls certs as UDS bundle variables (#48) (c1f8286)

0.4.1 (2023-11-17)

Bug Fixes

• metrics-server mTLS fix (#44) (4853522)

Miscellaneous

• dep updates for UDS CLI & Pepr (#46) (1037634)

0.4.0 (2023-11-16)

Features

• add monitoring and logging (#33) (c6d9aec)

0.3.0 (2023-11-15)

Features

• add metrics-server (#35) (8216ab9)

0.2.0 (2023-11-13)

Features

• add pepr capability for istio + jobs (#12) (c32a703)
• embed tls certs in istio package (#32) (fb04fee)

0.1.3 (2023-11-10)

Miscellaneous

• bump zarf & uds-k3d deps (#30) (dd28ab3)

0.1.2 (2023-11-09)

Miscellaneous

• fix missing deps in tag and release workflow (#28) (1e1af76)

0.1.1 (2023-11-09)

Features

• Add istio and preliminary ci (#3) (fbd7453)
• add prometheus-stack (monitoring) capability (#2) (e438ab6)
• release-please integration (#25) (bf3c53b)

Bug Fixes

• complete incomplete deploy task (#21) (45ff5e5)

Miscellaneous

• add commit lint workflow (#19) (776a632)
• remove version from neuvector zarf.yaml (#11) (fbc8d51)
• update release please extra-files to be explicit (#26) (23f4999)

[0.0.0] - YYYY-MM-DD

PRE RELEASE

Added

• Initial CHANGELOG.md
• CODEOWNERS
• CONTRIBUTING.md
• DEVELOPMENT_MAINTENANCE.md
• LICENSE
• READEME.md
• zarf.yaml