v0.11.0-alpha.0

Changelog

• 95dbac2 Merge pull request #2777 from kcp-dev/dependabot/go_modules/cmd/apigen/github.com/emicklei/go-restful-2.16.0incompatible
• 2adeb0c Bump github.com/emicklei/go-restful in /cmd/apigen
• 880576a Merge pull request #2624 from qiujian16/fix-synctarget-enqueue
• ee81cfe Merge pull request #2423 from lionelvillard/dns-network-policies
• 2a1c00a Merge pull request #2716 from hardys/rm_manifests
• 5ebd7bf Merge pull request #2767 from davidfestal/fix-syncer-vw-flakes
• 656ad4d changes after review
• 81870cb fix unit test
• 1e47c2b create kubernetes endpoint in fake cluster.
• fc683ba better error message
• b8c2617 reenable test against fake cluster
• 5d0246d check tenantid is set and correct (when upgrading kcp)
• 6016ada add tenant-id label and use it in network policies
• 8a824eb cluster test requires kind
• 4f500f8 add e2e test
• 5d7672c add networkpolicies in the fake pcluster
• e562310 fix unit test
• df2c102 Adding dns network policies - Part 1
• 2244d9a Merge pull request #2766 from jmprusi/jmprusi/fix-verbose-log-podsubresourcehandler
• 561880e Merge pull request #2769 from ncdc/fix-prow-git-issue
• bc5deb3 Fix git in Prow
• d687963 tmc e2e: use framework.Eventually...
• 55dc271 tmc e2e: put the sink worksace on the root shard
• 22d6d78 pkg/tunneler: remove non-error verbose log
• b9f1494 Merge pull request #2747 from s-urbaniak/proxy-healthz-livez
• 25f906c Merge pull request #2765 from davidfestal/fix-flake-2762
• acb6f3d Fix flake #2762
• 09cbd2f Merge pull request #2760 from wangke19/fix-without-requirement-not-quit
• 5b3b404 Merge pull request #2761 from jmprusi/jmprusi/fix-test-nokind
• 2dcb532 test/e2e/scheduling: don't require kind for upsynced test
• 87f44d4 Merge pull request #2513 from fgiloux/partitionset-reconciliation
• aeabc6e Fix make install doesn't exit without requirement tools
• d63ce02 Add logic for PartitionSet reconciliation
• 1235ac4 Merge pull request #2755 from fgiloux/slice-e2e
• c48c567 Merge pull request #2533 from jmprusi/jmprusi/upsync-scheduling-fix
• 3e7ec62 test/e2e/framework: don't fail tests if synctarget is gone
• c6b6154 workload/resource: handle upsynced resources
• 74e06bb Merge pull request #2730 from davidfestal/split-SyncerFixture
• 3df11d7 Fix a possible flake where the referenced APIExport may not be available on the cache server before the APIExportEndpointSlice is created.
• 77af933 Rename as requested in review
• 17a6ba8 Fix review last comments
• 0da8dad Remove unnecessary private function
• 8f125fe e2e: Separate SyncerFixture.CreateAndStart()...
• 6dae242 Fixes after PR review comments
• a1476bf tmc e2e : Split SyncerFixture...
• 3a58b1c Merge pull request #2417 from jmprusi/2415-when-the-kcpsyncertunnel-feature-gate-is-enabled-pods-should-be-added-to-the-compute-workspaces-automatically
• e50fa57 Merge pull request #2753 from fabriziopandini/small-improvements-to-dev-workflow
• a43bada add support for specifying KIND_CLUSTER_NAME make when running build-kind-images
• cc878df Merge pull request #2752 from hasheddan/fix-docs-publish
• e1c09ef Fix frontmatter on replicating new resource doc
• da4d3ae Merge pull request #2731 from hasheddan/no-ws-get
• e20bc8f pkg/virtual/syncer: don't expose Pods or endpoints via syncer vw
• 85965fe test/e2e/syncer: remove non-needed clusterrole from test
• e69da7e cliplugin/sync: append pod subresources
• eb61c60 test/e2e/syncer: ensure pods cannot be created outside upsyncer
• 238fdc6 Merge pull request #2722 from MikeSpreitzer/describe-bind
• 248fd6f Drop non-existent workspace get command from help output
• 9954055 Merge pull request #2749 from kasturinarra/fix_doc
• c29c35b Fix unknown flag --apiexport
• b48ab6a add few gitignore patterns
• 1fe028e /pkg/proxy/server: handle /readyz and /livez outside of the auth chain
• 278060d Merge pull request #2725 from p0lyn0mial/document-replicating-new-type
• e4613df Merge pull request #2746 from p0lyn0mial/sharded-test-server-reuse-certs
• ce35514 cmd/sharded-test-server: Reuse Certificates instead of generating new ones
• ca871c1 Merge pull request #2745 from ncdc/deflake-replication-disruptive-tests
• ba4a15b Use a private kcp per disruptive replication test
• 26d200c Merge pull request #2734 from ncdc/add-download-prow-logs-script
• f18044f Merge pull request #2728 from hardys/dockerfiles
• 103b4fd Merge pull request #2733 from ncdc/vw-enable-audit
• 752666a Merge pull request #2736 from ncdc/fix-sentinel
• 35073e6 Merge pull request #2735 from ncdc/deflake-apiexport-vw-test
• c7a62d7 Deflake test/e2e/reconciler/apiexportendpointslice
• 0bb6642 More APIExport VW e2e deflaking
• c3fbb9c test/e2e/tunnels: use root:compute:kubernetes apiexport
• 7d7777e kube124: Adds PODs to the kubernetes apiexport
• a398c33 Add make target to download e2e logs from Prow
• 998b73b Merge pull request #2703 from stevekuznetsov/skuznets/eventually-condition
• 0395579 Fix ready-to-test location
• 1f3b590 fix imports
• adabd8e test/e2e/quota: don't assume an error exists
• 1e4d2dd apiexport: improve test error message
• 95c8280 test/e2e: DRY up waiting on conditions
• f00df0a Enable virtual workspace server audit logging
• 2113c9a Merge pull request #2707 from ncdc/fix-e2e-kcp-servers
• 0b403cb apiexportendpointslice: use framework.Eventually
• bc8fb6a Fix TestAPIExportAuthorizers flake
• 8db9070 Fix TestAPIExportAuthorizers flake.
• 3092dfc Use sentinel file for e2e readiness
• 1cfbe44 e2e: support terminating "go run kcp start"
• a9c50f4 e2e: all server types wait for readiness
• d77370e Clean up home workspaces
• 57e9339 Merge pull request #2719 from hasheddan/use-ws-name-tree
• e79d1e0 Merge pull request #2695 from s-urbaniak/fix-wrong-bind
• e850191 Merge pull request #2712 from hardys/makefile_fix
• 7d55514 Merge pull request #2688 from ncdc/deflake-quota
• ebce7c8 Dockerfile: remove SHELL for OCI compliance
• c40e9aa Fix typo in --full flag help
• 055a328 Show workspace name in kubectl kcp ws tree
• 669dd8d Merge pull request #2717 from ncdc/doc-gen
• 7035800 pkg/virtual/apiexport: impersonate requests
• 68175dd Merge pull request #2724 from fgiloux/codegen
• b1da6c0 document how to add a new resource for replication
• 780bc64 Schemas changes missing due to issue in codegen script
• 8941a0d manifest: remove outdated manifests
• a40856e Makefile: add clean-workdir target
• 867f13e Makefile: fix clean target
• b085a04 Fix typo breaking codegen: crds not stored at the right location
• 0f1d809 Brush up TMC quickstart
• 53fdaf5 Merge pull request #2720 from ncdc/fix-apiexport-vw-queue-gap
• c359931 Fix gap in APIExport virtual workspace queues
• 4b5d5dc Trying to fix docs
• 6124312 Merge pull request #2673 from avinal/avinal/fix-docs-versioning
• 258292a Merge pull request #2708 from pdettori/update-docs
• 2ed4948 .github/community_meeting.yaml: add links to issues
• c3ca137 document kcp bind commmand to allow to sync deployment in quickstart
• 163da25 Merge pull request #2705 from ncdc/gather-metrics-at-end-of-tests
• d5374d5 tests: gather metrics
• 91a2061 Merge pull request #2704 from kcp-dev/dependabot/github_actions/actions/cache-3.2.4
• c0207ef build(deps): bump actions/cache from 3.2.3 to 3.2.4
• 22d06c1 Merge pull request #2608 from fgiloux/slice-e2e
• f53db78 Merge pull request #2401 from jmprusi/jmprusi/syncer-tunnels-pod-logs
• da4b8d7 Merge pull request #2596 from sttts/sttts-random-workspace-scheduling
• 8f04da8 make update-contextual-logging
• 63c32b0 e2e/virtual/apiexport: fix for multi-shard
• 5aa4278 e2e/virtual/initializingworkspaces: adapt TestInitializingWorkspacesVirtualWorkspaceAccess to multi shard
• f2b7e8f e2e/framework: WorkspaceShard helper
• ab51453 e2e/authorizer: fix TestAuthorizer
• 6fb281a e2e/virtual/syncer: add TODO_WithoutMultiShardSupport()
• e5b7fe8 e2e/framework: fix NewPrivilegedOrganizationFixture cross-shard
• b569732 e2e/authorizer: fix priming race
• 3268428 e2e: unify subtests to be compatible with Goland
• 3bdf22c reconciler/tenancy/repliatelogicalcluster: fix logic typo
• e0cf0fc cmd: seed random number generator
• 1da2755 e2e/apibindings: fix TestAPIBindingPermissionClaimsConditions
• 7b5e5cc cache: replicate ClusterRoleBinding pointing to system:admin ClusterRole
• 641ac0d reconciler/tenancy: replicate LogicalClusters for WorkspaceType
• b68b3db reconciler/cache/labellogicalcluster: fix comments and log messages
• e27c70a e2e/apibindings: in TestAPIBinding fix virtual workspace testing
• 20fa070 authorization: wire global informers into requiredgroups and workspace content
• cbea43c reconciler/replicateclusterrole: replicate ClusterRoles for workspacetypes with "initialize" verb
• 56ad664 reconciler/tenancy/workspacetype: rename clusterworkspacetype to workspacetype
• d1e28e2 reconciler/workspacetype_controller: assing shard.spec.VirtualWorkspaceURL not shard.spec.externalURL
• 0ad0911 cache: wire cache client and cache informers into virtual workspaces
• 6638bb8 cache: replicate rbac logicalcluster access objects only when LogicalCluster is replicated
• f3b65e6 cache: replicate LogicalClusters for APIExport workspace and relevant rbac objects
• eb8ceb0 Fix e2e compliance TestValidatingWebhooInWorkspace
• 4cb260f e2e/apibindings: count * lists across all shards
• 47f4980 e2e: kubeconfig for any shard
• de14bc3 Makefile correctly pass SHARDS variable to test-e2e-sharded-minimal target
• 86bc8aa apis/tenancy/workspaces: add region label column
• c9b50c3 admission/webhooks: wire global webhook configurations
• a898194 cache: replicate admission webhooks
• 24925e2 reconciler/tenancy: add replicate controller for workspacetypes
• 31bca0f reconciler/cache: generalize label controllers
• 4731a79 reconciler/apis/replication: unification and plumbing cleanup
• cb85dae admission/apibinding: wire cached informer
• 3683693 reconciler/apis/replication: some more logging
• c2ca9cf e2e: print workspace shards
• a242969 reconciler/apis/replication: consider ClusterRoles from system:admin
• 312c223 reconciler/apis/replication: support * in ClusterRules
• ebbc235 e2e: unify how APIBindings are created
• 009d5ea cache: replicate synctargets and placements
• 0427f25 reconciler/cache/reconciler: ignore system:* clusters
• 6176eb4 Makefile: add SHARDS parameter defaulting to 2
• c2aebae e2e/reconciler: rename clusterworkspaceshards -> shards
• 8a03f73 apis/tenancy: fix json tag for workspace.spec.location
• bb74e2b e2e/authorizer: remove misplaced t.Helper() call
• 0f8b26d workloads: schedule root:compute to root to make bootstrapping work
• daaf2d3 reconciler/workspace: schedule to random shard
• 3799080 Merge pull request #2701 from ncdc/bump-k8s
• 9bbcb44 Bump k8s: log unstructured in reflector correctly
• 583d1c8 Merge pull request #2698 from stevekuznetsov/skuznets/add-logging
• 922f265 reconcilers/workspace: add logging to outgoing client calls
• 0944f91 Merge pull request #2690 from nrb/fix-apiexport-404
• 7d8e616 Merge pull request #2694 from stevekuznetsov/skuznets/e2e-data-race
• 3689050 Add end-to-end tests for APIExportEndpointSlice
• 65210a5 test/e2e: remove a data race
• 927a1b6 Merge pull request #2684 from ncdc/deflake-syncer-unit
• b2a592d Do not look up APIExports in the generic webhook
• b3f3bf8 Merge pull request #2683 from stevekuznetsov/skuznets/update-listers
• 62f5f11 Deflake quota e2e
• 3653910 *: update listers to have correct NotFound messages
• 1e6a986 Deflake TestSpecSyncerProcess
• 9c4e0f6 Merge pull request #2680 from hasheddan/status-phase
• 03c6a96 Use status.phase as printer column on workspaces and logical clusters
• 82e6c75 Merge pull request #2678 from s-urbaniak/sar-audit
• 96cfff9 Merge pull request #2661 from csams/logicalcluster-deletion-controller-committer
• 8d7c2c9 Merge pull request #2677 from ncdc/fix-standalone-vw-1-minute-watch-timeout
• 56f6ad8 pkg/authorization: enable audit logging for SAR requests
• 4c4e687 Avoid exposing the tunneler proxy endpoint
• 567778c cliplugins/sync: add connect subresource permissions on creation
• 3e6248a make update-contextual-logging
• ccfc743 tunneler: change syncer-tunnels paths
• c1e0052 tunneler: migrate to structured logging
• 502e587 tunneler: Export DefaultTunnelPathPrefix const
• b8efc9f Server: Register WithPodSubresourceProxying handler
• 20133ed tunneler: Helper function to build the proxy path
• b5f1035 Upsync VW: Allow Pods to be upsynced
• 963ffde Add a kcp RequestInfoResolver
• 5f7767f fix docs versioning and permissions for gh-pages
• ab2757a Merge pull request #2667 from hardys/vw_fix
• 786ebb8 Merge pull request #2640 from s-urbaniak/e2e-client-certs
• 23cad0f Merge pull request #2674 from csams/clusterworkspacetype-controller-committer
• aec7a5d clusterworkspacetype_controller uses committer.
• 47037eb test/e2e: add support for dynamic users using client certs
• cb8dd3c Merge pull request #2669 from ncdc/apigen-go-mod
• d95b92e Move cmd/apigen to its own go mod
• 69462e7 Move go mod tidying/verification to hack scripts
• 4fcafc2 Merge pull request #2670 from hasheddan/rem-parens
• 3a1f639 Remove trailing parentheses in ASCII diagram link
• 171f297 Merge pull request #2637 from nrb/fix-2622
• 82bebb1 server: revert non-standalone VW URL
• 5e7b399 squash: variable name
• 7b3126c Merge pull request #2660 from p0lyn0mial/controllers_global_inf_for_shards
• 01d4f40 controller: use the gloabl informer to get Shards
• b0d1d8c Merge pull request #2651 from p0lyn0mial/e2e-reconciler-scheduling-tmc-multi-shard
• 26bb6a4 e2e/syncer/dns: temporarily schedule all workspaces on the root shard
• 5f4558a e2e/reconciler/deployment: temporarily schedule all workspaces on the root shard
• d9efd26 Merge pull request #2659 from hardys/2407_validation_fix
• 6024419 e2e/syncer: temporarily schedule all workspaces on the root shard
• 403e498 e2e/reconciler/namespace: temporarily schedule all workspaces on the root shard
• 600dbc1 e2e/reconciler/locationworkspace: temporarily schedule all workspaces on the root shard
• 493fc56 e2e/reconciler/cluster: temporarily schedule all workspaces on the root shard
• e749473 e2e/framework: add TODO_WithoutMultiShardSupport() option for workspaces
• 819d314 e2e/reconciler/scheduling: temporarily schedule all workspaces on the root shard
• a745b41 Use function instead of lister for APIBindings
• 6a2b899 logicalcluster_deletion_controller uses committer
• 5e4c0b7 server: relax ShardVirtualWorkspace flag validation
• 3816204 Merge pull request #2653 from csams/bootstrap-controller-committer
• 338eae6 Look up APIExports directly against the lister
• 451e28c Merge pull request #2567 from kcp-dev/dependabot/github_actions/actions/cache-3.2.3
• 055931c Merge pull request #2531 from kcp-dev/dependabot/github_actions/uraimo/run-on-arch-action-2.5.0
• 43b6fc2 Merge pull request #2407 from hardys/shard-standalone-vw2
• 5470482 bootstrap_controller uses committer.
• c9815e3 Merge pull request #2648 from csams/placement-controller-committer
• 4506fdc Merge pull request #2644 from ncdc/fix-conversion-flake
• 893c3d3 Merge pull request #2641 from p0lyn0mial/apiexport-wire-global-informer
• 7a1c433 Merge pull request #2639 from p0lyn0mial/e2e-workspace-fix-for-multishard
• 998a78b Merge pull request #2632 from p0lyn0mial/e2e-watchcache-fix-for-multishard
• b32ddf0 sharded-test-server: add virtualWorkspacePort
• 4981b46 sharded-test-server: refactor vw to start/wait
• 6037c7a sharded-test-server: wait for vw readiness
• 6efd47f e2e-sharded enable standalone vw
• b331d9a sharded-test-server: support standalone vw
• 7fab357 cmd/virtual-workspaces: create client for shard
• a016b67 server: support standalone vw
• 4c3fcbb Merge pull request #2645 from s-urbaniak/fix-apibindig-reconcile
• cbe5a53 pkg/reconciler/apis/apibinding: return error in case of conflicts
• e8d30d1 placement_controller uses committer
• 52a574c Merge pull request #2646 from ncdc/func-ptrs/extraannotationsync
• 0af0c70 extraannotationsync: use function pointers
• 274f099 Merge pull request #2628 from s-urbaniak/issue-2627
• 457fd7d Merge pull request #2638 from csams/location-controller-committer
• 8520126 e2e/conversion: wrap create in eventually
• 4ec26db pkg/server: ensure that home workspace handler gets authz with audit logging
• b82703a e2e/reconciler/workspace: use cluster client
• 6bb6249 reconciler/apiexport: use the gloabl informer to get Shards
• cad7ebd location_controller uses committer
• c07cb92 Merge pull request #2636 from csams/permissionclaimlabel-committer
• ab9fac4 Use APIExport cluster names within webhooks
• 59b391a permissionclaimlabel_controller uses committer
• 82e6296 e2e/watchcache: use cluster client for creating content in a workspace
• 8927e9d Merge pull request #2629 from fgiloux/admission-cleanup
• 33064b5 Merge pull request #2620 from p0lyn0mial/run-replication-tests-on-shared-instance
• 97b7b0c Enqueue location upon synctarget update
• 80bc834 Merge pull request #2611 from s-urbaniak/self-contained-e2e
• 733bcf1 Removing WorkspaceTypes indexers that are not used
• 7c67ee2 Removing apiExportLister as it is not used
• eb96d8b sharded-test-server: write kcp-admin kubeconfig after shards are ready
• 7702dde provide createCacheClientConfigForEnvironment
• ecd0217 framework: expose LoadKubeConfig
• 57c6da1 remove TestCacheServerStandalone
• f74a2a8 move disruptive scenarios to its own list
• 2e8d83d use random resources name so that the tests can be run multiple times
• 1a13512 run replication tests on a shared kcp instance
• 472bc77 test/e2e/virtual/apiexport: make authorizer test self-contained
• 9358474 Merge pull request #2105 from ncdc/cel-conversion
• 301f064 Add APIConversion support
• 4fc4997 Update k8s for CR conversion support
• 41bcbca bump-k8s.sh: update kube branch
• 150ade7 Merge pull request #2618 from qiujian16/fix-bind
• 8a4642b Add bind permission for kubernetes apiexport
• f9a3cd8 Merge pull request #2560 from fgiloux/slice-permissions
• 32503be Merge pull request #2431 from lionelvillard/kind-calico
• 372d5d3 Merge pull request #2605 from vincepri/enable-mutation-detector
• cc0f756 Enable KUBE_CACHE_MUTATION_DETECTOR in e2e tests
• 2fe22b6 Merge pull request #2604 from vincepri/rbac-rules-roles-merging
• a044d76 🐛 Role and ClusterRole merger should not modify cache objects
• ca7e1c5 Merge pull request #2610 from hardys/private_scratchdirs
• 187ac04 Revert "reconciler/cache: switch to safer json.Marshal+Unmarshal"
• cab2d59 e2e: TestAuditLogs remove duplicate audit-log-path
• 0a230b9 Admission for APIExportEndpointSlice, check for bind authorization against the referenced APIExport.
• 31c76aa Merge pull request #2609 from sttts/sttts-replication-controller-rewrite
• aba9890 Merge pull request #2606 from qiujian16/index-fix
• 1a046b6 reconciler/cache/reconciler: simplify and generalize
• 929f7a6 Merge pull request #2469 from fgiloux/partition-reconciliation
• fb014bc Merge pull request #2592 from p0lyn0mial/cache-crdlister-stop-the-bleeding
• d224162 Amend apiexportendpointslice reconciliation to filter endpoints by partition
• ea32ecd Merge pull request #2591 from hardys/e2e_empty_audit
• b21a9a6 IndexByLogicalClusterPathAndName should return clusterpath and name
• e5ce29a Merge pull request #2595 from stevekuznetsov/skuznets/remove-tenancy-v1beta1
• 444abcc *: remove tenancy.kcp.io/v1beta1
• e3340e2 *: use tenancyv1alpha1.Workspace
• 9942bb0 pkg/apis: add Workspace to tenancy.kcp.io/v1alpha1
• b56311f Merge pull request #2600 from ncdc/fix-logger
• 5d77df7 Merge pull request #2477 from vincepri/caching-authorizer
• 844b2ce Merge pull request #2602 from sttts/sttts-statusless-committer-equal
• 4c8fd05 committer: fix equality check in statusless committer
• 8d9f71c Merge pull request #2594 from sttts/sttts-cache-nil
• c90dbc5 Merge pull request #2599 from ncdc/bump-pr-verifier
• 0831b69 reconciler/cache: switch to safer json.Marshal+Unmarshal
• b28764a Log each gvr by itself instead of accumulating
• 9def014 Stop checking PR descriptions in CI
• f7fa645 lint: disable broken thelper
• b34d3a4 reconciler/cache: clean up test
• cde13bc reconciler/cache: fix deletion of gone objects with replicate false
• 79639e1 reconciler/cache: remove nil equality reflection
• c1ef69c 🌱 Use caching authorizers per-workspace
• d9ea7a6 PrivateKcpServer: enable audit-policy
• 8568db4 Merge pull request #2586 from sttts/sttts-e2e-workspace-fixture
• 9c49cc8 tunneler: type clusterName
• 8e97f3d server: remove clusterworkspace references
• 37113bf reconciler/workspace: fix nil pointer exception
• f8acae0 reconciler/apibinding: prettier conflict message
• 74960b4 cli/bind/compute: identify empty path, cluster name and canonical path
• c35142b reconciler/workload: fix path references to location workspaces
• 63d22a1 e2e/framework: print logical cluster on workspace create
• cec6432 e2e: adapt tests
• af8705f cache: stop reporting an error from a CRD lister on incorrect cluster name
• ca40e16 Merge pull request #2562 from sttts/sttts-global-authz
• 82b52e5 cmd/apigen: don't create rbacv1 schemas and export
• 8a25737 Address review comments
• 0ce4728 reconciler/committer: add commit for status-less resources like ClusterRoles
• a215912 Make 'make lint' happy
• 52e5255 Makefile: add clean target
• 8b5d4e4 apis/core: replace replication label with internal.kcp.io/replicate annotation in core
• 696c662 reconciler/workspace/scheduler: wire global APIExports
• d8480e0 admission/webhooks: wire global APIExports
• 2186776 admission/permissionclaims: wire global APIExports
• 6ff714e cli: remove hack to hide 404 on workspaces
• 1630637 admission/workspacetypeexists: wire global workspace types
• c787e9a admission: add global informers to SetKcpInformers
• a5dd0eb cache: create rbac objects as CRDs
• eb7b257 Bump k/k
• f10b47d authorization: wire global informers
• e60f9ad cache: replicate ClusterRoles+ClusterRoleBindings
• ac5eba6 authorization/maxpermissionpolicy: find export in cache server
• 5000d80 FIX: server: wire cache informers instead of root informers
• b9cedbd Merge pull request #2590 from csams/dry-committer
• 95c4b1a Merge pull request #2588 from vincepri/disallow-parent-fix-test
• 50f251e Remove panic cleanup comment
• dada21e e2e/framework: return path and object from workspace fixtures
• 8ad4116 Satisfy the linter
• 5457a13 DRY committer factory functions
• 8d3a51e Merge pull request #2587 from vincepri/update-logcheck-040
• 8fbc046 Update logcheck to 0.4.0
• 9aae0aa Merge pull request #2576 from stevekuznetsov/skuznets/more-logging
• fd9f1b2 WorkspaceType admission should respect LimitAllowParents.None
• 96b7ab3 *: update to some structured, contextual logging
• 4b36a83 Merge pull request #2452 from davidfestal/refactor-syncer-resource-controller
• 3de7ac8 Fix wrong informer use
• d82daf7 Merge pull request #2578 from p0lyn0mial/replication-e2e-workspace-type
• 6a0e24d Merge pull request #2580 from sttts/sttts-core-crd-ref
• fd6cb5f Merge pull request #2577 from vincepri/fix-contextual-logging-diff
• 7db7403 replication tests: document replicateResource and replicateResourceNegative
• a22427d Fix PR comments
• 7f76f5e Syncer: add endpoints controller as an example...
• 104dc47 Syncer: Wire the Upsyncer ddsif
• 8e1fe9c Syncer: add controller manager
• c5a4b0f Syncer: separate resource controller and informers
• e2d3a45 Merge pull request #2570 from davidfestal/add-upsyncer-url-in-synctarget
• 65fed5c crd-ref: update for core group
• b362972 replication test: cover replication of WorkspaceType resources
• 20567c0 replication tests: introduce generic functions for replication and make test scenarios use them
• c364882 replication tests: use dynamic client
• 1ef7117 verify-contextual-logging should diff from old to new
• c105220 Merge pull request #2569 from vincepri/rename-clusterws
• c7f0e68 Rename ClusterWorkspace
• 5dcdd3e Merge pull request #2575 from ncdc/strongly-typed-enqueues/apiexport
• a9964de Merge pull request #2542 from lionelvillard/dns-e2e-tests
• ffbf976 Merge pull request #2574 from ncdc/strongly-typed-enqueues/vw-apiexport
• 8e1e609 Synctarget: Have URLs for both syncer and upsyncer
• 1f75c0f Merge pull request #2573 from ncdc/strongly-typed-enqueues/crdcleanup
• 1370853 apiexport: strongly type enqueue params
• 8dfade1 vw/apiexport: strongly type enqueue params
• 2b25d26 crdcleanup: strongly type enqueue params
• 16e5542 Merge pull request #2543 from stevekuznetsov/skuznets/rename-this
• e1320de test/e2e: create privileged workspaces as shard admin
• bc2399d test/e2e: improve end-to-end authorizer tests
• ea4dd9d *: removce tenancyv1alpha1.ClusterWorkspace types
• d67c63c *: remove ClusterWorkspace projection
• 16a9ade teat/e2e: fixup a workspace location literal
• 35b2267 *: automated refactor v1alpha1.ClusterWorkspace -> v1beta1.Workspace
• 1a87489 pkg/apis: use tenancyv1alpha1.WorkspaceTypeReference
• a133b77 test/e2e: update workspace options to use label selector
• c29037c Bump actions/cache from 3.0.11 to 3.2.3
• 54e4bfd Merge pull request #2561 from s-urbaniak/index-controller-rename
• 8559651 Merge pull request #2565 from p0lyn0mial/index-unit-test
• c591547 Merge pull request #2559 from sttts/sttts-remote-to-cache
• 89f770f index: add missing unit tests
• 031f064 index: remove a workspace regardless of its current phase.
• 600e3bc Merge pull request #2557 from vincepri/status-url-to-spec
• 16dbd76 ⚠️ Move Workspace.Status.{Cluster, URL} to Spec
• 2447ae5 Merge pull request #2564 from ncdc/fix-apiexport-vw-enqueue-from-schema
• dc35132 Fix APIExport virtual workspace API bug
• 53f8368 move and simplify CreateResource
• c3e6cab add e2e DNS tests
• d4870c0 cli: fix workspace type printing
• e789919 cache: replicate WorkspaceTypes
• 7291893 reconcilers: unify global informer variable names
• 583952b reconciler/tenancy/initialization: lookup types and exports in cache
• 752bf5f cli/ws/create: add --location-selector flag
• ec54125 reconciler/workspace/scheduling: simplify chooseShardAndMarkCondition
• 3a90323 virtual/initializingworkspaces: remove remaining ClusterWorkspace dependency
• 59eac22 sharded-test-server: recolor cache output in cyan instead of red
• fe89186 server: wire cache informers instead of root informers
• 63ec182 Merge pull request #2558 from s-urbaniak/cluster-workspace-rename
• 6744cde pkg/proxy/index: rename cluster workspace index
• cfe66ea pkg/virtual/initializingworkspaces/builder: rename cluster workspace
• 513c306 pkg/reconciler/kubequota: rename cluster workspace quota
• b46668a pkg/reconciler/garbagecollector: rename cluster workspace garbage collector
• 4a4eb7f pkg/admission/kubequota: rename cluster workspace deletion monitor
• 031f374 pkg/admission/kubequota: rename cluster workspace client getter
• a7037ee Merge pull request #2556 from vincepri/cel-go-upstream
• 5fa7e94 🌱 Switch cel-go to upstream v0.12.6
• b7c6236 use kind 0.17
• f2b5907 install Calico in kind
• fe31365 Merge pull request #2554 from hardys/shard_local_client
• 0f49416 Merge pull request #2555 from davidfestal/debug-deployment-coordinator-e2e
• d336e53 Merge pull request #2480 from vincepri/update-golanci-lint2
• e5f1ad0 workspace controller: use loopback client for local shard
• a70ae8f Check deployment access in e2e test
• ac0b2c4 Merge pull request #2547 from vincepri/add-path-home-ws
• 84bc33e Merge pull request #2551 from astefanutti/pr-cross-compile-image
• 0e0d1de Fixup linters for tests files (helpers, http, comments)
• 95daf4a Fix noctx
• fe1498d Fix revive:bool-literal-in-expr
• 55a9f59 Fix usestdlibvars
• 692473a Fix use of net.JoinHostPort
• da3cddc Add ReadHeaderTimeout to http.Server
• 0dab397 Fix Implicit memory aliasing in for loop
• 7dfae17 Fix gosec in profiling, test-server
• 1bb513d Fix revive:package-comments
• 308f510 Fix gocritic:sprintfQuotedString
• 7100e4d Fix gocritic:deferInloop
• 4575c98 Fix gocritic unlambda, deferUnlambda
• 9311dae Fix gocritic:captLocal
• a5f7bcf Fix gocritic:indexAlloc
• 3618edb Fix gocritic:newDeref
• bb23b60 Fix gocritic:returnAfterHttpError
• def5728 Fix dupword
• ed1c41c Fix revive fmt.Errorf
• 6937583 Fix bodyclose
• 8cb053a Fix var-declaration
• bc29d21 Fix prealloc
• a830118 Fix revive:if-return
• 0c56a5f Fix errchkjson
• f56f634 Fix revive:receiver-naming rule
• 0454ea6 Run golangci-lint --fix (comments, newlines, etc)
• 4d956d0 Update golangci-lint 1.50.1, add more linters
• c693005 Merge pull request #2535 from p0lyn0mial/path-annotation-ut
• 059512d Merge pull request #2553 from sttts/sttts-workspace-refactor-cleanup
• ca46574 Merge pull request #2432 from fgiloux/slice-reconciliation
• e82f08e cli/bind: allow non-root export paths
• d669863 Address workspace refactor comments
• 12d0473 Add shard filtering, enqueuing APIExportEndpointSlices only when the VirtualWorkspaceURL or labels have changed
• 879c62c Add a second struct to have access to the APIExport informer from the enqueue logic but not from the reconcile one. Remove unnecessary getters.
• f899fbe Rename ClusterWorkspaceShard -> Shard in messages and variable names
• 1848e2e Deactivate server side apply for the cache server only in embedded mode.
• e22a924 Fix spelling in file test/e2e/cache/cache_server_test.go
• 589e9e3 Remove the SSA deactivation introduced for the cache server. This prevents SSA to work with kcp when the cache server is embedded.
• fe14d33 Make the cache server mandatory, either embedded (default) or as a remote server when cache-server-kubeconfig-file is specified
• 3ffe547 First reconciliation of APIExportEndpointSlices, no filtering
• c582036 Merge pull request #2487 from vincepri/add-test-healthz
• 5ebd9a0 Merge pull request #2545 from davidfestal/skip-upsynced-resouces-in-resource-scheduling
• e7d5874 Skip upsynced resources in resource controller
• 287a0f7 ci: Build container image on pull requests
• 618d986 Cross-compile container image binaries from host platform
• c14bdee Merge pull request #2546 from ncdc/apibinding-logging
• 4353c45 Merge pull request #2549 from ncdc/bump-cel-go
• 224fce3 Add path annotation key when creating home workspace
• 4f142b6 cel-go: update to pull in data race fix
• 6f07d58 Merge pull request #2544 from vincepri/kcp-image-workflow-fix
• 5db356a Merge pull request #2540 from lionelvillard/fix-macos-static
• 82504cf pathannotation admission plugin: provide getLogicalCluster function for easier unit testing
• b7565b0 Merge pull request #2440 from davidfestal/more-useful-ddsif
• c129082 pathannotation admission plugin: add missing unit tests
• 9a47d0d Add authorizer test for static endpoints
• 5f544fd Scope APIBinding logger
• 417e8e3 Merge pull request #2541 from kylape/fix-2507
• aba1f58 🐛 Docker build/push should not use a matrix
• 711844b Add buffering in crdGVRSource.Subscribe()...
• bcab255 Increase CRD cleanup requeue delay; remove e2e test
• 60d2231 Add missing CGO_ENABLED flag in install target
• 86ccd29 Fixes for new PR review comments
• c6bea38 Merge pull request #2508 from tsuzu/main
• bf532ce Merge pull request #2524 from stevekuznetsov/skuznets/rename-this
• 3208272 Merge pull request #2536 from p0lyn0mial/kcp-fix-sync-for-optional
• 1ca8aa3 *: use 'logicalCluster' instead of 'this'
• b5eef4f Remove unnecessary contructor
• 4ae782b Fix PR comments
• 06670f2 DDSIF: Make it more generally useful by:
• 574c65e kcp: fix waitForOptionalSync method to wait for a proper signal.
• 326cb5b build(deps): bump uraimo/run-on-arch-action from 2.3.0 to 2.5.0
• fb2af5d Merge pull request #2511 from s-urbaniak/fix-double-audits
• 8263d49 Merge pull request #2528 from vincepri/use-buildx-kcp-image
• 9373996 Use buildx to build KCP images
• 372c93f Merge pull request #2512 from vincepri/distroless-debug
• babb3ee Merge pull request #2522 from stevekuznetsov/skuznets/remove-multi-cluster-round-tripper
• 0758fa8 Merge pull request #2521 from stevekuznetsov/skuznets/rename-thing
• f1fdb95 Add conditions to APIExportEndpointSlice
• 73fca6a Fix spelling
• dddaddb Fix comment
• 4a4414c Use distroless/static:debug as base image
• 759f510 Merge pull request #2523 from fgiloux/sttts-kcp.io
• 1af8fd9 kcp.dev -> kcp.io for kcp.dev/shard and kcp.dev/cluster
• d89bf34 Merge pull request #2516 from ncdc/get-by-path-helper
• dcd6fc9 test/e2e: remove MultiClusterRoundTripper
• 0cca2e6 *: s/SystemBoundCRDSClusterName/SystemBoundCRDsClusterName/g
• 400656e Merge pull request #2519 from ncdc/keyfunc
• bf6ba0a pkg/authorization: prevent double audit logs
• abf5e51 Merge pull request #2520 from ncdc/remove-cluster-ctx-roundtrip
• a88a8c4 logicalcluster deletion: switch to .Cluster()
• c297f35 Merge pull request #2515 from ncdc/deflake
• 3577c3b Use deletion handling keyfunc where needed
• dc8dd60 Add indexers.ByPathAndName helper
• 7999eaa Fix up pkg/reconciler/core/logicalcluster
• 58ba976 Rename files with kcp.dev
• d2c394d Temporarily, rename kcp.io/cluster back to kcp.dev/cluster
• 40d5f4d Replace kcp.dev domain with kcp.io
• 4f03ae0 Merge pull request #2514 from ncdc/quiet-front-proxy
• b584629 Deflake apibinding immutability test
• 6debce3 sharded-test-server: add quiet support to front-proxy
• c67d504 Merge pull request #2510 from sttts/sttts-clusterworkspace-phase-b-rebase-cluster-id
• ac2163d test/e2e/virtual/syncer: use the root:compute logicalCluster
• c340e0b reconciler/workspace: move CRB creation into a logicalcluster controller
• 2d057a9 authorization/policy: grant logical-cluster-admin * on logicalclusters/status
• 4dcefed shared-test-server: wire --logical-cluster-admin-kubeconfig
• 3854f1b Revert "server: wire through --external-admin-kubeconfig"
• a30908e reconciler/tenancy/workspace: fix unit test typo
• ff3dd46 e2e: do LogicalCluster in NewWorkspaceFixture check to avoid race with eventual consistent index
• b1eacc1 e2e: implement NewOrganizationFixture through NewWorkspaceFixture
• 8f87a26 proxy: finish ClusterWorkspace -> Workspace transition
• 5075b74 reconciler/apibinding: add temporary root shard informer to export lookup
• 34e349c (sharded-)test-server: add --quiet flag for less noise
• 339a071 server: wire through --external-admin-kubeconfig
• b7ec85d sharded-test-server: restore sub-command output
• 36347fd shard-test-server: set default context to root to match kcp start
• 2c1c47f reconciler/workspace/scheduling: log chosen shard
• 1807ba9 reconciler/workspace/scheduling: remove condition side-effect in chooseShardAndMarkCondition
• 6680890 syncer: fix boilerplate
• 422b734 proxy: fix redirecting to changed cluster paths
• d35324a shard-test-server: run proxy with --v=4, same as the shards
• 2738898 proxy: fix shard URL in context
• 431fe5e proxy: start twInformer
• c696f80 proxy: add logging
• 3755f5b Address review comments
• 1fc1a35 SQUASH: index: rewrite with ThisWorkspace logic - fix map panic
• a305232 Adding back tests for the deletion of logical clusters after the workspace refactoring
• 036f9d1 kubectl-sync: make syncer use the cluster name for workspace movement resilience
• d03d037 syncer: clarify path and cluster name
• c02d1cf syncer: compute sync target key from cluster name
• 533c668 SQUASH: cliplugins/bind-compute: pretty up output
• ff97759 REVISIT: apis/workload: restore local export reference in SyncTarget supported API default
• d93cada reconciler/apis/extraannotationsync: improve logging
• 577f93a SQUASH: cliplugins/bind-compute: pretty up output
• 4304088 logicalcluster v3: manual adaption - reconciler/workload/placement typo
• 7c55f49 SQUASH: cliplugins/workspace: make --enter to use workspace name
• 67ad48f cliplugins/workspace: make --enter to use workspace name
• d686661 make update-contextual-logging
• 5693099 SQUASH: apis: move & rename tenancy ClusterWorkspaceShard to core Shard – shard workspace bootstrap typo
• 967cb16 apis/tenancy: remove unneeded root+system workspace naming restriction
• 0ee36dd apis: move RootCluster into pkg/apis/core
• ba8fac3 SQUASH: apis: move & rename tenancy ClusterWorkspaceShard to core Shard – fix gvr in cache replicator
• 79be3c5 bump(kcp-dev/logicalcluster): v3.0.1 to get proper system logical cluster handling
• e85eb18 pkg/softimpersonation: remove soft impersonation
• 1245629 config/root: fix home creation root policy
• bb9fabb reconciler/workspacedeletion: rename to logical cluster
• 8ac44e0 reconciler/workspacedeletion: split deletion finalizer from tenancy
• 8e98f21 SQUASH: apis: rename & move tenancy ThisWorkspace to core LogicalCluster – logical cluster deletion
• 7f82724 SQUASH: e2e/reconciler/clusterworkspace: switch to Workspace
• 5a944f6 pkg/authorization: add delegation reason in audit
• 0ed03b3 pkg/authorization/required_groups_authorizer: add delegateauthorization and unit tests
• 669dc97 pkg/authorization/workspace_content_authorizer: add delegateauthorization
• ee45587 SQUASH: apis: rename & move tenancy ThisWorkspace to core LogicalCluster
• ab5f6b2 SQUASH: apis: move & rename tenancy ClusterWorkspaceShard to core Shard
• 87d8999 boilerplate: fix apis/core/types.go
• 568410d apis/core: name LogicalCluster "cluster"
• 8989503 make codegen
• 53af6ba Address review comments
• dd4c327 apis/apis: add path pattern
• 7ef00ff apis/apis: fix json name for path field
• 84da15c logicalcluster v3: manual adaption - crd partial metadata e2e
• 7bd4e7c go.mod
• fd5a962 make update-contextual-logging
• 7c5e625 server/home-workspace: add type initializers to LogicalCluster
• d3c0885 admission/workspacetypeexists: lookup types also in root outside of a hierarchy subtree
• 9535b92 indexers: fix and unify APIBindingsByAPIExport index usage
• 3517706 apis: rename tenancy ClusterWorkspaceType to WorkspaceType
• 315f733 apis: move & rename tenancy ClusterWorkspaceShard to core Shard
• 699697d apis: move types and constants from tenancy to core
• 1a87ea2 apis: rename & move tenancy ThisWorkspace to core LogicalCluster
• a6a928e apis: move path annotation to core package and shorten to kcp.dev/path
• d4e5623 apis: add core.kcp.dev group
• 199272e Switch to random cluster name
• 104f056 make lint
• 9278429 make codegen
• dfd75ec logicalcluster v3: manual adaption - deployment splitter
• 81ad7fe apimachinery/v2: mechanical rewrite
• a7304a0 go.mod
• 9a821cd logicalcluster v3: manual adaption
• e113e05 reconciler/apis/apibinding: split up reconciler
• 2d6aeaa REVISIT(dfestal): cliplugins/bind-compute: semi-correct handling of local bindings
• 4a99fde reconciler/apis/apibinding: cosmetics in conflict checker
• 8f79825 apis/workload: clean up
• 3a31441 cliplugins/bind-compute: fix error logic
• ddba408 cliplugins/bind-compute: pretty up output
• b50fbaa apis/apis: turn APIBinding export reference into path+name
• 45e38a6 reconciler/workload/synctargetexports: fix error type
• 99847ff reconciler/workload/synctargetexports: fix of panic
• 22b94bf apis/*: make export refs path optional
• 667c038 apis: allow non-root path references
• b74d753 logicalcluster v3: manual adaption – e2e/reconciler/clusterworkspace
• 7d73112 logicalcluster v3: manual adaption – e2e/reconciler/clusterworkspacedeletion
• 9b7fdda REVISIT(sttts): special case thisworkspaces as identity-less
• 55f8af2 Remove canonical path header
• 66ba35e reconciler/tenancy/workspace: store canonical path on ThisWorkspace and use for pathannotation admission
• 1700929 REVISIT(dfestal): e2e/virtual/syncer: disable test depending on root:compute cluster name
• 76a1dbe logicalcluster v3: manual adaption
• ffe69ff indexers: make ByLogicalClusterPath distinct from ByLogicalClusterPathAndName
• 54968f0 reconciler/tenancy/workspace: test and fix scheduling with existing ThisWorkspace
• d58ff24 reconciler/tenancy/workspace: readd TestReconcileScheduling
• cd90317 logicalcluster v3: New -> NewPath
• 84f1cd7 reconciler/tenancy/scheduler: double check already existing ThisWorkspace has right owner
• d542921 server/localproxy: combine with WithClusterScope to avoid forcing non-names into cluster.Name
• 260fd7b logicalcluster v3: clarify genericrequest.Cluster wildcard handling
• 8d95d65 logicalcluster v3: manual adaption
• 3e152c0 reconciler/garbagecollector: port to ThisWorkspace
• b87ea5b admission/namespacelifecycle: port to ThisWorkspace
• ac76eec admission/kubequota: finish ThisWorkspace port
• c5f3178 Mechnical rewrite: logicalcluster.{Name -> Path}, tenancy.Cluster -> logicalcluster.Name
• 2b97416 import github.com/kcp-dev/logicalcluster/v3
• 4dfb80f logicalcluster v3: manual adaption - e2e
• abc0b7a cli/bind+compute-bind: temporarily switch to "cluster" in bindings
• 49c5998 admission/clusterworkspacetypeexists: port to path annotations
• 4850745 apis/apis: adapt slices to cluster references
• cb686d3 apis/tenancy: align APIExport reference with path and export
• 4f50e64 apis/apis: switch export reference from path to cluster - manual type fixes
• d007294 apis/apis: switch export reference from path to cluster – mechanical adaption
• 976f2df apis/apis: switch export reference from path to cluster
• e26d9a3 reconciler/workload/apiexport: TODO not to reference root:compute
• 3309d1c apis/apis: rename workspace export reference to "export"
• 03f533d apis/workload: split synctargets from apis group
• 6e2c6b9 admission: add pathannotation plugin
• dc23997 admission/clusterworkspacetypeexists: keep existing path in workspace type references
• d03dad1 Decouple paths from etcd key cluster name
• cd30f48 Limit temporary cluster name to 61 chars
• 97e6c45 Temporary: use encoded path as canonical cluster name
• 1b4fe0e server/homeworkspaces: remove legacy mode
• fe56401 make codegen
• b312a46 e2e/authorizer: port TestAuthorizer to ThisWorkspace
• 745dba7 e2e/virtual/initializingworkspaces: port to ThisWorkspace
• c22bcf0 e2e/conformance/cross_logical_cluster_list_test: fix TestCrossLogicalClusterList
• 407b829 e2e/reconciler/clusterworkspacedeletion/controller_test: fix TestWorkspaceDeletionController
• 47618f9 e2e/authorizer: recreate basic workspace access tests formally in vw package
• e4d983b e2e/virtual/workspaces: adapt to clusterworkspaces
• c652f96 e2e/virtual/initializingworkspaces/virtualworkspace_test: fix TestInitializingWorkspacesVirtualWorkspaceDiscovery
• 6325a36 e2e/homeworkspaces/home_workspaces_test: fix "Create a workspace in the non-existing home and have it created automatically through ~" scenario
• ce05c26 e2e/conformance: fix TestCrossLogicalClusterList
• f88aaad e2e/reconciler/clusterworkspacedeletion/controller_test: deflake
• 8657f62 e2e/workspacetype/controller_test: fix TestClusterWorkspaceTypes
• 2e36152 e2e/framework: port AdmitWorkspaceAccess
• 57eeb7a e2e/quota/quota_test: fix TestClusterScopedQuota
• 2e36a33 e2e/reconciler/clusterworkspace: switch to Workspace
• 2b4475f pkg/server/filters/filters_test.go: fix TestWorkspaceNamePattern
• f8dbcaa reconcilers/tenancy: set Deleting phase annotation
• c816758 authorization: update docs
• db66515 admission/workspace: inherit required groups for authorization
• e9a55de authorization/requiredgroups: replace top-level authorizer
• 34f2624 authorization/workspace_content_authorizer: port to in-cluster auth
• eb9cce6 authorization: rm unused variable
• ea6d498 admission/clusterworkspacetypeexists: use typed qualified CWT references
• 5f70783 admission/clusterworkspacetypeexists: split up into workspace and thisworkspace
• a495fb1 reconciler/tenancy/workspace: set type annotation on ThisWorkspace
• 823a6d0 apis/tenancy: add temporary canonical-path-cluster-id translation
• 28f54ea apis/tenancy: split workspace type reference from types themselves with different validation
• 29e4077 apis/tenancy: fix optional path omitempty in ClusterWorkspaceTypeReference
• d5eb195 apis/tenancy: remove trivial helpers
• 1211b09 apis/tenancy: add temporary tenancy.Cluster type
• b4372f3 index+proxy: add x-kcp-workspace-path header
• 6c9761a reconcilder/kubequota: port to ThisWorkspace
• e370520 Switch everywhere from clusterworkspaces to workspaces informer
• 72c21f1 admission/clusterworkspace: switch to workspace
• 95d3b18 reconciler/workspace: switch to Workspaces
• 3fc9d13 reconciler/tenancy/workspace: fix user agent
• 741375c reconciler/clusterworkspaces: rename to workspaces
• 00754fd virtual/workspaces: inverse direction from workspaces to cluster workspaces
• 57244f9 virtual/workspaces: remove auth cache
• fdfc133 reconciler/tenancy/thisworkspace: adapt and split up reponsibility from clusterworkspaces reconciler
• 0773cc7 reconciler/tenancy/thisworkspace: copied from clusterworkspaces reconciler
• 811a89a reconciler/tenancy/bootstrap: port to ThisWorkspace
• a483a30 apis/tenancy: ClusterWorkspaceInitializer -> WorkspaceInitializer
• 9bd8e70 reconciler/tenancy/initialization: port to ThisWorkspace
• 5755e16 virtual/initializingworkspaces: switch to ThisWorkspace
• 0b6e7af server: wire local proxy filter to rewrite with local knowledge
• 481b4ad index: rewrite with ThisWorkspace logic
• 63f81c5 apis/tenancy: add status.cluster to ClusterWorkspace and Workspace
• dc53b5f homeworkspaces: rewrite with parent-less workspace
• cb6b342 reconciler/workspacedeletion: port to ThisWorkspace
• a8c641d REVISIT(lukasz): skip quota and homeworkspace checks for thisworkspaces and workspace-admin binding for now
• fdab8e6 authorization: add system:kcp:workspace:access cluster role
• 108edb7 authorization: always let system:kcp:logical-cluster-admin into workspaces
• 0957daa authorization: do not allow thisworkspaces access write access through local workspace
• c55dad3 reconciler: rename clusterworkspacedeletion -> workspacedeletion
• c69ce47 REVISIT(lukasz): controller-tests: fix add a shard after a workspace is unschedulable, expect it to be scheduled
• c49e298 scheduler: temporarily disable a few unit tests, enabled later again
• 74bc3a7 reconciler/clusterworkspaces: add preThisWorkspaceDeletion reconcilers
• 7063241 scheduler: create ThisWorkspace
• 0f1b17f scheduler: wants logicalClusterAdminConfig
• bc38696 server: add logical-cluster-admin-kubeconfig flag
• d3759c7 bootstrap: define RBAC for system:kcp:logical-cluster-admin
• 6b5e9e3 apis/apis/apiexport: forbid claims on thisworkspaces
• 1e80f75 api: introduce ThisWorkspace type
• df00dff apis/tenancy: remove unused workspaces.kcp.dev/name label
• 1274266 apis/tenancy: split types.go
• c0276a5 Makefile: create kubectl-ws+workspaces links
• 7ce795d Makefile: add crds target
• 1c20db9 REVISIT(sur): Revert "pkg/authorization: add delegation reason in audit"
• 6b7eb2a REVISIT(sur): Revert "SQUASH: enhance godoc"
• 71a08d9 Merge pull request #2509 from s-urbaniak/softimpersonate-copy-config
• ab64224 pkg/softimpersonation: deep copy rest config
• 2038e8b Update .goreleaser.yaml to build binaries with CGO_ENABLED=0
• 2b5c1f1 Merge pull request #2505 from vincepri/partial-metadata-race
• 293a1e7 🐛 metadata CRDs should not modify version schemas
• 1fe58b2 Add test to capture a race w/ partial metadata in cache
• 307d7c7 Merge pull request #2506 from apoorvajagtap/correct_err_typo
• d7998fa corrected quote typos
• f86d521 Merge pull request #2503 from ncdc/fix-docs-tag-builds
• 747c8bc Merge pull request #2499 from MikeSpreitzer/wsdoc-to-v10
• 2c9a099 docs: mkdir before moving
• 12ea647 Merge pull request #2497 from vincepri/add-test-MakePartialMetadataCRD
• 3b413d4 Add test for shallow copy and make partial metadata CRD
• 4a3452d Attempt to update doc on workspaces
• 70ce15f Merge pull request #2405 from platform9/private/main/erwinvaneyk/fix-root-path-parsing
• aa099bd Merge pull request #2483 from kcp-dev/dependabot/github_actions/goreleaser/goreleaser-action-4
• 551ccb7 build(deps): bump goreleaser/goreleaser-action from 3 to 4
• 2f21496 Merge pull request #2495 from ncdc/test-goreleaser-changes
• d6a9c6d goreleaser: distinguish tags and PRs
• 749687e Merge pull request #2492 from ncdc/test-goreleaser-changes
• ee9699b Test goreleaser changes in CI
• fb4d4a4 Merge pull request #2488 from vincepri/actions-concurrency
• ba5c833 Add github action concurrency based on workflow-ref
• a041a6f Support root path parsing