v0.9.0

Changes since v0.8.2

✨ New Features

• sync resources from syncer virtual server (#1995)
• pkg/admission/apibinding: more informative authorization failure message (#2124)
• Add reservednames admission plugin to surface clearer error messages (#2118)
• Add kubectl workspace plugin and adjust usage output (#1901)
• Warn users when APIBindings PermissionClaims don't match APIExport's PermissionClaims (#2046)
• Add profiler support to front proxy and virtual workspaces (#2023)
• Add support for default APIBindings to create per ClusterWorkspaceType when initializing a workspace (#1877)
• Add root compute workspace (#1962)
• *: use cluster-aware keyfuncs & splitters (#1958)
• Syncer Tunneler: Pod logs, .... (#873)

🐛 Bug Fixes

• Remove the logical-cluster & sync-target labels from syncer namespace (#2130)
• Syncer AdvancedScheduling fixes: Avoid syncing down the experimental status annotation. (#2129)
• Fix bugs in the resource controller (#2126)
• kubectl-kcp: remove duplicated NewFlagSet (#2125)
• Detect kubectl plugin via FlagSet Name (#2121)
• Only delete ClusterRoles and ClusterRoleBindings when Workspace finalizer is removed (#2113)
• Fix link rendering in FAQ.md (#2115)
• Fix typo (#2114)
• fix- nil context in workspace-use plugin (#2106)
• syncer: apply name transformations to spec controller downstream informer (#2096)
• Fix make install (#2098)
• fix OS and ARCH not being properly initialized (#2097)
• syncer/status: make sure the resource is owned by this syncer before updating the status (#2049)
• Allow go to determine ARCH and OS during build (#2091)
• Avoid redundant delete in workspace deletion (#2086)
• apibinder: don't use external address for now (#2095)
• Add trailing slash to COPY command in Dockerfile (#2077)
• Revert "syncer: remove finalizer if downstream resource has been deleted" (#2078)
• syncer: remove finalizer if downstream resource has been deleted (#2055)
• apis: use correct annotation to require fields (#2067)
• Fix kubectl overrides in 'kubectl workspace' plugin commands (#2058)
• bug fix Add maximal permission policy for compute APIExport (#2033)
• pkg/admission/webhook: differentiate states (#2031)
• pkg/admission/webhook: fix nil panic (#2029)
• Fix scripts to run on mac with gnu sed (#2026)
• syncer: use the correct key splitter (#1985)
• syncer: bifurcate the namespace controller (#1978)
• *: split meta namespace keys correctly (#1957)
• Don't calculate new placements for resources that are being deleted (#1953)
• Fix generated APIResourceSchema names (#1940)
• cache-client: fix npe when the context wasn't set (#1927)
• fix filename for negotiatedapiresources (#1917)
• pkg/authorization/apibinding_authorizer: fix nil panic (#1920)
• Fix ctrl-c not gracefully terminating (#1900)
• pkg/virtual/workspaces/registry: fix panic sending to a closed channel (#1889)

🌱 Others

• cache: replication controller: attach the shard annotation during object creation (#2122)
• Proxy refactor to options/config/server pattern (#2110)
• cmd/kcp-front-proxy: use component-base/cli Run (#2108)
• cache: introduce the replication controller (#2024)
• cache-server: disable ServerSideApply feature (#2109)
• Remove klog from tests (#2072)
• Remove ingress splitter and deployment splitter which do not work currently... (#2103)
• pkg/apis: update logicalcluster to v2.0.0-alpha.3 (#2085)
• authz: remove the concept of a merged informer (#2083)
• Add make targets to update and verify go.mod (#2071)
• build(deps): bump uraimo/run-on-arch-action from 2.2.0 to 2.2.1 (#2081)
• Remove deploy task from github actions (#2084)
• Combine Dockerfile kubectl layers to save space (#2079)
• Add ppc64le support to e2e test workflow (#2019)
• cache server: stop serving subresources for built-in resources (#2063)
• syncer(apiimporter,syncer,tunneler}: use structured, contextual logging (#2054)
• Move VW registry's rest file to contextual logging (#2069)
• Upgrade to logicalcluster v2.0.0-alpha.3 (#2070)
• turn off goreleaser from PRs and pushes to main (#2074)
• tenancy: allow single-character logical cluster names (#2020)
• kcp: controllers don't have to check if caches have been synced during startup (#2053)
• proxy: pass context for contextual logging (#2044)
• apibinding, types: remove ancestor check (#2060)
• authorisation: stop using the ValidClusterFrom method (#1996)
• pkg/server: enable audit logging in virtual workspace apiserver (#2047)
• test/e2e: enable audit logs (#2045)
• cmd/kcp-front-proxy move filters into module (#2043)
• pkg/proxy use contextual logging (#2042)
• Update community meeting template (#2040)
• Stop shortening git sha used to update RH gitops repo (#2025)
• Wire the cache server into the kcp server (#1954)
• add CLI `workspace tree' (#1989)
• Front proxy use contextual logging (#2002)
• Update batteries-included option usage (#2001)
• WithClusterScope: should not assign a default cluster name (#1871)
• kcp: add flags related to the cache server (#1970)
• cache: expose the cache-server under "/services/cache" path (#1961)
• cache: small refactor to make wiring into kcp easier (#1949)
• pkg/util: delete (#1951)
• cache: moves common HTTP handlers to a shared pkg (#1947)
• cache: makes all internal clients shard and cluster aware (#1928)
• Remove deploy task from GitHub Actions (#2084)
• Enable PR verifier (#1941)
• cache-server: adds ShardNameFromObjectRoundTripper (#1926)
• bump to the latest kube level (#1918)
• verify-go-versions.sh make CONTRIBUTING.md check conditional (#1915)
• fix readme typo (#1925)
• spellcheck across the repository (#1908)
• Update README.md golang version and add to verify script (#1894)
• build(deps): bump imjasonh/setup-ko from 0.5 to 0.6 (#1912)
• Simplify plugin code (#1701)

📖 Documentation

• Update readme (#1911)
• Generate CLI docs (#2000)
• Add a quickstart doc for tenancy and APIs (#2064)
• Update FAQ links to point to renamed concepts.md (#2100)
• Document the cache-server (#1896)
• docs/architecture: remove because totally outdated (#1892)
• Add initial release process docs (#1886)

Thanks to all our contributors! 😊

v0.8.2

What's Changed

• [release-0.8] pkg/virtual/workspaces/registry: fix panic sending to a closed channel by @openshift-cherrypick-robot in #1897
• [release-0.8] Fix ctrl-c not gracefully terminating by @openshift-cherrypick-robot in #1903
• [release-0.8] pkg/authorization/apibinding_authorizer: fix nil panic by @openshift-cherrypick-robot in #1921
• [release-0.8] build(deps): bump imjasonh/setup-ko from 0.5 to 0.6 by @openshift-cherrypick-robot in #1923

Full Changelog: v0.8.0...v0.8.2

v0.8.1

⚠️ This release does not have the syncer image due to an issue with our GitHub actions. Please use v0.8.2 instead

What's Changed

• [release-0.8] pkg/virtual/workspaces/registry: fix panic sending to a closed channel by @openshift-cherrypick-robot in #1897
• [release-0.8] Fix ctrl-c not gracefully terminating by @openshift-cherrypick-robot in #1903
• [release-0.8] pkg/authorization/apibinding_authorizer: fix nil panic by @openshift-cherrypick-robot in #1921

Full Changelog: v0.8.0...v0.8.1

v0.8.0

What's Changed

• VW: Fix permission checking in root by @davidfestal in #1686
• Add more logging by @ncdc in #1692
• make internal apis available for apiexport permission claims by @robinbobbitt in #1676
• reconciler/{apis,scheduling,tenancy}: use structured, contextual logging by @stevekuznetsov in #1695
• Syncer: refuse to work on sync target UID discrepancy. by @jmprusi in #1687
• Completely cleanup support of personal workspaces in top-level organizations by @davidfestal in #1685
• Makefile: set UNSAFE_E2E_HACK_DISABLE_ETCD_FSYNC=true in all e2e tests by @sttts in #1704
• *: remove member verb by @s-urbaniak in #1711
• Replace clusterworkspaces/{content,workspace} subresources in RBAC with workspaces{/content,} by @sttts in #1712
• virtual/workspace: use real authorizer by @sttts in #1710
• server: hardens the remote shard registration by @p0lyn0mial in #1700
• pkg/virtual/syncer/builder: fix incorrect comment by @jmprusi in #1713
• Add --batteries-included by @sttts in #1688
• updates the tests building a list of VirtualWorkspaceURLs assigned to ClusterWorkspaceShards by @p0lyn0mial in #1699
• exclude authn/authz apis from claimable list by @robinbobbitt in #1716
• logging: use kind-prefixed fields instead of string-formatting by @stevekuznetsov in #1705
• Fixes log line formatting by @m1kola in #1718
• Part 14: scope clients in tests/e2e/framework by @varshaprasad96 in #1709
• Remove the redirect from shard to virtual workspaces by @davidfestal in #1706
• Add goreleaser by @sttts in #1721
• pkg/reconciler/workload: move to structured, contextual logging by @stevekuznetsov in #1719
• goreleaser: increase timeout and reduce archs by @sttts in #1731
• goreleaser: add write permissions to GITHUB_TOKEN by @sttts in #1735
• Dockerfile: add kubectl by @sttts in #1737
• logging: stop using formatted strings for object identifiers by @stevekuznetsov in #1730
• Part 13: Scope clients in test/e2e/virtual by @varshaprasad96 in #1707
• Refactor permission claim labels reconciler by @shawn-hurley in #1617
• hack: verify-go-version.sh in all the repo by @sttts in #1738
• cli/workspace: don't get Workspace in parent on absolute use, but check inside the workspace by @sttts in #1726
• Update Slack channel name by @ncdc in #1744
• virtual: stutter less in constructors by @stevekuznetsov in #1747
• syncer: handle only the k8s export by @stevekuznetsov in #1748
• Permission claim fixes / cleanups by @sttts in #1745
• Part 15: Scope clients in test/e2e/fixtures by @varshaprasad96 in #1732
• the identity provider gets data from a local cm too by @p0lyn0mial in #1727
• Add ppc64le support by @snehakpersistent in #1757
• adds ApiExportIdentityProviderController by @p0lyn0mial in #1725
• docs/syncer.md: add missing instructions by @s-urbaniak in #1746
• .github: fix community meeting link by @sttts in #1766
• Generate CRD defaults for known types by @lionelvillard in #1769
• Start centralizing APIExport indexers by @ncdc in #1762
• Fix image build by @ncdc in #1771
• Add content, toplevel audit annotations by @ncdc in #1767
• Generic helper for consistent post-reconcile spec and status updates by @csams in #1754
• Set service protocol defaults by @lionelvillard in #1783
• Add missing autoscaling single-word group name by @lionelvillard in #1785
• bootstrap: create the default ns in the system:shard ws by @p0lyn0mial in #1782
• Ignore .goreleaser.yaml in GH CI by @ncdc in #1789
• cache-server scaffolding by @p0lyn0mial in #1790
• wires the APIIdentityCacheController by @p0lyn0mial in #1781
• Introduce staticcheck linter for deprecations by @varshaprasad96 in #1798
• Fix schemacompat npe by @ncdc in #1802
• ddsif: exclude v1beta1 Workspaces by @ncdc in #1805
• Fix bug allowing metadata edits to e.g. creationTimestamp for built-in types as CRDs by @ncdc in #1809
• Fix leftover resource when deleting a namespace by @jmprusi in #1743
• synctarget export controller by @qiujian16 in #1624
• Change issue template to newer issue forms by @avinal in #1196
• cache-server: starts empty apiextentions-server by @p0lyn0mial in #1811
• controllers: avoid double copy of the rest config by @p0lyn0mial in #1780
• pkg/server: use structured, contextual logging by @stevekuznetsov in #1797
• Part 18: Scope ingress controller by @varshaprasad96 in #1817
• authorization: add system:masters-only deep SAR via X-Kcp-Internal-Deep-SubjectAccessReview header by @s-urbaniak in #1739
• Part 19: Scoped cmd/front-proxy by @varshaprasad96 in #1819
• e2e/watchcache: remove ddsif testing by @ncdc in #1761
• cache-server: expose apiresourceschemas and apiexports by @p0lyn0mial in #1815
• bump to the latest kube level by @p0lyn0mial in #1832
• various: logging cleanups by @ncdc in #1837
• Fix GH issue template labels by @ncdc in #1825
• Watch cache: use resource.group for object type in log messages and metrics by @ncdc in #1834
• etcd3: include GroupResource in logs/metrics by @ncdc in #1839
• Fix NewNamespaceLocator param name by @ncdc in #1844
• Add exported claims by @shawn-hurley in #1831
• Lint for contextual logging by @nrb in #1835
• Cluster scoped quota by @ncdc in #1846
• Adds E2E test to verify Audit logs contain workspace annotation by @bipuladh in #1830
• sharded-test-server: support standalone vw server by @ncdc in #1800
• cache-server: set the storage prefix to /cache by @p0lyn0mial in #1850
• deletors: skip projected resources by @ncdc in #1860
• e2e: save data in some temporary directory by @stevekuznetsov in #1861
• Add more e2e test cases for permission claims by @ncdc in #1864
• pkg/authorization: add audit logging by @s-urbaniak in #1833
• sharded-test-server: log the full command line with parameters by @pkprzekwas in #1869
• Syncer: Adds validation to make --sync-target-uid flag required by @jmprusi in #1867
• home-ws: wait for tenancy binding readiness by @ncdc in #1872
• cache-server: provides client-related functionality for dealing with a shard on the HTTP level by @p0lyn0mial in #1853
• modified cmd.Use for kubectl-workspaces by @apoorvajagtap in #1756
• bump to the latest kube level by @p0lyn0mial in #1851
• Makefile: add update-contextual-logging by @sttts in #1876
• resource controller: fix NPE by @ncdc in #1880
• *: make import aliases consistent by @stevekuznetsov in #1881
• KCP: stop messing with the RawPath by @p0lyn0mial in #1883
• cache-server: adds WithShardScope HTTP filter by @p0lyn0mial in #1841
• virtual: Support SSA patch requests for non-existent objects by @astefanutti in #1854
• virtual/apiexport: serve wildcard apibindings by @sttts in #1563
• Only serve compatible APIs for syncTarget by @Qi...

v0.7.10

Changelog

• 95799cf Merge pull request #1862 from ncdc/0.7/skip-projected-resources
• bfed9f6 Merge pull request #1863 from openshift-cherrypick-robot/cherry-pick-1861-to-release-0.7
• bedcad6 e2e: save data in some temporary directory
• be47352 deletors: skip projected resources

v0.7.9

Changelog

• 3837ca0 Merge pull request #1808 from openshift-cherrypick-robot/cherry-pick-1805-to-release-0.7
• 0767ad7 ddsif: exclude v1beta1 Workspaces

v0.7.8

What's Changed

• [release-0.7] Fix schemacompat npe by @openshift-cherrypick-robot in #1803

Full Changelog: v0.7.7...v0.7.8

v0.7.7

What's Changed

• [release-0.7] Add ppc64le support by @openshift-cherrypick-robot in #1788

Full Changelog: v0.7.6...v0.7.7

v0.7.6

What's Changed

• [release-0.7] Start centralizing APIExport indexers by @ncdc in #1765

Full Changelog: v0.7.5...v0.7.6

v0.7.5

What's Changed

• [release-0.7] syncer: handle only the k8s export by @openshift-cherrypick-robot in #1750

Full Changelog: v0.7.4...v0.7.5