v0.7.4

What's Changed

• Forbid system:masters access to kcp-front-proxy, make tests shard aware by @s-urbaniak in #1448
• server/home: create home workspace with final URL on ~ access by @sttts in #1530
• cli: require absolute type with --ignore-existing by @sttts in #1533
• Fix typos in APIExport bootstrapped ClusterRoleBindings by @davidfestal in #1540
• Add KCP CLI arguments to enable home workspaces as well as specific options, especially the groups bound to the get/create ~ permissions by @davidfestal in #1539
• server: add --shard-external-url by @ncdc in #1542
• ddsif: fix lost event handlers by @sttts in #1550
• Add shortName ws for workspace by @xingxingxia in #1524
• reconciler/apiexport: switch from rsa4096 to 256 bit cryptographic random string by @sttts in #1548
• cli: take URL from Workspace also in absolute references by @sttts in #1554
• ddsif: replace discovery polling by @ncdc in #1473
• sharded-test-server: set shard external URL to front-proxy by @sttts in #1552
• Part 2: Scoping controllers in pkg/server by @varshaprasad96 in #1504
• Part 3: Make APIResource controller client calls scoped by @varshaprasad96 in #1558
• server/home: improve log output by @sttts in #1549
• server/home: check owner properly by @sttts in #1493
• Part 4: Wrap client calls in API Binding and Heartbeat controller by @varshaprasad96 in #1569
• apis/tenancy: rename tenancy.kcp.dev/owner -> experimental.tenancy.kcp.dev/owner by @sttts in #1565
• introduce system:shard logical cluster by @p0lyn0mial in #1573
• e2e/clusterworkspacedeletion: deflake by @ncdc in #1576
• syncer/namespace-locator: Rename path to workspace by @jmprusi in #1566
• Adding CEL Validation for Permission Claim by @shawn-hurley in #1529
• e2e: reduce client-side throttling by @ncdc in #1543
• kcp server: introduce root-shard-kubeconfig-file flag by @p0lyn0mial in #1575
• Syncer: Refactors KCPClusterName to SyncTargetWorkspace. by @jmprusi in #1574
• docs: tweaks to the Location concept description by @markmc in #1586
• remove unused apiResourceSchemaIndexer from the apibinding controller by @p0lyn0mial in #1589
• Add workspaces overview to README by @MikeSpreitzer in #1584
• Don't add /clusters/ prefix to /services/ requests by @kylape in #1590
• e2e/clusterworkspacedeletion: use correct root shard system:master client for deletion checks by @sttts in #1570
• e2e: use a better helper for waiting for readiness by @stevekuznetsov in #1588
• Part 5: Wrap controllers in scheduling/tenancy pkgs by @varshaprasad96 in #1578
• Part 6: Scope workload controllers by @varshaprasad96 in #1595
• Extend README with introduction to workspaces by @MikeSpreitzer in #1594
• bootstrap the root workspace only on the root shard by @p0lyn0mial in #1587
• run the clusterworkspaceshard controller only on the root shard by @p0lyn0mial in #1597
• enable ExperimentalWatchProgressNotifyInterval for etcd by @p0lyn0mial in #1596
• clusterworkspace scheduling: default to assigning to the root shard by @p0lyn0mial in #1585
• Makefile improvements by @sttts in #1606
• apis/apis: split out CEL test helper into pkg/apis/test by @sttts in #1603
• clusterworkspacetypes: simplify system types by @sttts in #1607
• k8s 1.24 rebase by @stevekuznetsov in #1568
• cli/sync: create service account secret in advance to trigger token creation by @sttts in #1613
• embeddedetcd: restructure with options/config/server pattern by @sttts in #1608
• make: explicitly list build deps by @stevekuznetsov in #1612
• apibinding controller with root shard informers by @p0lyn0mial in #1598
• server/embeddedetcd: fix npe by @sttts in #1619
• server: restructure with options/config/server pattern by @sttts in #1609
• Documentation: Add Home, Homebucket, and Homeroot workspace info by @pweil- in #1561
• add exports to synctarget API for location workspace by @qiujian16 in #1571
• logging: move clusterworkspaceshard reconciler to structured logging by @stevekuznetsov in #1614
• Add owners files and notes on review/approver role to CONTRIBUTING.md by @pweil- in #1601
• home workspaces: handle slow bootstrapping by @ncdc in #1633
• build(deps): bump imjasonh/setup-ko from 0.4 to 0.5 by @dependabot in #1630
• Fix print column on location labels by @qiujian16 in #1638
• webhook: fix npe by @ncdc in #1639
• Refactor ns scheduler for location workspace by @qiujian16 in #1618
• Enable avoiding using podman by @davidfestal in #1628
• move Config to separate file by @deitch in #1637
• Add initial per-workspace quota support by @ncdc in #1236
• Part 8: Wrap clients in test/e2e/apibinding by @varshaprasad96 in #1640
• e2e: reduce global, trivial Sheriff fixture by @sttts in #1642
• server: keep retrying bootstrapping by @sttts in #1641
• remove deprecated command from use description by @ReToCode in #1645
• virtual: give VWs an order in order to control precedence by @sttts in #1643
• Update minimum Go version in CONTRIBUTING.md doc to 1.18 by @dseapy in #1651
• Misc syncer e2e cleanups and fixes by @sttts in #1652
• wire TemporaryRootShardKcpSharedInformerFactory by @p0lyn0mial in #1572
• Cleanup Syncer to prepare for Syncer Virtual Workspace transformations by @davidfestal in #1629
• syncer: move namespace locator normalization to indexer by @sttts in #1656
• Fix flaky informers by @ncdc in #1649
• Makefile: allow WAIT=1 to keep server running in test-e2e-{sharded,shared} targets by @sttts in #1659
• SyncTarget Uniqueness by @jmprusi in #1600
• apis: add age column where it makes sense by @sttts in #1658
• Part 9: Scope client calls in test/e2e by @varshaprasad96 in #1648
• reconciler/workload/resource: remove syncer finalizer when SyncTarget is gone by @sttts in #1293
• apis/workload/v1alpha1: Fix comment as the value of InternalSyncTargetPlacementAnnotationKey changed by @jmprusi in #1660
• e2e: undo ForeverTestTimeout/30 by @ncdc in #1662
• e2e/apibinding: improve log output and workspace names by @sttts in #1664
• apis/scheduling: remove unused PlacementState struct and constants by @sttts in #1655
• e2e: fix long api groups exhausting label value length by @sttts in #1663
• apis/workload: remove unused func by @sttts in #1668
• api change: adds VirtualWorkspaceURL to ClusterWorkspaceShard by @p0lyn0mial in #1669
• Switch to cluster name annotation by @ncdc in #1673
• Labels sync targets with the SyncTargetKey for reverse lookup by @jmprusi in #1672
• Part 12: Scope syncer and workspacetype tests by @varshaprasad96 in #1678
• use ClusterWorkspaceShard.VirtualWorkspaceURL by @p0lyn0mial in #1670
• apiexport controller: assigns ClusterWorkspaceShard.VirtualWorkspaceURL by @p0lyn0mial in #1681
• runs e2e-sharded with two shards by @p0lyn0mial in #1653
• Part 10: scope cross_logical_cluster tests by @varshaprasad96 in #1667
• Part 11: Sco...

v0.6.4

What's Changed

• cli/sync: create service account secret in advance to trigger token creation (#1616)
• fix flaky informers (#1657)

Full Changelog: v0.6.3...v0.6.4

v0.6.3

What's Changed

• 0.6: ddsif: replace discovery polling by @sttts in #1602

Full Changelog: v0.6.2...v0.6.3

v0.6.2

What's Changed

• [release-0.6] Don't add /clusters/ prefix to /services/ requests by @openshift-cherrypick-robot in #1593

Full Changelog: v0.6.1...v0.6.2

v0.6.1

What's Changed

• [release-0.6] syncer/namespace-locator: Rename path to workspace by @openshift-cherrypick-robot in #1577

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed since v0.6.0-alpha.1

• [release-0.6] cli: require absolute type with --ignore-existing by @openshift-cherrypick-robot in #1534
• [release-0.6] server/home: create home workspace with final URL on '~' access by @sttts in #1537
• [release-0.6] Fix typos in APIExport bootstrapped ClusterRoleBindings by @openshift-cherrypick-robot in #1541
• [release-0.6] server: add --shard-external-url by @openshift-cherrypick-robot in #1547
• [release-0.6] ddsif: fix lost event handlers by @openshift-cherrypick-robot in #1551
• [release-0.6] reconciler/apiexport: switch from rsa4096 to 256 bit cryptographic random string by @openshift-cherrypick-robot in #1556

Full Changelog: v0.6.0-alpha.0...v0.6.0

v0.6.0-alpha.0

Milestone Blocker Epics

• #1225 Multi-Release-Epic: Sharding
• #1219 API Export Permissions on Binding
• #1149 ClusterWorkspaceType Take 2
• #1069 User home workspaces
• #981 Multi-workspace controller development
• #912 Consume Compute via Transparent Multi Cluster set up in a different workspace

What's Changed

• virtual: Avoid error logs for /readz requests by @davidfestal in #1185
• Add authorizers in virtual workspaces by @davidfestal in #1186
• kubectl/crd snapshot: support multidoc by @ncdc in #1182
• adds crdNoOverlappingGVRAdmission admission by @p0lyn0mial in #1170
• pkg/authorization/apibinding_authorizer: don't ignore indexer errors. by @s-urbaniak in #1197
• Unify workloads.kcp.dev => workload.kcp.dev by @sttts in #1200
• Syncer/mutators: Resolve fieldRef "metadata.namespace" Envs before pushing to pcluster by @jmprusi in #1199
• Add technical docs of locations and state machine by @sttts in #1174
• Implement the Syncer virtual workspace authorizer by @davidfestal in #1176
• makefile: manage boilerplate verification locally by @stevekuznetsov in #1173
• Change gitops folder commit hash update is applied to by @kylape in #1204
• Change gitops folder commit hash update is applied to (take 2) by @kylape in #1205
• adding authorizer for the api export virtual workspace by @shawn-hurley in #1177
• CONTRIBUTING.md: add Go Proverbs by @sttts in #1208
• Replace --use with --enter by @MikeSpreitzer in #1212
• APIExport virtual workspace: add core/v1 by @ncdc in #1220
• e2e: extract APIExport/APIBinding helpers by @ncdc in #1218
• contrib: rename demo to demos-unmaintained by @sttts in #1215
• Added ppc64le support to KCP image by @mayurwaghmode in #1216
• Add E2E tests for cordon/uncordon/drain CLI by @chrisahl in #1098
• Add virtual workspace readiness checks to the KCP server in the embedded case by @davidfestal in #1226
• build(deps): bump docker/setup-qemu-action from 1 to 2 by @dependabot in #1229
• e2e/apibinding: require.Eventually for discovery by @sttts in #1231
• e2e/virtual/initializers: fix flake in TestInitializingWorkspacesVirtualWorkspaceDiscovery by @sttts in #1232
• clusterworkspacetype: stop special-casing Universal by @stevekuznetsov in #1237
• Enable syncer finalizers (k8s & virtual) by default. by @jmprusi in #1228
• APIBinding reconciler checks for overlapping CRDs in a logical cluster by @p0lyn0mial in #1217
• Fix Ingress cluster assignment based on namespace placement by @astefanutti in #1241
• CONTRIBUTING.md: document nested require statements by @sttts in #1251
• e2e/virtual/syncer: fixing race with resource controller in TestSyncerVirtualWorkspace by @sttts in #1247
• ci: turn off GitHub CI for jobs we run in Prow by @stevekuznetsov in #1207
• pkg/etcd,server: add --embedded-etcd-force-new-cluster by @s-urbaniak in #1250
• ci: delete demos.yaml by @ncdc in #1252
• Added ppc64le and arm64 support to the Syncer image by @mayurwaghmode in #1235
• tenancy: qualify cluster workspace types by @stevekuznetsov in #1230
• Update video on readme to v0.4 by @robszumski in #1260
• ClusterWorkspace+Types: allow name "org" by @sttts in #1263
• pkg/authorization: don't check for cluster workspace lister. by @s-urbaniak in #1265
• apibinding: make reference.workspace.path optional and defaulted by @sttts in #1262
• clusterworkspaces: make initializers implicit by @stevekuznetsov in #1264
• kubectl kcp ws: fix type printing by @stevekuznetsov in #1268
• reconciler/workload/resource: use RF3339 timestamp format by @jmprusi in #1269
• Placement API by @qiujian16 in #1258
• README.md: add hypercube logo and sources by @sttts in #1210
• clusterworkspacetype: expose virtual workspace URLs by @stevekuznetsov in #1270
• initializingworkspaces: enforce permissions by @stevekuznetsov in #1267
• virtual: Remove unsupported verbs from virtual API server discovery by @astefanutti in #1272
• Remove logo icon file with invalid name by @astefanutti in #1276
• virtual workspaces: skips registartion of default health checks by @p0lyn0mial in #1273
• authorization: clarify/fix service accounts and workspace initialization by @s-urbaniak in #1261
• Added prerequisites on the README by @ppatierno in #1284
• cmd/test-server: pass flags to kcp by @sttts in #1286
• fix typo: indexByWorks{ap->pa}ce by @sttts in #1290
• reconciler/apiexport: don't klog.Fatal by @sttts in #1291
• cli: fix ClusterWorkspace columns output by @sttts in #1296
• cmd/kcp: non-zero return code on error by @sttts in #1287
• server: centrally create and start ddsif by @sttts in #1295
• Reduce log noise by @sttts in #1297
• reconciler/placement: fix patch typo by @sttts in #1298
• e2e: switch NewWorkspaceFixture to options by @sttts in #1289
• Clean up unused e2e helpers by @sttts in #1300
• admission/clusterworkspace: check errors in unit test by @sttts in #1302
• pkg/reconciler/apis/apiexport: clarify patching strategy in case of programming errors by @s-urbaniak in #1304
• Makefile: add test-e2e-shared by @sttts in #1310
• tenancy: show Deleting in phase column during ClusterWorkspace deletion by @sttts in #1303
• APIBinding/Workspace deletion improvement by @sttts in #1299
• github/ci.yaml: use test-e2e-shared make target by @sttts in #1311
• e2e/syncer: less noise with framework.Eventually by @sttts in #1317
• reconciler/clusterworkspace: split into independent reconcilers by @sttts in #1288
• admin.kubeconfig: remove cross-cluster context by @sttts in #1312
• e2e/framework: wait some time until printing message in Eventually by @sttts in #1292
• authorizer: unify workspace access reason by @sttts in #1314
• admission: record the user creating a workspace by @stevekuznetsov in #1321
• Fix partial meta request determination logic by @ncdc in #1322
• ClusterWorkspaces: add optional spec.shard scheduling constraints by @sttts in #1318
• admission/apibinding: fail closed when OpenAPI does not validate by @sttts in #1301
• Update replace directive to last k/k commit by @davidfestal in #1306
• server/apiextensions: use indexes and fixes by @sttts in #1294
• front-proxy: add --authentication-{pass-on,drop}-groups by @sttts in #1305
• virtualworkspace: add a proxy for workspace content by @stevekuznetsov in #1323
• turn the watch cache on by @p0lyn0mial in #1240
• pkg/virtual: externalize VW name and remove extra informers by @sttts in #1328
• virtualworkspaces: propagate clarifying changes by @stevekuznetsov in #1329
• virtualworkspaces: allow access to remove iniitalizers by @stevekuznetsov in #1330
• pkg/admission: add reserved metadata admission plugin by @s-urbaniak in #1343
• e2e/syncer: switch to multi-arch image by @sttts in #1347
• Use logicalcluster.ClusterHeade...

v0.5.0-alpha.1

Milestone Blocker Epics

• #280 Deploy an Application: SA Kubeconfigs point to KCP
• #759 Code-generate scoping wrappers for arbitrary k8s.io/code-generator generated clients and informers
• #846 APIBindings: delete CRs when the APIBinding is deleted
• #912 Multi-Release-Epic: Consume Compute via Transparent Multi Cluster set up in a different workspace
• #914 Advanced Scheduling
• #981 Multi-Release-Epic: multi-workspace controller development
• #1013 Add Authorizer that let's APIExport owner restrict what a user can do with objects of an APIBinding

Source: https://github.com/kcp-dev/kcp/issues?q=is%3Aissue+label%3Amilestone-blocker+milestone%3Av0.5.0+is%3Aopen+label%3Aepic

What's Changed

• reconciler/scheduling/location: add missing index by @sttts in #970
• Remove WorkloadClusterSpec.Kubeconfig by @itdove in #974
• build(deps): bump actions/checkout from 2 to 3 by @dependabot in #962
• build(deps): bump actions/upload-artifact from 2 to 3 by @dependabot in #963
• build(deps): bump actions/setup-go from 2 to 3 by @dependabot in #964
• Towards more stable syncer by @ncdc in #955
• Default to -v=2 by @ncdc in #979
• reconciler/workload/scheduling: remove wrong resource enqueuing avoiding optimization by @sttts in #978
• bump(kube): 902041f0e10a by @ncdc in #986
• Make 'kubectl kcp workload sync' idempotent by @itdove in #975
• Stop dynamic informers when their APIs go away + a couple of ns controller fixes by @ncdc in #987
• Don't log when systemCRDProvider can't find ws by @ncdc in #991
• Fix workspace deletion e2e flake by @qiujian16 in #989
• Front proxy: set sane transport defaults and enable http2 to backends by @csams in #993
• ci: update to actions/upload-artifact@v3 by @sttts in #965
• docs/auth: document authorization by @s-urbaniak in #627
• docs/authorization.md: typo fix by @sttts in #995
• Advanced scheduling by @jmprusi in #942
• Revert "ci: update to actions/upload-artifact@v3" by @sttts in #1001
• Remove kube imports in staging by @ncdc in #1000
• Handle logical cluster move to kcp-dev/logicalcluster by @fabianvf in #1002
• cleanup ClusterRoleBinding on failed workspace creation by @geoberle in #1010
• Add front proxy by @kylape in #973
• Forbid kcp.dev CRD groups outside system:system-crds by @robinbobbitt in #1006
• Follow-ups of namespace scheduler fixing by @sttts in #997
• Fetch external hostname from kcp-front-proxy route. by @csams in #1014
• syncer: refactor into two normal controllers by @sttts in #1011
• Generate openapiv2 code for all KCP APIs by @davidfestal in #1023
• image: Add entrypoint to container image by @micahhausler in #1020
• Add helpers in CommonAPIResourceSpec by @davidfestal in #1024
• Prepare for other types of virtuall workspaces by @davidfestal in #1025
• Allow several virtual workspace commands by @davidfestal in #1027
• admission: complain about the type of the correct object by @stevekuznetsov in #1029
• ci: ensure no k8s.io modules are imported from outside of the fork by @stevekuznetsov in #1031
• reconcilers/workload: shut down controllers correctly by @sttts in #1034
• server: initialize logs early to avoid races by @sttts in #1036
• virtual: add ForwardingRegistry by @sttts in #1037
• Dynamic Virtual workspace implementation by @davidfestal in #1039
• reconciler/scheduling: fix tombstone handling on delete by @sttts in #1049
• authorization: nits by @stevekuznetsov in #1047
• Misc pre-754 changes by @sttts in #1053
• Syncer virtual workspace by @davidfestal in #754
• virtual: fix some GoDoc by @stevekuznetsov in #1048
• dynamic-informer: stop informers when context is done by @sttts in #1054
• Update Syncer VSCode launch configuration by @davidfestal in #1068
• virtual/syncer: add documentation to the URL parsing by @stevekuznetsov in #1075
• virtual: expand APIDefinitionSetGetter by @stevekuznetsov in #1076
• add kcp workload cordon/uncordon/drain by @chrisahl in #1005
• Use private gitops repo to deploy from main by @kylape in #928
• e2e test transparent SA rewrite in downstream deployment by @geoberle in #1044
• Adds virtualworkspaceurls-controller by @jmprusi in #1018
• Add the WorkloadCluster name to the current context in the syncer virtual workspace by @davidfestal in #1065
• ci: Config author for commit to gitops repo by @kylape in #1079
• Avoid trying to sync namespaces as namespaced resources. by @davidfestal in #1091
• admission: make api binding mutating admission work by @stevekuznetsov in #1080
• test/e2e: quiet down spammy log messages by @stevekuznetsov in #1093
• apibinding: remove initializers by @stevekuznetsov in #1095
• pkg/server: add workspace annotation by @ibihim in #1042
• add initial revision of FAQ by @pweil- in #1045
• test/e2e: quiet down more spam by @stevekuznetsov in #1094
• Fix make test-e2e WHAT so that it works by using WHAT-TESTS by @chrisahl in #1099
• virtual: factor label selector injection out by @stevekuznetsov in #1055
• Add break when cluster found by @itdove in #1106
• virtual: expose fields in internal api struct by @stevekuznetsov in #1107
• admission: add a mutating webhook for clusterworkspaces by @stevekuznetsov in #1081
• Apply audit config to server by @kylape in #1109
• Wire syncer to the virtual workspace by @davidfestal in #1067
• test: stop using require.Equal for composite objects by @stevekuznetsov in #1102
• Deflake namespace reconciler e2e by @ncdc in #1114
• ci: Wrap commit ID in quotes by @kylape in #1115
• Bump kcp-dev/kubernetes dependency by @fabianvf in #1112
• Support APIExport identity in the Syncer virtual workspace by @davidfestal in #1111
• Sync from multiple workspaces by @davidfestal in #927
• Split workloads/namespace controller in namespace and resources controllers by @sttts in #1108
• Makefile: fix WHAT for test-e2e by @sttts in #1117
• reconciler/workloads/apiexport: fix missing byWorkspace index for exports by @sttts in #1118
• e2e: print failing server log with newlines by @sttts in #1120
• apis/workloads: move scheduling labels here by @sttts in #1119
• reconciler/workloads/apiexport: don't stomp all APIExport, but only those named 'kubernetes' by @sttts in #1121
• forbid resource creation when APIBinding is deleting by @qiujian16 in #1043
• Delete custom resources when apibinding is deleted by @qiujian16 in #1040
• Don't sync ServiceAccounts by default by @jmprusi in #1123
• Fix typo in goals.md by @pavolloffay in #1122
• api: Enables the binding of APIs in protected groups by @astefanutti in #1104
• hack: Remove conflicting bash flag by @rgolangh in #1126
• virtualworkspace: inspect available verbs from storage by @stevekuznetsov in #1101
• hack: check for missin...

v0.4.0-alpha.0

What's Changed

• manifest: Add explicit port number to external hostname by @kylape in #819
• Enable CI/CD for release branches by @kylape in #822
• kubectl-kcp: fix user-agent regression by @sttts in #824
• pkg/gvk: remove by @sttts in #825
• kubectl-kcp: add --short to current command for use in prompt by @sttts in #826
• tenancy: clean up ClusterWorkspaceShard type by @sttts in #827
• Referencing k8s CRB by workspace admins by @slaskawi in #762
• dockerfile: Use make to build go binaries by @kylape in #850
• Ignore missing namespace on p-cluster by @csams in #851
• Fix git version string returned by kcp server by @kylape in #859
• virtual: Grant 'access' verb to user upon workspace creation by @kylape in #858
• workaround for #730: API import does not work when adding the same cluster into multiple workspaces by @fgiloux in #856
• actions: add Github's beta add-to-project by @sttts in #866
• actions/add-to-project: set environment to projects by @sttts in #868
• e2e Syncer fixture by @jmprusi in #861
• manifest: add resources to sync by @ncdc in #871
• Stop apiimporter, syncer, heartbeat from fighting over the Ready condition by @csams in #864
• Update namespace scheduler to enqueue resources on scheduling change by @marun in #749
• tenancy: Increase ClusterWorkspace name max length to 63 characters by @astefanutti in #834
• reconcilers: move apis.kcp.dev controllers into sub-dir by @sttts in #847
• Add clustername to apiimporter manager, syncer manager, and namespace reconciler logs by @csams in #874
• server: Set external address based on completed serving config by @astefanutti in #855
• Move api importer to the syncer by @marun in #810
• virtual: Disable workspace deletion for now by @kylape in #880
• manifest: set --v=2 by @ncdc in #885
• specsyncer: fix when logging namespace creation by @ncdc in #884
• syncer: add more details to log messages by @ncdc in #886
• syncer: fix logging (Info->Infof) by @ncdc in #888
• Disable deploy pipeline on release branch by @kylape in #882
• Apply resource constraints to kcp instance by @kylape in #863
• Check out code in deploy job by @kylape in #892
• Remove the global config embedding. by @jpeach in #894
• Remove stty dependency. by @jpeach in #895
• Replace managed syncer with deployed syncer by @marun in #881
• e2e: Enable testing against a deployed syncer with kind by @marun in #909
• Delete sync managers (replaced by deployed syncers) by @marun in #911
• e2e/authorizer: make test idem-potent for COUNT > 1 by @sttts in #921
• update / fix development guide by @xrstf in #918
• Add e2e-shared-server task to ci-docs-only flow by @kylape in #924
• apibindings: check for conflicts, refactor controller by @ncdc in #823
• docs: add virtual-workspaces.md by @sttts in #926
• Upgrade openshift-goimports. by @jpeach in #929
• cli/workload: fix "Use" string by @sttts in #931
• cmd/kcp: add --feature-gates flag by @sttts in #930
• server: fix --features-gates typo by @sttts in #936
• Ensure the kcp config root has reasonable permissions. by @jpeach in #908
• apis/tenancy: add validation to (Cluster)Workspace.spec.type by @sttts in #935
• apis: non-pointer subresources in APIResourceSchema for easier equality by @sttts in #938
• apis: allow APIResourceSchemas with single word groups used by kube by @sttts in #937
• Add branch name to the tag list of kcp and syncer images by @fgiloux in #887
• delete resources in workspace when workspace is deleted by @qiujian16 in #913
• Revert "virtual: Disable workspace deletion for now" by @sttts in #939
• apis: add scheduling.kcp.dev/v1alpha1 API by @sttts in #829
• Enabling Validating and Mutating Webhook's for KCP by @shawn-hurley in #818
• e2e/syncer: check deployment available independently and output yaml by @sttts in #949
• CONTRIBUTING.md: add feature-gates by @sttts in #951
• Add APIExport controller by @ncdc in #877
• ci: make artifact names unique by @ncdc in #954
• e2e: create syncer log artifacts when running in kind by @sttts in #952
• Adding admission plugin to validate CRDs by @shawn-hurley in #901
• syncer: don't sync standard resources twice by @sttts in #956
• e2e: only collect syncer logs for deployed syncer by @sttts in #957
• ci: use cytopia/upload-artifact-retry-action to survive transient errors by @sttts in #960
• e2e/syncer: stop (some of) the bleeding by @sttts in #959
• fix syncer image name by @geoberle in #953
• workloads: make --auto-publish-apis default to on by @sttts in #961

New Contributors

• @jpeach made their first contribution in #894
• @xrstf made their first contribution in #918
• @qiujian16 made their first contribution in #913
• @geoberle made their first contribution in #953

Full Changelog: v0.3.0-beta.1...v0.4.0-alpha.0

v0.3.0-beta.1

What's Changed

• Implement root workspace and organization workspaces by @sttts in #508
• Add a label to deactivate automatic namespace scheduling by @astefanutti in #537
• e2e: Ensure cfg is written to temp dir for virtual workspace test by @marun in #585
• e2e: Remove scheduler dependency on controller patch method by @marun in #586
• Refactor namespace scheduler queueing behavior for testability by @marun in #587
• ci: don't run e2e & other tests for documentation-only PRs by @avinal in #589
• Rename namespace scheduler labels (kcp.dev -> workloads.kcp.dev) by @marun in #593
• Add epic template, update CONTRIBUTING by @ncdc in #594
• kube: back to upstream (dd0f1685f84) by @ncdc in #599
• Generators outside gopath by @ncdc in #533
• refactor: remove syncChecks in controllers by @ReToCode in #579
• Refactor namespace scheduler cluster assignment for testability by @marun in #559
• Add .github/ISSUE_TEMPLATE/* to paths to ignore for CI by @avinal in #603
• Refactor namespace scheduler status maintenance for testability by @marun in #592
• Add workspace invariant of valid baseURL by @sttts in #582
• Ensure consistent logging of resource names (s+%q|%q/%q+%s|%s/%s+) by @marun in #600
• e2e: Cleanup namespace scheduler e2e in light of unit-test additions by @marun in #598
• Rename the Cluster type and its group for clarity by @marun in #605
• admission: simplify informer sync in ClusterWorkspaceTypeExists by @sttts in #609
• admission: add SubjectAccessReview to ClusterWorkspaceType use by @sttts in #611
• Document ClusterWorkspaceType authz by @sttts in #612
• e2e: Fix broken workspacetype initializer test by @marun in #616
• README clarifications by @ncdc in #576
• admission: add ClusterWorkspaceType plugin to reserve organization type for root by @sttts in #608
• Set up deploy pipeline using Github Actions by @kylape in #483
• apis: add APIExport/Binding/ResourceSchema types by @sttts in #583
• clusterworkspace: admission: fix initializers check by @ncdc in #629
• Remove workloadclusters, apiresourceimports, negotiatedapiresources from root and org workspaces by @sttts in #619
• Rename workspaces to clusterworkspaces by @slaskawi in #639
• kubectl-kcp: add ws alias for workspace by @jbpratt in #637
• Adapt personal workspaces to orgs by @davidfestal in #613
• e2e: Enable use of persistent server fixture by @marun in #614
• config/organization: fix clusterrolebindings by @sttts in #646
• Increase V log level for resources the DynamicDiscoverySharedInformerFactory can't list+watch by @pradeepnnv in #652
• e2e: Switch to DefaultConfig() function from Config("system:admin") by @marun in #650
• e2e: Remove unused constant to satisfy linter by @marun in #660
• Move TEST_ARGS for make test-e2e to after the package list by @marun in #649
• ci: use lint make target by @jbpratt in #635
• make signal handling consistent by @ramessesii2 in #615
• kubectl-kcp: fix logic to derive the orgClusterName by @sttts in #663
• Rbac for orgs in virtual workspaces by @davidfestal in #648
• bootstrap: support create-only resources by @ncdc in #675
• virtual-workspaces: wire into kcp server and remove topology leaking to cli plugin by @sttts in #640
• Better scope management and CLI plugin cleanup by @davidfestal in #673
• disable etcd fsync on github actions tests, fail fast if kcp binary not found and increase kcp verbosity by @aojea in #656
• kubectl-kcp: readd parent logic dropped in rebase by @sttts in #677
• prototype2-script: adapting the script to org workspaces by @sttts in #578
• Handle name transformation to avoid default object conflicts by @jmprusi in #679
• prototype2-script: Fix virtual-workspace-address option to start KCP by @astefanutti in #683
• server: add --experimental-bind-free-port by @sttts in #666
• Update deployment manifest by @kylape in #682
• Rename Github Actions step to avoid conflict by @kylape in #689
• Add DCO information by @ncdc in #669
• prototype2-script: the Ingress demo can run on MacOS by @astefanutti in #584
• Wildcard cluster authorization test by @slaskawi in #664
• Fix resource bootstrapping flake by @aojea in #672
• config/universal: create default namespace by default by @sttts in #691
• e2e/workspace: fix flake by quorum read shard before moving to initializing by @sttts in #700
• e2e/virtual: fix races due to stale authz informers by @sttts in #703
• e2e: Pass t to DefaultConfig() to allow failing on error by @marun in #694
• e2e/virtual: fix flake failing on not true WorkspaceShardValid condition by @sttts in #705
• apis/apiresource: fix subresource panic by @sttts in #699
• Link Github projects board from CONTRIBUTING.md by @sttts in #706
• Start service account controller and enable legacy+bound service account token authn+authz by @sttts in #681
• Add CICD options to kubectl for external hostname discovery by @csams in #697
• Convert cmd/syncer/main.go to be a cobra.Command by @ramessesii2 in #601
• contrib/prototype3: start demo script by @sttts in #704
• e2e: Update authorizer testing to use shared fixture by @marun in #698
• kcp terminology doc by @pkprzekwas in #684
• admission: move to runtime.DefaultUnstructuredConverter by @sttts in #577
• reconcilers: get rid of clientcmdapi.Config and pass rest.Config by @sttts in #711
• Enable the RootCACertPublisher by @jmprusi in #667
• kubectl-kcp: point to authInfo config instead of clone by @kylape in #686
• Proxy to terminate TLS and handle client cert auth by @csams in #659
• [kcp-plugin] add org name to kubectl-kcp ws use|current output by @varshaprasad96 in #693
• README.md: Adds the prototype2 demo screencast by @jmprusi in #626
• apis/apibinding: make reference required by @sttts in #713
• apibinding: add admission by @ncdc in #653
• reconcilers: add user-agent to all controller clients by @sttts in #712
• Support adding labels to workspace on creation by @marun in #710
• Fix TestClusterController tests by @jmprusi in #722
• Make namespace scheduling opt-in via label on containing workspace by @marun in #695
• Adds serviceaccounts,secrets and configmaps GVRs to the default Syncer sync list by @jmprusi in #680
• to-kubeconfig is not required, if used InCluster is not set by @aojea in #733
• instructions to install a syncer on a pcluster by @aojea in #723
• go get was deprecated and no longer works with 1.18 by @aojea in #690
• apis/apiexports: remove status.resourceSchemasInUse by @sttts in #732
• Add initial controller developer docs by @ncdc in #734
• e2e: Update workspace shard tests to use shared fixture by @marun in #736
• fix unknown command options for kcp by @UtkarshChaurasia in #737
• kcp-front-proxy: implement options pattern by @sttts in #715
• return error on context cancellation by @A...