Releases: kcp-dev/kcp
Releases · kcp-dev/kcp
v0.8.0
What's Changed
- VW: Fix permission checking in
rootby @davidfestal in #1686 - Add more logging by @ncdc in #1692
- make internal apis available for apiexport permission claims by @robinbobbitt in #1676
- reconciler/{apis,scheduling,tenancy}: use structured, contextual logging by @stevekuznetsov in #1695
- Syncer: refuse to work on sync target UID discrepancy. by @jmprusi in #1687
- Completely cleanup support of personal workspaces in top-level organizations by @davidfestal in #1685
- Makefile: set UNSAFE_E2E_HACK_DISABLE_ETCD_FSYNC=true in all e2e tests by @sttts in #1704
- *: remove member verb by @s-urbaniak in #1711
- Replace clusterworkspaces/{content,workspace} subresources in RBAC with workspaces{/content,} by @sttts in #1712
- virtual/workspace: use real authorizer by @sttts in #1710
- server: hardens the remote shard registration by @p0lyn0mial in #1700
- pkg/virtual/syncer/builder: fix incorrect comment by @jmprusi in #1713
- Add --batteries-included by @sttts in #1688
- updates the tests building a list of VirtualWorkspaceURLs assigned to ClusterWorkspaceShards by @p0lyn0mial in #1699
- exclude authn/authz apis from claimable list by @robinbobbitt in #1716
- logging: use kind-prefixed fields instead of string-formatting by @stevekuznetsov in #1705
- Fixes log line formatting by @m1kola in #1718
- Part 14: scope clients in tests/e2e/framework by @varshaprasad96 in #1709
- Remove the redirect from shard to virtual workspaces by @davidfestal in #1706
- Add goreleaser by @sttts in #1721
- pkg/reconciler/workload: move to structured, contextual logging by @stevekuznetsov in #1719
- goreleaser: increase timeout and reduce archs by @sttts in #1731
- goreleaser: add write permissions to GITHUB_TOKEN by @sttts in #1735
- Dockerfile: add kubectl by @sttts in #1737
- logging: stop using formatted strings for object identifiers by @stevekuznetsov in #1730
- Part 13: Scope clients in test/e2e/virtual by @varshaprasad96 in #1707
- Refactor permission claim labels reconciler by @shawn-hurley in #1617
- hack: verify-go-version.sh in all the repo by @sttts in #1738
- cli/workspace: don't get Workspace in parent on absolute use, but check inside the workspace by @sttts in #1726
- Update Slack channel name by @ncdc in #1744
- virtual: stutter less in constructors by @stevekuznetsov in #1747
- syncer: handle only the k8s export by @stevekuznetsov in #1748
- Permission claim fixes / cleanups by @sttts in #1745
- Part 15: Scope clients in test/e2e/fixtures by @varshaprasad96 in #1732
- the identity provider gets data from a local cm too by @p0lyn0mial in #1727
- Add ppc64le support by @snehakpersistent in #1757
- adds ApiExportIdentityProviderController by @p0lyn0mial in #1725
- docs/syncer.md: add missing instructions by @s-urbaniak in #1746
- .github: fix community meeting link by @sttts in #1766
- Generate CRD defaults for known types by @lionelvillard in #1769
- Start centralizing APIExport indexers by @ncdc in #1762
- Fix image build by @ncdc in #1771
- Add content, toplevel audit annotations by @ncdc in #1767
- Generic helper for consistent post-reconcile spec and status updates by @csams in #1754
- Set service protocol defaults by @lionelvillard in #1783
- Add missing autoscaling single-word group name by @lionelvillard in #1785
- bootstrap: create the default ns in the system:shard ws by @p0lyn0mial in #1782
- Ignore .goreleaser.yaml in GH CI by @ncdc in #1789
- cache-server scaffolding by @p0lyn0mial in #1790
- wires the APIIdentityCacheController by @p0lyn0mial in #1781
- Introduce staticcheck linter for deprecations by @varshaprasad96 in #1798
- Fix schemacompat npe by @ncdc in #1802
- ddsif: exclude v1beta1 Workspaces by @ncdc in #1805
- Fix bug allowing metadata edits to e.g. creationTimestamp for built-in types as CRDs by @ncdc in #1809
- Fix leftover resource when deleting a namespace by @jmprusi in #1743
- synctarget export controller by @qiujian16 in #1624
- Change issue template to newer issue forms by @avinal in #1196
- cache-server: starts empty apiextentions-server by @p0lyn0mial in #1811
- controllers: avoid double copy of the rest config by @p0lyn0mial in #1780
- pkg/server: use structured, contextual logging by @stevekuznetsov in #1797
- Part 18: Scope ingress controller by @varshaprasad96 in #1817
- authorization: add system:masters-only deep SAR via X-Kcp-Internal-Deep-SubjectAccessReview header by @s-urbaniak in #1739
- Part 19: Scoped cmd/front-proxy by @varshaprasad96 in #1819
- e2e/watchcache: remove ddsif testing by @ncdc in #1761
- cache-server: expose apiresourceschemas and apiexports by @p0lyn0mial in #1815
- bump to the latest kube level by @p0lyn0mial in #1832
- various: logging cleanups by @ncdc in #1837
- Fix GH issue template labels by @ncdc in #1825
- Watch cache: use resource.group for object type in log messages and metrics by @ncdc in #1834
- etcd3: include GroupResource in logs/metrics by @ncdc in #1839
- Fix NewNamespaceLocator param name by @ncdc in #1844
- Add exported claims by @shawn-hurley in #1831
- Lint for contextual logging by @nrb in #1835
- Cluster scoped quota by @ncdc in #1846
- Adds E2E test to verify Audit logs contain workspace annotation by @bipuladh in #1830
- sharded-test-server: support standalone vw server by @ncdc in #1800
- cache-server: set the storage prefix to /cache by @p0lyn0mial in #1850
- deletors: skip projected resources by @ncdc in #1860
- e2e: save data in some temporary directory by @stevekuznetsov in #1861
- Add more e2e test cases for permission claims by @ncdc in #1864
- pkg/authorization: add audit logging by @s-urbaniak in #1833
- sharded-test-server: log the full command line with parameters by @pkprzekwas in #1869
- Syncer: Adds validation to make --sync-target-uid flag required by @jmprusi in #1867
- home-ws: wait for tenancy binding readiness by @ncdc in #1872
- cache-server: provides client-related functionality for dealing with a shard on the HTTP level by @p0lyn0mial in #1853
- modified cmd.Use for kubectl-workspaces by @apoorvajagtap in #1756
- bump to the latest kube level by @p0lyn0mial in #1851
- Makefile: add update-contextual-logging by @sttts in #1876
- resource controller: fix NPE by @ncdc in #1880
- *: make import aliases consistent by @stevekuznetsov in #1881
- KCP: stop messing with the RawPath by @p0lyn0mial in #1883
- cache-server: adds WithShardScope HTTP filter by @p0lyn0mial in #1841
- virtual: Support SSA patch requests for non-existent objects by @astefanutti in #1854
- virtual/apiexport: serve wildcard apibindings by @sttts in #1563
- Only serve compatible APIs for syncTarget by @Qi...
Contributors
ncdc, nrb, and 21 other contributors
Assets 15
v0.7.10
v0.7.9
v0.7.8
What's Changed
- [release-0.7] Fix schemacompat npe by @openshift-cherrypick-robot in #1803
Full Changelog: v0.7.7...v0.7.8
Contributors
openshift-cherrypick-robot
Assets 15
v0.7.7
What's Changed
- [release-0.7] Add ppc64le support by @openshift-cherrypick-robot in #1788
Full Changelog: v0.7.6...v0.7.7
Contributors
openshift-cherrypick-robot
Assets 15
v0.7.6
What's Changed
Full Changelog: v0.7.5...v0.7.6
Contributors
ncdc
Assets 13
v0.7.5
What's Changed
- [release-0.7] syncer: handle only the k8s export by @openshift-cherrypick-robot in #1750
Full Changelog: v0.7.4...v0.7.5
Contributors
openshift-cherrypick-robot
Assets 13
v0.7.4
What's Changed
- Forbid system:masters access to kcp-front-proxy, make tests shard aware by @s-urbaniak in #1448
- server/home: create home workspace with final URL on ~ access by @sttts in #1530
- cli: require absolute type with --ignore-existing by @sttts in #1533
- Fix typos in APIExport bootstrapped
ClusterRoleBindings by @davidfestal in #1540 - Add KCP CLI arguments to enable home workspaces as well as specific options, especially the groups bound to the get/create ~ permissions by @davidfestal in #1539
- server: add --shard-external-url by @ncdc in #1542
- ddsif: fix lost event handlers by @sttts in #1550
- Add shortName ws for workspace by @xingxingxia in #1524
- reconciler/apiexport: switch from rsa4096 to 256 bit cryptographic random string by @sttts in #1548
- cli: take URL from Workspace also in absolute references by @sttts in #1554
- ddsif: replace discovery polling by @ncdc in #1473
- sharded-test-server: set shard external URL to front-proxy by @sttts in #1552
- Part 2: Scoping controllers in pkg/server by @varshaprasad96 in #1504
- Part 3: Make APIResource controller client calls scoped by @varshaprasad96 in #1558
- server/home: improve log output by @sttts in #1549
- server/home: check owner properly by @sttts in #1493
- Part 4: Wrap client calls in API Binding and Heartbeat controller by @varshaprasad96 in #1569
- apis/tenancy: rename tenancy.kcp.dev/owner -> experimental.tenancy.kcp.dev/owner by @sttts in #1565
- introduce system:shard logical cluster by @p0lyn0mial in #1573
- e2e/clusterworkspacedeletion: deflake by @ncdc in #1576
- syncer/namespace-locator: Rename path to workspace by @jmprusi in #1566
- Adding CEL Validation for Permission Claim by @shawn-hurley in #1529
- e2e: reduce client-side throttling by @ncdc in #1543
- kcp server: introduce root-shard-kubeconfig-file flag by @p0lyn0mial in #1575
- Syncer: Refactors KCPClusterName to SyncTargetWorkspace. by @jmprusi in #1574
- docs: tweaks to the Location concept description by @markmc in #1586
- remove unused apiResourceSchemaIndexer from the apibinding controller by @p0lyn0mial in #1589
- Add workspaces overview to README by @MikeSpreitzer in #1584
- Don't add /clusters/ prefix to /services/ requests by @kylape in #1590
- e2e/clusterworkspacedeletion: use correct root shard system:master client for deletion checks by @sttts in #1570
- e2e: use a better helper for waiting for readiness by @stevekuznetsov in #1588
- Part 5: Wrap controllers in scheduling/tenancy pkgs by @varshaprasad96 in #1578
- Part 6: Scope workload controllers by @varshaprasad96 in #1595
- Extend README with introduction to workspaces by @MikeSpreitzer in #1594
- bootstrap the root workspace only on the root shard by @p0lyn0mial in #1587
- run the clusterworkspaceshard controller only on the root shard by @p0lyn0mial in #1597
- enable ExperimentalWatchProgressNotifyInterval for etcd by @p0lyn0mial in #1596
- clusterworkspace scheduling: default to assigning to the root shard by @p0lyn0mial in #1585
- Makefile improvements by @sttts in #1606
- apis/apis: split out CEL test helper into pkg/apis/test by @sttts in #1603
- clusterworkspacetypes: simplify system types by @sttts in #1607
- k8s 1.24 rebase by @stevekuznetsov in #1568
- cli/sync: create service account secret in advance to trigger token creation by @sttts in #1613
- embeddedetcd: restructure with options/config/server pattern by @sttts in #1608
- make: explicitly list build deps by @stevekuznetsov in #1612
- apibinding controller with root shard informers by @p0lyn0mial in #1598
- server/embeddedetcd: fix npe by @sttts in #1619
- server: restructure with options/config/server pattern by @sttts in #1609
- Documentation: Add Home, Homebucket, and Homeroot workspace info by @pweil- in #1561
- add exports to synctarget API for location workspace by @qiujian16 in #1571
- logging: move clusterworkspaceshard reconciler to structured logging by @stevekuznetsov in #1614
- Add owners files and notes on review/approver role to CONTRIBUTING.md by @pweil- in #1601
- home workspaces: handle slow bootstrapping by @ncdc in #1633
- build(deps): bump imjasonh/setup-ko from 0.4 to 0.5 by @dependabot in #1630
- Fix print column on location labels by @qiujian16 in #1638
- webhook: fix npe by @ncdc in #1639
- Refactor ns scheduler for location workspace by @qiujian16 in #1618
- Enable avoiding using podman by @davidfestal in #1628
- move Config to separate file by @deitch in #1637
- Add initial per-workspace quota support by @ncdc in #1236
- Part 8: Wrap clients in test/e2e/apibinding by @varshaprasad96 in #1640
- e2e: reduce global, trivial Sheriff fixture by @sttts in #1642
- server: keep retrying bootstrapping by @sttts in #1641
- remove deprecated command from use description by @ReToCode in #1645
- virtual: give VWs an order in order to control precedence by @sttts in #1643
- Update minimum Go version in CONTRIBUTING.md doc to 1.18 by @dseapy in #1651
- Misc syncer e2e cleanups and fixes by @sttts in #1652
- wire TemporaryRootShardKcpSharedInformerFactory by @p0lyn0mial in #1572
- Cleanup Syncer to prepare for Syncer Virtual Workspace transformations by @davidfestal in #1629
- syncer: move namespace locator normalization to indexer by @sttts in #1656
- Fix flaky informers by @ncdc in #1649
- Makefile: allow WAIT=1 to keep server running in test-e2e-{sharded,shared} targets by @sttts in #1659
- SyncTarget Uniqueness by @jmprusi in #1600
- apis: add age column where it makes sense by @sttts in #1658
- Part 9: Scope client calls in test/e2e by @varshaprasad96 in #1648
- reconciler/workload/resource: remove syncer finalizer when SyncTarget is gone by @sttts in #1293
- apis/workload/v1alpha1: Fix comment as the value of InternalSyncTargetPlacementAnnotationKey changed by @jmprusi in #1660
- e2e: undo ForeverTestTimeout/30 by @ncdc in #1662
- e2e/apibinding: improve log output and workspace names by @sttts in #1664
- apis/scheduling: remove unused PlacementState struct and constants by @sttts in #1655
- e2e: fix long api groups exhausting label value length by @sttts in #1663
- apis/workload: remove unused func by @sttts in #1668
- api change: adds VirtualWorkspaceURL to ClusterWorkspaceShard by @p0lyn0mial in #1669
- Switch to cluster name annotation by @ncdc in #1673
- Labels sync targets with the SyncTargetKey for reverse lookup by @jmprusi in #1672
- Part 12: Scope syncer and workspacetype tests by @varshaprasad96 in #1678
- use ClusterWorkspaceShard.VirtualWorkspaceURL by @p0lyn0mial in #1670
- apiexport controller: assigns ClusterWorkspaceShard.VirtualWorkspaceURL by @p0lyn0mial in #1681
- runs e2e-sharded with two shards by @p0lyn0mial in #1653
- Part 10: scope cross_logical_cluster tests by @varshaprasad96 in #1667
- Part 11: Sco...
Contributors
ncdc, markmc, and 18 other contributors
