v0.5.0

Changelog

✨ New Features

• 0241603: feat!: deprecating v1alpha1 api (@prometherion)
• e61152a: feat(api): additional metadata for pods (@prometherion)
• 2792b58: feat(chart): allow custom role bindings (@oliverbaehler)
• 1e70cd3: feat(helm): additional metadata for pods (@prometherion)
• 4b89895: feat(kustomize): additional metadata for pods (@prometherion)
• b27780d: feat(manager): add forbidden annotations, forbidden labels to service options (@CharlieR-o-o-t)
• c58b46c: feat(tenant): add label with tenant name for each tenant (@oliverbaehler)
• d944304: feat: additional metadata for pods (@prometherion)
• 242fdd2: feat: ensuring well-known label (@prometherion)

🐛 Bug fixes

• 21c0d04: fix(controller): respect group quotas for number of operating system threads allocated to goroutines (@oliverbaehler)
• 74d3ac5: fix(controller): respect metadata of replicated items (#922) (@oliverbaehler)
• 3c85657: fix(e2e): ensuring well-known label (@prometherion)
• c208f5e: fix(makefile): missing webhook field (@prometherion)
• 8ed302d: fix: v1alpha1 api type has been removed (@prometherion)

🛠 Dependency updates

• b58fe04: feat(deps): Bump sigs.k8s.io/cluster-api from 1.6.0-beta.1 to 1.6.0 (#920) (@dependabot[bot])
• 181cb67: feat(deps): bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 (#912) (@dependabot[bot])

📖 Documentation updates

• 14eb8f2: docs: additional metadata for pods (@prometherion)
• 2c70bf0: docs: deprecating v1alpha1 api (@prometherion)

🚀 Build process updates

• 591a66e: ci(deps): Bump actions/setup-go from 4.1.0 to 5.0.0 (#921) (@dependabot[bot])
• c30b5e9: ci(deps): Bump anchore/sbom-action from 0.15.0 to 0.15.1 (#919) (@dependabot[bot])
• 3dc2567: ci(deps): Bump aquasecurity/trivy-action from 0.14.0 to 0.15.0 (#918) (@dependabot[bot])
• 5e8d0a0: ci(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 (@dependabot[bot])
• e9ed7b2: ci(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (#917) (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.2...v0.5.0

Docker Images

• ghcr.io/projectcapsule/capsule:v0.5.0
• ghcr.io/projectcapsule/capsule:latest

v0.4.2

Changelog

🐛 Bug fixes

• 34977aa: fix: ensuring resourcequota name doesn't break DNS-1123 (@prometherion)
• 2e5c232: fix: sync quota values from tenant to resourcequota object (@prometherion)
• c0e48d1: fix(quota-resources): skipping from count delete-marked objects (@prometherion)

🛠 Dependency updates

• 5e13ac9: feat(deps): bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1 (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.1...v0.4.2

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.2
• ghcr.io/projectcapsule/capsule:latest

v0.4.1

Changelog

✨ New Features

• 25b4a35: feat(ux): namespace oncrete hook to check namespace exsistence (@prometherion)

🐛 Bug fixes

• cde44ba: fix(controller): copy ownerreference from oldNs on namespace UPDATE admission requests (@oliverbaehler)

🛠 Dependency updates

• d09a1c5: feat(deps): bump github.com/onsi/gomega from 1.29.0 to 1.30.0 (@dependabot[bot])
• 98b5c3f: feat(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (@dependabot[bot])

🚀 Build process updates

• 2baf604: ci(deps): bump aquasecurity/trivy-action from 0.13.1 to 0.14.0 (#886) (@dependabot[bot])
• 34fc260: ci(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#887) (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.0...v0.4.1

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.1
• ghcr.io/projectcapsule/capsule:latest

v0.4.0

Changelog

🛠 Dependency updates

• 72f25c8: feat(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1 (@dependabot[bot])
• 6fe400a: feat(deps): bump go.uber.org/zap from 1.25.0 to 1.26.0 (@dependabot[bot])
• a4805b7: feat(deps): bump sigs.k8s.io/cluster-api (@dependabot[bot])

📖 Documentation updates

• 2d5b1e3: docs(repo): add dependency policy (@oliverbaehler)
• 1a7b0e1: docs(repo): migrate development guide (@oliverbaehler)
• e55bac9: docs: security self assessment (@oliverbaehler)

🚀 Build process updates

• ad8957c: ci(deps): bump amannn/action-semantic-pull-request from 5.3.0 to 5.4.0 (#881) (@dependabot[bot])
• 9750302: ci(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.13.1 (@dependabot[bot])
• 7acf60a: ci(deps): bump helm/chart-testing-action from 2.4.0 to 2.6.0 (#875) (@dependabot[bot])
• efc3a1e: ci(deps): bump wagoid/commitlint-github-action from 5.4.3 to 5.4.4 (@dependabot[bot])
• e9c756e: ci(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.0-rc.3...v0.4.0

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0
• ghcr.io/projectcapsule/capsule:latest

v0.4.0-rc.3

Changelog

✨ New Features

• ed854f9: feat(chart): annotations and maintainers (@oliverbaehler)
• 6ecf478: feat(image): release arm artifact (@oliverbaehler)

🛠 Dependency updates

• e0548e1: feat(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (@dependabot[bot])
• 13c5377: feat(deps): bump golang.org/x/sync from 0.2.0 to 0.4.0 (@dependabot[bot])

📖 Documentation updates

• 2cef776: docs(repo): add changelog (@oliverbaehler)
• 5c18909: docs(repo): add development (@oliverbaehler)
• 10bbf39: docs(repo): add sbom reference (@oliverbaehler)
• 21eadaf: docs(repo): add security insights (@oliverbaehler)
• 3bd4bc6: docs(repo): documentation improvements (@oliverbaehler)
• 682e372: docs(repo): improve report process (@oliverbaehler)
• 4ad905e: docs: using cncf logo (@prometherion)

🚀 Build process updates

• 0e9d15d: ci(repo): fix token permissions (@oliverbaehler)
• 747af46: ci(repo): pull request linter (@oliverbaehler)
• 358692d: ci: bump actions/setup-node from 3.8.1 to 4.0.0 (#855) (@dependabot[bot])
• cd1736c: ci: bump oliverbaehler/github-actions from 0.1.0 to 0.1.1 (#832) (@dependabot[bot])
• 3d0a781: ci: bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#854) (@dependabot[bot])
• 8aa527f: ci: bump securego/gosec from 2.18.1 to 2.18.2 (@dependabot[bot])

📦 Other work

• 364332c: deps(controller-runtime): upgrading to v0.16.3 (@prometherion)
• c42c9ed: deps(go): upgrading to 1.20 (@prometherion)

Thanks to all the contributors!

Full Changelog: v0.4.0-rc.2...v0.4.0-rc.3

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0-rc.3
• ghcr.io/projectcapsule/capsule:latest

v0.4.0-rc.2

Changelog

🐛 Bug fixes

• 851c3a3: fix(ci): fetch previous tags (@oliverbaehler)
• 543757b: fix(docs): url for artifacthub badge (@prometherion)

📖 Documentation updates

• 147f973: docs(community): pointing to the community meetings repo (@prometherion)
• d232791: docs(repo): add roadmap file (@oliverbaehler)
• 34d6416: docs(security): add security process (@oliverbaehler)

Thanks to all the contributors!

Full Changelog: v0.4.0-rc.1...v0.4.0-rc.2

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0-rc.2
• ghcr.io/projectcapsule/capsule:latest

v0.4.0-rc.1

Changelog

Thanks to all the contributors!

Full Changelog: ...v0.4.0-rc.1

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0-rc.1
• ghcr.io/projectcapsule/capsule:latest

v0.3.3

Hotfixes

• Go version update to 1.19.10 #779 @prometherion @meetdpv
• Unable to create PVC for pre-provisioned PV #783 @MaxFedotov
• Dropping ownerReference for {Global}TenantResource namespacedItems #781 @MaxFedotov

v0.3.2

Enhancements

• Updating kubernetes-sigs/controller-runtime@v0.15.0 #766 @prometherion
• Updating support to Kubernetes 1.27 #762 @prometherion
• Updating to Ginkgo v2 #765 @prometherion

Hotfixes

• Go 1.19 upgrade for security reasons #759 @slimm609
• Missing ConversionReviewVersions in updateTenantCustomResourceDefinition function #752 @MaxFedotov

v0.3.1

Docker images are hosted on docker.io and can be pulled with the following command:

docker pull clastix/capsule:v0.3.1

Helm chart tested with the following version is v0.4.1, remember to update your Helm Charts locally.

helm repo add clastix https://clastix.github.io/charts
helm repo update

Enhancements

• Prevent replicated resources by TenantResource to get deleted by the Tenant Owner #732 @prometherion

Hotfixes

• CRD URLs in the upgrade guide are invalid #730 @jwilkicki @prometherion
• Webhook cannot mutate Pods generated from Deployment with Rancher #741 @maxgio92 @prometherion
• Unable to patch the namespace not managed by Capsule #733 @sagar-jadhav