v2.4.0

Overview

This release is primarily focused on adding support for newer Kubernetes versions (v1.19+), but does introduce breaking changes for prior Kubernetes versions.

MagTape v2.3.3 should be used for Kubernetes versions below v1.19.0

MagTape v2.4.0 is using a newer release of the Kubernetes Python Client library which removed some previously deprecated API's and changed the way the CertificateSigningRequest resource is handled for the webhook Cert Bundle.

NOTE: The linux/ppc64le architecture was dropped for this release due to an issue with the underlying Python cryptography package. We will try and track this down to resolve in a future release.

Enhancements

• Bump Kubernetes Python Client to v23.3.0 to support new K8s versions (#120)
• Bump OPA version to v0.37.2, and move to using the "static" image for arm64 support (#109)
• Bump kube-mgmt to v4.1.1
• Bump KinD node images/matrix to test aginst k8s v1.19, v1.20, v1.21, and v1.22 for CI
• Bump KinD Github Action to v0.12.0 for CI
• Bump "black" Python linter to v22.3.0 for CI/local tooling
• Bump kubectl to v1.22.5 for CI
• Set "black" Python linter line length to 120 characters
• Move to admission.k8s.io/v1 for AdmissionReview
• Move to events.k8s.io/v1 for Events
• Move to admissionregistration.k8s.io/v1 for VWC
• Add sign verb for MagTape cluster RBAC
• Move to support v4.x of yq utility syntax for Makefile/CI

Other Changes

• Bump urllib3 from 1.26.4 to 1.26.5 in /app/magtape-init by @dependabot in #110
• Bump urllib3 from 1.26.4 to 1.26.5 in /app/magtape by @dependabot in #111
• policies.md by @kamleshjoshi8102 in #104
• fix: issue 113 GHA workflows using KinD are failing by @ilrudie in #114
• update byoc doc by @xytian315 in #116
• Updated CONTRIBUTING.md by @pramod74 in #119
• Support K8s v1.21+ by @phenixblue in #122

New Contributors

• @kamleshjoshi8102 made their first contribution in #104
• @xytian315 made their first contribution in #116
• @pramod74 made their first contribution in #119

Full Changelog: v2.3.3...v2.4.0