3.3.0-rc.2

• Update run target (#227)
• Move createTemplate func to webserver package (#228)

3.3.0-rc.1

• OIDC-based authorization (#225)
• Ensure counter vectors start with a zero value (#226)

3.2.0

New features:

• Replaces git-sync sidecar with built-in functionality
• Configuration can be now be passed with flags and environment variables

3.2.0-rc.1

• Replace git-sync sidecar with built-in repository management (#221)
• Fix race in git.Repository (#222)
• Fixes for the git sync process (#223)
• Use the flag package for configuration values (#224)

3.1.0

New features:

• The ability to use kustomize bases from private git repositories by specifying one or more private SSH keys for the Waybill
• Waybill has a runTimeout attribute.

Updates:

• kubernetes 1.20
• go 1.16

3.1.0-rc.2

• Enable passing multiple SSH keys (#219)

3.1.0-rc.1

• Kubernetes 1.20.2 (#211)
• Support defining SSH keys for private kustomize bases (#214)
• Update to Go 1.16 (#215)
• Introduce RunTimeout to Waybill (#216)
• Update example deployment (#218)

3.0.0

This is a major release for kube-applier, redesigning the internals to work with kubernetes Custom Resources.

On a high level:

• A new CRD is introduced, Waybill: it defines the source of manifest files as well as options related to applying them (these were mostly defined as namespace annotations previously)
• There are no more "batch" runs. Each Waybill (which corresponds to a namespace) is applied independently of others.
• Improved performance with faster, parallel runs.
• Run results are captured in the status subresource and is accessible with kubectl.
• Various issues that can occur before an attempt is made to apply a namespace are surfaced as events and the last attempted run is retained in the status subresource.
• More flexible integration with strongbox for encrypted file support per namespace. Each Waybill can define its own keys to use for its sources.
• Use delegate ServiceAccounts for applying resources. The ServiceAccount of kube-applier has limited access to resources (see the ClusterRole provided in the "cluster" kustomize base).
• kustomize bases are provided for the kube-applier deployment and required cluster-level resources, as well as for client namespaces. Default values have been set where possible to make adoption as simple as possible, while allowing customization for more complex setups.
• Improved logs and metrics.
• Tests are not using mock interfaces anymore but build on the envtest package and run against a local apiserver.

3.0.0-rc.9

• Fix typo (#210)

3.0.0-rc.8

• Implement shared strongbox keyring whitelist (#208)
• Allow whitespace in strongbox keyring annotation (#209)