chore(deps): update helm release capsule to v0.13.1#298
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. 🚀 New features to boost your workflow:
|
b4b8c76 to
a76fde5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.12.4→0.13.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
projectcapsule/capsule (capsule)
v0.13.1Compare Source
Changelog
🐛 Bug fixes
33f11b9: fix: correct helm docs for webhook service port schema (#1929) (@bakito)ce6fb68: fix: correct helm values schema for webservcie ports (#1928) (@bakito)279f3a7: fix: reuse webhookport from values (#1927) (@oliverbaehler)Full Changelog: projectcapsule/capsule@v0.13.0...v0.13.1
Check out what's new in this release
Docker Images
ghcr.io/projectcapsule/capsule:0.13.1ghcr.io/projectcapsule/capsule:latestHelm Chart
View this release on Artifact Hub or use the OCI helm chart:
ghcr.io/projectcapsule/charts/capsule:0.13.1Review the Major Changes section first before upgrading to a new version
Thanks to all the contributors! 🚀 🦄
v0.13.0Compare Source
Changelog
✨ Breaking Changes
0515880: feat: use cert-manager certificates by default. By default, Capsule now uses self-signed cert-manager certificates for its admission webhooks. This used to be an optional setting and has now become the default. If you don’t have cert-manager installed, you must explicitly re-enable the Capsule TLS controller as documented here. (#1818) (@oliverbaehler)Security 🔒
✨ New Features
cc4fb45: feat: add new Quota System with GlobalCustomQuotas and CustomQuotas(#1841) (@oliverbaehler)cc4fb45: feat: refactor ofGlobalTenantResourcesandTenantResources(#1841) (@oliverbaehler)cc4fb45: feat: added new labelprojectcapsule.dev/tenantwhich is added for all namespaced resources belonging to a Tenant (#1841) (@oliverbaehler)cc4fb45: feat: Resources labeled with projectcapsule.dev/managed-by=controller can only be created, updated or deleted by the Capsule controller and administrators, and are rejected for all other operations. This prevents deletion of managed resources by users, which are not identified as capsule users (current behavior) (#1841) (@oliverbaehler)cc4fb45: feat: migrated event emissions toevents.k8s.io/v1from legacy core/v1 (#1841) (@oliverbaehler)cc4fb45: feat: tenant scoped additional metadata is validated via admission (#1841) (@oliverbaehler)cc4fb45: feat: adding.spec.dataforTenantto allow providing custom data for templating purposes (#1841) (@oliverbaehler)cc4fb45: feat: Added configuration options for managed RBAC (#1841) (@oliverbaehler)cc4fb45: feat: Added configuration options for Impersonation (#1841) (@oliverbaehler)cc4fb45: feat: Added configuration options for Cache invalidation (#1841) (@oliverbaehler)cc4fb45: feat: Added configuration options for Dynamic Admission Webhooks (#1841) (@oliverbaehler)730151c: feat: add dynamic capsule user evaluation (#1811) (@oliverbaehler)0744924: feat: add e2e openshift support (#1894) (@Svarrogh1337)a6b830b: feat: add ruleset api(#1844) (@oliverbaehler)0abc77b: feat: diverse performance improvements (#1861) (@oliverbaehler)cc4fb45: feat: upstream enterprise preview (#1841) (@oliverbaehler)🐛 Bug fixes
cc4fb45: fix: Improved matchConditions for admission webhooks that intercept all namespaced items, to avoid processing subresource requests and Events, improving performance and reducing log noise. (#1841) (@oliverbaehler)cc4fb45: fix: PersistentVolumeClaims support now providing .spec.selector. When .spec.selector is provided we always aggregate a custom matchExpressions for the PersistentVolumeClaims to ensure that only the PersistentVolumeClaims created in the Tenant can mount PersistentVolumes provisioned from/for the same Tenant (#1841) (@oliverbaehler)cc4fb45: fix: Regex-Selectors were not considered on classes driven Tenant status reconciles (#1841) (@oliverbaehler)cc4fb45: fix: A single Unready namespace could cause the entire Tenant reconcilation to be incomplete. Now unready or terminating namespaces are ignored for further processing ensuring that ready/new namespaces get their required contents (#1841) (@oliverbaehler)cc4fb45: fix: When a Tenant is cordoned, namespaces can no longer be deleted. (#1841) (@oliverbaehler)cc4fb45: fix: TLS controller correctly patches all the webhooks with the same CA Bundle, to avoid issues with multiple webhooks and ensure that all webhooks are correctly secured, if enabled (#1841) (@oliverbaehler)61429d1: fix(docs): update home in chart.yaml (#1864) (@sandert-k8s)58b25e3: fix(webhook): adapt to controller-runtime breaking change in newwebhookmanagedby (#1898) (@Svarrogh1337)c6e109c: fix: release workflows (#1919) (@oliverbaehler)🛠 Dependency updates
9c02af5: fix(deps): update k8s.io/utils digest to383b50a(#1804) (@renovate[bot])aaa3ec4: fix(deps): update k8s.io/utils digest to718f0e5(#1806) (@renovate[bot])e8bb238: fix(deps): update k8s.io/utils digest to914a6e7(#1822) (@renovate[bot])53a4f5d: fix(deps): update k8s.io/utils digest to98d557b(#1803) (@renovate[bot])7efaa9e: fix(deps): update kubernetes packages to v0.35.0 (#1797) (@renovate[bot])7e2dc68: fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.3 (#1776) (@renovate[bot])45e3a5d: fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.4 (#1825) (@renovate[bot])768b334: fix(deps): update module github.com/onsi/gomega to v1.38.3 (#1777) (@renovate[bot])1f91adc: fix(deps): update module github.com/onsi/gomega to v1.39.0 (#1826) (@renovate[bot])b8d3852: fix(deps): update module k8s.io/dynamic-resource-allocation to v0.35.0 (#1798) (@renovate[bot])abc03ad: fix(deps): update module sigs.k8s.io/cluster-api to v1.12.1 (#1784) (@renovate[bot])🚀 Build process updates
77e7532: ci: pin slsa provenance workflow (#1903) (@AkashKumar7902)Full Changelog: projectcapsule/capsule@v0.12.4...v0.13.0
Check out what's new in this release
Docker Images
ghcr.io/projectcapsule/capsule:0.13.0ghcr.io/projectcapsule/capsule:latestHelm Chart
View this release on Artifact Hub or use the OCI helm chart:
ghcr.io/projectcapsule/charts/capsule:0.13.0Review the Major Changes section first before upgrading to a new version
Thanks to all the contributors! 🚀 🦄
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.