v0.5.1

This patch fixes an issue in the Helm chart value templating and the manager manifest which were only discovered during CI

What's Changed

• fix(chart): typo in .Value(s) by @zoomoid

Full Changelog: v0.5.0...v0.5.1

v0.5.0

Breaking Changes

From this release onwards, the controller runs in host network namespace to prevent issues with pod sandboxes not being created before CNI is ready. This issue became apparent when we tried to roll out a new cluster with cilium and its initialization failed, which in turn caused the tbctrl to not be started, consequently stopping auto-approval of certificates, which made debugging this mess of a cluster a whole lot harder.

Because the controller now runs in the host network namespace, it can no longer rely on the API server's service to be available. The user thus has to provide --k8s-service-host and --k8s-service-port (or $K8S_SERVICE_HOST and $K8S_SERVICE_PORT) to the manager for it to create
a configuration that can reach the control plane.

If you deploy the cluster with a public-facing DNS endpoint, you can use this, otherwise, if you can ensure that the API server and tbctrl are scheduled to the same host, localhost will also do the job. The port is usually 6443, except in non-default situations.

What's Changed

• refactor!: make controller run in host network namespace by @zoomoid
• chore(deps): Bump k8s.io/apimachinery from 0.28.0-rc.1 to 0.29.0-alpha.0 by @dependabot in #51

Full Changelog: v0.4.0...v0.5.0

v0.4.0

This minor release fixes an issue with Helm's RBAC YAMLs, particularly the namespace of a service account reference in the Lease role binding, causing the controller to not be allowed to participate in leader election. Also, use go 1.21 throughout the project.

What's changed

• fix(chart): service account namespace in leader election role binding
• chore(deps): build with go 1.21

Full Changelog: v0.3.3...v0.4.0

v0.3.3

This patch release changes the container image from gcr.io/distroless/static to gcr.io/distroless/base to include libssl and openssl utilities, which are required for mTLS communication with the control plane

What's changed

• fix: use gcr.io/distroless/base instead of static to include libssl by @zoomoid
• chore(deps): bump chart version by @zoomoid

Full Changelog: v0.3.2...v0.3.3

v0.3.2

This patch release fixes a YAML issue in the workflow file, where 1.20 as a number falls back to 1.2, breaking the go building

What's changed

• ci: fix yaml Go version number encoding by @zoomoid
• build(deps): update chart version by @zoomoid

Full Changelog: v0.3.1...v0.3.2

v0.3.1

This patch release fixes a dependency issue with k8s.io/client-go. This is currently pinned to a release candidate until the changes are merged in v0.28.0.

What's changed

• fix(deps): k8s.io/client-go pinned to v0.28.0-rc.1 by @zoomoid
• ci: update workflow step versions by @zoomoid
• ci: remove "v" prefix from container image again by @zoomoid

Full Changelog: v0.3.0...v0.3.1

v0.3.0

This minor release adds support for ARM64 platform and Go 1.20.

What's Changed

• chore: build with go 1.20 by @zoomoid
• chore: start supporting aarch64 by @zoomoid
• chore(deps): Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 by @dependabot in #32
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.14.4 to 0.14.5 by @dependabot in #31
• chore(deps): Bump k8s.io/client-go from 0.26.1 to 0.26.2 by @dependabot in #30
• chore(deps): Bump k8s.io/api from 0.26.1 to 0.26.2 by @dependabot in #29
• chore(deps): Bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 by @dependabot in #28
• chore(deps): Bump github.com/go-logr/logr from 1.2.3 to 1.2.4 by @dependabot in #37
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.14.5 to 0.14.6 by @dependabot in #36
• chore(deps): Bump k8s.io/api from 0.26.2 to 0.26.3 by @dependabot in #35
• chore(deps): Bump k8s.io/client-go from 0.26.2 to 0.26.3 by @dependabot in #34
• chore(deps): Bump k8s.io/klog/v2 from 2.90.1 to 2.100.1 by @dependabot in #40
• chore(deps): Bump k8s.io/client-go from 0.26.3 to 0.27.1 by @dependabot in #39
• chore(deps): Bump k8s.io/apimachinery from 0.27.1 to 0.27.2 by @dependabot in #42
• chore(deps): Bump k8s.io/api from 0.27.1 to 0.27.3 by @dependabot in #45
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.14.6 to 0.15.0 by @dependabot in #44
• chore(deps): Bump k8s.io/client-go from 0.27.1 to 0.27.3 by @dependabot in #46
• chore(deps): Bump k8s.io/api from 0.27.3 to 0.27.4 by @dependabot in #49
• chore(deps): Bump k8s.io/client-go from 0.27.3 to 0.27.4 by @dependabot in #47
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 by @dependabot in #50

Full Changelog: v0.2.3...v0.3.0

v0.2.3

This patch release changes container tags to include a "v".

What's changed?

• chore: build version with "v" prefix for current chart to work by @zoomoid. This might change again in the future!

v0.2.2

This patch release bumps up dependencies mostly automated by dependabot

What's Changed

• chore(deps): Bump k8s.io/apimachinery from 0.25.2 to 0.25.3 by @dependabot in #12
• chore(deps): Bump k8s.io/client-go from 0.25.2 to 0.25.3 by @dependabot in #11
• chore(deps): Bump k8s.io/api from 0.25.2 to 0.25.3 by @dependabot in #10
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.13.0 to 0.13.1 by @dependabot in #13
• chore(deps): Bump k8s.io/apimachinery from 0.25.3 to 0.25.4 by @dependabot in #16
• chore(deps): Bump k8s.io/client-go from 0.25.3 to 0.25.4 by @dependabot in #15
• chore(deps): Bump k8s.io/api from 0.25.3 to 0.25.4 by @dependabot in #14
• chore(deps): Bump k8s.io/apimachinery from 0.25.4 to 0.26.0 by @dependabot in #19
• chore(deps): Bump k8s.io/api from 0.25.4 to 0.26.0 by @dependabot in #18
• chore(deps): Bump k8s.io/client-go from 0.25.4 to 0.26.0 by @dependabot in #17
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.13.1 to 0.14.0 by @dependabot in #20
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.14.0 to 0.14.1 by @dependabot in #21
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.2 by @dependabot in #26
• chore(deps): Bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 by @dependabot in #25
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.14.2 to 0.14.4 by @dependabot in #27

Full Changelog: v0.2.1...v0.2.2

v0.2.1

This patch release fixes an issue with the container image in manifests and helm chart due to the structural change of building the image.

What's changed?

• fix: container tag length by @zoomoid

Full Changelog: v0.2.0...v0.2.1