v0.7.0-rc.1

Changelog

🐛 Bug fixes

• c0d5d6f: fix(controller): add boolean defaults (#1056) (@oliverbaehler)
• e418f74: fix(controller): ensure iteration on capsule ownerreferences (#1059) (@oliverbaehler)

🛠 Dependency updates

• a307966: feat(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 (#1016) (@dependabot[bot])
• 2a6fb1e: feat(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 (#1044) (@dependabot[bot])
• 0a07c05: feat(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 (#1026) (@dependabot[bot])
• 9a3a8b0: feat(deps): bump sigs.k8s.io/cluster-api from 1.6.3 to 1.7.1 (#1050) (@dependabot[bot])
• a529910: feat(deps): bump sigs.k8s.io/controller-runtime from 0.16.5 to 0.17.3 (#1027) (@dependabot[bot])
• 00b59fa: feat(deps): bump sigs.k8s.io/controller-runtime from 0.17.3 to 0.18.0 (#1061) (@dependabot[bot])

🚀 Build process updates

• 894a42c: ci(deps): bump actions/checkout from 4.1.2 to 4.1.4 (#1054) (@dependabot[bot])
• 7dec7be: ci(deps): bump actions/setup-go from 5.0.0 to 5.0.1 (#1066) (@dependabot[bot])
• 859fbf8: ci(deps): bump actions/setup-go from 5.0.0 to 5.0.1 (#1068) (@dependabot[bot])
• 8831228: ci(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 (#1043) (@dependabot[bot])
• 6594a3b: ci(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 (#1048) (@dependabot[bot])
• a8dbd0c: ci(deps): bump amannn/action-semantic-pull-request from 5.4.0 to 5.5.2 (#1053) (@dependabot[bot])
• 8fe29e8: ci(deps): bump anchore/sbom-action from 0.15.10 to 0.15.11 (#1057) (@dependabot[bot])
• 0323488: ci(deps): bump azure/setup-helm from 3.5 to 4 (#1033) (@dependabot[bot])
• b1fcb28: ci(deps): bump azure/setup-helm from 4.1.0 to 4.2.0 (#1047) (@dependabot[bot])
• 97874c2: ci(deps): bump codecov/codecov-action from 4.1.1 to 4.2.0 (#1025) (@dependabot[bot])
• 85fe291: ci(deps): bump codecov/codecov-action from 4.2.0 to 4.3.0 (#1030) (@dependabot[bot])
• d972c2f: ci(deps): bump codecov/codecov-action from 4.3.0 to 4.3.1 (#1064) (@dependabot[bot])
• 44af534: ci(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 (#1055) (@dependabot[bot])
• c2f3694: ci(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 (#1060) (@dependabot[bot])
• f78dbaf: ci(deps): bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 (#1069) (@dependabot[bot])
• 419eb8f: ci(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 (#1077) (@dependabot[bot])
• ffa2b15: ci(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 (#1032) (@dependabot[bot])
• d81185b: ci(deps): bump slsa-framework/slsa-github-generator from 1.10.0 to 2.0.0 (#1049) (@dependabot[bot])
• 06d6903: ci(deps): bump wagoid/commitlint-github-action from 5.4.5 to 6.0.1 (#1031) (@dependabot[bot])
• 537f25c: ci(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (#1028) (@dependabot[bot])
• 6504382: ci(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (#1067) (@dependabot[bot])
• 07202d0: ci(deps): update github/codeql-action requirement to c4fb451437765abf5018c6fbf22cce1a7da1e5cc (#1070) (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.6.2...v0.7.0-rc.1

Docker Images

• ghcr.io/projectcapsule/capsule:0.7.0-rc.1
• ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule:0.7.0-rc.1

v0.6.2

Changelog

✨ New Features

• e5ec492: feat(chart): add capsule-proxy 0.6.0 as optional dependency (#999) (@oliverbaehler)

🛠 Dependency updates

• 9e85e15: feat(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#1017) (@dependabot[bot])
• f343623: feat(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#1001) (@dependabot[bot])
• 9c1b948: feat(deps): bump k8s.io/apiextensions-apiserver from 0.28.4 to 0.29.3 (#1008) (@dependabot[bot])
• 7e8ae23: feat(deps): bump k8s.io/apimachinery from 0.29.2 to 0.29.3 (#1009) (@dependabot[bot])
• c35cf71: feat(deps): bump sigs.k8s.io/cluster-api from 1.6.2 to 1.6.3 (#1006) (@dependabot[bot])

🚀 Build process updates

• 3ef5af6: ci(deps): bump actions/checkout from 4.1.1 to 4.1.2 (#1005) (@dependabot[bot])
• 297e5c7: ci(deps): bump anchore/sbom-action from 0.15.8 to 0.15.9 (#1004) (@dependabot[bot])
• 74cd6ce: ci(deps): bump anchore/sbom-action from 0.15.9 to 0.15.10 (#1020) (@dependabot[bot])
• c8e2b74: ci(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 (#1000) (@dependabot[bot])
• 0d5f2df: ci(deps): bump aquasecurity/trivy-action from 0.18.0 to 0.19.0 (#1021) (@dependabot[bot])
• 6b25dbe: ci(deps): bump codecov/codecov-action from 4.1.0 to 4.1.1 (#1019) (@dependabot[bot])
• c334b2a: ci(deps): bump slsa-framework/slsa-github-generator from 1.9.0 to 1.10.0 (#1011) (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.6.1...v0.6.2

Docker Images

• ghcr.io/projectcapsule/capsule:0.6.2
• ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule:0.6.2

v0.6.1

Changelog

🚀 Build process updates

• 1bdb9f2: ci(deps): Bump codecov/codecov-action from 4.0.2 to 4.1.0 (#996) (@dependabot[bot])
• 559287c: ci(release): use same tag for helm release (#994) (@oliverbaehler)

Thanks to all the contributors!

Full Changelog: v0.6.0...v0.6.1

Docker Images

• ghcr.io/projectcapsule/capsule:0.6.1
• ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule:0.6.1

v0.6.0

Changelog

✨ New Features

• e16202f: feat(go): bump relevant components to 1.21 (#987) (@oliverbaehler)

🛠 Dependency updates

• b97635b: feat(deps): Bump go.uber.org/zap from 1.26.0 to 1.27.0 (#988) (@dependabot[bot])
• 8db7aa3: feat(deps): Bump sigs.k8s.io/cluster-api from 1.6.1 to 1.6.2 (#989) (@dependabot[bot])

🚀 Build process updates

• fcedfb2: ci(deps): Bump codecov/codecov-action from 4.0.1 to 4.0.2 (#992) (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.6.0-rc0...v0.6.0

Docker Images

• ghcr.io/projectcapsule/capsule:v0.6.0
• ghcr.io/projectcapsule/capsule:latest

v0.6.0-rc0

Changelog

🐛 Bug fixes

• b9d4813: fix(ci): allow upper-case for dependabot commits (#981) (@oliverbaehler)
• 5996c42: fix: correcting ldflags name (@prometherion)
• 65a7439: fix: preserving externally managed labels (@prometherion)

🛠 Dependency updates

• 9a829dd: feat(deps): Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 (#934) (@dependabot[bot])
• 47f22ce: feat(deps): Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.15.0 (@dependabot[bot])
• 80e5af0: feat(deps): Bump golang.org/x/sync from 0.5.0 to 0.6.0 (#939) (@dependabot[bot])
• 6501fb2: feat(deps): Bump k8s.io/apimachinery from 0.28.4 to 0.29.2 (#978) (@dependabot[bot])
• 0769d6b: feat(deps): Bump sigs.k8s.io/cluster-api from 1.6.0 to 1.6.1 (#974) (@dependabot[bot])
• 8c43556: feat(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1 (@dependabot[bot])
• dab0225: fix(deps): use new pointer func (#982) (@oliverbaehler)

📖 Documentation updates

• 384e4d4: docs(links): fixed dead links (@larsgerber)

🚀 Build process updates

• 84a270c: ci(deps): Bump actions/setup-node from 4.0.0 to 4.0.1 (#930) (@dependabot[bot])
• ac848e6: ci(deps): Bump actions/setup-node from 4.0.1 to 4.0.2 (#971) (@dependabot[bot])
• c8b868e: ci(deps): Bump actions/upload-artifact from 4.0.0 to 4.2.0 (@dependabot[bot])
• cc31692: ci(deps): Bump anchore/sbom-action from 0.15.1 to 0.15.3 (#940) (@dependabot[bot])
• d7a977a: ci(deps): Bump anchore/sbom-action from 0.15.3 to 0.15.5 (@dependabot[bot])
• d0d3190: ci(deps): Bump aquasecurity/trivy-action from 0.16.0 to 0.16.1 (#938) (@dependabot[bot])
• d1be14d: ci(deps): Bump fossas/fossa-action from 1.3.1 to 1.3.2 (#975) (@dependabot[bot])
• 1db7a46: ci(deps): Bump fossas/fossa-action from 1.3.2 to 1.3.3 (#984) (@dependabot[bot])
• a39885f: ci(deps): Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (#972) (@dependabot[bot])
• dec90a2: ci(deps): Bump securego/gosec from 2.18.2 to 2.19.0 (#973) (@dependabot[bot])
• ccb0e58: ci(deps): Bump wagoid/commitlint-github-action from 5.4.4 to 5.4.5 (#941) (@dependabot[bot])
• 9f4410a: ci(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions (#931) (@dependabot[bot])
• 318d7d0: ci(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (@dependabot[bot])
• c58b71a: ci(deps): bump actions/upload-artifact from 4.2.0 to 4.3.1 (@dependabot[bot])
• fc40a44: ci(deps): bump anchore/sbom-action from 0.15.5 to 0.15.8 (@dependabot[bot])
• 4fb88fd: ci(deps): bump aquasecurity/trivy-action from 0.15.0 to 0.16.0 (@dependabot[bot])
• e63e32a: ci(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 (@dependabot[bot])
• f08ddf3: ci(deps): bump codecov/codecov-action from 3.1.4 to 4.0.1 (@dependabot[bot])
• 675c9a4: ci(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (@dependabot[bot])
• e2a227e: ci(deps): bump sigstore/cosign-installer from 3.3.0 to 3.4.0 (@dependabot[bot])

📦 Other work

• f93d2da: Update dashboard.json (#806) (@h4wkmoon)
• 1c607ad: test(e2e): bump used kubernetes versions (#980) (@oliverbaehler)

Thanks to all the contributors!

Full Changelog: helm-v0.6.0...v0.6.0-rc0

Docker Images

• ghcr.io/projectcapsule/capsule:v0.6.0-rc0
• ghcr.io/projectcapsule/capsule:latest

v0.5.0

Changelog

✨ New Features

• 0241603: feat!: deprecating v1alpha1 api (@prometherion)
• e61152a: feat(api): additional metadata for pods (@prometherion)
• 2792b58: feat(chart): allow custom role bindings (@oliverbaehler)
• 1e70cd3: feat(helm): additional metadata for pods (@prometherion)
• 4b89895: feat(kustomize): additional metadata for pods (@prometherion)
• b27780d: feat(manager): add forbidden annotations, forbidden labels to service options (@CharlieR-o-o-t)
• c58b46c: feat(tenant): add label with tenant name for each tenant (@oliverbaehler)
• d944304: feat: additional metadata for pods (@prometherion)
• 242fdd2: feat: ensuring well-known label (@prometherion)

🐛 Bug fixes

• 21c0d04: fix(controller): respect group quotas for number of operating system threads allocated to goroutines (@oliverbaehler)
• 74d3ac5: fix(controller): respect metadata of replicated items (#922) (@oliverbaehler)
• 3c85657: fix(e2e): ensuring well-known label (@prometherion)
• c208f5e: fix(makefile): missing webhook field (@prometherion)
• 8ed302d: fix: v1alpha1 api type has been removed (@prometherion)

🛠 Dependency updates

• b58fe04: feat(deps): Bump sigs.k8s.io/cluster-api from 1.6.0-beta.1 to 1.6.0 (#920) (@dependabot[bot])
• 181cb67: feat(deps): bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 (#912) (@dependabot[bot])

📖 Documentation updates

• 14eb8f2: docs: additional metadata for pods (@prometherion)
• 2c70bf0: docs: deprecating v1alpha1 api (@prometherion)

🚀 Build process updates

• 591a66e: ci(deps): Bump actions/setup-go from 4.1.0 to 5.0.0 (#921) (@dependabot[bot])
• c30b5e9: ci(deps): Bump anchore/sbom-action from 0.15.0 to 0.15.1 (#919) (@dependabot[bot])
• 3dc2567: ci(deps): Bump aquasecurity/trivy-action from 0.14.0 to 0.15.0 (#918) (@dependabot[bot])
• 5e8d0a0: ci(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 (@dependabot[bot])
• e9ed7b2: ci(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (#917) (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.2...v0.5.0

Docker Images

• ghcr.io/projectcapsule/capsule:v0.5.0
• ghcr.io/projectcapsule/capsule:latest

v0.4.2

Changelog

🐛 Bug fixes

• 34977aa: fix: ensuring resourcequota name doesn't break DNS-1123 (@prometherion)
• 2e5c232: fix: sync quota values from tenant to resourcequota object (@prometherion)
• c0e48d1: fix(quota-resources): skipping from count delete-marked objects (@prometherion)

🛠 Dependency updates

• 5e13ac9: feat(deps): bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1 (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.1...v0.4.2

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.2
• ghcr.io/projectcapsule/capsule:latest

v0.4.1

Changelog

✨ New Features

• 25b4a35: feat(ux): namespace oncrete hook to check namespace exsistence (@prometherion)

🐛 Bug fixes

• cde44ba: fix(controller): copy ownerreference from oldNs on namespace UPDATE admission requests (@oliverbaehler)

🛠 Dependency updates

• d09a1c5: feat(deps): bump github.com/onsi/gomega from 1.29.0 to 1.30.0 (@dependabot[bot])
• 98b5c3f: feat(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (@dependabot[bot])

🚀 Build process updates

• 2baf604: ci(deps): bump aquasecurity/trivy-action from 0.13.1 to 0.14.0 (#886) (@dependabot[bot])
• 34fc260: ci(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#887) (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.0...v0.4.1

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.1
• ghcr.io/projectcapsule/capsule:latest

v0.4.0

Changelog

🛠 Dependency updates

• 72f25c8: feat(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1 (@dependabot[bot])
• 6fe400a: feat(deps): bump go.uber.org/zap from 1.25.0 to 1.26.0 (@dependabot[bot])
• a4805b7: feat(deps): bump sigs.k8s.io/cluster-api (@dependabot[bot])

📖 Documentation updates

• 2d5b1e3: docs(repo): add dependency policy (@oliverbaehler)
• 1a7b0e1: docs(repo): migrate development guide (@oliverbaehler)
• e55bac9: docs: security self assessment (@oliverbaehler)

🚀 Build process updates

• ad8957c: ci(deps): bump amannn/action-semantic-pull-request from 5.3.0 to 5.4.0 (#881) (@dependabot[bot])
• 9750302: ci(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.13.1 (@dependabot[bot])
• 7acf60a: ci(deps): bump helm/chart-testing-action from 2.4.0 to 2.6.0 (#875) (@dependabot[bot])
• efc3a1e: ci(deps): bump wagoid/commitlint-github-action from 5.4.3 to 5.4.4 (@dependabot[bot])
• e9c756e: ci(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (@dependabot[bot])

Thanks to all the contributors!

Full Changelog: v0.4.0-rc.3...v0.4.0

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0
• ghcr.io/projectcapsule/capsule:latest

v0.4.0-rc.3

Changelog

✨ New Features

• ed854f9: feat(chart): annotations and maintainers (@oliverbaehler)
• 6ecf478: feat(image): release arm artifact (@oliverbaehler)

🛠 Dependency updates

• e0548e1: feat(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (@dependabot[bot])
• 13c5377: feat(deps): bump golang.org/x/sync from 0.2.0 to 0.4.0 (@dependabot[bot])

📖 Documentation updates

• 2cef776: docs(repo): add changelog (@oliverbaehler)
• 5c18909: docs(repo): add development (@oliverbaehler)
• 10bbf39: docs(repo): add sbom reference (@oliverbaehler)
• 21eadaf: docs(repo): add security insights (@oliverbaehler)
• 3bd4bc6: docs(repo): documentation improvements (@oliverbaehler)
• 682e372: docs(repo): improve report process (@oliverbaehler)
• 4ad905e: docs: using cncf logo (@prometherion)

🚀 Build process updates

• 0e9d15d: ci(repo): fix token permissions (@oliverbaehler)
• 747af46: ci(repo): pull request linter (@oliverbaehler)
• 358692d: ci: bump actions/setup-node from 3.8.1 to 4.0.0 (#855) (@dependabot[bot])
• cd1736c: ci: bump oliverbaehler/github-actions from 0.1.0 to 0.1.1 (#832) (@dependabot[bot])
• 3d0a781: ci: bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#854) (@dependabot[bot])
• 8aa527f: ci: bump securego/gosec from 2.18.1 to 2.18.2 (@dependabot[bot])

📦 Other work

• 364332c: deps(controller-runtime): upgrading to v0.16.3 (@prometherion)
• c42c9ed: deps(go): upgrading to 1.20 (@prometherion)

Thanks to all the contributors!

Full Changelog: v0.4.0-rc.2...v0.4.0-rc.3

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0-rc.3
• ghcr.io/projectcapsule/capsule:latest