Skip to content

Latest commit

 

History

History
20 lines (15 loc) · 1.3 KB

CHANGELOG.md

File metadata and controls

20 lines (15 loc) · 1.3 KB
Raw

v1.0.4

Features

  • feat(signer): Signer recognizes metadata.command-issuer.keyfactor.com/<metadata-field-name>: <metadata-value> annotations on the CertificateRequest resource and uses them to populate certificate metadata in Command.
  • feat(release): Container build and release now uses GitHub Actions.

Fixes

  • fix(helm): CRDs now correspond to correct values for the command-issuer.
  • fix(helm): Signer Helm Chart now includes a secureMetrics value to enable/disable sidecar RBAC container for further protection of the /metrics endpoint.
  • fix(signer): Signer now returns CA chain bytes instead of appending to the leaf certificate.
  • fix(role): Removed permissions for configmaps resource types for the leader-election-role role.

v1.0.5

Features

  • feat(controller): Implement Kubernetes client-go REST client for Secret/ConfigMap retrieval to bypass controller-runtime caching system. This enables the reconciler to retrieve Secret and ConfigMap resources at the namespace scope with only namespace-level permissions.

Fixes

  • fix(helm): Add configuration flag to configure chart to either grant cluster-scoped or namespace-scoped access to Secret and ConfigMap API
  • fix(controller): Add logic to read secret from reconciler namespace or Issuer namespace depending on Helm configuration.