v0.27.0
Changed
- Removed
useClusterSpiffeIds
anduseSpireControllerManager
from helm charts
options. SPIRE helm charts use SPIRE Controller Manager, and disabling it
is nontrivial. Also, ClusterSPIFFEIDs are the best way to manage SPIFFEIDs
in a Kubernetes cluster. — If we find a use case where these options are
necessary, or if there is a need from the community, we can modify the
code to let SPIRE install without SPIRE Controller Manager and bring those
flags back. - Optimized the build pipeline, reducing the build time by 60%.
- Removed bundle endpoints from SPIRE manifests. We don't use them anywhere.
If there is a need, we can bring them back. Note that this also impacts
the experimental "federation" feature. Federation can still be enabled
by manually editing the SPIRE Server and SPIRE Agent configmaps. Later, we'll
have a cross-cluster replication feature where we will introduce these
bundle endpoints using a hub-spoke topology in a more controlled manner.
Added
- Introduced new Architecture Decision Records (ADRs) as drafts. These ADRs
will be reviewed and finalized in the upcoming releases. - Namespaces of
vsecm-system
,spire-server
, andspire-system
can now
be dynamically configurable via Helm charts. - Various documentation and README updates.
Below are the generated release notes of every commit since the last release cut:
What's Changed
- cleanup by @v0lkan in #1063
- 🐛 fix(VSecM Helm Charts): remove ability to not use SCM by @v0lkan in #1064
- remove default spiffeids. by @v0lkan in #1065
- Make Namespaces Dynamic in Helm Charts by @v0lkan in #1066
- Build Time Improvement by @v0lkan in #1067
- Code Cleanup and Doc Updates by @v0lkan in #1069
- Convert Internal RootKey Representation to a Struct by @v0lkan in #1070
- 🛡️ security(VSecM): remove printAdditionalDetails from envInfo by @v0lkan in #1071
- Documentation and Security Updates by @v0lkan in #1073
- 🚨 test(VSecM): 902 add test for url.go by @omergk28 in #1072
- 899 builder test by @omergk28 in #1074
- minor wording change by @v0lkan in #1076
- manifest updates by @v0lkan in #1077
- fixed broken links in README and other documentation updates by @v0lkan in #1079
- README update by @v0lkan in #1080
- v0.27.0 by @v0lkan in #1081
Full Changelog: v0.26.1...v0.27.0