v0.10.0

This release enables installations of Authorino Operator v0.12.0, Limitador Operator v0.10.0, DNS Operator v0.6.0 and WASM Shim v0.5.0

What's Changed

Exciting New Features 🎉

• Automate CSV generation by @didierofrivia in #37
• wasm shim image from env var by @eguzki in #41
• refactor: controller-runtime v0.16.3 by @KevFan in #246
• Enhanced observability for the limitador instance by @eguzki in #301
• refactor: align using CEL for target ref validation by @KevFan in #364
• feat: accepted policy status condition by @KevFan in #347
• Reconcile Sub Component Limitador CR by @Boomatang in #350
• feat: auth policy enforced condition by @KevFan in #411
• refactor: api machinary by @KevFan in #396
• AP Defaults by @KevFan in #503
• RLP Defaults by @KevFan in #456
• AuthPolicy Atomic Overrides by @Boomatang in #525
• RLP atomic override by @KevFan in #523
• Have Istio optional by @eguzki in #645
• refactor: parrallel tests by @KevFan in #689
• Target ref by @dlaw4608 in #691
• Update kind to v0.23.0 by @dlaw4608 in #725
• fix: tlspolicy enforced condition when certificate/issuer ready condition is missing by @KevFan in #715
• refactor: integration tests for dns & tls policy target ref CEL validation by @KevFan in #756
• Update limitador to 0.9.0 by @eguzki in #608
• Bump go version to 1.22 🚀 by @eguzki in #779
• Update Gateway API to v1.1 by @adam-cattermole in #780
• Helm Charts by @didierofrivia in #728
• Transition to Cross-Compilation for faster Docker Build Times by @dlaw4608 in #802
• feat: set quay image expiry to prevent overflow of images by @KevFan in #851

Bug Fixing 🐞

• [fix: integration-tests] Ensure Istio gateways are ready by @guicassolato in #185
• codecov: do not fail ci on error by @KevFan in #228
• docs: fix user guide authenticated rl for app devs based on authpolicy/v1beta2 by @guicassolato in #282
• Fix bug in response validation rules by @adam-cattermole in #287
• Update Keycloak examples by @guicassolato in #311
• Include missing unit test by @Boomatang in #344
• Missing space in quickstart script by @adam-cattermole in #412
• Make selection of subnet using docker more flexible. by @Boomatang in #557
• fix: isAuthPolicyEnforcedCondition failing in eventually by @KevFan in #629
• Fix override RLPs on multiple gateway parents by @guicassolato in #659
• cert manager api as dependency by @eguzki in #680
• Reconcile out of order gateway resource creation. by @Boomatang in #638
• remove cert-manager as dependency by @eguzki in #727
• Fix release workflow by @didierofrivia in #803
• fix: lower case img tags for image building by @KevFan in #783

Other Changes

• update resource requirements by @eguzki in #35
• pin dev k8s cluster to 1.22.7 by @eguzki in #36
• update kuadrant core controller manifests by @eguzki in #42
• update kuadrant core controller manifests by @eguzki in #44
• reduce dev env resource requirements by @eguzki in #45
• update kuadrant core controller manifests by @eguzki in #46
• remove unused permissions by @eguzki in #43
• Kubebuilder-tools workaround for darwin/arm64 arch by @didierofrivia in #49
• Kuadrant API by @didierofrivia in #50
• Kuadrant controllers by @didierofrivia in #53
• Kuadrant reconciling by @didierofrivia in #54
• Fixing tests by @didierofrivia in #55
• Kuadrant merge docs by @didierofrivia in #63
• Fixing linting tasks by @didierofrivia in #67
• Fixing user guides by @didierofrivia in #70
• Kuadrant Merge by @didierofrivia in #48
• Change codeowners to team engineering by @didierofrivia in #101
• remove duplicated crds by @eguzki in #100
• kap remove hosts from authscheme by @eguzki in #99
• GH ACtions: multi arch images by @eguzki in #108
• Fix dependencies namespace propagation by @didierofrivia in #109
• local operator catalog raw file based format by @eguzki in #107
• Ossm merge by @alexsnaps in #112
• [changelog] Adding change log: first 2 releases logged by @didierofrivia in #114
• Example AuthPolicy - OIDC/K8s auth by @guicassolato in #116
• fixup broken links in the authpolicy example by @guicassolato in #117
• [docs] Fixing sh commands by @didierofrivia in #118
• Better CSV annotations by @didierofrivia in #120
• User guide: Protecting an API with JSON Web Tokens (JWTs) and Kubernetes authnz using Kuadrant by @guicassolato in #119
• [docs] Add rate limit to OIDC+K8s auth user guide by @guicassolato in #121
• [docs] User guide 'Authenticated rate limiting with JWTs and Kubernetes authnz' to doc directory by @guicassolato in #122
• Fix conditions in examples by @alexsnaps in #123
• [refactor] GW utils for all types of policies by @guicassolato in #134
• wasm shim image env var name does not match deployment var name by @eguzki in #136
• fix: ComputeGatewayDiffs when missing target HTTPRoute by @guicassolato in #139
• Istio workload selector fetched from the gateway service spec by @guicassolato in #143
• Improve policy constraint error message by @didierofrivia in #145
• Doc install operator by @eguzki in #148
• Simplify RateLimitPolicy by @eguzki in #144
• RLP conditions and variables order does not matter by @eguzki in #147
• Update limitador api to 0.4.0 by @eguzki in #150
• Bump Kind version from 0.11.1 to 0.17.0 by @art-tapin in #152
• Makefile: fix installing kind tool by @eguzki in #154
• Schedule build images with git sha reference by @didierofrivia in #149
• Fix GH Workflow inputs error by @didierofrivia in #155
• Inheriting all secrets from caller workflow by @didierofrivia in #157
• Fix bundle generation by @didierofrivia in #158
• Refactoring Github workflows by @didierofrivia in #161
• Update kind-cluster config by @art-tapin in #160
• Fix update action variables for dependencies by @didierofrivia in #162
• Fix scheduled build by @didierofrivia in #165
• Storing all dependencies sha by @didierofrivia in #170
• Fix inclusion of related wasm shim image by @didierofrivia in #171
• [test] Improve test coverage and performance in apimachinery_status_conditions by @art-tapin in #172
• [test] Add tests for authorino_conditions.go in common package by @art-tapin in #173
• [test] Add tests for hostname.go in common package by @art-tapin in #174
• Fixing image repo URL by @didierofrivia in #177
• Removing release workflow by @didierofrivia in #178
• [test] Optimizations, improvements, and unit tests for common/common.go (part 1 of 3) by @art-tapin in #176
• Istio (v1.17.2) and Gateway API (v0.6.2) version bump by @guicassolato in #166
• [test] Optimizations, improvements, and unit tests for common/common.go (part 2 of 3) by @art-tapin in #182
• changelog v0.3.0 by @eguzki in #184
• fix permissions by @eguzki in #189
• Optimize common package functions for improved performance by @art-tapin in #187
• fix e2e tests: do not use istio-ingressgateway in tests by @eguzki in #188
• [test] Unit-tests for common/k8s_utils.go (part 1 of 3) by @art-tapin in #190
• Build images with replaces image by @didierofrivia in #193
• Building the catalog with the replaces directive by @didierofrivia in #194
• upgrade operator-sdk v1.28.1 by @eguzki in #196
• Create a ServiceMeshMember, rather than mutating the ServiceMeshMembe… by @alexsnaps in #198
• [test] Unit-tests for common/k8s_utils.go (part 2 of 3) by @art-tapin in #191
• Update gateway-api module to v0.6.2 by @mikenairn in #153
• [test] Unit-tests for common/k8s_utils.go (part 3 of 3) & Unit-tests and improvements for common/yaml_decoder.go by @art-tapin in #195
• Istio external authorizer available not only for IstioOperator by @didierofrivia in #192
• kind: bump to 0.20.0 and pin image to kindest/node:v1.27.3 by @KevFan in #209
• Upgrade Authorino and Authorino Operator by @guicassolato in #211
• workflow: use go1.19 to align with go.mod go version used by @KevFan in #213
• docs: minor improvements by @KevFan in #217
• ignore: vendor directory by @KevFan in #219
• [gh workflow] Add CodeCov integration by @art-tapin in #212
• codecov, fix: Fix the ignoring path regex pattern in codecov.yaml (#175) by @art-tapin in #221
• workflow: pin yq version to v4.34.2 by @KevFan in #229
• Update workflow actions by @adam-cattermole in #224
• RLP v1beta2 by @alexsnaps in #230
• Replace superseded protobuf package by @grzpiotrowski in #231
• Update RLP docs and examples for v1beta2 by @guicassolato in #233
• Remove rlp watcher for gateway rlps by @eguzki in #242
• feat: upgrade to Go 1.20 by @KevFan in #239
• Add new issues workflow by @adam-cattermole in #235
• [workflow] Adding channels input for bundle creation by @didierofrivia in #250
• doc: #kuadrant channel on kubernetes.slack.com by @KevFan in #252
• Limitador cluster EnvoyFilter controller by @eguzki in #243
• Install Cert Manager by @Boomatang in #258
• kuadrant gateway controller to annotate gateways by @eguzki in #260
• workflow: fix flaky install of operator sdk on mac os by @KevFan in #268
• fix: install operator-sdk on macos local dev env by @guicassolato in #273
• Update controller-gen to v0.13.0 by @guicassolato in #277
• We need to update the GWs finalizers by @alexsnaps in #280
• [authpolicy-v2] AuthPolicy v1beta2 by @guicassolato in #249
• Indentation fix by @Ygnas in #284
• rename controller files by @guicassolato in #285
• Bump google.golang.org/grpc from 1.54.0 to 1.56.3 by @dependabot in #288
• Propagate REPLACES_VERSION param when generating catalog files by @guicassolato in #291
• Update gatewayapi to v1.0.0 by @adam-cattermole in #286
• Add mandatory Gateway API label to the policy CRDs by @guicassolato in #295
• Gh 639 policy controller by @maleck13 in #293
• Update bundle (policy-controller) by @mikenairn in #313
• Update istio to 1.20 by @didierofrivia in #303
• Allow the coverage to drop by 3% by @eguzki in #316
• fix authconfig hosts when targeting gateway by @eguzki in #310
• Using Limitador CR condition ready by @didierofrivia in #324
• Upgrading operator-sdk to v1.32.0 by @didierofrivia in #319
• Maintenance/docs by @Boomatang in #294
• Update google.golang.org/grpc by @alexsnaps in #329
• Again: name things by @alexsnaps in #336
• rlp e2e tests: fix sync issues by @eguzki in #337
• Updating istio dependencies by @didierofrivia in #331
• Fix nil pointer in parentRef namespace dereference by @adam-cattermole in #335
• fix integration tests: wait for route to be accepted by @eguzki in #339
• remove deployment of policy-controller for now by @maleck13 in #338
• Add better information for OperatorHub by @alexsnaps in #330
• fix authconfig reconciliation by @eguzki in #341
• docs: TLS and DNS Policy user guides by @mikenairn in #322
• Fix Istio AuthorizationPolicy mutate check by @guicassolato in #351
• Dry-run resource update before comparing changes by @guicassolato in #356
• Changelog changes for a few releases by @alexsnaps in #357
• Fix authconfig annotations reconciliation by @eguzki in #359
• re-add policy-controller by @maleck13 in #348
• Small enhancements to building actions by @pehala in #360
• Add support for project sail by @adam-cattermole in #323
• Fix bundle by @alexsnaps in #367
• Add to new project and include PRs by @alexsnaps in #366
• Gh 361 single cluster walk through by @maleck13 in #362
• Update doc/user-guides/secure-protect-connect.md by @maleck13 in #374
• Add descriptions and samples to CSV by @grzpiotrowski in #372
• Add CRDs printcolumns by @grzpiotrowski in #353
• fix istioctl deployment by @eguzki in #371
• Update secure-protect-connect.md by @maleck13 in #377
• Fixes to local setup for sail by @adam-cattermole in #380
• Fix policy controller dependency by @didierofrivia in #378
• improve steps format by @maleck13 in #383
• Add new quickstart script by @adam-cattermole in #373
• Adding Policy Controller to SHA builds by @didierofrivia in #379
• Bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #384
• fix cluster scoped istio CR by @eguzki in #391
• Bump github.com/containerd/containerd from 1.7.6 to 1.7.11 by @dependabot in #390
• Ensure shas retrieved by workflow are ordered by date by @adam-cattermole in #394
• gh actions: issues workflow: disable job on forked PR's OR it's an issue by @eguzki in #385
• Use istioctl for local install and skip sail tests on PR by @adam-cattermole in #395
• Remove --ocm-hub flag and update bundle by @adam-cattermole in #403
• Pin version of sail to nightly 18-01-2024 by @adam-cattermole in #402
• Update quickstart to correctly deploy from KUADRANT_REF by @adam-cattermole in #409
• Disable fail-fast for nightly integration tests by @adam-cattermole in #405
• [docs] Fixing some broken links by @jasonmadigan in #408
• Walkthrough text updates and quickstart.sh missing space fix by @trepel in #413
• Enhance docker network ipaddresspool by @eguzki in #418
• remove kind port mappings by @eguzki in #421
• docker-network-ipaddresspool.sh: dedicated IP address range by @eguzki in #422
• Change scheduled build naming by @pehala in #407
• Adding packages other than controllers to the code coverage report from the integration tests by @eguzki in #425
• Fix Nightly job by @pehala in #427
• Unified kuadrant - Add TLSPolicy and DNSPolicy by @mikenairn in #416
• Pin dns operator version v0.1.0 by @mikenairn in #457
• codecov disabled for forks by @eguzki in #487
• upgrade controller-gen to 0.14.0 by @philbrookes in #460
• Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @dependabot in #489
• update dns policy to have immutable strategy field by @maleck13 in #498
• Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #500
• Add examples folder for alerts & dashboards, and observability stack by @david-martin in #461
• Fixes of Secure, connect and protect guide by @trepel in #499
• GH-641 enforced condition on dnspolicy by @maksymvavilov in #449
• Refine platform eng dashboard by @david-martin in #494
• add latest cert-manager as dependency by @maleck13 in #506
• pin dns to 0.1.0 by @maleck13 in #509
• extend the message for no records present whil updating enforced condition by @maksymvavilov in #510
• Add alerts for TLS/DNS/Auth/RateLimit policies not targeting Gateways… by @david-martin in #514
• metrics server in dev cluster by @eguzki in #516
• Rate limiting wasmplugin controller: using GatewayAPI topology (DAG) by @eguzki in #447
• Fix local setup for podman users by @david-martin in #517
• Gateway kuadrant.io/namespace annotation owned by a single controller by @eguzki in #520
• Fix generic function without instantiation by @guicassolato in #531
• Updated HTTPRoute for ToysStore with new label. by @david-martin in #524
• Add informative message for podman cmd fail by @david-martin in #534
• fix kuadrant CR finalizer by @eguzki in #538
• fix direct reference annotation reconciliation by @eguzki in #537
• Tidy up PE dashboard by @david-martin in #542
• Refine the app developer dashboard by @david-martin in #540
• Quickstart Setup: inline scripts and some UX improvements by @jasonmadigan in #532
• Add business user dashboard by @david-martin in #522
• Remove the -v and --fail-fast from the ginkgo test command by @Boomatang in #544
• Implemented Policy labelling in CRDs by @dlaw4608 in #539
• Do/auth policy status by @Boomatang in #553
• Add high level metrics explanation docs page by @david-martin in #504
• Fix flaky invalid RLP/AP tests by @guicassolato in #558
• Feature - Distributed DNS by @philbrookes in #550
• Merge various downstream tweaks to dashboards by @david-martin in #555
• PolicyAffected condition for AuthPolicy and RateLimitPolicy by @guicassolato in #536
• Tracing guide by @david-martin in #568
• doc on using example dashboards and alerts by @david-martin in #562
• Use md images to fix refs on docs site by @david-martin in #576
• fix: auth policy test flake by @KevFan in #577
• GH-545 restrict default geo to local by @maksymvavilov in #549
• Update dnspolicy crd validations by @mikenairn in #578
• docs: defaults & overrides by @guicassolato in #575
• docs: limitation on multiple network resources with identical hostnames by @guicassolato in #574
• tests: speed & other minor improvements by @KevFan in #565
• tests: Allow parallel execution of DNS and TLS Policy tests by @mikenairn in #583
• propagate DNS Record status to DNS Policy by @philbrookes in #585
• Increase metallb useable ips by @mikenairn in #584
• dnsrecord condition only propagate owned records status by @philbrookes in #597
• Add multi cluster support to quickstart-setup script by @david-martin in #590
• Fix status Enforced status when Accepted condition is False by @Boomatang in #592
• remove out of date fields from DNS Policy API by @philbrookes in #595
• docs: Fix incorrect kube-prometheus link for metrics doc by @jsmolar in #600
• Gh 579 by @philbrookes in #609
• add OpenShift installation doc by @maleck13 in #563
• fix: do not reconcile status of target objects multiple times by @guicassolato in #607
• GH action verify-generate by @eguzki in #610
• add catalogsource to install doc by @maleck13 in #619
• Minor docs tweaks by @maleck13 in #621
• Bump version of Authorino and Authorino Operator golang packages by @guicassolato in #561
• Fixing broken hyperlinks in user guides by @pmccarthy in #627
• docs: Update DNSPolicy API reference by @mikenairn in #599
• ci: skip test workflow when only doc changes by @mikenairn in #628
• Add observability target by @david-martin in #631
• refactor: rate limit policy enforced status controller by @KevFan in #603
• missing manifest info by @eguzki in #630
• Add goimports to the golangci-lint configuration by @Boomatang in #615
• Return early if the AuthPolicy being filtered is marked for deletion by @Boomatang in #632
• added kustomization file to generate configmaps for example dashboards by @ehearneRedHat in #633
• availability and latency slos by @R-Lawton in #596
• Port back downstream fixes for dashboards by @david-martin in #637
• Add thanos to hub quickstart cluster & remote write from all clusters by @david-martin in #634
• feat: tlspolicy enforced condition by @KevFan in #635
• Using PolicyTargetReference instead of Selector by @didierofrivia in #612
• docs: add numbering to headers to help navigation and readability by @smccarthy-ie in #639
• bump catalog image version by @maleck13 in #643
• GH action verify-go-mod by @eguzki in #647
• Deploy example alerts during quickstart by @david-martin in #644
• Integration tests for configuration reconcile by @Boomatang in #404
• Bump golang.org/x/net from 0.19.0 to 0.23.0 by @dependabot in #556
• kuadrant controller: remove unused watch by @eguzki in #646
• exported dashboards for sharing, created dashboard export script, upload dashboard github action and updated documentation by @ehearneRedHat in #641
• docs: fix command in the single cluster guide by @guicassolato in #654
• Update kube prometheus by @david-martin in #656
• use correct status type when enforcing policy by @maksymvavilov in #594
• elliminate premature termination of DNS controller logic by @maksymvavilov in #655
• added dashboard id's and linked to Grafana Docs for more info. by @ehearneRedHat in #663
• Dashboard multicluster support - Allow for cluster_id label by @david-martin in #664
• Dashboard feedback by @david-martin in #660
• Start subnet offset at 1 to avoid overlap with kind cluster ips by @david-martin in #676
• Partially Enforced sets Enforced status to true by @maksymvavilov in #679
• Add info about protocol selection for tracing by @david-martin in #683
• Add info about sloth dashboard by @david-martin in #648
• Dashboard response codes grouping by @david-martin in #684
• Update makefile to support standalone Podman by @Boomatang in #687
• add blank line so p tag gets closed when generating html by @thomasmaas in #692
• tests: Use inmemory provider backed managed zones by @mikenairn in #658
• Add request latencies per API to PE dashboard by @david-martin in #694
• Set gateway-api-state-metrics version to 0.4.0 (latest at this time) … by @david-martin in #695
• github release notes generation configuration by @eguzki in #682
• GH-551 check traversability of generated endpoints by @maksymvavilov in #613
• istio-optional: iteration 2 by @eguzki in #681
• rate limit policy: header match support in wasm configuration by @eguzki in #698
• Add routing stategy conflict integration test by @maksymvavilov in #699
• chore: Remove DNSRecord ownerID generation by @mikenairn in #716
• Gh 668 by @R-Lawton in #693
• broken link: fix latest ref by @jasonmadigan in #736
• remove extra patch step and change naming by @R-Lawton in #740
• Update guide to allow for different prereq cluster setup by @david-martin in #742
• 444 add a gh action for deploying and verifying dashboards alerts load ok with quickstart by @ehearneRedHat in #708
• adding gh actions for promq tests if alerts directory is modified by @R-Lawton in #741
• Add maintainers file by @david-martin in #763
• changed app developer dashboard to new dashboard id by @ehearneRedHat in #764
• enhanced gateway api topology by @eguzki in #751
• base reconciler reconciles status by @eguzki in #752
• fix flaky test: TestNewGatewayEventMapper by @eguzki in #774
• Kubernetes install guide by @jasonmadigan in #710
• Refer to the DNS HealthCheckSpeck from dns-operator repo by @maksymvavilov in #723
• Add OpenSSF Badge by @david-martin in #781
• add metrics for DNS events by @philbrookes in #707
• Object types by @eguzki in #777
• Bump helm.sh/helm/v3 from 3.14.0 to 3.14.3 by @dependabot in #784
• Update default template with latest manifests by @didierofrivia in #788
• Helm dependencies CI fix by @didierofrivia in #791
• Refactor patrially enforced condition for dnspolicy by @maksymvavilov in #722
• Release button by @didierofrivia in #796
• Remove reconcile of subcomponent configuration by @Boomatang in #795
• dns: Pin DNS Operator version to v0.4.1 by @mikenairn in #804
• Add license scan report and status by @fossabot in #833
• Remove ManagedZone API by @mikenairn in #793
• Release adjustments and documentation by @didierofrivia in #834
• Add Alerts Panels to PE Dashboard by @ehearneRedHat in #753
• [workflow] Fix sign and message params by @didierofrivia in #835
• fix: helm chart image refs by @mikenairn in #839
• Add missing test timeout by @adam-cattermole in #841
• fix stream redirect commands by @eguzki in #842
• Update auth config json test by @adam-cattermole in #844
• Delete dns records when listener hostname changes by @mikenairn in #850
• tests: Fix flaky dnspolicy test by @mikenairn in #854
• add azure to local env supported providers by @philbrookes in #853
• fix: observability setup guide by @mikenairn in #856
• State of the world reconciler by @Boomatang in #838
• Build information log with version, hash and dirty attributes by @eguzki in #861

New Contributors

• @KevFan made their first contribution in #209
• @grzpiotrowski made their first contribution in #231
• @Boomatang made their first contribution in #258
• @Ygnas made their first contribution in #284
• @dependabot made their first contribution in #288
• @pehala made their first contribution in #360
• @trepel made their first contribution in #413
• @maksymvavilov made their first contribution in #449
• @dlaw4608 made their first contribution in #539
• @jsmolar made their first contribution in #600
• @pmccarthy made their first contribution in #627
• @R-Lawton made their first contribution in #596
• @smccarthy-ie made their first contribution in #639
• @thomasmaas made their first contribution in #692
• @fossabot made their first contribution in #833

Full Changelog: v0.1.0...v0.10.0

What's Changed

Exciting New Features 🎉

• feat: set quay image expiry to prevent overflow of images by @KevFan in #851

Other Changes

• fix: helm chart image refs by @mikenairn in #839
• Add missing test timeout by @adam-cattermole in #841
• fix stream redirect commands by @eguzki in #842
• Update auth config json test by @adam-cattermole in #844
• Delete dns records when listener hostname changes by @mikenairn in #850
• tests: Fix flaky dnspolicy test by @mikenairn in #854
• add azure to local env supported providers by @philbrookes in #853
• fix: observability setup guide by @mikenairn in #856
• State of the world reconciler by @Boomatang in #838
• Build information log with version, hash and dirty attributes by @eguzki in #861

Full Changelog: v0.9.0-rc1...v0.10.0