feat: secret copy #741 #807

docandrew · 2024-09-23T15:50:36Z

Description

Adds workaround for Zarf issue dev deploy with ###ZARF_REGISTRY### values in helm chart zarf-dev/zarf#2713
Adds secret copy functionality for issue Secrets manipulation using the UDS Operator #741

Related Issue

Fixes #741

Type of change

Bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds functionality)
Other (security config, docs update, etc)

Checklist before merging

Test, docs, adr added or updated as needed
Contributor Guide followed

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-cli](https://redirect.github.com/defenseunicorns/uds-cli) | minor | `0.15.0` -> `0.16.0` | | [defenseunicorns/uds-cli](https://redirect.github.com/defenseunicorns/uds-cli) | minor | `v0.15.0` -> `v0.16.0` | --- ### Release Notes <details> <summary>defenseunicorns/uds-cli (defenseunicorns/uds-cli)</summary> ### [`v0.16.0`](https://redirect.github.com/defenseunicorns/uds-cli/releases/tag/v0.16.0) [Compare Source](https://redirect.github.com/defenseunicorns/uds-cli/compare/v0.15.0...v0.16.0) ##### What's Changed - fix: update renovate to hopefully fix uds-runtime dep by [@catsby](https://redirect.github.com/catsby) in [https://github.com/defenseunicorns/uds-cli/pull/928](https://redirect.github.com/defenseunicorns/uds-cli/pull/928) - chore(deps): update defenseunicorns/uds-common action to v0.13.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/935](https://redirect.github.com/defenseunicorns/uds-cli/pull/935) - fix(deps): update module github.com/defenseunicorns/pkg/oci to v1.0.2 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/934](https://redirect.github.com/defenseunicorns/uds-cli/pull/934) - fix(deps): update module github.com/defenseunicorns/maru-runner to v0.2.3 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/933](https://redirect.github.com/defenseunicorns/uds-cli/pull/933) - fix(deps): update kubernetes packages to v0.31.1 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/932](https://redirect.github.com/defenseunicorns/uds-cli/pull/932) - chore(deps): update module github.com/prometheus/common to v0.59.1 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/877](https://redirect.github.com/defenseunicorns/uds-cli/pull/877) - chore: manually bump uds-runtime to v0.4.0 by [@catsby](https://redirect.github.com/catsby) in [https://github.com/defenseunicorns/uds-cli/pull/938](https://redirect.github.com/defenseunicorns/uds-cli/pull/938) - fix: update maru-runner to silence info log by [@catsby](https://redirect.github.com/catsby) in [https://github.com/defenseunicorns/uds-cli/pull/925](https://redirect.github.com/defenseunicorns/uds-cli/pull/925) - chore: update uds ui docs by [@UncleGedd](https://redirect.github.com/UncleGedd) in [https://github.com/defenseunicorns/uds-cli/pull/937](https://redirect.github.com/defenseunicorns/uds-cli/pull/937) - fix: ensure runtime bins are included in releases by [@UncleGedd](https://redirect.github.com/UncleGedd) in [https://github.com/defenseunicorns/uds-cli/pull/939](https://redirect.github.com/defenseunicorns/uds-cli/pull/939) **Full Changelog**: defenseunicorns/uds-cli@nightly-unstable...v0.16.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cgr.dev/du-uds-defenseunicorns/keycloak](https://images.chainguard.dev/directory/image/keycloak/overview) ([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/keycloak)) | patch | `25.0.5` -> `25.0.6` | | [quay.io/keycloak/keycloak](https://redirect.github.com/keycloak-rel/keycloak-rel) | patch | `25.0.5` -> `25.0.6` | | [registry1.dso.mil/ironbank/opensource/keycloak/keycloak](https://www.keycloak.org) ([source](https://repo1.dso.mil/dsop/opensource/keycloak/keycloak)) | patch | `25.0.5` -> `25.0.6` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Chance <[email protected]>

## Description Adds SAML fine grained attributes: `saml_assertion_consumer_url_redirect` `saml_single_logout_service_url_post` `saml_single_logout_service_url_redirect` ## Related Issue Fixes #805 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed Co-authored-by: Chance <[email protected]>

## Description There is a request for a visual table that maps Kyberno policies to Pepr policies that replace them. - Eliminate non-implemented policies from the table - Relocate doc to ensure it is surfaced on the docs site (docs/ folder) - identify mutations that are done for policies ![Screenshot of the Pepr Policy Doc in the docs](https://github.com/user-attachments/assets/397124de-074f-4870-b4dd-6a8cd4f48e1c) ## Related Issue Fixes #418 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-common](https://redirect.github.com/defenseunicorns/uds-common) | patch | `v0.13.0` -> `v0.13.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>defenseunicorns/uds-common (defenseunicorns/uds-common)</summary> ### [`v0.13.1`](https://redirect.github.com/defenseunicorns/uds-common/releases/tag/v0.13.1) [Compare Source](https://redirect.github.com/defenseunicorns/uds-common/compare/v0.13.0...v0.13.1) ##### Bug Fixes - allow dependent bundle commands to be run on upgrade tests ([#241](https://redirect.github.com/defenseunicorns/uds-common/issues/241)) ([093def2](https://redirect.github.com/defenseunicorns/uds-common/commit/093def2f245709084c079aaf529a604d8ca5b6c2)) ##### Miscellaneous - **deps:** update uds common support dependencies ([#237](https://redirect.github.com/defenseunicorns/uds-common/issues/237)) ([eac2f68](https://redirect.github.com/defenseunicorns/uds-common/commit/eac2f686deacb898a6383fcc73c861293db52b9c)) - modify helm matches to handle git and helm ([#238](https://redirect.github.com/defenseunicorns/uds-common/issues/238)) ([803d9fe](https://redirect.github.com/defenseunicorns/uds-common/commit/803d9fed89bd890c1203c618a1e3fda1bd495cbd)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

## Description update pepr policy docs ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --------- Co-authored-by: Micah Nagel <[email protected]>

## Description Fix test app by using previous version of httpbin ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --------- Co-authored-by: Micah Nagel <[email protected]>

## Description Ensure Istio sidecar is killed if Job pod exits with non-zero exit status. Tested with Jobs (exit code zero and non-zero) ```yaml apiVersion: batch/v1 kind: Job metadata: name: failing-job namespace: keycloak spec: template: spec: containers: - name: fail-container image: quay.io/keycloak/keycloak:25.0.6 command: ["sh", "-c", "echo 'This will fail'; exit 1"] restartPolicy: Never backoffLimit: 3 --- apiVersion: batch/v1 kind: Job metadata: name: success-job namespace: keycloak spec: template: spec: containers: - name: succeed-container image: quay.io/keycloak/keycloak:25.0.6 command: ["sh", "-c", "echo 'This will succeed'; exit 0"] restartPolicy: Never backoffLimit: 3 ``` ## Related Issue Fixes #687 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed Co-authored-by: Micah Nagel <[email protected]>

## Description EBS impose a 1Gi size limitation on restored PVCs. This adds a short note to pre-reqs about checking CSI limitations. While testing with our EKS IAC I also discovered a few other issues: - IRSA annotations were not correct - Config did not properly variablize region - Config had an unmatched `"` around one of the values - Gitignore did not exclude terraform/tfstate files that shouldn't be committed ## Related Issue Fixes #718 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

…810) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-common](https://redirect.github.com/defenseunicorns/uds-common) | patch | `v0.13.0` -> `v0.13.1` | --- ### Release Notes <details> <summary>defenseunicorns/uds-common (defenseunicorns/uds-common)</summary> ### [`v0.13.1`](https://redirect.github.com/defenseunicorns/uds-common/releases/tag/v0.13.1) [Compare Source](https://redirect.github.com/defenseunicorns/uds-common/compare/v0.13.0...v0.13.1) ##### Bug Fixes - allow dependent bundle commands to be run on upgrade tests ([#241](https://redirect.github.com/defenseunicorns/uds-common/issues/241)) ([093def2](https://redirect.github.com/defenseunicorns/uds-common/commit/093def2f245709084c079aaf529a604d8ca5b6c2)) ##### Miscellaneous - **deps:** update uds common support dependencies ([#237](https://redirect.github.com/defenseunicorns/uds-common/issues/237)) ([eac2f68](https://redirect.github.com/defenseunicorns/uds-common/commit/eac2f686deacb898a6383fcc73c861293db52b9c)) - modify helm matches to handle git and helm ([#238](https://redirect.github.com/defenseunicorns/uds-common/issues/238)) ([803d9fe](https://redirect.github.com/defenseunicorns/uds-common/commit/803d9fed89bd890c1203c618a1e3fda1bd495cbd)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Chance <[email protected]>

## Description Adding documentation on the DNS assumptions in UDS Core and added example for deploying in a non-dev environment. ## Related Issue Fixes #730 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --------- Co-authored-by: Micah Nagel <[email protected]> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Rob Ferguson <[email protected]> Co-authored-by: Chance <[email protected]> Co-authored-by: UncleGedd <[email protected]> Co-authored-by: Nigel Foucha <[email protected]> Co-authored-by: Micah Nagel <[email protected]>

## Description BREAKING CHANGE: Noting this as a breaking change as Promtail is removed and replaced by Vector. If using overrides to setup additional log targets/endpoints this configuration will need to be updated to Vector's chart/config formats. Primary docs on rationale, decision, and impact of this switch are [here](https://github.com/defenseunicorns/uds-core/blob/vector-add/src/vector/README.md). ## Related Issue Fixes #377 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [base](https://redirect.github.com/istio/istio) | patch | `1.23.1` -> `1.23.2` | | [cgr.dev/du-uds-defenseunicorns/istio-pilot-fips](https://images.chainguard.dev/directory/image/istio-fips/overview) ([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/istio-fips)) | patch | `1.23.1` -> `1.23.2` | | [cgr.dev/du-uds-defenseunicorns/istio-proxy-fips](https://images.chainguard.dev/directory/image/istio-fips/overview) ([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/istio-fips)) | patch | `1.23.1` -> `1.23.2` | | docker.io/istio/pilot | patch | `1.23.1-distroless` -> `1.23.2-distroless` | | docker.io/istio/proxyv2 | patch | `1.23.1-distroless` -> `1.23.2-distroless` | | [gateway](https://redirect.github.com/istio/istio) | patch | `1.23.1` -> `1.23.2` | | [istiod](https://redirect.github.com/istio/istio) | patch | `1.23.1` -> `1.23.2` | | [registry1.dso.mil/ironbank/tetrate/istio/pilot](https://cloudsmith.io/~tetrate/repos/getistio-containers/packages/detail/docker/pilot) ([source](https://repo1.dso.mil/dsop/tetrate/istio/1.23/pilot)) | patch | `1.23.1-tetratefips-v0` -> `1.23.2-tetratefips-v0` | | [registry1.dso.mil/ironbank/tetrate/istio/proxyv2](https://cloudsmith.io/~tetrate/repos/getistio-containers/packages/detail/docker/proxyv2) ([source](https://repo1.dso.mil/dsop/tetrate/istio/1.23/proxyv2)) | patch | `1.23.1-tetratefips-v0` -> `1.23.2-tetratefips-v0` | --- ### Release Notes <details> <summary>istio/istio (base)</summary> ### [`v1.23.2`](https://redirect.github.com/istio/istio/releases/tag/1.23.2): Istio 1.23.2 [Compare Source](https://redirect.github.com/istio/istio/compare/1.23.1...1.23.2) [Artifacts](http://gcsweb.istio.io/gcs/istio-release/releases/1.23.2/) [Release Notes](https://istio.io/news/releases/1.23.x/announcing-1.23.2/) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Chance <[email protected]> Co-authored-by: Micah Nagel <[email protected]>

## Description Adjust Pepr watch limit to a lower value to help UDS Package delete/reinstalls succeed more often. ## Related Issue Fixes # #839 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

🤖 I have created a release *beep* *boop* --- ## [0.28.0](v0.27.3...v0.28.0) (2024-09-27) ### ⚠ BREAKING CHANGES * Promtail has been removed from UDS Core and replaced by Vector. If you were previously using overrides to setup additional log targets/endpoints for Promtail this configuration will need to be updated to Vector's chart/config formats. See Vector's [Sources and Sinks](https://vector.dev/components/) as well as the [helm chart values](https://github.com/defenseunicorns/uds-core/blob/1bf29582f9c5b1fe01763e86e56c19b6e17aef85/src/vector/values/values.yaml#L4) for guidance in configuration. ### Features * add support for keycloak saml attributes ([#806](#806)) ([b312b7d](b312b7d)) * exposes tls version for dev bundles ([#809](#809)) ([e1a2b55](e1a2b55)) * switch from promtail to vector (#724) ([1bf2958](1bf2958)) ### Bug Fixes * eks iac issues, document storage class pre-reqs ([#812](#812)) ([df514bd](df514bd)) * ensure istio sidecar is killed if job fails ([#813](#813)) ([34ffc0a](34ffc0a)) * revert test app version to fix CI failures ([#815](#815)) ([2ec6ad6](2ec6ad6)) ### Miscellaneous * add runtime group to renovate config ([#799](#799)) ([1bf2c69](1bf2c69)) * **deps:** update dependency defenseunicorns/uds-common to v0.13.0 ([#790](#790)) ([8bfcdc0](8bfcdc0)) * **deps:** update dependency defenseunicorns/uds-common to v0.13.1 ([#810](#810)) ([eedb551](eedb551)) * **deps:** update istio to v1.23.2 ([#796](#796)) ([039d89c](039d89c)) * **deps:** update keycloak to v25.0.6 ([#771](#771)) ([9864059](9864059)) * **deps:** update pepr to v0.13.1 ([#811](#811)) ([bc05b04](bc05b04)) * **deps:** update prometheus operator to v0.77.0 ([#783](#783)) ([8f383d8](8f383d8)) * **deps:** update runtime to v0.5.0 ([#834](#834)) ([edc068d](edc068d)) * **deps:** update setup-node to v4.0.4 ([#801](#801)) ([34dbc44](34dbc44)) * **deps:** update uds to v0.16.0 ([#802](#802)) ([d07670b](d07670b)) * **deps:** update uds-common to v0.13.0 ([#792](#792)) ([c24e833](c24e833)) * **deps:** update zarf to v0.40.1 ([#793](#793)) ([db93a7e](db93a7e)) * fix github-actions renovate ([#800](#800)) ([3ab2add](3ab2add)) * pepr policies doc table ([#803](#803)) ([440e4e1](440e4e1)) * pepr policy doc ([#814](#814)) ([8b10b86](8b10b86)) * updated pepr watch limit to 60s ([#840](#840)) ([85f3f41](85f3f41)) * use kfc WatchPhase enum ([#787](#787)) ([df4d2da](df4d2da)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | minor | `v4.1.7` -> `v4.2.0` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.2.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@lucacome](https://redirect.github.com/lucacome) in [https://github.com/actions/checkout/pull/1180](https://redirect.github.com/actions/checkout/pull/1180) - Dependency updates by [@dependabot-](https://redirect.github.com/dependabot-) [https://github.com/actions/checkout/pull/1777](https://redirect.github.com/actions/checkout/pull/1777), [https://github.com/actions/checkout/pull/1872](https://redirect.github.com/actions/checkout/pull/1872) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Micah Nagel <[email protected]> Co-authored-by: Micah Nagel <[email protected]>

## Description This fixes a broken link in the docs ## Related Issue Fixes #N/A ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

…896) ## Description Changes included: 1. Functional layers upgrade was not successful when I tested initially. There were ownership issues with the `manifests` we use for istio. To resolve that problem I moved the manifests into a chart and added an action to update the ownership before the upgrade. I also removed the pepr action that we have had for several releases since it was needed as a one-time upgrade step (similar to this one). 2. Added a lightweight doc on the usage of functional layers with a very brief explanation and warning as well as a full example of a bundle pulling in the layers. 3. A few misc link fixes and other things to follow the astro docs switch. ## Related Issue Fixes #868 Fixes #900 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --------- Co-authored-by: Noah <[email protected]>

## Description Need to update our license to correspond with AGPL and Commercial specific things. ### This is a massive PR, to save time my changes include: * Finding and replacing this: ``` # SPDX-License-Identifier: AGPL-3.0-or-later OR Commercial ``` for this: ``` # Copyright 2024 Defense Unicorns # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial ``` * Same process for changing this: ``` // SPDX-License-Identifier: AGPL-3.0-or-later OR Commercial ``` to this: ``` // Copyright 2024 Defense Unicorns // SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial ``` * Update the specific `Licensing.md` file to be the same as uds-common's file. * Update Codeowners file to capture both licensing files names as well as update codespell to allow that spelling of license. * Then going through each unchanged file and adding the respective license header. The only files that i didn't add the header to were `.md` and `.json` files. * There was also a small change to the pre-commit linting because it was confused and actually broken. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --------- Co-authored-by: Paul Di Pietro <[email protected]> Co-authored-by: Micah Nagel <[email protected]> Co-authored-by: Noah <[email protected]>

🤖 I have created a release *beep* *boop* --- ## [0.29.0](v0.28.0...v0.29.0) (2024-10-11) ### Features * add base and identity layers ([#853](#853)) ([b3f532a](b3f532a)) * add logging functional layer ([#861](#861)) ([c1a67b9](c1a67b9)) * add metrics-server functional layer ([#865](#865)) ([290367a](290367a)) * add monitoring layer ([#872](#872)) ([5ecb040](5ecb040)) * add nightly testing for rke2 ([#808](#808)) ([c401419](c401419)) * add service accounts options to sso ([#852](#852)) ([1029162](1029162)) * backup and restore layer, ui layer, runtime security layer ([#862](#862)) ([b1d8015](b1d8015)) * grafana-ha ([#838](#838)) ([d532d76](d532d76)) ### Bug Fixes * broken readme link ([#899](#899)) ([6e47b11](6e47b11)) * **ci:** switch to larger runners to resolve ci disk space issues ([#882](#882)) ([1af0401](1af0401)) * snapshot ci version modification and tasks for publish ([#877](#877)) ([f01e5bd](f01e5bd)) * support for anywhere network policies in cilium ([#884](#884)) ([5df0737](5df0737)) ### Miscellaneous * cleanup license parsing for github ([#881](#881)) ([43c98ce](43c98ce)) * **deps:** update chainctl action to v0.2.3 ([#864](#864)) ([d782b59](d782b59)) * **deps:** update checkout action to v4.2.0 ([#825](#825)) ([29d1c98](29d1c98)) * **deps:** update dependency defenseunicorns/lula to v0.8.0 ([#841](#841)) ([fe36150](fe36150)) * **deps:** update githubactions ([#866](#866)) ([44f8ea5](44f8ea5)) * **deps:** update grafana to 11.2.1 ([#836](#836)) ([11383c1](11383c1)) * **deps:** update grafana to v11.2.2 ([#867](#867)) ([06ed2c3](06ed2c3)) * **deps:** update loki nginx image to v1.27.2 ([#894](#894)) ([df7d427](df7d427)) * **deps:** update loki to v3.2.0 ([#791](#791)) ([d3c60b5](d3c60b5)) * **deps:** update metrics-server chart to v3.12.2 ([#873](#873)) ([e2e61ce](e2e61ce)) * **deps:** update pepr to v0.37.1 ([#843](#843)) ([68abcb2](68abcb2)) * **deps:** update pepr to v0.37.2 ([#850](#850)) ([b51f659](b51f659)) * **deps:** update prometheus operator to 0.77.1 ([#819](#819)) ([0864b33](0864b33)) * **deps:** update prometheus-stack ([#855](#855)) ([c791c24](c791c24)) * **deps:** update prometheus-stack helm-charts to v64.0.0 ([#849](#849)) ([50a2588](50a2588)) * **deps:** update runtime to v0.6.0 ([#897](#897)) ([89ae6e2](89ae6e2)) * **deps:** update support-deps ([#890](#890)) ([26ea612](26ea612)) * **deps:** update test-infra ([#875](#875)) ([583f07c](583f07c)) * **deps:** update test-infra to v6.9.0 ([#848](#848)) ([ef9d317](ef9d317)) * **deps:** update uds to v0.17.0 ([#859](#859)) ([1489fef](1489fef)) * **deps:** update zarf to v0.41.0 ([#857](#857)) ([a390c3d](a390c3d)) * **docs:** update doc structure for site refresh ([#895](#895)) ([1946a9a](1946a9a)) * fix broken link in docs ([#845](#845)) ([3078a5b](3078a5b)) * fix license header references ([#901](#901)) ([cf38b82](cf38b82)) * handle upgrade path for functional layers, add doc for usage ([#896](#896)) ([70d6b1b](70d6b1b)) * regroup 'support dependencies' in renovate config ([#885](#885)) ([640d859](640d859)) * update license ([#878](#878)) ([b086170](b086170)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

## Description Quick doc link fix.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [weaveworks/eksctl](https://redirect.github.com/weaveworks/eksctl) | minor | `v0.191.0` -> `v0.192.0` | --- ### Release Notes <details> <summary>weaveworks/eksctl (weaveworks/eksctl)</summary> ### [`v0.192.0`](https://redirect.github.com/eksctl-io/eksctl/releases/tag/v0.192.0): eksctl 0.192.0 [Compare Source](https://redirect.github.com/weaveworks/eksctl/compare/0.192.0...0.192.0) ##### Release v0.192.0 ##### 🚀 Features - Add support for EKS accelerated AMIs based on AL2023 ([#7996](https://redirect.github.com/weaveworks/eksctl/issues/7996)) ##### 🎯 Improvements - cleanup efa installer archive before install ([#6870](https://redirect.github.com/weaveworks/eksctl/issues/6870)) ##### 🐛 Bug Fixes - Disallow `overrideBootstrapCommand` and `preBootstrapCommands` for MNG AL2023 ([#7990](https://redirect.github.com/weaveworks/eksctl/issues/7990)) ##### Acknowledgments The eksctl maintainers would like to sincerely thank [@vsoch](https://redirect.github.com/vsoch). ### [`v0.192.0`](https://redirect.github.com/eksctl-io/eksctl/releases/tag/v0.192.0): eksctl 0.192.0 [Compare Source](https://redirect.github.com/weaveworks/eksctl/compare/0.191.0...0.192.0) ##### Release v0.192.0 ##### 🚀 Features - Add support for EKS accelerated AMIs based on AL2023 ([#7996](https://redirect.github.com/weaveworks/eksctl/issues/7996)) ##### 🎯 Improvements - cleanup efa installer archive before install ([#6870](https://redirect.github.com/weaveworks/eksctl/issues/6870)) ##### 🐛 Bug Fixes - Disallow `overrideBootstrapCommand` and `preBootstrapCommands` for MNG AL2023 ([#7990](https://redirect.github.com/weaveworks/eksctl/issues/7990)) ##### Acknowledgments The eksctl maintainers would like to sincerely thank [@vsoch](https://redirect.github.com/vsoch). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [grafana](https://grafana.com) ([source](https://redirect.github.com/grafana/helm-charts)) | patch | `8.5.2` -> `8.5.5` | --- ### Release Notes <details> <summary>grafana/helm-charts (grafana)</summary> ### [`v8.5.5`](https://redirect.github.com/grafana/helm-charts/releases/tag/grafana-8.5.5) [Compare Source](https://redirect.github.com/grafana/helm-charts/compare/grafana-8.5.4...grafana-8.5.5) The leading tool for querying and visualizing time series and metrics. #### What's Changed - \[grafana] Replicas could be 0 [#3337](https://redirect.github.com/grafana/helm-charts/issues/3337) by [@ramon951](https://redirect.github.com/ramon951) in [https://github.com/grafana/helm-charts/pull/3343](https://redirect.github.com/grafana/helm-charts/pull/3343) #### New Contributors - [@ramon951](https://redirect.github.com/ramon951) made their first contribution in [https://github.com/grafana/helm-charts/pull/3343](https://redirect.github.com/grafana/helm-charts/pull/3343) **Full Changelog**: grafana/helm-charts@tempo-distributed-1.18.4...grafana-8.5.5 ### [`v8.5.4`](https://redirect.github.com/grafana/helm-charts/releases/tag/grafana-8.5.4) [Compare Source](https://redirect.github.com/grafana/helm-charts/compare/grafana-8.5.3...grafana-8.5.4) The leading tool for querying and visualizing time series and metrics. #### What's Changed - \[grafana] chore: bump k8s-sidecar to 1.28.0 by [@mlflr](https://redirect.github.com/mlflr) in [https://github.com/grafana/helm-charts/pull/3348](https://redirect.github.com/grafana/helm-charts/pull/3348) #### New Contributors - [@mlflr](https://redirect.github.com/mlflr) made their first contribution in [https://github.com/grafana/helm-charts/pull/3348](https://redirect.github.com/grafana/helm-charts/pull/3348) **Full Changelog**: grafana/helm-charts@mimir-distributed-5.5.0...grafana-8.5.4 ### [`v8.5.3`](https://redirect.github.com/grafana/helm-charts/releases/tag/grafana-8.5.3) [Compare Source](https://redirect.github.com/grafana/helm-charts/compare/grafana-8.5.2...grafana-8.5.3) The leading tool for querying and visualizing time series and metrics. #### What's Changed - \[grafana] Update Grafana to version 11.2.2 by [@terop](https://redirect.github.com/terop) in [https://github.com/grafana/helm-charts/pull/3356](https://redirect.github.com/grafana/helm-charts/pull/3356) **Full Changelog**: grafana/helm-charts@alloy-0.9.1...grafana-8.5.3 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Micah Nagel <[email protected]>

## Description Fixes broken links in uds operator code base (`./src/pepr`) ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [ ] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

…909) ## Description The UDS Operator has KFC watch (exemptions) that operates outside of Pepr configured watchers. This ensures the configuration for using HTTP2 watches is respected by the exemption watch. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

## Description This changes the proxy cleanup logic to be: All containers terminated AND either: - restartPolicy of Never - restartPolicy of OnFailure w/0 exit code A restartPolicy of Always should keep restarting the containers inside the pod and should not need proxy cleanup. ## Related Issue Fixes #913 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [registry1.dso.mil/ironbank/opensource/defenseunicorns/pepr/controller](https://redirect.github.com/defenseunicorns/pepr) ([source](https://repo1.dso.mil/dsop/opensource/defenseunicorns/pepr/controller)) | minor | `v0.37.2` -> `v0.38.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cgr.dev/du-uds-defenseunicorns/kube-webhook-certgen-fips](https://images.chainguard.dev/directory/image/kube-webhook-certgen-fips/overview) ([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/kube-webhook-certgen-fips)) | patch | `1.11.2` -> `1.11.3` | | [kube-prometheus-stack](https://redirect.github.com/prometheus-operator/kube-prometheus) ([source](https://redirect.github.com/prometheus-community/helm-charts)) | minor | `65.0.0` -> `65.2.0` | | [registry.k8s.io/ingress-nginx/kube-webhook-certgen](https://redirect.github.com/kubernetes/ingress-nginx) | patch | `v1.4.3` -> `v1.4.4` | | [registry1.dso.mil/ironbank/opensource/ingress-nginx/kube-webhook-certgen](https://redirect.github.com/kubernetes/ingress-nginx/) ([source](https://repo1.dso.mil/dsop/opensource/kubernetes/ingress-nginx/kube-webhook-certgen)) | patch | `v1.4.3` -> `v1.4.4` | --- ### Release Notes <details> <summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary> ### [`v65.2.0`](https://redirect.github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-65.1.1...kube-prometheus-stack-65.2.0) [Compare Source](https://redirect.github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-65.1.1...kube-prometheus-stack-65.2.0) ### [`v65.1.1`](https://redirect.github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-65.1.0...kube-prometheus-stack-65.1.1) [Compare Source](https://redirect.github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-65.1.0...kube-prometheus-stack-65.1.1) ### [`v65.1.0`](https://redirect.github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-65.0.0...kube-prometheus-stack-65.1.0) [Compare Source](https://redirect.github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-65.0.0...kube-prometheus-stack-65.1.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Chance <[email protected]>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | aws | required_provider | minor | `~> 5.71.0` -> `~> 5.72.0` | | [terraform-aws-modules/rds/aws](https://registry.terraform.io/modules/terraform-aws-modules/rds/aws) ([source](https://redirect.github.com/terraform-aws-modules/terraform-aws-rds)) | module | minor | `6.9.0` -> `6.10.0` | --- ### Release Notes <details> <summary>terraform-aws-modules/terraform-aws-rds (terraform-aws-modules/rds/aws)</summary> ### [`v6.10.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-rds/blob/HEAD/CHANGELOG.md#6100-2024-10-16) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-rds/compare/v6.9.0...v6.10.0) ##### Features - Support `cloudwatch_log_group_tags` parameter ([#571](https://redirect.github.com/terraform-aws-modules/terraform-aws-rds/issues/571)) ([73e33fe](https://redirect.github.com/terraform-aws-modules/terraform-aws-rds/commit/73e33feba5d907801791168ebf6d3132fbd646f5)) ##### Bug Fixes - Update CI workflow versions to latest ([#570](https://redirect.github.com/terraform-aws-modules/terraform-aws-rds/issues/570)) ([220cc85](https://redirect.github.com/terraform-aws-modules/terraform-aws-rds/commit/220cc85dcdc8eb63772e25526db693dd563d40a1)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Micah Nagel <[email protected]>

…annotation (#916) ## Description Adds a check to the `annotateMutation` function that prevents duplicate values (policy names) from being added to the `uds-core.pepr.dev/mutated` key ## Related Issue Fixes #717 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --------- Co-authored-by: Micah Nagel <[email protected]>

## Description Splits the validations out from the OSCAL Component-Definition. `lula validate` can work remotely to validate the validations. Updated the OSCAL Assessment-Result as the baseline has changed from High to Moderate. Updated the Istio catalog source url to a tagged version (recent GSA release) This pattern allows for easier maintenance and development of the validations by not reading through 1000s of lines of OSCAL and OSCAL formatting just to make a small update. All of the validations under the ./compliance/validations directory are a pull from the compliance-artifacts repo where OSCAL and Validations development happen. ## Related Issue Relates to #797 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

## Description CI currently doesn't check for license linting. Also updating some compliance files with license headers. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

update pepr policy docs - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --------- Co-authored-by: Micah Nagel <[email protected]>

EBS impose a 1Gi size limitation on restored PVCs. This adds a short note to pre-reqs about checking CSI limitations. While testing with our EKS IAC I also discovered a few other issues: - IRSA annotations were not correct - Config did not properly variablize region - Config had an unmatched `"` around one of the values - Gitignore did not exclude terraform/tfstate files that shouldn't be committed Fixes #718 - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

BREAKING CHANGE: Noting this as a breaking change as Promtail is removed and replaced by Vector. If using overrides to setup additional log targets/endpoints this configuration will need to be updated to Vector's chart/config formats. Primary docs on rationale, decision, and impact of this switch are [here](https://github.com/defenseunicorns/uds-core/blob/vector-add/src/vector/README.md). Fixes #377 - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

Adjust Pepr watch limit to a lower value to help UDS Package delete/reinstalls succeed more often. Fixes # #839 - [x] Bug fix (non-breaking change which fixes an issue) - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed

🤖 I have created a release *beep* *boop* --- [0.28.0](v0.27.3...v0.28.0) (2024-09-27) * Promtail has been removed from UDS Core and replaced by Vector. If you were previously using overrides to setup additional log targets/endpoints for Promtail this configuration will need to be updated to Vector's chart/config formats. See Vector's [Sources and Sinks](https://vector.dev/components/) as well as the [helm chart values](https://github.com/defenseunicorns/uds-core/blob/1bf29582f9c5b1fe01763e86e56c19b6e17aef85/src/vector/values/values.yaml#L4) for guidance in configuration. * add support for keycloak saml attributes ([#806](#806)) ([b312b7d](b312b7d)) * exposes tls version for dev bundles ([#809](#809)) ([e1a2b55](e1a2b55)) * switch from promtail to vector (#724) ([1bf2958](1bf2958)) * eks iac issues, document storage class pre-reqs ([#812](#812)) ([df514bd](df514bd)) * ensure istio sidecar is killed if job fails ([#813](#813)) ([34ffc0a](34ffc0a)) * revert test app version to fix CI failures ([#815](#815)) ([2ec6ad6](2ec6ad6)) * add runtime group to renovate config ([#799](#799)) ([1bf2c69](1bf2c69)) * **deps:** update dependency defenseunicorns/uds-common to v0.13.0 ([#790](#790)) ([8bfcdc0](8bfcdc0)) * **deps:** update dependency defenseunicorns/uds-common to v0.13.1 ([#810](#810)) ([eedb551](eedb551)) * **deps:** update istio to v1.23.2 ([#796](#796)) ([039d89c](039d89c)) * **deps:** update keycloak to v25.0.6 ([#771](#771)) ([9864059](9864059)) * **deps:** update pepr to v0.13.1 ([#811](#811)) ([bc05b04](bc05b04)) * **deps:** update prometheus operator to v0.77.0 ([#783](#783)) ([8f383d8](8f383d8)) * **deps:** update runtime to v0.5.0 ([#834](#834)) ([edc068d](edc068d)) * **deps:** update setup-node to v4.0.4 ([#801](#801)) ([34dbc44](34dbc44)) * **deps:** update uds to v0.16.0 ([#802](#802)) ([d07670b](d07670b)) * **deps:** update uds-common to v0.13.0 ([#792](#792)) ([c24e833](c24e833)) * **deps:** update zarf to v0.40.1 ([#793](#793)) ([db93a7e](db93a7e)) * fix github-actions renovate ([#800](#800)) ([3ab2add](3ab2add)) * pepr policies doc table ([#803](#803)) ([440e4e1](440e4e1)) * pepr policy doc ([#814](#814)) ([8b10b86](8b10b86)) * updated pepr watch limit to 60s ([#840](#840)) ([85f3f41](85f3f41)) * use kfc WatchPhase enum ([#787](#787)) ([df4d2da](df4d2da)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

docandrew added 4 commits September 20, 2024 20:56

Added getting started blurb

fc39544

Added image workaround for dev-setup, getting started notes

9b88e2c

Started on secret watch/mutator

a7646b1

get rid of sed experiment

cdf1cee

docandrew changed the title ~~Feat: Secret Copy #741~~ feat: secret copy #741 Sep 25, 2024

docandrew and others added 25 commits September 25, 2024 17:31

Linter fix

80eb7ed

linter

60b041d

feat: exposes tls version for dev bundles (#809)

4de50e5

More work on annotations, mutate copy label in dest secret

b538985

Merge branch 'main' into secretcopy

38f3e18

undo dumb sarif

8ef55f3

mjnagel and others added 28 commits October 17, 2024 14:39

fix: adr link in func layers doc (#903)

3663cc7

## Description Quick doc link fix.

Added image workaround for dev-setup, getting started notes

7528f65

Started on secret watch/mutator

cdb7756

get rid of sed experiment

6417ee8

docandrew closed this Oct 17, 2024

docandrew deleted the secretcopy branch October 17, 2024 20:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: secret copy #741 #807

feat: secret copy #741 #807

docandrew commented Sep 23, 2024

feat: secret copy #741 #807

feat: secret copy #741 #807

Conversation

docandrew commented Sep 23, 2024

Description

Related Issue

Type of change

Checklist before merging