Releases: defenseunicorns/uds-core
Releases · defenseunicorns/uds-core
v0.29.0
0.29.0 (2024-10-11)
Features
- add base and identity layers (#853) (b3f532a)
- add logging functional layer (#861) (c1a67b9)
- add metrics-server functional layer (#865) (290367a)
- add monitoring layer (#872) (5ecb040)
- add nightly testing for rke2 (#808) (c401419)
- add service accounts options to sso (#852) (1029162)
- backup and restore layer, ui layer, runtime security layer (#862) (b1d8015)
- grafana-ha (#838) (d532d76)
Bug Fixes
- broken readme link (#899) (6e47b11)
- ci: switch to larger runners to resolve ci disk space issues (#882) (1af0401)
- snapshot ci version modification and tasks for publish (#877) (f01e5bd)
- support for anywhere network policies in cilium (#884) (5df0737)
Miscellaneous
- cleanup license parsing for github (#881) (43c98ce)
- deps: update chainctl action to v0.2.3 (#864) (d782b59)
- deps: update checkout action to v4.2.0 (#825) (29d1c98)
- deps: update dependency defenseunicorns/lula to v0.8.0 (#841) (fe36150)
- deps: update githubactions (#866) (44f8ea5)
- deps: update grafana to 11.2.1 (#836) (11383c1)
- deps: update grafana to v11.2.2 (#867) (06ed2c3)
- deps: update loki nginx image to v1.27.2 (#894) (df7d427)
- deps: update loki to v3.2.0 (#791) (d3c60b5)
- deps: update metrics-server chart to v3.12.2 (#873) (e2e61ce)
- deps: update pepr to v0.37.1 (#843) (68abcb2)
- deps: update pepr to v0.37.2 (#850) (b51f659)
- deps: update prometheus operator to 0.77.1 (#819) (0864b33)
- deps: update prometheus-stack (#855) (c791c24)
- deps: update prometheus-stack helm-charts to v64.0.0 (#849) (50a2588)
- deps: update runtime to v0.6.0 (#897) (89ae6e2)
- deps: update support-deps (#890) (26ea612)
- deps: update test-infra (#875) (583f07c)
- deps: update test-infra to v6.9.0 (#848) (ef9d317)
- deps: update uds to v0.17.0 (#859) (1489fef)
- deps: update zarf to v0.41.0 (#857) (a390c3d)
- docs: update doc structure for site refresh (#895) (1946a9a)
- fix broken link in docs (#845) (3078a5b)
- fix license header references (#901) (cf38b82)
- handle upgrade path for functional layers, add doc for usage (#896) (70d6b1b)
- regroup 'support dependencies' in renovate config (#885) (640d859)
- update license (#878) (b086170)
v0.28.0
0.28.0 (2024-09-27)
⚠ BREAKING CHANGES
- Promtail has been removed from UDS Core and replaced by Vector. If you were previously using overrides to setup additional log targets/endpoints for Promtail this configuration will need to be updated to Vector's chart/config formats. See Vector's Sources and Sinks as well as the helm chart values for guidance in configuration.
Features
- add support for keycloak saml attributes (#806) (b312b7d)
- exposes tls version for dev bundles (#809) (e1a2b55)
- switch from promtail to vector (#724) (1bf2958)
Bug Fixes
- eks iac issues, document storage class pre-reqs (#812) (df514bd)
- ensure istio sidecar is killed if job fails (#813) (34ffc0a)
- revert test app version to fix CI failures (#815) (2ec6ad6)
Miscellaneous
- add runtime group to renovate config (#799) (1bf2c69)
- deps: update dependency defenseunicorns/uds-common to v0.13.0 (#790) (8bfcdc0)
- deps: update dependency defenseunicorns/uds-common to v0.13.1 (#810) (eedb551)
- deps: update istio to v1.23.2 (#796) (039d89c)
- deps: update keycloak to v25.0.6 (#771) (9864059)
- deps: update pepr to v0.13.1 (#811) (bc05b04)
- deps: update prometheus operator to v0.77.0 (#783) (8f383d8)
- deps: update runtime to v0.5.0 (#834) (edc068d)
- deps: update setup-node to v4.0.4 (#801) (34dbc44)
- deps: update uds to v0.16.0 (#802) (d07670b)
- deps: update uds-common to v0.13.0 (#792) (c24e833)
- deps: update zarf to v0.40.1 (#793) (db93a7e)
- fix github-actions renovate (#800) (3ab2add)
- pepr policies doc table (#803) (440e4e1)
- pepr policy doc (#814) (8b10b86)
- updated pepr watch limit to 60s (#840) (85f3f41)
- use kfc WatchPhase enum (#787) (df4d2da)
v0.27.3
0.27.3 (2024-09-19)
Miscellaneous
To enable UDS Runtime, add it as an optional component in your bundle:
- name: uds-core
repository: ghcr.io/defenseunicorns/packages/private/uds/core
ref: 0.27.3-unicorn
optionalComponents:
- uds-runtimev0.27.2
v0.27.1
0.27.1 (2024-09-18)
Known Issues
- Loki upgrade does not have correct date/store set for schema config, #780, and will be fixed in 0.27.2. If on an existing install, we recommend upgrading directly to 0.27.2 or use overrides to manage the schema config values on your own using the default values from upstream as a starting point.
Bug Fixes
Miscellaneous
- allow service ports to be overridden in test bundles (#765) (5f9a920)
- deps: update authservice to v1.0.2 (#738) (3328b08)
- deps: update githubactions (#762) (c7bab2a)
- deps: update grafana curl image to v8.10.1 (#773) (0d56ef2)
- deps: update istio to v1.23.1 (#744) (f222ea3)
- deps: update neuvector chart to 2.7.9 (#750) (a97b509)
- deps: update neuvector updater image to v8.10.1 (#774) (2afddfc)
- deps: update pepr to 0.36.0 (#696) (2a1591e)
- deps: update prometheus-stack (#743) (61f7a60)
- deps: update test-infra random provider to v3.6.3 (#753) (009326d)
- deps: update uds-identity-config version to 0.6.3 (#772) (a2ad936)
- deps: update uds-k3d to v0.9.0 (1.30.4 k3s), k3d to 5.7.4 (#770) (20656e6)
- deps: update velero kubectl image to v1.31.1 (#763) (56b3a21)
- deps: update velero kubectl to v1.31.1 (#757) (c15d77e)
- remove unused neuvector exporter (#768) (bd4f5cf)
- task for custom pepr (#766) (e624d73)
v0.27.0
0.27.0 (2024-09-11)
Known Issues
- Loki upgrade does not have correct date/store set for schema config, #780, and will be fixed in 0.27.2. If on an existing install, we recommend upgrading directly to 0.27.2 or use overrides to manage the schema config values on your own using the default values from upstream as a starting point.
Features
- add support for Keycloak attribute
saml.assertion.signature(#723) (0e1a3da) - investigate and restrict network policies (#719) (b6ebc49)
- protocol mappers (#621) (d71cb44)
Bug Fixes
- correct keycloak chart schema for additionalGateways (#745) (1fd8ef3)
- default
ctx.allowPrivilegeEscalationtofalseifundefined(#698) (7ecd130) - pre-commit linting (#703) (c3a2f62)
- switch secret
datatostringData(#710) (9323d4e) - update ci workflows for docs shim (#700) (5d89254)
Miscellaneous
- adding uds core prerequisites documentation (#636) (6225766)
- deps: update dependency weaveworks/eksctl to v0.190.0 (#721) (16d208a)
- deps: update githubactions (#642) (0705ba6)
- deps: update grafana curl image to v8.10.0 (#751) (0cdb020)
- deps: update grafana sidecar image to v1.27.6 (#732) (ad4808b)
- deps: update grafana to 11.2.0 (#670) (84e099a)
- deps: update istio to v1.23.0 (#672) (3266a3a)
- deps: update keycloak chart version to v25 (#470) (3e805e7)
- deps: update keycloak to 25.0.5 (#742) (45c540a)
- deps: update loki memcached images to v1.6.31 (#752) (f94daf1)
- deps: update metrics-server to v0.7.2 (#708) (53f1bfd)
- deps: update prometheus-stack (#437) (526aab1)
- deps: update prometheus-stack chart to v62.6.0 (#740) (424570d)
- deps: update promtail helm chart to v6.16.5 (#706) (4689d54)
- deps: update uds cli to v0.14.2 (#697) (f92bf53)
- deps: update uds to v0.15.0 (#733) (57e0e64)
- deps: update velero (#695) (c188393)
- deps: update velero chart to 7.2.1, kubectl image for unicorn flavor (#725) (a98bac4)
- deps: update velero helm chart to v7.2.0 (#720) (6309882)
- deps: update zarf to v0.39.0 (#731) (7268680)
- update configure policy exemptions doc link (#739) (6ad1256)
- update loki to 3.1.1 (#449) (e61da27)
- update renovate config/values to match all neuvector images (#755) (72a97ba)
- update resources for prometheus, document resource overrides (#713) (e80c1a4)
- update to keycloak 25 (#707) (0551aa5)
v0.26.1
v0.26.0
0.26.0 (2024-08-21)
⚠ BREAKING CHANGES
- client attribute allow list (#676)
Features
- azure: azure blob storage support for velero (#644) (eff9a82)
- support authservice with redis, switch to pepr helm chart (#658) (e2fe58a)
Bug Fixes
- client attribute allow list (#676) (100321e)
- handle client id names with special characters (#659) (a84769e)
- pull lula main for threshold update (#638) (5a34ce8)
- release-please config bump minor pre-major (#680) (3f824c1)
Miscellaneous
- add watch config to exemption watch (#682) (7714ff8)
- deps: update grafana helm chart to v8.4.4 (#664) (77ea6f5)
- deps: update pepr to 0.34.1 (#654) (6d4655d)
- deps: update promtail to v3.1.1 (#657) (c009e5f)
- deps: update test-infra (#412) (a4c8fe9)
- deps: update test-infra (kms) to v0.0.5 (#667) (bd68637)
- deps: update test-infra KMS to v0.0.4 (#663) (3c30b9f)
- deps: update uds to v0.14.1 (#677) (12ec8a1)
- deps: update velero kubectl image to v1.31.0 (#669) (d6b2f12)
- deps: update velero to v7.1.5 (#671) (10ab714)
- deps: update zarf to v0.38.1 (#616) (e0cb85d)
- deps: update zarf to v0.38.2 (#668) (3328925)
- generate a schema for keycloak helm chart (#627) (cf3a9e7)
- mute pepr on deploy action for migrating to helm chart (#683) (9d05ddd)
- neuvector: update source for unicorn images (#675) (568efa2)
v0.25.2
0.25.2 (2024-08-09)
Bug Fixes
- add backoff to operator retry mechanism (#650) (52c97fd)
- network allows for core netpols (#652) (e9b69e8)
Miscellaneous
- allow for extra keycloak gateway usage with client certs (#648) (7b1c474)
- deps: update dependency defenseunicorns/uds-common to v0.11.1 (#647) (768aa1c)
- deps: update dependency defenseunicorns/uds-common to v0.11.2 (#653) (f7d1ce8)
- deps: update grafana helm chart to v8.4.3 (#660) (81c7af0)
- deps: update grafana to 11.1.3 ([#607](#607)) (7b343ac)
- deps: update neuvector to 5.3.4 (#606) (526bff4)
- deps: update pepr to 0.33.0 (#588) (6eee8f0)
- update identity config to 0.6.0 (#661) (469fed8)
v0.25.1
0.25.1 (2024-08-06)
⚠ BREAKING CHANGES
- change metric server to optional (#611) - note that the initial implementation/plan for this was 0.25.0 but there was a bug in the rollout of this change
Bug Fixes
Miscellaneous
- add debug logs for istio injection logic (#602) (9075436)
- add support for public clients and disabling standard auth flow (#630) (38151d7)
- deps: update dependency defenseunicorns/uds-common to v0.11.0 (#617) (997cf37)
- deps: update dependency weaveworks/eksctl to v0.188.0 (#623) (3081044)
- deps: update uds to v0.14.0 (#612) (7fe927e)
- update codeowners (#637) (eec5017)