v0.4.12

What's Changed

• Update k8s log alert policy filters by @malancas in #400
• Create alert for prober verification failures by @codysoyland in #402
• Update alert name and condition name by @malancas in #404
• Define basic ctlog and dex availability SLOs. by @var-sdk in #405
• Alert on SLO burn rate by @var-sdk in #408
• use retryablehttp client for prober by @bobcallaway in #415
• Remove api.sigstore.dev CNAME record by @haydentherapper in #417
• Add explicit dependency on project_roles for all modules. by @var-sdk in #416
• Write the repository into secret, test air-gap mode. by @vaikas in #382
• add explicit dependencies on the associated metrics by @malancas in #407
• Add ctlog shards that create their own Cloud SQL instances. by @vaikas in #370
• Add allow lists for probed methods. by @var-sdk in #406
• Use GITHUB_OUTPUT instead of deprecated set-output by @cpanato in #418
• Configure cluster autoscaling from sigstore module by @priyawadhwa in #427
• add support for pre-existing secrets for CTLog. by @vaikas in #429

Full Changelog: v0.4.11...v0.4.12

v0.4.11

What's Changed

• Enable reporting of normalized SLO endpoint in prober. by @var-sdk in #401

Full Changelog: v0.4.10...v0.4.11

v0.4.10

What's Changed

• Fix typo in config var name by @codysoyland in #392
• Create K8s pod metric based logs and alerts by @malancas in #391
• Remove broken probe by UUID and add probing for fulcio v2 read endpoints. by @var-sdk in #394
• Add availability. SLO definitions to terraform for Fulcio and Rekor by @var-sdk in #393
• Missed this one last time around. google-beta => google by @vaikas in #396
• Add prober flags for passing extra requests. by @var-sdk in #395

Full Changelog: v0.4.9...v0.4.10

v0.4.9

Changelog

• 97ca633 Add prober for verifying Rekor write correctness (#390)

Thanks to all contributors!

v0.4.8

What's Changed

• Add back support for RSA for legacy deployed CTLogs. by @vaikas in #341
• Remove /api/v1/index/retrieve endpoint from prober checks since it's experimental by @priyawadhwa in #340
• do not use setup-kind action from the head. by @vaikas in #345
• Wire missing oslogin parameter to oslogin module. by @var-sdk in #346
• Add kind support for v1.25.x by @vaikas in #343
• Update prober alerts to accept 201s on write APIs. by @var-sdk in #350
• Fix prober alerts. by @var-sdk in #353
• Correct a link in README.md. by @var-sdk in #355
• Use file based signer now that Rekor supports it. by @vaikas in #358
• Close the httpresponse.Body by @vaikas in #357
• Make tuf generic in prep for more fulcio / ctlog certs/keys. by @vaikas in #356
• Stop testing way older versions. build/test with go1.19 by @vaikas in #366
• add dns resources to service-level terraform by @bobcallaway in #336
• Use ctlog.config for creating certs, add managecaroots job, tests. by @vaikas in #352
• Trillian v0.12.1, Rekor v0.12.1, update go deps. by @vaikas in #367
• refactor signing release images by @cpanato in #368
• fix shellcheck by @cpanato in #376

Full Changelog: v0.4.7...v0.4.8

v0.4.6

What's Changed

• Disable noisy rekor alert by @priyawadhwa in #303
• Bump github.com/go-openapi/swag from 0.22.0 to 0.22.3 by @dependabot in #310
• Bump github.com/sigstore/cosign from 1.10.1 to 1.11.0 by @dependabot in #306
• Bump github/codeql-action from 2.1.18 to 2.1.19 by @dependabot in #305
• Bump sigstore/cosign-installer from 2.5.0 to 2.5.1 by @dependabot in #304
• Bump github.com/google/trillian from 1.4.2 to 1.5.0 by @dependabot in #309
• Bump github.com/sigstore/rekor from 0.10.0 to 0.11.0 by @dependabot in #311
• Bump all sigstore components. Use GODEBUG=netdns=go for fulcio. by @vaikas in #316

Full Changelog: v0.4.5...v0.4.6

v0.4.5

What's Changed

• Updates to reflect v0.4.4 by @vaikas in #300
• remove deprecated github.com/pkg/errors and use native go error by @cpanato in #301
• New kind images + more retries to work around 1.23 by @vaikas in #302

Full Changelog: v0.4.4...v0.4.5

v0.4.4

What's Changed

• bump rekor to v0.10.0 and fulcio to v0.5.2 by @vaikas in #295
• actually parse the release-version, update curl to fail properly by @vaikas in #290
• Bump github.com/go-openapi/swag from 0.21.1 to 0.22.0 by @dependabot in #293
• add working-directory input so that you can control where files go. by @vaikas in #294
• Fix issue #129 by @vaikas in #296
• Increase ksvc wait times 45s->2m. by @vaikas in #299

Full Changelog: v0.4.3...v0.4.4

v0.4.3

What's Changed

• New Release artifact: add prober to build and release the image/manifests by @cpanato in #288

• Reenable noisy latency alert by @priyawadhwa in #280

• use release 0.4.2. Bump knative to 1.6.0. by @vaikas in #279

• chore: use verification out of band by @hectorj2f in #276

• Fix prober metric alerts type by @priyawadhwa in #281

• Remove latency alerts on uptime checks by @priyawadhwa in #273

• Add clearer logging to prober by @priyawadhwa in #282

• Fix #286 : Make waits for jobs uniform, 30 retries, ttl of 600. by @vaikas in #287

• Add flag sigstore-only for installing into existing clusters by @vaikas in #285

• Document action better. by @vaikas in #284

• add prober to build and release the image/manifests by @cpanato in #288

New Contributors

• @hectorj2f made their first contribution in #276

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• Breaking change: setup-scaffolding.sh assumed you had ko installed locally, so added a proper replacement for previous release.yaml and replace it with setup-scaffolding-from-release.sh instead.

• Give mysql SA permissions to export Monitoring/Trace data by @priyawadhwa in #272

• Roles should be applied directly to the mysql service account by @priyawadhwa in #278

• FIX Broken main action . Test with 0.4.1 release by @vaikas in #277

Full Changelog: v0.4.1...v0.4.2