Releases: FairwindsOps/rbac-manager
Releases · FairwindsOps/rbac-manager
0.8.1
0.8.0
Docker image now uses scratch instead of Alpine.
0.7.0 Role Binding change detection and repair
Detecting changes to role bindings owned by RBAC Definitions and repa…
0.6.1 Bugfix for MatchExpressions
0.6.0 Support for Match Expressions Namespace Selectors
New Features:
- Namespace Label Selectors in Role Bindings now support MatchExpressions syntax (in addition to the previous MatchLabels support)
0.5.0: Namespace Selectors, Kubebuilder Upgrade
New Features:
- Role Bindings can now be defined with Namespace Selectors
0.4.3: Improved Tests, Go Modules, More Secure Deployment Configuration
- More complete tests
- Some slight refactoring to enable better tests (majority of logic in Reconcile function was moved to another function)
- Improved logic for owner ref matching
- A move from Dep to Go modules (and Go 1.11)
- More secure deployment configuration by dropping all capabilities and running as a non root user
0.4.2: Alpine Security Update for Docker Image
Patches:
- Upgrades Alpine to 3.8 in Docker Image to patch this vulnerability: https://git.alpinelinux.org/cgit/apk-tools/commit/?id=6484ed9849f03971eb48ee1fdc21a2f128247eb1
0.4.1: Bug fix to ensure deletes always happen before creates, updates to upgrade documentation
Bug Fixes:
- Ensure deletes always happen before creates
Documentation:
- Add note regarding cluster-admin requirement on 0.4.0 upgrade
0.4.0: Moving to Go + Kubebuilder, New RBAC Definition Syntax, CRD Validation
New Features:
- New
RBACDefinition
syntax - Support for multiple
RBACDefinitions
- Using OwnerReferences to associate a specific
RBACDefinition
with aClusterRoleBinding
,RoleBinding
, orServiceAccount
- Using CRD validation for all RBACDefinition fields
- Moving from rbac-manager.reactiveops.io to rbacmanager.reactiveops.io for CRD
- Support for groups
- Some basic testing in place
Breaking Changes:
- This is a huge release that contains some breaking changes. We've included docs that cover the upgrade process to 0.4.0.