- Removes 'nullable: false' from CRD definitions (as its the default) (#344) (
ee6b183
)
- chore: More stable integration tests (
be6da04
)
- fix: Allow connectors to run under Restricted pod-security policy (#329) (
14302df
)
- chore: Increase test coverage (#285) (
28b69f5
)
- fix: Remove TwingateResourceAccess ownerReference (#289) (
acf0a72
)
- fix: TwingateResourceAccess only updating every 10h and not immediately (#283) (
2809bb9
)
- fix: TwingateResourceAccess timer too frequent (
c1645f4
)
- feat: Allow defining custom resource Name for annotated service resource (#279) (
91d3263
)
- chore: Update Golang to 1.22.2 (
49b9e1f
)
- docs: Update README (
6516435
)
- fix: using the operator with annotations have some problems (#270) (
ace69fc
)
-
feat: Allow exposing Service objects with annotations (#244) (
87a8bdc
) -
feat: Don’t query for principal external ref once we have the id (#243) (
9d6cb8c
) -
feat: Ability to import existing twingate resources (#246) (
d143995
)
-
feat: Added TwingateConnector
logAnalytics
flag (#237) (a98acc3
) -
feat: Add ability to customize kopf logging level (#236) (
1fc2eaf
)
- chore: Add more Ruff linters (#233) (
7f918be
)
- feat: Add TwingateConnector sidecarContainers prop (#234) (
835da7c
)
-
feat: TwingateConnector - allow defining extra pod annotations with
podAnnotations
(#225) (7b44838
) -
feat: twingateresourceaccess - allow specifying principal by name (#62) (
0b1e69b
) -
feat: Make TwingateConnector's containerExtra and podExtra mutable (#223) (
e7d8425
)
- fix: Add validation for TwingateConnector when provider is “google” (#224) (
68e188e
)
-
chore: Upgrade Go to 1.22.0 and setup dependabot (#205) (
6f53ebf
) -
chore: Temporary disable poetry package-mode until dependabot upgrades (
7b4c207
) -
chore: Integration test for old pod migration (#190) (
2dff2b3
)
- fix: Allow env to be defined in containerExtra (#222) (
14f5ef5
)
- fix: Resource restricted policy should allow empty ports (#193) (
e9aec7d
)
- chore: Set poetry to package-mode = false (#188) (
f91f57a
)
- fix: Fix k8s_force_delete_pod finalizers removal (#189) (
5b2a8f3
)
-
chore: Upgrade Poetry to latest 1.8.2 (#183) (
128de82
) -
chore: Upgrade Poetry to 1.8.1 (#181) (
2f490f8
)
- feat: Improved TwingateConnector reconciliation (#180) (
e0a4f25
)
- fix: Connector pod updates "Forbidden" error (#184) (
8096e62
)
-
chore: Pydantic deprecated .dict() for .model_dump() (#171) (
065c146
) -
chore: Switch from Black to Ruff Formatter (#148) (
1b822ae
) -
chore: Stalebot is deprecated. Move to actions/stale@v9 (#147) (
94dce35
)
- feat: Add
hasStatusNotificationsEnabled
toTwingateConnector
(#170) (f03f851
)
-
fix: Improved
twingate_connector_recreate_pod
logic (#179) (fd3f533
) -
fix: LABEL_CONNECTOR_POD_DELETED isnt set to false after pod recreated (#177) (
f3d6865
) -
fix: Reduce update scope for
twingate_resource_update
(#176) (c947fba
) -
fix: Limit twingate_resource_access_update scope to spec (#175) (
75ff3f0
) -
fix: Add status and logs to
twingate_connector_resume
(#168) (13495f0
) -
fix: twingate connector doesnt handle pod deletion on resume (#162) (
7fbc24b
) -
fix: Deleting an item already deleted on Twingate Admin should not fail (#160) (
3cd447f
)
- Upgrade local tooling for 3.11.8 (
4cdaec0
)
-
fix: Fix resource
protocols
diffing and serialization (#146) (7c9407e
) -
fix: Disable healthcheck access logs (#135) (
ad8eaba
) -
fix: Added
twingate_connector_image_update
to handleimage
updates (#131) (25f2753
)
- build: Make CHANGELOG generation nicer (#98) (
c13b35b
)
-
feat: Add relevant security context to run as non root (#103) (
c1cdfb7
) -
feat: Add seccompProfile by default (#104) (
e3ef8d6
)
- build: Replace pydocstyle with ruff (#35) (
b771c7a
)
-
chore: Sort lines on pyproject dependencies (#39) (
62c1338
) -
chore: adding the docker vulnerability monitor (#30)
Co-authored-by: Eran Kampf <eran@ekampf.com>
Co-authored-by: Eran Kampf <205185+ekampf@users.noreply.github.com> (b9af2ec
)
- docs: Add descriptions to CRD fields (#48) (
bdd6110
)
-
feat: Add allowPrivilegeEscalation: false to values.yaml (#92) (
55a4ce2
) -
feat: Allow setting remote network by name (#84) (
835c4c2
) -
feat: Allow specifying API Key via reference to an external Secret (#72) (
a028068
) -
feat: Allow customizing connector logLevel (#58) (
b2323a8
) -
feat: Add GCP Support for connector imagePolicy (#54) (
0b5b84f
) -
feat: TwingateConnector object (auto provision and update) (#27) (
7a135f2
)
-
fix: gql.Client can't be singleton as its not thread-safe (#96) (
f137124
) -
fix: test_remote_network_name_gets_network_id (#97) (
9c0afb9
) -
fix: typo in class name - TwingateRety -> TwingateRetry (#95) (
a9d8882
) -
fix: ClusterRole definition - create\delete pods and secrets required by Connector functionality (#94) (
d4674fc
) -
fix: Allow setting remote network by name - TwingateSettings failure (#93) (
a958588
) -
fix: chore, build changes should change patch (#36) (
cfda90b
)
-
test: remove unused fixture (#42) (
6cd4d68
) -
test: Randomize test runs and fix errorsa (#41) (
f953678
) -
test: Use pytest-factoryboy instead of defining factory fixtures manually (#40) (
8b3d012
) -
test: Simplify integration tests setup (#38) (
d757085
) -
test: Reorganize integration tests (#28) (
86a27e4
)
-
Update README.md (
9693dc0
) -
Fix: CVE-2023-5752 - always use latest pip (#56) (
390b510
) -
Allow manually triggering CI (
955228b
)
- docs: Improve development docs (#25) (
ebf8cdb
)
- fix: change persistence layer - operator.twingate.com to just twingate.com (#24) (
d7ebd7b
)
- test: resourceaccess integration testing (#23)
Co-authored-by: Eran Kampf <eran@ekampf.com> (8aa5621
)
- fix: ResourceAccessSpec.get_resource_ref_object fetching wrong version (#20)
Co-authored-by: semantic-release <semantic-release> (86b6557
)
- build: Fix missing semantic-release dependency on release_dev step (#14) (
e07e364
)
- chore: Add Issue Templates (#17) (
b478434
)
- docs: README overhaul (#15) (
3c8e29c
)
-
feat: Support protocol restrictions on twingateresource (#16) (
0c95107
) -
feat: Initial operator (#1) (
0bc53a8
)
-
fix: Change persistence settings to use Twingate namespace (#18) (
41729d3
) -
fix: Fix helm chart + add log formatting (#19) (
9fb6675
) -
fix: Dev release tags (#13) (
28ad640
)
- initial (
50e4a88
)