0.14.0/2022-12-15

• [ENHANCEMENT] README.md now contains information about the future outlook of the project wrt to deprecations, features and K8s Sig-Auth acceptance
• [ENHANCEMENT] bump dependencies
• [FEATURE] health endpoint /healthz offered on --proxy-endpoints-port
• [FEATURE] --upstream-client-cert-file enables the kube-rbac-proxy client connecting to upstream to use TLS
• [CHANGE] use cobra and upstream command machinery, introduces deprecation to some flags

0.13.1/2022-10-06

• [ENHANCEMENT] bump k8s to 1.25.2 #200 (contains fixes for CVEs)
• [ENHANCEMENT] bump Go to 1.19.1 #178 (contains fixes for CVEs)
• [ENHANCEMENT] bump golang.org/x/crypto due to CVE-2022-27191 #188
• [CHANGE] add warning messages for features that will be removed

0.13.0 / 2022-06-29

• [ENHANCEMENT] bump k8s to 1.24.2 #178
• [ENHANCEMENT] bump Go to 1.18.3 #178
• [ENHANCEMENT] update README.md to be more accurate and up to date #178, #173
• [ENHANCEMENT] check all headers for rewrites and create additional authz requests #171

0.12.0 / 2022-04-08

• [ENHANCEMENT] bump k8s to 1.23.5. #149, #155, #160
• [ENHANCEMENT] add release documentation, #156
• [ENHANCEMENT] use supported apiVersion for deployment and authorization. #150
• [BUGFIX] ppc64le image build which in turn fixed multi-arch build. #147
• [ENHANCEMENT] Support building on riscv64 architecture. #141
• [ENHANCEMENT] move --upstream-force-h2c out of --insecure-listen-address. #140

0.11.0 / 2021-08-02

• [FEATURE] Support for path patterns in --allow-paths and --ignore-paths. #135
• [ENHANCEMENT] Dynamically reload client CA. #127
• [BUGFIX] Fix panics on client-cert authenticated requests. #132

0.10.0 / 2021-05-07

[FEATURE] Support local static authorizer. #125

0.9.0 / 2021-04-27

• [FEATURE] Support rewrites using HTTP headers in addition to query parameters. #104
• [FEATURE] Support pass-through of client certificates. #113
• [FEATURE] Support TLS 1.3. #120

0.8.0 / 2020-11-03

• [FEATURE] Add ability with the new --ignore-paths flag to define paths for which kube-rbac-proxy will proxy without performing authn/authz. This cannot be used with --allow-paths. #91

0.7.0 / 2020-09-15

• [CHANGE] Make images rootless. #86
• [FEATURE] Add ability to check for allowed request paths with new --allow-paths config option. #83

0.6.0 / 2020-06-11

• [CHANGE] Use gcr.io/distroless/static as base image instead of alpine. #67
• [ENHANCEMENT] Add multi-arch container images for amd64, arm, arm64, ppc64le and s390x. #67