v0.14.0

governance-policy-propagator v0.14.0

• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.14.0

What's Changed

• Replace unmaintained release action by @dhaiducek in #203
• Send the correct content-type header with a large CSV by @mprahl in #204
• Fix csv Header json content issue by @yiraeChristineKim in #205
• Add additional logs for database errors by @mprahl in #206
• Fix chunked transfers with the CSV reports by @mprahl in #207
• Ensure the lock is in place before creating queued disabled events by @mprahl in #210
• Run framework tests on OCM PRs by @zyjjay in #208
• Update go-template-utils by @mprahl in #212
• Fix index errors for large values by @mprahl in #211
• Sync common Makefile by @dhaiducek in #213
• Update rbac-api-utils to handle partial SelfSubjectRulesReview success by @mprahl in #214
• Update CRD descriptions by @dhaiducek in #209
• Remove the code to generate disabled compliance events for local-cluster by @mprahl in #215
• Remove the IAM Policy Controller by @yiraeChristineKim in #216
• Add a launch.json file for local development by @mprahl in #217
• Allow all policy types to use hub templates by @JustinKuli in #218
• Update controller-runtime to 0.17.3 by @JeffeyL in #219
• Bump utilities versions by @JustinKuli in #220
• Add -1 as a possible compliance value for the status metric by @zyjjay in #221
• Update kubernetes-dependency-watches to v0.7.0 by @mprahl in #223
• Fix flaky propagator test (case19_rep_policy_placement_test) by @yiraeChristineKim in #222
• Update Go packages by @dhaiducek in #224
• Update to UBI9 by @dhaiducek in #225
• Fix deployments for alternate namespaces by @dhaiducek in #227

Full Changelog: v0.13.0...v0.14.0

v0.13.0

governance-policy-propagator v0.13.0

• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.13.0

What's Changed

• Ignore synced policies for hosted clusters by @JustinKuli in #135
• Cache hub template queries by @mprahl in #137
• ACM-7397: Reduce the reconciles caused from policy set updates by @JeffeyL in #133
• Update only affected replicated policies by @yiraeChristineKim in #136
• [Hotfix]Filter replicated policy in rootstatus ctlr by @yiraeChristineKim in #139
• Fix e2e test case2 status flaky issue by @yiraeChristineKim in #140
• Update the webhook to validate the remediationAction field of policies by @zyjjay in #142
• Update packages by @dhaiducek in #141
• Run PolicyAutomation tests separately in CI by @JustinKuli in #143
• Handle other changes to PlacementBinding by @JustinKuli in #144
• Modest Memory Improvements by @mprahl in #145
• Add generated code check by @dhaiducek in #147
• Sync common Makefile by @dhaiducek in #146
• Add retries to some templating related failures by @mprahl in #149
• Sync common Makefile by @dhaiducek in #150
• ACM-3299: governance-policy-propagator: Use SA for E2E by @JeffeyL in #151
• Fix hub template watches by @mprahl in #153
• Tweak webhook logging by @dhaiducek in #154
• Add partial indexes to account for null values by @mprahl in #155
• Drop ClusterNamespace internally to prep for Placement by @dhaiducek in #156
• Compliance Event Recording API by @JustinKuli in #152
• Add gosec annotations for sha1 usage by @JustinKuli in #158
• Sync common Makefile by @dhaiducek in #159
• Update compliance database schema by @mprahl in #157
• Remove spec_hash and allow the use of IDs instead by @mprahl in #160
• Add the API to get compliance events by @mprahl in #161
• Add filtering options to the compliance events API by @mprahl in #162
• Update to Go v1.21 by @dhaiducek in #166
• Set the database ID annotations on replicated policies by @mprahl in #165
• Sync common Makefile by @dhaiducek in #169
• Various small fixes for compliance history by @mprahl in #170
• Add back propagation/update events by @dhaiducek in #168
• Clean up old references by @dhaiducek in #172
• Ignore false gosec violation by @mprahl in #173
• Fix spec fetching for Compliance API by @mprahl in #175
• Remove app decision by @dhaiducek in #171
• Sync common Makefile and Dependabot by @dhaiducek in #176
• Bump the github-actions group with 4 updates by @dependabot in #178
• Add certificate and token auth and authz on the POST API endpoint by @mprahl in #177
• Add an API endpoint to generate a CSV compliance report by @yiraeChristineKim in #167
• Fix status update with faulty PlacementBinding by @dhaiducek in #180
• Add support for client auth CA from a file by @mprahl in #181
• Stop trying to connect to the DB when the connection URL is not set by @mprahl in #182
• Sync common makefile by @dhaiducek in #183
• Simplify actions; Add gosec scan by @dhaiducek in #184
• Use testcase-scoped variables by @dhaiducek in #179
• Use HaveOccurred() for E2E error checking by @dhaiducek in #186
• Include command in error from kubectl commands by @dhaiducek in #187
• Add authorization to the compliance event API endpoints by @yiraeChristineKim in #164
• Follow up PR for ACM-6866/#164 by @mprahl in #188
• Upgrade controller-gen by @dhaiducek in #185
• Update go for gosec by @mprahl in #190
• Remove client certificate authentication by @mprahl in #191
• Add more logging for when a placement binding can't be retrieved by @mprahl in #193
• Use the pod's namespace for the database secret when not overridden by @mprahl in #194
• Make troubleshooting easier when the governance-policy-database secret is invalid by @mprahl in #195
• Upgrade common Makefile by @dhaiducek in #197
• Remove leading newline from CRD by @dhaiducek in #196
• Reset the database ID cache when applicable by @mprahl in #198
• Ignore role bindings in default namespace for RBAC by @mprahl in #199
• Generate a disabled compliance history API entry for local-cluster by @mprahl in #200
• Add additional log details for database errors by @mprahl in #201
• Use errors.As instead of manual type assertions by @mprahl in #202

New Contributors

• @JeffeyL made their first contribution in #133
• @dependabot made their first contribution in #178

Full Changelog: v0.12.0...v0.13.0

v0.12.0

governance-policy-propagator v0.12.0

• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.12.0

What's Changed

• Support selective policy enforcement by @Missxiaoguo in #110
• Bump controller-runtime to 0.15.0 by @clyang82 in #113
• Better handling of cluster-scoped template lookups by @JustinKuli in #115
• Bug: 2 ansiblejobs were created when "Disabled+Manual" mode by @yiraeChristineKim in #116
• Explicitly enable CGO by @mprahl in #122
• Webhook to check name + namespace exceeds 63 characters by @yiraeChristineKim in #117
• Refactoring getPolicyPlacementDecisions by @JustinKuli in #127
• Fix duplicated event generation when root policy is disabled by @zyjjay in #131
• Add the database schema for the compliance events API by @mprahl in #126
• Split replicated policy reconciles by @JustinKuli in #130

New Contributors

• @Missxiaoguo made their first contribution in #110
• @clyang82 made their first contribution in #113
• @zyjjay made their first contribution in #131

Full Changelog: v0.11.0...v0.12.0

v0.11.0

governance-policy-propagator v0.11.0

• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.11.0

What's Changed

• Stop overriding default annotations when IV annotation is set by @mprahl in #93
• Update the dependency watch client library by @mprahl in #97
• Add error logs by @dhaiducek in #96
• Add ManagedClusterLabels to hub template context by @JustinKuli in #95
• Add support for the copy template functions to the propagator by @gparvin in #99
• Requeue propagation errors by @JustinKuli in #100
• Update release regex by @dhaiducek in #101
• Update OWNERS by @gparvin in #105
• Sanitize AnsibleJob name by @JustinKuli in #107
• Upgrade go-template-utils to v3.2.0 by @dhaiducek in #106
• More package upgrades by @dhaiducek in #109
• Bump Go in Dockerfile by @dhaiducek in #108
• Bug: Only one policy violation status was passed into ansiblejob by @yiraeChristineKim in #102

New Contributors

• @yiraeChristineKim made their first contribution in #102

Full Changelog: v0.10.0...v0.11.0

v0.10.0

Governance-policy-propagator v0.10.0

• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.10.0

What's Changed

• Add fields to the Policy CRD for policy ordering by @JustinKuli in #49
• Reconcile policies when a hub template referenced object is updated by @mprahl in #53
• Update go-template-utils to v3.0.0 by @mprahl in #55
• Update the permissions to match what is needed by @mprahl in #56
• Initialize klog explicitly by @mprahl in #57
• Policyset dependencies by @JustinKuli in #58
• Add Pending to complianceState enum by @willkutler in #59
• Root policy label bug by @JustinKuli in #60
• Fix some issues in replication code by @JustinKuli in #62
• Fix the dynamic watch cleanup by @mprahl in #63
• Provide PolicyViolationContext to Ansible Tower by @ChunxiAlexLuo in #52
• Add hub_template_active_watches metric by @dhaiducek in #61
• Update go-template-utils to v3.0.1 by @mprahl in #65
• update policyViolationContextLimit kubebuilder validation by @ChunxiAlexLuo in #66
• Aggregate Pending status from replicated policies by @JustinKuli in #64
• update violationMessage field name by @ChunxiAlexLuo in #67
• Updates to the CRDs where some field descriptions are missing by @gparvin in #68
• Add policy violation context for manual run model by @ChunxiAlexLuo in #69
• enable pending status for policy set by @willkutler in #71
• Set "oldest" tag in Makefile; Bump to K8s v1.19 by @dhaiducek in #72
• Add CRD validation for namespaces in dependencies by @JustinKuli in #73
• Fix format of policy CRD yaml by @JustinKuli in #74
• Only pass violation context when non compliant cluster exists by @ChunxiAlexLuo in #70
• Add a metric to record policy propagation failures by @mprahl in #75
• Delete the propagation failure metric for deleted policies by @mprahl in #76
• Clean up extra lines in Dockerfile by @dhaiducek in #77
• Use printf instead of echo for changing CRD format by @mprahl in #78
• Update kubernetes-dependency-watches to v0.1.1 by @mprahl in #79
• Use enum for dependency compliance by @willkutler in #80
• Provide the correct Hub DNS name in the Ansible extra_vars by @mprahl in #81
• Fix reconciling a policy with a dot in its name by @JustinKuli in #82
• PolicyDepenency --> PolicyDependency by @dhaiducek in #83
• add test for ocm_handle_root_policy_duration metric by @willkutler in #85
• Refactor root policy status updates by @mprahl in #86
• Use better names for the extra_vars passed to the Ansible job by @mprahl in #88
• Add concurrency to the policy-metrics controller by @mprahl in #89
• Use EventuallyWithOffset in test utils by @dhaiducek in #92
• Add the spec.copyPolicyMetadata field by @mprahl in #91

Full Changelog: v0.9.0...v0.10.0

v0.9.0

Governance-policy-propagator v0.9.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.9.0

v0.8.0

Governance-policy-propagator v0.8.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.8.0

v0.7.0

Governance-policy-propagator v0.7.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.7.0

v0.6.0

Governance-policy-propagator v0.6.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.6.0

v0.5.0

Governance-policy-propagator v0.5.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/governance-policy-propagator:v0.5.0