CHANGELOG.md

Changelog

0.8.1 (2024-10-30)

🐛 Bug Fixes

• Add missing poddisruption budget permissions in manager cluster role (#718) (69efcf0)
• make flagd replica count configureable in helm chart (#716) (8ae6ee8)

🧹 Chore

• deps: update docker/login-action digest to 0689575 (#714) (20e4045)

0.8.0 (2024-10-22)

⚠ BREAKING CHANGES

• Fix typo flagsValidatonEnabled into flagsValidationEnabled (#707)

✨ New Features

• add flagd-proxy HA configuration (#712) (e115159)

🐛 Bug Fixes

• Fix typo flagsValidatonEnabled into flagsValidationEnabled (#707) (64cdc25)

🧹 Chore

• deps: update golangci/golangci-lint-action action to v6 (#704) (696e2ed)

0.7.2 (2024-08-02)

✨ New Features

• Custom labels and annotations for namespace. (#702) (a21f278)

🐛 Bug Fixes

• Case-align FROM and AS in Dockerfile (#699) (4a43871)
• Fix Kustomize installation (#700) (b5ad594)

🧹 Chore

• deps: update codecov/codecov-action action to v4 (#693) (1588ef8)

0.7.1 (2024-07-23)

✨ New Features

• Add labels and annotations to pods. (#681) (7ec44a6)

🐛 Bug Fixes

• deps: update golang.org/x/exp digest to 8a7402a (#691) (db53303)
• deps: update module github.com/stretchr/testify to v1.9.0 (#671) (1d2713d)

🧹 Chore

• deps: update actions/setup-go action to v5 (#673) (b27a9eb)
• deps: update actions/setup-node action to v4 (#675) (6f77899)
• deps: update docker/login-action digest to 9780b0c (#605) (486a4fd)
• deps: update docker/metadata-action digest to 60a0d34 (#690) (473929c)
• deps: update module golang.org/x/net to v0.27.0 (#669) (0fdd6db)
• deps: update open-feature/flagd (#689) (0d331a9)
• release apis 0.2.44 (#688) (9997ea4)

0.7.0 (2024-07-04)

⚠ BREAKING CHANGES

• split bind address to manage host and port separately (#679)

✨ New Features

• Add hostNetwork flag. (#680) (8e00a35)
• split bind address to manage host and port separately (#679) (31cddba)

🐛 Bug Fixes

• remove duplicated port in helm (#686) (65c3c26)

0.6.1 (2024-06-06)

✨ New Features

• add image pull secrets (#655) (2d7b30c)

🐛 Bug Fixes

• deps: update module github.com/go-logr/logr to v1.4.2 (#601) (f245658)
• deps: update module go.uber.org/zap to v1.27.0 (#614) (3746216)
• flagd path defaults (#658) (aef1010)
• handle multiple imagePullSecrets (#666) (df3d6d9)

🧹 Chore

• add rule for env cfg tags (#674) (499661e)
• deps: update actions/setup-node action to v3.8.2 (#580) (e43ce5f)
• deps: update curlimages/curl docker tag to v8.8.0 (#616) (ab7cfde)
• deps: update dependency bitnami-labs/readme-generator-for-helm to v2.6.1 (#662) (fdce5f9)
• deps: update dependency golangci/golangci-lint to v1.59.0 (#606) (692a325)
• deps: update dependency kubernetes-sigs/controller-tools to v0.15.0 (#667) (60f528f)
• deps: update docker/metadata-action digest to f7b4ed1 (#598) (28700ce)
• deps: update helm/kind-action action to v1.10.0 (#668) (e0b1748)
• deps: update open-feature/flagd (#670) (1174a1b)
• release apis 0.2.43 (#660) (aed8ba1)

0.6.0 (2024-05-29)

⚠ BREAKING CHANGES

• remove flagdResourceEnabled (#652)

🐛 Bug Fixes

• remove flagdResourceEnabled (#652) (640ff10)

0.5.7 (2024-05-29)

🐛 Bug Fixes

• adapt rolebinding to modified manager role (#647) (e627f11)
• include parameters with default values to envVars (#648) (4f0477c)

🧹 Chore

• bump k8s libs (#644) (a18d272)
• release apis 0.2.42 (#650) (b6cd29f)

0.5.6 (2024-05-28)

✨ New Features

• add flagd CRD with ingress support (#633) (b0b99a7)
• introduce new CRD for in-process evaluation (#632) (51db913)

🐛 Bug Fixes

• helm sidecar resources not applied (#639) (d549144)
• inject env variables to all pod containers (#634) (b21378e)
• use flagd standalone tag instead of sidecar tag for flagd deployments (#643) (a8b7ad4)

🧹 Chore

• init workspace before linting (#638) (65e20cf)
• release apis 0.2.41 (#627) (546635e)

📚 Documentation

• document new Flagd CRD (#641) (06b399e)
• support in-process evaluation (#640) (9721825)

0.5.5 (2024-05-13)

✨ New Features

• introduce validating webhook for FeatureFlag CR (#622) (c4831a3)
• operator interval (#621) (bcc5912)

🐛 Bug Fixes

• Add capability to skip crd installation during helm install (#625) (a40e13b)

🧹 Chore

• bump operator builder tools versions (#626) (918a697)
• deps: update actions/checkout action to v4 (#603) (4eda2ca)
• deps: update helm/kind-action action to v1.9.0 (#608) (8800728)
• deps: update module golang.org/x/net to v0.24.0 (#613) (b6daece)
• release apis 0.2.40 (#620) (e39e763)
• update API to the latest version (#631) (2c39428)
• use workspaces to make api changes easier (#635) (0479540)

📚 Documentation

• bump cert manager version (2e59477)
• bump cert manager version (de2f2b5)

0.5.4 (2024-02-21)

✨ New Features

• auto-upgrade flagd-proxy with OFO upgrades (#596) (3271f33)

🧹 Chore

• add link to tutorial in README (#594) (f3f9427)
• bump go to 1.21 (#604) (73d6319)
• deps: update actions/cache action to v4 (#602) (e4476e2)
• deps: update curlimages/curl docker tag to v8.6.0 (#599) (2b9d63a)
• deps: update open-feature/flagd (#600) (0e03f47)
• regex to match all go files (#607) (a1fc38a)
• release apis 0.2.39 (#590) (c53a72b)

📚 Documentation

• fix link to the flagd flag definition (ffc6cec)

0.5.3 (2023-12-29)

🐛 Bug Fixes

• create index for pod annotation path for allowkubernetessync annotation instead of deployment (#582) (a6fa04f)
• flagd mgmt port setting ignored (#588) (1444328)

🧹 Chore

• add default timeout to make (#593) (a5dfbe1)
• deps: update dependency bitnami-labs/readme-generator-for-helm to v2.6.0 (#525) (70fb5d9)
• Remove metrics-port flag/usage from flagdproxy startup (#587) (f79c46f)
• update FeatureFlagSource documentation for v1beta1 (#584) (5a7b2c6)
• update readme tag version (#592) (f6a154d)

0.5.2 (2023-12-06)

🐛 Bug Fixes

• bump flagd and flagd proxy version (#577) (5d8c829)

🧹 Chore

• add helm migration section (#573) (361d068)
• deps: update docker/metadata-action digest to 31cebac (#520) (5262fa7)
• migration docs (#571) (8bf9e42)

0.5.1 (2023-12-01)

🐛 Bug Fixes

• use webhook ns if empty, more test versions (#568) (b9b619d)

0.5.0 (2023-11-29)

⚠ BREAKING CHANGES

• use v1beta1 in operator logic (#539)

✨ New Features

• Introduce v1beta1 API version (#535) (3acd492)
• prepare apis for v1beta1 controllers onboarding (#549) (e3c8b42)
• release APIs and Operator independently (#541) (7b1af42)
• restricting sidecar image and tag setup (#550) (233be79)
• update api version to v0.2.38 (#561) (d1f2477)
• use v1beta1 in operator logic (#539) (d234410)

🐛 Bug Fixes

• fix build (#566) (c8c6101)
• Revert "chore: release apis 0.2.38" (#557) (ccb8c1d)
• Revert "feat: update api version to v0.2.38" (#562) (e231787)

🧹 Chore

• clean up unused API code after moving to v1beta1 (#543) (1287b07)
• deps: update actions/setup-node action to v3.8.1 (#522) (32ddf00)
• fix file source documentation (#556) (318c52d)
• ignore component for release tag and make release dependable (#564) (5ac4be3)
• refactor code to decrease complexity (#554) (17a547f)
• release 0.4.0 (#563) (e32a872)
• release apis 0.2.37 (#544) (854e72d)
• release apis 0.2.38 (#548) (c6165d4)
• release apis 0.2.38 (#558) (4ecbc9b)
• release apis 0.2.38 (#560) (069e275)
• release operator 0.3.0 (#545) (002f2dd)
• revert recent release (#559) (f7c79e4)
• use apis tag instead of local replace (#546) (1856918)
• use github-action for golangci-lint workflow (#538) (a97d336)

📚 Documentation

• use v1beta1 API version (#553) (ccc0471)

0.4.0 (2023-11-29)

⚠ BREAKING CHANGES

• use v1beta1 in operator logic (#539)

✨ New Features

• Introduce v1beta1 API version (#535) (3acd492)
• prepare apis for v1beta1 controllers onboarding (#549) (e3c8b42)
• release APIs and Operator independently (#541) (7b1af42)
• restricting sidecar image and tag setup (#550) (233be79)
• update api version to v0.2.38 (#561) (d1f2477)
• use v1beta1 in operator logic (#539) (d234410)

🐛 Bug Fixes

• Revert "chore: release apis 0.2.38" (#557) (ccb8c1d)
• Revert "feat: update api version to v0.2.38" (#562) (e231787)

🧹 Chore

• clean up unused API code after moving to v1beta1 (#543) (1287b07)
• deps: update actions/setup-node action to v3.8.1 (#522) (32ddf00)
• fix file source documentation (#556) (318c52d)
• ignore component for release tag and make release dependable (#564) (5ac4be3)
• refactor code to decrease complexity (#554) (17a547f)
• release apis 0.2.37 (#544) (854e72d)
• release apis 0.2.38 (#548) (c6165d4)
• release apis 0.2.38 (#558) (4ecbc9b)
• release apis 0.2.38 (#560) (069e275)
• release operator 0.3.0 (#545) (002f2dd)
• revert recent release (#559) (f7c79e4)
• use apis tag instead of local replace (#546) (1856918)
• use github-action for golangci-lint workflow (#538) (a97d336)

📚 Documentation

• use v1beta1 API version (#553) (ccc0471)

0.3.0 (2023-11-29)

⚠ BREAKING CHANGES

• use v1beta1 in operator logic (#539)

✨ New Features

• Introduce v1beta1 API version (#535) (3acd492)
• prepare apis for v1beta1 controllers onboarding (#549) (e3c8b42)
• release APIs and Operator independently (#541) (7b1af42)
• restricting sidecar image and tag setup (#550) (233be79)
• update api version to v0.2.38 (#561) (d1f2477)
• use v1beta1 in operator logic (#539) (d234410)

🐛 Bug Fixes

• Revert "chore: release apis 0.2.38" (#557) (ccb8c1d)

🧹 Chore

• clean up unused API code after moving to v1beta1 (#543) (1287b07)
• deps: update actions/setup-node action to v3.8.1 (#522) (32ddf00)
• fix file source documentation (#556) (318c52d)
• refactor code to decrease complexity (#554) (17a547f)
• release apis 0.2.37 (#544) (854e72d)
• release apis 0.2.38 (#548) (c6165d4)
• release apis 0.2.38 (#558) (4ecbc9b)
• release apis 0.2.38 (#560) (069e275)
• revert recent release (#559) (f7c79e4)
• use apis tag instead of local replace (#546) (1856918)
• use github-action for golangci-lint workflow (#538) (a97d336)

📚 Documentation

• use v1beta1 API version (#553) (ccc0471)

0.2.36 (2023-08-07)

✨ New Features

• add flagd sidecar resources attribute (#514) (56ad0bd)
• add otel collector uri flag (#513) (31d8d5a)

🧹 Chore

• deps: update actions/setup-node action to v3.7.0 (#504) (2f78b83)
• deps: update curlimages/curl docker tag to v8.2.1 (#505) (ae1be55)
• deps: update dependency bitnami-labs/readme-generator-for-helm to v2.5.1 (#506) (54d59db)
• deps: update docker/login-action digest to a979406 (#493) (22a1e55)
• deps: update helm/kind-action action to v1.8.0 (#507) (e740068)
• deps: update open-feature/flagd (#516) (74dd65c)
• update K8s deps and fix api changes (#518) (644144f)

0.2.35 (2023-08-01)

🐛 Bug Fixes

• deps: update module github.com/stretchr/testify to v1.8.3 (#488) (426be04)
• deps: update module github.com/stretchr/testify to v1.8.4 (#490) (660da11)
• remove 'grpc://' prefix from proxy sync address (#479) (50151ff)
• use admission webhook namespace if pod namespace is empty (#503) (ffd3e0a)

🧹 Chore

• adapt ServiceAccount only in case of K8s Provider (#498) (786d511)
• adding troubleshooting guide (#501) (0befb8f)
• attempt to improve documentation (#496) (603e74e)
• deps: update curlimages/curl docker tag to v7.88.1 (#459) (ea98e1e)
• deps: update curlimages/curl docker tag to v8 (#461) (1271eab)
• deps: update curlimages/curl docker tag to v8.1.2 (#487) (b9720bb)
• deps: update docker/login-action digest to 40891eb (#473) (630518a)
• deps: update docker/metadata-action digest to 35e9aff (#494) (27a7efd)
• deps: update docker/metadata-action digest to c4ee3ad (#471) (5f3d98a)
• deps: update gcr.io/kubebuilder/kube-rbac-proxy docker tag to v0.14.1 (#477) (8183725)
• deps: update helm/kind-action action to v1.7.0 (#486) (09dcbc1)
• deps: update module golang.org/x/net to v0.12.0 (#484) (5af75bb)
• deps: update open-feature/flagd (#480) (cfeddc8)
• deps: update open-feature/flagd (#499) (83fbb00)
• extract flagd container injection into its own component (#474) (9ed8e59)
• generalize renovate configuration (#495) (1ec3183)

📚 Documentation

• add advanced flagd links (#492) (eb44c61)
• add instruction for using OFO and GitOps (#497) (244a625)
• Doc fixes (#469) (5a7918a)
• replace make deploy-demo command with a link to the cloud-native-demo repo (#476) (fff12a8)
• update crd version in getting started guide (#485) (eb3b950)

0.2.34 (2023-04-13)

🧹 Chore

• deps: update open-feature/flagd (#466) (3b8d156)

0.2.33 (2023-04-12)

🐛 Bug Fixes

• removed old prefix from flagd-proxy provider config (#463) (39a99c6)

0.2.32 (2023-04-12)

📚 Documentation

• add killercoda demo link (#413) (bbeeea2)

🐛 Bug Fixes

• deps: update kubernetes packages to v0.26.3 (#273) (abe56e1)
• deps: update module github.com/go-logr/logr to v1.2.4 (#428) (8d07dab)
• deps: update module github.com/onsi/gomega to v1.27.5 (#357) (8624958)
• deps: update module github.com/onsi/gomega to v1.27.6 (#429) (987815c)
• deps: update module github.com/stretchr/testify to v1.8.2 (#396) (f24b6c4)
• deps: update module sigs.k8s.io/controller-runtime to v0.14.6 (#426) (0e779e8)
• remove unneeded OF namespace prefix from clusterrolebindings (#453) (b23edef)
• restrict permissions to only access specific CRB (#436) (6f1f93c)
• update flagd proxy env var prefix (#440) (b451d47)

✨ New Features

• flagd proxy resource ownership (#442) (31b5f7b)
• introduce debugLogging parameter to FlagSourceConfiguration CRD (#434) (26ae125)
• kube-flagd-proxy deployment (#412) (651c63c)
• migrate flagd startup argument to sources flag (#427) (1c67f34)
• test: substitute kuttl to bash e2e test (#411) (ff199f1)

🧹 Chore

• add unit tests to pod webhook (#419) (4290978)
• attempt renovate fix (48b6c7f)
• attempt versioning fix in test (58d0145)
• deps: update actions/setup-go action to v4 (#398) (ee9ecb9)
• deps: update dependency open-feature/flagd to v0.2.1 (#462) (d2d53b7)
• deps: update docker/login-action digest to 65b78e6 (#421) (8d2ebe2)
• deps: update docker/metadata-action digest to 3f6690a (#432) (991b2bd)
• deps: update golang docker tag to v1.20.3 (#445) (b8f6c5b)
• deps: update module golang.org/x/net to v0.8.0 (#397) (096c889)
• deps: update module golang.org/x/net to v0.9.0 (#451) (4cbe4f1)
• deps: update open-feature/flagd (#457) (db9af7a)
• deps: update open-feature/flagd to v0.5.0 (#422) (6846aa2)
• fix renovate config, add recommended preset (#418) (78c5970)
• improve container build layer caching (#414) (3212eba)
• increase backoffLimit for inject-flagd (#423) (29d7cf0)
• introduce additional unit tests for api packages (#420) (5ba5bc9)
• refactor admission webhook tests (#409) (29c7c28)
• refactor pod webhook mutator (#410) (2a86b03)
• refactored component test using fake client (#435) (08a50ac)
• remove ignored renovate paths (#441) (c1d8929)
• reorder containers in e2e assertion (1d895c3)
• split controllers to separate packages + cover them with unit tests (#404) (6ed4cef)
• troubleshoot renovate (de4ac14)
• troubleshoot renovate (89a7b5b)
• troubleshoot renovate (244bd3a)
• troubleshoot renovate (eafa670)
• troubleshoot renovate (c3d9523)
• troubleshoot renovatge (35054cb)
• troubleshoot renvoate (7ac3c90)
• update codeowners to use cloud native team (6133060)
• update flagd renovate detection (#439) (3d1540c)
• update renovate config to watch the assert yaml directly (9ef25a0)
• use renovate to bump flagd version (#395) (fd5b072)

0.2.31 (2023-03-16)

📚 Documentation

• fix rendering issue with operator resource config table (#401) (71ea8a6)

🐛 Bug Fixes

• update flagd version (#402) (dc6aa3c)

0.2.30 (2023-03-16)

📚 Documentation

• add AND operator to sequential commands (#368) (6f73a62)

✨ New Features

• enable flagd probes (#390) (41efb15)
• improve deployment pattern (#344) (572ba96)

🐛 Bug Fixes

• deps: update module sigs.k8s.io/controller-runtime to v0.14.5 (#279) (8a80bff)

🧹 Chore

• add additional sections to the release notes (4bec5af)
• add artifact hub metadata (#372) (c6f539f)
• deps: update dependency open-feature/flagd to v0.4.0 (#342) (0640f46)
• deps: update dependency open-feature/flagd to v0.4.1 (#373) (756cf7a)
• deps: update dependency open-feature/flagd to v0.4.4 (#400) (3e0a666)
• deps: update docker/login-action digest to 219c305 (#365) (ee84954)
• deps: update docker/metadata-action digest to 766400c (#267) (38a1464)
• deps: update docker/metadata-action digest to 9ec57ed (#366) (884d444)
• deps: update gcr.io/kubebuilder/kube-rbac-proxy docker tag to v0.14.0 (#376) (708e4bc)
• deps: update ghcr.io/open-feature/flagd docker tag to v0.4.4 (#381) (a253761)
• deps: update golang docker tag to v1.20.2 (#374) (e2de529)
• e2e test for openfeature.dev/enabled annotation set to false (#375) (b03fb14)
• improve formatting and content (#384) (c5a6a32)
• remove unneeded conversion webhooks + introduce unit tests for conversion functions (#385) (dd34801)

0.2.29 (2023-02-23)

Features

• add log format configuration options through helm chart (#346) (bcef736)
• Introduced context to the readyz endpoint, added wait to test suite (#336) (ed81c02)

Bug Fixes

• Security issues (#348) (5bd0b19)
• set defaultTag to INPUT_FLAGD_VERSION (#332) (23547a1)

0.2.28 (2023-01-28)

Bug Fixes

• mount dirs not files (#326) (089ab3c)

0.2.27 (2023-01-27)

Features

• default sync provider configuration (#320) (7cba7e1)

Bug Fixes

• gave configmaps volume mounts a subpath to allow for multiple mounts (#321) (2ec454c)
• uniqueness of featureflagconfiguration file path (#323) (2b10945)

0.2.26 (2023-01-26)

Bug Fixes

• deps: update module github.com/open-feature/schemas to v0.2.8 (#269) (ed48060)

0.2.25 (2023-01-25)

Features

• Helm configuration (#304) (99edfeb)

Bug Fixes

• removed duplicate config map generation, resolve permissions issue (#305) (eec16af)
• update x/net for CVE-2022-41721 (#301) (bbe9837)

0.2.24 (2023-01-16)

Features

• backfill flagd-kubernetes-sync cluster role binding on startup (#295)
• decouple feature flag spec from flagd config (#276)

Features

• upgrade flagd to v0.3.0 (20571e1)

0.2.22 (2022-12-16)

Bug Fixes

• deps: update module go.uber.org/zap to v1.24.0 (#268) (b7bdde8)
• Version fix (#284) (a9c6f15)

0.2.21 (2022-12-16)

Features

• add ff shortname, commit httpSyncConfiguration (11e4652)
• introduce configurable resource limits for flagd sidecar (e4affcf)

Bug Fixes

• deps: update github.com/open-feature/schemas digest to 302d0fa (#246) (7d22374)
• deps: update kubernetes packages to v0.25.4 (75bab2d)
• include release tag in helm charts publishing (2746716)

0.2.20 (2022-11-18)

Bug Fixes

• deps: update module sigs.k8s.io/controller-runtime to v0.13.1 (edeffcd)

0.2.19 (2022-11-15)

Features

• introduced v1beta1 of featureflagconfiguration CRD with conversion webhook to v1alpha1 (a45bdef)
• structured the featureflagconfiguration CRD (b056c7c)

0.2.18 (2022-11-10)

Bug Fixes

• nil pointer dereference (#216) (d975066)

0.2.17 (2022-11-07)

Bug Fixes

• deps: update github.com/open-feature/schemas digest to d638ecf (a984836)
• for helm issues (#206) (39febd7)

0.2.16 (2022-10-27)

Bug Fixes

• resolve issue with templated DNS name in cert (65068df)

0.2.15 (2022-10-25)

Bug Fixes

• artifact name and output file (#187) (4dee157)
• remove redundant name (#189) (664bd73)

0.2.14 (2022-10-25)

Bug Fixes

• add sbom to ouput name (#182) (5e939a8)

0.2.13 (2022-10-25)

Bug Fixes

• set sbom dir (#180) (616272d)

0.2.12 (2022-10-25)

Bug Fixes

• set sbom dir (#178) (143adf9)

0.2.11 (2022-10-25)

Bug Fixes

• Upload sbom (#175) (813c646)
• Upload sbom by name (#176) (7d0fcd0)

0.2.10 (2022-10-25)

Bug Fixes

• correcrt needs in asset release (5ed4571)

0.2.9 (2022-10-25)

Bug Fixes

• Package signing should happen in the oci workflow. (a04a110)

0.2.8 (2022-10-25)

Bug Fixes

• package signing fixes (36597f4)

0.2.7 (2022-10-25)

Features

• adding artifacthub information (#144) (65a5244)
• builds helm chart (#137) (1525421)

0.2.7 (2022-10-24)

Features

• adding artifacthub information (#144) (65a5244)
• builds helm chart (#137) (1525421)

0.2.6 (2022-10-24)

Features

• adding artifacthub information (#144) (65a5244)
• builds helm chart (#137) (1525421)

Bug Fixes

• CVE-2022-32149 (015c19a)

0.2.6 (2022-10-20)

Bug Fixes

• CVE-2022-32149 (015c19a)

0.2.5 (2022-10-19)

Features

• stop creation and mounting of flagd-config config map in case of kubernetes sync-provider (#126) (a1d9fe2)

0.2.4 (2022-10-18)

Bug Fixes

• build and push to docker registry with tag as current release (#123) (d4abda1)

0.2.3 (2022-10-18)

Bug Fixes

• build and push to docker registry on tag creation (#121) (27c6f9c)

0.2.2 (2022-10-14)

Bug Fixes

• bump flagd version to include change detection fix (421cab6)

0.2.1 (2022-10-13)

Features

• metrics (#111) (6016669)
• pr github action workflow (#96) (a719f8a)

Bug Fixes

• include assets in release (#109) (b835abb)

0.2.0 (2022-10-10)

⚠ BREAKING CHANGES

• bump flagd version to 0.2.0 (connect refactor) (#97)

Features

• bump flagd version to 0.2.0 (connect refactor) (#97) (8118b9f)

Bug Fixes

• upgrade dependencies with vulnerabilities (#90) (58cdd4e)