Releases: otterize/intents-operator
Releases · otterize/intents-operator
v2.0.13
What's Changed
- Fix intent operator handling "annotation intent" when not needed by @otterobert in #462
- Implement periodic reporting of operator configuration to the cloud by @omris94 in #463
- Fix infinite reconciliation loop caused by a missing status in converted
clientIntents
by @omris94 in #465 - Ensure webhook reconciler patches the Latest
CRD
/ValidationWebhook
revision to minimize CA bundle edge cases by @omris94 in #466 - Bugfix on AWS integration: null dereference on AWS role object due to missing error handling by @amitlicht in #468
Full Changelog: v2.0.12...v2.0.13
v2.0.12
v2.0.11
v2.0.10
v2.0.9
v2.0.8
v2.0.7
What's Changed
- Add support for external traffic network policies that are restricted to only allow the Ingress controller, rather than all traffic by @orishoshan in #452. Consult the Helm chart documentation for
ingressControllerConfigs
for more info.
Example values:
intentsOperator:
operator:
ingressControllerConfigs: # ingressControllerConfigs determines whether network policies created by allowExternalTraffic will be limited to just these pods, or all pods in the namespace
- name: otterize-haproxy-ingress
namespace: infra
kind: DaemonSet
Full Changelog: v2.0.6...v2.0.7
v2.0.6
What's Changed
- Fix a bug where Istio policy can erroneously report an error even though it succeeded if created by the intents reconciler and pods reconciler concurrently by @orishoshan in #444
- Support specifying
kind
inClientIntents
(both forspec.service
andspec.calls.call
),ProtectedServices
, andKafkaServerConfigs
by @omris94 in #445. To learn more about using kind in ClientIntents, see the docs - Support enabling access to servers using pod annotation by @NetanelBollag in #446
Full Changelog: v2.0.5...v2.0.6
v2.0.5
What's Changed
- Fixed bug where unresolved DNS names would cause egress network policies to not be created by @orishoshan in #436
- Fixed bug where DNS egress rules would be added twice; enable pprof by default on loopback by @orishoshan in #437
- Fixed bug where deleted & reapplied intents would not trigger credentials-operator to configure database password by @evyatarmeged in #438
- Fixed bug where hashed usernames would exceed allowed MySQL username length by @evyatarmeged in #442
- Fixed bug where a cluster which has CronJob batch/v1beta1 resources that has been upgraded to batch/v1 cannot resolve pod owners if the owner is a v1beta1 CronJob, and stops at the Job instead by @orishoshan in #443
- Use new error telemetry API by @orishoshan in #435
- Support reading database ServerConfig credentials from k8s secrets by @amitlicht in #440
Full Changelog: v2.0.4...v2.0.5
v2.0.4
What's Changed
- Fix bug where k8s API server service IP address was missing when using service intents by @NetanelBollag in #431
- Fixing bad type assertion in MySQL webhook by @evyatarmeged in #433
- Bugfix on database integrations: pods were annotated with DB names when intents are applied before pod admission by @amitlicht in #434
Full Changelog: v2.0.3...v2.0.4