Changelog

🐛 Bug fixes

• 851c3a37650ab1fecda6ed27ec5ed2e58bcc3760: fix(ci): fetch previous tags (@oliverbaehler)
• 543757bddb8597bdfb8e7e83654e7f2e98029df1: fix(docs): url for artifacthub badge (@prometherion)

📖 Documentation updates

• 147f973c6b107f2818661756ad8bb3a675a1db99: docs(community): pointing to the community meetings repo (@prometherion)
• d2327917802d254d9686830719ec4aab1409e87c: docs(repo): add roadmap file (@oliverbaehler)
• 34d6416b1e1244475f067883005e11f8337a090e: docs(security): add security process (@oliverbaehler)

Thanks to all the contributors!

Full Changelog: https://github.com/projectcapsule/capsule/compare/v0.4.0-rc.1...v0.4.0-rc.2

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0-rc.2
• ghcr.io/projectcapsule/capsule:latest

Changelog

Thanks to all the contributors!

Full Changelog: https://github.com/projectcapsule/capsule/compare/...v0.4.0-rc.1

Docker Images

• ghcr.io/projectcapsule/capsule:v0.4.0-rc.1
• ghcr.io/projectcapsule/capsule:latest

Hotfixes

• Go version update to 1.19.10 #779 @prometherion @meetdpv
• Unable to create PVC for pre-provisioned PV #783 @MaxFedotov
• Dropping ownerReference for {Global}TenantResource namespacedItems #781 @MaxFedotov

Enhancements

• Updating kubernetes-sigs/[email protected] #766 @prometherion
• Updating support to Kubernetes 1.27 #762 @prometherion
• Updating to Ginkgo v2 #765 @prometherion

Hotfixes

• Go 1.19 upgrade for security reasons #759 @slimm609
• Missing ConversionReviewVersions in updateTenantCustomResourceDefinition function #752 @MaxFedotov

Docker images are hosted on docker.io and can be pulled with the following command:

docker pull clastix/capsule:v0.3.1

Helm chart tested with the following version is v0.4.1, remember to update your Helm Charts locally.

helm repo add clastix https://clastix.github.io/charts
helm repo update

Enhancements

• Prevent replicated resources by TenantResource to get deleted by the Tenant Owner #732 @prometherion

Hotfixes

• CRD URLs in the upgrade guide are invalid #730 @jwilkicki @prometherion
• Webhook cannot mutate Pods generated from Deployment with Rancher #741 @maxgio92 @prometherion
• Unable to patch the namespace not managed by Capsule #733 @sagar-jadhav

⚠️ This is a Capsule minor release that requires a manual patch of the CRDs introduced with 9f184d70e705a089d0b253950b6cd427a30d8ac9. No new API types have been introduced.

Hotfixes

• Add PersistentVolumes kind as a new ProxyServiceKind enum #706 @prometherion
• Rancher integration for the cattle-cluster agent #716 @maxgio92 @prometherion
• Template support in rawItems for (Global) Tenant resources #688 @h4wkmoon @prometherion

Dependencies

• golang.org/x/net #714
• github.com/emicklei/go-restful #700

Enhancements

• Configurable webhook port #715 @meetdpv @aslafy-z @prometherion
• Enhancing local development #705 @zvlb

This is a Capsule patch release, addressing the following bug(s).

Dependencies

• CVE-2022-1996 #710 by @JacekLakis-TomTom @prometherion

This is a Capsule patch release, addressing the following bug(s).

Hotfixes

• No update is possible when resources are replicated using GlobalTenantResource #687
• Tenant status conversion between v1beta1 and v1beta2 is broken #691

Thanks

Thanks to @h4wkmoon and @aslafy-z for spotting the bugs! 🙌🏻

Enhancements

• Replicating resources across Tenant Namespaces using GlobalTenantResource and TenantResource APIs (#525 #222 #416)
• Support for labelling of Namespace by Tenant owners in v1beta2 API version (#431)
• Tenant v1beta2 API version (#426 #436 #633 #610)
• Support up to Kubernetes 1.26 (#665)
• Labelling PV and avoiding cross-tenant mount (#682)

Hotfix

• Tenant owner is unable to label namespaces (#663)
• Enforcing container registry also upon Pod update (#674)
• Wrong LimitRange reference in the documentation (#630)

Breaking changes

• Deprecation of Tenant API version v1alpha1 (#657)

Thanks

This awesome release has been made possible thanks to @oliverbaehler, @MaxFedotov, @bsctl, @YvosOnTheHub, @smileisak. Capsule v0.2.0 is implementing terrific new features and this is possible to you all, by opening issues, feature requests, bugs, and using it for your projects!

Per Aspera, ad Astra! 🚀

🚨 This is a critical release as a patch for the CVE-2022-46167.

Enhancements

• Include gosec in CI pipeline #621 (@alegrey91)
• Added makefile command to autogen CRDs documentation #629 (@mastrogiovanni)
• Chart Linting (Dry Install) / Github Config #635 (@oliverbaehler)
• Update documentation on integration with Flux v2 #636 (@maxgio92)
• Clarify ServiceAccount as Tenant Owner documentation #645 (@lalyos)
• Improve local development experience #650 (@oliverbaehler)
• Typo in the Velero guide #661 (@prometherion)

Fix

• Privilege escalation by ServiceAccount deployed in a Tenant Namespace - 75525ac19254b0c5111e34d7985e2be7bc8b1ac1
• Service controller doesn't skip sentinel error #653 (@prometherion)