v0.5.0

Docker Image: quay.io/jetstack/cert-manager-approver-policy:v0.5.0

Features

• CertificateRequestPolicy: selector.namespace by @JoshVanL in #96
• Adds imagePullSecrets option to helm chart by @JoshVanL in #104
• Adds the Helm value .Values.app.webhook.certificateDir by @JoshVanL in #105
• Change default webhook port by @aidy in #144

Bug Fixes

• Fire event on CertificateRequest resource after status has been updated. by @JoshVanL in #119

Miscellaneous

• Sets poll and timeouts for eventuallys in tests. by @JoshVanL in #131
• Fixes the spelling of WildcardMatchs -> WildcardMatches by @JoshVanL in #98
• Automatically push Docker images when release when tags are pushed by @wallrj in #150
• Partially automate the Helm chart release by @wallrj in #157
• Partially automated GitHub releases by @wallrj in #151
• Fix flakey tests and improve the test log output by @wallrj in #166
• Update distroless base image by @wallrj in #167

New Contributors

• @dependabot made their first contribution in #79
• @aidy made their first contribution in #144

Full Changelog: v0.4.0...v0.5.0

v0.5.0-beta.0

Docker Image: quay.io/jetstack/cert-manager-approver-policy:v0.5.0-beta.0

What's Changed

• Bump k8s.io/cli-runtime from 0.25.2 to 0.25.4 by @dependabot in #153
• Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.5.0 by @dependabot in #154
• go-mod-upgrade by @wallrj in #158
• Bump docker/setup-buildx-action from 1 to 2 by @dependabot in #159
• Bump docker/build-push-action from 2 to 3 by @dependabot in #161
• Bump github.com/cert-manager/cert-manager from 1.10.0 to 1.10.1 by @dependabot in #163
• Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 by @dependabot in #164
• Bump docker/login-action from 1 to 2 by @dependabot in #162
• Bump docker/setup-qemu-action from 1 to 2 by @dependabot in #160
• Fix flakey tests and improve the test log output by @wallrj in #166

Full Changelog: v0.5.0-alpha.1...v0.5.0-beta.0

v0.5.0-alpha.1

Docker Image: quay.io/jetstack/cert-manager-approver-policy:v0.5.0-alpha.1

What's Changed

• Bump k8s.io/cli-runtime from 0.23.6 to 0.24.1 by @dependabot in #79
• Bump github.com/stretchr/testify from 1.7.1 to 1.7.3 by @dependabot in #80
• Bump github.com/cert-manager/cert-manager from 1.8.0 to 1.8.2 by @dependabot in #87
• Bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.2 by @dependabot in #88
• Bump github.com/stretchr/testify from 1.7.3 to 1.7.5 by @dependabot in #92
• Bump k8s.io/klog/v2 from 2.60.1 to 2.70.0 by @dependabot in #91
• Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 by @dependabot in #89
• Bump sigs.k8s.io/controller-runtime from 0.12.2 to 0.12.3 by @dependabot in #95
• Bump k8s.io/klog/v2 from 2.70.0 to 2.70.1 by @dependabot in #94
• Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 by @dependabot in #93
• Adds imagePullSecrets option to helm chart by @JoshVanL in #104
• Bump k8s.io/apiextensions-apiserver from 0.24.2 to 0.24.3 by @dependabot in #99
• Adds the Helm value .Values.app.webhook.certificateDir by @JoshVanL in #105
• Fixes the spelling of WildcardMatchs -> WildcardMatches by @JoshVanL in #98
• Bump github.com/onsi/gomega from 1.19.0 to 1.20.0 by @dependabot in #106
• Updates Go and Go modules by @JoshVanL in #108
• Bump k8s.io/apiextensions-apiserver from 0.24.3 to 0.24.4 by @dependabot in #113
• Fire event on CertificateRequest resource after status has been updated. by @JoshVanL in #119
• Bump k8s.io/cli-runtime from 0.24.3 to 0.25.0 by @dependabot in #118
• CertificateRequestPolicy: selector.namespace by @JoshVanL in #96
• Bump k8s.io/klog/v2 from 2.70.1 to 2.80.1 by @dependabot in #120
• Sets poll and timeouts for eventuallys in tests. by @JoshVanL in #131
• Update Dependencies by @wallrj in #134
• Update go modules to use go v1.25.2 by @JoshVanL in #128
• Update ginkgo to v2 by @JoshVanL in #130
• Update the build tools by @wallrj in #138
• Change default webhook port by @aidy in #144
• Bump k8s.io/component-base from 0.25.2 to 0.25.3 by @dependabot in #141
• Automatically push Docker images when release when tags are pushed by @wallrj in #150
• Partially automate the Helm chart release by @wallrj in #157
• Partially automated GitHub releases by @wallrj in #151
• Bump sigs.k8s.io/controller-runtime from 0.13.0 to 0.13.1 by @dependabot in #155

New Contributors

• @aidy made their first contribution in #144

Full Changelog: v0.4.0...v0.5.0-alpha.1

v0.4.0

What's Changed

• Upgrade to cert-manager 1.7 by @wallrj in #51
• Update link to logo image by @SgtCoDFish in #52
• Update logo (again) by @SgtCoDFish in #53
• Go 1.18 and updates go modules by @JoshVanL in #55
• Updates links to cert-manager/cert-manager in Makefile and SECURITY.md by @JoshVanL in #56
• Updates Dockerfile go version to v1.18 by @JoshVanL in #57
• fix hello.world example policy, commonName must be an object by @markmont in #60
• Update logo to use small version with correct size by @SgtCoDFish in #63
• Use dependabot by @wallrj in #54
• Adds verify-helm-docs.sh and update-helm-docs.sh scripts. Verify helm-docs during lint by @JoshVanL in #59
• House Cleaning: Move manager implementation into /pkg/internal by @JoshVanL in #74
• Creates a go.mod in hack/tools by @JoshVanL in #72
• Removes docs from repo in favour of using cert-manager.io by @JoshVanL in #64
• Updates app version to v0.4.0 by @JoshVanL in #58

New Contributors

• @wallrj made their first contribution in #51
• @markmont made their first contribution in #60

Full Changelog: v0.3.0...v0.4.0

v0.3.0

Changes

• Allow deploying approver-policy in another namespace than cert-manager #43
• Pass the shared logger to plugins during Prepare #44
• Watch for RBAC events so that CertificateRequests will be re-evaluated if permissions are changed #46
• Upgrade cert-manager dependency to v1.6.1 #47
• Mark helm Makefile target as PHONY #48
• Fix broken HTLM in README.md #49

v0.2.0

Changes

• Allow leader election to be configurable from the --leader-election flag #36
• Adds required field to allowed block fields to require the associated attribute to be defined in the CertificateRequest #37
• RequeueAfter being set to a value greater than zero implicitly sets Requeue = true to match controller-runtime behaviour #38
• Adds EnqueueChan() to Reconcilers to allow Approvers to signal reconciles of CertificateRequestPolicies #39
• Support multi-architecture images (linux/amd64,linux/arm64,linux/arm/v7,linux/ppc64le) #41

Breaking API Changes

• Due to #37 which adds support for the required field to the allowed block, CertificateRequestPolicies will need to be updated to the new format on upgrade. Refer to the README for the format.

v0.1.0

Initial Release

approver-policy is a cert-manager approver that makes evaluation decisions based on CertificateRequestPolicy CRD resources.

v0.1.0-alpha.0

Initial alpha release for policy-approver.