snapshot-latest

What's Changed

• chore(deps): update support-deps by @renovate in #1006
• chore(deps): update support dependencies to v3.3.3 by @renovate in #1015
• chore(deps): update grafana by @renovate in #998
• docs: add note about including full chain in cert config by @mjnagel in #1018
• feat: add checkpoint uds-core slim package by @Racer159 in #818
• chore: fix duplicative checkpoint publish location by @Racer159 in #1020
• feat: add ability to add custom netpols for prometheus-stack package by @joelmccoy in #997
• chore: add variables for pepr memory requests in dev/demo bundles by @mjnagel in #1021
• chore(deps): update pepr to v9.1.7 by @renovate in #1014
• chore(deps): update velero to v8 by @renovate in #999

Full Changelog: v0.31.2...snapshot-latest

v0.31.2

0.31.2 (2024-11-15)

Bug Fixes

• scale keycloak sts to zero if deployed in ha mode (#1010) (9bae9b3)

Miscellaneous

• update *.uds.dev and *.admin.uds.dev certs (#1012) (fe31263)

v0.31.1

0.31.1 (2024-11-13)

Miscellaneous

• deps: update pepr to v0.39.1 (#1003) (c0b1dbf)
• deps: update support dependencies to v3.27.3 (#1004) (9fbb4a9)

v0.31.0

0.31.0 (2024-11-12)

⚠ BREAKING CHANGES

• Remove the generated exception block from the remoteCidr generation. This change means that a cidr containing the META_IP could be set.

Bug Fixes

• avoids memory leak in istio sidecar termination (#972) (bfd415e)
• ensure grafana does not install plugins from the internet (#993) (f3def45)
• remove remoteCidr exception block (#987) (264fbf6)
• renovate config updated to track tests (#981) (2494448)
• sets fail-fast to false for matrix workflows (#995) (3008788)
• sort auth chains when building the authservice config (#969) (15487fb)

Miscellaneous

• add prometheus, loki, and vector e2e testing (#939) (f271ce2)
• add the scorecard supply chain security workflow (#917) (5626f2f)
• deps: update keycloak to v26.0.5 (#858) (612d28c)
• deps: update authservice to v1.0.3 (#893) (5585a3c)
• deps: update grafana curl-fips image to v8.11.0 (#994) (dfc4c8c)
• deps: update grafana to 11.3.0 (#921) (7cdd742)
• deps: update loki to 3.2.1 (#918) (5fa6a24)
• deps: update loki to v6.19.0 (#990) (8bbac53)
• deps: update pepr to v0.39.0 (#932) (27eb1bd)
• deps: update support dependencies to v3.27.2 (#1001) (8702952)
• deps: update support dependencies to v3.3.0 (#985) (4636a38)
• deps: update support dependencies to v3.3.1 (#1002) (8c20b49)
• deps: update support-deps (#928) (a9cf1f2)
• deps: update support-deps (#983) (dc3084b)
• deps: update support-deps (#989) (7a1c74e)
• deps: update velero (#956) (7746092)
• regroup renovate support dependencies (#979) (6491be9)

v0.30.0

0.30.0 (2024-10-28)

⚠ BREAKING CHANGES

• remove uds-runtime from core (#955)

Features

• add finalizer for UDS Package CRs (#953) (fa42714)
• adds registry1 flavor of uds runtime (#925) (0011852)

Bug Fixes

• batch authservice checksum updates (#735) (100d35b)
• logout redirect uri (#945) (8e2b5d8)
• resolve lingering note formatting (#938) (455a530)
• vector remap language logic typo (#959) (89af729)

Miscellaneous

• add proper version update to aks nightly bundle (#942) (2f51c75)
• block local auth for neuvector (#965) (8f25b41)
• deps: update vector to 0.42.0 (#946) (2f63db2)
• remove uds-runtime from core (#955) (c6f6664)

v0.29.1

0.29.1 (2024-10-18)

Bug Fixes

• adr link in func layers doc (#903) (c42ccf8)
• codespell config (#934) (73eb385)
• decompose istio oscal (#826) (83c6ae5)
• don't add duplicate policy names to uds-core.pepr.dev/mutated annotation (#916) (99d1c83)
• istio proxy exiting early when Pod has restart policy (#914) (f87e3d4)
• release-please for aks (#941) (5c77285)
• test ci license check (#924) (c5b1d54)

Miscellaneous

• add e2e playwright tests for grafana (#844) (1af5a8f)
• add local lula compose task (#892) (075b519)
• add nightly testing for AKS (#908) (105aea6)
• add playwright deps to support-deps renovate (#937) (94655cd)
• deps: revert pepr to 0.37.2 (#940) (3317bbe)
• deps: update grafana helm chart to v8.5.5 (#905) (ca9a485)
• deps: update pepr to v0.38.0 (#870) (de8419c)
• deps: update pepr to v0.38.0 (#915) (6fe4e57)
• deps: update pepr to v0.38.1 (#922) (3c5d341)
• deps: update prometheus-stack (#863) (d3f03b4)
• deps: update prometheus-stack to v65.3.1 (#920) (0b80107)
• deps: update runtime to v0.6.1 (#910) (be63105)
• deps: update support dependencies to v0.192.0 (#906) (8dfd362)
• deps: update support-deps (#898) (380af83)
• deps: update support-deps (#912) (bf23a89)
• docs: custom resource docs generation (#902) (e73597d)
• ensure http2 watch config is used by internal exemption watch (#909) (25bfd59)
• group setup action in support deps (#930) (d0a0123)
• group vscode/settings.json with support-deps (#933) (81e41d8)

v0.29.0

0.29.0 (2024-10-11)

Features

• add base and identity layers (#853) (b3f532a)
• add logging functional layer (#861) (c1a67b9)
• add metrics-server functional layer (#865) (290367a)
• add monitoring layer (#872) (5ecb040)
• add nightly testing for rke2 (#808) (c401419)
• add service accounts options to sso (#852) (1029162)
• backup and restore layer, ui layer, runtime security layer (#862) (b1d8015)
• grafana-ha (#838) (d532d76)

Bug Fixes

• broken readme link (#899) (6e47b11)
• ci: switch to larger runners to resolve ci disk space issues (#882) (1af0401)
• snapshot ci version modification and tasks for publish (#877) (f01e5bd)
• support for anywhere network policies in cilium (#884) (5df0737)

Miscellaneous

• cleanup license parsing for github (#881) (43c98ce)
• deps: update chainctl action to v0.2.3 (#864) (d782b59)
• deps: update checkout action to v4.2.0 (#825) (29d1c98)
• deps: update dependency defenseunicorns/lula to v0.8.0 (#841) (fe36150)
• deps: update githubactions (#866) (44f8ea5)
• deps: update grafana to 11.2.1 (#836) (11383c1)
• deps: update grafana to v11.2.2 (#867) (06ed2c3)
• deps: update loki nginx image to v1.27.2 (#894) (df7d427)
• deps: update loki to v3.2.0 (#791) (d3c60b5)
• deps: update metrics-server chart to v3.12.2 (#873) (e2e61ce)
• deps: update pepr to v0.37.1 (#843) (68abcb2)
• deps: update pepr to v0.37.2 (#850) (b51f659)
• deps: update prometheus operator to 0.77.1 (#819) (0864b33)
• deps: update prometheus-stack (#855) (c791c24)
• deps: update prometheus-stack helm-charts to v64.0.0 (#849) (50a2588)
• deps: update runtime to v0.6.0 (#897) (89ae6e2)
• deps: update support-deps (#890) (26ea612)
• deps: update test-infra (#875) (583f07c)
• deps: update test-infra to v6.9.0 (#848) (ef9d317)
• deps: update uds to v0.17.0 (#859) (1489fef)
• deps: update zarf to v0.41.0 (#857) (a390c3d)
• docs: update doc structure for site refresh (#895) (1946a9a)
• fix broken link in docs (#845) (3078a5b)
• fix license header references (#901) (cf38b82)
• handle upgrade path for functional layers, add doc for usage (#896) (70d6b1b)
• regroup 'support dependencies' in renovate config (#885) (640d859)
• update license (#878) (b086170)

v0.28.0

0.28.0 (2024-09-27)

⚠ BREAKING CHANGES

• Promtail has been removed from UDS Core and replaced by Vector. If you were previously using overrides to setup additional log targets/endpoints for Promtail this configuration will need to be updated to Vector's chart/config formats. See Vector's Sources and Sinks as well as the helm chart values for guidance in configuration.

Features

• add support for keycloak saml attributes (#806) (b312b7d)
• exposes tls version for dev bundles (#809) (e1a2b55)
• switch from promtail to vector (#724) (1bf2958)

Bug Fixes

• eks iac issues, document storage class pre-reqs (#812) (df514bd)
• ensure istio sidecar is killed if job fails (#813) (34ffc0a)
• revert test app version to fix CI failures (#815) (2ec6ad6)

Miscellaneous

• add runtime group to renovate config (#799) (1bf2c69)
• deps: update dependency defenseunicorns/uds-common to v0.13.0 (#790) (8bfcdc0)
• deps: update dependency defenseunicorns/uds-common to v0.13.1 (#810) (eedb551)
• deps: update istio to v1.23.2 (#796) (039d89c)
• deps: update keycloak to v25.0.6 (#771) (9864059)
• deps: update pepr to v0.13.1 (#811) (bc05b04)
• deps: update prometheus operator to v0.77.0 (#783) (8f383d8)
• deps: update runtime to v0.5.0 (#834) (edc068d)
• deps: update setup-node to v4.0.4 (#801) (34dbc44)
• deps: update uds to v0.16.0 (#802) (d07670b)
• deps: update uds-common to v0.13.0 (#792) (c24e833)
• deps: update zarf to v0.40.1 (#793) (db93a7e)
• fix github-actions renovate (#800) (3ab2add)
• pepr policies doc table (#803) (440e4e1)
• pepr policy doc (#814) (8b10b86)
• updated pepr watch limit to 60s (#840) (85f3f41)
• use kfc WatchPhase enum (#787) (df4d2da)

v0.27.3

0.27.3 (2024-09-19)

Miscellaneous

• add uds-runtime as an optional component in core (#788) (a2dfede)

To enable UDS Runtime, add it as an optional component in your bundle:

- name: uds-core
  repository: ghcr.io/defenseunicorns/packages/private/uds/core
  ref: 0.27.3-unicorn
  optionalComponents:
    - uds-runtime

v0.27.2

0.27.2 (2024-09-18)

Bug Fixes

• use boltdb-shipper store by default for loki (#779) (e438e12)