Remote Controller v0.3.0
Security Fix - Resolve Protection Mechanism Failure in remote-controller
- Under certain circumstances, the controller can perform potentially destructive operations against a Kubernetes namespace that it should not interact with. To resolve this:
- The build-deploy-controller will not default to returning the
lagoon
namespace as the OpenshiftProjectName - The build-deploy-controller will not be able to deploy into a namespace that it has not created itself, identified by the label lagoon.sh/controller=XXX
- The build-deploy-controller will not be able to delete anything from a namespace that it has not created itself, identified by the label lagoon.sh/controller=XXX
- The build-deploy-controller will not default to returning the
What's Changed
- Remove v1alpha1 api from controller by @shreddedbacon in #111
- Dont nuke manually cancelled build logs if they are available by @shreddedbacon in #113
Full Changelog: v0.2.4...v0.3.0