Skip to content

chore(release-please--branches--release-please--branches--release-please--branches--release-please--branches--release-please--branches--release-please--branches--main): release 0.3.0 #455

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
openbao-operator-release-pr wants to merge 2 commits into from
Closed

chore(release-please--branches--release-please--branches--release-please--branches--release-please--branches--release-please--branches--release-please--branches--main): release 0.3.0 #455

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
54ccfe0
chore(release-please--branches--release-please--branches--release-ple…
openbao-operator-release-pr[bot] May 19, 2026
eed1198
chore(release): sync chart metadata and changelog
github-actions[bot] May 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .release-please-manifest.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
".": "0.2.0"
".": "0.3.0"
}

26 changes: 26 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,32 @@

Release notes are generated and maintained via **release-please** based on **Conventional Commits**.

## [0.3.0](https://github.com/dc-tec/openbao-operator/compare/0.2.0...0.3.0) (2026-05-19)


### Features

* **openbaocluster:** add ingress integration readiness ([#409](https://github.com/dc-tec/openbao-operator/issues/409)) ([945b4a4](https://github.com/dc-tec/openbao-operator/commit/945b4a407829e8bb5f5617309873215ae356fc2d))
* **openbao:** improve PKCS[#11](https://github.com/dc-tec/openbao-operator/issues/11) runtime ergonomics ([#400](https://github.com/dc-tec/openbao-operator/issues/400)) ([f32a6ec](https://github.com/dc-tec/openbao-operator/commit/f32a6ec0fdc46ab911bc714daa4ec40d0527ef97))


### Bug Fixes

* **backup:** record manual triggers and failure time ([#407](https://github.com/dc-tec/openbao-operator/issues/407)) ([ff172c6](https://github.com/dc-tec/openbao-operator/commit/ff172c60d6efabb541f9093dca769fb7b354f0ce))
* **config:** align audit device options with OpenBao ([#423](https://github.com/dc-tec/openbao-operator/issues/423)) ([b1ed4a3](https://github.com/dc-tec/openbao-operator/commit/b1ed4a344e2d9b99fb4ff0efad86107133209bc7))
* **config:** harden generated JWT roles ([#420](https://github.com/dc-tec/openbao-operator/issues/420)) ([546c6db](https://github.com/dc-tec/openbao-operator/commit/546c6dbc605c97c1dac743c5cefb97e4dc595688))
* **config:** use SemVer precedence for OpenBao version checks ([#394](https://github.com/dc-tec/openbao-operator/issues/394)) ([173847d](https://github.com/dc-tec/openbao-operator/commit/173847d22397796e4caa7aa41180f60fcc2a6839))
* **deps:** restore dependency update CI coverage ([#399](https://github.com/dc-tec/openbao-operator/issues/399)) ([032e1b7](https://github.com/dc-tec/openbao-operator/commit/032e1b7a8ae0a008bacc17772bac5d764f410876))
* **gateway:** emit TLSRoute as Gateway API v1 ([#429](https://github.com/dc-tec/openbao-operator/issues/429)) ([05177d3](https://github.com/dc-tec/openbao-operator/commit/05177d3aae16aa5bbd80151806b75b5842e6ced9))
* **helm:** deduplicate generated RBAC labels ([#414](https://github.com/dc-tec/openbao-operator/issues/414)) ([78f8d73](https://github.com/dc-tec/openbao-operator/commit/78f8d73ed5329c4dfaa7c82926f98ca8933bcb19))
* **openbao:** share JWT token cache ([#419](https://github.com/dc-tec/openbao-operator/issues/419)) ([a4a0887](https://github.com/dc-tec/openbao-operator/commit/a4a088762c584867932d3f48d47ee5399ceadc9e))
* **provisioner:** support external tenant PSS label ownership ([#428](https://github.com/dc-tec/openbao-operator/issues/428)) ([08462c9](https://github.com/dc-tec/openbao-operator/commit/08462c9e108dba154aa9831ce38f9d209b6dbf9e))
* **rbac:** allow verification pull secret reads ([#427](https://github.com/dc-tec/openbao-operator/issues/427)) ([10d40c0](https://github.com/dc-tec/openbao-operator/commit/10d40c0169bda12ea318f9ab1629b0bf4e8bc312))
* **restore:** harden restore job rendering ([#405](https://github.com/dc-tec/openbao-operator/issues/405)) ([3e52f5a](https://github.com/dc-tec/openbao-operator/commit/3e52f5a51731562cb61f8cb8e48d2fdf8bd72e09))
* **storage:** retry transient S3 bucket ensure failures ([#408](https://github.com/dc-tec/openbao-operator/issues/408)) ([9796c2c](https://github.com/dc-tec/openbao-operator/commit/9796c2c174c06f84f8fa645ae29909a774bc6f73))
* **upgrade:** harden rolling upgrade resume ([#406](https://github.com/dc-tec/openbao-operator/issues/406)) ([33fe59d](https://github.com/dc-tec/openbao-operator/commit/33fe59d148751253d6819070630ebad0ce81d80b))
* **workload:** mount OCI plugin directory ([#421](https://github.com/dc-tec/openbao-operator/issues/421)) ([fc95717](https://github.com/dc-tec/openbao-operator/commit/fc95717479d010af90550ae7f74d51e999d36990))

## [0.2.0](https://github.com/dc-tec/openbao-operator/compare/0.1.0...0.2.0) (2026-05-19)


Expand Down
58 changes: 7 additions & 51 deletions charts/openbao-operator/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ description: >-
OpenBao Operator installs the OpenBao Kubernetes operator and its required
cluster-scoped resources.
type: application
version: 0.2.0
appVersion: 0.2.0
version: 0.3.0
appVersion: 0.3.0
icon: >-
https://raw.githubusercontent.com/dc-tec/openbao-operator/main/docs/assets/logo.svg
home: https://github.com/dc-tec/openbao-operator
Expand All @@ -27,28 +27,14 @@ annotations:
artifacthub.io/operator: 'true'
artifacthub.io/operatorCapabilities: Full Lifecycle
artifacthub.io/prerelease: "false"
artifacthub.io/containsSecurityUpdates: 'true'
artifacthub.io/containsSecurityUpdates: 'false'
artifacthub.io/changes: |
- kind: added
description: "admission: authorize maintenance through RBAC"
- kind: added
description: "api: add runtime restart controls"
- kind: added
description: "openbaocluster: add ingress integration readiness"
- kind: added
description: "openbao: improve PKCS#11 runtime ergonomics"
- kind: added
description: "readreplicas: add steady-state read replica topology and status"
- kind: added
description: "readreplicas: integrate read replicas with upgrade and restore workflows"
- kind: fixed
description: "admission: guard hardened security context overrides"
- kind: fixed
description: "backup: record manual triggers and failure time"
- kind: fixed
description: "ci: allow PR label sync to write labels"
- kind: fixed
description: "ci: replace dangerous PR labeling workflow"
- kind: fixed
description: "config: align audit device options with OpenBao"
- kind: fixed
Expand All @@ -59,61 +45,31 @@ annotations:
description: "deps: restore dependency update CI coverage"
- kind: fixed
description: "gateway: emit TLSRoute as Gateway API v1"
- kind: fixed
description: "helm: allow global values in chart schema"
- kind: fixed
description: "helm: deduplicate generated RBAC labels"
- kind: fixed
description: "helm: Helm provisioner admission identity"
- kind: fixed
description: "infra: delete scaled-down raft PVCs"
- kind: fixed
description: "multitenancy: gate cluster reconcile on tenant onboarding"
- kind: fixed
description: "network: Require source-scoped managed Ingress access"
- kind: fixed
description: "openbao: share JWT token cache"
- kind: fixed
description: "openbao: stage safe raft scale-downs"
- kind: fixed
description: "probe: stabilize openbao workload probes"
- kind: fixed
description: "provisioner: reduce release reconciliation log noise"
- kind: fixed
description: "provisioner: support external tenant PSS label ownership"
- kind: fixed
description: "rbac: allow verification pull secret reads"
- kind: fixed
description: "restore: harden restore job rendering"
- kind: security
description: "security: fail closed for configured trusted roots"
- kind: fixed
description: "status: mark unsafe admission mode not production-ready"
- kind: fixed
description: "storage: retry transient S3 bucket ensure failures"
- kind: fixed
description: "upgrade: complete SSA ownership migration"
- kind: fixed
description: "upgrade: harden bluegreen and rolling recovery flakes"
- kind: fixed
description: "upgrade: harden rolling upgrade resume"
- kind: fixed
description: "upgrade: set executor job resource requirements"
- kind: fixed
description: "upgrade: treat raft promote already-voter as no-op"
- kind: fixed
description: "upgrade: verify default helper images for hardened clusters"
- kind: fixed
description: "workload: mount OCI plugin directory"
artifacthub.io/images: |
- name: openbao-operator
image: ghcr.io/dc-tec/openbao-operator:0.2.0
image: ghcr.io/dc-tec/openbao-operator:0.3.0
- name: openbao-init
image: ghcr.io/dc-tec/openbao-init:0.2.0
image: ghcr.io/dc-tec/openbao-init:0.3.0
- name: openbao-backup
image: ghcr.io/dc-tec/openbao-backup:0.2.0
image: ghcr.io/dc-tec/openbao-backup:0.3.0
- name: openbao-upgrade
image: ghcr.io/dc-tec/openbao-upgrade:0.2.0
image: ghcr.io/dc-tec/openbao-upgrade:0.3.0
artifacthub.io/crds: |
- kind: OpenBaoCluster
version: v1alpha1
Expand Down
Loading