v0.13.2

Changelog

✨ New Features

• 9276c82: feat: add observedgeneration to status object of all crds (#1041) (@sandert-k8s)

🐛 Bug fixes

• dfb8641: fix: return early after error in impersonateHandler (#1043) (@jouve)

📦 Other work

• 56f67e0: chore(deps): update all-ci-updates (#1045) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.13.1...v0.13.2

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.13.2
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.13.2

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.35	>= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.1

Changelog

🐛 Bug fixes

• e699800: fix: allow secret permission if self signed cerfificates are generated (#1040) (@bakito)
• a204b1d: fix: chart improvements (#1037) (@oliverbaehler)

📦 Other work

• ce48117: chore(deps): update github/codeql-action action to v4.35.5 (#1039) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.13.0...v0.13.1

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.13.1
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.13.1

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.35	>= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.0

Changelog

✨ New Features

• a5e6883: feat: add xfcc authorization strategy (#1015) (@oliverbaehler)
• a64380e: feat: add review concurrency (#1036) (@oliverbaehler)

🛠 Dependency updates

• e3df458: fix(deps): update k8s.io/utils digest to ff6756f (#1031) (@renovate[bot])
• a94dce3: fix(deps): update module github.com/onsi/ginkgo/v2 to v2.28.3 (#921) (@renovate[bot])
• a64380e: fix(deps): update module github.com/projectcapsule/capsule to v0.13.0 (#1036) (@renovate[bot])
• a2964e5: fix(deps): update module go.uber.org/zap to v1.28.0 (#1020) (@renovate[bot])
• d74d907: fix(deps): update module golang.org/x/net to v0.55.0 (#1032) (@renovate[bot])

📦 Other work

• 494c176: chore(deps): set renovate minimum release age to 14 days (#1027) (@Svarrogh1337)
• dc54e0c: chore(deps): update all-ci-updates (#1017) (@renovate[bot])
• de3a358: chore(deps): update all-ci-updates (#1021) (@renovate[bot])
• bb7aed5: chore(deps): update dependency alessandrojcm/commitlint-pre-commit-hook to v9.25.0 (#1025) (@renovate[bot])
• 7887809: chore(deps): update dependency b1nary-gr0up/nwa to v0.7.8 (#1023) (@renovate[bot])
• c970a13: chore(deps): update dependency golangci/golangci-lint to v2.12.1 (#1026) (@renovate[bot])
• f56a57d: chore(deps): update dependency golangci/golangci-lint to v2.12.2 (#1029) (@renovate[bot])
• c674f33: chore(deps): update dependency kubernetes-sigs/controller-tools to v0.21.0 (#1030) (@renovate[bot])
• d575b28: chore(deps): update dependency onsi/ginkgo to v2.28.2 (#1018) (@renovate[bot])
• abd293b: chore(deps): update dependency onsi/ginkgo to v2.28.3 (#1022) (@renovate[bot])
• f1e61c8: chore(deps): update dependency onsi/ginkgo to v2.29.0 (#1034) (@renovate[bot])
• 34dec3c: chore(deps): update github/codeql-action action to v4.35.2 (#1013) (@renovate[bot])
• 640f846: chore(deps): update goreleaser/goreleaser-action action to v7.1.0 (#1016) (@renovate[bot])
• 239860b: chore(deps): update registry.sighup.io/fury/gangplank docker tag to v1.2.0 (#1035) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.12.0...v0.13.0

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.13.0
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.13.0

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.35	>= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.12.0

Changelog

🔥 Breaking Change

Toggling the Feature-Flag --feature-gates=ProxyClusterScoped=true will now no longer consider proxy settings from tenants.

✨ New Features

• b6e8f10: feat(helm): add secretTemplate for cert-manager generated certificates (#1000) (#1004) (@faelau)
• 414052e: feat(proxysetting): simplify proxy tenant handling (#980) (@CorentinPtrl)
• 87c14c4: feat: add extra manifests for capsule-proxy (#1001) (@oliverbaehler)
• 25743c9: feat: migrate remaining cluster scoped resources to global proxy but keep comaptibility (#1010) (@oliverbaehler)

🛠 Dependency updates

• bf6c997: fix(deps): update module github.com/projectcapsule/capsule to v0.12.4 (#929) (@renovate[bot])
• a85d1f6: fix(deps): update module golang.org/x/net to v0.52.0 (#986) (@renovate[bot])
• 8005171: fix(deps): update module golang.org/x/net to v0.53.0 (#1006) (@renovate[bot])

📦 Other work

• 643f3ee: chore(deps): update actions/cache action to v5.0.5 (#1011) (@renovate[bot])
• 70c8184: chore(deps): update actions/upload-artifact action to v7.0.1 (#1007) (@renovate[bot])
• 0d133ce: chore(deps): update all-ci-updates (#994) (@renovate[bot])
• 6e8429e: chore(deps): update all-ci-updates (#997) (@renovate[bot])
• f7ce26c: chore(deps): update anchore/sbom-action digest to f0d33c1 (#1003) (@renovate[bot])
• 2cbbfd4: chore(deps): update github/codeql-action digest to 34950e1 (#999) (@renovate[bot])
• 123ffa2: chore: update nginx and controller-gen (#1012) (@oliverbaehler)

Thanks to all the contributors!

Full Changelog: v0.11.3...v0.12.0

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.12.0
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.12.0

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.34	>= 1.34.0

Thanks to all the contributors! 🚀 🦄

v0.11.3

Changelog

🐛 Bug fixes

• 3681593: fix(helm): fix default securitycontext for job (#998) (@sandert-k8s)

🛠 Dependency updates

• 4d291e3: fix(deps): update k8s.io/utils digest to 28399d8 (#993) (@renovate[bot])

📦 Other work

• 9963a7b: chore(deps): update actions/stale digest to db5d06a (#990) (@renovate[bot])
• fd3854e: chore(deps): update all-ci-updates (#988) (@renovate[bot])
• e9073d3: chore(deps): update all-ci-updates (#991) (@renovate[bot])
• 027b668: chore(deps): update anchore/sbom-action digest to e22c389 (#992) (@renovate[bot])
• 3cad974: chore(deps): update codecov/codecov-action action to v5.5.4 (#996) (@renovate[bot])
• 628763a: chore(deps): update github/codeql-action digest to 1a97b0f (#983) (@renovate[bot])
• 12a3a97: chore(deps): update github/codeql-action digest to a899987 (#985) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.11.2...v0.11.3

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.11.3
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.11.3

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.34	>= 1.34.0

Thanks to all the contributors! 🚀 🦄

v0.11.2

Changelog

✨ New Features

• 20f1f3f: feat: cert-watcher to handle hot reload (#982) (@prometherion)

🐛 Bug fixes

• 7a7ac94: fix(helm): double labels (#976) (@sandert-k8s)
• c0f9f02: fix(helm): use correct component labels for gangplank (#977) (@oliverbaehler)
• 2fb970e: fix: disable cosign dependency (#984) (@oliverbaehler)

🛠 Dependency updates

• c11f56e: fix(deps): update module golang.org/x/net to v0.51.0 (#974) (@renovate[bot])

📦 Other work

• c88755d: chore(deps): update all-ci-updates (#894) (@renovate[bot])
• 977ad16: chore(deps): update all-ci-updates (#975) (@renovate[bot])
• f273371: chore(deps): update anchore/sbom-action digest to 17ae174 (#972) (@renovate[bot])
• 06e5404: chore(deps): update anchore/sbom-action digest to 57aae52 (#981) (@renovate[bot])
• 75a98e3: chore(deps): update github/codeql-action digest to 5cb13d6 (#978) (@renovate[bot])
• 756d52d: chore(deps): update github/codeql-action digest to 72d2d85 (#970) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.11.1...v0.11.2

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.11.2
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.11.2

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.34	>= 1.34.0

Thanks to all the contributors! 🚀 🦄

v0.11.1

Changelog

🐛 Bug fixes

• ff341f3: fix(chart): add missing SubjectAccessReview (#968) (@vbehar)
• cb5d438: fix(chart): add missing TokenReviews permission (#967) (@vbehar)
• b58423a: fix: invalid HTTP status code on error (#969) (@vbehar)

📦 Other work

• b99bb4e: chore: add admin config for testing (#971) (@oliverbaehler)

Thanks to all the contributors!

Full Changelog: v0.11.0...v0.11.1

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.11.1
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.11.1

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.34	>= 1.34.0

Thanks to all the contributors! 🚀 🦄

v0.11.0

Changelog

Breaking Changes ⚠️

By default certificates for the proxy are now created using cert-manager. To keep the old behavior you must set the following values:

options:
  generateCertificates: true
certManager:
  generateCertificates: false  

✨ New Features

• 31db7ae: feat: add minor improvements (#965) (@oliverbaehler)

🐛 Bug fixes

• 6a0ea4f: fix(SelfSubjectReview): authorization for ns (#919) (@CorentinPtrl)
• d03fb44: fix(docs): update home and documentation links in chart.yaml and notes.txt (#960) (@sandert-k8s)

🛠 Dependency updates

• e9cc01a: fix(deps): update k8s.io/utils digest to b8788ab (#961) (@renovate[bot])
• e8408bd: fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.3.1 (#958) (@renovate[bot])
• 2d14559: fix(deps): update module golang.org/x/net to v0.50.0 (#941) (@renovate[bot])

📦 Other work

• b972770: chore(deps): update actions/stale digest to b5d41d4 (#959) (@renovate[bot])
• 297b08a: chore(deps): update all-ci-updates (#953) (@renovate[bot])
• 6ec74e3: chore(deps): update all-ci-updates (#956) (@renovate[bot])
• 12d7a15: chore(deps): update amannn/action-semantic-pull-request digest to ac7e3fc (#963) (@renovate[bot])
• 6ef6f13: chore(deps): update anchore/sbom-action digest to 6d473d3 (#957) (@renovate[bot])
• 07eacf5: chore(deps): update anchore/sbom-action digest to c618dc7 (#950) (@renovate[bot])
• 707d3f6: chore(deps): update dependency adrienverge/yamllint to v1.38.0 (#954) (@renovate[bot])
• b56c50c: chore(deps): update dependency google/ko to v0.18.1 (#952) (@renovate[bot])
• 70916e3: chore(deps): update github/codeql-action digest to 5e98e18 (#951) (@renovate[bot])
• c7512be: chore(deps): update github/codeql-action digest to 710e294 (#955) (@renovate[bot])
• 59bd0cb: chore(deps): update golang docker tag to v1.26 (#962) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.10.1...v0.11.0

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.11.0
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.11.0

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.34	>= 1.34.0

Thanks to all the contributors! 🚀 🦄

v0.10.1

Changelog

🐛 Bug fixes

• abd484d: fix(helm): add flag 'enable-reflector' to pod template (#946) (@lynchmaniac)

🛠 Dependency updates

• f03325f: fix(deps): update k8s.io/utils digest to 718f0e5 (#933) (@renovate[bot])
• 7716779: fix(deps): update k8s.io/utils digest to 914a6e7 (#938) (@renovate[bot])

📦 Other work

• 2036b7a: chore(deps): update actions/stale digest to a21a081 (#935) (@renovate[bot])
• f4f2031: chore(deps): update actions/stale digest to d6f8a33 (#948) (@renovate[bot])
• 0118d28: chore(deps): update all-ci-updates (#928) (@renovate[bot])
• 803494e: chore(deps): update amannn/action-semantic-pull-request digest to 71b07ef (#936) (@renovate[bot])
• 511540d: chore(deps): update amannn/action-semantic-pull-request digest to b439535 (#944) (@renovate[bot])
• 0843fd7: chore(deps): update anchore/sbom-action digest to 2df107d (#926) (@renovate[bot])
• 0f51fe6: chore(deps): update dependency alessandrojcm/commitlint-pre-commit-hook to v9.24.0 (#943) (@renovate[bot])
• baae9e0: chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 (#932) (@renovate[bot])
• 6c66bad: chore(deps): update github/codeql-action digest to 0fa411e (#937) (@renovate[bot])
• 70e6d2a: chore(deps): update github/codeql-action digest to f67ec12 (#930) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.10.0...v0.10.1

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.10.1
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.10.1

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.34	>= 1.34.0

Thanks to all the contributors! 🚀 🦄

v0.10.0

Changelog

🐛 Bug fixes

• 75047eb: fix(controller): drop watchdog and proxyallnamespaced by default (#923) (@oliverbaehler)

🛠 Dependency updates

• c0cd446: fix(deps): update module github.com/onsi/ginkgo/v2 to v2.25.3 (#878) (@renovate[bot])
• ab70b55: fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.2 (#901) (@renovate[bot])
• bf820cb: fix(deps): update module github.com/projectcapsule/capsule to v0.12.1 (#875) (@renovate[bot])
• a9d8cd8: fix(deps): update module go.uber.org/zap to v1.27.1 (#916) (@renovate[bot])
• 6a69777: fix(deps): update module sigs.k8s.io/controller-runtime to v0.22.4 (#879) (@renovate[bot])

📦 Other work

• f2fa59b: chore(deps): update actions/setup-go action to v6 (#872) (@renovate[bot])
• a91abe4: chore(deps): update actions/stale digest to 3a9db7e (#871) (@renovate[bot])
• 877615e: chore(deps): update actions/stale digest to 9971854 (#918) (@renovate[bot])
• 36c19ef: chore(deps): update actions/stale digest to e46bbab (#902) (@renovate[bot])
• 9d7e3c9: chore(deps): update actions/stale digest to fad0de8 (#909) (@renovate[bot])
• a68b2e3: chore(deps): update all-ci-updates (#874) (@renovate[bot])
• 2631f0e: chore(deps): update all-ci-updates (#893) (@renovate[bot])
• a5ae39f: chore(deps): update all-ci-updates (#896) (@renovate[bot])
• a7c402f: chore(deps): update all-ci-updates (#914) (@renovate[bot])
• 968868c: chore(deps): update all-ci-updates (#917) (@renovate[bot])
• 085637d: chore(deps): update amannn/action-semantic-pull-request digest to 069817c (#910) (@renovate[bot])
• 30b5984: chore(deps): update amannn/action-semantic-pull-request digest to e49f57c (#897) (@renovate[bot])
• 449eeef: chore(deps): update anchore/sbom-action digest to 039eeb2 (#880) (@renovate[bot])
• d0251b3: chore(deps): update anchore/sbom-action digest to 5758fe4 (#925) (@renovate[bot])
• 842b0c4: chore(deps): update anchore/sbom-action digest to 8e94d75 (#889) (@renovate[bot])
• f7d59d0: chore(deps): update anchore/sbom-action digest to fbfd9c6 (#913) (@renovate[bot])
• 01db328: chore(deps): update dependency alessandrojcm/commitlint-pre-commit-hook to v9.23.0 (#898) (@renovate[bot])
• 7c4be95: chore(deps): update dependency b1nary-gr0up/nwa to v0.7.7 (#906) (@renovate[bot])
• 94c1649: chore(deps): update dependency helm/chart-testing to v3.14.0 (#904) (@renovate[bot])
• 8e6fe0c: chore(deps): update dependency onsi/ginkgo to v2.25.3 (#877) (@renovate[bot])
• 71f489b: chore(deps): update dependency onsi/ginkgo to v2.27.2 (#900) (@renovate[bot])
• 0ffd464: chore(deps): update github/codeql-action action to v3.30.3 (#883) (@renovate[bot])
• 4d098c1: chore(deps): update github/codeql-action action to v3.31.2 (#908) (@renovate[bot])
• 01bb201: chore(deps): update github/codeql-action action to v3.31.3 (#911) (@renovate[bot])
• e16bcad: chore(deps): update github/codeql-action action to v3.31.7 (#924) (@renovate[bot])
• a13d7d9: chore(deps): update github/codeql-action digest to 573acd9 (#888) (@renovate[bot])
• 150f66b: chore(deps): update github/codeql-action digest to 85f1517 (#907) (@renovate[bot])
• 600238c: chore(deps): update github/codeql-action digest to 8d77149 (#890) (@renovate[bot])
• 98483db: chore(deps): update github/codeql-action digest to aa90e97 (#873) (@renovate[bot])
• 69ef8fd: chore(deps): update github/codeql-action digest to c43362b (#912) (@renovate[bot])
• c6fc9aa: chore(deps): update golang docker tag to v1.25 (#832) (@renovate[bot])
• 1495ac7: chore(deps): update sigstore/cosign-installer action to v3.10.0 (#887) (@renovate[bot])

Thanks to all the contributors!

Full Changelog: v0.9.13...v0.10.0

Docker Images

• ghcr.io/projectcapsule/capsule-proxy:0.10.0
• ghcr.io/projectcapsule/capsule-proxy:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

• ghcr.io/projectcapsule/charts/capsule-proxy:0.10.0

Important

Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by supporters.

Kubernetes version	Minimum required
v1.34	>= 1.34.0

Thanks to all the contributors! 🚀 🦄