Azure/azure-workload-identity v0.7.0

on GitHub

v0.7.0 - 2021-12-14

Bug Fixes 🐞

• convert registry to lowercase before building images (#258)
• allow make deploy to deploy webhook using deployment YAML (#259)
• set default token expiration to 1h (#247)
• replace ; with : in azwi version output (#222)

Code Refactoring 💎

• migrate publishing pipeline to GitHub Actions (#252)

Continuous Integration 💜

• add markdown-link-check workflow (#283)
• use latest azure cli for azwi-e2e workflow (#280)
• migrate e2e test on kind clusters to GitHub Actions (#272)
• create zip for azwi cli for windows (#268)
• allow content: read token permission for publish_images workflow (#260)
• scope github token for actions (#256)
• add semantic.yml and update release-manfiest make target (#210)

Documentation 📘

• fix issuer url query value for aks (#287)
• create & delete federated identity credentials with azwi-cli (#282)
• update property name (#285)
• reference azwi-cli in quick start and bump Kubernetes versions (#281)
• update helm installation steps (#277)
• document tenant conditional access policy (#276)
• address documentation issues (#265)
• address several documentation issues (#249)
• allow kubectl apply -f through a URL (#253)
• update quick-start based on testing (#228)
• add language-specific examples (#229)
• add troubleshooting guide (#226)
• add example for kind cluster (#225)
• add required configurations for cluster (#224)
• documentations on azwi and service account key generation (#223)
• fix link and update configmap name (#219)
• add steps for managed clusters (#218)

Features 🌈

• use graph sdk for azwi (#292)
• add individual commands for phases (#227)
• add role definition id client for azwi (#221)
• introduce phases for azwi serviceaccount delete (#220)
• introduce phases for azwi serviceaccount create (#217)

Maintenance 🔧

• update dependencies (#296)
• support v1.23.0 kind cluster version (#294)
• update debian-iptables to bullseye-v1.1.0 (#291)
• make azwi serviceaccount create|delete flags constant (#274)
• remove SUPPORT.md (#278)
• replace federated identity with federated identity credential (#266)
• add debug logs for msal-go (#257)
• add makefile for msal-go demo image and update image in docs (#212)
• use TARGETARCH for webhook and proxy image build (#215)
• remove hack/generate-jwks (#211)

Security Fix 🛡️

• fix CVE-2021-43784 (#293)
• bump Kubernetes version to v1.22.3 (#261)

Testing 💚

• decrease ginkgo nodes to 1 to reduce flakiness (#297)
• set subscription after login (#295)
• e2e test for azwi build on ubuntu and macos (#286)
• enable token exchange and proxy test scenario on soak clusters (#289)
• bump kubernetes version to v1.22.4 (#288)
• e2e test coverage for azwi-cli (#271)