v1.0.0-alpha.0 - 2023-02-08
Breaking Changes ⚠️
As of v1.0.0 release, the azure-workload-identity mutating admission webhook is defaulting to using failurePolicy: Fail instead of Ignore. With this change, we have added an object selector in the configuration to only intercept and mutate pods that have the azure.workload.identity/use: "true" label. This change reduces the latency impact of the webhook and prevents workload pods that require the injected environment variables and projected service account token volume from starting in an unexpected state. Refer to issue for more details.
Changelog
Bug Fixes 🐞
- 8372568 fix: use generate name in logs if pod name is empty (#706)
- 03e849e fix: explicitly set runAsNonRoot to false (#697) (#698)
Continuous Integration 💜
- 27e585a ci: add
--only-show-errorsin az upgrade to suppress warnings (#742) - 20e91d3 ci: add
-yarg for az upgrade (#741) - d39ec1d ci: update tag validation to allow alpha/beta/rc (#738)
- 0ace9ec ci: update kubernetes version to v1.24 for aks (#718)
- 4332f08 ci: changed Azure cli install to an upgrade (#708)
Documentation 📘
- 0f2c75e docs: update docs for v1.0.0-alpha.0 release (#735)
- bb7170f docs: add aad-pod-identity migration to the docs(faq) (#732)
- cba0c38 docs: Update quick start doc for user assigned identity (#692)
- df6362a docs: update go sdk ref link (#684)
Features 🌈
- 8c37dc1 feat: remove pod/service account labeled check in webhook (#720)
- 305d10b feat: use cert ready checker for webhook readiness (#721)
- 653d013 feat: update webhook failure policy to Fail and set objectSelector (#695)
- 0befda9 feat: migrate proxy and webhook to mlog (#707)
- 4d5f063 feat: add azure-identity go example (#683)
Maintenance 🔧
- d2d9dcb chore: bump github/codeql-action from 2.2.1 to 2.2.2 (#739)
- e471d98 chore: use base and test image from
registry.k8s.io(#737) - 5cc79ca chore: bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#734)
- 48230a8 chore: complete migration to mlog and drop logrus (#729)
- 0035925 chore: bump github/codeql-action from 2.1.39 to 2.2.1 (#726)
- 9ba3fff chore: move to mlog.New and drop klog and logr as direct deps (#722)
- 216db84 chore: remove arc wiring and drop --arc-cluster flag from webhook (#723)
- 317bcc5 chore: bump k8s.io/kubernetes from 1.25.5 to 1.25.6 in /test/e2e (#717)
- e14d9a5 chore: bump github.com/Azure/go-autorest/autorest/adal from 0.9.21 to 0.9.22 (#713)
- fd5f060 chore: bump k8s.io/client-go from 0.25.5 to 0.25.6 (#712)
- b593022 chore: bump github/codeql-action from 2.1.38 to 2.1.39 (#711)
- e0bde85 chore: pin buildx version to
0.10.6(#710) - 52e2382 chore: update golangci-lint to v1.50.0 (#700)
- a915e40 chore: bump github.com/sirupsen/logrus from 1.8.1 to 1.8.2 (#702)
- 50834a5 chore: bump github/codeql-action from 2.1.37 to 2.1.38 (#701)
- f41afae chore: bump jsonwebtoken from 8.5.1 to 9.0.0 in /examples/msal-node (#690)
- 257fd5d chore: bump jsonwebtoken and @azure/msal-node (#694)
- c3f08b3 chore: bump goreleaser/goreleaser-action from 3 to 4 (#679)
- aec2998 chore: bump github/codeql-action from 2.1.36 to 2.1.37 (#678)