GoogleCloudPlatform/khi v0.48.0

KHI v0.48.0

on GitHub

Changes on authentication method

KHI until the previous version has supported authentication methods: getting token from metadata server, passing access token in program argument or getting access token from gcloud command. These authentication features are natively implemented on KHI and didn't used the Go SDK for accessing Google Cloud APIs. This change replaced the all logics to access Google Cloud APIs with using the official SDK.

From this version, KHI supports authentication with Application Default Credentials(ADC).
https://cloud.google.com/docs/authentication/provide-credentials-adc?hl=ja

And the way of running KHI on an environment without metadata server was changed regarding this authentication method change:

Command to run KHI on an environment without metadata server

gcloud auth application-default login
docker run \
 -p 127.0.0.1:8080:8080 \
 -v ~/.config/gcloud/application_default_credentials.json:/root/.config/gcloud/application_default_credentials.json:ro \
 gcr.io/kubernetes-history-inspector/release:latest

⚠️IMPORTANT⚠️
You can run KHI on Cloud Shell or any environment with metadata server as you did before this release. The command is not changed:
docker run -p 127.0.0.1:8080:8080 gcr.io/kubernetes-history-inspector/release:latest

What's Changed

Feature ✨

• Migrate API client from REST based self implementation to new client using official SDK by @kyasbal in #324
• Made context used in inspection graph extensible from InspectionServer type by @kyasbal in #305
• Add initextension package to make KHI itself extensible by @kyasbal in #321

Bugs 🐛

• Show ephemeralContainerStatus on the container subresource timeline under Pods by @kyasbal in #269
• fix bug #266: Fixed the grouper to check the manifest type for subresource response & request by @kyasbal in #268
• fix bug to keep old form parameter values on new inspection dialog by @kyasbal in #282
• fix test failure from #263 by @kyasbal in #283
• fix bug #267: manifest generator to be aware of uid change by @kyasbal in #272
• Delete subresource when its parent resource is deleted by @kyasbal in #326

Other Changes 🛠

• Remove the role of task resolution from TaskSet and add another extensible task resolver type by @kyasbal in #262
• Add kkuchima@ in backend code owner by @kyasbal in #276
• Improved the testability over ChangeSet by @kyasbal in #271
• Add new inspection task base types by @kyasbal in #263
• Rename inspectiontaskbase.PreviousTaskResult to CachableTaskResult by @kyasbal in #290
• Fix typo on #290 by @kyasbal in #292
• feat(server): Add ServerFactory type to configure the gin.Engine by @kyasbal in #288
• fix lint related minor issues by @kyasbal in #309
  #326

Special thanks 🎉

Code reviewers: @kkuchima @RyuSA @renamoo @jyane @SecretSword2

To use this version, you can run the following command:

docker run -p 127.0.0.1:8080:8080 gcr.io/kubernetes-history-inspector/release:v0.48.0

Or you can use latest tag until we release the next release.

⚠️ The container image will be built in our CD pipeline after creating this release. It would take an hour for the container image to actually be available

Full Changelog: v0.47.6...v0.48.0