abahmed/kwatch v1.0.0-rc.21 on GitHub

v1.0.0-rc.21

Upgrading from 0.10.x

Installer (recommended): run
/bin/bash -c "$(curl -fsSL https://kwatch.dev/kwatch.sh)". It
finds a 0.10.x install and offers to recreate the Deployment; your
configuration and Secrets are kept.
Helm: helm upgrade works with your 0.10.x values file. The old
service block is accepted and ignored. If you installed 0.10.x with Helm 4
(server-side apply), add --server-side=false to the upgrade, or
Kubernetes rejects the old RollingUpdate settings.
kubectl apply -f deploy/deploy.yaml: the Deployment selector
changed (it now also matches app.kubernetes.io/instance: kwatch),
and Kubernetes does not allow a selector to change. The configuration
also moved from the ConfigMap kwatch to the Secret kwatch. Create
the Secret from your config.yaml (credentials as described in the
upgrade guide), delete the old Deployment, then apply:
```
kubectl -n kwatch create secret generic kwatch \
  --from-file=config.yaml=config.yaml
kubectl delete deployment kwatch -n kwatch
kubectl apply -f deploy/deploy.yaml
```

See Upgrading to 1.0 for every configuration change.

Pre-rc.21: 0.10.5 upgrade path, expiry warnings, test-alert, redact, cluster check-ins (#561) (c3d7982)
Log license sync outcome, incident opens, kubelet cert hint; ignore no-op KwatchConfig applies (#560) (2d596d3)
fix(release): avoid SIGPIPE in changelog generation for long ranges (#559) (cafb222)

See the full diff since v1.0.0-rc.20.

Release integrity

Source tag: v1.0.0-rc.21
Source commit: 616e034b12f0c49fc27a0d74c6d99b4aa3919d34
Image: ghcr.io/abahmed/kwatch@sha256:d40a4e9b8cfa1cb33d43fa4c38733c8c09f90c4e3b6239c719e1b7e569beec1b
Verification files: checksums, signed checksums, manifest, installer checksums (signed)
SBOMs: kwatch-v1.0.0-rc.21-source-sbom.cdx.json and kwatch-v1.0.0-rc.21-image-sbom.cdx.json

Verify the image with:

cosign verify \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-identity-regexp='^https://github.com/abahmed/kwatch/.github/workflows/publish.yml@' \
  ghcr.io/abahmed/kwatch@sha256:d40a4e9b8cfa1cb33d43fa4c38733c8c09f90c4e3b6239c719e1b7e569beec1b