What's Changed
- Bump Kubernetes libraries to 1.34.11 by @ajanikow in #2176
- Bump Kubernetes libraries to 1.35.8 by @ajanikow in #2178
- Bump Go toolchain to 1.26.8 by @ajanikow in #2179
- Bump Kubernetes libraries to 1.36.4 by @ajanikow in #2180
- Bump Helm to v3.21.4 (drop containerd + openpgp) by @ajanikow in #2181
- Add ArangoPlatformWorkflow CRD by @ajanikow in #2182
- Collect ArangoPlatformWorkflow resources in the debug package by @ajanikow in #2184
- Route SchedulerV2 Integration through ArangoPlatformWorkflow behind a feature flag by @ajanikow in #2183
- Add platform-workflow-discovery process for existing service Helm releases by @ajanikow in #2185
- Add spec.hibernate on ArangoPlatformService and ArangoPlatformWorkflow by @ajanikow in #2187
- Gate WebSocket over HTTP/2 (Extended CONNECT) on HTTP/2 upstreams by @ajanikow in #2188
- Add gateway dynamicMode push (xDS/ADS config delivery) by @ajanikow in #2186
- Serve the gateway inventory inline in the ADS-pushed config in push mode by @ajanikow in #2190
- Seed gateway config-push sidecar's initial ADS snapshot from local ConfigMaps by @ajanikow in #2189
- Register ArangoPlatformWorkflow GVR for the debug package by @ajanikow in #2193
- Add Hibernated status condition to ArangoPlatformService/Workflow by @ajanikow in #2194
- Add seaweedfs storage mode to the arango-deployment chart by @ajanikow in #2195
- Add pod UID (MY_POD_UID) lifecycle env without triggering member rotation by @ajanikow in #2191
- Emit arangod /data volume size as collector startup metrics by @ajanikow in #2196
- Add member.startup License Manager inventory (per-member collector startup values) by @ajanikow in #2197
- Clean up gateway TLS-keyfile finalizer on deployment deletion by @ajanikow in #2199
- Fix static gateway readiness stuck on GatewayConfig 'Not Propagated' by @ajanikow in #2198
- Add group role bindings to the authorization sidecar (API + enforcement, no CRD) by @ajanikow in #2201
- Add ArangoPermissionRoleGroupBinding CRD (registration only) by @ajanikow in #2202
- Add RBAC group role bindings (ArangoPermissionRoleGroupBinding) by @ajanikow in #2200
- Add MetaV1 Move operation with atomic transactional key rename by @ajanikow in #2203
- Rewire ArangoLink job store to state-in-key buckets with MetaV1 Move and add job priority by @ajanikow in #2204
- Return NotFound instead of Internal when removing a non-existent role binding by @ajanikow in #2206
- Refresh the RBAC pool from the store on authorization API get/update/list operations by @ajanikow in #2205
- Add Refresh RPC to AuthorizationV1 to force the authorization cache to re-pull from the pool service by @ajanikow in #2208
- Guard against nil gateway spec in GatewayDynamicModePush by @ajanikow in #2212
- Gate local central-service integrations on the GatewaySidecarEnabled condition by @ajanikow in #2213
- Add authorization refresh-on-evaluate header for read-your-writes RBAC consistency by @ajanikow in #2215
- Make member-startup inventory AQL version-agnostic (no FOR over null) by @ajanikow in #2214
- Register the ArangoPermissionRoleGroupBinding GVR so the debug package can collect it instead of panicking by @ajanikow in #2216
- Correct version comparator (util.Version) replacing buggy go-driver Version.CompareTo by @ajanikow in #2211
- Bump Go toolchain to 1.26.9 and vulnerable deps (x/net, grpc, otel, oras, klauspost/compress) to clear govulncheck findings by @ajanikow in #2217
- Bump Envoy to v1.39.1 (image) and go-control-plane/envoy xDS module to v1.39.0 to clear Envoy CVEs by @ajanikow in #2218
- Wrap Helm-templated code blocks in platform docs in Jekyll raw so the published site stops blanking {{ }} fields by @ajanikow in #2219
- Route the image CVE scan to the -preview Docker Hub repo for -preview VERSIONs by @ajanikow in #2220
- Enable the collector postStart lifecycle hook feature by default by @ajanikow in #2221
Full Changelog: 1.4.5...1.4.6