General:
- Vault 1.4 support works stable (#963)
- improve lint and introduce emperror errors (#989)
- various docs fixes
- prepend namespace name to ClusterRoleBinding for Vault Helm Chart (#993) (@cablespaghetti)
Webhook:
- support the old .dockercfg key from the
imagePullSecret
as well (#975) - support cert renewal in bods by using secret projectedVolume instead of subPath mounts (#976)
- fix Kubernetes version comparison (#987) (@martinezleoml)
- vault-env: allow to pass data in write requests (#984)
- OCP 4.3: runAsUser in Vault Secrets webhook chart should be configurable (#995) (@dakine1111)
Operator:
Security:
- Snyk code scanner has been enabled for scanning the whole codebase (#980)
Next Release:
- In Vault 1.4.0 the Raft storage backend has been stabilized, and in tandem, the etcd-operator project has been archived, so we are going to deprecate etcd-operator support (but not etcd support!) and phase it out in later versions, we suggest to use Raft in the first place.