enix/kube-image-keeper v3.0.0-alpha.5 on GitHub

3.0.0-alpha.5 (2026-10-15)

auth: let the grace of OnFailure pull Secret entries take its duration at runtime (2aeebe6)
config: add secretSyncer.onFailureGrace, 15m by default (9c7febf)
helm: bound the secret syncer's Secret writes with a ValidatingAdmissionPolicy (9b7975f)
metrics: forget one population of a resource (be545b0)
monitoring: announce the drift and the cluster skew an ImageMonitor finds (3330891)
monitoring: check the alternatives an ImageMonitor tracks and report the failing ones (9446ff2)
monitoring: read drift back after a restart and cap driftedImages (9d6b45f)
monitoring: read failing alternatives back after a restart and cap unavailableAlternatives (f57adb5)
monitoring: report the tags an ImageMonitor finds drifted (55a11de), closes kubernetes/kubernetes#115199
monitoring: track the alternatives ImageAlternatives offer for a monitored image (aba03f4)
routing: demote the alternatives the ImageMonitors report unavailable (00adfd4)
routing: demote the candidates the ImageMonitors and ImageMirrors report failing (64a503f)
routing: probe last at admission the candidates the loops report failing (c51052d)
secret-syncer: take the grace of OnFailure pull Secret entries from the global config, and follow its reloads (40fc9f3)

auth: start the grace when an entry leaves the desired set (6f5adcb)
secret-syncer: recheck a pair at the exact end of the grace of its first entry (56e1887)