github kubernetes-sigs/security-profiles-operator v0.8.2
on GitHub

latest releases: v0.8.4, v0.8.3
10 months ago

Release notes

Welcome to our glorious v0.8.2 release of the security-profiles-operator! The general usage and setup can be found in our documentation. 🥳 👯

To install the operator, run: 

$ kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/security-profiles-operator/v0.8.2/deploy/operator.yaml

You can also verify the container image signature by using cosign: 

$ cosign verify \
    --certificate-identity krel-trust@k8s-releng-prod.iam.gserviceaccount.com \
    --certificate-oidc-issuer https://accounts.google.com \
    registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.8.2

Beside the operator image, we now also ship spoc, the official Security Profiles Operator Command Line Interface! Binaries for amd64 and arm64 are attached to this release.

To verify the signature of spoc. download all release artifacts and run for amd64 (works in the same way for arm64: 

$ cosign verify-blob \
    --certificate-identity sgrunert@redhat.com \
    --certificate-oidc-issuer https://github.com/login/oauth \
    --certificate spoc.amd64.cert \
    --signature spoc.amd64.sig \
    spoc.amd64

To verify the Bill of Materials (BOM) using the bom tool, download the artifacts into a build directory and run: 

> bom validate -e spoc.spdx -d build/
+-------------------+-------+-----------------------------+----------------+
|     FILENAME      | VALID |           MESSAGE           | INVALID HASHES |
+-------------------+-------+-----------------------------+----------------+
| spoc.amd64        | OK    | File validated successfully | -              |
| spoc.amd64.cert   | OK    | File validated successfully | -              |
| spoc.amd64.sha512 | OK    | File validated successfully | -              |
| spoc.amd64.sig    | OK    | File validated successfully | -              |
| spoc.arm64        | OK    | File validated successfully | -              |
| spoc.arm64.cert   | OK    | File validated successfully | -              |
| spoc.arm64.sha512 | OK    | File validated successfully | -              |
| spoc.arm64.sig    | OK    | File validated successfully | -              |
+-------------------+-------+-----------------------------+----------------+

The .spdx file is signed as well and we also provide .sha512 sum files for the binaries.

Feel free to provide us any kind of feedback in the official Kubernetes Slack #security-profiles-operator channel.

Changes by Kind

Failing Test

Dependencies

Added

  • github.com/DATA-DOG/go-sqlmock: v1.5.0
  • github.com/Khan/genqlient: v0.6.0
  • github.com/alexflint/go-arg: v1.4.2
  • github.com/alexflint/go-scalar: v1.0.0
  • github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.11.76
  • github.com/buildkite/go-pipeline: v0.2.0

Changed

Removed

  • github.com/99designs/gqlgen: v0.17.36
  • github.com/DataDog/gostackparse: v0.7.0
  • github.com/IBM/sarama: v1.40.0
  • github.com/Shopify/sarama: v1.38.1
  • github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.21.4
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.93.2
  • github.com/aws/aws-sdk-go-v2/service/eventbridge: v1.20.4
  • github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery: v1.7.34
  • github.com/aws/aws-sdk-go-v2/service/kinesis: v1.18.4
  • github.com/aws/aws-sdk-go-v2/service/sfn: v1.19.4
  • github.com/aws/aws-sdk-go-v2/service/sns: v1.21.4
  • github.com/aws/aws-sdk-go-v2/service/sqs: v1.24.4
  • github.com/bradfitz/gomemcache: acc6962
  • github.com/bytedance/sonic: v1.10.0
  • github.com/chenzhuoyu/base64x: 296ad89
  • github.com/chenzhuoyu/iasm: v0.9.0
  • github.com/confluentinc/confluent-kafka-go/v2: v2.2.0
  • github.com/confluentinc/confluent-kafka-go: v1.9.2
  • github.com/decred/dcrd/crypto/blake256: v1.0.1
  • github.com/denisenkom/go-mssqldb: v0.11.0
  • github.com/dimfeld/httptreemux/v5: v5.5.0
  • github.com/dvyukov/go-fuzz: 6a8e9d1
  • github.com/eapache/go-resiliency: v1.4.0
  • github.com/eapache/go-xerial-snappy: c322873
  • github.com/eapache/queue: v1.1.0
  • github.com/elastic/elastic-transport-go/v8: v8.1.0
  • github.com/elastic/go-elasticsearch/v6: v6.8.5
  • github.com/elastic/go-elasticsearch/v7: v7.17.1
  • github.com/elastic/go-elasticsearch/v8: v8.4.0
  • github.com/emicklei/go-restful: v2.16.0+incompatible
  • github.com/garyburd/redigo: v1.6.4
  • github.com/gin-contrib/sse: v0.1.0
  • github.com/gin-gonic/gin: v1.9.1
  • github.com/globalsign/mgo: eeefdec
  • github.com/go-pg/pg/v10: v10.11.1
  • github.com/go-pg/zerochecker: v0.2.0
  • github.com/go-playground/assert/v2: v2.2.0
  • github.com/go-redis/redis/v7: v7.4.1
  • github.com/go-redis/redis/v8: v8.11.5
  • github.com/go-redis/redis: v6.15.9+incompatible
  • github.com/go-stack/stack: v1.8.0
  • github.com/gobuffalo/attrs: a9411de
  • github.com/gobuffalo/depgen: v0.1.0
  • github.com/gobuffalo/envy: v1.7.0
  • github.com/gobuffalo/genny: v0.1.1
  • github.com/gobuffalo/gitgen: cc08618
  • github.com/gobuffalo/gogen: v0.1.1
  • github.com/gobuffalo/logger: 86e12af
  • github.com/gobuffalo/mapi: v1.0.2
  • github.com/gobuffalo/packd: v0.1.0
  • github.com/gobuffalo/packr/v2: v2.2.0
  • github.com/gobuffalo/syncx: 33c2958
  • github.com/gocql/gocql: 0eacd31
  • github.com/gofiber/fiber/v2: v2.50.0
  • github.com/gofrs/uuid: v4.4.0+incompatible
  • github.com/golang-sql/civil: b832511
  • github.com/golang-sql/sqlexp: v0.1.0
  • github.com/gomodule/redigo: v1.8.9
  • github.com/googleapis/gnostic: v0.5.5
  • github.com/graph-gophers/graphql-go: v1.5.0
  • github.com/hailocab/go-hostpool: e80d13c
  • github.com/hashicorp/go-uuid: v1.0.3
  • github.com/hashicorp/golang-lru/v2: v2.0.3
  • github.com/jackc/pgpassfile: v1.0.0
  • github.com/jackc/pgservicefile: 091c0ba
  • github.com/jackc/pgx/v5: v5.3.1
  • github.com/jcmturner/aescts/v2: v2.0.0
  • github.com/jcmturner/dnsutils/v2: v2.0.0
  • github.com/jcmturner/gofork: v1.7.6
  • github.com/jcmturner/gokrb5/v8: v8.4.4
  • github.com/jcmturner/rpc/v2: v2.0.3
  • github.com/jinzhu/gorm: v1.9.16
  • github.com/jinzhu/inflection: v1.0.0
  • github.com/jinzhu/now: v1.1.5
  • github.com/joho/godotenv: v1.3.0
  • github.com/karrick/godirwalk: v1.10.3
  • github.com/klauspost/cpuid/v2: v2.2.5
  • github.com/konsorten/go-windows-terminal-sequences: v1.0.2
  • github.com/labstack/echo/v4: v4.11.1
  • github.com/labstack/echo: v3.3.10+incompatible
  • github.com/labstack/gommon: v0.4.0
  • github.com/markbates/oncer: bf2de49
  • github.com/markbates/safe: v1.0.1
  • github.com/microsoft/go-mssqldb: v0.21.0
  • github.com/richardartoul/molecule: 32cfee0
  • github.com/segmentio/kafka-go: v0.4.42
  • github.com/spaolacci/murmur3: v1.1.0
  • github.com/tidwall/btree: v1.6.0
  • github.com/tidwall/buntdb: v1.3.0
  • github.com/tidwall/gjson: v1.16.0
  • github.com/tidwall/grect: v0.1.4
  • github.com/tidwall/match: v1.1.1
  • github.com/tidwall/rtred: v0.1.2
  • github.com/tidwall/tinyqueue: v0.1.1
  • github.com/tmthrgd/go-hex: 447a304
  • github.com/twitchtv/twirp: v8.1.3+incompatible
  • github.com/twitchyliquid64/golang-asm: v0.15.1
  • github.com/ugorji/go/codec: v1.2.11
  • github.com/valyala/bytebufferpool: v1.0.0
  • github.com/valyala/fasthttp: v1.50.0
  • github.com/valyala/fasttemplate: v1.2.2
  • github.com/valyala/tcplisten: v1.0.0
  • github.com/vmihailenco/bufpool: v0.1.11
  • github.com/vmihailenco/msgpack/v5: v5.3.5
  • github.com/vmihailenco/tagparser/v2: v2.0.0
  • github.com/vmihailenco/tagparser: v0.1.2
  • github.com/zenazn/goji: v1.0.1
  • golang.org/x/arch: v0.4.0
  • gopkg.in/jinzhu/gorm.v1: v1.9.2
  • gopkg.in/olivere/elastic.v3: v3.0.75
  • gopkg.in/olivere/elastic.v5: v5.0.84
  • gorm.io/driver/mysql: v1.0.1
  • gorm.io/driver/postgres: v1.4.6
  • gorm.io/driver/sqlserver: v1.4.2
  • gorm.io/gorm: v1.25.3
  • honnef.co/go/gotraceui: v0.2.0
  • mellium.im/sasl: v0.3.1
Check out latest releases or
releases around kubernetes-sigs/security-profiles-operator v0.8.2

Don't miss a new security-profiles-operator release

NewReleases is sending notifications on new releases.

Get notifications