This beta release includes bug fixes and new features.
It updates the underlying OPA engine to v0.21.0.
Features 🌈
- [499e4ef]: Config namespace exclusion (#678) (Sertaç Özercan) #678
- [c8ed7d6]: update opa version to 0.21.0 (#716) (Vivek Bagade) #716
- [232f281]: Default multi-pod deployment for webhook (#723) (Rita Zhang) #723
- [694e0ec]: Create K8s Events from webhook denies and dryrun (#727) (Rita Zhang) #727
- [97c8f8e]: Add support for emit k8s events for audit (#739) (Rita Zhang) #739
- [d86432a]: Add missing watch metrics (#706) (Sertaç Özercan) #706
- [9e4ae8e]: add pprof profiling (#744) (Sertaç Özercan) #744
- [9a9e60a]: Add verbose logging option to readiness tracker (#736) (Oren Shomron) #736
- [5adaaf0]: Audit List chunking (#734) (Sertaç Özercan) #734
Bug Fixes 🐞
- [b6a4b2e]: Fix total violations count in logs (#709) (Sertaç Özercan) #709
- [429b4d8]: Mitigate race condition setting logger on webhook initialization (#712) (Max Smythe) #712
- [a208820]: set base helm chart url correctly to the release version (#714) (Will Salt) #714
- [ca05f89]: Ensure cluster scoped resources always match namespace filters (#623) (Robert Sheehy) #623
- [19888e5]: extract tracing logic into a method (#726) (Michael Grosser) #726
- [7de2e34]: Cancel expectation for deleted resources in sync and constraint controller (#722) (Varnika Goyal) #722
- [d5b30d1]: return early from audit if there are no constraints (#728) (Sertaç Özercan) #728
- [2f749ce]: Wrap API client in tests with rate-limit-respecting retry client to prevent transient failures. (#746) (Oren Shomron) #746