This stable release has no other changes from v3.11.0-rc.1.
Notable changes
- External data is promoted to beta ✨
- 📢 It is now required to use TLS/mTLS with external data providers
- Gator CLI is promoted to beta 🐊
- Gator CLI now supports
trace,AdmissionReviewand specifying an OCI image 🎉
Features
- add resource labels to audit logs (#2354) #2354 (davis-haba)
- expose AdmissionReview for gator verify (#2348) #2348 (alex)
- add tracing to gator test, verify (#2364) #2364 (alex)
- add --image flag in gator test|expand (#2398) #2398 (davis-haba)
Bug Fixes
- helm: allow installation of post-install and post-upgrade jobs (#2351) #2351 (Mathieu Parent)
- exclude gs namespace in matchExpressions (#2385) #2385 (Rita Zhang)
- log constraint violations on log denies (#2428) #2428 (alex)
- make gator output relative paths (#2443) #2443 (alex)
- make audit fault tolerant (#2447) #2447 (Rita Zhang)
- docs: adjust link to the mutation docs (#2445) #2445 (Tolleiv Nietsch)
- helm: do not mix ignore and podSecurity labels (#2451) #2451 (Mathieu Parent)
Documentation
- update required version for expansion and rel link for versione… (#2350) #2350 (Rita Zhang)
- search docs (#2362) #2362 (Sertaç Özercan)
- add external data provider list (#2369) #2369 (Sertaç Özercan)
- add expansion and warn to demo (#2368) #2368 (Rita Zhang)
- clairfy g8r requires user for tracing (#2358) #2358 (alex)
- adding doc to enable apiserver authentication in versioned docs (#2378) #2378 (Jaydipkumar Arvindbhai Gabani)
- rename policy library on website (#2414) #2414 (Rita Zhang)
- add library and new features to website (#2417) #2417 (Sertaç Özercan)
- gator: add addmission review doc (#2388) #2388 (alex)
Tests
Continuous Integration
- add k8s 1.26 (#2446) #2446 (Sertaç Özercan)
- bump bats to v1.8.2 🦇 (#2441) #2441 (Sertaç Özercan)
- fix tagged release test for release-3.11 (#2467) #2467 (Sertaç Özercan)
- bump release timeout to 45m (release-3.11) (#2471) #2471 (Sertaç Özercan)
Chores
- bump peaceiris/actions-gh-pages from 3.8.0 to 3.9.0 (#2356) #2356 (dependabot[bot])
- bump github/codeql-action from 2.1.28 to 2.1.29 (#2361) #2361 (dependabot[bot])
- bump @docusaurus/core from 2.1.0 to 2.2.0 in /website (#2371) #2371 (dependabot[bot])
- bump @docusaurus/preset-classic from 2.1.0 to 2.2.0 in /website (#2370) #2370 (dependabot[bot])
- Authenticating api server against webhook (#2359) #2359 (Jaydipkumar Arvindbhai Gabani)
- bump github/codeql-action from 2.1.29 to 2.1.30 (#2383) #2383 (dependabot[bot])
- bump github.com/prometheus/client_golang from 1.13.0 to 1.13.1 (#2384) #2384 (dependabot[bot])
- adding a tag to indicate dry run requests in valication request count metric (#2379) #2379 (Jaydipkumar Arvindbhai Gabani)
- bump loader-utils from 2.0.2 to 2.0.3 in /website (#2392) #2392 (dependabot[bot])
- bump github/codeql-action from 2.1.30 to 2.1.31 (#2391) #2391 (dependabot[bot])
- bump k8s.io/client-go from 0.24.7 to 0.24.8 (#2405) #2405 (dependabot[bot])
- bump github/codeql-action from 2.1.31 to 2.1.32 (#2409) #2409 (dependabot[bot])
- bump loader-utils from 2.0.3 to 2.0.4 in /website (#2411) #2411 (dependabot[bot])
- bump stefanprodan/helm-gh-pages from 1.6.0 to 1.7.0 (#2412) #2412 (dependabot[bot])
- bump github/codeql-action from 2.1.32 to 2.1.33 (#2415) #2415 (dependabot[bot])
- Verify CN name as part of client cert check while authenticating api server (#2396) #2396 (Jaydipkumar Arvindbhai Gabani)
- helmify: Add icon to Chart.yaml (#2419) #2419 (Manuel Rüger)
- bump github/codeql-action from 2.1.33 to 2.1.35 (#2424) #2424 (dependabot[bot])
- upgrade CF to 1c9ce4f and fix gator tests (#2436) #2436 (alex)
- promote gator to beta for v3.11.0 (#2437) #2437 (alex)
- bump github/codeql-action from 2.1.35 to 2.1.36 (#2444) #2444 (dependabot[bot])
- adds Google Analytics (#2439) #2439 (Nilekh Chaudhari)
- bump k8s.io/client-go from 0.24.8 to 0.24.9 (#2449) #2449 (dependabot[bot])
- bump actions/checkout from 3.1.0 to 3.2.0 (#2456) #2456 (dependabot[bot])
- bump externaldata v1beta1 api (#2438) #2438 (Sertaç Özercan)
- Prepare v3.11.0-rc.1 release (#2460) #2460 (github-actions[bot])
- Prepare v3.11.0 release (#2488) #2488 (github-actions[bot])
Reverts
- Revert "feat: Add extraEnv support to deployments (#2330)" (#2355) #2355 (Sertaç Özercan)
- Revert docusaurus 2.2.0 (#2372) #2372 (Sertaç Özercan)
New Contributors
- @JaydipGabani made their first contribution in #2336
- @madmatt112 made their first contribution in #2330
- @tolleiv made their first contribution in #2445
Full Changelog: v3.10.0...v3.11.0