This stable release has no other functional changes from v3.12.0-rc.0.
Notable changes
- 📦 New
AssignImagemutator #2429 - 📢 Emit events in the involved objects namespace #2360
- 🥳 Update to Open Policy Agent (OPA) v0.49.2 #2611
- 🚂 Added multi-engine support to allow integration with Kubernetes CEL
ValidatingAdmissionPolicyin the future #2616 - 👏 Enable exempt namespace suffix with
--exempt-namespace-suffixflag #2636
Features
- Allow writing logs to custom file (#2473) #2473 (Max Smythe)
- More verbose logging for audit (#2503) #2503 (Max Smythe)
- helm: Add a network policy for the controller manager (#2514) #2514 (Kyle Michel)
- enforce kind on admission review (#2512) #2512 (alex)
- add the errorlint check for golangci-lint (#2519) #2519 (Fish-pro)
- implement AssignImage mutator (#2429) #2429 (Davis Haba)
- introduce
gcito unify the order of package import (#2545) #2545 (Fish-pro) - add unconvert check for golang-lint (#2554) #2554 (Fish-pro)
- Emit events in the involved objects namespace (#2360) #2360 (Craig Trought)
- add support for exempt namespace suffix (#2636) #2636 (Janusz Marcinkiewicz)
Bug Fixes
- cutpath for ../ paths (#2498) #2498 (alex)
- when docker build in arm or other not amd64 env. (#2492) #2492 (yanggang)
- high-risk vulnerabilities caused by low version of kubebuilder and yq (#2505) #2505 (fsl)
- syntax errors in the document (#2520) #2520 (Fish-pro)
- updating url in doc config (#2549) #2549 (Jaydipkumar Arvindbhai Gabani)
- add --operation=mutation-controller flag (#2542) #2542 (Davis Haba)
- add vendor manifests back (#2558) #2558 (Sertaç Özercan)
- add missing namespace to static Helm templates (#2593) #2593 (Devon Crouse)
- handle empty spec for modifyset (#2585) #2585 (alex)
- piping input in gator (#2589) #2589 (alex)
- generate mock name for expanded resources (#2529) #2529 (Davis Haba)
- Allow to change WebhookConfiguration name and change preInstall crd image (#2563) #2563 (Jiri Tyr)
- support source field in Constraints (#2552) #2552 (Davis Haba)
- helm: switch to curl as ENTRYPOINT for probeWebhook (#2632) #2632 (thomasmckay)
- index readiness trackers by GK (not GVK) (#2635) #2635 (Davis Haba)
Documentation
- generate 3.11 docs (#2501) #2501 (Sertaç Özercan)
- fix syntax errors (#2513) #2513 (Nico Wang)
- Fix typo in website docs (#2528) #2528 (triangularcover)
- fix example code snippet for docs (#2539) #2539 (triangularcover)
- fix expansion yaml example (#2551) #2551 (Sertaç Özercan)
- update k8s.gcr.io to registry.k8s.io (#2588) #2588 (Rita Zhang)
- Add background information on mutation (#2387) #2387 (Max Smythe)
- Add mutation background to 3.11 (#2590) #2590 (Max Smythe)
- helm: Fix helm chart documentation for setting audit and webhook selectors and affinity (#2617) #2617 (Max Falk)
Code Refactoring
- use Go 1.18 buildinfo (#2541) #2541 (Sertaç Özercan)
Tests
- add some audit tests (#2489) #2489 (Sertaç Özercan)
Continuous Integration
- Releasing benchmarks and benchmarking PR (#2432) #2432 (Jaydipkumar Arvindbhai Gabani)
- add license lint wf for cncf approved licenses (#2461) #2461 (alex)
- remove kubebuilder dependency (#2524) #2524 (Sertaç Özercan)
- helm: remove unused kustomize step when upgrading (#2564) #2564 (Sertaç Özercan)
- pin golang image to unblock ci (#2573) #2573 (Sertaç Özercan)
- move k8s.gcr.io to registry.k8s.io (#2572) #2572 (Sertaç Özercan)
- remove k8s 1.23 from matrix (#2609) #2609 (Sertaç Özercan)
- bump ci to golang 1.20 (#2597) #2597 (Sertaç Özercan)
- generate sbom and provenance (#2540) #2540 (Sertaç Özercan)
Chores
- modify all error contrast judgments by errors (#2491) #2491 (Fish-pro)
- bump actions/checkout from 3.2.0 to 3.3.0 (#2499) #2499 (dependabot[bot])
- bump peaceiris/actions-gh-pages from 3.9.0 to 3.9.1 (#2500) #2500 (dependabot[bot])
- bump github/codeql-action from 2.1.37 to 2.1.38 (#2517) #2517 (dependabot[bot])
- bump peaceiris/actions-gh-pages from 3.9.1 to 3.9.2 (#2521) #2521 (dependabot[bot])
- bump github/codeql-action from 2.1.38 to 2.1.39 (#2525) #2525 (dependabot[bot])
- update docs (#2526) #2526 (Shawn Warren)
- bump k8s.io/client-go from 0.24.9 to 0.24.10 (#2533) #2533 (dependabot[bot])
- Upgrade to k8s v0.26.1 and controller-runtime fork (#2530) #2530 (Max Smythe)
- bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#2536) #2536 (dependabot[bot])
- bump ua-parser-js from 0.7.31 to 0.7.33 in /website (#2535) #2535 (dependabot[bot])
- bump github/codeql-action from 2.1.39 to 2.2.1 (#2543) #2543 (dependabot[bot])
- bump @docusaurus/core from 2.1.0 to 2.3.0 in /website (#2547) #2547 (dependabot[bot])
- bump @docusaurus/preset-classic from 2.1.0 to 2.3.0 in /website (#2546) #2546 (dependabot[bot])
- the linter
structcheckvarcheckanddeadcodeare deprecated (since v1.49.0) (#2550) #2550 (Fish-pro) - modify the typecheck as prompted (#2553) #2553 (Fish-pro)
- bump github/codeql-action from 2.2.1 to 2.2.4 (#2581) #2581 (dependabot[bot])
- bump @docusaurus/core from 2.3.0 to 2.3.1 in /website (#2566) #2566 (dependabot[bot])
- bump http-cache-semantics from 4.1.0 to 4.1.1 in /website (#2565) #2565 (dependabot[bot])
- bump @docusaurus/preset-classic from 2.3.0 to 2.3.1 in /website (#2567) #2567 (dependabot[bot])
- bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.4 (#2568) #2568 (dependabot[bot])
- clean up repeated package import (#2579) #2579 (Fish-pro)
- bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (#2586) #2586 (dependabot[bot])
- bump golang.org/x/net from 0.4.0 to 0.7.0 (#2594) #2594 (dependabot[bot])
- bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#2604) #2604 (dependabot[bot])
- bump dns-packet from 5.3.1 to 5.4.0 in /website (#2610) #2610 (dependabot[bot])
- bump github/codeql-action from 2.2.4 to 2.2.5 (#2603) #2603 (dependabot[bot])
- update frameworks to 89ae90 (#2611) #2611 (Sertaç Özercan)
- bump k8s.io/apiextensions-apiserver from 0.26.1 to 0.26.2 (#2615) #2615 (dependabot[bot])
- Upgrade CF for multi-engine (#2616) #2616 (Max Smythe)
- bump github/codeql-action from 2.2.5 to 2.2.6 (#2619) #2619 (dependabot[bot])
- bump @sideway/formula from 3.0.0 to 3.0.1 in /website (#2621) #2621 (dependabot[bot])
- bump github.com/onsi/gomega from 1.27.2 to 1.27.4 (#2623) #2623 (dependabot[bot])
- bump kubectl (#2624) #2624 (Rita Zhang)
- bump go.uber.org/automaxprocs from 1.5.1 to 1.5.2 (#2627) #2627 (dependabot[bot])
- bump k8s.io/apiextensions-apiserver from 0.26.2 to 0.26.3 (#2630) #2630 (dependabot[bot])
- bump actions/setup-go from 3 to 4 (#2625) #2625 (dependabot[bot])
- bump github/codeql-action from 2.2.6 to 2.2.8 (#2637) #2637 (dependabot[bot])
- Prepare v3.12.0-rc.0 release (#2647) #2647 (github-actions[bot])
New Contributors
- @congiv made their first contribution in #2389
- @Fish-pro made their first contribution in #2483
- @yanggangtony made their first contribution in #2492
- @fengshunli made their first contribution in #2505
- @wangzihao05 made their first contribution in #2513
- @krmichelos made their first contribution in #2514
- @triangularcover made their first contribution in #2528
- @swarren83 made their first contribution in #2526
- @devoncrouse made their first contribution in #2593
- @ctrought made their first contribution in #2360
- @gmdfalk made their first contribution in #2617
- @VirrageS made their first contribution in #2636
Full Changelog: v3.11.0...v3.12.0