A Helm chart for KubeUser - Kubernetes-native user management operator
What's Changed
- fix(renewal): read CSR name from annotations to prevent rotation desync by @Mohammed-Alhuraibi in #83
- refactor(api): centralize auth.openkube.io/* string constants in api/v1alpha1 by @Mohammed-Alhuraibi in #85
- feat(release): signed release pipeline (cosign + PGP) by @MuhanedYahya in #86
- fix(rbac): reject duplicate role/clusterRole bindings instead of silently dropping by @Mohammed-Alhuraibi in #91
- feat: make kubeconfig cluster name configurable by @beanscg in #90
- refactor(certs): propagate kubeconfig build errors and drop base64 round-trip by @MuhanedYahya in #95
- fix: reject usernames with 'system:' prefix to prevent CN spoofing by @ulsreall in #82
- fix(controller): end the reconcile pass after adding the finalizer to prevent stale-object status conflicts by @Mohammed-Alhuraibi in #98
- chore(deps): bump github.com/google/cel-go from 0.23.2 to 0.29.0 by @dependabot[bot] in #99
- fix(renewal): hardcode owner-reference TypeMeta so shadow secrets and CSRs GC by @MuhanedYahya in #100
- fix(cleanup): propagate deletion errors so finalizer removal blocks on failure by @MuhanedYahya in #112
- fix(renewal): scope concurrent-rotation counter to each RotationManager by @MuhanedYahya in #113
New Contributors
Full Changelog: kubeuser-0.0.9...kubeuser-0.0.12