A Helm chart for KubeUser - Kubernetes-native user management operator
What's Changed
- fix(renewal): read CSR name from annotations to prevent rotation desync by @Mohammed-Alhuraibi in #83
- refactor(api): centralize auth.openkube.io/* string constants in api/v1alpha1 by @Mohammed-Alhuraibi in #85
- feat(release): signed release pipeline (cosign + PGP) by @MuhanedYahya in #86
- fix(rbac): reject duplicate role/clusterRole bindings instead of silently dropping by @Mohammed-Alhuraibi in #91
- feat: make kubeconfig cluster name configurable by @beanscg in #90
- refactor(certs): propagate kubeconfig build errors and drop base64 round-trip by @MuhanedYahya in #95
- fix: reject usernames with 'system:' prefix to prevent CN spoofing by @ulsreall in #82
- fix(controller): end the reconcile pass after adding the finalizer to prevent stale-object status conflicts by @Mohammed-Alhuraibi in #98
- chore(deps): bump github.com/google/cel-go from 0.23.2 to 0.29.0 by @dependabot[bot] in #99
- fix(renewal): hardcode owner-reference TypeMeta so shadow secrets and CSRs GC by @MuhanedYahya in #100
- fix(cleanup): propagate deletion errors so finalizer removal blocks on failure by @MuhanedYahya in #112
- fix(renewal): scope concurrent-rotation counter to each RotationManager by @MuhanedYahya in #113
- fix(renewal): verify shadow/key secret ownership before reuse to prevent key-planting impersonation by @MuhanedYahya in #116
- fix(security): reject pre-planted CSRs so operator never signs one bound to an attacker key by @MuhanedYahya in #117
- chore(deps): bump Go to 1.26 and OpenTelemetry SDK to 1.43 by @MuhanedYahya in #118
- feat: add examples/ folder and consolidate developer test fixtures by @MuhanedYahya in #119
- chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.83.1 by @dependabot[bot] in #120
- fix(webhook): make mutating webhook Ignore, add controller PDB, split Helm keys by @MuhanedYahya in #121
- fix(controller): drive error retries through workqueue rate limiter with exponential backoff by @MuhanedYahya in #123
- chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #124
- fix(controller): remove racy lazy init of AuthManager and RenewalCalculator by @MuhanedYahya in #125
- fix(renewal): unify safety floor at 15m; remove CalculateNextRenewal by @MuhanedYahya in #126
- fix(rbac): recreate RoleBinding on RoleRef change to avoid stuck reconcile by @MuhanedYahya in #127
New Contributors
Full Changelog: kubeuser-0.0.9...kubeuser-0.1.1