In this release
This release contains a security fix for an opendistro index creation permission issue (see GHSA-7jj3-wwp7-989p)
This release also introduces a new set of logic for the build-deploy image, processing routes and ingresses via the new https://github.com/uselagoon/build-deploy-tool - gradually more of the logic will transfer across - see uselagoon/build-deploy-tool#27 for details
Additionally, the permissions needed to add environment variables to projects have been revised to match the use case, and can now be actioned by a user with "maintainer" permission, instead of the previous "owner".
This release is built on the https://github.com/uselagoon/lagoon-images/releases/tag/22.4.1 images
The lagoon-charts update will follow shortly.
What's Changed
- Security fix - Improper creation of OpenDistro/OpenSearch index role permissions by the Lagoon API
- fixup ingress and persistant storage for node-based tests by @tobybellwood in #3137
- add quiet to syft command and clean up setx by @tobybellwood in #3131
- update RBAC for project add env var to maintainer by @tobybellwood in #3075
- feat: use build tool to generate ingress templates by @shreddedbacon in #3133
- remove autoidler by @shreddedbacon in #3140
- feat: upgrade lagoon-linter v0.5.0 -> v0.7.0 by @smlx in #3138
- feat: use build tool to generate autogen routes by @shreddedbacon in #3141
- update build-deploy tool for autogen route improvements by @shreddedbacon in #3142
Full Changelog: v2.7.1...v2.8.0