Release v0.27.0

Release Image

These images can also be referenced by their digest: sha256:8bfe6fe313bf915da228579e48a7f2575aaea0fd9c27385735cb807d701d0131.

Changes

This release introduces support for ARM64. It also includes some minor changes, bug fixes, and upgrades all project dependencies.

Major Changes

• Pinniped's GitHub releases will now include support for arm64 going forward. (#1699, #1702, #1703)
  • The Pinniped Concierge and Supervisor container images used in these GitHub releases are now multi-arch amd64/arm64 images. These deployments can now run seamlessly on either linux/amd64 or linux/arm64 Kubernetes nodes.
  • The Pinniped CLI binaries attached to these GitHub releases will now also include arm64 binaries.

Minor Changes

• The Pinniped CLI will now show a login banner before prompting for username and password at the CLI prompt during LDAP, AD, or OIDC password grant login via the Supervisor. The banner will show the configured display name of the identity provider from the FederationDomain. (#1691)
• The pinniped get kubeconfig CLI command has a new optional argument --pinniped-cli-path. This can be used to set the full path or executable name for the Pinniped CLI in the resulting kubeconfig. For example, using --pinniped-cli-path=pinniped will use pinniped as the path, and during login the binary named pinniped will be found via the user's path. This allows kubeconfigs to be more easily shared between users compared to the default behavior, which is to include the full path to the Pinniped CLI binary that was used to invoke pinnniped get kubeconfig. (#1690)
• Updates Go to v1.21.2 and updates all other project dependencies. (#1715, #1714, #1713, #1711, #1698, #1685)
• Some developer tooling was improved for the project maintainers and contributors. (#1696, #1692)
• Some small documentation updates. (#1661, #1687, #1716)

Bug Fixes

• Fix a bug introduced in v0.18.0 which slowed down the shutdown of the Pinniped pods and prevented the leader pod from releasing its lease, which caused it take take several minutes before replacement Pinniped pods could regain the lease and become fully operational. (#1688, #1695)
• Certain uncommon errors during login that were previously only shown in the CLI's output will now also be shown in the browser. (#1694, #1697) Note that these changes will make this version of the Supervisor incompatible with with very old versions of the Pinniped CLI (prior to v0.14.0) for Chrome and Edge browsers (due to them sending CORS preflight requests).
• Stop using the scheduler.alpha.kubernetes.io/critical-pod annotation to avoid seeing warnings that it has been removed from Kubernetes. (#1693)

A complete list of changes (51 commits, 151 changed files with 1,640 additions and 1,543 deletions) can be found here.