zapier/kubechecks v1.6.4

on GitHub

What's Changed

• feature: Restrict Kubechecks to a Single Namespace for App Watcher by @Greyeye in #235

• Namespace Restriction for Kubechecks:

  • Current Behavior: Kubechecks monitors all ArgoCD applications and ApplicationSet CRDs across the entire cluster. This is not ideal when multiple ArgoCD instances are running in a single cluster (e.g., for testing purposes).
  • New Behavior: Introduces the ability to specify a namespace for ArgoCD. Kubechecks will now watch ArgoCD CRDs only within the specified namespace.
    • Added a new flag argocd-api-namespace and a corresponding server config ArgoCDNameSpace.
    • Modified NewApplicationInformer to target the specified argocdnamespace.
    • argocd-api-namespace /KUBECHECKS_ARGOCD_NAMESPACE default is argocd, Please make sure this matches with your environment

• Improvement to dumpcrd:

  • dumpcrd can now run without requiring a local kubectl binary.

• Modification to GitHub Webhook Check:

  • The webhook check for GitHub has been updated to validate against the payload URL instead of the hook's API URL.

• OpenAI ChatGPT Model Update:

  • Updated to use the GPT-4o model.

• Bump go-github to v62

Localdev Changes

• Earthly File Renaming:

  • Renamed the local earthly file to earthly.sh to minimize confusion.

• TiltFile Fix:

  • Updated TiltFile to read the .tools-version file directly, preventing failures during the earthly build.
  • Updated to read .secret instead of .env; as secrets env vars are read from the .secret

• Values.yaml Update:

  • Renamed KUBECHECKS_ARGOCD_NAMESPACE to KUBECHECKS_ARGOCD_API_NAMESPACE in localdev/kubechecks/values.yaml.

• Configuration Change:

  • Set KUBECHECKS_ENABLE_CONFTEST to false as the ./policy path is not valid.

Full Changelog: v1.6.3...v1.6.4