All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Instead of querying for the node architecture and os when inspecting pods, which rarely worked, use
platforms
on the config to determine which platforms should be required when checking upstream.
- Fixed rewrite_success prometheus metric counting every rule invocation, instead of only rewrites
- Added helm usage to the README.md
- Fixed ServiceMonitor templates in helm chart not rendering correctly (thanks @z0rc for the fix!)
- Updated go.mod dependencies
- Added cluster role permissions for list, watch on nodes
- Support for authenticating to check if manifests exist for each proxy rule with an image pull secret.
- Changes to the helm chart RBAC to support access secrets within the webhook's namespace.
- Some minor test refactoring.
- Deprecated kube-client-lazy-remap flag (no-op now), it has graduated to default controller runtime behavior
- Added cli flags for passing kube client qps, burst, and enabling lazy rest mapping of resources in the controller-runtime
- Changed node lookup for pod submissions to fail-open and default to webhook's OS and architecture
- Fixed node lookup with untyped client, did not pass struct pointer correctly
- Improved logging around rejected pod submissions due to node lookup.
- Added detection of the pod OS, architecture for manifests
- Added cluster role and bindings for accessing node resources
- Rebuilt and upgraded modules
- Added volumes, volume mounts, init containers to the helm chart
- Rebuilt and upgraded modules, other minor tlc.
- New prometheus metric
hcw.mutations.image_rewrite
which tracks the original and rewritten image modified
- Chart handling of
rules
andextraRules
was incorrect when unset.
- Rewrote significant parts of the implementation and configuration to switch to a new regex based rules system.
- Chart version supports cloud vendor prelease suffixes
- Rewrote webhook to use containers/image reference parsing instead of regex
- Added verbose mode flag
- Initial release