v0.1.0

Wild capsule-proxy release has appeared! (cit.)

⚠️ Warning: this release contains breaking changes!

• Node listing should rely on the Tenant's nodeSelector spec [#52]

Features

• Run in out-of-cluster mode (#67)
• Access the node details (#40)
• Listing of the Tenants StorageClass resources (#55)
• Listing of the Tenants IngressClass resources (#56)
• Add support for k8s webhook token authentication strategy (#99)

Enhancements

• Migrate to a better HTTP router (#54)
• Update to Go 1.16 (#75)
• Provide option to debug in-cluster-mode with delve (#77)
• Switch over HTTP middlewares (#65)
• Setting up CI linting checks (#63)
• Implement the recovery middleware (#85)
• Setting up e2e tests (#64)
• Each API route should be considered as a module (#81)

Bugfixes

• SSL self-signed certificate is not created when enabled in Helm chart (#60)
• Typo in default image tag (#50)

---

Many kudos to all the contributors that helped to shape this astonishing release with an impressive features list:
@ludusrusso, @davideimola, @MaxFedotov, @bsctl, @ptx96, @gautam2187, @d-m, @GlassOfWhiskey

Together we stand! 👏🏻

v0.0.5

v0.0.5 (2021-01-01)

Happy new year with a brand new name!

Features

• Node listing is supported through the Tenant annotation capsule.clastix.io/enable-node-listing [#38]

Enhancements

• Documentation has been improved [#43]

Breaking Changes

• Quay.io image has been changed, please refer to quay.io/clastix/capsule-proxy:v0.0.5

Many thanks to @bsctl for his endless effort for the documentation, and many many kudos to @MaxFedotov for pushing this project beyond any boundary!

v0.0.4

v0.0.4 (2020-11-26)

Some minor enhancements and addressing two severe bug fixes.

Enhancements

• Supporting the Tenant group owner kind [#30]
• Using ISO-8601 date-time standard for logs [#35]

Bug fixes

• Avoiding privilege escalation due to labelSelector query string with empty value [#32]
• Fixing memory leak [#28]

Many thanks to @bsctl, an awesome QA job as usual! 🎖️

v0.0.3

v0.0.3 (2020-10-02)

This Capsule Namespace Filter release provides additional improvements and addressing some security issues.

Features

• Add readiness and liveness endpoints [#15]
• Support for TLS/SSL [#6]
• Users presenting TLS client certificates cannot list namespaces [#14]
• Improving documentation [#13 and #2]

Big fixes

• Missing expired check on JWT token [#7]
• A tenant owner can list namespaces belonging to other tenants [#5]

Many kudos to @bsctl driving this project and helping with his unstoppable QA job! 🚀

v0.0.2

v0.0.2 (2020-09-19)

A clean and neat implementation: just proxying to the API Server to let handle the magic on its side.

Features

• Support also for kubectl get namespace [#1]
• Adding customizable username claim name according to OIDC configuration [#4]

v0.0.1

v0.0.1 (2020-09-18)

First implementation, right now working just with OpenShift Console to return the list of filtered Namespaces per Tenant Owner across several Tenant resources (with websocket support).