v0.3.0

[gardener/gardener-discovery-server]

🏃 Others

• [USER] The "includeSubDomains" directive is added to the HSTS header. by @dimityrmirchev [#68]
• [OPERATOR] The following dependencies have been updated:
  • github.com/gardener/gardener v1.105.0 -> v1.106.0
  • k8s.io/api v0.29.8 -> v0.31.1
  • k8s.io/apimachinery v0.29.9 -> v0.31.1
  • k8s.io/client-go v0.29.9 -> v0.31.1
  • k8s.io/code-generator v0.29.9 -> v0.31.1
  • k8s.io/component-base v0.29.9 -> v0.31.1
  • sigs.k8s.io/controller-runtime v0.17.6 -> v0.19.0 by @vpnachev [#70]
• [DEVELOPER] gosec is made available for SAST(static application security testing), it can be run with make sast or make sast-report, but is also incorporated in the verify and verify-extended makefile targets. by @vpnachev [#70]

Docker Images

• gardener-discovery-server: europe-docker.pkg.dev/gardener-project/releases/gardener/gardener-discovery-server:v0.3.0

v0.2.0

[gardener/gardener-discovery-server]

✨ New Features

• [OPERATOR] Gardener discovery server now can serve the OIDC discovery documents of the Gardener Workload Identity.
  • The openid configuration and jwks content is configured via the flags --workload-identity-openid-configuration-file and --workload-identity-jwks-file respectively, the documents are served on the paths /garden/workload-identity/issuer/.well-known/openid-configuration and /garden/workload-identity/issuer/jwks.
  • The feature is disabled when none of the flags is set. by @vpnachev [#60]
• [USER] The "/.well-known/openid-configuration" and "jwks" endpoints of the discovery server now set the "Strict-Transport-Security" header. by @dimityrmirchev [#30]

Docker Images

• gardener-discovery-server: europe-docker.pkg.dev/gardener-project/releases/gardener/gardener-discovery-server:v0.2.0

v0.1.0

no release notes available

Docker Images

• gardener-discovery-server: europe-docker.pkg.dev/gardener-project/releases/gardener/gardener-discovery-server:v0.1.0