v0.21.0-rc2

bump core to v0.21.0-rc2 (#501) (#503)

v0.20.0

If you use groups for authorization, please read the upgrade guide first.

What's Changed

• warn when using deprecated/no longer supported fields by @wasaga in #423
• add cookie options by @wasaga in #424
• bump envoy 1.23.2 by @wasaga in #425
• add jwt claim headers option by @wasaga in #426
• put a warning if not using any of the persistent backends by @wasaga in #427

Dependencies

• bump pomerium to v0.20.0 by @wasaga in #434
• Bump sigs.k8s.io/controller-runtime from 0.13.0 to 0.13.1 by @dependabot in #418
• Bump golang from 1.19.2 to 1.19.3 by @dependabot in #420
• Bump github.com/open-policy-agent/opa from 0.45.0 to 0.46.1 by @dependabot in #419
• Bump distroless/base from f6faa54 to 90d0605 by @dependabot in #421
• Bump github.com/spf13/viper from 1.13.0 to 1.14.0 by @dependabot in #422
• generate CRD docs from spec by @wasaga in #428
• Bump golang from 7ffa701 to bf4b15c by @dependabot in #429
• Bump k8s.io/client-go from 0.25.3 to 0.25.4 by @dependabot in #433
• Bump k8s.io/api from 0.25.3 to 0.25.4 by @dependabot in #431
• Bump k8s.io/apiserver from 0.25.3 to 0.25.4 by @dependabot in #432
• Bump golang from bf4b15c to dc76ef0 by @dependabot in #438
• Bump google.golang.org/grpc from 1.50.1 to 1.51.0 by @dependabot in #436
• more fine grained debug logging by @wasaga in #440
• crd /status update check by @wasaga in #439
• pin v0.20.0 image in deployment manifests by @wasaga in #435

Full Changelog: v0.19.0...v0.20.0

v0.19.0

Please see Quck Start

kubectl apply -f https://raw.githubusercontent.com/pomerium/ingress-controller/v0.19.0/deployment.yaml

What's Changed

• fix updating /status/loadBalancer for non-owned Ingress objects by @wasaga in #348
• pomerium/ctrl: use a file manager for certificates to delete orphaned files by @calebdoxsey in #358
• fix expected k8s service account secret type by @wasaga in #361
• Fix endpoint matching if service uses target named ports by @adrianlzt in #400

New Contributors

• @adrianlzt made their first contribution in #400

Deps and Chores

• remove goreleaser, pin docker images by @wasaga in #311
• fix(deps): update module google.golang.org/protobuf to v1.28.1 by @renovate in #312
• chore(deps): update actions/setup-go digest to 1022489 by @renovate in #314
• fix(deps): update module github.com/open-policy-agent/opa to v0.43.0 by @renovate in #315
• chore(deps): update actions/setup-python digest to b55428b by @renovate in #318
• fix(deps): update module github.com/golangci/golangci-lint to v1.47.3 by @renovate in #316
• docker: pin dependencies by @calebdoxsey in #313
• chore(deps): update golang digest to df1bd77 by @renovate in #319
• chore(deps): update node.js to b9fe422 by @renovate in #320
• remove renovate by @calebdoxsey in #327
• add codeowners by @calebdoxsey in #317
• Bump go.uber.org/zap from 1.21.0 to 1.22.0 by @dependabot in #333
• Bump github.com/golangci/golangci-lint from 1.47.3 to 1.48.0 by @dependabot in #332
• Bump distroless/base from dbce382 to 96b69fd by @dependabot in #334
• Bump golang from 1.18 to 1.19.0 by @dependabot in #331
• Bump distroless/base from 96b69fd to 293f4a6 by @dependabot in #343
• Bump pre-commit/action from 4835dd97624f38176d7f9f87fcce089836248ee9 to 3.0.0 by @dependabot in #344
• Bump actions/setup-go from 3 to 3.2.1 by @dependabot in #341
• Bump k8s.io/apiserver from 0.24.3 to 0.24.4 by @dependabot in #339
• Bump golang from d72a294 to 1860373 by @dependabot in #342
• Bump google.golang.org/grpc from 1.48.0 to 1.49.0 by @dependabot in #352
• Bump k8s.io/apiserver from 0.24.4 to 0.25.0 by @dependabot in #350
• Bump actions/setup-go from 3.2.1 to 3.3.0 by @dependabot in #354
• Bump golang from 1860373 to d3f734e by @dependabot in #355
• Bump go.uber.org/zap from 1.22.0 to 1.23.0 by @dependabot in #353
• bump docker image version by @wasaga in #357
• envoy: upgrade to 1.23.1 by @calebdoxsey in #345
• Bump distroless/base from 293f4a6 to 03927ba by @dependabot in #366
• Bump github.com/open-policy-agent/opa from 0.43.0 to 0.44.0 by @dependabot in #364
• Bump golang from 1.19.0 to 1.19.1 by @dependabot in #365
• Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 by @dependabot in #362
• Bump github.com/pomerium/pomerium from 0.19.0 to 0.19.1 by @dependabot in #367
• Bump github.com/spf13/viper from 1.12.0 to 1.13.0 by @dependabot in #363
• bump to v19.0 docker image by @wasaga in #369
• Bump k8s.io/apimachinery from 0.25.0 to 0.25.1 by @dependabot in #372
• Bump distroless/base from 03927ba to cb5523d by @dependabot in #375
• Bump golang from 4c8f4b8 to 2d17ffd by @dependabot in #374
• Bump k8s.io/apiserver from 0.25.0 to 0.25.1 by @dependabot in #370
• Bump k8s.io/api from 0.25.0 to 0.25.1 by @dependabot in #371
• Bump github.com/go-playground/validator/v10 from 10.11.0 to 10.11.1 by @dependabot in #373
• Bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.0 by @wasaga in #376
• Bump distroless/base from cb5523d to b699a89 by @dependabot in #383
• Bump k8s.io/api from 0.25.1 to 0.25.2 by @dependabot in #382
• Bump k8s.io/client-go from 0.25.1 to 0.25.2 by @dependabot in #380
• Bump sigs.k8s.io/controller-tools from 0.9.2 to 0.10.0 by @dependabot in #379
• Bump k8s.io/apiserver from 0.25.1 to 0.25.2 by @dependabot in #378
• Bump actions/setup-python from 4.2.0 to 4.3.0 by @dependabot in #391
• Bump actions/checkout from 3 to 3.1.0 by @dependabot in #390
• Bump golang from 1.19.1 to 1.19.2 by @dependabot in #389
• Bump distroless/base from b699a89 to 07971ab by @dependabot in #388
• Bump github.com/open-policy-agent/opa from 0.44.0 to 0.45.0 by @dependabot in #387
• Bump github.com/gosimple/slug from 1.12.0 to 1.13.1 by @dependabot in #386
• Bump google.golang.org/grpc from 1.49.0 to 1.50.0 by @dependabot in #385
• Bump github.com/golangci/golangci-lint from 1.49.0 to 1.50.0 by @dependabot in #384
• Bump k8s.io/client-go from 0.25.2 to 0.25.3 by @dependabot in #393
• Bump golang from b850621 to 25de7b6 by @dependabot in #398
• Bump google.golang.org/grpc from 1.50.0 to 1.50.1 by @dependabot in #392
• Bump distroless/base from 07971ab to 1024b8c by @dependabot in #397
• Bump k8s.io/apiserver from 0.25.2 to 0.25.3 by @dependabot in #395
• Bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in #408
• Bump github.com/golangci/golangci-lint from 1.50.0 to 1.50.1 by @dependabot in #407
• Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @dependabot in #406
• Bump distroless/base from 1024b8c to f6faa54 by @dependabot in #405
• Bump actions/setup-go from 3.3.0 to 3.3.1 by @dependabot in #403
• fix linter complaints by @wasaga in #409
• upgrade go to 1.19 by @calebdoxsey in #399
• Bump docker/setup-buildx-action from 2.0.0 to 2.2.1 by @dependabot in #415
• Bump actions/setup-go from 3.3.0 to 3.3.1 by @dependabot in #414
• Bump golang from 25de7b6 to 992d5fe by @dependabot in #413
• Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in #411
• Bump docker/setup-qemu-action from 2.0.0 to 2.1.0 by @dependabot in #412

Full Changelog: v0.18.0...v0.19.0

v0.18.0

This release introduces a new way to deploy Pomerium in Kubernetes environments, by packaging Kubernetes controller and Pomerium into a single process and introducing a new Pomerium CRD that allows to configure most Pomerium aspects in a Kubernetes-native way.

Please see Quck Start

kubectl apply -f https://raw.githubusercontent.com/pomerium/ingress-controller/v0.18.0/deployment.yaml

v0.17.3

What's Changed

• fix custom secrets by @wasaga in #208
• add k8s token test, bump to 0-17 tip by @wasaga in #215

Dependencies update

• chore(deps): update docker/setup-qemu-action action to v2 by @renovate in #204
• fix(deps): update module github.com/golangci/golangci-lint to v1.46.0 by @renovate in #207
• bump controller tools by @wasaga in #211
• bump go 1.18 by @wasaga in #216

Full Changelog: v0.17.2...v0.17.3

v0.17.2

Changes

• CI: set explicit token permissions by @travisgroth in #176
• add runtime option to disable TLS cert check by @wasaga in #187
• do not require TLS cert for acme http01 solver by @wasaga in #195
• tcp tunnel support by @wasaga in #196
• Support path-related rewrite annotations by @WojoInc in #183
• support secrets for set request/response headers and k8s access token by @wasaga in #198

Dependencies

• Update module google.golang.org/protobuf to v1.28.0 in #170
• Update actions/cache action to v3 in #169
• Update module sigs.k8s.io/controller-runtime to v0.11.2 in #173
• Update module github.com/open-policy-agent/opa to v0.39.0 in #175
• update module github.com/google/go-cmp to v0.5.8 in #185
• update module github.com/spf13/viper to v1.11.0 in #178
• update kubernetes packages to v0.23.6 in #179
• update module github.com/golangci/golangci-lint to v1.45.2 in #171
• upgrade pomerium 0.17.2 in #191
• update kubernetes packages to v0.24.0 in #194

New Contributors

• @WojoInc made their first contribution in #183

Full Changelog: v0.17.0...v0.17.2

v0.17.0

Changelog

• 13733ff upgrade to pomerium v0.17.0 (#168)
• 2937276 Update module github.com/open-policy-agent/opa to v0.38.1 (#156)
• 2487eca Update module github.com/stretchr/testify to v1.7.1 (#161)
• 86fe38e Update kubernetes packages to v0.23.5 (#165)
• 316d3ec Update module github.com/golangci/golangci-lint to v1.45.0 (#166)
• 8516d17 endpoints with https should have tls server name set automatically (#167)
• 3aae68f fix endpoint matching in case of multiple service ports (#163)
• 50963cb Update module github.com/spf13/cobra to v1.4.0 (#160)
• 993095f Update module google.golang.org/grpc to v1.45.0 (#159)
• 2fe21f1 Update actions/setup-go action to v3 (#153)
• 98353e4 Update actions/checkout action to v3 (#154)
• 2fcb7d0 support cluster-wide default certificate (#151)
• edf9269 do not expect Endpoints for ExternalName Service type (#150)
• 6551417 Update kubernetes packages to v0.23.4 (#148)
• 127d23f Update module github.com/golangci/golangci-lint to v1.44.2 (#149)
• 07ccc9e Update module github.com/go-logr/zapr to v1.2.3 (#146)
• 6877187 Update module github.com/pomerium/pomerium to v0.16.3 (#141)
• b7f0bd8 Update module sigs.k8s.io/controller-runtime to v0.11.1 (#143)
• b8b8ab8 Update module github.com/golangci/golangci-lint to v1.44.1 (#147)
• 0803f74 config: sort routes (#145)
• 70a4fe5 Update module github.com/open-policy-agent/opa to v0.37.2 (#140)
• 8b0644a Update module go.uber.org/zap to v1.21.0 (#138)
• 69930c4 Fix typo (#137)
• ffc84c4 Update module github.com/open-policy-agent/opa to v0.37.1 (#136)
• 1272c3e Update module github.com/open-policy-agent/opa to v0.37.0 (#134)

v0.16.1

Changelog

• 48ecd9f deployment: enable goreleaser buildx (#127)
• 1b7f9a3 bump core to v0.16.2 (#130)
• f123d8b Update kubernetes packages to v0.23.3 (#129)
• c85bc6a Update module google.golang.org/grpc to v1.44.0 (#128)
• ad16497 Update module github.com/golangci/golangci-lint to v1.44.0 (#126)
• c58fcd5 Update module go.uber.org/zap to v1.20.0 (#115)
• 736ed74 Update module github.com/pomerium/pomerium to v0.16.1 (#125)
• eaff87c Update kubernetes packages to v0.23.2 (#124)
• 8ddc516 Update module github.com/google/go-cmp to v0.5.7 (#123)
• dee4c11 Update module github.com/go-logr/zapr to v1.2.2 (#20)
• 4eb3933 Update kubernetes packages to v0.23.1 (#98)
• 068a5f9 add load balancing configs (#122)
• 7d61ac7 Update module github.com/open-policy-agent/opa to v0.36.1 (#114)
• 4da6110 fix lint complaints (#121)
• b0c84f4 deployment: fix multiarch rolling image (#120)
• 9fae128 bump envoy to 1.20.1 (#118)
• cab8d42 add service_upstream annotation to enable use of service proxy and not endpoints directly (#119)
• ae31c6f Update module sigs.k8s.io/controller-runtime to v0.11.0 (#103)
• 0f3c2df deployment: support multi-arch images for main tag (#116)
• aeb769f Update module github.com/pomerium/pomerium to v0.16.0 (#111)
• 4bb910b Update module github.com/spf13/cobra to v1.3.0 (#105)
• 9b016cd routes: bypass service dns name and use endpoints directly (#112)

v0.16.0

Changelog

• fc9670d bump pomerium core (#110)

v0.15.3

Changelog

• aa97284 more robust yaml/json parsing (#104)
• 1c852b2 Update module github.com/gosimple/slug to v1.12.0 (#102)
• f76df65 Update module github.com/spf13/viper to v1.10.0 (#101)
• e3dc0a9 support regex path (#100)
• a9f7b4f Update module github.com/pomerium/pomerium to v0.15.7 (#92)
• a352523 set ImplementationSpecific path behavior to Prefix (#97)
• 369a6ca Update module github.com/open-policy-agent/opa to v0.35.0 (#93)
• 5f467d8 Update module sigs.k8s.io/controller-runtime to v0.10.3 (#88)
• 3dd5c8f Update module github.com/pomerium/pomerium to v0.15.6 (#73)
• de6b32a Update module github.com/gosimple/slug to v1.11.2 (#87)
• 1696ffa Update module github.com/open-policy-agent/opa to v0.34.2 (#84)
• 1f7cb4d Update module github.com/envoyproxy/go-control-plane to v0.10.1 (#90)
• 77d9355 Update module k8s.io/apiserver to v0.22.3 (#76)

Docker images

• docker pull pomerium/ingress-controller:v0.15.3