v0.1.7

What's Changed

• go.mod: bump golang.org/x/net to v0.33.0 by @stevekuznetsov in #87
• api: add printer columns for v1beta2 API by @stevekuznetsov in #85

Full Changelog: v0.1.6...v0.1.7

v0.1.6

What's Changed

• api/v1beta2: allow targetting custom identities by @stevekuznetsov in #83

Full Changelog: v0.1.5...v0.1.6

v0.1.5

What's Changed

• .github/trivy: configure secondary DB image by @stevekuznetsov in #74
• pkg/authorizer: use SDK for token retrieval, exchange by @stevekuznetsov in #75
• v1beta2 api for federated workload identity by @stevekuznetsov in #76
• build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group by @dependabot in #78
• go.mod: bump golang.org/x/crypto to 0.31.0 by @stevekuznetsov in #82
• *: use a Helm chart instead of kustomize by @stevekuznetsov in #80

New Contributors

• @dependabot made their first contribution in #78

Full Changelog: v0.1.4...v0.1.5

v0.1.4

What's Changed

• pkg/authorizer: use contexts for network requests by @stevekuznetsov in #63
• *: address linting failures by @stevekuznetsov in #64
• Makefile: use bingo for remaining deps by @stevekuznetsov in #65
• controller: short-circuit after updating finalizer by @stevekuznetsov in #67
• controller: fix bug in filtering by @stevekuznetsov in #66
• Update spec to be compliant with NSA K8s hardening guide by @tanayk2610 in #70
• controller: ensure pull secret names are valid by @stevekuznetsov in #71
• test: add a test on upgrade by @stevekuznetsov in #73

New Contributors

• @tanayk2610 made their first contribution in #70

Full Changelog: v0.1.3...v0.1.4

v0.1.3

What's Changed

• chore(deps): update x/net by @matucker-msft in #60
• ci: add dependabot daily run by @matucker-msft in #61
• ci: enable manual trigger for image scan by @aaqib-m in #62

New Contributors

• @matucker-msft made their first contribution in #60

Full Changelog: v0.1.2...v0.1.3

v0.1.2

What's Changed

• build: update to go1.22 by @aaqib-m in #58
• chore: update dependencies to resolve cves by @aaqib-m in #59

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• feat: client side rate limiting with IMDS by @aaqib-m in #55
• chore: update dependencies to resolve cves by @aaqib-m in #57

Full Changelog: v0.1.0...v0.1.1

v0.1.0

What's Changed

• fix verbose error when acrpullbinding not found by @weng271190436 in #34
• Add cache to Go build workflow by @yangl900 in #32
• Enable controller HA by default by @yangl900 in #33
• Add Makefile target to build deploy artifacts by @yangl900 in #31
• Adds the possibility to set default values on the controller by @serbrech in #35
• Custom ARM resource for sovereign clouds by @weng271190436 in #37
• If ResourceId has a duplicate slash it will fail to pull a Token from IMDS by @imiller31 in #40
• Updated project to address CVEs, update dependencies, and improve compatability by @aaqib-m in #47
• build: update ci/cd workflows by @aaqib-m in #50

New Contributors

• @serbrech made their first contribution in #35
• @imiller31 made their first contribution in #40
• @aaqib-m made their first contribution in #47

Full Changelog: v0.1.0-alpha...v0.1.0

v0.1.0-alpha

✨ Enhancements:

• Create a Kubernetes docker secret using MSI given ManagedIdentityClientID/ManagedIdentityResourceID and AcrServer from the AcrPullBinding CRD.
• Associate the created secret with the default ServiceAccount by default.
• Associate the created secret with a specific ServiceAccount if user specifies it.

The image for this release is mcr.microsoft.com/aks/msi-acrpull:v0.1.0-alpha.