|
2 | 2 |
|
3 | 3 | All notable changes to this project are documented in this file.
|
4 | 4 |
|
| 5 | +## 1.2.0 |
| 6 | + |
| 7 | +**Release date:** 2023-12-05 |
| 8 | + |
| 9 | +This minor release comes with API changes, bug fixes and several new features. |
| 10 | + |
| 11 | +### Bucket |
| 12 | + |
| 13 | +A new field, `.spec.prefix`, has been added to the Bucket API, which enables |
| 14 | +server-side filtering of files if the object's `.spec.provider` is set to |
| 15 | +`generic`/`aws`/`gcp`. |
| 16 | + |
| 17 | +### OCIRepository and HelmChart |
| 18 | + |
| 19 | +Two new fields, `.spec.verify.matchOIDCIdentity.issuer` and |
| 20 | +`.spec.verify.matchOIDCIdentity.subject` have been added to the HelmChart and |
| 21 | +OCIRepository APIs. If the image has been keylessly signed via Cosign, these |
| 22 | +fields can be used to verify the OIDC issuer of the Fulcio certificate and the |
| 23 | +OIDC identity's subject respectively. |
| 24 | + |
| 25 | +### HelmRepository |
| 26 | + |
| 27 | +A new boolean field, `.spec.insecure`, has been introduced to the HelmRepository |
| 28 | +API, which allows connecting to a non-TLS HTTP container registry. It is only |
| 29 | +considered if the object's `.spec.type` is set to `oci`. |
| 30 | + |
| 31 | +From this release onwards, HelmRepository objects of type OCI are treated as |
| 32 | +static objects, i.e. they have an empty status. |
| 33 | +Existing objects undergo a one-time automatic migration and new objects |
| 34 | +will be undergo a one-time reconciliation to remove any status fields. |
| 35 | + |
| 36 | +Additionally, the controller now performs a shallow clone if the |
| 37 | +`.spec.ref.name` of the GitRepository object points to a branch or a tag. |
| 38 | + |
| 39 | +Furthermore, a bug has been fixed, where the controller would try to |
| 40 | +authenticate against public OCI registries if the HelmRepository object has a |
| 41 | +reference to a Secret containing a CA certificate. |
| 42 | + |
| 43 | +Lastly, dependencies have been updated to their latest version, including an |
| 44 | +update of Kubernetes to v1.28.4. |
| 45 | + |
| 46 | +Fixes: |
| 47 | +- Address miscellaneous issues throughout code base |
| 48 | + [#1257](https://github.com/fluxcd/source-controller/pull/1257) |
| 49 | +- helmrepo: only configure tls login option when required |
| 50 | + [#1289](https://github.com/fluxcd/source-controller/pull/1289) |
| 51 | +- oci: rename `OCIChartRepository.insecure` to `insecureHTTP` |
| 52 | + [#1299](https://github.com/fluxcd/source-controller/pull/1299) |
| 53 | +- Use bitnami Minio oci chart for e2e |
| 54 | + [#1301](https://github.com/fluxcd/source-controller/pull/1301) |
| 55 | + |
| 56 | +Improvements: |
| 57 | +- build(deps): bump Go dependencies |
| 58 | + [#1260](https://github.com/fluxcd/source-controller/pull/1260) |
| 59 | + [#1261](https://github.com/fluxcd/source-controller/pull/1261) |
| 60 | + [#1269](https://github.com/fluxcd/source-controller/pull/1269) |
| 61 | + [#1291](https://github.com/fluxcd/source-controller/pull/1291) |
| 62 | +- build(deps): bump the ci group dependencies |
| 63 | + [#1265](https://github.com/fluxcd/source-controller/pull/1265) |
| 64 | + [#1266](https://github.com/fluxcd/source-controller/pull/1266) |
| 65 | + [#1272](https://github.com/fluxcd/source-controller/pull/1272) |
| 66 | + [#1277](https://github.com/fluxcd/source-controller/pull/1277) |
| 67 | + [#1281](https://github.com/fluxcd/source-controller/pull/1281) |
| 68 | + [#1285](https://github.com/fluxcd/source-controller/pull/1285) |
| 69 | + [#1296](https://github.com/fluxcd/source-controller/pull/1296) |
| 70 | + [#1303](https://github.com/fluxcd/source-controller/pull/1303) |
| 71 | +- bucket: Add prefix filtering capability |
| 72 | + [#1228](https://github.com/fluxcd/source-controller/pull/1228) |
| 73 | +- Static HelmRepository OCI |
| 74 | + [#1243](https://github.com/fluxcd/source-controller/pull/1243) |
| 75 | +- cosign: allow identity matching for keyless verification |
| 76 | + [#1250](https://github.com/fluxcd/source-controller/pull/1250) |
| 77 | +- Upgrade `go-git` to v5.10.0 |
| 78 | + [#1271](https://github.com/fluxcd/source-controller/pull/1271) |
| 79 | +- storage: change default file permissions |
| 80 | + [#1276](https://github.com/fluxcd/source-controller/pull/1276) |
| 81 | +- Update dependencies to Kubernetes v1.28 |
| 82 | + [#1286](https://github.com/fluxcd/source-controller/pull/1286) |
| 83 | +- Add `.spec.insecure` to `HelmRepository` for `type: oci` |
| 84 | + [#1288](https://github.com/fluxcd/source-controller/pull/1288) |
| 85 | +- Update Git dependencies |
| 86 | + [#1300](https://github.com/fluxcd/source-controller/pull/1300) |
| 87 | +- Update Go dependencies |
| 88 | + [#1304](https://github.com/fluxcd/source-controller/pull/1304) |
| 89 | + |
5 | 90 | ## 1.1.2
|
6 | 91 |
|
7 | 92 | **Release date:** 2023-10-11
|
|
0 commit comments