- No documented changes.
- Make render_services exit non-zero on materialization failures by @mwarkentin in #232
- (debug) Pass namespace to kubectl command by @Dav1dde in #230
- Adds more custom types to be excluded in run-job. by @ellisonmarks in #231
- rm(ext): Remove unused macro by @dmajere in #229
- Don't enforce stage match for non-CI work by @rgibert in #228
- (dd) Don't report events for non-prod regions by @rgibert in #227
- (iap) Handle non-gke clusters better by @rgibert in #226
- Create the first revision of the secret if one doesn't exist yet by @BojanOro in #225
- Add resource requests/limits to init-geoip container by @mwarkentin in #221
- (apply) Add only-canary flag for apply by @dmajere in #219
- Add resource requests/limits to init-sysctl containers by @mwarkentin in #220
- Add service-level server-side apply flags by @mwarkentin in #217
- (diff) Handle kubectl diff exit code 1 correctly by @mwarkentin in #218
- Add EnvoyNativeSidecar extension for Kubernetes native sidecar support by @mwarkentin in #215
- Add ExternalMacro usage guide to libsentrykube README by @mwarkentin in #216
- (iap) Auto-create kubeconfig when missing by @rgibert in #212
- (k8s) Improve server-side apply support in sentry-kube apply/diff by @BojanOro in #210
- Add
get-clusterscommand to list clusters by region by @mwarkentin in #213
- Add
--dns-endpointparam to the auth suggestion message by @oioki in #211
- Update workspace_root() to support git worktrees by @rgibert in #209
- updated methods to surface errors messages to make issues more useful by @ghengiskhanh in #204
- (validate) Add --include-region by @rgibert in #205
- Add support for cli_config to set stage by @rgibert in #206
- (release) Fix changelog-preview permissions by @BYK in #199
- Better handling of missing clusters by @rgibert in #202
- Remove OAuth credentials option from IAP macro by @BojanOro in #190
- Removes deprecated pkg_resources, replacing with builtin importlib. by @ellisonmarks in #201
- Break YAML anchor shared references when loading service values by @shashjar in #200
--no-bg-swapoption breaking blue-green flag in values by @gi0baro in #198
- (release) Switch from action-prepare-release to Craft by @BYK in #191
- Use
pull_request_targetfor changelog preview by @BYK in #196
- Add --update-existing flag to secrets command by @oioki in #194
- Introduce sentry-kube external rendering macro by @fpacifici in #192
- (helm) Add hooks and blue-green swap options, add delete cmd by @gi0baro in #189
- Return list_resources label selector by @dmajere in #185
- Move audit kube functions to libsentrykube by @dmajere in #184
- (cli) Minor code movement around sentry_kube/cli by @dmajere in #183
- (diff) Some attempt to refactor diff command code. by @dmajere in #186
- Update IAP service macro to remove useless loadbalancer by @BojanOro in #188
- (chore): remove customer_name comparison for pod template selection by @mwarkentin in #182
- change(audit): Redesign audit tool in sentry-kube by @dmajere in #177
- fix(include_raw): add YAML file separator to end of included template by @bmckerry in #181
- fix(apply): If soak-only is specified canary_applied never gets set by @rgibert in #180
- fix(apply): Fix canary applies exit early by @rgibert in #179
- Adds PodDisruptionBudget to audit. (#176) by @ellisonmarks
- Adds sidecar init container for pgbouncer (#174) by @ellisonmarks
- Multi-thread the k8s materialization step (#173) by @BojanOro
- feat(helm): add rollback cmd wrappers (#172) by @gi0baro
- release: 1.17.4 (c76ae275) by @getsentry-bot
- No documented changes.
- fix: Add namespace to yaml sorting (#170) by @rgibert
- fix: add sorting logic to fix over-materialization (#169) by @rgibert
- feat: add include_raw jinja global (#168) by @bmckerry
- feat: break out rendered files per resource for better diffs (#101) by @rgibert
- Prevents --context from falling after the "--". (#167) by @ellisonmarks
- (fix): add context after cmd (#166) by @mwarkentin
- Fixes run-pod default deployment for SaaS. (#165) by @ellisonmarks
- feat(debug): Add commandline flag to start debug container priviledged (#164) by @Dav1dde
- chore: Update default ST deployment (#163) by @rgibert
- chore(helm): return proper exit codes on apply (#162) by @gi0baro
- this fixes drift detection with the help of claude code (#161) by @kneeyo1
- fix(detect-drift): Don't exit when running diff from detect-drift (#160) by @rgibert
- Adds daemonset, ClusterRole and ClusterRoleBinding to the audit script. (#159) by @ellisonmarks
- fix(diff): Allow drift detection to force diff to exit 0 (#158) by @rgibert
- fix: merge arguments passed in Helm functions (#157) by @gi0baro
- merge config for helm contexts (#156) by @keeakita
- Fixes audit to account for ST getsentry service name. (#155) by @ellisonmarks
- chore: diff should exit non-zero when a diff is present (#150) by @rgibert
- No documented changes.
- remove debug log (#153) by @keeakita
- values_for -> values_of (#153) by @keeakita
- fix loading values with external=True (#153) by @keeakita
- (fix): add $DEPLOYMENT_IMAGE parsing to statefulset image extension (#152) by @mwarkentin
- chore: remove insecure macros or their insecure variants (#149) by @oioki
- Adds Role, Rolebinding and ScaledObject to audit. (#151) by @ellisonmarks
- unit tests (#145) by @keeakita
- plumb merge config through (#145) by @keeakita
- helper method, classdoc (#145) by @keeakita
- add merge config scaffolding (#145) by @keeakita
- fix: set security_hardened=True by default (#148) by @oioki
- fix(debug): Filter duplicated mount paths (#147) by @Dav1dde
- feat: add helm namespace filter (#146) by @gi0baro
- fix: Pass back region_name when using alias so lookups always work (#143) by @rgibert
- fix: helm
get_remote_app_version(#144) by @gi0baro
- PRODENG-227: handle unknown services (#141) by @mwarkentin
- feat(sentry-kube): add
debugsubcommand (#137) by @oioki
- PRODENG-227: add sentry-kube get-image cmd (#140) by @mwarkentin
- feat: Allow setting an override image SHA from the CLI for applies (#139) by @rgibert
- fix(kafkactl): add missing no_security_context=False (#138) by @oioki
- feat: add helm release strategies (#125) by @gi0baro
- feat(run-pod): add
--no-security-contextoption (#136) by @oioki
- fix(drift): Format code to linear markdown formatting (#135) by @nikhars
- feat: add
md5jinja filter (#134) by @oioki
- PRODENG-159: add service-level feature flag for simplified jinja whitespace handling (#131) by @mwarkentin
- feat(k8s): security hardening of geoip and pgbouncer sidecar (#133) by @oioki
- chore(pgbouncer): use auth unconditionally (#132) by @oioki
- add support for multi-level dicts to getval (#129) by @mwarkentin
- fix(config): Aliases aren't used every where (#128) by @rgibert
- (test): fix test_lint failures (#130) by @mwarkentin
- feat: Support skipping validating regions (#127) by @rgibert
- feat: support region aliases (#124) by @rgibert
- fixed mypy issue (#122) by @ghengiskhanh
- fixed method return call for precommit hook (#122) by @ghengiskhanh
- [pre-commit.ci] auto fixes from pre-commit.com hooks (#122) by @ghengiskhanh
- [pre-commit.ci] auto fixes from pre-commit.com hooks (#122) by @ghengiskhanh
- [pre-commit.ci] auto fixes from pre-commit.com hooks (#122) by @ghengiskhanh
- fixed mypy issues (#122) by @ghengiskhanh
- [pre-commit.ci] auto fixes from pre-commit.com hooks (#122) by @ghengiskhanh
- Customer is now added to the issue; updated globals (#122) by @ghengiskhanh
- added Linear integraiton for Drift tickets and swapped it in instead of jira (#122) by @ghengiskhanh
- [pre-commit.ci] pre-commit autoupdate (#116) by @pre-commit-ci
- improve error messages on missing jinja include (#121) by @keeakita
- feat(secrets): add
--copy-entrymode (#119) by @oioki - feat: universal secrets (#120) by @oioki
- fix: helm with OCI repos (#118) by @gi0baro
- No documented changes.
- chore(docs): Add note about determining new versions (#117) by @rgibert
- [pre-commit.ci] auto fixes from pre-commit.com hooks (#114) by @victoria-yining-huang
- add combine default values files (#114) by @victoria-yining-huang
- sentry-kube pg: support optional namespace via / (#110) by @oioki
- [pre-commit.ci] pre-commit autoupdate (#113) by @pre-commit-ci
- [pre-commit.ci] pre-commit autoupdate (#94) by @pre-commit-ci
- Revert "chore: Add config defaults" (#111) by @rgibert
- cleanup: remove unused commands (#108) by @bmckerry
- chore: Add config defaults (#65) by @rgibert
- chore: Add support for us region to replace saas (#60) by @rgibert
- feat(kubectl): remove old private DNS connection to clusters (#109) by @bmckerry
- fix(readme): update install info (#107) by @bmckerry
- Minor helm enhancements (#106) by @gi0baro
- feat(helm): add reversemap support (#105) by @gi0baro
- Merge pull request #104 from getsentry/gi0baro/helm (#104) by @gi0baro
- fix: Support .yaml.j2 extensions for templates (#102) by @rgibert
- ref: use set instead of [] for get_regions (#98) by @rgibert
- feat: Support get-regions filtering by service (#97) by @rgibert
- change: Add get-var macro (#95) by @dmajere
- Fix audit script listing CRDs. (#92) by @ellisonmarks
- [pre-commit.ci] pre-commit autoupdate (#89) by @pre-commit-ci
- chore(render_services): Add debug flag for investigating issues (#90) by @rgibert
- clean up ops assistant message (#88) by @mwarkentin
- change: Make docker container buildable (#87) by @dmajere
- [pre-commit.ci] pre-commit autoupdate (#85) by @pre-commit-ci
- Add release instructions (#84) by @mwarkentin
- Increase default kube api timeout (#83) by @mwarkentin
- feat(render-services): Add an option to render services fast (#82) by @Dav1dde
- Updates deprecated upload artifact workflow. (#81) by @ellisonmarks
- change: allow kube api calls timeout overrides in ext.py (#80) by @dmajere
- feat(iptables): use latest tag from Artifact Registry (#79) by @oioki
- chore: cleanup
vaultsubcommand (#78) by @oioki
- fix(kube): Ignore empty override files (#76) by @Dav1dde
- chore: Remove unused EB test code (#75) by @rgibert
- chore: Remove ephemeral bastion code (#67) by @rgibert
- Removes the region and zone parameters from the ssh command. (#74) by @ellisonmarks
- detect dns endpoint and skip port forwarding (#72) by @mwarkentin
- INC-984: allow diff/apply to spawn jobs (#70) by @bmckerry
- fix(libsentrykube): prevent accidental mapping of group dir name (#68) by @Litarnus
- feat: Allow additional locals to md5template (#69) by @untitaker
- fix(libsentrykube): apply name conversion in the entire config tree (#66) by @Litarnus
- feat(sentrykube): introduce additional possibilities to override config (#63) by @Litarnus
- chore: Print cluster when using apply/run_job (#64) by @rgibert
- feat(pg): create k8s secrets if they do not exist (#39) by @oioki
- fix: --quiet should mute DD echos (#48) by @rgibert
- Move out the callback (#58) by @brian-lou
- chore(service-registry): Add python package import solution (#56) by @brian-lou
- Use own jsonpatch implementation (#55) by @brian-lou
- Add the gcloud CLI to the devenev setup (#57) by @fpacifici
- Wire up patches into sentry-kube quickpatch (#52) by @fpacifici
- [pre-commit.ci] pre-commit autoupdate (#54) by @pre-commit-ci
- feat(git): Allow git operations (#50) by @nikhars
- feat(quickpatch): Add apply patch module (#46) by @brian-lou
- Introduce an added override file to be managed by tools (#49) by @fpacifici
- Add quickpatch tool scaffolding (#45) by @fpacifici
- Update min Python version and sentry-jsonnet dependency version (#44) by @brian-lou
- [pre-commit.ci] pre-commit autoupdate (#43) by @pre-commit-ci
- chore(formatting): Fix formatting of all code (#42) by @nikhars
- feat: Initial support for alternative kubectls (#40) by @rgibert
- fix(service-registry): Use the correct path to find JSON file (#41) by @nikhars
- fix: add missing init.py for kubectl (#38) by @bmckerry
- fix(service_registry): Dynamic detection of path (#33) by @nikhars
- feat(devenv): Use devenv for setup (#36) by @nikhars
- chore(readme): sentry-infra-tools in editable mode (#34) by @nikhars
- fix(diff): Expose important-diffs-only (#37) by @nikhars
- Sync till 134da6c507d2ee342575762cb3e47cc25b898767 (#35) by @nikhars
- chore(sync): Sync changes till a864cafd6a4771434bab51c79b7773877c8342d7 (#32) by @nikhars
- chore(sync): Sync with changes till sha b65df3da50166daec95facef9ca44d8ebfed525 (#31) by @nikhars
- Install all dependencies (#30) by @nikhars
- Fix the dependencies (#30) by @nikhars
- fix (#30) by @nikhars
- ignore dist directory (#30) by @nikhars
- fix the dependencies (#30) by @nikhars
- Sync upto sha 493ddf7e9b5ed3a5e5ee8233ea3fd330c3bb3c7 (#27) by @nikhars
- Remove sentry kafka schemas dependency (#29) by @nikhars
- Remove it from setup.py (#29) by @nikhars
- Remove generate topic data (#29) by @nikhars
- WIP (#30) by @nikhars
- chore(sync): Sync with changes on ops repo (#27) by @nikhars
- fix(materialize): Take root directory as argument (#26) by @nikhars
- Add typing to packages (#25) by @nikhars
- Bring back requirements.in files (#23) by @nikhars
- Revert "Remove .in files with dependencies" (#23) by @nikhars
- Fix make target (#24) by @nikhars
- Fix make command (#24) by @nikhars
- Use make command in GHA (#24) by @nikhars
- Add sentry pypi for dev requirements (#23) by @nikhars
- Remove pyright (#23) by @nikhars
- Revert "Does removing pyright still work" (#24) by @nikhars
- Does removing pyright still work (#24) by @nikhars
- Remove mypy from k8s folder (#24) by @nikhars
- More fixes to GHA (#24) by @nikhars
- Fix makefile target (#24) by @nikhars
- fix(mypy): Add mypy github action (#24) by @nikhars
- Add requirements file to make target (#23) by @nikhars
- Remove comments from requirements file (#23) by @nikhars
- Remove .in files with dependencies (#23) by @nikhars
- Add build to gitignore (#22) by @nikhars
- Remove build directory (#22) by @nikhars
- chore(requirements): Add sentry pypi index url (#23) by @nikhars
- chore(requirements): Fix dependencies based on sentry pypi (#21) by @nikhars
- chore(review): Add CODEOWNERS (#20) by @nikhars
- fix(python): Reduce minimum python version required to 3.10 (#19) by @nikhars
- fix(keys): Remove default datadog key (#18) by @nikhars
- release: 0.0.2 (#17) by @nikhars
- fix(craft): Remove unnecessary fields (#16) by @nikhars
- fix(release): Add changelog file for release process to work (#14) by @nikhars
- fix(craft): Remove unnecessary fields (#16) by @nikhars
- fix(release): Add changelog file for release process to work (#14) by @nikhars
- Merge pull request #13 from getsentry/nikhars/feat/bump-version-script (81dc0b1)
- Merge pull request #12 from getsentry/nikhars/feat/craft-add-statusprovider (37efab4)
- feat(release): Add bump version script to automate version updates (44444e7)
- fix(craft): Add more metadata to check if release is successful (a998e1a)
- Merge pull request #11 from getsentry/nikhars/feat/add-craft (cbc9ab0)
- feat(craft): Add craft for releasing the package (30db5e9)
- Merge pull request #10 from getsentry/nikhars/feat/build-and-release (1d5f684)
- feat(release): Build and release (acede8d)
- Merge pull request #9 from getsentry/nikhars/feat/make-package (bfe27ff)
- add libsentrykube macros (dde0712)
- Move libsenrtrykube one level up (fa05072)
- partial fix to setup.py (acd66ec)
- Merge pull request #8 from getsentry/nikhars/feat/sentry-kube-ci.yaml (4c3891e)
- Merge branch 'main' into nikhars/feat/sentry-kube-ci.yaml (029654e)
- Fix command (96d3592)
- feat(gh): Add gha to run tests (8e409cc)
- Merge pull request #7 from getsentry/nikhars/feat/default-config (4699ec8)
- feat(tests): Make all existing tests pass (869feb7)
- Merge pull request #6 from getsentry/nikhars/feat/sync-with-c292a414d8ca1cb5c3137b36c54fc03f9ab8b105 (ebeaab9)
- chore: Apply diff between sha 1122b46cc4566cd755d1475511807e9334fd04f9 and c292a414d8ca1cb5c3137b36c54fc03f9ab8b105 (7051f7d)
- Merge pull request #4 from getsentry/nikhars/feat/venv-setup (a9cfe7b)
- Fix pre commit hook (f16256d)
- Merge pull request #3 from getsentry/nikhars/feat/pin-python-version (7b6c530)
- Pin python version to 3.11.9 (09767fe)
- Merge pull request #2 from getsentry/nikhars/feat/secret-scanner-delete (ab24934)
- Remove local secret scanning (41fa35b)
- Merge pull request #1 from getsentry/nikhars/feat/secret-scanner (41459de)
- Add secret scanning (7b94c49)
- Initial commit (4d789b0)