v1.17.0-rc4

• test: add policy deletion -> webhook deletion tests (#892)
• refactor: remove watches used only by integration tests (#891)
• refactor: split Policy interface and create PolicyGroup interface (#886)
• Remove nightly e2e job from controller repo (#884)
• Add govulncheck workflow (#881)

🚀 Features

• feat: validate policy group members names. (#880)
• fix: policy group members as map (#878)
• feat: validate PolicyGroup expressions (#870)
• Revert "feat: add feature flag for policy groups." (#873)
• fix: generate certificates with the same settings as helm helper functions (#866)
• feat: certificate rotation (#829)
• feat: policy group (#837)

🐛 Bug Fixes

• fix: add group annotation to WebhookConfiguration and filter watch requests (#893)
• fix: policy group plural name (#890)
• fix(deps): update k8s.io/utils digest to 49e7df5 (#888)
• fix(deps): update all non-major dependencies (#889)
• fix: use a different name for ClusterAdmissionpolicyGroup unique name (#885)
• fix: cluster admission policy and policygroup namspaceSelector getter (#883)
• fix(deps): update all non-major dependencies (#882)
• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• fix: generate certificates with the same settings as helm helper functions (#866)
• fix(Tiltfile): remove overriding helm webhooks with kustomize ones (#867)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

🧰 Maintenance

• fix(deps): update k8s.io/utils digest to 49e7df5 (#888)
• fix(deps): update all non-major dependencies (#889)
• fix(deps): update all non-major dependencies (#882)
• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• chore(deps): update all non-major dependencies (#875)
• fix: generate certificates with the same settings as helm helper functions (#866)
• chore: disable cert-manager from scaffolded kustomize config (#868)
• chore(deps): update all non-major dependencies (#865)
• chore(deps): update all non-major dependencies (#849)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

v1.17.0-rc3

• refactor: split Policy interface and create PolicyGroup interface (#886)
• Remove nightly e2e job from controller repo (#884)
• Add govulncheck workflow (#881)

🚀 Features

• feat: validate policy group members names. (#880)
• fix: policy group members as map (#878)
• feat: validate PolicyGroup expressions (#870)
• Revert "feat: add feature flag for policy groups." (#873)
• fix: generate certificates with the same settings as helm helper functions (#866)
• feat: certificate rotation (#829)
• feat: policy group (#837)

🐛 Bug Fixes

• fix: use a different name for ClusterAdmissionpolicyGroup unique name (#885)
• fix: cluster admission policy and policygroup namspaceSelector getter (#883)
• fix(deps): update all non-major dependencies (#882)
• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• fix: generate certificates with the same settings as helm helper functions (#866)
• fix(Tiltfile): remove overriding helm webhooks with kustomize ones (#867)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

🧰 Maintenance

• fix(deps): update all non-major dependencies (#882)
• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• chore(deps): update all non-major dependencies (#875)
• fix: generate certificates with the same settings as helm helper functions (#866)
• chore: disable cert-manager from scaffolded kustomize config (#868)
• chore(deps): update all non-major dependencies (#865)
• chore(deps): update all non-major dependencies (#849)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

v1.17.0-rc2

🚀 Features

• fix: policy group members as map (#878)
• feat: validate PolicyGroup expressions (#870)
• Revert "feat: add feature flag for policy groups." (#873)
• fix: generate certificates with the same settings as helm helper functions (#866)
• feat: certificate rotation (#829)
• feat: policy group (#837)

🐛 Bug Fixes

• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• fix: generate certificates with the same settings as helm helper functions (#866)
• fix(Tiltfile): remove overriding helm webhooks with kustomize ones (#867)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

🧰 Maintenance

• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• chore(deps): update all non-major dependencies (#875)
• fix: generate certificates with the same settings as helm helper functions (#866)
• chore: disable cert-manager from scaffolded kustomize config (#868)
• chore(deps): update all non-major dependencies (#865)
• chore(deps): update all non-major dependencies (#849)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

v1.17.0-rc1

🚀 Features

• Revert "feat: add feature flag for policy groups." (#873)
• fix: generate certificates with the same settings as helm helper functions (#866)
• feat: certificate rotation (#829)
• feat: policy group (#837)

🐛 Bug Fixes

• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• fix: generate certificates with the same settings as helm helper functions (#866)
• fix(Tiltfile): remove overriding helm webhooks with kustomize ones (#867)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

🧰 Maintenance

• fix(deps): update k8s.io/utils digest to 702e33f (#874)
• chore(deps): update all non-major dependencies (#875)
• fix: generate certificates with the same settings as helm helper functions (#866)
• chore: disable cert-manager from scaffolded kustomize config (#868)
• chore(deps): update all non-major dependencies (#865)
• chore(deps): update all non-major dependencies (#849)
• fix(deps): update k8s.io/utils digest to f90d014 (#852)

v1.16.0

• ci: Run golangcilint for go-version 1.22 (#850)
• ci: Drop unneeded permissions for sign-image workflow (#845)
• ci: Drop unneeded permissions for container-image workflow (#844)
• ci: Fix container-build workflow, no need to set permissions (#843)
• docs: Add CLOMonitor links (#841)

🐛 Bug Fixes

• fix(deps): update module sigs.k8s.io/controller-runtime to v0.18.5 (#847)

🧰 Maintenance

• chore: Rename SECURITY-INSIGHTS.yml for CLOMonitor (#848)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.18.5 (#847)
• build(deps): Bump github.com/docker/docker from 27.1.0+incompatible to 27.1.1+incompatible (#846)
• chore(deps): update all non-major dependencies (#840)
• chore(deps): update all non-major dependencies (#836)

v1.16.0-rc2

• ci: Run golangcilint for go-version 1.22 (#850)
• ci: Drop unneeded permissions for sign-image workflow (#845)
• ci: Drop unneeded permissions for container-image workflow (#844)
• ci: Fix container-build workflow, no need to set permissions (#843)
• docs: Add CLOMonitor links (#841)

🐛 Bug Fixes

• fix(deps): update module sigs.k8s.io/controller-runtime to v0.18.5 (#847)

🧰 Maintenance

• chore: Rename SECURITY-INSIGHTS.yml for CLOMonitor (#848)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.18.5 (#847)
• build(deps): Bump github.com/docker/docker from 27.1.0+incompatible to 27.1.1+incompatible (#846)
• chore(deps): update all non-major dependencies (#840)
• chore(deps): update all non-major dependencies (#836)

v1.16.0-rc1

• ci: Drop unneeded permissions for sign-image workflow (#845)
• ci: Drop unneeded permissions for container-image workflow (#844)
• ci: Fix container-build workflow, no need to set permissions (#843)
• docs: Add CLOMonitor links (#841)

🧰 Maintenance

• chore(deps): update all non-major dependencies (#840)
• chore(deps): update all non-major dependencies (#836)

v1.15.1

🧰 Maintenance

• deps: Bump google.golang.org/grpc to > v1.64.1 (#835)
• build(deps): Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.0+incompatible (#834)

v1.15.0

• docs: Fix wording, add docs/crds/CODEOWNERS (#826)
• refactor: policy common reconciliation logic in a subreconciler (#796)
• test: split envtest/real cluster tests (#788)
• refactor: certificates generation package and secrets (#777)

🚀 Features

• feat: verify MatchConditons, return aggregate errors on validation (#823)
• feat: Add new spec.matchConditions to (Cluster)AdmissionPolicies (#814)
• feat: use stricter go linter configuration. (#807)
• feat: policy server deployment tolerations. (#793)

🐛 Bug Fixes

• fix: add generate-crds target. (#825)
• fix: tilt hot reloading (#816)
• fix: remove default policy server name CLI flag. (#812)
• fix(deps): update k8s.io/utils digest to 18e509b (#810)
• fix: rename some consts and functions. (#795)

🧰 Maintenance

• chore(deps): update all non-major dependencies (#830)
• chore: Refresh CRD-docs-for-docs-repo.md (#827)
• chore(deps): update all non-major dependencies (#817)
• chore(deps): update actions/setup-go action to v5.0.2 (#811)
• fix(deps): update k8s.io/utils digest to 18e509b (#810)
• build: add ginkgo dep to makefile (#800)
• chore(deps): update all non-major dependencies (#799)
• chore(deps): update all non-major dependencies (#791)
• refactor: policy server reconciler (#785)
• refactor: kubebuilder v3 to v4 (#781)

v1.15.0-rc3

• docs: Fix wording, add docs/crds/CODEOWNERS (#826)
• refactor: policy common reconciliation logic in a subreconciler (#796)
• test: split envtest/real cluster tests (#788)
• refactor: certificates generation package and secrets (#777)

🚀 Features

• feat: verify MatchConditons, return aggregate errors on validation (#823)
• feat: Add new spec.matchConditions to (Cluster)AdmissionPolicies (#814)
• feat: use stricter go linter configuration. (#807)
• feat: policy server deployment tolerations. (#793)

🐛 Bug Fixes

• fix: add generate-crds target. (#825)
• fix: tilt hot reloading (#816)
• fix: remove default policy server name CLI flag. (#812)
• fix(deps): update k8s.io/utils digest to 18e509b (#810)
• fix: rename some consts and functions. (#795)

🧰 Maintenance

• chore(deps): update all non-major dependencies (#830)
• chore: Refresh CRD-docs-for-docs-repo.md (#827)
• chore(deps): update all non-major dependencies (#817)
• chore(deps): update actions/setup-go action to v5.0.2 (#811)
• fix(deps): update k8s.io/utils digest to 18e509b (#810)
• build: add ginkgo dep to makefile (#800)
• chore(deps): update all non-major dependencies (#799)
• chore(deps): update all non-major dependencies (#791)
• refactor: policy server reconciler (#785)
• refactor: kubebuilder v3 to v4 (#781)