v0.4.0-beta.1

Changelog

• 8577cff chore(deps): Bump anchore/sbom-action from 0.20.6 to 0.20.8 (#588)
• db5f0c5 chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.11 to 3.0.12 (#605)
• 81d2cab chore(deps): Bump github/codeql-action from 3.30.6 to 4.30.7 (#577)
• ffc5aa4 chore(deps): Bump github/codeql-action from 4.30.7 to 4.30.8 (#583)
• eafab4e chore(deps): Bump github/codeql-action from 4.30.8 to 4.30.9 (#602)
• 8600d01 chore(deps): Bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#578)
• c42eefa chore(deps): Bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.2 (#573)
• 5af7240 chore(deps): Bump sigs.k8s.io/controller-runtime from 0.22.2 to 0.22.3 (#584)
• 6f86b92 chore(deps): Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#603)
• 3791e5b feat: Remove APOL API (#575)
• be5d29d feat: Remove APOL compiler (#574)
• 61df911 feat: Remove APOL documentation (#576)
• 88efffa feat: Remove e2e tests for AuthorizationPolicy (#572)
• 7d32f12 feat: add cache source (#595)
• f174978 feat: add filter and transform sdk core sources (#594)
• 3610575 feat: add fs source to sdk (#597)
• d777f46 feat: add initial sdk version (#586)
• 7ea7378 feat: add new AuthorizationServer CRD (#585)
• 04849fb feat: add policy extension to sdk (#591)
• 4518b53 feat: add sdk controller-runtime extension (#593)
• 25d5171 feat: add sdk sources (#589)
• 7f88e6d feat: converge the HTTP authorizer with the envoy plugin (#604)
• 98a3d36 feat: pin cosign version (#606)
• 96903ae feat: start using sdk policy extension (#592)
• 1aa7038 feat: use sdk engine (#601)
• 4489bfb feat: use sdk sources (#596)
• 1968ecd feat: use sdk sources (#600)
• 8f57ded refactor: move compiler package (#598)
• 708e106 refactor: move sources package (#599)
• afe7336 refactor: remove allow/deny concept (#580)
• e84770b refactor: remove the need for a policy func (#581)
• 51403ac refactor: start using sdk sources (#590)

v0.3.0

Changelog

• 1d3218e chore(deps): Bump github/codeql-action from 3.30.5 to 3.30.6 (#569)
• 3100da6 chore(deps): Bump google.golang.org/protobuf from 1.36.9 to 1.36.10 (#570)
• be158dd feat: Add json CEL library (#567)
• 349fe87 feat: Add resource CEL lib (#529)

v0.3.0-beta.1

Changelog

• 8023ce0 chore(deps): Bump actions/setup-go from 5.5.0 to 6.0.0 (#496)
• 732e9a4 chore(deps): Bump anchore/sbom-action from 0.20.5 to 0.20.6 (#522)
• d6a9241 chore(deps): Bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 (#478)
• 641b2cd chore(deps): Bump aquasecurity/trivy-action from 0.33.0 to 0.33.1 (#490)
• 7f69c87 chore(deps): Bump codecov/codecov-action from 5.5.0 to 5.5.1 (#495)
• 6857fa1 chore(deps): Bump github.com/envoyproxy/go-control-plane/envoy from 1.32.4 to 1.35.0 (#560)
• e6f4de8 chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.10 to 3.0.11 (#519)
• c189744 chore(deps): Bump github/codeql-action from 3.29.11 to 3.30.0 (#488)
• d1677fe chore(deps): Bump github/codeql-action from 3.30.0 to 3.30.1 (#502)
• 5d4083e chore(deps): Bump github/codeql-action from 3.30.1 to 3.30.2 (#503)
• ca5e6ed chore(deps): Bump github/codeql-action from 3.30.2 to 3.30.3 (#518)
• 6eab007 chore(deps): Bump github/codeql-action from 3.30.3 to 3.30.4 (#551)
• eed4cc6 chore(deps): Bump github/codeql-action from 3.30.4 to 3.30.5 (#556)
• 532dd5f chore(deps): Bump google.golang.org/protobuf from 1.36.8 to 1.36.9 (#505)
• 68f4597 chore(deps): Bump sigs.k8s.io/controller-runtime from 0.22.0 to 0.22.1 (#504)
• 18447bb chore(deps): Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 (#520)
• e3869e4 chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.25 to 4.0.0 (#557)
• 74f4fcc chore: add chainsaw test schemas (#512)
• ea4cbc2 chore: add kube 1.34 to the test matrix (#515)
• 09c2340 chore: bump default kind node to 1.34 (#531)
• 2b5b7e3 chore: bump deps (#510)
• 0f97df4 chore: bump kube deps and others (#489)
• 375597d chore: cleanup old api (#527)
• 7931ae2 chore: run chainsaw tests in separate ns (#513)
• fc568fd chore: use chainsaw step template to install istio policy (#514)
• 8165bcc chore: use chainsaw step templates (#511)
• 840e3e2 chore: use policy step template (#516)
• 67d0037 feat: Add OCI policy provider on authz-server (#549)
• 593c3e7 feat: Add external-policy in server chart + docs (#544)
• f0f6f20 feat: add version command (#532)
• b49029e feat: cache fs providers results (#564)
• 85a434e feat: configure leader election (#533)
• 09b5183 feat: deprecate apol (#525)
• 5fec57b feat: load policies recursively (#562)
• 2238d67 feat: register kyverno CEL data (#494)
• 55239e7 feat: register kyverno CEL libs (#492)
• 73abb58 feat: register kyverno CEL variables (#493)
• 6b63105 feat: register reflection service in the grpc server (#485)
• f58ef2c feat: sort policies in fs provider (#563)
• e8eb15f feat: support loading policies from json (#561)
• 8ca3632 feat: switch to kyverno vpol (#521)
• 07abbca feat: use field selector in watcher (#499)
• 34df197 fix(config): Fix external-policy templating error (#553)
• 970ec72 fix: add apol short name (#500)
• fc27d7f fix: audience decoding (#554)
• 6253a20 fix: certificates warning (#523)
• e95a17a fix: codegen (#487)
• b736810 fix: docs (#566)
• edf3ed3 fix: flaky tests (#517)
• 9b327e8 fix: remove cache usage from validation webhook (#524)
• 7bbd7ab fix: remove uneffective omitempty (#497)
• f7771cf fix: sidecar injector docs (#565)
• 2a469f6 fix: simplify ci (#501)
• 5adfe94 fix: simplify envoy response in cel lib (#486)
• 57d608f fix: use controller-runtime logger (#530)
• 00aad7a refactor: factorize ToSortedSlice (#528)
• c43b3c0 refactor: move cel package up (#491)
• bfa0bee refactor: sidecar injector from configmap (#559)

v0.3.0-alpha.2

Changelog

• 31f0b3d chore(deps): Bump actions/checkout from 4.2.2 to 5.0.0 (#452)
• 4cb04c4 chore(deps): Bump actions/download-artifact from 4.3.0 to 5.0.0 (#448)
• d040c53 chore(deps): Bump amannn/action-semantic-pull-request from 5.5.3 to 6.0.1 (#454)
• 5bf4a2f chore(deps): Bump amannn/action-semantic-pull-request from 6.0.1 to 6.1.0 (#462)
• 724b5d7 chore(deps): Bump amannn/action-semantic-pull-request from 6.1.0 to 6.1.1 (#472)
• b84e545 chore(deps): Bump anchore/sbom-action from 0.20.2 to 0.20.4 (#433)
• 4306ee6 chore(deps): Bump anchore/sbom-action from 0.20.4 to 0.20.5 (#459)
• 26397b3 chore(deps): Bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 (#424)
• 8893da1 chore(deps): Bump azure/setup-helm from 4.3.0 to 4.3.1 (#464)
• 578b029 chore(deps): Bump codecov/codecov-action from 5.4.3 to 5.5.0 (#463)
• 9d38bd3 chore(deps): Bump github.com/google/cel-go from 0.25.0 to 0.26.0 (#426)
• 57e5836 chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.8 to 3.0.9 (#443)
• cc22b91 chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.9 to 3.0.10 (#445)
• f5774f7 chore(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#476)
• e73ebcf chore(deps): Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#477)
• 48887fe chore(deps): Bump github/codeql-action from 3.29.10 to 3.29.11 (#474)
• 7e482bf chore(deps): Bump github/codeql-action from 3.29.2 to 3.29.4 (#434)
• 6eee3a0 chore(deps): Bump github/codeql-action from 3.29.4 to 3.29.5 (#441)
• 9e4e6bb chore(deps): Bump github/codeql-action from 3.29.7 to 3.29.8 (#451)
• 157c73f chore(deps): Bump github/codeql-action from 3.29.8 to 3.29.9 (#453)
• 11b7156 chore(deps): Bump github/codeql-action from 3.29.9 to 3.29.10 (#461)
• 2684cd6 chore(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2 (#436)
• d5661d9 chore(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.0 (#465)
• ea54f34 chore(deps): Bump google.golang.org/protobuf from 1.36.6 to 1.36.7 (#450)
• d5bc525 chore(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.8 (#466)
• 2b52003 chore(deps): Bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 (#460)
• 9c752c4 chore(deps): Bump k8s.io/api from 0.33.2 to 0.33.3 (#430)
• 890b56e chore(deps): Bump k8s.io/apimachinery from 0.33.2 to 0.33.3 (#427)
• 7523002 chore(deps): Bump k8s.io/apiserver from 0.33.2 to 0.33.3 (#429)
• 79ba317 chore(deps): Bump k8s.io/apiserver from 0.33.3 to 0.33.4 (#456)
• bf11843 chore(deps): Bump k8s.io/client-go from 0.33.3 to 0.33.4 (#458)
• 9dfd528 chore(deps): Bump kyverno/action-install-chainsaw from 0.2.12 to 0.2.13 (#473)
• 5e83b81 chore(deps): Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 (#431)
• 7cbd31c chore(deps): Bump svenstaro/upload-release-action from 2.11.1 to 2.11.2 (#425)
• c6d0757 chore: add missing required jobs (#437)
• 183e74a chore: add missing required jobs (#438)
• e076e02 chore: add more vpol tests (#469)
• ed76fc3 chore: add vpol tests (#468)
• 7493cf7 chore: bump a couple of deps (#419)
• c6e63d4 chore: run e2e tests on multiple k8s versions (#439)
• 9237208 feat: Refactor FS YAML policy code to fetch only authorizations (#435)
• 36ccf40 feat: add envoy mode constant (#471)
• 90ca253 feat: add external sources flag (#420)
• c3b70af feat: add fs provider and external providers support (#422)
• 69d3921 feat: add static provider (#418)
• 39e0bab feat: add support for disabling kube policy source (#442)
• bba1062 feat: add validating webhook for vpol (#475)
• af74d75 feat: add vpol api (#444)
• 945fb29 feat: add vpol compiler and provider (#447)
• e161697 feat: decouple compiled policy and allow/deny concept (#446)
• 2319fbc feat: embed crds in the binary (#423)
• 3f6dfa8 feat: mark exec mode as selectable field (#470)
• 2eb67d9 feat: pass external policy sources to sidecar injector (#440)
• 57c384c feat: produce vpol json schemas (#467)
• 1429755 fix: typo in metrics address (#421)

v0.3.0-alpha.1

Changelog

• 3feb929 chore(deps): Bump actions/download-artifact from 4.1.8 to 4.3.0 (#375)
• 565aab4 chore(deps): Bump actions/upload-artifact from 4.5.0 to 4.6.0 (#307)
• 075384d chore(deps): Bump actions/upload-artifact from 4.6.0 to 4.6.2 (#377)
• 82a3022 chore(deps): Bump anchore/sbom-action from 0.17.9 to 0.20.0 (#381)
• 9e8262c chore(deps): Bump anchore/sbom-action from 0.20.0 to 0.20.1 (#396)
• 15bd8b4 chore(deps): Bump anchore/sbom-action from 0.20.1 to 0.20.2 (#416)
• 6906191 chore(deps): Bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 (#378)
• b607e81 chore(deps): Bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 (#384)
• d625317 chore(deps): Bump azure/setup-helm from 4.2.0 to 4.3.0 (#376)
• c7370f2 chore(deps): Bump codecov/codecov-action from 5.1.2 to 5.4.0 (#340)
• cf1b4a0 chore(deps): Bump github.com/envoyproxy/go-control-plane/envoy from 1.32.2 to 1.32.3 (#304)
• aed58d0 chore(deps): Bump github.com/google/cel-go from 0.23.2 to 0.25.0 (#366)
• 3237c3d chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.1 to 3.0.2 (#386)
• 6cde69f chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.2 to 3.0.4 (#393)
• 2b63cee chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.4 to 3.0.5 (#394)
• 130c4f7 chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.5 to 3.0.6 (#397)
• 3bb930e chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.6 to 3.0.7 (#398)
• 844dd84 chore(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.0.7 to 3.0.8 (#407)
• f262a16 chore(deps): Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#363)
• b2ee765 chore(deps): Bump github/codeql-action from 3.28.0 to 3.28.15 (#357)
• a6b903b chore(deps): Bump github/codeql-action from 3.28.15 to 3.28.18 (#371)
• bd821e6 chore(deps): Bump github/codeql-action from 3.28.18 to 3.28.19 (#385)
• 11461c8 chore(deps): Bump github/codeql-action from 3.28.19 to 3.29.0 (#395)
• 1ec4770 chore(deps): Bump github/codeql-action from 3.29.0 to 3.29.2 (#408)
• 7134a5e chore(deps): Bump gomodules.xyz/jsonpatch/v2 from 2.4.0 to 2.5.0 (#365)
• 3a3dd6f chore(deps): Bump google.golang.org/grpc from 1.69.2 to 1.71.1 (#355)
• 8853399 chore(deps): Bump google.golang.org/grpc from 1.72.2 to 1.73.0 (#391)
• 6fbbf63 chore(deps): Bump google.golang.org/protobuf from 1.36.1 to 1.36.2 (#305)
• bab9538 chore(deps): Bump google.golang.org/protobuf from 1.36.2 to 1.36.6 (#352)
• 66fd8b0 chore(deps): Bump goreleaser/goreleaser-action from 6.1.0 to 6.3.0 (#367)
• 4eb6ae6 chore(deps): Bump k8s.io/api from 0.32.0 to 0.32.3 (#346)
• 5319f6b chore(deps): Bump k8s.io/api from 0.33.1 to 0.33.2 (#400)
• 3fdc35e chore(deps): Bump k8s.io/apiserver from 0.32.0 to 0.32.3 (#345)
• c80ac33 chore(deps): Bump k8s.io/apiserver from 0.33.1 to 0.33.2 (#403)
• 1d292ea chore(deps): Bump k8s.io/client-go from 0.32.0 to 0.32.3 (#344)
• f74621a chore(deps): Bump k8s.io/client-go from 0.33.1 to 0.33.2 (#402)
• 2dc3dd7 chore(deps): Bump ko-build/setup-ko from 0.7 to 0.8 (#312)
• 1504c0f chore(deps): Bump ko-build/setup-ko from 0.8 to 0.9 (#380)
• d72bafa chore(deps): Bump sigs.k8s.io/controller-runtime from 0.19.3 to 0.19.4 (#306)
• a3a2846 chore(deps): Bump sigs.k8s.io/controller-runtime from 0.19.4 to 0.21.0 (#364)
• dab91a9 chore(deps): Bump sigstore/cosign-installer from 3.7.0 to 3.8.2 (#370)
• c1abb76 chore(deps): Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#399)
• 5d08baf chore(deps): Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#405)
• bf9775d chore(deps): Bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#369)
• 0364d06 chore(deps): Bump svenstaro/upload-release-action from 2.9.0 to 2.11.1 (#409)
• 799e8bf chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.19 to 3.0.23 (#354)
• 1e8b59c chore: bump linter (#379)
• b09e89c chore: fix nit (#360)
• 0b8f6b1 chore: make kyverno authz service configurable (#389)
• 5c457eb chore: remove makefile shims (#374)
• 9f4a184 feat: add appProtocol to kyverno-auth-server service (#415)
• 8aad96d feat: add jwk lib (#361)
• 0be483f feat: make metrics adress configurable (#390)
• 2b6bc9b feat: support jwt decode with jwks (#383)
• 962607f feature: add crds in sidecar injector chart (#388)
• fb55522 fix: bump setup-go (#373)
• dda8cef fix: sidecar injector (#387)
• 2f83667 fix: update codegen (#359)
• cbe705c refactor: introduce impl for jwt lib (#362)
• 654bd90 refactor: switch jwt lib (#382)
• 8ebe07c refactor: use utils in jwt lib (#372)

v0.2.0

What's Changed

• chore(deps): Bump github/codeql-action from 3.27.1 to 3.27.2 by @dependabot in #222
• chore(deps): Bump github/codeql-action from 3.27.2 to 3.27.3 by @dependabot in #223
• chore(deps): Bump github/codeql-action from 3.27.3 to 3.27.4 by @dependabot in #225
• chore(deps): Bump codecov/codecov-action from 4.6.0 to 5.0.0 by @dependabot in #224
• chore(deps): Bump codecov/codecov-action from 5.0.0 to 5.0.2 by @dependabot in #227
• chore(deps): Bump codecov/codecov-action from 5.0.2 to 5.0.7 by @dependabot in #233
• chore(deps): Bump k8s.io/apimachinery from 0.31.2 to 0.31.3 by @dependabot in #232
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 by @dependabot in #231
• chore(deps): Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @dependabot in #230
• chore(deps): Bump anchore/sbom-action from 0.17.7 to 0.17.8 by @dependabot in #237
• chore(deps): Bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot in #229
• chore(deps): Bump k8s.io/api from 0.31.2 to 0.31.3 by @dependabot in #235
• chore(deps): Bump k8s.io/client-go from 0.31.2 to 0.31.3 by @dependabot in #236
• refactor: move probes server in it's own package by @eddycharly in #238
• feat: add validation webhook by @eddycharly in #239
• chore: fix ci by @eddycharly in #240
• chore(deps): Bump google.golang.org/grpc from 1.67.1 to 1.68.0 by @dependabot in #205
• chore(deps): Bump k8s.io/apiserver from 0.31.2 to 0.31.3 by @dependabot in #243
• chore(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #242
• chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.16 to 3.0.17 by @dependabot in #241
• chore(deps): Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @dependabot in #226
• feat: add match conditions support by @eddycharly in #244
• docs: add envoy gateway tutorial by @eddycharly in #245
• chore(deps): Bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 by @dependabot in #247
• chore(deps): Bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot in #246
• chore(deps): Bump kyverno/action-install-chainsaw from 0.2.11 to 0.2.12 by @dependabot in #252
• chore(deps): Bump google.golang.org/grpc from 1.68.0 to 1.68.1 by @dependabot in #251
• chore(deps): Bump codecov/codecov-action from 5.0.7 to 5.1.1 by @dependabot in #253
• chore(deps): Bump github/codeql-action from 3.27.6 to 3.27.7 by @dependabot in #255
• chore(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 by @dependabot in #261
• chore(deps): Bump k8s.io/client-go from 0.31.3 to 0.31.4 by @dependabot in #257
• chore(deps): Bump k8s.io/apiserver from 0.31.3 to 0.31.4 by @dependabot in #260
• refactor: splitting authorization rule expression into match and response fields by @fjogeleit in #256
• chore(deps): Bump github/codeql-action from 3.27.7 to 3.27.9 by @dependabot in #267
• chore(deps): Bump google.golang.org/grpc from 1.68.1 to 1.69.0 by @dependabot in #266
• chore(deps): Bump k8s.io/client-go from 0.31.4 to 0.32.0 by @dependabot in #265
• chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.17 to 3.0.18 by @dependabot in #271
• chore(deps): Bump helm/kind-action from 1.10.0 to 1.11.0 by @dependabot in #269
• chore(deps): Bump anchore/sbom-action from 0.17.8 to 0.17.9 by @dependabot in #270
• chore(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 by @dependabot in #268
• chore(deps): Bump github.com/google/cel-go from 0.20.1 to 0.22.1 by @dependabot in #234
• feat: sort policies in alphabetical order before executing by @vishal-chdhry in #254
• chore(deps): Bump actions/upload-artifact from 4.4.3 to 4.5.0 by @dependabot in #273
• chore(deps): Bump helm/kind-action from 1.11.0 to 1.12.0 by @dependabot in #280
• chore(deps): Bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot in #279
• chore(deps): Bump github.com/envoyproxy/go-control-plane from 0.13.1 to 0.13.2 by @dependabot in #277
• chore(deps): Bump google.golang.org/protobuf from 1.36.0 to 1.36.1 by @dependabot in #278
• chore(deps): Bump codecov/codecov-action from 5.1.1 to 5.1.2 by @dependabot in #274
• chore(deps): Bump google.golang.org/grpc from 1.69.0 to 1.69.2 by @dependabot in #275
• feat: separate deny and allow rules by @eddycharly in #272
• chore: add istio in e2e tests by @eddycharly in #282
• chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.18 to 3.0.19 by @dependabot in #284
• docs: update docs with new policy format by @eddycharly in #283
• fix: bad link in readme by @eddycharly in #286
• docs: match conditions docs by @eddycharly in #287
• docs: add more infos to match conditions docs by @eddycharly in #288
• chore(deps): Bump k8s.io/apiserver from 0.31.4 to 0.32.0 by @dependabot in #263
• docs: fixes by @eddycharly in #289
• chore: update goreleaser config by @eddycharly in #290
• chore: update roadmap by @eddycharly in #293
• docs: update tutorials docs with cert manager instructions by @eddycharly in #294
• docs: update quick start docs with cert manager instructions by @eddycharly in #295
• docs: add docs for certificates management by @eddycharly in #296
• feat: add chainsaw test for policy ordering in authz server by @vishal-chdhry in #297
• chore: add match conditions with variable chainsaw test by @eddycharly in #301
• chore: add match conditions errors chainsaw test by @eddycharly in #302
• release: v0.2.0 by @eddycharly in #303

New Contributors

• @fjogeleit made their first contribution in #256
• @vishal-chdhry made their first contribution in #254

Full Changelog: v0.1.0...v0.2.0

v0.2.0-beta.1

Changelog

• c65370f chore(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 (#261)
• f4c6489 chore(deps): Bump actions/upload-artifact from 4.4.3 to 4.5.0 (#273)
• 1892bec chore(deps): Bump anchore/sbom-action from 0.17.7 to 0.17.8 (#237)
• 00cea3b chore(deps): Bump anchore/sbom-action from 0.17.8 to 0.17.9 (#270)
• a5e0fec chore(deps): Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 (#230)
• 83dd3a2 chore(deps): Bump codecov/codecov-action from 4.6.0 to 5.0.0 (#224)
• a92b19a chore(deps): Bump codecov/codecov-action from 5.0.0 to 5.0.2 (#227)
• 5eb4b86 chore(deps): Bump codecov/codecov-action from 5.0.2 to 5.0.7 (#233)
• c3317c5 chore(deps): Bump codecov/codecov-action from 5.0.7 to 5.1.1 (#253)
• bc6e263 chore(deps): Bump codecov/codecov-action from 5.1.1 to 5.1.2 (#274)
• 03b0c16 chore(deps): Bump github.com/envoyproxy/go-control-plane from 0.13.1 to 0.13.2 (#277)
• 87d2f3b chore(deps): Bump github.com/google/cel-go from 0.20.1 to 0.22.1 (#234)
• 4a68fb3 chore(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#242)
• ff63809 chore(deps): Bump github/codeql-action from 3.27.1 to 3.27.2 (#222)
• c74fa2d chore(deps): Bump github/codeql-action from 3.27.2 to 3.27.3 (#223)
• 5d57c01 chore(deps): Bump github/codeql-action from 3.27.3 to 3.27.4 (#225)
• e68b803 chore(deps): Bump github/codeql-action from 3.27.4 to 3.27.5 (#229)
• 12237c4 chore(deps): Bump github/codeql-action from 3.27.5 to 3.27.6 (#246)
• 5c48a1a chore(deps): Bump github/codeql-action from 3.27.6 to 3.27.7 (#255)
• d0dfe56 chore(deps): Bump github/codeql-action from 3.27.7 to 3.27.9 (#267)
• 5ccebce chore(deps): Bump github/codeql-action from 3.27.9 to 3.28.0 (#279)
• 0b14c71 chore(deps): Bump google.golang.org/grpc from 1.67.1 to 1.68.0 (#205)
• 6d27454 chore(deps): Bump google.golang.org/grpc from 1.68.0 to 1.68.1 (#251)
• bc06f2f chore(deps): Bump google.golang.org/grpc from 1.68.1 to 1.69.0 (#266)
• 2500b79 chore(deps): Bump google.golang.org/grpc from 1.69.0 to 1.69.2 (#275)
• a672294 chore(deps): Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (#226)
• bfb6f30 chore(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 (#268)
• c792753 chore(deps): Bump google.golang.org/protobuf from 1.36.0 to 1.36.1 (#278)
• db81ddc chore(deps): Bump helm/kind-action from 1.10.0 to 1.11.0 (#269)
• fd15e00 chore(deps): Bump helm/kind-action from 1.11.0 to 1.12.0 (#280)
• 5519f39 chore(deps): Bump k8s.io/api from 0.31.2 to 0.31.3 (#235)
• ee4a58d chore(deps): Bump k8s.io/apimachinery from 0.31.2 to 0.31.3 (#232)
• 328afe1 chore(deps): Bump k8s.io/apiserver from 0.31.2 to 0.31.3 (#243)
• 1d862c6 chore(deps): Bump k8s.io/apiserver from 0.31.3 to 0.31.4 (#260)
• 06b3edc chore(deps): Bump k8s.io/apiserver from 0.31.4 to 0.32.0 (#263)
• 8f0352d chore(deps): Bump k8s.io/client-go from 0.31.2 to 0.31.3 (#236)
• 2d59734 chore(deps): Bump k8s.io/client-go from 0.31.3 to 0.31.4 (#257)
• d3aa784 chore(deps): Bump k8s.io/client-go from 0.31.4 to 0.32.0 (#265)
• f81eada chore(deps): Bump kyverno/action-install-chainsaw from 0.2.11 to 0.2.12 (#252)
• 574e8d5 chore(deps): Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 (#231)
• 2fe68cb chore(deps): Bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 (#247)
• 950a455 chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.16 to 3.0.17 (#241)
• 112e2cc chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.17 to 3.0.18 (#271)
• f98758c chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.18 to 3.0.19 (#284)
• 0abf6ef chore: add istio in e2e tests (#282)
• b57ec05 chore: fix ci (#240)
• 4aa610a feat: add match conditions support (#244)
• b2ff6a3 feat: add validation webhook (#239)
• dc82d97 feat: separate deny and allow rules (#272)
• a8eed56 feat: sort policies in alphabetical order before executing (#254)
• 20ca702 fix: bad link in readme (#286)
• 68105dc refactor: move probes server in it's own package (#238)
• 5eb290a refactor: splitting authorization rule expression into match and response fields (#256)

v0.1.0

Changelog

• f471d5b chore(deps): Bump github/codeql-action from 3.27.0 to 3.27.1 (#217)
• 37f4b77 chore: add code cov config file (#220)
• c29f28f chore: add road map (#218)
• 3fccfd8 chore: add unit tests (#219)
• 550eae9 chore: add unit tests (#221)
• 26bea83 feat: add query param envoy helpers (#213)
• d8ad338 refactor: server commands names (#212)

v0.0.1-alpha.2

Changelog

• 9bc3835 chore(deps): Bump actions/checkout from 4.2.0 to 4.2.2 (#186)
• 124877b chore(deps): Bump actions/setup-go from 5.0.2 to 5.1.0 (#185)
• a4e6dba chore(deps): Bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (#204)
• bf1322d chore: add community to docs (#190)
• dd31f6f chore: add reference docs (#191)
• 7b2c68c chore: bump kind node (#195)
• ea143ad chore: cleanup (#166)
• df55fe1 chore: docs cleanup (#187)
• 9db519b chore: rename hack folder (#183)
• 3003580 feat: add policy controller (#196)
• 3d20b50 feat: generate json schemas (#193)
• d0629a6 feat: remove envoy.Null helper (#207)

v0.0.1-alpha.1

Changelog

• da53d26 Add README.md and some changes in manifests
• 14d1e43 Added deployment and webhook configurations manifests
• 6c5437b Added example manifest
• cb12da4 Added negetive cases
• 699c617 Initial commit
• 8d1bbbb Merge pull request #7 from eddycharly/codeowners
• 72e1902 Resolved error and add ext authz server manifest
• b68dc3a added health address flag and health handler func
• 63f9623 added istio mtls tutorial documentation
• 7214090 added k6 test results
• ca0eaca added namespace manifest
• 6bdba59 added namespace to other resources
• ccfbacd added overview and requirements section
• 0bb5d7a added performance documentation
• 1913313 added resource utilization used kubectl top command
• 2691d22 added test case for jwt_decode(token,secert).payload to return the payload map
• 17dde68 added unit test of jwt_decode as caller jmespath statement
• 9793cad chore(deps): Bump actions/checkout from 4.1.1 to 4.1.2
• 9873122 chore(deps): Bump actions/checkout from 4.1.1 to 4.1.2
• 6160019 chore(deps): Bump actions/checkout from 4.1.1 to 4.1.2
• 17d26d5 chore(deps): Bump actions/checkout from 4.1.2 to 4.1.4
• 9046512 chore(deps): Bump actions/checkout from 4.1.4 to 4.1.7
• afdc74c chore(deps): Bump actions/checkout from 4.1.7 to 4.2.2
• 2638ebb chore(deps): Bump actions/checkout from 4.2.1 to 4.2.2 (#161)
• a420626 chore(deps): Bump actions/setup-go from 5.0.0 to 5.0.2
• 9e01228 chore(deps): Bump actions/setup-go from 5.0.2 to 5.1.0
• 82db3fb chore(deps): Bump actions/setup-go from 5.0.2 to 5.1.0 (#160)
• db2c5cf chore(deps): Bump actions/upload-artifact from 4.3.1 to 4.3.2
• c641afc chore(deps): Bump actions/upload-artifact from 4.3.2 to 4.3.5
• 00c5d8d chore(deps): Bump actions/upload-artifact from 4.3.5 to 4.4.3
• af6fc76 chore(deps): Bump amannn/action-semantic-pull-request
• 8e41621 chore(deps): Bump anchore/sbom-action from 0.17.4 to 0.17.5 (#159)
• 7eb4007 chore(deps): Bump anchore/sbom-action from 0.17.5 to 0.17.6 (#163)
• a2e1649 chore(deps): Bump anchore/sbom-action from 0.17.6 to 0.17.7 (#165)
• 7de2a17 chore(deps): Bump github/codeql-action from 3.26.13 to 3.27.0
• d24bd83 chore(deps): Bump golangci/golangci-lint-action from 4.0.0 to 5.1.0
• 714c8ed chore(deps): Bump golangci/golangci-lint-action from 5.1.0 to 6.1.1
• 14fec07 chore(deps): Bump google.golang.org/grpc from 1.62.1 to 1.63.0
• 314a705 chore(deps): Bump google.golang.org/grpc from 1.63.0 to 1.63.2
• e32196d chore(deps): Bump google.golang.org/grpc from 1.63.2 to 1.67.1
• b5447cc chore(deps): Bump google.golang.org/protobuf from 1.33.0 to 1.34.0
• 92e5320 chore(deps): Bump google.golang.org/protobuf from 1.34.0 to 1.35.1
• 67150e2 chore(deps): Bump k8s.io/api from 0.29.3 to 0.31.2 (#158)
• a8dc597 chore(deps): Bump k8s.io/apimachinery from 0.29.2 to 0.29.3
• a993b5f chore(deps): Bump k8s.io/apimachinery from 0.29.3 to 0.31.2 (#115)
• 8b45cb6 chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions
• ce14be2 chore(deps): Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.15 to 3.0.16 (#164)
• 7acc80e chore: add a README
• 80db636 chore: add a placeholder readme
• 0e5c8d0 chore: add ci jobs
• 0bb24cb chore: add codeowners
• 32b3543 chore: add codeql workflow
• aba5367 chore: add demo of kyverno-evnoy-plugin with standalone envoy
• 9ef7cd5 chore: add dependabot config
• 720c4ad chore: add dependabot config for go
• 332e188 chore: add go linter
• 597eb36 chore: add istio tests workflow
• 86b0235 chore: add kind image loading in makefile
• d14f851 chore: add performance test for kyverno-envoy-plugin
• c622c60 chore: add readme for demo istio
• 0cc7979 chore: add tests workflow
• 0d635f9 chore: add vscode file (#136)
• 914326a chore: added all TODOs
• ff0be58 chore: bump a couple of deps
• 38425f4 chore: bump chainsaw (#137)
• 50e25fa chore: configure dependabot labels
• bdb5f3b chore: install ko
• 75d9302 chore: istio README updated used kyverno-envoy-plugin as ext-auth server
• a8a355f chore: move the demo in a subfolder
• 3cbed02 chore: mtls demo show use of plugin with multiple service
• 52a3467 chore: nits
• 19d3da1 chore: prepare images for chainsaw tests (#156)
• 40b8524 ci: add end to end test case for kyverno-envoy-plugin
• d47f36f compare key value of got and want
• e259336 feat: add cel envoy lib (#162)
• c591306 feat: add cert-manager certificates support (#155)
• 5967681 feat: add docs tools
• f3b4fa0 feat: add func to decode basic auth
• 612712c feat: add goreleaser config (#150)
• 9f77ff1 feat: add header overloads (#167)
• 5a72331 feat: add helm chart (#139)
• 45029d6 feat: add jwt decode function
• c29938f feat: add ko build
• f838530 feat: add ko-publish
• f379a7d feat: add kyverno-authz-server chart (#145)
• 883b291 feat: add kyverno-lib chart (#144)
• f79fe56 feat: add logos
• c5259a3 feat: add makefile
• f79c437 feat: add sidecar injector command (#135)
• 87597a5 feat: added --policy flag to pass policy path and implemented kyverno-json engine
• b67478c feat: added echo server and moved script in demo
• aa8b7cf feat: added main
• c5b16ce feat: allow webhook configuration (#143)
• d7350c6 feat: factorise server run code (#151)
• 06b6a49 feat: publish docs
• 97afe57 feat: script to install Istio on Kind
• 3bb8b95 feat: sidecar-injector to inject kyverno-envoy-plugin as sidecar
• d991dec feat: some minor changes added address flag and liveness handler
• a1e616f feat: update logo
• 861effa fix
• d1edd80 fix
• a8ad513 fix lint error
• ba6ed3b fix: Log request payload
• 18f909f fix: change ports and little changes into istio/demo/readme
• 954f3c1 fix: commands in main
• 84ece7a fix: fixed go linter issues
• eac5167 fix: improve demo script
• 7039c5a fix: improve signals
• 77f5150 fix: istio demo kind cluster
• 09a16ec fix: ko
• c35fa97 fix: ko
• 0b2d186 fix: ko publish
• 3e1a9da fixed all fail unit test
• 05e57c6 fixed namespace and some changes
• e741013 perf: added http and grpc server in diff goroutines
• 425c20e pptx
• f7f0f11 pref: added gracefulshutdown and system events
• 4092aa6 pref: used single context instead of chan
• 6e48774 refa...