diff --git a/CHANGELOG.md b/CHANGELOG.md index 0e3bb8e3..238ee90b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,152 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [0.9.0] - 2023-11-01 + +### Changed + +- feat: update proxy section and add sensor upgrade section +- fix: add node lock +- feat: update falconadmission resource +- feat: update readme with falconadmission resource +- feat: add resources to initContainer and cleanup +- feat: add Admission Controller docs +- build(deps): bump github.com/docker/docker +- fix: use GH alert formatting +- feat: add gke autopilot docs +- feat: enable GKE autopilot support +- build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 +- fix: update operator and image version status when changed +- feat: update bundle for admission controller +- fix: various test issues +- feat: Add admission controller test suite +- fix: ensure operator management config for non-OpenShift distros +- feat: enable FIPS-capable container builds +- feat: add admission controller reconciler +- feat: Update kustomize scaffolding for admission controller settings +- feat: add admission controller deployment +- feat: update proxy docs to provide link and examples +- fix: node sensor tolerations are stuck in constant update +- feat: add sidecar e2e test run +- build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 +- feat: add Sidecar controller test +- feat: support admission controller registry +- fix: various scaffolding fixes +- feat: add common reconciliation functions to cut down on code duplication +- feat: update service asset to pass service name +- feat: add admission controller RBAC config +- fix: config sample fixes +- feat: get args from env for OLM config +- build(deps): bump docker/setup-buildx-action from 2 to 3 +- build(deps): bump docker/setup-qemu-action from 2 to 3 +- build(deps): bump docker/build-push-action from 4 to 5 +- build(deps): bump actions/checkout from 3 to 4 +- build(deps): bump docker/login-action from 2 to 3 +- feat: run doc tests from makefile +- feat: add linting to Makefile +- feat: Generate docs from templates +- feat: add GH Action to error when autogenerated docs are changed manually +- feat: Add initial scaffolding for helm chart source +- build(deps): bump github.com/cyphar/filepath-securejoin +- refactor: code re-use for certs, pods ready check, ImageRefresher, etc. +- build(deps): bump helm/kind-action from 1.7.0 to 1.8.0 +- feat: enable MaxSurge in DS +- fix: consistently use falconv1alpha1 for falcon v1alpha1 imports +- fix: FalconAdmission boilerplate fixes +- feat: add admission controller scaffolding +- feat: start to use internal/controller and dedup some Kinds +- fix: update api dir for golang standards structure +- fix: update main.go to follow golang dir standards structure +- feat: update config to SDK version 1.30 +- makefile: update to the latest operator-sdk and kubebuilder versions +- feat: update to golang 1.19 +- feat: add proxy support +- bump version to 0.9.0 +- fix: update changelog with 0.8.1 changes +- build(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.2.0 +- build(deps): bump github.com/docker/docker +- maint: go mod tidy +- maint: update changelog +- feat: standardize labels across controllers +- fix: update docs for new release +- fix: delay CS registry API check for falconcontainer +- build(deps): bump helm/kind-action from 1.5.0 to 1.7.0 +- fix: sidecar deployment should have a service account specified +- docs: update redhat deployment doc and images +- fix: update CSV description +- docs: doc updates +- fix: various fixes in prep for future changes +- cleanup: create a common label function +- fix: various fixes and certification prep +- fix: sensor version was not working correctly +- fix: ensure custom non-API Falcon CID can be used +- fix: update runc go.mod indirect dependency +- Update README.md +- cmm edits to clean up verbiage and look/feel +- feat: Add Krew instructions and update OCP instructions +- feat: create generic kubernetes install +- fix: update indirect runc dependency to version 1.1.5 +- fix: Makefile kustomize target +- docs: resource docs updates +- Add operatorgroup and some troubleshooting steps +- GKE, EKS, Azure updates +- OCP image updates and node doc updates +- Documentation updates +- fix: fix Makefile help output for 2 targets +- feat: make developer guide more robust +- fix: update metadata to use release version +- fix: disable seccompProfile until broadly supported and enable multi-arch affinity for controller-manager +- fix: update tags for release automation +- fix: reconciliation loop should not run forever +- fix: fix failing deployment tests +- feat: automate releases +- fix: use released manifests for non-olm deployments +- fix: update CSV contact info +- build(deps): bump github.com/docker/docker +- build(deps): bump actions/setup-go from 3 to 4 +- feat: add support for nodeAffinity in node sensor +- fix: cluster role and SCC should not be reconciled +- fix: update DS labels +- Adding release note +- fix: update deployment on replica count change +- feat: add docker release build +- fix: provide more test coverage in node assets +- clean up ds updates +- fix test cleanup args +- update tests +- clean up updates +- fix: re-organize go workflows +- fix: Update falcon-operator.yaml +- fix: Update labels in assets +- feat: add labels, security, and arch affinity to kustomize components +- fix: Dockerfile cross compile updates and Makefile updates +- fix: ensure non-olm deployment uses kustomize serviceaccount +- Update falcon-operator.yaml using kustomize +- feat: Use kustomize to generate non-olm package manifest +- fix: kustomize format operator non-olm deploy yaml +- node: updating init containers for node daemonset and node cleanup daemonset +- Update README.md +- Update README.md +- Log the falcon node sensor image uri selected to be used +- feat: Enable multi-arch operator build +- build(deps): bump golang.org/x/net from 0.1.0 to 0.7.0 +- update bundle +- update pod topology and replica count +- fix: exclude gosec rule G307 as it has been removed in the upstream branch +- build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 +- Explicitly excluding kube-system from secret creation +- Adding documentation for node.backend +- bump CSV version +- Bumping version to 0.7.1 +- Adding backend support in Node/DaemonSet +- Do not deploy status: subresources outside OLM +- remove falconctlOpts to use default properties +- update bundle manifests +- update properties in the readme for Node and Container +- Update FalconContainer All options with default falcon values +- adding default trace value in the yaml +- fixing values and typo + ## [0.8.1] - 2023-06-07 ### Changed diff --git a/bundle/manifests/falcon-operator.clusterserviceversion.yaml b/bundle/manifests/falcon-operator.clusterserviceversion.yaml index 08e02b01..81da7e53 100644 --- a/bundle/manifests/falcon-operator.clusterserviceversion.yaml +++ b/bundle/manifests/falcon-operator.clusterserviceversion.yaml @@ -101,10 +101,10 @@ metadata: capabilities: Basic Install categories: Security,Monitoring containerImage: quay.io/crowdstrike/falcon-operator - createdAt: "2023-10-30T20:05:26Z" + createdAt: "2023-11-01T20:08:53Z" description: Falcon Operator installs CrowdStrike Falcon Sensors on the cluster operatorframework.io/suggested-namespace: falcon-operator - operators.operatorframework.io/builder: operator-sdk-v1.29.0 + operators.operatorframework.io/builder: operator-sdk-v1.30.0 operators.operatorframework.io/project_layout: go.kubebuilder.io/v4-alpha repository: https://github.com/CrowdStrike/falcon-operator support: Community Only @@ -1013,7 +1013,7 @@ spec: fieldPath: metadata.annotations['olm.targetNamespaces'] - name: OPERATOR_NAME value: falcon-operator - image: quay.io/crowdstrike/falcon-operator:latest + image: quay.io/crowdstrike/falcon-operator:0.9.0 livenessProbe: httpGet: path: /healthz diff --git a/bundle/metadata/annotations.yaml b/bundle/metadata/annotations.yaml index 2896dca8..12db1b84 100644 --- a/bundle/metadata/annotations.yaml +++ b/bundle/metadata/annotations.yaml @@ -5,7 +5,7 @@ annotations: operators.operatorframework.io.bundle.metadata.v1: metadata/ operators.operatorframework.io.bundle.package.v1: falcon-operator operators.operatorframework.io.bundle.channels.v1: alpha - operators.operatorframework.io.metrics.builder: operator-sdk-v1.29.0 + operators.operatorframework.io.metrics.builder: operator-sdk-v1.30.0 operators.operatorframework.io.metrics.mediatype.v1: metrics+v1 operators.operatorframework.io.metrics.project_layout: go.kubebuilder.io/v4-alpha diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml index ba6efc9d..30fef9e2 100644 --- a/config/manager/kustomization.yaml +++ b/config/manager/kustomization.yaml @@ -13,4 +13,4 @@ kind: Kustomization images: - name: controller newName: quay.io/crowdstrike/falcon-operator - newTag: latest + newTag: 0.9.0 diff --git a/deploy/falcon-operator.yaml b/deploy/falcon-operator.yaml index fb9e038f..3162c6ca 100644 --- a/deploy/falcon-operator.yaml +++ b/deploy/falcon-operator.yaml @@ -3768,7 +3768,7 @@ spec: value: null - name: OPERATOR_NAME value: falcon-operator - image: quay.io/crowdstrike/falcon-operator:latest + image: quay.io/crowdstrike/falcon-operator:0.9.0 imagePullPolicy: Always livenessProbe: httpGet: