All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
0.12.2 - 2024-10-24
- Updated golang to v1.23.2
0.12.1 - 2024-10-23
- Added enable/disable switch on
tbot
components
0.12.0 - 2024-10-16
- Changed the logic of setting roles by parsing
"%s-teleport-kube-agent-user-values"
configmaps to check if apps are enabled. - Deprecated
MC-Namespace
andtokenRoles
0.11.2 - 2024-10-11
- Implemented
MC-Namespace
flag to avoid enabling roles exceptkube
to workload clusters - Increased
grpc buffer
size
0.11.1 - 2024-10-11
- Set only
kube
by default to aviod issues when no apps are set.
0.11.0 - 2024-10-11
- Implemented option to generate combined tokens with multiple roles
- Change ownership to Team Shield
- Disable logger development mode to avoid panicking
- Chart to use
.Release.Namespace
namespace
0.10.0 - 2024-08-19
- Added tbot feature flag, enabled with
--tbot
flag - If tbot feature flag is set, creates configmap and append to tbot app extra config for generating kubeconfig.
0.9.3 - 2024-05-08
- Increase token validity for node and kube agents
0.9.2 - 2024-05-07
- Added affinity and tolerations for operators' deployments to run on control-plane
0.9.1 - 2024-04-01
- Use PodMonitor for monitoring instead of legacy system.
0.9.0 - 2024-03-21
- Updated
tbot
deployment to use standalonetbot
image (smaller image size) - Bump teleport version to
15.1.7
0.8.4 - 2024-01-04
- Updated cilium network policy for tbot and teleport-operator
0.8.3 - 2024-01-04
- Set
TELEPORT_TLS_ROUTING_CONN_UPGRADE
environment variable
0.8.2 - 2024-01-04
- Add network policy for tbot
- Fixes CVE-2023-48795 in crypto package
0.8.1 - 2023-12-20
- Correct
CiliumNetworkPolicy
spec.
0.8.0 - 2023-12-19
- Add
CiliumNetworkPolicy
(disabled by default).
- Configure
gsoci.azurecr.io
as the default container image registry. - Correct path in
.gitignore
.
- Remove CircleCI push to Vintage (aws-app-collection)
0.7.0 - 2023-11-28
- Replace
-bot
suffix withbot-
rpefix in tbot token name.
0.6.0 - 2023-11-21
- Adds support for Teleport Machine ID Bot for short-lived certificate for Teleport Cluster access.
- Fixes broken architecture diagram in README
0.5.0 - 2023-10-31
- Add push to CAPZ, CAPG, CAPV, CAPVCD app collection
0.4.0 - 2023-10-19
- Adjust security context
- x/[email protected] - CVE-2023-39325
0.3.0 - 2023-09-28
- Update deployment to be PSS compliant and PSP toggle.
0.2.1 - 2023-09-21
- Update README
- Tests
0.2.0 - 2023-08-15
- Leverage app platform for deploying teleport-kube-agent app