v1.21.2

Overview

Bug Fixes 🐛

• fix: incorrect behavior when using servingCertificate without CertManager #389 by @obsessionsys in #390
• fix: mutate containers with a startup probe by @Kaswob in #422

Maintenance 🚧

• ci: update dependabot config by @csatib02 in #410
• fix: typo in issue template by @csatib02 in #438
• chore: prepare for release v1.21.2 by @akijakya in #453

Dependency Updates ⬆️

View all dependency changes

• build(deps): bump actions/dependency-review-action from 4.1.0 to 4.1.3 by @dependabot in #349
• build(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 by @dependabot in #352
• build(deps): bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #353
• build(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @dependabot in #354
• build(deps): bump actions/download-artifact from 4.1.2 to 4.1.4 by @dependabot in #355
• build(deps): bump the k8s group with 3 updates by @dependabot in #342
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #357
• build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @dependabot in #358
• build(deps): bump cachix/install-nix-action from 25 to 26 by @dependabot in #360
• build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0 by @dependabot in #361
• build(deps): bump golang from 1.22.0-alpine3.18 to 1.22.1-alpine3.18 by @dependabot in #362
• build(deps): bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 by @dependabot in #356
• build(deps): bump sigs.k8s.io/controller-runtime from 0.16.3 to 0.17.2 by @dependabot in #344
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #365
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #375
• build(deps): bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #374
• build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0 by @dependabot in #373
• build(deps): bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @dependabot in #372
• build(deps): bump DeterminateSystems/magic-nix-cache-action from 3 to 4 by @dependabot in #371
• build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #368
• build(deps): bump the k8s group with 3 updates by @dependabot in #367
• build(deps): bump golang from 010f3b3 to ede158f by @dependabot in #370
• build(deps): bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.1 by @dependabot in #369
• build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #376
• build(deps): bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2 by @dependabot in #379
• build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.4 by @dependabot in #378
• build(deps): bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in #377
• chore: bump bank-vaults/internal v0.2.2->v0.3.0 by @csatib02 in #380
• build(deps): bump actions/dependency-review-action from 4.2.4 to 4.2.5 by @dependabot in #383
• build(deps): bump aquasecurity/trivy-action from 0.18.0 to 0.19.0 by @dependabot in #382
• build(deps): bump golang from 1.22.1-alpine3.18 to 1.22.2-alpine3.18 by @dependabot in #386
• build(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in #391
• build(deps): bump azure/setup-helm from 3.5 to 4 by @dependabot in #392
• build(deps): bump sigs.k8s.io/controller-runtime from 0.17.2 to 0.17.3 by @dependabot in #393
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #395
• build(deps): bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #396
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #397
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #398
• build(deps): bump github.com/hashicorp/vault/api from 1.12.2 to 1.13.0 by @dependabot in #401
• build(deps): bump azure/setup-helm from 4.1.0 to 4.2.0 by @dependabot in #399
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #408
• build(deps): bump actions/download-artifact from 4.1.5 to 4.1.7 by @dependabot in #407
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #406
• build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @dependabot in #411
• chore: bump go version, update dependencies by @csatib02 in #402
• build(deps): bump sigs.k8s.io/controller-runtime from 0.18.1 to 0.18.2 in the sigs-k8s-io group by @dependabot in #415
• build(deps): bump golang from 1.22.2-alpine3.18 to 1.22.3-alpine3.18 by @dependabot in #421
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #420
• build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by @dependabot in #419
• build(deps): bump DeterminateSystems/magic-nix-cache-action from 4 to 6 by @dependabot in #418
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #417
• build(deps): bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in #416
• build(deps): bump the k8s-io group with 3 updates by @dependabot in #423
• build(deps): bump github/codeql-action from 2.13.4 to 3.25.5 by @dependabot in #424
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #425
• build(deps): bump golang from 4531927 to d1a601b by @dependabot in #427
• build(deps): bump cachix/install-nix-action from 26 to 27 by @dependabot in #426
• chore: update nix by @csatib02 in #428
• chore(deps): lock file maintenance by @renovate in #394
• build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by @dependabot in #429
• build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #430
• build(deps): bump sigs.k8s.io/controller-runtime from 0.18.2 to 0.18.3 in the sigs-k8s-io group by @dependabot in #431
• build(deps): bump github.com/hashicorp/vault/api from 1.13.0 to 1.14.0 by @dependabot in #433
• build(deps): bump alpine from 3.19....

v1.21.1

Overview

github.com/hashicorp/vault/api has been bumped from v1.10.0 to v1.12.0

Features 🚀

• feat: add options for resource requests for vault-agent by @dhumphries-sainsburys in #275
• feat: add liveness probe and failure threshold to probes by @chrism417 in #329

Bug Fixes 🐛

• certmanager: solve CannotRegenerateKey by @universam1 in #229
• fix: Consul template mount path customization by @akijakya in #237
• fix: Only add SC capabilities if vault templating is used by @sedadas in #218
• fix: prevent recurring helm install/upgrade creating a loop deleting caBundle, when certManager is enabled by @rsafonseca in #309
• fix: don't discard default transport settings when turning off TLS verification by @victor-tsykanov in #319
• fix: vault-log-level overwritten in pods by @csatib02 in #327

Maintenance 🚧

• docs: extend documentation by @ramizpolic in #216
• docs: Add issue template by @tanmay-pnaik in #104
• chore: update makefile and readme by @ramizpolic in #245
• chore: update dependency packages by @ramizpolic in #283
• chore: update bank-vaults deps by @ramizpolic in #337
• feat(GA): verify pull request by @ramizpolic in #212
• feat(GA): add common pipeline actions by @ramizpolic in #260
• feat(GA): update dependabot config by @akijakya in #323
• feat(GA): Cancel previous workflow on push by @csatib02 in #341
• refactor: export annotations by @csatib02 in #340
• refactor: factor out common package by @csatib02 in #347
• chore: bump versions for releases by @ramizpolic in #348

Dependency Updates ⬆️

View all dependency changes

• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #217
• chore(deps): lock file maintenance by @renovate in #138
• build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by @dependabot in #225
• build(deps): bump sigs.k8s.io/controller-runtime from 0.16.2 to 0.16.3 by @dependabot in #223
• chore(deps): lock file maintenance by @renovate in #230
• build(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.13.1 by @dependabot in #232
• build(deps): bump k8s.io/klog/v2 from 2.100.1 to 2.110.1 by @dependabot in #233
• build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.1 by @dependabot in #241
• build(deps): bump k8s.io/api from 0.28.3 to 0.28.4 by @dependabot in #248
• build(deps): bump github.com/bank-vaults/vault-sdk from 0.9.0 to 0.9.1 by @dependabot in #257
• build(deps): bump cachix/install-nix-action from 23 to 24 by @dependabot in #258
• build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #261
• build(deps): bump aquasecurity/trivy-action from 0.13.1 to 0.15.0 by @dependabot in #264
• build(deps): bump golang from 1.21.3-alpine3.18 to 1.21.5-alpine3.18 by @dependabot in #266
• build(deps): bump aquasecurity/trivy-action from 0.15.0 to 0.16.0 by @dependabot in #271
• build(deps): bump golang from 5c1cabd to 9390a99 by @dependabot in #269
• build(deps): bump docker/metadata-action from 5.0.0 to 5.3.0 by @dependabot in #265
• build(deps): bump k8s.io/client-go from 0.28.3 to 0.28.4 by @dependabot in #250
• build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0 by @dependabot in #255
• build(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by @dependabot in #227
• build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in #226
• build(deps): bump github.com/docker/docker from 24.0.0+incompatible to 24.0.7+incompatible by @dependabot in #231
• build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0 by @dependabot in #224
• build(deps): bump actions/dependency-review-action from 3.1.1 to 3.1.4 by @dependabot in #259
• build(deps): bump alpine from 3.18.4 to 3.19.0 by @dependabot in #268
• build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #256
• build(deps): bump github.com/spf13/viper from 1.17.0 to 1.18.1 by @dependabot in #270
• build(deps): bump golang from 9390a99 to d8b9994 by @dependabot in #282
• build(deps): bump docker/metadata-action from 5.3.0 to 5.4.0 by @dependabot in #280
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #278
• build(deps): bump k8s.io/client-go from 0.28.4 to 0.29.0 by @dependabot in #272
• build(deps): bump github.com/spf13/viper from 1.18.1 to 1.18.2 by @dependabot in #279
• build(deps): bump actions/download-artifact from 3.0.2 to 4.1.0 by @dependabot in #281
• build(deps): bump github.com/bank-vaults/vault-sdk from 0.9.1 to 0.9.2 by @dependabot in #285
• build(deps): bump aquasecurity/trivy-action from 0.16.0 to 0.16.1 by @dependabot in #287
• build(deps): bump actions/dependency-review-action from 3.1.4 to 3.1.5 by @dependabot in #288
• build(deps): bump actions/download-artifact from 4.1.0 to 4.1.1 by @dependabot in #294
• build(deps): bump actions/cache from 3.3.2 to 3.3.3 by @dependabot in #295
• build(deps): bump k8s.io/klog/v2 from 2.110.1 to 2.120.1 by @dependabot in #306
• build(deps): bump github.com/google/go-containerregistry from 0.17.0 to 0.18.0 by @dependabot in #301
• build(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 by @dependabot in #286
• build(deps): bump alpine from 3.19.0 to 3.19.1 by @dependabot in #314
• build(deps): bump k8s.io/api from 0.29.0 to 0.29.1 by @dependabot in #313
• build(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 by @dependabot in #305
• build(deps): bump actions/cache from 3.3.3 to 4.0.0 by @dependabot in #299
• build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0 by @dependabot in #289
• build(deps): bump cachix/install-nix-action from 24 to 25 by @dependabot in #297
• build(deps): bump github.com/hashicorp/vault/api from 1.10.0 to 1.11.0 by @dependabot in #311
• build(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 by @dependabot in #322
• build(deps): bump golang from 1.21.5-alpine3.18 to 1.22.0-alpine3.18 by @dependabot in https://github....

v1.21.0

Overview

Added certLifetime and caLifetime setting and values, switched to bank-vaults/internal package and slog, updated vault-env to v1.21.1, docs and dependency updates.

What's Changed

Features

• Add concurrency protection to injector by @ramizpolic in #33
• Fix security context by @sagikazarmark in #149
• Added certLifetime and caLifetime setting and values by @JonTheNiceGuy in #189
• feat: use bank vaults internal package, vault-env v1.21.1, update to slog by @akijakya in #202

Maintenance

• chore: updated K8s and Vault versions to latest by @akijakya in #36
• Update vault-env to 1.21.0 by @sagikazarmark in #56
• chore: Update vault_ct_image default image by @tanmay-pnaik in #61
• ci: flake updates by @sagikazarmark in #62
• [StepSecurity] ci: Harden GitHub Actions by @step-security-bot in #63
• chore: use hashicorp/vault image as _/vault is deprecated by @becker-s in #65
• chore: update vault versions by @akijakya in #70
• docs: Update ghcr.io/bank-vaults/vault-secrets-webhook in README by @tanmay-pnaik in #87
• docs: update project logo by @sagikazarmark in #91
• chore: Update to hashicorp/vault:1.14.1 by @tanmay-pnaik in #94
• fix: typo by @sagikazarmark in #142
• fix(licensei): add vault/api to ignored list by @akijakya in #145
• chore: fix codeowners by @ramizpolic in #165
• e2e test, readme improvements by @akijakya in #191

Dependencies

• build(deps): bump cloud.google.com/go/kms from 1.12.0 to 1.12.1 by @dependabot in #34
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.285 to 1.44.286 by @dependabot in #35
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.286 to 1.44.287 by @dependabot in #37
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.287 to 1.44.289 by @dependabot in #40
• build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #39
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.289 to 1.44.291 by @dependabot in #42
• build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0 by @dependabot in #44
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.291 to 1.44.292 by @dependabot in #45
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.292 to 1.44.293 by @dependabot in #46
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.293 to 1.44.294 by @dependabot in #47
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.294 to 1.44.295 by @dependabot in #48
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.295 to 1.44.296 by @dependabot in #49
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.296 to 1.44.297 by @dependabot in #51
• build(deps): bump docker/setup-buildx-action from 2.8.0 to 2.9.0 by @dependabot in #53
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.297 to 1.44.298 by @dependabot in #52
• build(deps): bump cloud.google.com/go/kms from 1.12.1 to 1.13.0 by @dependabot in #54
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.298 to 1.44.299 by @dependabot in #55
• build(deps): bump docker/setup-buildx-action from 2.9.0 to 2.9.1 by @dependabot in #58
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.299 to 1.44.300 by @dependabot in #59
• build(deps): bump cloud.google.com/go/kms from 1.13.0 to 1.14.0 by @dependabot in #67
• build(deps): bump k8s.io/client-go from 0.27.3 to 0.27.4 by @dependabot in #71
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.300 to 1.44.303 by @dependabot in #73
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.303 to 1.44.307 by @dependabot in #89
• build(deps): bump cloud.google.com/go/kms from 1.14.0 to 1.15.0 by @dependabot in #88
• build(deps): bump gocloud.dev from 0.30.0 to 0.32.0 by @dependabot in #82
• build(deps): bump gocloud.dev from 0.32.0 to 0.33.0 by @dependabot in #100
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.307 to 1.44.314 by @dependabot in #101
• build(deps): bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 by @dependabot in #102
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.314 to 1.44.315 by @dependabot in #103
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.315 to 1.44.316 by @dependabot in #105
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.316 to 1.44.317 by @dependabot in #107
• build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 by @dependabot in #106
• build(deps): bump cloud.google.com/go/kms from 1.15.0 to 1.15.1 by @dependabot in #111
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.317 to 1.44.319 by @dependabot in #110
• build(deps): bump alpine from 3.18.2 to 3.18.3 by @dependabot in #109
• build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.7 by @dependabot in #113
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.319 to 1.44.320 by @dependabot in #112
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.320 to 1.44.322 by @dependabot in #115
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.322 to 1.44.323 by @dependabot in #116
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.323 to 1.44.326 by @dependabot in #123
• build(deps): bump k8s.io/client-go from 0.27.4 to 0.28.0 by @dependabot in #120
• build(deps): bump actions/dependency-review-action from 3.0.7 to 3.0.8 by @dependabot in #117
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.326 to 1.44.327 by @dependabot in #124
• build(deps): bump sigs.k8s.io/e2e-framework from 0.2.0 to 0.3.0 by @dependabot in #127
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #131
• build(deps): bump k8s.io/apimachinery from 0.28.0 to 0.28.1 by @dependabot in #132
• build(deps): bump k8s.io/client-go from 0.28.0 to 0.28.1 by @dependabot in #133
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.327 to 1.44.334 by @dependabot in #146
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.334 to 1.45.0 by @dependabot in #148
• build(deps): bump sigs.k8s.io/controller-runtime from 0.15.1 to 0.16.0 by @dependabot in #129
• build(deps): bump sigs.k8s.io/controller-runtime from 0.16.0 to 0.16.1 by @dependabo...

v1.20.0

Project migrated 🎉 🎉 🎉

This is the first release after splitting and migrating the project to it's new home.

Most changes are related to the relocation, so this is mostly a maintenance release. (Please see the detailed list of changes below)

What's Changed

• Migration by @sagikazarmark in #2
• build(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 by @dependabot in #3
• build(deps): bump github/codeql-action from 2.3.6 to 2.13.4 by @dependabot in #4
• refactor: rewrite acceptance tests using k8s e2e framework by @sagikazarmark in #5
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.279 to 1.44.280 by @dependabot in #9
• build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #8
• build(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 by @dependabot in #7
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.280 to 1.44.281 by @dependabot in #10
• Improvements by @sagikazarmark in #11
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.281 to 1.44.282 by @dependabot in #16
• build(deps): bump cloud.google.com/go/kms from 1.11.0 to 1.12.0 by @dependabot in #15
• build(deps): bump docker/metadata-action from 4.5.0 to 4.6.0 by @dependabot in #14
• build(deps): bump docker/build-push-action from 4.1.0 to 4.1.1 by @dependabot in #13
• build(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 by @dependabot in #12
• Chart improvements by @sagikazarmark in #17
• Lint by @sagikazarmark in #19
• build(deps): bump k8s.io/api from 0.27.2 to 0.27.3 by @dependabot in #22
• build(deps): bump k8s.io/client-go from 0.27.2 to 0.27.3 by @dependabot in #20
• build(deps): bump alpine from 3.18.0 to 3.18.2 by @dependabot in #23
• build(deps): bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 by @dependabot in #25
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.282 to 1.44.284 by @dependabot in #26
• build(deps): bump cachix/install-nix-action from 21 to 22 by @dependabot in #27
• chore: upgrades by @sagikazarmark in #29
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.284 to 1.44.285 by @dependabot in #31
• build(deps): bump gocloud.dev from 0.29.0 to 0.30.0 by @dependabot in #30

New Contributors

• @sagikazarmark made their first contribution in #2
• @dependabot made their first contribution in #3

Full Changelog: https://github.com/bank-vaults/vault-secrets-webhook/commits/v1.20.0