v0.0.5

v0.0.5 (2021-01-01)

Happy new year with a brand new name!

Features

• Node listing is supported through the Tenant annotation capsule.clastix.io/enable-node-listing [#38]

Enhancements

• Documentation has been improved [#43]

Breaking Changes

• Quay.io image has been changed, please refer to quay.io/clastix/capsule-proxy:v0.0.5

Many thanks to @bsctl for his endless effort for the documentation, and many many kudos to @MaxFedotov for pushing this project beyond any boundary!

v0.0.4

v0.0.4 (2020-11-26)

Some minor enhancements and addressing two severe bug fixes.

Enhancements

• Supporting the Tenant group owner kind [#30]
• Using ISO-8601 date-time standard for logs [#35]

Bug fixes

• Avoiding privilege escalation due to labelSelector query string with empty value [#32]
• Fixing memory leak [#28]

Many thanks to @bsctl, an awesome QA job as usual! 🎖️

v0.0.3

v0.0.3 (2020-10-02)

This Capsule Namespace Filter release provides additional improvements and addressing some security issues.

Features

• Add readiness and liveness endpoints [#15]
• Support for TLS/SSL [#6]
• Users presenting TLS client certificates cannot list namespaces [#14]
• Improving documentation [#13 and #2]

Big fixes

• Missing expired check on JWT token [#7]
• A tenant owner can list namespaces belonging to other tenants [#5]

Many kudos to @bsctl driving this project and helping with his unstoppable QA job! 🚀

v0.0.2

v0.0.2 (2020-09-19)

A clean and neat implementation: just proxying to the API Server to let handle the magic on its side.

Features

• Support also for kubectl get namespace [#1]
• Adding customizable username claim name according to OIDC configuration [#4]

v0.0.1

v0.0.1 (2020-09-18)

First implementation, right now working just with OpenShift Console to return the list of filtered Namespaces per Tenant Owner across several Tenant resources (with websocket support).