v1.7.0

Update Requirement

This version of Kubechecks requires a change to the ClusterRole, please update the helm chart with the matching release.

Whats New

1. Application Set Check:
   • ApplicationSets changes will now trigger Application diffs; a change to spec.template.source will show the diff output for the matching Applications. More details in #227
2. Helm Chart provides access to ApplicationSets:
   • Kubechecks now needs access to ArgoCD ApplicationSets in order to process changes.
3. kubechecks-rbac Helm Chart (Optional):
   • The new helm chart kubechecks-rbac can be used to help grant access to argocd CRD and Clusters list from the remotely running Kubechecks. You must install this chart on the cluster where ArgoCD is operating.
     This Chart isn't required to be installed when Kubechecks is running on the same cluster with ArgoCD.

Change Log

• Bump go.opentelemetry.io/otel/sdk/metric from 1.25.0 to 1.28.0 by @dependabot in #238
• Bump github.com/labstack/echo-contrib from 0.16.0 to 0.17.1 by @dependabot in #228
• Bump github.com/docker/docker from 26.0.2+incompatible to 27.0.3+incompatible by @dependabot in #236
• Bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5 by @dependabot in #233
• Bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.46.1 to 0.53.0 by @dependabot in #239
• Bump github.com/sashabaranov/go-openai from 1.26.2 to 1.27.0 by @dependabot in #246
• Bump github.com/argoproj/argo-cd/v2 from 2.11.2 to 2.11.6 by @dependabot in #245
• Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.25.0 to 1.28.0 by @dependabot in #244
• feat: application set handler by @Greyeye in #241

Full Changelog: v1.6.4...v1.6.5

kubechecks-rbac-0.4.5

A Helm chart for kubechecks Role and RoleBinding

kubechecks-0.4.5

A Helm chart for kubechecks

v1.6.4

What's Changed

• feature: Restrict Kubechecks to a Single Namespace for App Watcher by @Greyeye in #235

• Namespace Restriction for Kubechecks:

  • Current Behavior: Kubechecks monitors all ArgoCD applications and ApplicationSet CRDs across the entire cluster. This is not ideal when multiple ArgoCD instances are running in a single cluster (e.g., for testing purposes).
  • New Behavior: Introduces the ability to specify a namespace for ArgoCD. Kubechecks will now watch ArgoCD CRDs only within the specified namespace.
    • Added a new flag argocd-api-namespace and a corresponding server config ArgoCDNameSpace.
    • Modified NewApplicationInformer to target the specified argocdnamespace.
    • argocd-api-namespace /KUBECHECKS_ARGOCD_NAMESPACE default is argocd, Please make sure this matches with your environment

• Improvement to dumpcrd:

  • dumpcrd can now run without requiring a local kubectl binary.

• Modification to GitHub Webhook Check:

  • The webhook check for GitHub has been updated to validate against the payload URL instead of the hook's API URL.

• OpenAI ChatGPT Model Update:

  • Updated to use the GPT-4o model.

• Bump go-github to v62

Localdev Changes

• Earthly File Renaming:

  • Renamed the local earthly file to earthly.sh to minimize confusion.

• TiltFile Fix:

  • Updated TiltFile to read the .tools-version file directly, preventing failures during the earthly build.
  • Updated to read .secret instead of .env; as secrets env vars are read from the .secret

• Values.yaml Update:

  • Renamed KUBECHECKS_ARGOCD_NAMESPACE to KUBECHECKS_ARGOCD_API_NAMESPACE in localdev/kubechecks/values.yaml.

• Configuration Change:

  • Set KUBECHECKS_ENABLE_CONFTEST to false as the ./policy path is not valid.

Full Changelog: v1.6.3...v1.6.4

v1.6.3

What's Changed

• Update argocd to 2.10.10 by @ahinh43 in #222
• update contributors list by @djeebus in #225
• Bump github.com/argoproj/argo-cd/v2 from 2.10.10 to 2.11.2 by @dependabot in #223
• Bump github.com/docker/docker from 26.0.0+incompatible to 26.0.2+incompatible by @dependabot in #201
• Bump github.com/xanzy/go-gitlab from 0.101.0 to 0.105.0 by @dependabot in #214
• Bump golang.org/x/net from 0.23.0 to 0.25.0 by @dependabot in #210
• Bump github.com/hashicorp/go-getter from 1.7.3 to 1.7.4 by @dependabot in #205

New Contributors

• @ahinh43 made their first contribution in #222

Full Changelog: v1.6.2...v1.6.3

v1.6.2

What's Changed

• clean up more AI output by @djeebus in #203

Full Changelog: v1.6.1...v1.6.2

v1.6.1

What's Changed

• trim ai summary when it puts it in a code block by @djeebus in #195

Full Changelog: v1.6.0...v1.6.1

v1.6.0

What's Changed

• panic related improvements by @djeebus in #184
• fix: ignore the 403 returned from argocd when creating new app by @djeebus in #187
• return to hiding hooks in the diff, render seperately by @djeebus in #185

Full Changelog: kubechecks-0.4.4...v1.6.0

kubechecks-0.4.4

A Helm chart for kubechecks

v1.5.4

What's Changed

• do not skip hooks when diffing, conforming, etc by @djeebus in #181

Full Changelog: v1.5.3...v1.5.4