- feat(ci): feat(ci): Deploy ephemeral EJBCA/SignServer server as part of CI/CD test workflow. This enables the controller to be tested against a real CA.
- feat(ci): Reconcile Keyfactor actions and old workflows to match the new Keyfactor GitHub Actions workflows.
- feat(helm): Add namespace to resource definitions for helm template generation.
- feat(signer): Use in-tree cert-manager certificate reconstruction methods when compiling
status
- feat(helm): Rename
secureMetrics
tometrics
and addmetrics.secure
andmetrics.metricsAddress
as configuration values. This way, Prometheus can scrape the controller manager metrics without the secure metrics proxy. - feat(helm): Add configuration element in Helm chart default values file to configure container ports on the controller manager container.
- fix(deps): Update golang.org/x/net to v0.19.0
- fix(dockerfile): Upgrade builder image to golang:1.20 to address CVE-2023-38408
- feat(controller): Implement Kubernetes
client-go
REST client for Secret/ConfigMap retrieval to bypasscontroller-runtime
caching system. This enables the reconciler to retrieve Secret and ConfigMap resources at the namespace scope with only namespace-level permissions. - feat(ci): Add GitHub Actions workflows to run unit tests and release container images when appropriate
- feat(helm): Create Helm chart to deploy the controller to a Kubernetes or OpenShift cluster
- fix(controller): Add logic to read secret from reconciler namespace or Issuer namespace depending on Helm configuration.