Release 2.5.0

[xopham]

v2.5.0 - 🚨 Critical Fix for Service Interruption due to unexpected API change 🚨

Major Scope

🚨 Release contains a critical fix for a service interruption due to an unexpected API change by docker.io: #564. helm upgrade is not functional due to the issue and upgrade must be performed via helm uninstall followed by helm install. For more information, checkout #566.

This release also contains several several notable new features and improvements:

• exposing prometheus metrics (see docs): feat: prometheus metrics #508
• cosign support for ambient credentials/workload identities (see docs): feat: Support cosign --k8s-keychain flag #551
• cosign support for multiple signers of a single image (see docs): feat: multi-signer support for cosign #428
• cosign KMS support goes GA (see docs): Feat/cosign kms support #558
• reinvocation policy for objects mutated during admission (see docs): feat: add reinvocationPolicy option #518
• less noisy logging: feat: silent healthz endpoints logging #501

---

Changelog

Feat

• enforce/require/allow multiple container image signers for cosign feat: multi-signer support for cosign #428
• cosign kms support reaches GA Feat/cosign kms support #558
• add reinvocationPolicy option feat: add reinvocationPolicy option #518
• Support cosign --k8s-keychain flag feat: Support cosign --k8s-keychain flag #551
• silent healthz endpoints logging feat: silent healthz endpoints logging #501
• prometheus metrics feat: prometheus metrics #508

Update

• connaisseur (chart v1.3.0, image v2.5.0) Update/version 2.5.0 #562
• bump actions/checkout from 2 to 3 update: bump actions/checkout from 2 to 3 #565
• bump actions/setup-python from 2 to 3 update: bump actions/setup-python from 2 to 3 #561
• update mkdocs-material requirement from ~=8.2.1 to ~=8.2.3 update: update mkdocs-material requirement from ~=8.2.1 to ~=8.2.3 #559
• cosign v1.5.1 to v1.5.2 update: cosign v1.5.1 to v1.5.2 #556
• update setuptools requirement from ~=60.9.2 to ~=60.9.3 update: update setuptools requirement from ~=60.9.2 to ~=60.9.3 #552
• update mkdocs-material requirement from ~=8.1.11 to ~=8.2.1 update: update mkdocs-material requirement from ~=8.1.11 to ~=8.2.1 #553
• update setuptools requirement from ~=60.8.2 to ~=60.9.2 update: update setuptools requirement from ~=60.8.2 to ~=60.9.2 #549
• update flask requirement from ~=2.0.2 to ~=2.0.3 update: update flask requirement from ~=2.0.2 to ~=2.0.3 #544
• update pytest-asyncio requirement from ~=0.18.0 to ~=0.18.1 update: update pytest-asyncio requirement from ~=0.18.0 to ~=0.18.1 #536
• update mkdocs-material requirement from ~=8.1.10 to ~=8.1.11 update: update mkdocs-material requirement from ~=8.1.10 to ~=8.1.11 #537
• update setuptools requirement from ~=60.8.1 to ~=60.8.2 update: update setuptools requirement from ~=60.8.1 to ~=60.8.2 #535
• update pytest-subprocess requirement from ~=1.4.0 to ~=1.4.1 update: update pytest-subprocess requirement from ~=1.4.0 to ~=1.4.1 #534

Test

• reset values.yaml after test test: reset values.yaml after test #563
• added tests for logging wrapper test: added tests for logging wrapper #545
• Make IT exectuable and rename complexity files Various changes #554
• fix unset variable in preconfig integration test test: fix unset variable in preconfig integration test #542

Ci

• run nightly scans on released version Ci/run nightly scans on released version #567
• Expose k8s logs when integration test fails Expose k8s logs on failure #555

Fix

• disable aiohttp content type check fix: disable aiohttp content type check #564
• add missing config schema fields fix: add missing config schema fields #476

Docs

• fix contributing guide link in pr template docs: fix contributing guide link in pr template #557
• Add explanation for k8s api path Various changes #554

Build

• Fix typo in Makefile Various changes #554

[codecov-commenter]

Codecov Report

Merging #538 (3630fe4) into master (6845fe7) will increase coverage by 2.12%.
The diff coverage is 95.23%.

@@            Coverage Diff             @@
##           master     #538      +/-   ##
==========================================
+ Coverage   94.32%   96.45%   +2.12%     
==========================================
  Files          22       22              
  Lines        1111     1129      +18     
==========================================
+ Hits         1048     1089      +41     
+ Misses         63       40      -23     

Impacted Files	Coverage Δ
connaisseur/workload_object.py	98.24% <ø> (ø)
connaisseur/logging_wrapper.py	96.15% <66.66%> (+96.15%)	⬆️
connaisseur/flask_application.py	92.63% <100.00%> (+1.27%)	⬆️
connaisseur/validators/cosign/cosign_validator.py	97.80% <100.00%> (+0.04%)	⬆️
connaisseur/validators/notaryv1/notary.py	98.33% <100.00%> (ø)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6845fe7...3630fe4. Read the comment docs.