You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+10-1Lines changed: 10 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,4 +8,13 @@
8
8
* fix(helm): CRDs now correspond to correct values for the `command-issuer`.
9
9
* fix(helm): Signer Helm Chart now includes a `secureMetrics` value to enable/disable sidecar RBAC container for further protection of the `/metrics` endpoint.
10
10
* fix(signer): Signer now returns CA chain bytes instead of appending to the leaf certificate.
11
-
* fix(role): Removed permissions for `configmaps` resource types for the `leader-election-role` role.
11
+
* fix(role): Removed permissions for `configmaps` resource types for the `leader-election-role` role.
12
+
13
+
# v1.0.5
14
+
15
+
## Features
16
+
* feat(controller): Implement Kubernetes `client-go` REST client for Secret/ConfigMap retrieval to bypass `controller-runtime` caching system. This enables the reconciler to retrieve Secret and ConfigMap resources at the namespace scope with only namespace-level permissions.
17
+
18
+
## Fixes
19
+
* fix(helm): Add configuration flag to configure chart to either grant cluster-scoped or namespace-scoped access to Secret and ConfigMap API
20
+
* fix(controller): Add logic to read secret from reconciler namespace or Issuer namespace depending on Helm configuration.
0 commit comments