v1.4.1

This release enables installations of Authorino Operator v0.23.1, Limitador Operator v0.17.1, DNS Operator v0.16.0, WASM Shim v0.12.0, ConsolePlugin v0.3.4 and Developer Portal Controller v0.1.0

What's Changed

Other Changes

• [Release] Kuadrant Operator v1.4.1-rc1 by @kuadrant-dev in #1766
• Prepare release v1.4.1 GA by @adam-cattermole in #1767

Full Changelog: v1.4.0...v1.4.1

v1.4.1-rc1

This release enables installations of Authorino Operator v0.23.1, Limitador Operator v0.17.1, DNS Operator v0.16.0, WASM Shim v0.12.0, ConsolePlugin v0.3.4 and Developer Portal Controller v0.1.0

What's Changed

Other Changes

• [Release] Kuadrant Operator v1.4.1-rc1 by @kuadrant-dev in #1766

Full Changelog: v1.4.0...v1.4.1-rc1

v1.4.0

This release enables installations of Authorino Operator v0.23.0, Limitador Operator v0.17.0, DNS Operator v0.16.0, WASM Shim v0.12.0, ConsolePlugin v0.3.4 and Developer Portal Controller v0.1.0

What's Changed

Exciting New Features 🎉

• feat: tracing foundation by @KevFan in #1670
• docs: go docs for pkg by @KevFan in #1588
• feat: configure wasm with tracing config by @KevFan in #1710
• feat: policy spans and tracking merging policies by @KevFan in #1704
• feat: track policies sources in wasmplugin config by @KevFan in #1706
• refactor: create tracing filter only when gateway has an effective policy by @KevFan in #1711
• go: bump to v1.25.3 by @KevFan in #1715
• feat: metrics for enforced policies and total policies by @KevFan in #1712
• makefile: refactor dependency tooling install by @KevFan in #1718
• feat: set tracing config via kuadrant cr by @KevFan in #1738
• go: bump to v1.25.5 by @eguzki in #1743
• feat: propagate trace via annnotation for limitador cr & auth configs by @KevFan in #1717
• fix: test flakes by @KevFan in #1742

Bug Fixing 🐞

• Revering OIDCPolicy clientSecret setting by @didierofrivia in #1633

Other Changes

• Update sail-operator and istio to v1.27.1 by @adam-cattermole in #1621
• docs: planpolicy by @KevFan in #1618
• docs: extensions overview by @KevFan in #1601
• [OIDC Policy] Secure storing client secret by @didierofrivia in #1595
• fixing a small typo by @jasonmadigan in #1630
• [docs] OIDCPolicy extension by @didierofrivia in #1624
• align trlp validation steps with those of rlp - fixes a noisy reconci… by @jasonmadigan in #1634
• adding note for using custom gateway controller names when installing… by @Patryk-Stefanski in #1623
• update kuadrant docs page with TRLP streaming options by @Patryk-Stefanski in #1636
• fixup: use g.Expect in eventually block by @KevFan in #1635
• initial CLAUDE.md by @eguzki in #1631
• fix: oidc policy client secret references. by @crstrn13 in #1652
• Reference images from repo relatively by @david-martin in #1677
• observability: authorino servicemonitor by @eguzki in #1616
• feat: added observability config for wasm. by @crstrn13 in #1698
• RELEASE.md: approval from at least one member of the QE team by @eguzki in #1707
• Add apiproduct apikey to kuadrant by @Patryk-Stefanski in #1700
• docs: use correct apiVersion in examples by @KevFan in #1708
• adding make targets for testing olm/helm installations by @Patryk-Stefanski in #1709
• console-plugin: enable by default on ocp by @jasonmadigan in #1720
• CONNLINK-645: mTLS not working on OCP 4.19+ by default by @eguzki in #1726
• update devportal manifests: Discovered authscheme by @eguzki in #1730
• fixup: disable pprof server on opm by @KevFan in #1729
• Use envars for controlling console plugin image based on openshift version by @Patryk-Stefanski in #1725
• sync apiproducts after oidc support has been added by @Patryk-Stefanski in #1735
• remove unused kube-rbac-proxy sidecar manifest by @eguzki in #1736
• fix: manifests by @KevFan in #1739
• Add developer portal controller to release files and workflows by @Patryk-Stefanski in #1734
• Add env variable to set default dns TTL by @azgabur in #1668
• Fix flakey OOP log test by @adam-cattermole in #1744
• Minor tracing changes by @adam-cattermole in #1748
• docs: kuadrant operator metrics by @KevFan in #1751
• use proper dns cli name by @maksymvavilov in #1756
• Fix release scripts by @adam-cattermole in #1758
• Missing env vars for release bundle build by @adam-cattermole in #1760
• [Release] Kuadrant Operator v1.4.0-rc1 by @kuadrant-dev in #1761
• Prepare release v1.4.0 GA by @adam-cattermole in #1762

Full Changelog: v1.3.1...v1.4.0

v1.4.0-rc1

This release enables installations of Authorino Operator v0.23.0, Limitador Operator v0.17.0, DNS Operator v0.16.0, WASM Shim v0.12.0, ConsolePlugin v0.3.4 and Developer Portal Controller v0.1.0

What's Changed

Exciting New Features 🎉

• feat: tracing foundation by @KevFan in #1670
• docs: go docs for pkg by @KevFan in #1588
• feat: configure wasm with tracing config by @KevFan in #1710
• feat: policy spans and tracking merging policies by @KevFan in #1704
• feat: track policies sources in wasmplugin config by @KevFan in #1706
• refactor: create tracing filter only when gateway has an effective policy by @KevFan in #1711
• go: bump to v1.25.3 by @KevFan in #1715
• feat: metrics for enforced policies and total policies by @KevFan in #1712
• makefile: refactor dependency tooling install by @KevFan in #1718
• feat: set tracing config via kuadrant cr by @KevFan in #1738
• go: bump to v1.25.5 by @eguzki in #1743
• feat: propagate trace via annnotation for limitador cr & auth configs by @KevFan in #1717
• fix: test flakes by @KevFan in #1742

Bug Fixing 🐞

• Revering OIDCPolicy clientSecret setting by @didierofrivia in #1633

Other Changes

• Update sail-operator and istio to v1.27.1 by @adam-cattermole in #1621
• docs: planpolicy by @KevFan in #1618
• docs: extensions overview by @KevFan in #1601
• [OIDC Policy] Secure storing client secret by @didierofrivia in #1595
• fixing a small typo by @jasonmadigan in #1630
• [docs] OIDCPolicy extension by @didierofrivia in #1624
• align trlp validation steps with those of rlp - fixes a noisy reconci… by @jasonmadigan in #1634
• adding note for using custom gateway controller names when installing… by @Patryk-Stefanski in #1623
• update kuadrant docs page with TRLP streaming options by @Patryk-Stefanski in #1636
• fixup: use g.Expect in eventually block by @KevFan in #1635
• initial CLAUDE.md by @eguzki in #1631
• fix: oidc policy client secret references. by @crstrn13 in #1652
• Reference images from repo relatively by @david-martin in #1677
• observability: authorino servicemonitor by @eguzki in #1616
• feat: added observability config for wasm. by @crstrn13 in #1698
• RELEASE.md: approval from at least one member of the QE team by @eguzki in #1707
• Add apiproduct apikey to kuadrant by @Patryk-Stefanski in #1700
• docs: use correct apiVersion in examples by @KevFan in #1708
• adding make targets for testing olm/helm installations by @Patryk-Stefanski in #1709
• console-plugin: enable by default on ocp by @jasonmadigan in #1720
• CONNLINK-645: mTLS not working on OCP 4.19+ by default by @eguzki in #1726
• update devportal manifests: Discovered authscheme by @eguzki in #1730
• fixup: disable pprof server on opm by @KevFan in #1729
• Use envars for controlling console plugin image based on openshift version by @Patryk-Stefanski in #1725
• sync apiproducts after oidc support has been added by @Patryk-Stefanski in #1735
• remove unused kube-rbac-proxy sidecar manifest by @eguzki in #1736
• fix: manifests by @KevFan in #1739
• Add developer portal controller to release files and workflows by @Patryk-Stefanski in #1734
• Add env variable to set default dns TTL by @azgabur in #1668
• Fix flakey OOP log test by @adam-cattermole in #1744
• Minor tracing changes by @adam-cattermole in #1748
• docs: kuadrant operator metrics by @KevFan in #1751
• use proper dns cli name by @maksymvavilov in #1756
• Fix release scripts by @adam-cattermole in #1758
• Missing env vars for release bundle build by @adam-cattermole in #1760
• [Release] Kuadrant Operator v1.4.0-rc1 by @kuadrant-dev in #1761

Full Changelog: v1.3.1...v1.4.0-rc1

v1.3.1

This release enables installations of Authorino Operator v0.22.0, Limitador Operator v0.16.0, DNS Operator v0.15.0, WASM Shim v0.11.1 and ConsolePlugin v0.2.2

What's Changed

Other Changes

• update kuadrant docs page with TRLP streaming options v.1.3.x by @Patryk-Stefanski in #1637
• [backport] align trlp validation steps with those of rlp by @eguzki in #1675
• Reference images from repo relatively by @david-martin in #1678
• Prepare release 1.3.1-rc1 by @eguzki in #1676

Full Changelog: v1.3.0...v1.3.1

v1.3.0

This release enables installations of Authorino Operator v0.22.0, Limitador Operator v0.16.0, DNS Operator v0.15.0, WASM Shim v0.11.0 and ConsolePlugin v0.2.2

What's Changed

Exciting New Features 🎉

• Adding mTLS kuadrant installation mode by @laurafitzgerald in #1170
• Go v1.23 and bump k8s.io deps by @guicassolato in #1196
• mTLS configuration by component by @eguzki in #1329
• refactor: cel validation for tlspolicy issuer kind by @KevFan in #1393
• gha: use go version from go.mod by @KevFan in #1446
• Update TRLP to make use of new report method of the rate limiting service by @eguzki in #1473
• Using JSON Pointer in responseBodyJSON() CEL function by @eguzki in #1470
• add ext cel functions to cel validator opts by @Patryk-Stefanski in #1535
• Bring cel evalution errors to TRLP status by @eguzki in #1538
• Bring cel evalution errors to AuthPolicy status by @eguzki in #1545
• feat: set limitador metric labels default by @KevFan in #1547
• feat: propagate authorino jwks uri changes by @KevFan in #1572
• observability: limitador podmonitor by @eguzki in #1580
• Telemetrypolicy and token metrics documentation by @eguzki in #1593

Bug Fixing 🐞

• Fix istio envoy filter compare method by @eguzki in #1256
• fix: remove hardcoded /baker path by @KevFan in #1575

Other Changes

• UPDATE: Workflow inputs order by @Boomatang in #1267
• feat(extensions): Emerging EmbeddedPlugins by @alexsnaps in #1257
• Revert "revert PR #1145" by @alexsnaps in #1268
• remove unuseful janitors as final steps by @eguzki in #1255
• Extensions OOP Logging by @didierofrivia in #1261
• Add initial parts to build and deploy an embedded extension by @adam-cattermole in #1273
• feat(cel): Kuadrant library by @alexsnaps in #1258
• updating CoreDNS POC doc to act as developer preview guide by @philbrookes in #1274
• fix(#1282): 'simply' look variable up by expression in descriptors[0] by @alexsnaps in #1283
• Update documentation to reflect the new method of mTLS configuration by @eguzki in #1276
• solution for fatal error when checking CRDs installed by @maleck13 in #1265
• Bump golang.org/x/net from 0.34.0 to 0.38.0 by @dependabot[bot] in #1289
• delete unwanted service and pod monitors during observability reconciliation by @Patryk-Stefanski in #1288
• OOP Logging - Round 2 by @didierofrivia in #1292
• fix codecov tests by @eguzki in #1277
• mTLS configuration effective only when effective ratelimit and auth policies are in place by @eguzki in #1286
• feat(extensions): Wiring extensions into the state-of-the-world by @alexsnaps in #1328
• Extensions client, initial parts by @adam-cattermole in #1345
• feat(extension): Guard the DAG in a blocking atomic ref by @alexsnaps in #1351
• feat(extensions): Adjust layout and update protobuf definitions by @adam-cattermole in #1353
• Remove gatewayapi provider servicemonitors from observability reconciler by @Patryk-Stefanski in #1352
• Extension wire by @alexsnaps in #1357
• UPDATE: RELEASE.md by @Boomatang in #1291
• Extension subscriptions by @alexsnaps in #1360
• Extensions: more wiring by @adam-cattermole in #1364
• docs: CoreDNS on OpenShift (AWS) by @mikenairn in #1367
• v1 is deprecated - move to v2 by @maksymvavilov in #1371
• extend .proto definitions by @maksymvavilov in #1362
• Bumped Gateway API to v1.2.1. Bumped EnvoyGateway to v1.2.6 by @eguzki in #1370
• Removing references to gateway service monitors which we no longer create by @Patryk-Stefanski in #1381
• tool: upgrade golangci to v2.1.6 by @KevFan in #1383
• FIX: Return error bug by @Boomatang in #1382
• Fix links to GatewayApi docs in reference docs by @azgabur in #1394
• Updated DNS Policy Link by @orlafoley in #1396
• Updated Getting Started URL by @orlafoley in #1395
• Links reformatted on DNS load balancing page by @orlafoley in #1398
• DNS Policy Reference Page Updates by @orlafoley in #1400
• v1alpha1: TokenRateLimitPolicy by @jasonmadigan in #1379
• Extensions: fix subscription response trigger by @adam-cattermole in #1408
• AuthPolicy Documentation by @orlafoley in #1399
• AuthPolicy Page - Menu Link Moved by @orlafoley in #1404
• Dashboard HTTP 200 codes in green #1275 by @orlafoley in #1377
• OIDC Policy by @didierofrivia in #1356
• Enabling extensions by @didierofrivia in #1411
• Update TRLP to make use of new check limit service by @Patryk-Stefanski in #1409
• Fixing make catalog target by @Patryk-Stefanski in #1416
• Extension bind permissions by @adam-cattermole in #1418
• set default channel value in makefile for make catalog by @Patryk-Stefanski in #1419
• PlanPolicy extension by @adam-cattermole in #1391
• add verify-all make target by @maksymvavilov in #1427
• Allows for validating expressions, making sure they only use root bindings (and types) introduced by a policy by @alexsnaps in #1389
• Subscriptions configured for each extension by @adam-cattermole in #1440
• Go 1.24 and controller-runtime update by @mikenairn in #1439
• Flake. Patch instead of update to avoid conflict. by @david-martin in #1450
• [CONNLINK-188] 🔒️ Enhance the use of Security Contexts in kube-state-metrics 🔒️ by @eguzki in #1445
• fix panic in unit test by @maksymvavilov in #1454
• Extensions Controller reconciling resources by @didierofrivia in #1451
• Optional provider ref in DNSPolicy by @maksymvavilov in #1426
• Add pre-commit make target by @Patryk-Stefanski in #1448
• RateLimitPolicy Table of Contents by @orlafoley in #1401
• dns policy controller test - bump timeout for deletion of dns records by @Patryk-Stefanski in #1464
• Console plugin PF6 - version aware deployment by @Patryk-Stefanski in #1407
• properly fail unit test by @maksymvavilov in #1458
• Extension subscription and mutator deletion by @adam-cattermole in #1455
• [make] Disabling extensions on run target by @didierofrivia in #1422
• [CONNLINK-187] [CONNLINK-189] Enhance security contexts by @eg...

v1.3.0-rc2

This release enables installations of Authorino Operator v0.22.0, Limitador Operator v0.16.0, DNS Operator v0.15.0, WASM Shim v0.11.0 and ConsolePlugin v0.2.2

What's Changed

Exciting New Features 🎉

• Adding mTLS kuadrant installation mode by @laurafitzgerald in #1170
• Go v1.23 and bump k8s.io deps by @guicassolato in #1196
• mTLS configuration by component by @eguzki in #1329
• refactor: cel validation for tlspolicy issuer kind by @KevFan in #1393
• gha: use go version from go.mod by @KevFan in #1446
• Update TRLP to make use of new report method of the rate limiting service by @eguzki in #1473
• Using JSON Pointer in responseBodyJSON() CEL function by @eguzki in #1470
• add ext cel functions to cel validator opts by @Patryk-Stefanski in #1535
• Bring cel evalution errors to TRLP status by @eguzki in #1538
• Bring cel evalution errors to AuthPolicy status by @eguzki in #1545
• feat: set limitador metric labels default by @KevFan in #1547
• feat: propagate authorino jwks uri changes by @KevFan in #1572
• observability: limitador podmonitor by @eguzki in #1580
• Telemetrypolicy and token metrics documentation by @eguzki in #1593

Bug Fixing 🐞

• Fix istio envoy filter compare method by @eguzki in #1256
• fix: remove hardcoded /baker path by @KevFan in #1575

Other Changes

• UPDATE: Workflow inputs order by @Boomatang in #1267
• feat(extensions): Emerging EmbeddedPlugins by @alexsnaps in #1257
• Revert "revert PR #1145" by @alexsnaps in #1268
• remove unuseful janitors as final steps by @eguzki in #1255
• Extensions OOP Logging by @didierofrivia in #1261
• Add initial parts to build and deploy an embedded extension by @adam-cattermole in #1273
• feat(cel): Kuadrant library by @alexsnaps in #1258
• updating CoreDNS POC doc to act as developer preview guide by @philbrookes in #1274
• fix(#1282): 'simply' look variable up by expression in descriptors[0] by @alexsnaps in #1283
• Update documentation to reflect the new method of mTLS configuration by @eguzki in #1276
• solution for fatal error when checking CRDs installed by @maleck13 in #1265
• Bump golang.org/x/net from 0.34.0 to 0.38.0 by @dependabot[bot] in #1289
• delete unwanted service and pod monitors during observability reconciliation by @Patryk-Stefanski in #1288
• OOP Logging - Round 2 by @didierofrivia in #1292
• fix codecov tests by @eguzki in #1277
• mTLS configuration effective only when effective ratelimit and auth policies are in place by @eguzki in #1286
• feat(extensions): Wiring extensions into the state-of-the-world by @alexsnaps in #1328
• Extensions client, initial parts by @adam-cattermole in #1345
• feat(extension): Guard the DAG in a blocking atomic ref by @alexsnaps in #1351
• feat(extensions): Adjust layout and update protobuf definitions by @adam-cattermole in #1353
• Remove gatewayapi provider servicemonitors from observability reconciler by @Patryk-Stefanski in #1352
• Extension wire by @alexsnaps in #1357
• UPDATE: RELEASE.md by @Boomatang in #1291
• Extension subscriptions by @alexsnaps in #1360
• Extensions: more wiring by @adam-cattermole in #1364
• docs: CoreDNS on OpenShift (AWS) by @mikenairn in #1367
• v1 is deprecated - move to v2 by @maksymvavilov in #1371
• extend .proto definitions by @maksymvavilov in #1362
• Bumped Gateway API to v1.2.1. Bumped EnvoyGateway to v1.2.6 by @eguzki in #1370
• Removing references to gateway service monitors which we no longer create by @Patryk-Stefanski in #1381
• tool: upgrade golangci to v2.1.6 by @KevFan in #1383
• FIX: Return error bug by @Boomatang in #1382
• Fix links to GatewayApi docs in reference docs by @azgabur in #1394
• Updated DNS Policy Link by @orlafoley in #1396
• Updated Getting Started URL by @orlafoley in #1395
• Links reformatted on DNS load balancing page by @orlafoley in #1398
• DNS Policy Reference Page Updates by @orlafoley in #1400
• v1alpha1: TokenRateLimitPolicy by @jasonmadigan in #1379
• Extensions: fix subscription response trigger by @adam-cattermole in #1408
• AuthPolicy Documentation by @orlafoley in #1399
• AuthPolicy Page - Menu Link Moved by @orlafoley in #1404
• Dashboard HTTP 200 codes in green #1275 by @orlafoley in #1377
• OIDC Policy by @didierofrivia in #1356
• Enabling extensions by @didierofrivia in #1411
• Update TRLP to make use of new check limit service by @Patryk-Stefanski in #1409
• Fixing make catalog target by @Patryk-Stefanski in #1416
• Extension bind permissions by @adam-cattermole in #1418
• set default channel value in makefile for make catalog by @Patryk-Stefanski in #1419
• PlanPolicy extension by @adam-cattermole in #1391
• add verify-all make target by @maksymvavilov in #1427
• Allows for validating expressions, making sure they only use root bindings (and types) introduced by a policy by @alexsnaps in #1389
• Subscriptions configured for each extension by @adam-cattermole in #1440
• Go 1.24 and controller-runtime update by @mikenairn in #1439
• Flake. Patch instead of update to avoid conflict. by @david-martin in #1450
• [CONNLINK-188] 🔒️ Enhance the use of Security Contexts in kube-state-metrics 🔒️ by @eguzki in #1445
• fix panic in unit test by @maksymvavilov in #1454
• Extensions Controller reconciling resources by @didierofrivia in #1451
• Optional provider ref in DNSPolicy by @maksymvavilov in #1426
• Add pre-commit make target by @Patryk-Stefanski in #1448
• RateLimitPolicy Table of Contents by @orlafoley in #1401
• dns policy controller test - bump timeout for deletion of dns records by @Patryk-Stefanski in #1464
• Console plugin PF6 - version aware deployment by @Patryk-Stefanski in #1407
• properly fail unit test by @maksymvavilov in #1458
• Extension subscription and mutator deletion by @adam-cattermole in #1455
• [make] Disabling extensions on run target by @didierofrivia in #1422
• [CONNLINK-187] [CONNLINK-189] Enhance security contexts by...

v1.3.0-rc1

This release enables installations of Authorino Operator v0.22.0, Limitador Operator v0.16.0, DNS Operator v0.15.0, WASM Shim v0.11.0 and ConsolePlugin v0.2.2

What's Changed

Exciting New Features 🎉

• Adding mTLS kuadrant installation mode by @laurafitzgerald in #1170
• Go v1.23 and bump k8s.io deps by @guicassolato in #1196
• mTLS configuration by component by @eguzki in #1329
• refactor: cel validation for tlspolicy issuer kind by @KevFan in #1393
• gha: use go version from go.mod by @KevFan in #1446
• Update TRLP to make use of new report method of the rate limiting service by @eguzki in #1473
• Using JSON Pointer in responseBodyJSON() CEL function by @eguzki in #1470
• add ext cel functions to cel validator opts by @Patryk-Stefanski in #1535
• Bring cel evalution errors to TRLP status by @eguzki in #1538
• Bring cel evalution errors to AuthPolicy status by @eguzki in #1545
• feat: set limitador metric labels default by @KevFan in #1547
• feat: propagate authorino jwks uri changes by @KevFan in #1572
• Observility: limitador podmonitor by @eguzki in #1580
• Telemetrypolicy and token metrics documentation by @eguzki in #1593

Bug Fixing 🐞

• Fix istio envoy filter compare method by @eguzki in #1256
• fix: remove hardcoded /baker path by @KevFan in #1575

Other Changes

• UPDATE: Workflow inputs order by @Boomatang in #1267
• feat(extensions): Emerging EmbeddedPlugins by @alexsnaps in #1257
• Revert "revert PR #1145" by @alexsnaps in #1268
• remove unuseful janitors as final steps by @eguzki in #1255
• Extensions OOP Logging by @didierofrivia in #1261
• Add initial parts to build and deploy an embedded extension by @adam-cattermole in #1273
• feat(cel): Kuadrant library by @alexsnaps in #1258
• updating CoreDNS POC doc to act as developer preview guide by @philbrookes in #1274
• fix(#1282): 'simply' look variable up by expression in descriptors[0] by @alexsnaps in #1283
• Update documentation to reflect the new method of mTLS configuration by @eguzki in #1276
• solution for fatal error when checking CRDs installed by @maleck13 in #1265
• Bump golang.org/x/net from 0.34.0 to 0.38.0 by @dependabot[bot] in #1289
• delete unwanted service and pod monitors during observability reconciliation by @Patryk-Stefanski in #1288
• OOP Logging - Round 2 by @didierofrivia in #1292
• fix codecov tests by @eguzki in #1277
• mTLS configuration effective only when effective ratelimit and auth policies are in place by @eguzki in #1286
• feat(extensions): Wiring extensions into the state-of-the-world by @alexsnaps in #1328
• Extensions client, initial parts by @adam-cattermole in #1345
• feat(extension): Guard the DAG in a blocking atomic ref by @alexsnaps in #1351
• feat(extensions): Adjust layout and update protobuf definitions by @adam-cattermole in #1353
• Remove gatewayapi provider servicemonitors from observability reconciler by @Patryk-Stefanski in #1352
• Extension wire by @alexsnaps in #1357
• UPDATE: RELEASE.md by @Boomatang in #1291
• Extension subscriptions by @alexsnaps in #1360
• Extensions: more wiring by @adam-cattermole in #1364
• docs: CoreDNS on OpenShift (AWS) by @mikenairn in #1367
• v1 is deprecated - move to v2 by @maksymvavilov in #1371
• extend .proto definitions by @maksymvavilov in #1362
• Bumped Gateway API to v1.2.1. Bumped EnvoyGateway to v1.2.6 by @eguzki in #1370
• Removing references to gateway service monitors which we no longer create by @Patryk-Stefanski in #1381
• tool: upgrade golangci to v2.1.6 by @KevFan in #1383
• FIX: Return error bug by @Boomatang in #1382
• Fix links to GatewayApi docs in reference docs by @azgabur in #1394
• Updated DNS Policy Link by @orlafoley in #1396
• Updated Getting Started URL by @orlafoley in #1395
• Links reformatted on DNS load balancing page by @orlafoley in #1398
• DNS Policy Reference Page Updates by @orlafoley in #1400
• v1alpha1: TokenRateLimitPolicy by @jasonmadigan in #1379
• Extensions: fix subscription response trigger by @adam-cattermole in #1408
• AuthPolicy Documentation by @orlafoley in #1399
• AuthPolicy Page - Menu Link Moved by @orlafoley in #1404
• Dashboard HTTP 200 codes in green #1275 by @orlafoley in #1377
• OIDC Policy by @didierofrivia in #1356
• Enabling extensions by @didierofrivia in #1411
• Update TRLP to make use of new check limit service by @Patryk-Stefanski in #1409
• Fixing make catalog target by @Patryk-Stefanski in #1416
• Extension bind permissions by @adam-cattermole in #1418
• set default channel value in makefile for make catalog by @Patryk-Stefanski in #1419
• PlanPolicy extension by @adam-cattermole in #1391
• add verify-all make target by @maksymvavilov in #1427
• Allows for validating expressions, making sure they only use root bindings (and types) introduced by a policy by @alexsnaps in #1389
• Subscriptions configured for each extension by @adam-cattermole in #1440
• Go 1.24 and controller-runtime update by @mikenairn in #1439
• Flake. Patch instead of update to avoid conflict. by @david-martin in #1450
• [CONNLINK-188] 🔒️ Enhance the use of Security Contexts in kube-state-metrics 🔒️ by @eguzki in #1445
• fix panic in unit test by @maksymvavilov in #1454
• Extensions Controller reconciling resources by @didierofrivia in #1451
• Optional provider ref in DNSPolicy by @maksymvavilov in #1426
• Add pre-commit make target by @Patryk-Stefanski in #1448
• RateLimitPolicy Table of Contents by @orlafoley in #1401
• dns policy controller test - bump timeout for deletion of dns records by @Patryk-Stefanski in #1464
• Console plugin PF6 - version aware deployment by @Patryk-Stefanski in #1407
• properly fail unit test by @maksymvavilov in #1458
• Extension subscription and mutator deletion by @adam-cattermole in #1455
• [make] Disabling extensions on run target by @didierofrivia in #1422
• [CONNLINK-187] [CONNLINK-189] Enhance security contexts by @...

v1.3.0-alpha2

This release enables installations of Authorino Operator v0.21.0, Limitador Operator v0.15.0, DNS Operator v0.14.0, WASM Shim v0.10.0 and ConsolePlugin v0.2.1

What's Changed

Exciting New Features 🎉

• Adding mTLS kuadrant installation mode by @laurafitzgerald in #1170
• Go v1.23 and bump k8s.io deps by @guicassolato in #1196
• mTLS configuration by component by @eguzki in #1329
• refactor: cel validation for tlspolicy issuer kind by @KevFan in #1393
• gha: use go version from go.mod by @KevFan in #1446
• Update TRLP to make use of new report method of the rate limiting service by @eguzki in #1473
• Using JSON Pointer in responseBodyJSON() CEL function by @eguzki in #1470
• add ext cel functions to cel validator opts by @Patryk-Stefanski in #1535
• Bring cel evalution errors to TRLP status by @eguzki in #1538
• Bring cel evalution errors to AuthPolicy status by @eguzki in #1545

Bug Fixing 🐞

• Fix istio envoy filter compare method by @eguzki in #1256

Other Changes

• UPDATE: Workflow inputs order by @Boomatang in #1267
• feat(extensions): Emerging EmbeddedPlugins by @alexsnaps in #1257
• Revert "revert PR #1145" by @alexsnaps in #1268
• remove unuseful janitors as final steps by @eguzki in #1255
• Extensions OOP Logging by @didierofrivia in #1261
• Add initial parts to build and deploy an embedded extension by @adam-cattermole in #1273
• feat(cel): Kuadrant library by @alexsnaps in #1258
• updating CoreDNS POC doc to act as developer preview guide by @philbrookes in #1274
• fix(#1282): 'simply' look variable up by expression in descriptors[0] by @alexsnaps in #1283
• Update documentation to reflect the new method of mTLS configuration by @eguzki in #1276
• solution for fatal error when checking CRDs installed by @maleck13 in #1265
• Bump golang.org/x/net from 0.34.0 to 0.38.0 by @dependabot[bot] in #1289
• delete unwanted service and pod monitors during observability reconciliation by @Patryk-Stefanski in #1288
• OOP Logging - Round 2 by @didierofrivia in #1292
• fix codecov tests by @eguzki in #1277
• mTLS configuration effective only when effective ratelimit and auth policies are in place by @eguzki in #1286
• feat(extensions): Wiring extensions into the state-of-the-world by @alexsnaps in #1328
• Extensions client, initial parts by @adam-cattermole in #1345
• feat(extension): Guard the DAG in a blocking atomic ref by @alexsnaps in #1351
• feat(extensions): Adjust layout and update protobuf definitions by @adam-cattermole in #1353
• Remove gatewayapi provider servicemonitors from observability reconciler by @Patryk-Stefanski in #1352
• Extension wire by @alexsnaps in #1357
• UPDATE: RELEASE.md by @Boomatang in #1291
• Extension subscriptions by @alexsnaps in #1360
• Extensions: more wiring by @adam-cattermole in #1364
• docs: CoreDNS on OpenShift (AWS) by @mikenairn in #1367
• v1 is deprecated - move to v2 by @maksymvavilov in #1371
• extend .proto definitions by @maksymvavilov in #1362
• Bumped Gateway API to v1.2.1. Bumped EnvoyGateway to v1.2.6 by @eguzki in #1370
• Removing references to gateway service monitors which we no longer create by @Patryk-Stefanski in #1381
• tool: upgrade golangci to v2.1.6 by @KevFan in #1383
• FIX: Return error bug by @Boomatang in #1382
• Fix links to GatewayApi docs in reference docs by @azgabur in #1394
• Updated DNS Policy Link by @orlafoley in #1396
• Updated Getting Started URL by @orlafoley in #1395
• Links reformatted on DNS load balancing page by @orlafoley in #1398
• DNS Policy Reference Page Updates by @orlafoley in #1400
• v1alpha1: TokenRateLimitPolicy by @jasonmadigan in #1379
• Extensions: fix subscription response trigger by @adam-cattermole in #1408
• AuthPolicy Documentation by @orlafoley in #1399
• AuthPolicy Page - Menu Link Moved by @orlafoley in #1404
• Dashboard HTTP 200 codes in green #1275 by @orlafoley in #1377
• OIDC Policy by @didierofrivia in #1356
• Enabling extensions by @didierofrivia in #1411
• Update TRLP to make use of new check limit service by @Patryk-Stefanski in #1409
• Fixing make catalog target by @Patryk-Stefanski in #1416
• Extension bind permissions by @adam-cattermole in #1418
• set default channel value in makefile for make catalog by @Patryk-Stefanski in #1419
• PlanPolicy extension by @adam-cattermole in #1391
• add verify-all make target by @maksymvavilov in #1427
• Allows for validating expressions, making sure they only use root bindings (and types) introduced by a policy by @alexsnaps in #1389
• Subscriptions configured for each extension by @adam-cattermole in #1440
• Go 1.24 and controller-runtime update by @mikenairn in #1439
• Flake. Patch instead of update to avoid conflict. by @david-martin in #1450
• [CONNLINK-188] 🔒️ Enhance the use of Security Contexts in kube-state-metrics 🔒️ by @eguzki in #1445
• fix panic in unit test by @maksymvavilov in #1454
• Extensions Controller reconciling resources by @didierofrivia in #1451
• Optional provider ref in DNSPolicy by @maksymvavilov in #1426
• Add pre-commit make target by @Patryk-Stefanski in #1448
• RateLimitPolicy Table of Contents by @orlafoley in #1401
• dns policy controller test - bump timeout for deletion of dns records by @Patryk-Stefanski in #1464
• Console plugin PF6 - version aware deployment by @Patryk-Stefanski in #1407
• properly fail unit test by @maksymvavilov in #1458
• Extension subscription and mutator deletion by @adam-cattermole in #1455
• [make] Disabling extensions on run target by @didierofrivia in #1422
• [CONNLINK-187] [CONNLINK-189] Enhance security contexts by @eguzki in #1444
• Refactor extension client by @adam-cattermole in #1468
• Refactor the extensions to use base for logger/client/scheme by @adam-cattermole in #1469
• Makefile deploy target does not deploy dependencies by @eguzki in #1471
• [extensions] Getting updates from created resources by @didierofrivia in https://github.com/Kuadrant/kuadrant-operato...

v1.3.0-alpha1

This release enables installations of Authorino Operator v0.19.0, Limitador Operator v0.14.0, DNS Operator v0.14.0, WASM Shim v0.9.0 and ConsolePlugin v0.1.5

What's Changed

Exciting New Features 🎉

• Adding mTLS kuadrant installation mode by @laurafitzgerald in #1170
• Go v1.23 and bump k8s.io deps by @guicassolato in #1196
• mTLS configuration by component by @eguzki in #1329
• refactor: cel validation for tlspolicy issuer kind by @KevFan in #1393

Bug Fixing 🐞

• Fix istio envoy filter compare method by @eguzki in #1256

Other Changes

• UPDATE: Workflow inputs order by @Boomatang in #1267
• feat(extensions): Emerging EmbeddedPlugins by @alexsnaps in #1257
• Revert "revert PR #1145" by @alexsnaps in #1268
• remove unuseful janitors as final steps by @eguzki in #1255
• Extensions OOP Logging by @didierofrivia in #1261
• Add initial parts to build and deploy an embedded extension by @adam-cattermole in #1273
• feat(cel): Kuadrant library by @alexsnaps in #1258
• updating CoreDNS POC doc to act as developer preview guide by @philbrookes in #1274
• fix(#1282): 'simply' look variable up by expression in descriptors[0] by @alexsnaps in #1283
• Update documentation to reflect the new method of mTLS configuration by @eguzki in #1276
• solution for fatal error when checking CRDs installed by @maleck13 in #1265
• Bump golang.org/x/net from 0.34.0 to 0.38.0 by @dependabot[bot] in #1289
• delete unwanted service and pod monitors during observability reconciliation by @Patryk-Stefanski in #1288
• OOP Logging - Round 2 by @didierofrivia in #1292
• fix codecov tests by @eguzki in #1277
• mTLS configuration effective only when effective ratelimit and auth policies are in place by @eguzki in #1286
• feat(extensions): Wiring extensions into the state-of-the-world by @alexsnaps in #1328
• Extensions client, initial parts by @adam-cattermole in #1345
• feat(extension): Guard the DAG in a blocking atomic ref by @alexsnaps in #1351
• feat(extensions): Adjust layout and update protobuf definitions by @adam-cattermole in #1353
• Remove gatewayapi provider servicemonitors from observability reconciler by @Patryk-Stefanski in #1352
• Extension wire by @alexsnaps in #1357
• UPDATE: RELEASE.md by @Boomatang in #1291
• Extension subscriptions by @alexsnaps in #1360
• Extensions: more wiring by @adam-cattermole in #1364
• docs: CoreDNS on OpenShift (AWS) by @mikenairn in #1367
• v1 is deprecated - move to v2 by @maksymvavilov in #1371
• extend .proto definitions by @maksymvavilov in #1362
• Bumped Gateway API to v1.2.1. Bumped EnvoyGateway to v1.2.6 by @eguzki in #1370
• Removing references to gateway service monitors which we no longer create by @Patryk-Stefanski in #1381
• tool: upgrade golangci to v2.1.6 by @KevFan in #1383
• FIX: Return error bug by @Boomatang in #1382
• Fix links to GatewayApi docs in reference docs by @azgabur in #1394
• Updated DNS Policy Link by @orlafoley in #1396
• Updated Getting Started URL by @orlafoley in #1395
• Links reformatted on DNS load balancing page by @orlafoley in #1398
• DNS Policy Reference Page Updates by @orlafoley in #1400
• v1alpha1: TokenRateLimitPolicy by @jasonmadigan in #1379
• Extensions: fix subscription response trigger by @adam-cattermole in #1408
• AuthPolicy Documentation by @orlafoley in #1399
• AuthPolicy Page - Menu Link Moved by @orlafoley in #1404
• Dashboard HTTP 200 codes in green #1275 by @orlafoley in #1377
• OIDC Policy by @didierofrivia in #1356
• Enabling extensions by @didierofrivia in #1411
• [Release] Kuadrant Operator v1.3.0-alpha1 by @kuadrant-dev in #1413

New Contributors

• @azgabur made their first contribution in #1394
• @orlafoley made their first contribution in #1396

Full Changelog: v1.2.0...v1.3.0-alpha1