v1.22.0

Highlights

• New SpiceDB versions
• Added support for watching endpointslices for peers

What's Changed

• chore: fix linting failures by @miparnisari in #383
• build: add -race to unit tests by @miparnisari in #382
• infra: Add v1.47.1 to the update graph by @barakmich in #388
• chore: use go 1.25.5 by @miparnisari in #394
• support watching endpointslices for peers by @ecordell in #395

New Contributors

• @miparnisari made their first contribution in #383
• @barakmich made their first contribution in #388

Full Changelog: v1.21.0...v1.22.0

v1.21.0

Highlights

• Added a PodDisruptionBudget that can help prevent service degradation when deployments would also result in the underlying nodes rolling
• Update the update graph to include the most recent release of SpiceDB

What's Changed

• Generate a PDB that protects SpiceDB replicas by @ecordell in #366
• allow overriding the base-image defined in the update graph by @ecordell in #367
• switch to maxUnavailable=1 and create PDB even if replicas=1 by @vroldanbet in #368
• feat: Add common labels to resources by @adinhodovic in #370
• fix: Slugify version labels by @adinhodovic in #374
• fix: handle boolean values in passthrough config by @THE-BRAHMA in #373
• Bump actions/checkout from 4 to 5 in the actions-version group by @dependabot[bot] in #376
• Bump golang from 1.24-alpine to 1.25-alpine in the docker-version group by @dependabot[bot] in #375
• updates to use same Spanner SDK and emulator as SpiceDB by @vroldanbet in #378
• Add v1.45.4 to update graph by @tstirrat15 in #381

New Contributors

• @adinhodovic made their first contribution in #370
• @THE-BRAHMA made their first contribution in #373

Full Changelog: v1.20.1...v1.21.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.21.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.21.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.21.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.21.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.21.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.21.0
• quay.io/authzed/spicedb-operator:v1.21.0
• ghcr.io/authzed/spicedb-operator:v1.21.0

v1.20.1

What's Changed

• Fix golangci-lint config by @tstirrat15 in #365
• update golang.org/x/crypto to v0.38.0 by @jackwellsxyz in #364

New Contributors

• @jackwellsxyz made their first contribution in #364

Full Changelog: v1.20.0...v1.20.1

v1.20.0

What's Changed

• Bump the gomod-version group with 9 updates by @dependabot in #356
• Prevent patches from patching out required fields by @ecordell in #360
• propose v1.42.1 in the stable channel by @ecordell in #361

Full Changelog: v1.19.0...v1.20.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.20.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.20.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.20.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.20.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.20.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.20.0
• quay.io/authzed/spicedb-operator:v1.20.0
• ghcr.io/authzed/spicedb-operator:v1.20.0

v1.19.0

Highlights

SpiceDB 1.40.1 added to the stable channel!

What's Changed

• Bump golang from 1.23-alpine to 1.24-alpine in the docker-version group by @dependabot in #352
• Bump the gomod-version group across 1 directory with 11 updates by @dependabot in #353
• Add 1.40.1 to update graph by @tstirrat15 in #355

New Contributors

• @tstirrat15 made their first contribution in #355

Full Changelog: v1.18.0...v1.19.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.19.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.19.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.19.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.19.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.19.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.19.0
• quay.io/authzed/spicedb-operator:v1.19.0
• ghcr.io/authzed/spicedb-operator:v1.19.0

v1.18.0

Highlights

SpiceDB v1.39.1 added to the stable channel!

What's Changed

• Update to latest Ginkgo by @alecmerdler in #342
• bump to go 1.23 by @ecordell in #343
• update tests with newer versions of dbs and kube by @ecordell in #344
• Add SpiceDB v1.39.1 to the update graph by @ecordell in #346

Full Changelog: v1.17.0...v1.18.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.18.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.18.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.18.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.18.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.18.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.18.0
• quay.io/authzed/spicedb-operator:v1.18.0
• ghcr.io/authzed/spicedb-operator:v1.18.0

v1.17.0

Highlights

⚙️ Configure one, all, or several namespaces to be watched with the --watch-namespaces (thanks @sumedha-redd!)
🚀 Adds SpiceDB v1.34.0, v1.35.3, v1.36.2, v1.37.1, and v1.38.0 to the stable channel

What's Changed

• only run codeql on pull requests by @ecordell in #330
• Move validated-update-graph.yaml -> config/update-graph.yaml by @ecordell in #329
• Add watch-namespaces to spicedb-operator cmd by @sumedha-redd in #331
• Fix multi-namespace watches and add a test by @ecordell in #339
• add new releases to stable channel by @ecordell in #340

New Contributors

• @sumedha-redd made their first contribution in #331

Full Changelog: v1.16.1...v1.17.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.17.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.17.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.17.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.17.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.17.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.17.0
• quay.io/authzed/spicedb-operator:v1.17.0
• ghcr.io/authzed/spicedb-operator:v1.17.0

v1.16.1

Highlights

🎉 Adds SpiceDB v1.32.0 and v1.33.1 to the stable channel
⬆️ Kube dependencies updated to v0.30.2
⚠️ Warning: memory usage has increased since the previous release, see #322 for details

What's Changed

• metrics: make metric namespace configurable by @ecordell in #310
• Bump tj-actions/verify-changed-files from 19 to 20 in the actions-version group by @dependabot in #314
• Bump goreleaser/goreleaser-action from 5 to 6 in the actions-version group by @dependabot in #318
• Switch to using OpenAPI metadata to compute SMPs by @ecordell in #320
• fix: cloning a channel copied the edge slice instead of cloning by @ecordell in #321
• Increase default memory requests and limits by @ecordell in #323
• add SpiceDB 1.32 and 1.33.1 by @vroldanbet in #324
• ko release support by @ecordell in #250
• use github token for kustomize github action by @ecordell in #325
• release: updates for goreleaser v2 by @ecordell in #326
• Add update graph to release manifests by @ecordell in #328

Full Changelog: v1.15.0...v1.16.1

Note

Version 1.16.1 is a re-release of 1.16.0 with corrected release manifests.

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.16.1/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.16.1
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.16.1

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.16.1 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.16.1

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.16.1
• quay.io/authzed/spicedb-operator:v1.16.1
• ghcr.io/authzed/spicedb-operator:v1.16.1

v1.16.0

Warning

The default config is missing from this release, to get it working you will need to mount the config file at /opt/operator/config.yaml if you use the default update graph. Please see v1.16.1 for release manifests that include the graph.

Highlights

🎉 Adds SpiceDB v1.32.0 and v1.33.1 to the stable channel
⬆️ Kube dependencies updated to v0.30.2
⚠️ Warning: memory usage has increased since the previous release, see #322 for details

What's Changed

• metrics: make metric namespace configurable by @ecordell in #310
• Bump tj-actions/verify-changed-files from 19 to 20 in the actions-version group by @dependabot in #314
• Bump goreleaser/goreleaser-action from 5 to 6 in the actions-version group by @dependabot in #318
• Switch to using OpenAPI metadata to compute SMPs by @ecordell in #320
• fix: cloning a channel copied the edge slice instead of cloning by @ecordell in #321
• Increase default memory requests and limits by @ecordell in #323
• add SpiceDB 1.32 and 1.33.1 by @vroldanbet in #324
• ko release support by @ecordell in #250
• use github token for kustomize github action by @ecordell in #325
• release: updates for goreleaser v2 by @ecordell in #326

Full Changelog: v1.15.0...v1.16.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.16.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.16.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.16.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.16.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.16.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.16.0
• quay.io/authzed/spicedb-operator:v1.16.0
• ghcr.io/authzed/spicedb-operator:v1.16.0

v1.15.0

What's Changed

• add SpiceDB v1.31.0 to the update graph by @ecordell in #309

Full Changelog: v1.14.1...v1.15.0