Releases: mondoohq/mondoo-operator
Releases · mondoohq/mondoo-operator
v13.0.0-beta6
What's Changed
- 🧹 improved testing and release by @imilchev in #1323
- Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
- Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
- Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
- Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
- Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
- Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
- Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
- 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
- Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
- 🧹 update test matrix by @chris-rock in #1334
- 🧹 remove admission controller by @chris-rock in #1336
- ✨ Pin GitHub actions to hashes by @czunker in #1343
- 🧹 update copyright year by @chris-rock in #1344
- ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
- Replace deprecated --score-threshold by @anurag-2911 in #1340
- ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
- Feature/multiple private registry secrets by @AdamVB in #1339
- 🧹 use qemu for cross builds by @chris-rock in #1346
- fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
- 🧹 improve error handling by @chris-rock in #1348
- 🧹 update documentation by @chris-rock in #1349
- 🐛 fix docker/build-push-action by @chris-rock in #1350
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
- Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
- Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
- Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
- 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
- 🐛 fix service account permissions to support wif scans by @imilchev in #1357
- Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
- Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
- Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
- external cluster setup by @chris-rock in #1358
- ⭐️ publish helm charts to OCI by @chris-rock in #1367
- ⭐️ ecr auth for container images by @chris-rock in #1368
- 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
- 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
- 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
- Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
- ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
- ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
- Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
- 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
- Support image digest in MondooAuditConfig by @chris-rock in #1382
- ⭐️ add annotations support for scanned assets by @chris-rock in #1379
- Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
- docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
- Format README.md for consistent markdown style by @chris-rock in #1387
- Use smaller container images in integration tests by @chris-rock in #1388
- 🧹 resource watcher improvements by @chris-rock in #1369
- ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
- ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
- ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
- Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
- Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
- feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
- Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
- Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
- Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
- fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
- fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
- Tests and improvements v13-beta by @slntopp in #1409
- Update publish.yaml to include write permissions by @slntopp in #1410
- 🐛 fix integration tests errors by @slntopp in #1411
- fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412
- fix: use published image matching git tag in Helm chart installation by @slntopp in #1413
- Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #1405
- Bump hashicorp/setup-terraform from 3.1.2 to 4.0.0 by @dependabot[bot] in #1404
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1403
- Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1406
- Bump dawidd6/action-download-artifact from 14 to 16 by @dependabot[bot] in #1407
- Bump EnricoMi/publish-unit-test-result-action from 2.22.0 to 2.23.0 by @dependabot[bot] in #1402
- v13 Release tests batch by @slntopp in #1416
- v13 registry mirroring and proxying testing by @slntopp in #1422
- 📚 v13 Documentation improvements by @slntopp in #1420
- feat: replace VaultAuth init container with operator-side vault-client-go by @chris-rock in https://github.com/mondoohq/mondoo-operator/pull/...
v13.0.0
What's Changed
- 🧹 improved testing and release by @imilchev in #1323
- Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
- Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
- Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
- Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
- Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
- Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
- Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
- 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
- Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
- 🧹 update test matrix by @chris-rock in #1334
- 🧹 remove admission controller by @chris-rock in #1336
- ✨ Pin GitHub actions to hashes by @czunker in #1343
- 🧹 update copyright year by @chris-rock in #1344
- ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
- Replace deprecated --score-threshold by @anurag-2911 in #1340
- ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
- Feature/multiple private registry secrets by @AdamVB in #1339
- 🧹 use qemu for cross builds by @chris-rock in #1346
- fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
- 🧹 improve error handling by @chris-rock in #1348
- 🧹 update documentation by @chris-rock in #1349
- 🐛 fix docker/build-push-action by @chris-rock in #1350
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
- Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
- Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
- Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
- 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
- 🐛 fix service account permissions to support wif scans by @imilchev in #1357
- Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
- Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
- Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
- external cluster setup by @chris-rock in #1358
- ⭐️ publish helm charts to OCI by @chris-rock in #1367
- ⭐️ ecr auth for container images by @chris-rock in #1368
- 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
- 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
- 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
- Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
- ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
- ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
- Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
- 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
- Support image digest in MondooAuditConfig by @chris-rock in #1382
- ⭐️ add annotations support for scanned assets by @chris-rock in #1379
- Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
- docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
- Format README.md for consistent markdown style by @chris-rock in #1387
- Use smaller container images in integration tests by @chris-rock in #1388
- 🧹 resource watcher improvements by @chris-rock in #1369
- ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
- ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
- ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
- Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
- Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
- feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
- Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
- Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
- Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
- fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
- fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
- Tests and improvements v13-beta by @slntopp in #1409
- Update publish.yaml to include write permissions by @slntopp in #1410
- 🐛 fix integration tests errors by @slntopp in #1411
- fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412
- fix: use published image matching git tag in Helm chart installation by @slntopp in #1413
- Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #1405
- Bump hashicorp/setup-terraform from 3.1.2 to 4.0.0 by @dependabot[bot] in #1404
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1403
- Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1406
- Bump dawidd6/action-download-artifact from 14 to 16 by @dependabot[bot] in #1407
- Bump EnricoMi/publish-unit-test-result-action from 2.22.0 to 2.23.0 by @dependabot[bot] in #1402
- v13 Release tests batch by @slntopp in #1416
- v13 registry mirroring and proxying testing by @slntopp in #1422
- 📚 v13 Documentation improvements by @slntopp in #1420
- feat: replace VaultAuth init container with operator-side vault-client-go by @chris-rock in https://github.com/mondoohq/mondoo-operator/pull/...
mondoo-operator-13.0.0
A Helm chart for installing mondoo-operator on Kubernetes
v13.0.0-beta5
What's Changed
- 🧹 improved testing and release by @imilchev in #1323
- Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
- Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
- Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
- Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
- Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
- Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
- Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
- 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
- Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
- 🧹 update test matrix by @chris-rock in #1334
- 🧹 remove admission controller by @chris-rock in #1336
- ✨ Pin GitHub actions to hashes by @czunker in #1343
- 🧹 update copyright year by @chris-rock in #1344
- ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
- Replace deprecated --score-threshold by @anurag-2911 in #1340
- ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
- Feature/multiple private registry secrets by @AdamVB in #1339
- 🧹 use qemu for cross builds by @chris-rock in #1346
- fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
- 🧹 improve error handling by @chris-rock in #1348
- 🧹 update documentation by @chris-rock in #1349
- 🐛 fix docker/build-push-action by @chris-rock in #1350
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
- Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
- Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
- Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
- 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
- 🐛 fix service account permissions to support wif scans by @imilchev in #1357
- Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
- Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
- Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
- external cluster setup by @chris-rock in #1358
- ⭐️ publish helm charts to OCI by @chris-rock in #1367
- ⭐️ ecr auth for container images by @chris-rock in #1368
- 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
- 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
- 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
- Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
- ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
- ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
- Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
- 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
- Support image digest in MondooAuditConfig by @chris-rock in #1382
- ⭐️ add annotations support for scanned assets by @chris-rock in #1379
- Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
- docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
- Format README.md for consistent markdown style by @chris-rock in #1387
- Use smaller container images in integration tests by @chris-rock in #1388
- 🧹 resource watcher improvements by @chris-rock in #1369
- ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
- ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
- ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
- Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
- Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
- feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
- Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
- Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
- Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
- fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
- fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
- Tests and improvements v13-beta by @slntopp in #1409
- Update publish.yaml to include write permissions by @slntopp in #1410
- 🐛 fix integration tests errors by @slntopp in #1411
- fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412
- fix: use published image matching git tag in Helm chart installation by @slntopp in #1413
New Contributors
- @anurag-2911 made their first contribution in #1340
- @AdamVB made their first contribution in #1339
Full Changelog: v12.0.1...v13.0.0-beta5
v13.0.0-beta4
What's Changed
- 🧹 improved testing and release by @imilchev in #1323
- Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
- Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
- Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
- Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
- Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
- Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
- Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
- 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
- Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
- 🧹 update test matrix by @chris-rock in #1334
- 🧹 remove admission controller by @chris-rock in #1336
- ✨ Pin GitHub actions to hashes by @czunker in #1343
- 🧹 update copyright year by @chris-rock in #1344
- ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
- Replace deprecated --score-threshold by @anurag-2911 in #1340
- ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
- Feature/multiple private registry secrets by @AdamVB in #1339
- 🧹 use qemu for cross builds by @chris-rock in #1346
- fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
- 🧹 improve error handling by @chris-rock in #1348
- 🧹 update documentation by @chris-rock in #1349
- 🐛 fix docker/build-push-action by @chris-rock in #1350
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
- Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
- Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
- Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
- 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
- 🐛 fix service account permissions to support wif scans by @imilchev in #1357
- Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
- Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
- Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
- external cluster setup by @chris-rock in #1358
- ⭐️ publish helm charts to OCI by @chris-rock in #1367
- ⭐️ ecr auth for container images by @chris-rock in #1368
- 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
- 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
- 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
- Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
- ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
- ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
- Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
- 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
- Support image digest in MondooAuditConfig by @chris-rock in #1382
- ⭐️ add annotations support for scanned assets by @chris-rock in #1379
- Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
- docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
- Format README.md for consistent markdown style by @chris-rock in #1387
- Use smaller container images in integration tests by @chris-rock in #1388
- 🧹 resource watcher improvements by @chris-rock in #1369
- ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
- ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
- ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
- Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
- Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
- feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
- Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
- Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
- Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
- fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
- fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
- Tests and improvements v13-beta by @slntopp in #1409
- Update publish.yaml to include write permissions by @slntopp in #1410
- 🐛 fix integration tests errors by @slntopp in #1411
- fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412
New Contributors
- @anurag-2911 made their first contribution in #1340
- @AdamVB made their first contribution in #1339
Full Changelog: v12.0.1...v13.0.0-beta4
v13.0.0-beta3
What's Changed
- 🧹 improved testing and release by @imilchev in #1323
- Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
- Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
- Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
- Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
- Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
- Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
- Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
- 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
- Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
- 🧹 update test matrix by @chris-rock in #1334
- 🧹 remove admission controller by @chris-rock in #1336
- ✨ Pin GitHub actions to hashes by @czunker in #1343
- 🧹 update copyright year by @chris-rock in #1344
- ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
- Replace deprecated --score-threshold by @anurag-2911 in #1340
- ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
- Feature/multiple private registry secrets by @AdamVB in #1339
- 🧹 use qemu for cross builds by @chris-rock in #1346
- fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
- 🧹 improve error handling by @chris-rock in #1348
- 🧹 update documentation by @chris-rock in #1349
- 🐛 fix docker/build-push-action by @chris-rock in #1350
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
- Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
- Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
- Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
- 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
- 🐛 fix service account permissions to support wif scans by @imilchev in #1357
- Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
- Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
- Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
- external cluster setup by @chris-rock in #1358
- ⭐️ publish helm charts to OCI by @chris-rock in #1367
- ⭐️ ecr auth for container images by @chris-rock in #1368
- 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
- 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
- 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
- Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
- ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
- ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
- Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
- 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
- Support image digest in MondooAuditConfig by @chris-rock in #1382
- ⭐️ add annotations support for scanned assets by @chris-rock in #1379
- Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
- docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
- Format README.md for consistent markdown style by @chris-rock in #1387
- Use smaller container images in integration tests by @chris-rock in #1388
- 🧹 resource watcher improvements by @chris-rock in #1369
- ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
- ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
- ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
- Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
- Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
- feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
- Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
- Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
- Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
- fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
- fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
- Tests and improvements v13-beta by @slntopp in #1409
- Update publish.yaml to include write permissions by @slntopp in #1410
- 🐛 fix integration tests errors by @slntopp in #1411
New Contributors
- @anurag-2911 made their first contribution in #1340
- @AdamVB made their first contribution in #1339
Full Changelog: v12.0.1...v13.0.0-beta3
v13.0.0-beta2
What's Changed
- 🧹 improved testing and release by @imilchev in #1323
- Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
- Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
- Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
- Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
- Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
- Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
- Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
- 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
- Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
- 🧹 update test matrix by @chris-rock in #1334
- 🧹 remove admission controller by @chris-rock in #1336
- ✨ Pin GitHub actions to hashes by @czunker in #1343
- 🧹 update copyright year by @chris-rock in #1344
- ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
- Replace deprecated --score-threshold by @anurag-2911 in #1340
- ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
- Feature/multiple private registry secrets by @AdamVB in #1339
- 🧹 use qemu for cross builds by @chris-rock in #1346
- fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
- 🧹 improve error handling by @chris-rock in #1348
- 🧹 update documentation by @chris-rock in #1349
- 🐛 fix docker/build-push-action by @chris-rock in #1350
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
- Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
- Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
- Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
- 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
- 🐛 fix service account permissions to support wif scans by @imilchev in #1357
- Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
- Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
- Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
- external cluster setup by @chris-rock in #1358
- ⭐️ publish helm charts to OCI by @chris-rock in #1367
- ⭐️ ecr auth for container images by @chris-rock in #1368
- 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
- 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
- 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
- Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
- ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
- ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
- Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
- 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
- Support image digest in MondooAuditConfig by @chris-rock in #1382
- ⭐️ add annotations support for scanned assets by @chris-rock in #1379
- Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
- docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
- Format README.md for consistent markdown style by @chris-rock in #1387
- Use smaller container images in integration tests by @chris-rock in #1388
- 🧹 resource watcher improvements by @chris-rock in #1369
- ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
- ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
- ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
- Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
- Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
- feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
- Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
- Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
- Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
- fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
- fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
- Tests and improvements v13-beta by @slntopp in #1409
- Update publish.yaml to include write permissions by @slntopp in #1410
New Contributors
- @anurag-2911 made their first contribution in #1340
- @AdamVB made their first contribution in #1339
Full Changelog: mondoo-operator-12.0.1...v13.0.0-beta2
v13.0.0 beta1
What's Changed
- 🧹 improved testing and release by @imilchev in #1323
- Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
- Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
- Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
- Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
- Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
- Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
- Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
- 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
- Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
- 🧹 update test matrix by @chris-rock in #1334
- 🧹 remove admission controller by @chris-rock in #1336
- ✨ Pin GitHub actions to hashes by @czunker in #1343
- 🧹 update copyright year by @chris-rock in #1344
- ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
- Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
- Replace deprecated --score-threshold by @anurag-2911 in #1340
- ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
- Feature/multiple private registry secrets by @AdamVB in #1339
- 🧹 use qemu for cross builds by @chris-rock in #1346
- fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
- 🧹 improve error handling by @chris-rock in #1348
- 🧹 update documentation by @chris-rock in #1349
- 🐛 fix docker/build-push-action by @chris-rock in #1350
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
- Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
- Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
- Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
- 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
- 🐛 fix service account permissions to support wif scans by @imilchev in #1357
- Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
- Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
- Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
- external cluster setup by @chris-rock in #1358
- ⭐️ publish helm charts to OCI by @chris-rock in #1367
- ⭐️ ecr auth for container images by @chris-rock in #1368
- 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
- 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
- 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
- Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
- ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
- ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
- Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
- 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
- Support image digest in MondooAuditConfig by @chris-rock in #1382
- ⭐️ add annotations support for scanned assets by @chris-rock in #1379
- Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
- docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
- Format README.md for consistent markdown style by @chris-rock in #1387
- Use smaller container images in integration tests by @chris-rock in #1388
- 🧹 resource watcher improvements by @chris-rock in #1369
- ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
- ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
- ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
- Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
- Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
- feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
- Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
- Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
- Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
- fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
- fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
- Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
- Tests and improvements v13-beta by @slntopp in #1409
New Contributors
- @anurag-2911 made their first contribution in #1340
- @AdamVB made their first contribution in #1339
Full Changelog: mondoo-operator-12.0.1...v13.0.0-beta1
v12.0.1
v12.0.0
What's Changed
- Bump dawidd6/action-download-artifact from 6 to 7 by @dependabot[bot] in #1210
- Bump dawidd6/action-download-artifact from 7 to 9 by @dependabot[bot] in #1234
- 🧹 fix integration tests by @imilchev in #1246
- Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2 by @dependabot[bot] in #1238
- Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 by @dependabot[bot] in #1239
- Bump check-spelling/check-spelling from 0.0.24 to 0.0.25 by @dependabot[bot] in #1241
- Bump golang.org/x/crypto from 0.25.0 to 0.35.0 by @dependabot[bot] in #1237
- Bump dawidd6/action-download-artifact from 9 to 10 by @dependabot[bot] in #1245
- 🧹 drop cloud tests from readme badges by @imilchev in #1249
- Bump dawidd6/action-download-artifact from 10 to 11 by @dependabot[bot] in #1251
- add tolerations for all nodes to scanning daemonset by @pratik-mondoo in #1260
- ✨ Pin GitHub actions to hashes by @czunker in #1262
- Bump google-github-actions/setup-gcloud from 2.2.1 to 3.0.1 by @dependabot[bot] in #1263
- Bump sigstore/cosign-installer from 3.9.1 to 3.10.0 by @dependabot[bot] in #1268
- Bump google-github-actions/auth from 2.1.13 to 3.0.0 by @dependabot[bot] in #1267
- Bump actions/checkout from 4.3.0 to 5.0.0 by @dependabot[bot] in #1264
- Bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #1271
- Bump softprops/action-gh-release from 2.3.3 to 2.4.1 by @dependabot[bot] in #1272
- Bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in #1265
- 🧹 Bump k8s versions for tests by @czunker in #1269
- Bump actions/setup-go from 4.2.1 to 6.0.0 by @dependabot[bot] in #1270
- Bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1280
- Bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #1281
- Bump EnricoMi/publish-unit-test-result-action from 2.20.0 to 2.21.0 by @dependabot[bot] in #1282
- Bump docker/metadata-action from 5.8.0 to 5.10.0 by @dependabot[bot] in #1297
- Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1295
- Bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in #1296
- Bump softprops/action-gh-release from 2.4.1 to 2.5.0 by @dependabot[bot] in #1300
- Bump sarisia/actions-status-discord from 1.15.4 to 1.15.5 by @dependabot[bot] in #1302
- Bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #1301
- Pin envtest / security workflow for golang 1.24 by @tas50 in #1303
- 🧹 update cnquery/cnspec to v12 by @imilchev in #1305
- Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #1275
- Update spellcheck + link check config by @tas50 in #1298
- more dependencies updates by @imilchev in #1307
- Bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1310
- Bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1311
- 🧹 update linter by @imilchev in #1308
- 🧹 cleanup integration tests by @imilchev in #1313
- 🧹 build operator once for all integration tests by @imilchev in #1314
- 🧹 remove operatorhub references by @imilchev in #1316
- 🧹 update helmify and helm chart by @imilchev in #1317
- 🚀 v12.0.0 by @imilchev in #1318
- 🐛 fix release pipeline by @imilchev in #1319
- 🧹 release helm chart only after tests and a tag by @imilchev in #1320
Full Changelog: v11.4.2...v12.0.0