kube-rbac-proxy

• [CHANGE] Move from glog to klog for logging. #57
• [FEATURE] Support token audience reviews. #56
• [FEATURE] Support custom upstream CAs. #34
• [ENHANCEMENT] Reload TLS certificates at runtime. #47
• [ENHANCEMENT] Add host in self-signed certs. #43

• [ENHANCEMENT] Use golang.org/x/net http2 server. #29
• [ENHANCEMENT] Update Kubernetes to 1.13.2 #28
• [ENHANCEMENT] Make multi-arch builds possible. #21
• [BUGFIX] Log when server isn't able to start. #27
• [BUGFIX] Set user specified TLS configuration when explicit TLS certificates are provided.

• [CHANGE] The config file flag has been renamed to --config-file.
• [CHANGE] There is a breaking change in the configuration. All configuration that was previously valid, is now nested in .authorization.resourceAttributes.
• [FEATURE] Add OIDC token authentication provider (note: this is not a client code flow for client authentication).
• [FEATURE] Add ability to rewrite SubjectAccessReviews based on request query parameters.

This release is unmodified code from v0.3.0, but built with latest golang.

• [BUGFIX] Fix x509: cannot parse dnsName in intermediate certificates.

• [FEATURE] Add HTTP/2 support.
• [ENHANCEMENT] Add ability to choose TLS cipher suites.
• [ENHANCEMENT] Add ability to choose minimum TLS version and default to TLS 1.2.

• [CHANGE] --listen-address flag renamed to --insecure-listen-address.
• [FEATURE] Add TLS support.

Initial release of the kube-rbac-proxy. Features of this release include a plain HTTP proxy, which performs a Kubernetes TokenReview on a provided token of incoming requests as well as a configurable SubjectAccessReview . See the README.md for more detail.