kube-rbac-proxy

• [ENHANCEMENT] Bump deps, in particular otel (>CVE) and k8s (v1.30)
• [ENHANCEMENT] Add OIDC username prefix, which was missing

• [BUGFIX] make deprecated (usptream removed) flags behave like before

• [BUGFIX] make deprecated (usptream removed) flags behave like before

• [ENHANCEMENT] add command-line args --kube-api-qps/--kube-api-burst
• [ENHANCEMENT] Bump deps

• [ENHANCEMENT] Bump dependencies and in particular to kubernetes to v1.28
• [CHANGE] Due to the bump to k8s v1.28 some logging flags are disabled

• [ENHANCEMENT] bump opentelemetry to fix CVE
• [ENHANCEMENT] add option to disable HTTP/2:
  • --http2-disable (default: false)
• [ENHANCEMENT] add option to fine-tune HTTP/2:
  • --http2-max-size (default: 256kb)
  • --http2-max-concurrent-streams (default: 100)

• [ENHANCEMENT] bump golang and x/net

• [BUGFIX] --version returns now the proper kube-rbac-proxy version
• ENHANCEMENT] bump dependencies

• [ENHANCEMENT] bump dependencies
• [ENHANCEMENT] Makefile, Dockerfile to work better with different architectures

• [ENHANCEMENT] bump dependencies

• [ENHANCEMENT] README.md now contains information about the future outlook of the project wrt to deprecations, features and K8s Sig-Auth acceptance
• [ENHANCEMENT] bump dependencies
• [FEATURE] health endpoint /healthz offered on --proxy-endpoints-port
• [FEATURE] --upstream-client-cert-file enables the kube-rbac-proxy client connecting to upstream to use TLS
• [CHANGE] use cobra and upstream command machinery, introduces deprecation to some flags

• [ENHANCEMENT] bump k8s to 1.25.2 #200 (contains fixes for CVEs)
• [ENHANCEMENT] bump Go to 1.19.1 #178 (contains fixes for CVEs)
• [ENHANCEMENT] bump golang.org/x/crypto due to CVE-2022-27191 #188
• [CHANGE] add warning messages for features that will be removed

• [ENHANCEMENT] bump k8s to 1.24.2 #178
• [ENHANCEMENT] bump Go to 1.18.3 #178
• [ENHANCEMENT] update README.md to be more accurate and up to date #178, #173
• [ENHANCEMENT] check all headers for rewrites and create additional authz requests #171

• [ENHANCEMENT] bump k8s to 1.23.5. #149, #155, #160
• [ENHANCEMENT] add release documentation, #156
• [ENHANCEMENT] use supported apiVersion for deployment and authorization. #150
• [BUGFIX] ppc64le image build which in turn fixed multi-arch build. #147
• [ENHANCEMENT] Support building on riscv64 architecture. #141
• [ENHANCEMENT] move --upstream-force-h2c out of --insecure-listen-address. #140

• [FEATURE] Support for path patterns in --allow-paths and --ignore-paths. #135
• [ENHANCEMENT] Dynamically reload client CA. #127
• [BUGFIX] Fix panics on client-cert authenticated requests. #132

[FEATURE] Support local static authorizer. #125

• [FEATURE] Support rewrites using HTTP headers in addition to query parameters. #104
• [FEATURE] Support pass-through of client certificates. #113
• [FEATURE] Support TLS 1.3. #120

• [FEATURE] Add ability with the new --ignore-paths flag to define paths for which kube-rbac-proxy will proxy without performing authn/authz. This cannot be used with --allow-paths. #91

• [CHANGE] Make images rootless. #86
• [FEATURE] Add ability to check for allowed request paths with new --allow-paths config option. #83

• [CHANGE] Use gcr.io/distroless/static as base image instead of alpine. #67
• [ENHANCEMENT] Add multi-arch container images for amd64, arm, arm64, ppc64le and s390x. #67