rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

APACHE-2.0 License

Stars
1.4K
Committers
28

Bot releases are hidden (Show)

rbac-manager - v0.10.0

Published by sudermanjr over 3 years ago

Changes since v0.9.4:

9c83948 update all.yaml to use recent v0.9.4 release (#140)
26ccec7 Enable all known auth methods (#143)
585b83e Bump sigs.k8s.io/controller-runtime from 0.6.0 to 0.6.2 (#142)
337083f Bump sigs.k8s.io/controller-runtime from 0.6.2 to 0.6.3 (#146)
fe1cf2e delete vendor folder and dep files (#147)
8136b4c Add brief design doc (#150)
4ef3d0c updating CRD apiversion to v1 (#156)
e02e12f fix typo (#161)
ad2dc70 Update dependencies and change metrics port (#162)

rbac-manager - v0.9.4

Published by sudermanjr over 4 years ago

Changelog

c32bde4 fixing #53 and #106 (#128)
1cbb570 adjusting circleci config (#130)
d8f75e0 Bump sigs.k8s.io/controller-runtime from 0.5.1 to 0.5.2 (#131)
77be9dc Update README.md (#133)
aefc96f Fix slack link (#136)
6c341d8 Bump sigs.k8s.io/controller-runtime from 0.5.2 to 0.6.0 (#134)
dff4907 Add note about capitalization in README under examples (#138)
5eba4d0 Update x/text to 0.3.3 for CVE (#139)

rbac-manager - v0.9.3

Published by sudermanjr over 4 years ago

Changelog

0e00b69 update yaml manifest to v0.9.2 (#122)
7b2c353 remove mjhuber as codeowner (#123)
fc128e8 Update README.md (#124)
5981c3c Bump sigs.k8s.io/controller-runtime from 0.1.11 to 0.5.1 (#125)
216f235 using numeric user in Dockerfile for PSP (#127)

rbac-manager - v0.9.2 - Major BugFix

Published by sudermanjr over 4 years ago

Changelog

5747b45 Fixes #119 - Major bug which will cause deletion and re-creation of a service account

rbac-manager - v0.9.1

Published by sudermanjr over 4 years ago

Changelog

4201a4a Adding stalebot config (#108)
21b987a add go.mod and go.sum; update to go 1.13 (#107)
1ef67d0 initializing klog flags that should make packages using it log errors to stderr instead of file (#115)
afd4cb5 formatting all imports and resolving golangci-lint issues (#116)

rbac-manager - v0.9.0

Published by sudermanjr almost 5 years ago

Added:

  • You can now specify service account image pull secrets
  • Versioning now happens automagically. Thanks @RaSerge
rbac-manager - 0.8.4

Published by mjhuber almost 5 years ago

New Features:

  • bump sigs.k8s.io/controller-runtime to 0.3.0
  • Added a metrics endpoint
    thanks @msiuts!
rbac-manager -

Published by sudermanjr about 5 years ago

rbac-manager -

Published by sudermanjr about 5 years ago

rbac-manager - 0.8.1

Published by sudermanjr about 5 years ago

Fixes issues with deployment manifest. #68

rbac-manager - 0.8.0

Published by sudermanjr over 5 years ago

Docker image now uses scratch instead of Alpine.

rbac-manager - 0.7.0 Role Binding change detection and repair

Published by rbren over 5 years ago

rbac-manager - 0.6.1 Bugfix for MatchExpressions

Published by sudermanjr over 5 years ago

Fixes #48

rbac-manager - 0.6.0 Support for Match Expressions Namespace Selectors

Published by robscott over 5 years ago

New Features:

  • Namespace Label Selectors in Role Bindings now support MatchExpressions syntax (in addition to the previous MatchLabels support)
rbac-manager - 0.5.0: Namespace Selectors, Kubebuilder Upgrade

Published by robscott almost 6 years ago

New Features:

  • Role Bindings can now be defined with Namespace Selectors
rbac-manager - 0.4.3: Improved Tests, Go Modules, More Secure Deployment Configuration

Published by robscott about 6 years ago

  • More complete tests
  • Some slight refactoring to enable better tests (majority of logic in Reconcile function was moved to another function)
  • Improved logic for owner ref matching
  • A move from Dep to Go modules (and Go 1.11)
  • More secure deployment configuration by dropping all capabilities and running as a non root user
rbac-manager - 0.4.2: Alpine Security Update for Docker Image

Published by robscott about 6 years ago

Patches:

Bug Fixes:

  • Ensure deletes always happen before creates

Documentation:

  • Add note regarding cluster-admin requirement on 0.4.0 upgrade
rbac-manager - 0.4.0: Moving to Go + Kubebuilder, New RBAC Definition Syntax, CRD Validation

Published by robscott over 6 years ago

New Features:

  • New RBACDefinition syntax
  • Support for multiple RBACDefinitions
  • Using OwnerReferences to associate a specific RBACDefinition with a ClusterRoleBinding, RoleBinding, or ServiceAccount
  • Using CRD validation for all RBACDefinition fields
  • Moving from rbac-manager.reactiveops.io to rbacmanager.reactiveops.io for CRD
  • Support for groups
  • Some basic testing in place

Breaking Changes:

rbac-manager - 0.3.0: Support for Service Accounts, Helm Chart, CRD Updates

Published by robscott over 6 years ago

New Features:

  • Helm Chart
  • Support for Service Accounts
  • Support for --log-level argument

Changes:

  • Updates to CRD used in Controller example