- Jan 21, 2024
-
-
github-actions[bot] authored
github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
-
zamaz authored
Adds zarf flavors for upstream images and IB. Includes refactoring of zarf packages using composability to cleanup the config and keep things dry and refactoring of the values files to image flavors specific + common. Both flavors deploy successfully on their respective architectures. On arm64 (or at least darwin arm64) when using the registry1(x86) flavor it fails at metrics server regarding the istio init container, which seems to be an issue [emulating x86 on mac](https://github.com/istio/istio/issues/36762#issuecomment-1034070488).
-
- Jan 18, 2024
-
-
github-actions[bot] authored
Micah Nagel <micah.nagel@defenseunicorns.com>
-
Micah Nagel authored## Description It was discovered in test that the anti-affinity set on the gateway is problematic during upgrades. This is partially because we are on a single node for k3d, but in general the anti-affinity does not make sense to have here since the gateway is a single replica setup. ## Related Issue N/A ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 17, 2024
-
-
Micah Nagel authored
## Description Adds basic debug output (`kubectl get all -A` + `kubectl get package -A`) to the pipeline. This is currently run with a `!cancelled()` conditional but could be switched to `failure()` if we want to keep the output clean on success. Also modifies/fixes the PR conditional for check paths so that it properly executes only on PRs to main. ## Related Issue N/A ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
Micah Nagel authored
## Description Updates CI to add an upgrade test. Test order: - deploys k3d + zarf init from the PR branch - deploys uds-core zarf package from the latest release - creates + deploys uds-core from the PR branch - runs validations from the PR branch Does not include any upgrade testing at the individual source package level since these tests are just meant to short-circuit for dev cycles (this is a similar approach to our intent with flavor testing). It also does not address upgrades of the bundle (k3d/zarf init) which are out of the scope of uds-core's non-dev artifacts. ## Related Issue Resolves https://github.com/defenseunicorns/uds-core/issues/92 (at least as a first pass for testing the full deploy/upgrade) ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (CI) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 16, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.22.0` -> `0.22.2`](https://renovatebot.com/diffs/npm/pepr/0.22.0/0.22.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.22.2`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.2) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.1...v0.22.2) #### What's Changed - chore: unparsable docs.yml by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/488](https://togithub.com/defenseunicorns/pepr/pull/488) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.1...v0.22.2 ### [`v0.22.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.0...v0.22.1) #### features - feat: enable docs build on published release by [@​btlghrants](https://togithub.com/btlghrants) in [https://github.com/defenseunicorns/pepr/pull/484](https://togithub.com/defenseunicorns/pepr/pull/484) #### What's Changed - chore: bump actions/upload-artifact from 4.0.0 to 4.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/486](https://togithub.com/defenseunicorns/pepr/pull/486) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/487](https://togithub.com/defenseunicorns/pepr/pull/487) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.0...v0.22.1 </details> --- ### Configuration
renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by:
Megamind <882485+jeff-mccoy@users.noreply.github.com>
-
Megamind authored
## Description This PR consolidates all Pepr capabilities into the folder `src/pepr`. This PR also introduces the UDS Operator, which manages a new CRD `packages` under the group `uds.dev/v1alpha1`. The UDS Operator manages the lifecycle of UDS Package CRs and their corresponding resources (e.g. NetworkPolicies, Istio VirtualServices, etc.). The operator uses [Pepr](https://pepr.dev) to bind the watch operations to the enque and reconciler. The operator is responsible for: - enabling Istio sidecar injection in namespaces where the CR is deployed - establishing default-deny ingress/egress network policies - creating a layered allow-list based approach on top of the default deny network policies including some basic defaults such as Istio requirements and DNS egress - providing targeted remote endpoints network policies such as `KubeAPI` and `CloudMetadata` to make policies more DRY and provide dynamic bindings where a static definition is not possible - creating Istio Virtual Services & related ingress gateway network policies ### Key Files and Folders ```bash . ├── controllers # Core business logic called by the reconciler │ ├── istio # Manages Istio VirtualServices and sidecar injection for UDS Packages/Namespace │ └── network # Manages default and generated NetworkPolicies for UDS Packages/Namespace ├── crd │ ├── generated # Type files generated by `uds run -f src/pepr/tasks.yaml gen-crds` │ ├── sources # CRD source files │ ├── register.ts # Registers the UDS Package CRD with the Kubernetes API │ └── validator.ts # Validates UDS Package CRs with Pepr ├── enque.ts # Serializes UDS Package CRs for processing by the reconciler ├── index.ts # Entrypoint for the UDS Operator └── reconciler.ts # Reconciles UDS Package CRs via the controllers ```
-
Tristan Holaday authored
## Description There are currently no tests, integration (using k3d) or unit, that test the exemptions allowed for Pepr policies. This PR adds 2 tests to explicitly verify that `registerExemptions()` works as intended. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 13, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.21.1` -> `0.22.0`](https://renovatebot.com/diffs/npm/pepr/0.21.1/0.22.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.22.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.21.1...v0.22.0) #### Features Make `npx pepr deploy` wait recursively for deployments to be in a ready-state - feat: npx pepr dev does not wait for resources to be fully up by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/435](https://togithub.com/defenseunicorns/pepr/pull/435) Work on multi-versioned docs automation for the [Docs Site](https://pepr-docs.netlify.app/v0.21.1/) - feat: delete website by [@​btlghrants](https://togithub.com/btlghrants) in [https://github.com/defenseunicorns/pepr/pull/459](https://togithub.com/defenseunicorns/pepr/pull/459) Locking down the Pepr generated Kubernetes manifests with securityContexts - feat: add sane defaults to the pod and containers in pepr deployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/445](https://togithub.com/defenseunicorns/pepr/pull/445) `npx pepr deploy --force` to override manager field in the underlying KFC implementation of [Server Side Apply](https://kubernetes.io/docs/reference/using-api/server-side-apply/#conflicts) eat: force option on npx pepr deploy by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/480](https://togithub.com/defenseunicorns/pepr/pull/480) (e2e style) Upgrade test of Kubernetes manifests - feat: pepr upgrade test by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/478](https://togithub.com/defenseunicorns/pepr/pull/478) Force rollouts to Pepr's Admission and Watcher deployments by adding an annotation to podSpecs - feat: add timestamp to podSpec annotations force rollout on deployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/483](https://togithub.com/defenseunicorns/pepr/pull/483) #### What's Changed - chore: update waitForDeployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/482](https://togithub.com/defenseunicorns/pepr/pull/482) - chore: add error message for easier debugging by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/479](https://togithub.com/defenseunicorns/pepr/pull/479) - chore: kubernetes slack channel for pepr and readme updates by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/467](https://togithub.com/defenseunicorns/pepr/pull/467) - chore: test code coverage by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/468](https://togithub.com/defenseunicorns/pepr/pull/468) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/456](https://togithub.com/defenseunicorns/pepr/pull/456) - chore: bump actions/dependency-review-action from 3.1.4 to 3.1.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/458](https://togithub.com/defenseunicorns/pepr/pull/458) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/457](https://togithub.com/defenseunicorns/pepr/pull/457) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/466](https://togithub.com/defenseunicorns/pepr/pull/466) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/469](https://togithub.com/defenseunicorns/pepr/pull/469) - chore: bump actions/checkout from 2 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/472](https://togithub.com/defenseunicorns/pepr/pull/472) - chore: bump actions/setup-node from 2 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/470](https://togithub.com/defenseunicorns/pepr/pull/470) - chore: bump codecov/codecov-action from 2 to 3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/471](https://togithub.com/defenseunicorns/pepr/pull/471) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/475](https://togithub.com/defenseunicorns/pepr/pull/475) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.21.1...v0.22.0 </details> --- ### Configuration
-
- Jan 12, 2024
-
-
Micah Nagel authored
-
- Jan 11, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-cli](https://togithub.com/defenseunicorns/uds-cli) | patch | `0.5.2` -> `0.5.3` | --- ### Release Notes <details> <summary>defenseunicorns/uds-cli (defenseunicorns/uds-cli)</summary> ### [`v0.5.3`](https://togithub.com/defenseunicorns/uds-cli/releases/tag/v0.5.3) [Compare Source](https://togithub.com/defenseunicorns/uds-cli/compare/v0.5.2...v0.5.3) ##### What's Changed - chore(deps): update anchore/sbom-action action to v0.15.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/297](https://togithub.com/defenseunicorns/uds-cli/pull/297) - chore(deps): update github/codeql-action action to v3.22.12 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/294](https://togithub.com/defenseunicorns/uds-cli/pull/294) - chore(deps): update actions/download-artifact action to v4.1.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/291](https://togithub.com/defenseunicorns/uds-cli/pull/291) - chore: update to zarf version 0.32.1 by [@​decleaver](https://togithub.com/decleaver) in [https://github.com/defenseunicorns/uds-cli/pull/300](https://togithub.com/defenseunicorns/uds-cli/pull/300) **Full Changelog**: https://github.com/defenseunicorns/uds-cli/compare/v0.5.2...v0.5.3 </details> --- ### Configuration
Jeff McCoy <code@jeffm.us> Co-authored-by:
razzle <harry@razzle.cloud> Co-authored-by:
-
Tristan Holaday authored
## Description Handling when seLinuxOptions contains defined user or role fields. ## Related Issue Fixes #95 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 10, 2024
-
-
Micah Nagel authored
-
Mike Vanhemert authored
## Description Trigger PR workflows for any change ... ## Related Issue ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
github-actions[bot] authored
-
- Jan 09, 2024
-
-
Mikael Vanhemert authored -
Micah Nagel authored
## Description This seems to be a common default across most istio installs (including Big Bang). The effect is just to make sure that the main "app" containers don't start until proxies are up. ## Related Issue Fixes https://github.com/defenseunicorns/uds-core/issues/69 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 08, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.18.1` -> `0.21.1`](https://renovatebot.com/diffs/npm/pepr/0.18.1/0.21.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [typescript](https://www.typescriptlang.org/) ([source](https://togithub.com/Microsoft/TypeScript)) | [`5.2.2` -> `5.3.3`](https://renovatebot.com/diffs/npm/typescript/5.2.2/5.3.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.21.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.21.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.21.0...v0.21.1) #### What's Changed - chore: bump the production-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/455](https://togithub.com/defenseunicorns/pepr/pull/455) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.21.0...v0.21.1 ### [`v0.21.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.21.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.3...v0.21.0) #### What's Changed - feat: add resourceVersion tracking for watches & better watch recovery by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/453](https://togithub.com/defenseunicorns/pepr/pull/453) - chore: bump the production-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/452](https://togithub.com/defenseunicorns/pepr/pull/452) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.3...v0.21.0 ### [`v0.20.3`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.3) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.2...v0.20.3) #### What's Changed - fix: bind debug logs to fluent-client watch log handler by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/450](https://togithub.com/defenseunicorns/pepr/pull/450) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.2...v0.20.3 ### [`v0.20.2`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.2) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.1...v0.20.2) #### What's Changed - chore: bump actions/upload-artifact from 3.1.3 to 4.0.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/442](https://togithub.com/defenseunicorns/pepr/pull/442) - chore: bump the prom-client version by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/443](https://togithub.com/defenseunicorns/pepr/pull/443) - chore: bump actions/setup-node from 4.0.0 to 4.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/446](https://togithub.com/defenseunicorns/pepr/pull/446) - chore: bump the production-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/448](https://togithub.com/defenseunicorns/pepr/pull/448) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/447](https://togithub.com/defenseunicorns/pepr/pull/447) - chore: update peer deps (not updated by dependabot) by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/449](https://togithub.com/defenseunicorns/pepr/pull/449) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.1...v0.20.2 ### [`v0.20.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.19.0...v0.20.1) #### What's Changed - chore: spelling by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/441](https://togithub.com/defenseunicorns/pepr/pull/441) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.0...v0.20.1 ### [`v0.19.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.19.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.18.1...v0.19.0) #### Features - feat: add pepr monitor command by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/411](https://togithub.com/defenseunicorns/pepr/pull/411) - feat: updated containers function to work with mutate requests by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/418](https://togithub.com/defenseunicorns/pepr/pull/418) ```typescript When(a.Pod) .IsCreated() .Validate(pod => { // returns all containers in pod const podsContainers = containers(pod); for (const container of podsContainers) { ... go on ```  #### What's Changed - chore: create a library of helper functions that make working with pepr easier by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/415](https://togithub.com/defenseunicorns/pepr/pull/415) - fix: watch does not respect ns testing by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/398](https://togithub.com/defenseunicorns/pepr/pull/398) - chore: fix PeprStore rendering where multiple capabilities are in play by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/422](https://togithub.com/defenseunicorns/pepr/pull/422) - chore: update logo image in header by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/420](https://togithub.com/defenseunicorns/pepr/pull/420) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.18.1...v0.19.0 </details> <details> <summary>Microsoft/TypeScript (typescript)</summary> ### [`v5.3.3`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.3.3): TypeScript 5.3.3 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.3.2...v5.3.3) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-3/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript 5.3.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.0%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.1%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.2%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.3 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.3%22+is%3Aclosed+). Downloads are available on: - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) ### [`v5.3.2`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.3.2): TypeScript 5.3 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.2.2...v5.3.2) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-3/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript 5.3.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.0%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.1%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.2%22+is%3Aclosed+). Downloads are available on: - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) </details> --- ### Configuration
-
- Jan 06, 2024
-
-
Micah Nagel authored
## Description Adds the proper config to setup loki storage type. ## Related Issue Fixes https://github.com/defenseunicorns/uds-core/issues/83 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 05, 2024
-
-
github-actions[bot] authored
Mikael Vanhemert <mike.vanhemert@defenseunicorns.com>
-
Mike Vanhemert authored
## Description When establishing the security context for a pod, Pepr security policy will look for labels to specify the runAsUser, runAsGroup, and/or fsGroup and use those values. ## Related Issue ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 22, 2023
-
-
zamaz authored
## Description Adds initial renovate config. This should handle the new Ironbank flavor as well but currently does not have any "intelligence" around included/supported image versions in a given helm chart version. ## Related Issue N/A ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 12, 2023
-
-
github-actions[bot] authored
-
- Dec 11, 2023
-
-
zamaz authored
## Description ... ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Dec 08, 2023
-
-
zamaz authored
## Description add minio deploy time bundle variable override definitions ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 07, 2023
-
-
github-actions[bot] authored
-
zamaz authored
## Description Resolve logic bug where job termination was not functioning correctly because containerStatuses field doesnt exist when pod.status.phase is pending. ## Related Issue Fixes [#54](https://github.com/defenseunicorns/uds-core/issues/54) ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Dec 05, 2023
-
-
github-actions[bot] authored
-
Mike Vanhemert authored
-
Megamind authored
## Description Introduce Pepr Validations to replace Kyverno. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Nov 19, 2023
-
-
github-actions[bot] authored
-
Megamind authored
## Description This PR leverages the new UDS Helm Variables mapping introduce in [UDS CLI v0.3.0](https://github.com/defenseunicorns/uds-cli/releases/tag/v0.3.0). While this is currently at the bundle-level, this should eventually make it down to the Zarf level. However, for UDS deployers, the change will be transparent. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Nov 17, 2023
-
-
Megamind authored
## Description Use task includes where possible (env vars cant be passed into includes inline so publish.yaml couldn't use it right now). Also provides a top-level task file to do clean commands such as: ```bash uds run test-uds-core ``` ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
-
-
![github-actions[bot]'s avatar](https://secure.gravatar.com/avatar/e7cd911927c7d1acf6281b69d385990d8fadcd26871048bbcdbff2e88da7f607?s=64&d=identicon "github-actions[bot]")
![renovate[bot]'s avatar](https://secure.gravatar.com/avatar/4836c036306c20663d397df5cd0c2046c486c5ce1327af904affd8d285099e24?s=64&d=identicon "renovate[bot]")
