- Jan 24, 2024
-
-
github-actions[bot] authored
github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/grafana/loki](https://togithub.com/grafana/loki) | patch | `2.9.2` -> `2.9.3` | | [docker.io/nginxinc/nginx-unprivileged](https://togithub.com/nginxinc/docker-nginx-unprivileged) | minor | `1.24-alpine` -> `1.25-alpine` | | [loki](https://grafana.github.io/helm-charts) ([source](https://togithub.com/grafana/helm-charts)) | minor | `5.36.3` -> `5.41.8` | | [registry1.dso.mil/ironbank/opensource/grafana/loki](https://togithub.com/grafana/loki) ([source](https://repo1.dso.mil/dsop/opensource/grafana/loki)) | patch | `2.9.2` -> `2.9.3` | | [registry1.dso.mil/ironbank/opensource/nginx/nginx-alpine](https://nginx.org/en/) ([source](https://repo1.dso.mil/dsop/opensource/nginx/nginx-alpine)) | patch | `1.25.2` -> `1.25.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>grafana/loki (docker.io/grafana/loki)</summary> ### [`v2.9.3`](https://togithub.com/grafana/loki/releases/tag/v2.9.3) [Compare Source](https://togithub.com/grafana/loki/compare/v2.9.2...v2.9.3) This is release `v2.9.3` of Loki. ##### Notable changes: This release includes a few small fixes and CVE patches - Upgrade otelhttp from 0.40.0 -> 0.44.0 and base alpine image from 3.18.3 -> 3.18.5 to fix a few CVES (CVE-2023-45142, CVE-2022-21698, CVE-2023-5363). - Fix querying ingester for label values with a matcher (previously didn't respect the matcher). - Ensure all lifecycler cfgs ref a valid IPv6 addr and port combination ##### Installation: The components of Loki are currently distributed in plain binary form and as Docker container images. Choose what fits your use-case best. ##### Docker container: - https://hub.docker.com/r/grafana/loki - https://hub.docker.com/r/grafana/promtail ```bash $ docker pull "grafana/loki:2.9.3" $ docker pull "grafana/promtail:2.9.3" ``` ##### Binary We provide pre-compiled binary executables for the most common operating systems and architectures. Choose from the assets below for the application and architecture matching your system. Example for `Loki` on the `linux` operating system and `amd64` architecture: ```bash $ curl -O -L "https://github.com/grafana/loki/releases/download/v2.9.3/loki-linux-amd64.zip" ### extract the binary $ unzip "loki-linux-amd64.zip" ### make sure it is executable $ chmod a+x "loki-linux-amd64" ``` </details> <details> <summary>grafana/helm-charts (loki)</summary> ### [`v5.41.8`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.8) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/b32d99308da6883bc1e7f321bb82483b69ada001 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.8 ### [`v5.41.7`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.7) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/dc1cb52149c4c89a4344e7dc7c92fdb3e8de3750 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.7 ### [`v5.41.6`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.6) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/6ae46dc6efc4052be2d028262ec919d53f07cb39 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.6 ### [`v5.41.5`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.5) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/87023f4a32dd017eed9fc03415ab5b34891b963f Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.5 ### [`v5.41.4`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.4) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/b51b7d7b55032b34fe8e10ffef87fa8cba073ade Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.4 ### [`v5.41.3`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.3) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/a192fc2a1e9b4b700649792a2938fd5c3e1f5e35 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.3 ### [`v5.41.2`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.2) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/f0ec743ba09d38c4cdb01e88fb8b0a1198b3c25f Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.2 ### [`v5.41.1`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.1) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/f406f528ee305a68f165360ad947200435cf90f3 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.1 ### [`v5.41.0`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.41.0) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/48b60505f632885aa0fdf47b1bc4e02b6de14a57 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.41.0 ### [`v5.40.1`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.40.1) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/ee008cff9387074504bdbba178ca4abcc1bc21f7 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.40.1 ### [`v5.39.0`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.39.0) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/1d232b824cf6d92c2e3ed612f1cacd8c19ac7733 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.39.0 ### [`v5.38.0`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.38.0) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/146b1bb10b5b33f6122c40ea71b043a879ff1e6a Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.38.0 ### [`v5.37.0`](https://togithub.com/grafana/helm-charts/releases/tag/helm-loki-5.37.0) Helm chart for Grafana Loki in simple, scalable mode Source commit: https://github.com/grafana/loki/commit/4455cd9d7d173896969d1d3589b2e9084af393c2 Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-5.37.0 </details> --- ### Configuration
renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by:
zamaz <71521611+zachariahmiller@users.noreply.github.com>
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [prometheus-operator-crds](https://togithub.com/prometheus-community/helm-charts) | major | `7.0.0` -> `9.0.0` | | quay.io/prometheus-operator/prometheus-config-reloader | minor | `v0.69.1` -> `v0.71.0` | | [quay.io/prometheus-operator/prometheus-operator](https://prometheus-operator.dev/) ([source](https://togithub.com/prometheus-operator/prometheus-operator)) | minor | `v0.69.1` -> `v0.71.0` | | quay.io/prometheus/node-exporter | minor | `v1.6.1` -> `v1.7.0` | | quay.io/prometheus/prometheus | minor | `v2.47.2` -> `v2.49.1` | | [registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-config-reloader](https://togithub.com/prometheus-operator/prometheus-operator) ([source](https://repo1.dso.mil/dsop/opensource/prometheus-operator/prometheus-config-reloader)) | minor | `v0.69.1` -> `v0.71.0` | | [registry1.dso.mil/ironbank/opensource/prometheus-operator/prometheus-operator](https://togithub.com/prometheus-operator/prometheus-operator) ([source](https://repo1.dso.mil/dsop/opensource/prometheus-operator/prometheus-operator)) | minor | `v0.69.1` -> `v0.71.0` | | [registry1.dso.mil/ironbank/opensource/prometheus/node-exporter](https://togithub.com/prometheus/node_exporter) ([source](https://repo1.dso.mil/dsop/opensource/prometheus/node-exporter)) | minor | `v1.6.1` -> `v1.7.0` | | [registry1.dso.mil/ironbank/opensource/prometheus/prometheus](https://prometheus.io/) ([source](https://repo1.dso.mil/dsop/opensource/prometheus/prometheus)) | minor | `v2.47.2` -> `v2.49.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>prometheus-community/helm-charts (prometheus-operator-crds)</summary> ### [`v9.0.0`](https://togithub.com/prometheus-community/helm-charts/releases/tag/prometheus-operator-crds-9.0.0) [Compare Source](https://togithub.com/prometheus-community/helm-charts/compare/prometheus-operator-crds-8.0.1...prometheus-operator-crds-9.0.0) A Helm chart that collects custom resource definitions (CRDs) from the Prometheus Operator, allowing for seamless integration with GitOps tools #### What's Changed - \[prometheus-operator-crds] bump operator to 0.71.0 by [@​DrFaust92](https://togithub.com/DrFaust92) in [https://github.com/prometheus-community/helm-charts/pull/4153](https://togithub.com/prometheus-community/helm-charts/pull/4153) **Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-55.10.0...prometheus-operator-crds-9.0.0 ### [`v8.0.1`](https://togithub.com/prometheus-community/helm-charts/releases/tag/prometheus-operator-crds-8.0.1) [Compare Source](https://togithub.com/prometheus-community/helm-charts/compare/prometheus-operator-crds-8.0.0...prometheus-operator-crds-8.0.1) A Helm chart that collects custom resource definitions (CRDs) from the Prometheus Operator, allowing for seamless integration with GitOps tools #### What's Changed - \[prometheus-operator-crds] Fix accidental space by [@​DrFaust92](https://togithub.com/DrFaust92) in [https://github.com/prometheus-community/helm-charts/pull/4049](https://togithub.com/prometheus-community/helm-charts/pull/4049) **Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/prometheus-operator-admission-webhook-0.9.0...prometheus-operator-crds-8.0.1 ### [`v8.0.0`](https://togithub.com/prometheus-community/helm-charts/releases/tag/prometheus-operator-crds-8.0.0) [Compare Source](https://togithub.com/prometheus-community/helm-charts/compare/prometheus-operator-crds-7.0.0...prometheus-operator-crds-8.0.0) A Helm chart that collects custom resource definitions (CRDs) from the Prometheus Operator, allowing for seamless integration with GitOps tools #### What's Changed - \[prometheus-operator-crds] Bump crds to 0.70.0 by [@​DrFaust92](https://togithub.com/DrFaust92) in [https://github.com/prometheus-community/helm-charts/pull/4047](https://togithub.com/prometheus-community/helm-charts/pull/4047) **Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/prometheus-adapter-4.9.0...prometheus-operator-crds-8.0.0 </details> <details> <summary>prometheus-operator/prometheus-operator (quay.io/prometheus-operator/prometheus-operator)</summary> ### [`v0.71.0`](https://togithub.com/prometheus-operator/prometheus-operator/releases/tag/v0.71.0): 0.71.0 / 2024-01-12 [Compare Source](https://togithub.com/prometheus-operator/prometheus-operator/compare/v0.70.0...v0.71.0) - \[CHANGE] Configure the configuration reloader sidecar with the same web configuration as Prometheus and Alertmanager. [#​6194](https://togithub.com/prometheus-operator/prometheus-operator/issues/6194) - \[FEATURE] Implement the Scale subresource for the Prometheus and PrometheusAgent CRDs. [#​5962](https://togithub.com/prometheus-operator/prometheus-operator/issues/5962) - \[FEATURE] Add support for OpenStack Service Discovery to the ScrapeConfig CRD. [#​6168](https://togithub.com/prometheus-operator/prometheus-operator/issues/6168) - \[FEATURE] Add support for all settings of the Kubernetes Service Discovery to the ScrapeConfig CRD. [#​6178](https://togithub.com/prometheus-operator/prometheus-operator/issues/6178) - \[FEATURE] Add support for proxy settings to the ScrapeConfig CRD. [#​6001](https://togithub.com/prometheus-operator/prometheus-operator/issues/6001) - \[FEATURE] Add the `enableHTTP2` field to remote-write configuration. [#​6192](https://togithub.com/prometheus-operator/prometheus-operator/issues/6192) - \[FEATURE] Add `.spec.maximumStartupDurationSeconds` to the Prometheus and PrometheusAgent CRDs. [#​6137](https://togithub.com/prometheus-operator/prometheus-operator/issues/6137) - \[FEATURE] Emit Kubernetes events when detecting invalid configurations. [#​6179](https://togithub.com/prometheus-operator/prometheus-operator/issues/6179) - \[ENHANCEMENT] Add `additionalLabels` field to topology spread constraints for Prometheus and PrometheusAgent CRD. [#​5967](https://togithub.com/prometheus-operator/prometheus-operator/issues/5967) - \[ENHANCEMENT] Add `.spec.clusterLabel` to the Alertmanager CRD. [#​6162](https://togithub.com/prometheus-operator/prometheus-operator/issues/6162) - \[ENHANCEMENT] Add `prometheus_operator_status_update_errors_total` and `prometheus_operator_status_update_operations_total` metrics. [#​6185](https://togithub.com/prometheus-operator/prometheus-operator/issues/6185) ### [`v0.70.0`](https://togithub.com/prometheus-operator/prometheus-operator/releases/tag/v0.70.0): 0.70.0 / 2023-11-30 [Compare Source](https://togithub.com/prometheus-operator/prometheus-operator/compare/v0.69.1...v0.70.0) - \[CHANGE] Use camelCase on scrapeConfig in prometheus job names. [#​6124](https://togithub.com/prometheus-operator/prometheus-operator/issues/6124) - \[CHANGE] Update field names for ConsulSD configs. [#​6094](https://togithub.com/prometheus-operator/prometheus-operator/issues/6094) - \[FEATURE] Add `trackTimestampsStaleness` field to `ServiceMonitor`, `PodMonitor` and `ScrapeConfig` CRDs. [#​6105](https://togithub.com/prometheus-operator/prometheus-operator/issues/6105) - \[FEATURE] Add `persistentVolumeClaimRetentionPolicy` field to the `Prometheus` and `PrometheusAgent` CRDs. [#​6038](https://togithub.com/prometheus-operator/prometheus-operator/issues/6038) - \[FEATURE] Support service,pod,endpoints,endpointslice,ingress roles to `KubernetesSDConfigs` in `ScrapeConfig` CRD. [#​6089](https://togithub.com/prometheus-operator/prometheus-operator/issues/6089) - \[FEATURE] Add support for Azure SD and GCE SD in `ScrapeConfig` CRD. [#​6078](https://togithub.com/prometheus-operator/prometheus-operator/issues/6078) [#​6009](https://togithub.com/prometheus-operator/prometheus-operator/issues/6009) - \[FEATURE] Add azure AD oauth support to remote write. [#​6037](https://togithub.com/prometheus-operator/prometheus-operator/issues/6037) - \[FEATURE] Add `.spec.reloadStrategy` to the Prometheus and PrometheusAgent CRDs. The value can be `HTTP` (default if not specified) or `ProcessSignal`. [#​5690](https://togithub.com/prometheus-operator/prometheus-operator/issues/5690) - \[ENHANCEMENT] Expose flag to enable the reloader probes in the jsonnet configuration. [#​6075](https://togithub.com/prometheus-operator/prometheus-operator/issues/6075) - \[ENHANCEMENT] Reduce memory usage for clusters with large number of secrets and/or configmaps. [#​5993](https://togithub.com/prometheus-operator/prometheus-operator/issues/5993) - \[ENHANCEMENT] Config reloader now sends all logs to `os.Stdout`. [#​6085](https://togithub.com/prometheus-operator/prometheus-operator/issues/6085) - \[BUGFIX] Remove verbose logging in admission-webhook pods. [#​6095](https://togithub.com/prometheus-operator/prometheus-operator/issues/6095) - \[BUGFIX] Fixed HTTP scheme value in the Consul SD configurations. [#​6098](https://togithub.com/prometheus-operator/prometheus-operator/issues/6098) - \[BUGFIX] Skip adding shard relabel rules if they were already set in `additionalScrapeConfigs`. [#​6099](https://togithub.com/prometheus-operator/prometheus-operator/issues/6099) - \[BUGFIX] Fix nil pointer exception when title and text are not set in MS Teams config. [#​6109](https://togithub.com/prometheus-operator/prometheus-operator/issues/6109) </details> --- ### Configuration
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.22.2` -> `0.23.0`](https://renovatebot.com/diffs/npm/pepr/0.22.2/0.23.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [ts-jest](https://kulshekhar.github.io/ts-jest) ([source](https://togithub.com/kulshekhar/ts-jest)) | [`29.1.1` -> `29.1.2`](https://renovatebot.com/diffs/npm/ts-jest/29.1.1/29.1.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.23.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.23.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.4...v0.23.0) #### Features - feat: docs information architecture by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/496](https://togithub.com/defenseunicorns/pepr/pull/496) [See here](https://pepr-docs.netlify.app/main/) - feat: make module_uuid optional by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/500](https://togithub.com/defenseunicorns/pepr/pull/500) (If no `module_uuid` is given to the command, Pepr streams logs from pods with label `pepr.dev/controller=admission`, if it is supplied the same functionality occurs as before.) #### What's Changed - chore: add journey test for `npx pepr monitor` by [@​cmwylie19](https://togithub.com/cmwylie19) [@​btlghrants](https://togithub.com/btlghrants) in [https://github.com/defenseunicorns/pepr/pull/493](https://togithub.com/defenseunicorns/pepr/pull/493) - docs: [Best Practices document](https://pepr-docs.netlify.app/main/best-practices/) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.4...v0.23.0 ### [`v0.22.4`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.4) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.2...v0.22.4) #### What's Changed - chore: new trigger for docs flow by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/489](https://togithub.com/defenseunicorns/pepr/pull/489) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/491](https://togithub.com/defenseunicorns/pepr/pull/491) - chore: bump actions/upload-artifact from 4.1.0 to 4.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/497](https://togithub.com/defenseunicorns/pepr/pull/497) - chore: bump actions/dependency-review-action from 3.1.5 to 4.0.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/498](https://togithub.com/defenseunicorns/pepr/pull/498) - chore: donation roadmap by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/492](https://togithub.com/defenseunicorns/pepr/pull/492) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.2...v0.22.4 </details> <details> <summary>kulshekhar/ts-jest (ts-jest)</summary> ### [`v29.1.2`](https://togithub.com/kulshekhar/ts-jest/blob/HEAD/CHANGELOG.md#2912-2024-01-22) [Compare Source](https://togithub.com/kulshekhar/ts-jest/compare/v29.1.1...v29.1.2) ##### Bug Fixes - calculated cache key based on `supportsStaticESM` ([a5d6f2d](https://togithub.com/kulshekhar/ts-jest/commit/a5d6f2d4f4bfa1c7c217f6faf9310958797b436f)) - correct error handling in `processAsync` ([e7be4bf](https://togithub.com/kulshekhar/ts-jest/commit/e7be4bf6a863cd76efec28f40fdd5193b2f50bad)), closes [#​4207](https://togithub.com/kulshekhar/ts-jest/issues/4207) - use `Config.ProjectConfig` ([918312b](https://togithub.com/kulshekhar/ts-jest/commit/918312bee22a795ec6bb347f95df4c1ff0a054de)), closes [#​4028](https://togithub.com/kulshekhar/ts-jest/issues/4028) </details> --- ### Configuration
-
- Jan 23, 2024
-
-
zamaz authored
## Description update outdated readme ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
Micah Nagel <micah.nagel@defenseunicorns.com>
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/curlimages/curl](https://togithub.com/curl/curl-container) | major | `7.85.0` -> `8.5.0` | | docker.io/grafana/grafana | minor | `10.1.5` -> `10.3.1` | | docker.io/library/busybox | minor | `1.31.1` -> `1.36.1` | | [ghcr.io/kiwigrid/k8s-sidecar](https://togithub.com/kiwigrid/k8s-sidecar) | patch | `1.25.2` -> `1.25.3` | | [grafana](https://grafana.com) ([source](https://togithub.com/grafana/helm-charts)) | minor | `7.0.6` -> `7.2.4` | | [registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar](https://togithub.com/kiwigrid/k8s-sidecar) ([source](https://repo1.dso.mil/dsop/kiwigrid/k8s-sidecar)) | patch | `1.25.2` -> `1.25.3` | | [registry1.dso.mil/ironbank/opensource/grafana/grafana](https://togithub.com/grafana/grafana) ([source](https://repo1.dso.mil/dsop/opensource/grafana/grafana)) | patch | `10.2.2` -> `10.2.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>curl/curl-container (docker.io/curlimages/curl)</summary> ### [`v8.5.0`](https://togithub.com/curl/curl-container/blob/HEAD/CHANGELOG.md#850-1---2023-01-19) [Compare Source](https://togithub.com/curl/curl-container/compare/8.4.0...8.5.0) ##### Changed - add libpsl - bump to alpine 3.19.0 ### [`v8.4.0`](https://togithub.com/curl/curl-container/blob/HEAD/CHANGELOG.md#840---2023-10-11) [Compare Source](https://togithub.com/curl/curl-container/compare/8.3.0...8.4.0) ##### Changed - bump to curl 8.4.0 - bump to alpine 3.18.4 - build enabled --with-gssapi ### [`v8.3.0`](https://togithub.com/curl/curl-container/releases/tag/8.3.0) [Compare Source](https://togithub.com/curl/curl-container/compare/8.2.1...8.3.0) #### \[8.3.1] - 2023-09-13 ##### Changed - bump to curl 8.3.0 - bump to alpine 3.18.3 ### [`v8.2.1`](https://togithub.com/curl/curl-container/blob/HEAD/CHANGELOG.md#821---2023-07-26) [Compare Source](https://togithub.com/curl/curl-container/compare/8.2.0...8.2.1) ##### Changed - bump to curl 8.2.1 ### [`v8.2.0`](https://togithub.com/curl/curl-container/blob/HEAD/CHANGELOG.md#820---2023-07-19) [Compare Source](https://togithub.com/curl/curl-container/compare/8.1.2...8.2.0) ##### Changed - bump to curl 8.2.0 - bump to alpine 3.18.2 ### [`v8.1.2`](https://togithub.com/curl/curl-container/blob/HEAD/CHANGELOG.md#812-5---2023-06-14) ##### Changed - added clamav and grype to security scan - added user working directory - skimmed apk cache - added back arches (arm64, etc) by fixing issue [#​3](https://togithub.com/curl/curl-container/issues/3) </details> <details> <summary>kiwigrid/k8s-sidecar (ghcr.io/kiwigrid/k8s-sidecar)</summary> ### [`v1.25.3`](https://togithub.com/kiwigrid/k8s-sidecar/releases/tag/1.25.3) [Compare Source](https://togithub.com/kiwigrid/k8s-sidecar/compare/1.25.2...1.25.3) ####
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-cli](https://togithub.com/defenseunicorns/uds-cli) | patch | `0.6.1` -> `0.6.2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>defenseunicorns/uds-cli (defenseunicorns/uds-cli)</summary> ### [`v0.6.2`](https://togithub.com/defenseunicorns/uds-cli/releases/tag/v0.6.2) [Compare Source](https://togithub.com/defenseunicorns/uds-cli/compare/v0.6.1...v0.6.2) ##### What's Changed - chore(deps): update github/codeql-action action to v3.23.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/326](https://togithub.com/defenseunicorns/uds-cli/pull/326) - fix: uds arg check by [@​andrewg-xyz](https://togithub.com/andrewg-xyz) in [https://github.com/defenseunicorns/uds-cli/pull/330](https://togithub.com/defenseunicorns/uds-cli/pull/330) **Full Changelog**: https://github.com/defenseunicorns/uds-cli/compare/v0.6.1...v0.6.2 </details> --- ### Configuration
Megamind <882485+jeff-mccoy@users.noreply.github.com> Co-authored-by:
-
zamaz authored
## Description refactor ci for releases to remove core-istio package and remove registry1 flavor of test bundles ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-k3d](https://togithub.com/defenseunicorns/uds-k3d) | patch | `0.3.0` -> `0.3.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>defenseunicorns/uds-k3d (defenseunicorns/uds-k3d)</summary> ### [`v0.3.1`](https://togithub.com/defenseunicorns/uds-k3d/blob/HEAD/CHANGELOG.md#031-2024-01-17) [Compare Source](https://togithub.com/defenseunicorns/uds-k3d/compare/v0.3.0...v0.3.1) ##### Bug Fixes - add zarf var for k3d_extra_args ([#​32](https://togithub.com/defenseunicorns/uds-k3d/issues/32)) ([6f8cb93](https://togithub.com/defenseunicorns/uds-k3d/commit/6f8cb93cf8d568e12fdf1e217c11905249b730e4)) </details> --- ### Configuration
-
- Jan 22, 2024
-
-
Micah Nagel authored## Description Update to add flavor to the upgrade task. ## Related Issue N/A ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
github-actions[bot] authored
-
zamaz authored
## Description fix broken release pipeline (--flavor omitted from create task on publish). ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [x ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 21, 2024
-
-
github-actions[bot] authored
-
zamaz authored
Adds zarf flavors for upstream images and IB. Includes refactoring of zarf packages using composability to cleanup the config and keep things dry and refactoring of the values files to image flavors specific + common. Both flavors deploy successfully on their respective architectures. On arm64 (or at least darwin arm64) when using the registry1(x86) flavor it fails at metrics server regarding the istio init container, which seems to be an issue [emulating x86 on mac](https://github.com/istio/istio/issues/36762#issuecomment-1034070488).
-
- Jan 18, 2024
-
-
github-actions[bot] authored
-
Micah Nagel authored
## Description It was discovered in test that the anti-affinity set on the gateway is problematic during upgrades. This is partially because we are on a single node for k3d, but in general the anti-affinity does not make sense to have here since the gateway is a single replica setup. ## Related Issue N/A ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 17, 2024
-
-
Micah Nagel authored
## Description Adds basic debug output (`kubectl get all -A` + `kubectl get package -A`) to the pipeline. This is currently run with a `!cancelled()` conditional but could be switched to `failure()` if we want to keep the output clean on success. Also modifies/fixes the PR conditional for check paths so that it properly executes only on PRs to main. ## Related Issue N/A ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
Micah Nagel authored
## Description Updates CI to add an upgrade test. Test order: - deploys k3d + zarf init from the PR branch - deploys uds-core zarf package from the latest release - creates + deploys uds-core from the PR branch - runs validations from the PR branch Does not include any upgrade testing at the individual source package level since these tests are just meant to short-circuit for dev cycles (this is a similar approach to our intent with flavor testing). It also does not address upgrades of the bundle (k3d/zarf init) which are out of the scope of uds-core's non-dev artifacts. ## Related Issue Resolves https://github.com/defenseunicorns/uds-core/issues/92 (at least as a first pass for testing the full deploy/upgrade) ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (CI) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 16, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.22.0` -> `0.22.2`](https://renovatebot.com/diffs/npm/pepr/0.22.0/0.22.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.22.2`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.2) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.1...v0.22.2) #### What's Changed - chore: unparsable docs.yml by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/488](https://togithub.com/defenseunicorns/pepr/pull/488) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.1...v0.22.2 ### [`v0.22.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.0...v0.22.1) #### features - feat: enable docs build on published release by [@​btlghrants](https://togithub.com/btlghrants) in [https://github.com/defenseunicorns/pepr/pull/484](https://togithub.com/defenseunicorns/pepr/pull/484) #### What's Changed - chore: bump actions/upload-artifact from 4.0.0 to 4.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/486](https://togithub.com/defenseunicorns/pepr/pull/486) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/487](https://togithub.com/defenseunicorns/pepr/pull/487) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.0...v0.22.1 </details> --- ### Configuration
-
Megamind authored
## Description This PR consolidates all Pepr capabilities into the folder `src/pepr`. This PR also introduces the UDS Operator, which manages a new CRD `packages` under the group `uds.dev/v1alpha1`. The UDS Operator manages the lifecycle of UDS Package CRs and their corresponding resources (e.g. NetworkPolicies, Istio VirtualServices, etc.). The operator uses [Pepr](https://pepr.dev) to bind the watch operations to the enque and reconciler. The operator is responsible for: - enabling Istio sidecar injection in namespaces where the CR is deployed - establishing default-deny ingress/egress network policies - creating a layered allow-list based approach on top of the default deny network policies including some basic defaults such as Istio requirements and DNS egress - providing targeted remote endpoints network policies such as `KubeAPI` and `CloudMetadata` to make policies more DRY and provide dynamic bindings where a static definition is not possible - creating Istio Virtual Services & related ingress gateway network policies ### Key Files and Folders ```bash . ├── controllers # Core business logic called by the reconciler │ ├── istio # Manages Istio VirtualServices and sidecar injection for UDS Packages/Namespace │ └── network # Manages default and generated NetworkPolicies for UDS Packages/Namespace ├── crd │ ├── generated # Type files generated by `uds run -f src/pepr/tasks.yaml gen-crds` │ ├── sources # CRD source files │ ├── register.ts # Registers the UDS Package CRD with the Kubernetes API │ └── validator.ts # Validates UDS Package CRs with Pepr ├── enque.ts # Serializes UDS Package CRs for processing by the reconciler ├── index.ts # Entrypoint for the UDS Operator └── reconciler.ts # Reconciles UDS Package CRs via the controllers ```
-
Tristan Holaday authored
## Description There are currently no tests, integration (using k3d) or unit, that test the exemptions allowed for Pepr policies. This PR adds 2 tests to explicitly verify that `registerExemptions()` works as intended. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 13, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.21.1` -> `0.22.0`](https://renovatebot.com/diffs/npm/pepr/0.21.1/0.22.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.22.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.21.1...v0.22.0) #### Features Make `npx pepr deploy` wait recursively for deployments to be in a ready-state - feat: npx pepr dev does not wait for resources to be fully up by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/435](https://togithub.com/defenseunicorns/pepr/pull/435) Work on multi-versioned docs automation for the [Docs Site](https://pepr-docs.netlify.app/v0.21.1/) - feat: delete website by [@​btlghrants](https://togithub.com/btlghrants) in [https://github.com/defenseunicorns/pepr/pull/459](https://togithub.com/defenseunicorns/pepr/pull/459) Locking down the Pepr generated Kubernetes manifests with securityContexts - feat: add sane defaults to the pod and containers in pepr deployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/445](https://togithub.com/defenseunicorns/pepr/pull/445) `npx pepr deploy --force` to override manager field in the underlying KFC implementation of [Server Side Apply](https://kubernetes.io/docs/reference/using-api/server-side-apply/#conflicts) eat: force option on npx pepr deploy by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/480](https://togithub.com/defenseunicorns/pepr/pull/480) (e2e style) Upgrade test of Kubernetes manifests - feat: pepr upgrade test by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/478](https://togithub.com/defenseunicorns/pepr/pull/478) Force rollouts to Pepr's Admission and Watcher deployments by adding an annotation to podSpecs - feat: add timestamp to podSpec annotations force rollout on deployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/483](https://togithub.com/defenseunicorns/pepr/pull/483) #### What's Changed - chore: update waitForDeployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/482](https://togithub.com/defenseunicorns/pepr/pull/482) - chore: add error message for easier debugging by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/479](https://togithub.com/defenseunicorns/pepr/pull/479) - chore: kubernetes slack channel for pepr and readme updates by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/467](https://togithub.com/defenseunicorns/pepr/pull/467) - chore: test code coverage by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/468](https://togithub.com/defenseunicorns/pepr/pull/468) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/456](https://togithub.com/defenseunicorns/pepr/pull/456) - chore: bump actions/dependency-review-action from 3.1.4 to 3.1.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/458](https://togithub.com/defenseunicorns/pepr/pull/458) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/457](https://togithub.com/defenseunicorns/pepr/pull/457) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/466](https://togithub.com/defenseunicorns/pepr/pull/466) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/469](https://togithub.com/defenseunicorns/pepr/pull/469) - chore: bump actions/checkout from 2 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/472](https://togithub.com/defenseunicorns/pepr/pull/472) - chore: bump actions/setup-node from 2 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/470](https://togithub.com/defenseunicorns/pepr/pull/470) - chore: bump codecov/codecov-action from 2 to 3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/471](https://togithub.com/defenseunicorns/pepr/pull/471) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/475](https://togithub.com/defenseunicorns/pepr/pull/475) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.21.1...v0.22.0 </details> --- ### Configuration
-
- Jan 12, 2024
-
-
Micah Nagel authored
-
- Jan 11, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-cli](https://togithub.com/defenseunicorns/uds-cli) | patch | `0.5.2` -> `0.5.3` | --- ### Release Notes <details> <summary>defenseunicorns/uds-cli (defenseunicorns/uds-cli)</summary> ### [`v0.5.3`](https://togithub.com/defenseunicorns/uds-cli/releases/tag/v0.5.3) [Compare Source](https://togithub.com/defenseunicorns/uds-cli/compare/v0.5.2...v0.5.3) ##### What's Changed - chore(deps): update anchore/sbom-action action to v0.15.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/297](https://togithub.com/defenseunicorns/uds-cli/pull/297) - chore(deps): update github/codeql-action action to v3.22.12 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/294](https://togithub.com/defenseunicorns/uds-cli/pull/294) - chore(deps): update actions/download-artifact action to v4.1.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/291](https://togithub.com/defenseunicorns/uds-cli/pull/291) - chore: update to zarf version 0.32.1 by [@​decleaver](https://togithub.com/decleaver) in [https://github.com/defenseunicorns/uds-cli/pull/300](https://togithub.com/defenseunicorns/uds-cli/pull/300) **Full Changelog**: https://github.com/defenseunicorns/uds-cli/compare/v0.5.2...v0.5.3 </details> --- ### Configuration
Jeff McCoy <code@jeffm.us> Co-authored-by:
razzle <harry@razzle.cloud> Co-authored-by:
-
Tristan Holaday authored
## Description Handling when seLinuxOptions contains defined user or role fields. ## Related Issue Fixes #95 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 10, 2024
-
-
Micah Nagel authored
-
Mike Vanhemert authored
## Description Trigger PR workflows for any change ... ## Related Issue ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
github-actions[bot] authored
-
- Jan 09, 2024
-
-
Mikael Vanhemert authored -
Micah Nagel authored
## Description This seems to be a common default across most istio installs (including Big Bang). The effect is just to make sure that the main "app" containers don't start until proxies are up. ## Related Issue Fixes https://github.com/defenseunicorns/uds-core/issues/69 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 08, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.18.1` -> `0.21.1`](https://renovatebot.com/diffs/npm/pepr/0.18.1/0.21.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [typescript](https://www.typescriptlang.org/) ([source](https://togithub.com/Microsoft/TypeScript)) | [`5.2.2` -> `5.3.3`](https://renovatebot.com/diffs/npm/typescript/5.2.2/5.3.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.21.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.21.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.21.0...v0.21.1) #### What's Changed - chore: bump the production-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/455](https://togithub.com/defenseunicorns/pepr/pull/455) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.21.0...v0.21.1 ### [`v0.21.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.21.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.3...v0.21.0) #### What's Changed - feat: add resourceVersion tracking for watches & better watch recovery by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/453](https://togithub.com/defenseunicorns/pepr/pull/453) - chore: bump the production-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/452](https://togithub.com/defenseunicorns/pepr/pull/452) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.3...v0.21.0 ### [`v0.20.3`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.3) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.2...v0.20.3) #### What's Changed - fix: bind debug logs to fluent-client watch log handler by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/450](https://togithub.com/defenseunicorns/pepr/pull/450) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.2...v0.20.3 ### [`v0.20.2`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.2) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.1...v0.20.2) #### What's Changed - chore: bump actions/upload-artifact from 3.1.3 to 4.0.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/442](https://togithub.com/defenseunicorns/pepr/pull/442) - chore: bump the prom-client version by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/443](https://togithub.com/defenseunicorns/pepr/pull/443) - chore: bump actions/setup-node from 4.0.0 to 4.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/446](https://togithub.com/defenseunicorns/pepr/pull/446) - chore: bump the production-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/448](https://togithub.com/defenseunicorns/pepr/pull/448) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/447](https://togithub.com/defenseunicorns/pepr/pull/447) - chore: update peer deps (not updated by dependabot) by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/449](https://togithub.com/defenseunicorns/pepr/pull/449) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.1...v0.20.2 ### [`v0.20.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.19.0...v0.20.1) #### What's Changed - chore: spelling by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/441](https://togithub.com/defenseunicorns/pepr/pull/441) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.0...v0.20.1 ### [`v0.19.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.19.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.18.1...v0.19.0) #### Features - feat: add pepr monitor command by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/411](https://togithub.com/defenseunicorns/pepr/pull/411) - feat: updated containers function to work with mutate requests by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/418](https://togithub.com/defenseunicorns/pepr/pull/418) ```typescript When(a.Pod) .IsCreated() .Validate(pod => { // returns all containers in pod const podsContainers = containers(pod); for (const container of podsContainers) { ... go on ```  #### What's Changed - chore: create a library of helper functions that make working with pepr easier by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/415](https://togithub.com/defenseunicorns/pepr/pull/415) - fix: watch does not respect ns testing by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/398](https://togithub.com/defenseunicorns/pepr/pull/398) - chore: fix PeprStore rendering where multiple capabilities are in play by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/422](https://togithub.com/defenseunicorns/pepr/pull/422) - chore: update logo image in header by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/420](https://togithub.com/defenseunicorns/pepr/pull/420) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.18.1...v0.19.0 </details> <details> <summary>Microsoft/TypeScript (typescript)</summary> ### [`v5.3.3`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.3.3): TypeScript 5.3.3 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.3.2...v5.3.3) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-3/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript 5.3.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.0%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.1%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.2%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.3 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.3%22+is%3Aclosed+). Downloads are available on: - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) ### [`v5.3.2`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.3.2): TypeScript 5.3 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.2.2...v5.3.2) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-3/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript 5.3.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.0%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.1%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.2%22+is%3Aclosed+). Downloads are available on: - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) </details> --- ### Configuration
-
- Jan 06, 2024
-
-
Micah Nagel authored
## Description Adds the proper config to setup loki storage type. ## Related Issue Fixes https://github.com/defenseunicorns/uds-core/issues/83 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 05, 2024
-
-
github-actions[bot] authored
Mikael Vanhemert <mike.vanhemert@defenseunicorns.com>
-
Mike Vanhemert authored
## Description When establishing the security context for a pod, Pepr security policy will look for labels to specify the runAsUser, runAsGroup, and/or fsGroup and use those values. ## Related Issue ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 22, 2023
-
-
zamaz authored
## Description Adds initial renovate config. This should handle the new Ironbank flavor as well but currently does not have any "intelligence" around included/supported image versions in a given helm chart version. ## Related Issue N/A ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 12, 2023
-
-
github-actions[bot] authored
-
![github-actions[bot]'s avatar](https://secure.gravatar.com/avatar/e7cd911927c7d1acf6281b69d385990d8fadcd26871048bbcdbff2e88da7f607?s=64&d=identicon "github-actions[bot]")
![renovate[bot]'s avatar](https://secure.gravatar.com/avatar/4836c036306c20663d397df5cd0c2046c486c5ce1327af904affd8d285099e24?s=64&d=identicon "renovate[bot]")
