v0.4.0

Fence Agents Remediation v0.4.0

Notable Changes

• Add support to multiple templates with the same kind by @mshitrit in #135
• Setting memory limit to 512 by @mshitrit in #137
• Build a file-based catalog by @clobrano in #138
• Test Scorecard testing in Makefile by @razo7 in #141
• Enable out-of-service taint in FAR by @k-keiichi-rh in #92
• Update bundle image by @razo7 in #139
• Update docs with the new remediationStrategy spec by @clobrano in #145

Release Artifacts

Images

• Operator: quay.io/medik8s/fence-agents-remediation-operator:v0.4.0
• Bundle: quay.io/medik8s/fence-agents-remediation-operator-bundle:v0.4.0
• Catalog aka Index: quay.io/medik8s/fence-agents-remediation-operator-catalog:v0.4.0

Source code and OLM manifests

Please find the source code and the OLM manifests in the Assets section below.

What's Changed

• Rewrite FAR README with more Sections by @razo7 in #80
• Create Namespace if it does not exist by @clobrano in #129
• Log error in remediation by @mshitrit in #128
• Automate Communities bundle creation by @clobrano in #131
• Set Golang version in Dockerfile by @razo7 in #132
• Add support to multiple templates with the same kind by @mshitrit in #135
• Manual workflow for tagged versions by @clobrano in #136
• Setting memory limit to 512 by @mshitrit in #137
• Run bundle in test target to ensure bundle is up to date by @slintes in #140
• Build a file-based catalog by @clobrano in #138
• Test Scorecard testing in Makefile by @razo7 in #141
• Enable out-of-service taint in FAR by @k-keiichi-rh in #92
• Update bundle image by @razo7 in #139
• README note on Scorecard tests by @razo7 in #143
• Update docs with the new remediationStrategy spec by @clobrano in #145

Full Changelog: v0.3.0...v0.4.0

v0.3.0

Fence Agents Remediation v0.3.0

Notable Changes

• High Availability for pod with 2 replicas
• Remediation Events for the operator process and node state
• Rework running Fence Agent command
• Agent Name Validation by Format and Binary
• Remove VolumeAttachment deletion from resource deletion
• Add Azure agent, fence-azure-arm, and GCP agent, fence_gce.
• Use the new suggested namespace (openshift-workload-availability)

Release Artifacts

Images

• Operator: quay.io/medik8s/fence-agents-remediation-operator:v0.3.0
• Bundle: quay.io/medik8s/fence-agents-remediation-operator-bundle:v0.3.0
• Catalog aka Index: quay.io/medik8s/fence-agents-remediation-operator-catalog:v0.3.0

Source code and OLM manifests

Please find the source code and the OLM manifests in the Assets section below.

What's Changed

• Match Condition Message to Variable Name by @razo7 in #78
• Update FAR Template shortName by @razo7 in #81
• Create bundle for bundle-community target by @razo7 in #86
• Fix FenceAgentSucceededConditionMessage Condition Message by @razo7 in #85
• Explicitly Check the Return Error by @razo7 in #83
• Stop Update Status When a Finalizer is Missing by @razo7 in #84
• Add fence-azure-arm agent by @jcanocan in #91
• Fix http/2 CVE by @razo7 in #94
• Disable HTTP/2 in metrics server by @clobrano in #97
• Update kube-rbac-proxy to v0.15.0 by @clobrano in #99
• Add missing RBAC permissions by @jcanocan in #101
• Remove volumeAttachment deletion by @razo7 in #102
• Add bundle-cleanup target by @clobrano in #103
• Fix typos in Readme by @clobrano in #104
• Bundle-cleanup to use BUNDLE_RUN_NAMESPACE for namespace by @clobrano in #105
• Add fence_gce Agent for GCP by @razo7 in #95
• Delete Pods with Zero Grace Period by @razo7 in #110
• Randomize Unit Tests by @razo7 in #108
• Print Remediation Time in E2E Tests by @razo7 in #111
• High Availability for pod with 2 replicas by @razo7 in #112
• Rework running Fence Agent command by @clobrano in #106
• Set Suggested Namespace by @razo7 in #114
• Set Replace Annotation by @razo7 in #115
• Shorten Timeouts for E2e Tests by @razo7 in #113
• Improve Logs from Updating Conditions by @razo7 in #117
• Add Events for far Remediation Process by @razo7 in #107
• Initialize Event Recorder for executer by @razo7 in #120
• update alm examples with retry option by @clobrano in #122
• Validate Agent Name by Format and Binary by @razo7 in #119
• Update Tools & APIs by @razo7 in #123
• Update Readme with the optional retry CR parameters by @clobrano in #121
• Update CSV description by @razo7 in #79
• Fix Remediation Events Occurrences and Names by @razo7 in #125
• Add list and watch permission for templates to aggregated role by @slintes in #126
• [release-0.3] Rewrite FAR README with more Sections by @openshift-cherrypick-robot in #127
• [release-0.3] Set Golang version in Dockerfile by @openshift-cherrypick-robot in #134

New Contributors

• @jcanocan made their first contribution in #91

Full Changelog: v0.2.1...v0.3.0

v0.2.1

Fence Agents Remediation v0.2.1

Notable Changes

• Handle HTTP/2 Rapid Reset Vulnerability (CVE-2023-44487)

Release Artifacts

Images

• Operator: quay.io/medik8s/fence-agents-remediation-operator:v0.2.1
• Bundle: quay.io/medik8s/fence-agents-remediation-operator-bundle:v0.2.1
• Catalog aka Index: quay.io/medik8s/fence-agents-remediation-operator-catalog:v0.2.1

Source code and OLM manifests

Please find the source code and the OLM manifests in the Assets section below.

What's Changed

• [release-0.2] Fix http/2 CVE by @openshift-cherrypick-robot in #96
• [release-0.2] Update kube-rbac-proxy to v0.15.0 by @openshift-cherrypick-robot in #100

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Fence Agents Remediation v0.2.0

Notable Changes

• Workload Deletion - taint (medik8s.io/fence-agents-remediation:NoExecute) a node and manually delete its remaining pods and PVCs, in addition to rebooting the node
• Run Fence Agent only with reboot action
• Support node-healthcheck-operator timed-out annotation
• Update label (breaks upgrade from v0.1.0)
• Add Status Conditions to FenceAgentsRemediation CR
• Validate CR's name to Node's name
• Support restricted Pod Security Admission level
• Shrink image size

Release Artifacts

Images

• Operator: quay.io/medik8s/fence-agents-remediation-operator:v0.2.0
• Bundle: quay.io/medik8s/fence-agents-remediation-operator-bundle:v0.2.0
• Catalog aka Index: quay.io/medik8s/fence-agents-remediation-operator-catalog:v0.2.0

Source code and OLM manifests

Please find the source code and the OLM manifests in the Assets section below.

What's Changed

• Set minKubeVersion 1.24.0 by @razo7 in #35
• Add Medik8s icon for FAR by @razo7 in #37
• CRDs are namespaced by @razo7 in #34
• Automate GitHub Release Draft by @razo7 in #40
• Update gitignore for VScode by @razo7 in #43
• Use Downward API for Namespace by @razo7 in #42
• Get Cluster Information for Running FA on AWS and Test Nodes Status by @razo7 in #32
• Improve timestamp readability in logs by @razo7 in #44
• Sort Imports update by @razo7 in #45
• Run container as non-root by @razo7 in #31
• Apply PSA Changes by @razo7 in #47
• Set Environment Variable for Tests by @razo7 in #49
• Update Ginkgo to GinkgoV2 by @razo7 in #50
• Reduce Container Size by @razo7 in #52
• Validate Node Name by @razo7 in #48
• Update to Golang v1.20 by @razo7 in #57
• Check If AWS Mahchine Has a Node by @razo7 in #58
• Fence Agent Output Check by @razo7 in #55
• Support and Handle Taints by @razo7 in #53
• Improving Unit Test Logic and Time by @razo7 in #59
• FAR E2E Test - Check Node Reboot by Boot Time and Patch CredentialsRequest for AWS by @razo7 in #20
• Log Pod Name on Error by @razo7 in #60
• Update Tools and API Versions by @razo7 in #56
• Validate utils Package and Taint Functionality by @razo7 in #61
• End Reconcile after Finalizer Addition by @razo7 in #64
• test-e2e target for any platform by @razo7 in #66
• Use Kubernetes Recommended Label for commonLabels by @razo7 in #46
• Add priorityClassName to the Manager Container by @razo7 in #67
• Two Remediations and Taint Addition for E2E by @razo7 in #62
• Minimize Reboot Test Pod Warnings of PSA by @razo7 in #65
• Support Only reboot Action by @razo7 in #54
• Add Explicit Workload Deletion by @razo7 in #63
• Set Node Unhealthy in E2E by Stopping Kubelet by @razo7 in #68
• Stop Remediation When NHC Timed Out Annotation Exists by @razo7 in #72
• Improve Verification of FA Success Response by @razo7 in #70
• Add Status Conditions for FAR CR by @razo7 in #69
• Publish FAR to Stable Channel by @razo7 in #71
• Improve verifyStatusCondition Function Readability & Gomega Expect Update by @razo7 in #73
• Support Operator Upgrades by @razo7 in #77
• Add Two Reasons for Updating and Stopping Remediation by @razo7 in #76
• Stale Cache on Fast Reconcile by @razo7 in #74
• [release-0.2] Update FAR Template shortName by @openshift-cherrypick-robot in #82

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Fence Agents Remediation v0.1.0

Release Artifacts

Images

• Operator: quay.io/medik8s/fence-agents-remediation-operator:v0.1.0
• Bundle: quay.io/medik8s/fence-agents-remediation-operator-bundle:v0.1.0
• Catalog aka Index: quay.io/medik8s/fence-agents-remediation-operator-catalog:v0.1.0

Source code and OLM manifests

Please find the source code and the OLM manifests in the Assets section below.

What's Changed

• Align Makefile- Image Names and Version by @razo7 in #1
• Align Makefile- Verify Golang Dependencies by @razo7 in #2
• Align Makefile- kubectl or oc by @razo7 in #4
• Initial README for FAR by @razo7 in #5
• Align Makefile - Install Tools by @razo7 in #3
• Refactor Repository Location by @razo7 in #6
• Channel and Image Update by @razo7 in #8
• Refactor Group Name to fence-agents-remediation by @razo7 in #7
• Add Five CSV Metadata Annotations by @razo7 in #9
• Align Makefile - Bundle Creation Update by @razo7 in #10
• Fix typo in CSV description metadata by @clobrano in #13
• Fix url-install-tool Target by @razo7 in #14
• sort-imports Tool by @razo7 in #15
• GitHub CI Tests by @razo7 in #12
• Missing operator-sdk target by @razo7 in #17
• Align FAR CRDs to NHC by @razo7 in #16
• Unit Test for FAR Controller by @razo7 in #11
• Align Makefile - Goimports instead of go fmt by @razo7 in #19
• Add operator-sdk annotations - FAR resources by @razo7 in #18
• Plural s for external cluster role by @razo7 in #21
• Extend FAR Readme by @razo7 in #22
• Update Golang to v1.18 by @razo7 in #25
• Build FAR with flags by @razo7 in #24
• CRD & CSV update by @razo7 in #23
• Correct build container location by @razo7 in #26
• Dummy e2e Test by @razo7 in #29
• Extend Bundle Validation with bundle-validate Target by @razo7 in #27
• Add bundle-run Makefile target by @clobrano in #28
• Update ext remediation rule by @slintes in #33
• Add fence_aws Fence Agent by @razo7 in #30
• [release-0.1] Set minKubeVersion 1.24.0 by @openshift-cherrypick-robot in #36
• [release-0.1] CRDs are namespaced by @openshift-cherrypick-robot in #39
• [release-0.1] Add Medik8s icon for FAR by @openshift-cherrypick-robot in #38
• [release-0.1] Automate GitHub Release Draft by @openshift-cherrypick-robot in #41

New Contributors

• @clobrano made their first contribution in #13
• @slintes made their first contribution in #33
• @openshift-cherrypick-robot made their first contribution in #36

Full Changelog: https://github.com/medik8s/fence-agents-remediation/commits/v0.1.0