kro v0.5.0
security+++++++++~~~-*****!
Changes
- Adding required security contact filessecurity
- Remove some defaulting fields in deployment spec for testsremoved
- Concurrent applyset operations: Enabled parallel processing for apply and prune operations using configurable concurrency that defaults to the number of objects in the applyset, speeding up reconciliation for multi-resource instances.changed
- Controller optimizations: Watch CRDs as metadata only, use shared HTTP client with cached REST mappings, and RESTMapper optimizationschanged
- Schema resolver caching: Added TTL/LRU-based caching (5-minute TTL, 500-entry cap) to reduce repeated API calls and client-side throttling. Uses singleflight deduplication to prevent redundant requests when multiple workers fetch the same schema.changed
- Latest release version urlchanged
- New schema validation markers: pattern, minLength, maxLength, uniqueItems, maxItems, and minItems in SimpleSchema.added
- Expose leader election namespace in argsadded
- Add immutable markeradded
- Add support for pattern, minLength, maxLengt, uniqueItems, maxItems and minItems markersadded
- Create applyset for use by instance reconcileradded
- !feat: Reserve item and items as keywords for collectionsadded
27 more lines
- Add concurrency support in applyset operationsadded
- Add TTL/LRU based caching to schema resolveradded
- LSP Setupadded
- Add moar reserved keywords to validation listadded
- Add NOTICE fileadded
- Improve error messages for type mismatches in parserfixed
- Verify existing ownership of CRD managed by ResourceGraphDefinition to prevent conflictfixed
- Various controller optimizations for improved performancefixed
- Update version label from 'latest' to 'main' in docusaurus configurationfixed
- Use controllerruntime's namespaced name correctlyfixed
- Fix license headersfixed
- Kro now uses ApplySets with Server-Side Apply (SSA) as the default method for managing resources created by instance reconcilers. This is a major architectural improvement that replaces client-side apply and solves several long-standing issues: proper resource pruning, elimination of never-ending reconciliation loops on ConfigMaps and Secrets, and better handling of server-transformed resources. ApplySets provide superior conflict resolution and field ownership tracking, with concurrent operations support for improved performance. (#561, #712). If you see any issues with this feature, do not hesitate to reach out to us!other
- Improved error messages for type mismatches in parser.other
- CRD ownership verification to prevent conflicts when multiple ResourceGraphDefinitions try to manage the same CRD.other
- Switching to the Kubernetes code of conductother
- Updates for K8s onboardingother
- Project file updates for SIG subproject requirementsother
- Adding SIG leadsother
- Update NOTICEother
- Updating NOTICE to remove people who signed CLAother
- Mv hack under scripts to reduce Top level foldersother
- Removing after signing CLAother
- Another CLA signingother
- List the SIG and K8s on the website footer.other
- CLA signed - removing from NOTICEother
- Removing michaelhtm from NOTICE - signed CLAother
- Update NOTICE with removal of completed signed agreementother
25 maintenance lines (dependency bumps, CI, tests, docs)
- Added versioned documentation to the kro.run website, allowing users to view docs for specific releases (v0.1.0 through v0.5.0) and navigate between versions.maintenance
- Add versioned documentation site for v0.1.0 through v0.4.1maintenance
- Update FAQ with instructions for using KRO with ArgoCDmaintenance
- Update all imports and URLs from github.com/kro-run to kubernetes-sigsmaintenance
- Docusaurus bump to 3.9.1, update image paths and dependencies in websitemaintenance
- Upgrade Node.js from 18 to 20 in docs deployment workflowmaintenance
- Remove out-dated governance page from docs sitemaintenance
- Remove reference for S3 bucket, not used in this examplemaintenance
- RGDs all the way downmaintenance
- Revert "test(core): RGDs all the way down"maintenance
- Properly use SpecContext from Ginkgomaintenance
- Update image repository to registry.k8s.iomaintenance
- Create scripts to build and push imagesmaintenance
- Push helm chart alongside imagemaintenance
- Dropped ATTRIBUTION.md as part of migration to SIGmaintenance
- Hydrate goproxy after each pushmaintenance
- Tidy up lack of parity on dynamic controller interfacemaintenance
- Make dynamic controller logging object-type agnostic.maintenance
- Update owners files to textmaintenance
- Update copyright to Kubernetes Authorsmaintenance
- Remove GitHub Actions stale bot workflow in favor of Prowmaintenance
- Bump the npm_and_yarn group across 1 directory with 2 updatesmaintenance
- Refactor logic out of GHAmaintenance
- Bump gcb-docker-gcloud to latest versionmaintenance
- Run helm using go runmaintenance
64 lines1 security1 removed11 added4 changed6 fixed16 other25 maintenancetyped from the source notes