kro v0.9.0
security+++++++++++~******!
Changes
- Group Dependabot npm and Go security updatessecurity
- Eliminate duplicate CEL type building during RGD constructionchanged
- Cache base declarations and environment with sync.Oncechanged
- Add caching for CEL compilation artifacts to optimize performancechanged
- Removes the lock convoy during large RGD burstschanged
- Make string templates compile to concatenationchanged
- Use DefaultUnstructuredConverter to eliminate JSON round-trips in conditionschanged
- Json: json.marshal() and json.unmarshal() for working with JSON payloads directly in expressionsadded
- Maps: map.merge() to combine two maps with second-map-wins semanticsadded
- Lists: lists.setAtIndex(), lists.insertAtIndex(), lists.removeAtIndex() for immutable list mutations; k8s Lists library for lists.concat() and friendsadded
- Quantity: parse and manipulate Kubernetes Quantities ("500m", "2Gi") nativelyadded
- Bind: cel.bind(varName, init, body) to name intermediate values and reduce repetitionadded
68 more lines
- Comprehensions: TwoVarComprehensions (transformMap, transformList) and sortBy for stable ordering by arbitrary expressionsadded
- Random: random.seededInt(min, max, seed) for deterministic integer generation from resource UIDsadded
- Implement KREP-10 - support cluster-scoped instance CRDsadded
- External ref watches and external ref collectionsadded
- Support CEL expressions in LabelSelectors for external collectionsadded
- Disable instance reconciliation when a kro.run/reconcile:"disabled" label is presentadded
- Add omit() for conditional field omission in templatesadded
- Add events for instance status condition transitionadded
- Implement standard Kubernetes feature gates via component-baseadded
- Expose feature gates in chart valuesadded
- Gate omit() behind CELOmitFunction feature flagadded
- Reject omit() on required resource metadata fieldsadded
- Allow includeWhen to reference other resourcesadded
- Add json.marshal and json.unmarshal CEL functionsadded
- Add map library with merge functionalityadded
- Add index-mutation functions to the lists libraryadded
- Add k8s Lists library supportadded
- Add k8s Quantity library supportadded
- Add cel.bind() support to default environment and AST inspectoradded
- Add support for TwoVarComprehensions in CEL environmentadded
- Improve loop variable scoping and support sortBy comprehensionadded
- Add deterministic seeded integer generation functionadded
- Add version support for the cel json libraryadded
- Detect default value changes as non-breaking in schema comparisonadded
- Block graph propagation on terminating managed resourcesadded
- Add topologySpreadConstraints in deploymentadded
- Add opt-in pprof profiling support via build tagsadded
- Make instance requeue interval configurableadded
- Expose leader election tuning flags in helm chartadded
- Add metrics for pkg/runtimeadded
- Add RGD controller metricsadded
- Add instance controller metricsadded
- Add metrics for CEL cache hit/miss trackingadded
- Add client-go and reflector metrics registrationadded
- Use expressive histogram buckets for controller reconciliation metricsadded
- Implementation of Graph Revisions (KREP-013)added
- Watch owned GraphRevisions from the RGD controlleradded
- Watch graph revisions by spec.snapshot.name for orphan adoptionadded
- Limit collection size to 1000 to protect cluster performanceadded
- Limit collection dimension to 5added
- Disable instance reconciliation with annotation instead of labeladded
- KREP-15 label/annotation migration to internal.kro.run/ prefixadded
- Flaky validate RGD status testfixed
- Flaky validate RGD status integration testfixed
- Wrong schema apiVersion definition in RGD chainingfixed
- Properly return error in simpleschema parsing when the marker doesfixed
- Remove the rgd labels from managed resourcesfixed
- Preserve prune scope on UID conflicts and requeue retryfixed
- Pass up expressive errorfixed
- Schema-aware CEL value conversionfixed
- Show root cause errorfixed
- Skip parent instance events with unchanged generationfixed
- Skip instance-namespace label for cluster-scoped instancesfixed
- Correct RGD conditionsfixed
- Register collection watch for all expanded resourcesfixed
- Handle oneOf string|number schemas in UnstructuredToValfixed
- Return a requeue error when waiting for readinessfixed
- Do not count requeue signals as handler errors in dynamic_controller_handler_errors_totalfixed
- Sort transformList result before comparison in TwoVar testfixed
- Add instance state in progress casefixed
- Expose schema resolver metrics on controller-runtime registryfixed
- ResourceGraphDefinition delete predicate handlingfixed
- Allow external collections to list across all namespacesfixed
- Tighten cluster-scoped instance namespace validationfixed
- Handle cluster-scoped instances in reconciliation and SSA patchesfixed
- Surface graph resolution failures in conditions and metricsfixed
- Get rid of cel build caches due to problems during stabilizationfixed
- Missing dynamic controller registration, and wire up missing metricsfixed
47 maintenance lines (dependency bumps, CI, tests, docs)
- Move cel conversion functions to separate packagemaintenance
- Use a heap-based topological sortmaintenance
- Move InstanceState and NodeState to api/v1alpha1maintenance
- Split large files and simplify state managementmaintenance
- Derive known functions from CEL environmentmaintenance
- Add condition prune mechanism for upgradesmaintenance
- Dynamiccontroller: retain parent informers for shared GVR watchesmaintenance
- Dynamiccontroller: rollback provisional watches on failed reconcilesmaintenance
- Commit watches on requeue signals, not just on successmaintenance
- Document cluster-scoped instance supportmaintenance
- Expand external references to support collections with label selectorsmaintenance
- Add a page for feature gatesmaintenance
- Add stability notice for ALPHA metricsmaintenance
- Rewrite graph revisions page and add interactive diagramsmaintenance
- Update docs be explicitly clear about resources depending on schema.specmaintenance
- Add "Building Abstractions with kro" guidesmaintenance
- Fix formatting in the verify installation stepmaintenance
- Add AWS Accounts Factory example with nested RGDsmaintenance
- Document escaping Bash '${VAR}' syntax for CELmaintenance
- Website: overhaul overview docs with interactive resource graph diagramsmaintenance
- Website: add KREP roadmap pagemaintenance
- KREP-003: Decorators (Collection Watching)maintenance
- KREP-008: docs: add proposal for resource-backed includeWhen evaluationmaintenance
- KREP-10 for cluster-scoped instance CRDsmaintenance
- KREP-017 template field omission with omit()maintenance
- Harden pkg/runtime coveragemaintenance
- Harden instance reconciler coveragemaintenance
- Harden rgd controller unit testsmaintenance
- Harden unit tests for graph builder and friendsmaintenance
- Verify externalref integration cases reconcile on watched updatesmaintenance
- Integration test case, omit() removes fieldmaintenance
- Add webhook denial integration tests with ValidatingAdmissionPolicymaintenance
- Add an upgrade test framework that validates kro upgrades don't breakmaintenance
- Add verify-codegen ci entrypointmaintenance
- Bump controller-runtime to v0.23.1maintenance
- Bump cel-go to v0.27.0maintenance
- Implement annotation change predicate for rgd controllermaintenance
- Remove myself from NOTICEmaintenance
- Bump webpackmaintenance
- Bump the npm_and_yarn group across 2 directories with 4 updatesmaintenance
- Bump the npm_and_yarn group across 1 directory with 2 updatesmaintenance
- Bump @tootallnate/oncemaintenance
- Bump dompurifymaintenance
- Remove pre-v0.7.0 entries from versions.jsonmaintenance
- Add jakobmoellerdev to kro-maintainersmaintenance
- Promote nicslatts to emeritus-kro-maintainersmaintenance
- Add verify-codegen scriptmaintenance
127 lines1 security47 added6 changed26 fixed47 maintenancetyped from the source notes