v0.30.0

[github.com/gardener/oidc-apps-controller:v0.30.0]

✨ New Features

• [USER] Bump Golang runtime to 1.26.5 by @bozhidar Atanasov [gardener/oidc-apps-controller@379a2efe82053355be70524761941ecb4ac97d9c]
• [USER] Bump kube-rbac-proxy-watcher to v0.7.0 by @bozhidar Atanasov [gardener/oidc-apps-controller@dcbe6bb5b855894d799cc8c7b9d1a6a800f14422]
• [USER] Group istio.io/** dependencies in renovate PRs. by @bozhidar Atanasov [gardener/oidc-apps-controller@ca9e5791c01e02867f83235d0ae349557c40e117]

application/spdx+json

• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:4b4475c4b13d0ed9a9d542a642694d2d06ed7661a1a505765375b76359522efb
• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:bab0497b1bf641baa33a211d638fb85b7b3eddb42f8e3241bcae849b07073d0f

application/vnd.cyclonedx+json

• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:8a555949576a7e1540918c3347c8b063722a247c93d4a44dd42f9ad1f5245dd6
• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:b85d3879d32ece02a029876bc0bc1123098fc9263e6229e29cd144d205e7ae69

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.30.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.30.0

v0.29.0

[github.com/gardener/oidc-apps-controller:v0.29.0]

✨ New Features

• [USER] Cleanup of stale resources by @bozhidar Atanasov [gardener/oidc-apps-controller@f0bbc252bd2e0818e3fdadd234f2cd831bb7825f]
• [USER] Bump oauth2-proxy and kube-rbac-proxy-watcher by @bozhidar Atanasov [gardener/oidc-apps-controller@7ee34eb4f0b3651f056e0087953a663eb262dfe7]
• [USER] Replace gopkg.in/yaml.v2 with gopkg.in/yaml.v3 by @bozhidar Atanasov [gardener/oidc-apps-controller@3a017dabf6ca01bbef6320ae993f0b3619d2fb24]

🏃 Others

• [DEVELOPER] Introduce renovate.json5 configuration file and remove dependabot configuration file. by @bozhidar Atanasov [gardener/oidc-apps-controller@742874a1fb3223ceeb9cb024b1f6e69339c3ece1]

application/spdx+json

• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:78880c04752f4ddcfe9c739dfecbfd6323a5bcd842fc74cd44c09ac227752526
• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:e6780f1b6b946eee5d43ea02940e6ea16211f07ee8f68965b05def669afc3f5c

application/vnd.cyclonedx+json

• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:29e40c6448a5eeb36c007a94a8e8d631d2c5283a084ee64e843538d90cd2a3bf
• oidc-apps-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:d614e0c1580e387d6dd3214e89773aaadcbdea8e54224e4a838b9c45f4026a17

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.29.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.29.0

v0.28.0

[github.com/gardener/oidc-apps-controller:v0.28.0]

✨ New Features

• [OPERATOR] The oidc-apps-controller is now built with with Go 1.26.3 by @Bobi-Wan [#361]
• [USER] Add support for Istio ingress. by @bozhidar Atanasov [gardener/oidc-apps-controller@5aa6eed363db5583fb6e14d9915c452864040e28]

🏃 Others

• [DEVELOPER] Responsibility transfer by @bozhidar Atanasov [gardener/oidc-apps-controller@c623fde4967ba03782b5037a611f875e22e6155b]

application/spdx+json

• oidc-apps-controller-spdx-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:acf047df10c02c4d47b1b61d5a20d0fe16d228d24dceda5f4d67afa1191ac2e9
• oidc-apps-controller-spdx-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller@sha256:afd99f4292d11f6a5d87baf8c6df784f701468b6c697b9145d877b40f961e87c

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.28.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.28.0

v0.26.0

[github.com/gardener/oidc-apps-controller:v0.26.0]

🐛 Bug Fixes

• [OPERATOR] Fixed host annotation resolution in the pod webhook to correctly use the HTTPRoute hostPrefix when HTTPRoute is enabled, instead of always falling back to the generic host configuration. by @nickytd [#347]

🏃 Others

• [OPERATOR] Updated sidecar proxy images: kube-rbac-proxy-watcher bumped to v0.5.0 and oauth2-proxy bumped to v7.15.1. by @nickytd [#348]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.26.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.26.0

v0.25.0

[github.com/gardener/oidc-apps-controller:v0.25.0]

✨ New Features

• [OPERATOR] Add fallback for fetchClientIdBySeedIdentifier by @Andreea Denitiu [gardener/oidc-apps-controller@d2b29ec8313c23b89b3a1e0ab3417ac66c8f277f]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.25.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.25.0

v0.24.0

[github.com/gardener/oidc-apps-controller:v0.24.0]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue where the OIDC Apps controller would attempt to list HTTPRoute resources even when the Gateway API scheme was not registered, causing errors on clusters without Gateway API CRDs installed. by @nickytd [#336]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.24.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.24.0

v0.23.0

[github.com/gardener/oidc-apps-controller:v0.23.0]

✨ New Features

• [OPERATOR] Added defaultPath configuration option for Ingress and HTTPRoute targets. When set, requests to / are redirected to the specified path. For Ingress this uses the nginx configuration-snippet annotation; for HTTPRoute a Gateway API RequestRedirect filter rule is prepended. by @niki Dokovski [gardener/oidc-apps-controller@6709b00a2ec7ab8bd7f64951674294c01ab915d4]

🏃 Others

• [OPERATOR] Simplified isValidDefaultPath validation using a compiled regex and enforced a maximum path length of 32 characters for HTTPRoute default paths. by @niki Dokovski [gardener/oidc-apps-controller@d8e33908718a5afcb8e235fd2a44fc58fb9e1d5f]
• [OPERATOR] Migrated provider-local dev environment deployment from numbered shell scripts to a kustomize-based workflow with make deploy / make deploy-check targets; added Victoria Logs OIDC support to the local setup. by @nickytd [#330]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.23.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.23.0

v0.22.0

[github.com/gardener/oidc-apps-controller:v0.22.0]

⚠️ Breaking Changes

• [OPERATOR] The imagevector.OverrideEnv constant has been renamed from IMAGEVECTOR_OVERRIDE to IMAGEVECTOR_OVERWRITE. WithEnvOverride now expects the environment variable to contain a file path to a YAML override file instead of constructing per-image environment variable names. Update any deployments or scripts that set IMAGEVECTOR_OVERRIDE_* environment variables to instead set IMAGEVECTOR_OVERWRITE to the path of an image vector override YAML file. by @niki Dokovski [gardener/oidc-apps-controller@25ca94e094ad5683e2849f1b36cee14b6a70c694]

🏃 Others

• [OPERATOR] Tool dependencies (golangci-lint, gosec, govulncheck, gotestsum, gci, mockgen, setup-envtest, addlicense) have been extracted into a dedicated tools/go.mod module, removing them from the root go.mod to reduce dependency noise. by @niki Dokovski [gardener/oidc-apps-controller@07cd5ba5fb5ba89cbb2ef9af0ad11327d95bee64]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.22.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.22.0

v0.21.0

[github.com/gardener/oidc-apps-controller:v0.21.0]

✨ New Features

• [OPERATOR] Migrated from GitHub App with shared secrets to OIDC Federation Service for improved security and centralized credential management. by @8R0WNI3 [#313]
• [OPERATOR] Add Gateway API HTTPRoute support as an alternative to Ingress for exposing OAuth2-protected applications. HTTPRoute support is opt-in via global.httpRoutes.enabled configuration and provides more flexible routing configuration through Gateway API parent references. by @niki Dokovski [gardener/oidc-apps-controller@004075b42fd99569e41157290137ed9ec8f4b0ca]

🐛 Bug Fixes

• [DEVELOPER] Fixed potential panic in pod webhook when ReplicaSet has no owner references or owner is not a Deployment by @nickytd [#312]

🏃 Others

• [OPERATOR] Updated sidecar images: oauth2-proxy to v7.14.3 and kube-rbac-proxy-watcher to v0.4.0. Example controller registration updated to use endpoint.shoot.gardener.cloud/application label instead of the deprecated displayName label. by @nickytd [#324]
• [OPERATOR] Added automated go fix check to CI pipeline, improved code quality with linter fixes and dependency updates, renamed pkg/rand to pkg/randutils for clarity by @nickytd [#311]
• [OPERATOR] Updated Go version to 1.26.1 and aligned CI workflow to read the Go version from go.mod automatically. by @nickytd [#323]
• [DEVELOPER] Switch to lightweight gardener/gardener/pkg/apis dependency and add local imagevector and healthz implementations to reduce dependency footprint. by @nickytd [#321]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.21.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.21.0

v0.20.0

[github.com/gardener/oidc-apps-controller:v0.20.0]

🐛 Bug Fixes

• [OPERATOR] Fixed cookie secret generation to use exactly 32 hex characters (16 bytes) for AES-128 cipher compatibility in oauth2-proxy container by @nickytd [#310]
• [OPERATOR] Fixed issue where OIDC proxy container cookie secret was regenerated on pod updates, causing forbidden pod spec changes. Cookie secret is now deterministic based on owner resource identity. by @nickytd [#308]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.20.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.20.0