v0.4.0

Features

• add restricted pod security (#334) #334 (Sertaç Özercan)
• scanner redesign (#339) #339 (ashnamehrotra)

Bug Fixes

• move additional args (#326) #326 (ashnamehrotra)
• cleanup service account permissions (#324) #324 (ashnamehrotra)
• document additionalArgs in Helm readme (#327) #327 (ashnamehrotra)
• cleanup sa, add watch permissions (#329) #329 (ashnamehrotra)
• log outputs (#328) #328 (ashnamehrotra)
• security contexts for pods (#341) #341 (Sertaç Özercan)
• remove secret scan (#344) #344 (Sertaç Özercan)
• odd number of arguments passed as key-value pairs for logging (#346) #346 (ashnamehrotra)
• clean scanner logs output (#348) #348 (ashnamehrotra)
• cleanup imagecollector crd (#352) #352 (ashnamehrotra)
• change vulnerable to non-compliant (#351) #351 (ashnamehrotra)

Documentation

• update install docs for latest version (#319) #319 (Xander Grzywinski)
• node exemption (#312) #312 (ashnamehrotra)
• document eraser flags (#309) #309 (ashnamehrotra)
• Fix broken link in README.md (#322) #322 (Peter Engelbert)
• add slack info to docs (#336) #336 (Xander Grzywinski)
• update quickstart to reflect new design (#354) #354 (ashnamehrotra)

Continuous Integration

• Prepare v0.4.0 release (#355) #355 (ashnamehrotra)

Chores

• bump opa to 0.42 (#317) #317 (Sertaç Özercan)
• bump github/codeql-action from 2.1.15 to 2.1.16 (#331) #331 (dependabot[bot])
• bump actions/dependency-review-action from 2.0.2 to 2.0.4 (#332) #332 (dependabot[bot])
• bump k8s.io/kubernetes from 1.22.11 to 1.22.12 (#330) #330 (dependabot[bot])
• bump terser from 5.14.1 to 5.14.2 in /docs (#337) #337 (dependabot[bot])
• bump github/codeql-action from 2.1.16 to 2.1.17 (#347) #347 (dependabot[bot])
• bump github/codeql-action from 2.1.17 to 2.1.18 (#350) #350 (dependabot[bot])

v0.3.0

Features

• Accept scanner args via the controller manager (#256) #256 (Peter Engelbert)
• Enable pprof profiling (#264) #264 (Peter Engelbert)
• Exclusion list (#261) #261 (ashnamehrotra)
• parallelize tests (#271) #271 (Peter Engelbert)
• narrow scoped service account (#282) #282 (ashnamehrotra)
• Exclusion in collector pods (#284) #284 (ashnamehrotra)
• Enable helm args (#294) #294 (Peter Engelbert)
• Add controller flags to request/limit CPU/memory on scanner (#295) #295 (Peter Engelbert)
• filter-nodes flag (#297) #297 (ashnamehrotra)
• align time values (#308) #308 (ashnamehrotra)
• imagejob pod arguments (#314) #314 (ashnamehrotra)

Bug Fixes

• Memory fix (#263) #263 (Peter Engelbert)
• fix codeql branches (#283) #283 (Sertaç Özercan)
• non-hardcoded namespace (#293) #293 (Sertaç Özercan)
• dynamically generate list of tests (#298) #298 (Peter Engelbert)
• Remove e2e test teardowns (#303) #303 (Peter Engelbert)
• Add node anti-affinity for windows (#310) #310 (Peter Engelbert)

Documentation

• add links for the mailing list and community meeting (#262) #262 (Xander Grzywinski)
• docusaurus docs site (#258) #258 (Xander Grzywinski)
• fix baseURL (#275) #275 (Xander Grzywinski)
• update README to link to docs site (#276) #276 (Xander Grzywinski)
• remove support file and update README support section (#281) #281 (Xander Grzywinski)
• add website doc search (#288) #288 (Sertaç Özercan)
• add release docs to site (#296) #296 (Xander Grzywinski)
• restructure quickstart (#287) #287 (ashnamehrotra)
• add contributing and code of conduct docs to site (#306) #306 (Xander Grzywinski)

Code Refactoring

• Refactor (#292) #292 (Peter Engelbert)

Tests

• Use --wait flag in helm deployments for e2e tests (#285) #285 (Peter Engelbert)

Continuous Integration

• add release action timeout (#248) #248 (Sertaç Özercan)
• add matrix of k8s tests (#251) #251 (Sertaç Özercan)
• add cron codeql (#252) #252 (Sertaç Özercan)
• add dep review action (#253) #253 (Sertaç Özercan)
• add harden runner to existing actions (#254) #254 (Sertaç Özercan)
• add codecov (#301) #301 (Sertaç Özercan)
• Prepare v0.3.0 release (#315) #315 (Peter Engelbert)

Chores

• bump k8s.io/kubernetes from 1.22.10 to 1.22.11 (#255) #255 (dependabot[bot])
• Upgrade Open Policy Agent to pass CI scanner (#257) #257 (Peter Engelbert)
• add semantic pr requirement for titles (#247) #247 (Sertaç Özercan)
• bump github/codeql-action from 2 to 2.1.14 (#267) #267 (dependabot[bot])
• bump hashicorp/go-getter to fix cves (#269) #269 (Sertaç Özercan)
• bump google.golang.org/grpc from 1.46.0 to 1.46.2 (#266) #266 (dependabot[bot])
• bump actions/dependency-review-action from 243561faa0c01048595473d5017ff61d6d25c980 to 2.0.2 (#268) #268 (dependabot[bot])
• bump github/codeql-action from 2.1.14 to 2.1.15 (#278) #278 (dependabot[bot])
• bump step-security/harden-runner from 1.4.3 to 1.4.4 (#286) #286 (dependabot[bot])
• Update containerd to pass trivy scanner (#307) #307 (Peter Engelbert)

Commits

• fbd296b: update docs with v0.2.0 changes (#245) (Sertaç Özercan) #245
• 9f2b99a: updated README notice and added support section (#259) (Xander Grzywinski) #259

New Contributors

• @salaxander made their first contribution in #259

Full Changelog: v0.2.0...v0.3.0

v0.2.1

Bug Fixes

• Cherry pick of #263 #257 for release-0.2 (#265) #265 (Peter Engelbert)
• Prepare v0.2.1 release (#270) #270 (Peter Engelbert)

Full Changelog: v0.2.0...v0.2.1

v0.2.0

This release adds the collector and scanner functionality.

Commits

• fa86115: update readme with install step (#117) (Sertaç Özercan) #117
• 8737001: Add eraser unit tests (#118) (Brian Goff) #118
• 8620316: add release doc (#119) (Sertaç Özercan) #119
• aefc0cd: Use fixed go version to install setup-envtest (#133) (Peter Engelbert) #133
• cc22939: add generated name for imagejob pods (#136) (ashnamehrotra) #136
• 73a0e1a: Do not require cluster access for eraser pod (#115) (Brian Goff) #115
• df50078: add setup-go and update action (#138) (Sertaç Özercan) #138
• 3358315: Stabilize e2e tests (#143) (Peter Engelbert) #143
• 2e098bc: Update to support multi-arch builds (#155) (Jeremy Rickard) #155
• c00b1ea: Add generic TESTFLAGS for passing flags to go test (#158) (Brian Goff) #158
• 81cfcd2: Only delay deltion when until is sufficiently long (#161) (Brian Goff) #161
• d84cc5f: Imagelist reconcile on update (#135) (ashnamehrotra) #135
• b7b3dcb: Fix alias bug (#157) (Peter Engelbert) #157
• be73cdc: Imagecollector crd (#171) (ashnamehrotra) #171
• 0249fe6: Add node selector to image job pod spec (#141) (Peter Engelbert) #141
• d82b16f: Initial documentation refactor (#179) (Cara MacLaughlin) #179
• a5bba55: Change OUTPUT_TYPE to docker (#184) (Leonard) #184
• 490505a: Collector (#175) (ashnamehrotra) #175
• b8fec4e: Update go 18 (#192) (Bryan Leighton) #192
• 82319fa: Remove unnecessary mkdir in eraser-tooling (#195) (Leonard) #195
• 13f7c76: Delete imagelist and imagejobs before running tests (#194) (Eugene Fedorenko) #194
• 7a4cdab: Publish Helm chart to github page in GH action (#196) (johee) #196
• 1226081: Helmify (#191) (Andrew Malkov) #191
• 52d17b9: Add steps to Quickstart doc (#186) (Joshua Phelps) #186
• 64a3c02: Pr to add vulnerability scan to pipeline (#181) (Irene Stanely) #181
• 218db21: quickstart documentation image name fix (#206) (ashnamehrotra) #206
• 8f7cdf6: Fix potential reconciliation bug (#204) (Peter Engelbert) #204
• 761cba0: Use correct base image for output artifacts (#207) (Peter Engelbert) #207
• c29b9c6: Add development guide (#187) (Leonard) #187
• bd0bec7: Move imagejob deletion to imagelist controller (#205) (Peter Engelbert) #205
• 31ff94e: Fix collector image typo in Makefile (#216) (Sertaç Özercan) #216
• ee37ba4: Set ldflags as a part of build (#193) (Cara MacLaughlin) #193
• a625e52: ImageCollector Controller - Collector part (Fixed stacked changes) (#213) (ashnamehrotra) #213
• 6f19c91: Scanner (#173) (Peter Engelbert) #173
• 4147bab: Modify collector to report non-running images (#221) (ashnamehrotra) #221
• 7da64d3: Revert "Modify collector to report non-running images" (#225) (Peter Engelbert) #225
• 9492652: Modify collector (#227) (ashnamehrotra) #227
• 45c462b: Separate vulnerable and failed images (#226) (Peter Engelbert) #226
• e3f1fb3: update release with collector and scanner (#231) (Sertaç Özercan) #231
• 0bfe0ff: Add codeql action (#197) (David McGhee) #197
• 2cb495d: Collect->Scan->Erase Pipeline (#229) (Peter Engelbert) #229
• d7f6133: Disable Scanner (#234) (ashnamehrotra) #234
• b226466: v0.2.0 release (#237) (Peter Engelbert) #237

Chores

• bump github.com/go-logr/logr from 1.2.0 to 1.2.2 (#121) #121 (dependabot[bot])
• bump actions/checkout from 2 to 3 (#122) #122 (dependabot[bot])
• bump k8s.io/kubernetes from 1.22.6 to 1.22.8 (#123) #123 (dependabot[bot])
• bump actions/cache from 2 to 3.0.1 (#127) #127 (dependabot[bot])
• bump github.com/go-logr/logr from 1.2.2 to 1.2.3 (#124) #124 (dependabot[bot])
• bump sigs.k8s.io/controller-runtime from 0.11.1 to 0.11.2 (#128) #128 (dependabot[bot])
• bump actions/setup-go from 2 to 3 (#131) #131 (dependabot[bot])
• bump actions/cache from 3.0.1 to 3.0.2 (#142) #142 (dependabot[bot])
• bump k8s.io/kubernetes from 1.22.8 to 1.22.9 (#156) #156 (dependabot[bot])
• bump docker/setup-buildx-action from 1 to 2 (#166) #166 (dependabot[bot])
• bump docker/login-action from 1 to 2 (#167) #167 (dependabot[bot])
• bump k8s.io/kubernetes from 1.22.9 to 1.22.10 (#211) #211 (dependabot[bot])
• bump crazy-max/ghaction-github-runtime from 1 to 2 (#212) #212 (dependabot[bot])
• bump actions/cache from 3.0.2 to 3.0.3 (#218) #218 (dependabot[bot])
• bump sigs.k8s.io/e2e-framework from 0.0.6 to 0.0.7 (#217) #217 (dependabot[bot])
• bump actions/cache from 3.0.3 to 3.0.4 (#235) #235 (dependabot[bot])

New Contributors

• @jeremyrickard made their first contribution in #155
• @cmaclaughlin made their first contribution in #179
• @LeonardHd made their first contribution in #184
• @bdlb77 made their first contribution in #192
• @eedorenko made their first contribution in #194
• @joheec made their first contribution in #196
• @anmalkov made their first contribution in #191
• @joshuaphelpsms made their first contribution in #186
• @irenechristopher made their first contribution in #181
• @drmcghee made their first contribution in #197

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Initial alpha release with manual image cleanup

What's Changed

• list images by @ashnamehrotra in #1
• added flags and daemonset by @ashnamehrotra in #2
• Add CI for lint and unit tests by @AldairCoronel in #21
• fix: Rename golangci.yaml to .golangci.yaml by @AldairCoronel in #26
• Initial implementation of CRDs and controllers by @ashnamehrotra in #17
• refactor eraser before testing changes by @ashnamehrotra in #30
• Imagejob controller by @ashnamehrotra in #18
• bugFixes: autogenerate imagejob name, fix docker build in makefile by @ashnamehrotra in #44
• Add Unit Tests for Eraser by @AldairCoronel in #31
• Change image status crd by @ashnamehrotra in #43
• remove kube-rbac-proxy by @ashnamehrotra in #36
• Makefile: build eraser fixes by @ashnamehrotra in #54
• Cache all the things by @cpuguy83 in #56
• Documentation by @ashnamehrotra in #53
• Image status by @ashnamehrotra in #52
• delete eraser debug code by @ashnamehrotra in #55
• Change CRDs to be cluster scoped by @AldairCoronel in #62
• Check if pod fits on node before scheduling by @AldairCoronel in #63
• Change registry by @ashnamehrotra in #45
• ImageJob Controller: Add resources request and limits for eraser pods by @AldairCoronel in #59
• test: add e2e test framework and pipeline by @helayoty in #74
• update linters and fix issues by @sozercan in #76
• chore: add dependabot by @sozercan in #79
• chore: generate manifest by @sozercan in #75
• chore: pr and issue templates by @sozercan in #78
• chore: update dependencies by @sozercan in #83
• Do not use extra module for pkg/eraser by @cpuguy83 in #85
• update logging by @sozercan in #86
• Cleanup pods when job is complete by @cpuguy83 in #88
• update client by @sozercan in #87
• update for existing imagestatus by @sozercan in #89
• set eraser image by @sozercan in #91
• Add image prune by @cpuguy83 in #84
• chore: bump go.uber.org/zap from 1.19.0 to 1.19.1 by @dependabot in #92
• chore: bump sigs.k8s.io/e2e-framework from 0.0.5 to 0.0.6 by @dependabot in #94
• chore: bump google.golang.org/grpc from 1.38.0 to 1.38.1 by @dependabot in #93
• imagelist as singleton by @sozercan in #99
• fix imagelist and imagejob resource errors by @sozercan in #106
• update release ci by @sozercan in #97
• Remove imagestatus by @cpuguy83 in #107
• Prepare v0.1.0 release by @sozercan in #109
• chore: bump sigs.k8s.io/controller-runtime from 0.11.0 to 0.11.1 by @dependabot in #112
• Configure eraser pod log by @cpuguy83 in #111
• update readme by @sozercan in #110
• lowercase repo name by @sozercan in #116

New Contributors

• @AldairCoronel made their first contribution in #21
• @helayoty made their first contribution in #74

Full Changelog: https://github.com/Azure/eraser/commits/v0.1.0