v0.26.0

[github.com/gardener/oidc-apps-controller:v0.26.0]

🐛 Bug Fixes

• [OPERATOR] Fixed host annotation resolution in the pod webhook to correctly use the HTTPRoute hostPrefix when HTTPRoute is enabled, instead of always falling back to the generic host configuration. by @nickytd [#347]

🏃 Others

• [OPERATOR] Updated sidecar proxy images: kube-rbac-proxy-watcher bumped to v0.5.0 and oauth2-proxy bumped to v7.15.1. by @nickytd [#348]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.26.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.26.0

v0.25.0

[github.com/gardener/oidc-apps-controller:v0.25.0]

✨ New Features

• [OPERATOR] Add fallback for fetchClientIdBySeedIdentifier by @Andreea Denitiu [gardener/oidc-apps-controller@d2b29ec8313c23b89b3a1e0ab3417ac66c8f277f]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.25.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.25.0

v0.24.0

[github.com/gardener/oidc-apps-controller:v0.24.0]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue where the OIDC Apps controller would attempt to list HTTPRoute resources even when the Gateway API scheme was not registered, causing errors on clusters without Gateway API CRDs installed. by @nickytd [#336]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.24.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.24.0

v0.23.0

[github.com/gardener/oidc-apps-controller:v0.23.0]

✨ New Features

• [OPERATOR] Added defaultPath configuration option for Ingress and HTTPRoute targets. When set, requests to / are redirected to the specified path. For Ingress this uses the nginx configuration-snippet annotation; for HTTPRoute a Gateway API RequestRedirect filter rule is prepended. by @niki Dokovski [gardener/oidc-apps-controller@6709b00a2ec7ab8bd7f64951674294c01ab915d4]

🏃 Others

• [OPERATOR] Simplified isValidDefaultPath validation using a compiled regex and enforced a maximum path length of 32 characters for HTTPRoute default paths. by @niki Dokovski [gardener/oidc-apps-controller@d8e33908718a5afcb8e235fd2a44fc58fb9e1d5f]
• [OPERATOR] Migrated provider-local dev environment deployment from numbered shell scripts to a kustomize-based workflow with make deploy / make deploy-check targets; added Victoria Logs OIDC support to the local setup. by @nickytd [#330]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.23.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.23.0

v0.22.0

[github.com/gardener/oidc-apps-controller:v0.22.0]

⚠️ Breaking Changes

• [OPERATOR] The imagevector.OverrideEnv constant has been renamed from IMAGEVECTOR_OVERRIDE to IMAGEVECTOR_OVERWRITE. WithEnvOverride now expects the environment variable to contain a file path to a YAML override file instead of constructing per-image environment variable names. Update any deployments or scripts that set IMAGEVECTOR_OVERRIDE_* environment variables to instead set IMAGEVECTOR_OVERWRITE to the path of an image vector override YAML file. by @niki Dokovski [gardener/oidc-apps-controller@25ca94e094ad5683e2849f1b36cee14b6a70c694]

🏃 Others

• [OPERATOR] Tool dependencies (golangci-lint, gosec, govulncheck, gotestsum, gci, mockgen, setup-envtest, addlicense) have been extracted into a dedicated tools/go.mod module, removing them from the root go.mod to reduce dependency noise. by @niki Dokovski [gardener/oidc-apps-controller@07cd5ba5fb5ba89cbb2ef9af0ad11327d95bee64]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.22.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.22.0

v0.21.0

[github.com/gardener/oidc-apps-controller:v0.21.0]

✨ New Features

• [OPERATOR] Migrated from GitHub App with shared secrets to OIDC Federation Service for improved security and centralized credential management. by @8R0WNI3 [#313]
• [OPERATOR] Add Gateway API HTTPRoute support as an alternative to Ingress for exposing OAuth2-protected applications. HTTPRoute support is opt-in via global.httpRoutes.enabled configuration and provides more flexible routing configuration through Gateway API parent references. by @niki Dokovski [gardener/oidc-apps-controller@004075b42fd99569e41157290137ed9ec8f4b0ca]

🐛 Bug Fixes

• [DEVELOPER] Fixed potential panic in pod webhook when ReplicaSet has no owner references or owner is not a Deployment by @nickytd [#312]

🏃 Others

• [OPERATOR] Updated sidecar images: oauth2-proxy to v7.14.3 and kube-rbac-proxy-watcher to v0.4.0. Example controller registration updated to use endpoint.shoot.gardener.cloud/application label instead of the deprecated displayName label. by @nickytd [#324]
• [OPERATOR] Added automated go fix check to CI pipeline, improved code quality with linter fixes and dependency updates, renamed pkg/rand to pkg/randutils for clarity by @nickytd [#311]
• [OPERATOR] Updated Go version to 1.26.1 and aligned CI workflow to read the Go version from go.mod automatically. by @nickytd [#323]
• [DEVELOPER] Switch to lightweight gardener/gardener/pkg/apis dependency and add local imagevector and healthz implementations to reduce dependency footprint. by @nickytd [#321]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.21.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.21.0

v0.20.0

[github.com/gardener/oidc-apps-controller:v0.20.0]

🐛 Bug Fixes

• [OPERATOR] Fixed cookie secret generation to use exactly 32 hex characters (16 bytes) for AES-128 cipher compatibility in oauth2-proxy container by @nickytd [#310]
• [OPERATOR] Fixed issue where OIDC proxy container cookie secret was regenerated on pod updates, causing forbidden pod spec changes. Cookie secret is now deterministic based on owner resource identity. by @nickytd [#308]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.20.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.20.0

v0.19.0

[github.com/gardener/oidc-apps-controller:v0.19.0]

🏃 Others

• [OPERATOR] Updated module dependencies and proxy image versions for improved security and compatibility. by @nickytd [#294]
• [DEVELOPER] Enhanced PR bot configuration with custom review focus mode that emphasizes high-confidence, actionable feedback by @nickytd [#290]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.19.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.19.0

v0.18.0

[github.com/gardener/oidc-apps-controller:v0.18.0]

🐛 Bug Fixes

• [DEVELOPER] Fixed subnet mask validation in local provider environment check script from /16 to /24 by @nickytd [#287]

🏃 Others

• [DEPENDENCY] The oauth2-proxy image has been updated from v7.12.0 to v7.13.0. by @nickytd [#286]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.18.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.18.0

v0.17.0

[github.com/gardener/oidc-apps-controller:v0.17.0]

🏃 Others

• [DEVELOPER] Removed deprecated special handling for prometheus VPA that was marked as temporary workaround by @niki Dokovski [gardener/oidc-apps-controller@e9471886f129744b2ed590aa525a835e46588eb3]

Helm Charts

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/oidc-apps-controller:v0.17.0

Container (OCI) Images

• oidc-apps-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/oidc-apps-controller:v0.17.0