v2.2.0

f52fa72 github.com/gocardless/theatre/v2

v2.1.1

Changelog

903fd45 Merge pull request #214 from gocardless/ffs-interactive
70b2dfa Update JSON tag to have correct field name

v2.1.0

3548c31 Introduce noninteractive consoles

v2.0.1

847513f Remove clientset (#212)

v2.0.0

e04b28e Merge pull request #205 from gocardless/v2-update-readmes
71ca0fd v2: Update READMEs
f415fd8 v2: Removed pkg/integration
f18cb7f v2: Updated zap logger settings
fd76789 v2: Improve logging
3bf6307 v2: pkg/apis was moved to apis/
eed66f8 Merge pull request #192 from gocardless/v2-remove-info-error-case
666cf52 Convert the webhook to kubebuilder v2 format
34b6fb4 Move the priority webhook into v2 structure
a9c03f6 v2: console - upgrade theatre-console cli
9e3f14f v2: console - add manager, runner, manifest, acceptance
1238046 v2: console - add controller
693611b v2: console - add webhooks
1013b1d v2: console - add crds
e455cc6 Use the provided message instaid of the error string
ea9cc61 Update cmd/acceptance to v2
c1118a3 Update cmd/theatre-envconsul to v2
591cdea Update cmd/vault-manager to v2
bf3b3df Move webhook to v2 location
18a35bf Remove error recording from the Info handler
d4df924 v2: rbac - Updated LaeaderElectionID
b098b3b v2: rbac - add controller, manager, and tests
6e0851c v2: rbac - add crds
6677c64 v2: Delete vendor

v1.0.3

6044393 Add sidecar container support to consoles (#183)

v1.0.2

c2ea5ac Set workloads validating webhook config name

v1.0.1

3552cd8 Fix ConsoleAuthorisation role permissions

v1.0.0

Changelog

c07bc2c Merge pull request #178 from gocardless/benwh/goreleaser-fixups
88fc1a6 Add unique IDs for each build
2b08d27 Use docker executor for release job
501f2be Add deploy key fingerprint to release job
69070c7 Fix console printer panic on early exit from console creation (#177)
7fc23a4 Merge pull request #174 from gocardless/benwh/update-docs
e8401b2 Fixup goreleaser version (#176)
5cfb797 Add runner helper to get a console (#175)
708f75f Merge pull request #168 from gocardless/go-releaser
e9eff24 Setup goreleaser
3942768 Update consoles documentation
1371ae7 Add authorisation constructs to console samples
de77ca8 Misc improvements to main README
4ec3f48 Merge pull request #173 from gocardless/jace/replace-uuid
4484a12 Use google/uuid instead of satori/go.uuid
5b3ec3c Merge pull request #171 from gocardless/dependabot/docker/ubuntu-bionic-20200403
857a7b3 Merge pull request #170 from gocardless/benwh/more-logging
c73ac90 Bump ubuntu from bionic-20200311 to bionic-20200403
30a6541 Clarify ConsoleStopped audit event
4dec51f Fix nil pointer dereference in console logging
29e7368 Add note about ns deletion in integration tests
b609c57 Add audit event for consoles expiring without auth
2857899 Move TTLBeforeRunning test to integration suite
9f833c4 Merge pull request #169 from gocardless/benwh/fix-ttl-field
855f228 Fix name of defaultTtlSecondsBeforeRunning field
9d39ee4 Merge pull request #167 from gocardless/benwh/console-auth-logging
cb90111 Add authorisation info to audit logs
ee4cd81 acceptance: Use selector for runner console
ba0df1a acceptance: Fix async assertion
512ae56 acceptance: Consistently delete console template
6ccd268 Merge pull request #162 from gocardless/dyson-add-pending-auth-ttl
e60915d Also use createOrUpdate for console status updates
bf76252 Use createOrUpdate for console object updates
5403f09 Add acceptance test for consoles failing to run
57113b7 Add pending approval TTL and improve GC
9acaf11 List console authorisers (#166)
e431a8b Add authorise command (#165)
221b17d Test console creation using runner command (#164)
125f174 Merge pull request #161 from gocardless/benwh/acceptance-debug
b95f1e1 Output Kind debug logs in CI acceptance tests
7f5b97c Add hooks to console phase changes in cli helpers (#160)
9f6a8f6 Merge pull request #159 from gocardless/dyson-reconcile-consoles-with-authorisation
8542729 Add console authorisation phases to reconcile
b2a4b79 Remove owner from console authorisation
3187847 Move commands from cmd to pkg/workloads/consoles/runner (#157)
d06ce98 Merge pull request #158 from gocardless/benwh/template-validation
13ea0a2 Merge pull request #130 from gocardless/dependabot/docker/ubuntu-bionic-20200311
cd9b22c Refactor GetAuthorisationRuleForCommand
9f5fc6b Add Console Template validating webhook
de42679 Move template validation logic to helper function
7ec6ec8 Merge pull request #142 from gocardless/dyson-fix-delete-console-job
818da30 Prevent console jobs recreating on delete
9e18bc5 Merge pull request #155 from gocardless/dyson-add-labels-rolebinding
6b150cb Merge pull request #156 from gocardless/update-go-1.14
3374c22 Upgrade to golang 1.14
9898b49 Add DirectoryRoleBinding labels to RoleBinding
b0c36eb Merge pull request #145 from gocardless/benwh/auths-rbac
4d647b8 Add reconciliation of authorisation RBAC objects
17aadc2 Randomize ginkgo suites
d58235b Merge pull request #153 from gocardless/benwh/auth-match-command-type
46f10f6 Fix console job name truncate length
d7a83cc Alter ConsoleAuthorisation command matching spec
8a56db9 Merge pull request #152 from gocardless/benwh/deletion-no-reconcile
2848624 recutil: Skip reconciliation if pending deletion
ed20a1f Add option to attach on console creation (#151)
e1da0b9 Merge pull request #150 from gocardless/consoles-list-command
7c8a378 vendor deps
d9a0419 Add consoles list command
70889af Merge pull request #149 from gocardless/consoles-attach-command
cea12d1 Move CreateInteractiveStreamOptions definition
2ad7800 Vendor deps
46e85f2 Add console attach command
5f80575 Merge pull request #147 from gocardless/inline-runner-creation
a0dbba0 Merge pull request #148 from gocardless/provide-all-create-params
9118013 Pass all command arguments to create command
de073a9 Inline runner creation
d2c7cc8 Merge pull request #146 from gocardless/refactor-consoles-create-command
065a9d8 Refactor to separate the functionality from flags
327b341 Merge pull request #144 from gocardless/fix-build-all
3b9a2a0 Fix build-all step
ab534c7 Merge pull request #139 from gocardless/benwh/reconcile-auths
ad0419a Create authorisation object for consoles
1d8701f Don't require update to authorisers in webhook
35323f6 Make webhook struct fields non-public
b35d7e9 Merge pull request #138 from gocardless/benwh/console-integration-cleanup
b5525e3 Clean up console integration test
f1365ad Merge pull request #137 from gocardless/dyson-console-authorisation-admission
b540a1d Add validating console authorisation webhook
93cfd26 Bump ubuntu from bionic-20191202 to bionic-20200311
6022350 Merge pull request #136 from gocardless/benwh/faster-builds
2290606 Reorder Dockerfile for quicker builds
99f74a5 Merge pull request #132 from gocardless/lawrence-runner-cli
bd8e494 Add namespace and context flags to the cli entrypoint
f5cd2b6 Add theatre-consoles and initial create command
04c9f0d Merge pull request #135 from gocardless/benwh/kind-0-7-0
1244de4 acceptance: Support kind v0.7.0
e9d7e68 Merge pull request #133 from gocardless/dyson-add-authorisation-console-crds
0468d30 Add authorisation support to console CRDs
f2f92ec Merge pull request #126 from gocardless/dyson-increment-priority-mutate
039efb5 Increament priority webhook mutate metric
ee931db Merge pull request #125 from gocardless/lawrence-priority-injector
4bc9d28 Update kubebuilder
a7bbf6d theatre-priority-injector:
4d123db Merge pull request #122 from gocardless/revert-120-lawrence-use-envconsul-patch
5a54f75 Revert "Patch envconsul to timeout when Vault doesn't work"
ba7aff0 Merge pull request #121 from gocardless/benwh/envconsul-once
fe14e68 envconsul: Use non-daemon mode
36e28bc Merge pull request #120 from gocardless/lawrence-use-envconsul-patch
7b6a683 Patch envconsul to timeout when Vault doesn't work
25f98fc Merge pull request #119 from gocardless/dedupe-dockerfile
ea3db67 Remove duplicate COPY in Dockerfile
fecf65c Merge pull request #118 from gocardless/lawrence-use-fork
004e598 envconsul fork for duplicate secret env
78ec697 Merge pull request #116 from gocardless/dependabot/docker/golang-1.13.5
f60bd76 Merge pull request #117 from gocardless/dependabot/docker/ubuntu-bionic-20191202
fe475f9 Bump ubuntu from bionic-20191029 to bionic-20191202
103ee5c Bump golang from 1.13.4 to 1.13.5
28cb36b Merge pull request #114 from gocardless/lawrence-initialise-metrics
335eab1 Initialise envconsul webhook metrics
85def2f Merge pull request #113 from gocardless/jace/fix-makefile
482edc8 Fix Makefile to statically compile binaries
6efe976 Merge pull request #112 from gocardless/lawrence-test-non-root
4c3a5c9 Verify non-root user can access secrets
8001965 Merge pull request #111 from gocardless/lawrence-apply-fsgroup
5408b5f Apply a default fsGroup in envconsul webhook
2dfd12f Don't use base 8 for permissions
f06c441 Merge pull request #110 from gocardless/lawrence-0444-projected-token
8742ba8 Projected token is readable by all
a2b44dc Merge pull request #109 from gocardless/dyson-set-vault-metrics-address
ab54801 Add listen address for vault metrics
a513f2d Merge pull request #108 from gocardless/dyson-enable-envconsul-webhook-metrics
bd0bd41 Enable metrics in vault manager envconsul webhook
81bff83 Merge pull request #106 from gocardless/dyson-use-request-for-logging
f3cc82b Use request namespace and name if it exists
d6845c8 Merge pull request #107 from gocardless/lawrence-prometheus-metrics-for-envconsul
07ff99e Add metrics to envconsul webhook
680d127 vendor: promauto
a9bfc68 Merge pull request #105 from gocardless/jace/fix-path-namespace
a1429ec Use namespace from admission request instead of pod
aed7c67 Merge pull request #104 from gocardless/jace/multi-cluster
681aa2f Use vault path prefix to support multi-cluster secrets
3905625 Merge pull request #103 from gocardless/jace/no-secrets-exec
ec1c655 Pull in envconsul fork in Docker image
bfd26c6 Remove check for presence of secrets
3697b9b Merge pull request #101 from gocardless/lawrence-base64-decode
f23c390 README.md
d8f308c pkg/workloads/console/README.md
0aaeb88 Merge pull request #102 from gocardless/lawrence-faster-tests
a95d2a6 Merge pull request #100 from gocardless/lawrence-vault-readme
a088a8b theatre-envconsul base64-exec
65dff9e Don't build everything in build
d1ed55a Merge pull request #93 from gocardless/lawrence-use-ephemeral-service-account-tokens
54e1624 Add namespace selector for staging overlay
2392ce9 Revert "Hardcode vault-manager theatre image tag"
babfc14 Ephemeral service account tokens for Vault
554fb5f Merge pull request #92 from gocardless/dependabot/docker/ubuntu-bionic-20191029
d321525 README.md
541642e README.md
f82e583 Merge pull request #97 from gocardless/jace/webhook-namespace-selector
c3f9fa2 Merge pull request #95 from gocardless/lawrence-small-fixes
5ff211f Clean-ups missed from #94
4282f35 Use namespace selectors in webhook
dcb7675 pkg/vault/README.md
d2d3a1e Merge pull request #98 from gocardless/lawrence-filter-acceptance
dffeab9 Merge pull request #99 from gocardless/jace/kustomize-image-tag
e5396f8 Hardcode vault-manager theatre image tag
5f99142 acceptance --target
5363f91 Merge pull request #96 from gocardless/jace/single-manager
a22810d Set webhook FailurePolicy to fail
70aa8a1 Reduce vault-manager to single replica
88b4c43 Merge pull request #94 from gocardless/lawrence-acceptance-runners
e9d04a9 Acceptance test runners, with optional prepare steps
c73c45e Remove TODOs
be3b546 Bump ubuntu from bionic-20190807 to bionic-20191029
8cb2e29 Merge pull request #9...