v0.6.0 🔧
Breaking Changes
- The
DenyPublicServices
handler has been broken into distinctDenyPublicLoadBalancers
andDenyIngresses
handlers, to allow better composability and finer-grained admission control.
⚠ Note: Users should expect a few breaking changes on the road to v1.0, and pin at a specific version. Versioning will follow SemVer, in that the v0.X.y series can "break" an API by incrementing "X". API changes won't be made lightly, and will be documented in release notes.
Notable Changes
- The
*AdmissionServer.Run
method will listen on a non-TLS (e.g. plaintext HTTP) port if a*tls.Config
is not provided, to support running in reverse proxy and/or serverless environments where TLS is terminated downstream from the application. - Example Kubernetes manifests have moved into
/samples
, as per convention - The provided webhook server,
admissiond
, now lives atexamples/cmd/admissiond
, to better clarify that it is an example only. - General improvements to the setup section of the README