diff --git a/CHANGELOG.md b/CHANGELOG.md index be649d77..c11c2f59 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,8 @@ All notable changes to this project will be documented in this file. ## [Unreleased] +## [26.7.0-rc1] - 2026-07-16 + ### Added - Added support for OPA `1.16.2`. `1.12.3` is now deprecated ([#838]). diff --git a/Cargo.lock b/Cargo.lock index b61e7a3c..fef5afa4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -3395,7 +3395,7 @@ dependencies = [ [[package]] name = "stackable-opa-bundle-builder" -version = "0.0.0-dev" +version = "26.7.0-rc1" dependencies = [ "axum", "built", @@ -3414,7 +3414,7 @@ dependencies = [ [[package]] name = "stackable-opa-operator" -version = "0.0.0-dev" +version = "26.7.0-rc1" dependencies = [ "anyhow", "built", @@ -3437,11 +3437,11 @@ dependencies = [ [[package]] name = "stackable-opa-regorule-library" -version = "0.0.0-dev" +version = "26.7.0-rc1" [[package]] name = "stackable-opa-user-info-fetcher" -version = "0.0.0-dev" +version = "26.7.0-rc1" dependencies = [ "axum", "base64", diff --git a/Cargo.nix b/Cargo.nix index 9312573c..a79ed763 100644 --- a/Cargo.nix +++ b/Cargo.nix @@ -11230,7 +11230,7 @@ rec { }; "stackable-opa-bundle-builder" = rec { crateName = "stackable-opa-bundle-builder"; - version = "0.0.0-dev"; + version = "26.7.0-rc1"; edition = "2024"; crateBin = [ { @@ -11306,7 +11306,7 @@ rec { }; "stackable-opa-operator" = rec { crateName = "stackable-opa-operator"; - version = "0.0.0-dev"; + version = "26.7.0-rc1"; edition = "2024"; crateBin = [ { @@ -11401,7 +11401,7 @@ rec { }; "stackable-opa-regorule-library" = rec { crateName = "stackable-opa-regorule-library"; - version = "0.0.0-dev"; + version = "26.7.0-rc1"; edition = "2024"; src = lib.cleanSourceWith { filter = sourceFilter; src = ./rust/regorule-library; }; libName = "stackable_opa_regorule_library"; @@ -11412,7 +11412,7 @@ rec { }; "stackable-opa-user-info-fetcher" = rec { crateName = "stackable-opa-user-info-fetcher"; - version = "0.0.0-dev"; + version = "26.7.0-rc1"; edition = "2024"; crateBin = [ { diff --git a/Cargo.toml b/Cargo.toml index c7557a50..a68f9ccd 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -3,7 +3,7 @@ members = ["rust/*"] resolver = "2" [workspace.package] -version = "0.0.0-dev" +version = "26.7.0-rc1" authors = ["Stackable GmbH "] license = "OSL-3.0" edition = "2024" diff --git a/deploy/helm/opa-operator/Chart.yaml b/deploy/helm/opa-operator/Chart.yaml index 8fad873b..4adfa8d7 100644 --- a/deploy/helm/opa-operator/Chart.yaml +++ b/deploy/helm/opa-operator/Chart.yaml @@ -1,8 +1,8 @@ --- apiVersion: v2 name: opa-operator -version: "0.0.0-dev" -appVersion: "0.0.0-dev" +version: "26.7.0-rc1" +appVersion: "26.7.0-rc1" description: The Stackable Operator for OpenPolicyAgent home: https://github.com/stackabletech/opa-operator maintainers: diff --git a/docs/antora.yml b/docs/antora.yml index d522680b..931469da 100644 --- a/docs/antora.yml +++ b/docs/antora.yml @@ -1,3 +1,4 @@ --- name: home -version: "nightly" +version: "26.7" +prerelease: false diff --git a/docs/modules/opa/examples/getting_started/getting_started.sh b/docs/modules/opa/examples/getting_started/getting_started.sh index 5d69ddd5..cd8bf685 100755 --- a/docs/modules/opa/examples/getting_started/getting_started.sh +++ b/docs/modules/opa/examples/getting_started/getting_started.sh @@ -24,13 +24,13 @@ case "$1" in "helm") echo "Installing operators with Helm" # tag::helm-install-operators[] -helm install --wait opa-operator oci://oci.stackable.tech/sdp-charts/opa-operator --version 0.0.0-dev +helm install --wait opa-operator oci://oci.stackable.tech/sdp-charts/opa-operator --version 26.7.0-rc1 # end::helm-install-operators[] ;; "stackablectl") echo "installing operators with stackablectl" # tag::stackablectl-install-operators[] -stackablectl operator install opa=0.0.0-dev +stackablectl operator install opa=26.7.0-rc1 # end::stackablectl-install-operators[] ;; *) diff --git a/docs/modules/opa/examples/getting_started/install_output.txt b/docs/modules/opa/examples/getting_started/install_output.txt index 0b596733..8b3db863 100644 --- a/docs/modules/opa/examples/getting_started/install_output.txt +++ b/docs/modules/opa/examples/getting_started/install_output.txt @@ -1 +1 @@ -Installed opa=0.0.0-dev operator +Installed opa=26.7.0-rc1 operator diff --git a/docs/templating_vars.yaml b/docs/templating_vars.yaml index ac90cc04..c6d8a4ba 100644 --- a/docs/templating_vars.yaml +++ b/docs/templating_vars.yaml @@ -3,4 +3,4 @@ helm: repo_name: sdp-charts repo_url: oci.stackable.tech versions: - opa: 0.0.0-dev + opa: 26.7.0-rc1 diff --git a/extra/crds.yaml b/extra/crds.yaml index f5ce8061..287114ed 100644 --- a/extra/crds.yaml +++ b/extra/crds.yaml @@ -24,7 +24,7 @@ spec: description: |- An OPA (Open Policy Agent) cluster stacklet. This resource is managed by the Stackable operator for OPA. Find more information on how to use it and the resources that the operator generates in the - [operator documentation](https://docs.stackable.tech/home/nightly/opa/). + [operator documentation](https://docs.stackable.tech/home/26.7/opa/). properties: clusterConfig: default: @@ -148,7 +148,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -236,7 +236,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -269,8 +269,8 @@ spec: properties: scope: description: |- - [Scope](https://docs.stackable.tech/home/nightly/secret-operator/scope) of the - [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass). + [Scope](https://docs.stackable.tech/home/26.7/secret-operator/scope) of the + [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass). nullable: true properties: listenerVolumes: @@ -303,7 +303,7 @@ spec: type: array type: object secretClass: - description: '[SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) providing the requested secrets.' + description: '[SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) providing the requested secrets.' type: string required: - secretClass @@ -374,7 +374,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -481,7 +481,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -623,7 +623,7 @@ spec: List entries are arbitrary YAML objects, which need to be valid Kubernetes objects. - Read the [Object overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#object-overrides) + Read the [Object overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#object-overrides) for more information. items: type: object @@ -648,7 +648,7 @@ spec: podAntiAffinity: null description: |- These configuration settings control - [Pod placement](https://docs.stackable.tech/home/nightly/concepts/operations/pod_placement). + [Pod placement](https://docs.stackable.tech/home/26.7/concepts/operations/pod_placement). properties: nodeAffinity: description: Same as the `spec.affinity.nodeAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node) @@ -680,7 +680,7 @@ spec: default: containers: {} enableVectorAgent: null - description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/nightly/concepts/logging). + description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/26.7/concepts/logging). properties: containers: description: Log configuration per container. @@ -1150,7 +1150,7 @@ spec: description: |- The `configOverrides` can be used to configure properties in product config files that are not exposed in the CRD. Read the - [config overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#config-overrides) + [config overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#config-overrides) and consult the operator specific usage guide documentation for details on the available config files and settings for the specific product. properties: @@ -1229,7 +1229,7 @@ spec: `envOverrides` configure environment variables to be set in the Pods. It is a map from strings to strings - environment variables and the value to set. Read the - [environment variable overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#env-overrides) + [environment variable overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#env-overrides) for more information and consult the operator specific usage guide to find out about the product specific environment variables that are available. type: object @@ -1240,7 +1240,7 @@ spec: [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core) to override any property that can be set on a Kubernetes Pod. Read the - [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides) + [Pod overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#pod-overrides) for more information. type: object x-kubernetes-preserve-unknown-fields: true @@ -1269,7 +1269,7 @@ spec: podAntiAffinity: null description: |- These configuration settings control - [Pod placement](https://docs.stackable.tech/home/nightly/concepts/operations/pod_placement). + [Pod placement](https://docs.stackable.tech/home/26.7/concepts/operations/pod_placement). properties: nodeAffinity: description: Same as the `spec.affinity.nodeAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node) @@ -1301,7 +1301,7 @@ spec: default: containers: {} enableVectorAgent: null - description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/nightly/concepts/logging). + description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/26.7/concepts/logging). properties: containers: description: Log configuration per container. @@ -1771,7 +1771,7 @@ spec: description: |- The `configOverrides` can be used to configure properties in product config files that are not exposed in the CRD. Read the - [config overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#config-overrides) + [config overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#config-overrides) and consult the operator specific usage guide documentation for details on the available config files and settings for the specific product. properties: @@ -1850,7 +1850,7 @@ spec: `envOverrides` configure environment variables to be set in the Pods. It is a map from strings to strings - environment variables and the value to set. Read the - [environment variable overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#env-overrides) + [environment variable overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#env-overrides) for more information and consult the operator specific usage guide to find out about the product specific environment variables that are available. type: object @@ -1861,7 +1861,7 @@ spec: [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core) to override any property that can be set on a Kubernetes Pod. Read the - [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides) + [Pod overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#pod-overrides) for more information. type: object x-kubernetes-preserve-unknown-fields: true @@ -1885,7 +1885,7 @@ spec: names it `default`. Read the - [roles and role groups concept documentation](https://docs.stackable.tech/home/nightly/concepts/roles-and-role-groups) + [roles and role groups concept documentation](https://docs.stackable.tech/home/26.7/concepts/roles-and-role-groups) for more details. type: object required: @@ -1955,7 +1955,7 @@ spec: description: |- An OPA (Open Policy Agent) cluster stacklet. This resource is managed by the Stackable operator for OPA. Find more information on how to use it and the resources that the operator generates in the - [operator documentation](https://docs.stackable.tech/home/nightly/opa/). + [operator documentation](https://docs.stackable.tech/home/26.7/opa/). properties: clusterConfig: default: @@ -2082,7 +2082,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -2160,7 +2160,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -2200,8 +2200,8 @@ spec: properties: scope: description: |- - [Scope](https://docs.stackable.tech/home/nightly/secret-operator/scope) of the - [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass). + [Scope](https://docs.stackable.tech/home/26.7/secret-operator/scope) of the + [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass). nullable: true properties: listenerVolumes: @@ -2234,7 +2234,7 @@ spec: type: array type: object secretClass: - description: '[SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) providing the requested secrets.' + description: '[SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) providing the requested secrets.' type: string required: - secretClass @@ -2305,7 +2305,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -2412,7 +2412,7 @@ spec: properties: secretClass: description: |- - Name of the [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) which will provide the CA certificate. + Name of the [SecretClass](https://docs.stackable.tech/home/26.7/secret-operator/secretclass) which will provide the CA certificate. Note that a SecretClass does not need to have a key but can also work with just a CA certificate, so if you got provided with a CA cert but don't have access to the key you can still use this method. type: string @@ -2554,7 +2554,7 @@ spec: List entries are arbitrary YAML objects, which need to be valid Kubernetes objects. - Read the [Object overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#object-overrides) + Read the [Object overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#object-overrides) for more information. items: type: object @@ -2579,7 +2579,7 @@ spec: podAntiAffinity: null description: |- These configuration settings control - [Pod placement](https://docs.stackable.tech/home/nightly/concepts/operations/pod_placement). + [Pod placement](https://docs.stackable.tech/home/26.7/concepts/operations/pod_placement). properties: nodeAffinity: description: Same as the `spec.affinity.nodeAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node) @@ -2611,7 +2611,7 @@ spec: default: containers: {} enableVectorAgent: null - description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/nightly/concepts/logging). + description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/26.7/concepts/logging). properties: containers: description: Log configuration per container. @@ -3081,7 +3081,7 @@ spec: description: |- The `configOverrides` can be used to configure properties in product config files that are not exposed in the CRD. Read the - [config overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#config-overrides) + [config overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#config-overrides) and consult the operator specific usage guide documentation for details on the available config files and settings for the specific product. properties: @@ -3160,7 +3160,7 @@ spec: `envOverrides` configure environment variables to be set in the Pods. It is a map from strings to strings - environment variables and the value to set. Read the - [environment variable overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#env-overrides) + [environment variable overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#env-overrides) for more information and consult the operator specific usage guide to find out about the product specific environment variables that are available. type: object @@ -3171,7 +3171,7 @@ spec: [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core) to override any property that can be set on a Kubernetes Pod. Read the - [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides) + [Pod overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#pod-overrides) for more information. type: object x-kubernetes-preserve-unknown-fields: true @@ -3200,7 +3200,7 @@ spec: podAntiAffinity: null description: |- These configuration settings control - [Pod placement](https://docs.stackable.tech/home/nightly/concepts/operations/pod_placement). + [Pod placement](https://docs.stackable.tech/home/26.7/concepts/operations/pod_placement). properties: nodeAffinity: description: Same as the `spec.affinity.nodeAffinity` field on the Pod, see the [Kubernetes docs](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node) @@ -3232,7 +3232,7 @@ spec: default: containers: {} enableVectorAgent: null - description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/nightly/concepts/logging). + description: Logging configuration, learn more in the [logging concept documentation](https://docs.stackable.tech/home/26.7/concepts/logging). properties: containers: description: Log configuration per container. @@ -3702,7 +3702,7 @@ spec: description: |- The `configOverrides` can be used to configure properties in product config files that are not exposed in the CRD. Read the - [config overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#config-overrides) + [config overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#config-overrides) and consult the operator specific usage guide documentation for details on the available config files and settings for the specific product. properties: @@ -3781,7 +3781,7 @@ spec: `envOverrides` configure environment variables to be set in the Pods. It is a map from strings to strings - environment variables and the value to set. Read the - [environment variable overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#env-overrides) + [environment variable overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#env-overrides) for more information and consult the operator specific usage guide to find out about the product specific environment variables that are available. type: object @@ -3792,7 +3792,7 @@ spec: [PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.34/#podtemplatespec-v1-core) to override any property that can be set on a Kubernetes Pod. Read the - [Pod overrides documentation](https://docs.stackable.tech/home/nightly/concepts/overrides#pod-overrides) + [Pod overrides documentation](https://docs.stackable.tech/home/26.7/concepts/overrides#pod-overrides) for more information. type: object x-kubernetes-preserve-unknown-fields: true @@ -3816,7 +3816,7 @@ spec: names it `default`. Read the - [roles and role groups concept documentation](https://docs.stackable.tech/home/nightly/concepts/roles-and-role-groups) + [roles and role groups concept documentation](https://docs.stackable.tech/home/26.7/concepts/roles-and-role-groups) for more details. type: object required: diff --git a/tests/release.yaml b/tests/release.yaml index 6df27b86..9740ea40 100644 --- a/tests/release.yaml +++ b/tests/release.yaml @@ -7,10 +7,10 @@ releases: description: Integration test products: commons: - operatorVersion: 0.0.0-dev + operatorVersion: 26.7.0-rc1 secret: - operatorVersion: 0.0.0-dev + operatorVersion: 26.7.0-rc1 listener: - operatorVersion: 0.0.0-dev + operatorVersion: 26.7.0-rc1 opa: - operatorVersion: 0.0.0-dev + operatorVersion: 26.7.0-rc1