sean/kratos-identity-operator
Watch
1
0
Fork
You've already forked kratos-identity-operator
 0
Code Issues Pull requests Projects Releases 22 Packages Wiki Activity
22 releases 33 tags
  • v0.5.25 c29a4630a1

    Release 1 Build Stable

    binjovi-bot released this 2026-09-09 16:15:49 +00:00 | 0 commits to trunk since this release

    Downloads
  • v0.5.24 b740526e7b

    Release 1 Build Stable

    binjovi-bot released this 2026-09-06 14:40:19 +00:00 | 1 commits to trunk since this release

    • #72 Use scoped build caches for kratos-identity-operator (b740526e7b)
    Downloads
  • v0.5.23 e7b5a2993d

    Release 1 Build Stable

    binjovi-bot released this 2026-09-06 02:50:19 +00:00 | 5 commits to trunk since this release

    • #70 feat: retain Kratos identities during management handoff (e7b5a2993d)
    Downloads
  • v0.5.22 b559fc03be

    Release 1 Build Stable

    binjovi-bot released this 2026-09-02 05:49:50 +00:00 | 7 commits to trunk since this release

    Downloads
  • v0.5.21 4ea0328caf

    v0.5.21 Stable

    pipeline-bot released this 2026-08-07 16:54:00 +00:00 | 10 commits to trunk since this release

    Changes

    • docs: rewrite documentation to ASD-STE100 (PR #67) — sean, 4ea0328caf6769e9214c246f799d0334f1ed346c
    Downloads
  • v0.5.20 ea67c63676

    v0.5.20 Stable

    pipeline-bot released this 2026-08-06 10:34:55 +00:00 | 11 commits to trunk since this release

    Changes

    • fix(security): harden manager runtime (PR #66) — sean, ea67c63676f6198d3e9a475173fc209a8da1bd8b
    Downloads
  • v0.5.19 4373046ad4

    v0.5.19 Stable

    pipeline-bot released this 2026-07-28 15:39:07 +00:00 | 12 commits to trunk since this release

    Fixed

    • A transient Kratos 4xx no longer abandons a KratosIdentity forever.
      kratosTaxonomy classified ConfigurationError as Terminal, and Terminal
      makes the shared harness return an empty result with no error, so
      controller-runtime drops the item; with no manager-wide resync and the 5m
      ready cadence only on the success path, nothing ever re-enqueued it.
      classifyKratosError maps every non-404/409, non-401/403/408/429/5xx
      response to ConfigurationError, which includes the 400/422 Kratos returns
      when a password fails its policy — including the HaveIBeenPwned breach-list
      lookup, a live outbound call that can fail transiently. One such blip left
      the identity uncreated and the user unable to log in until somebody edited
      the spec. Terminal is only sound for a reason that is a pure function of the
      CR (InvalidSpec, where the fix is itself a spec edit that re-enqueues); a
      remote verdict has no corresponding Kubernetes event when it clears.
      ConfigurationError now uses a fixed 5-minute requeue, which keeps the
      latched Degraded=ConfigurationError status visible without a backoff storm
      while guaranteeing self-heal.

    Included changes (v0.5.18 -> v0.5.19)

    • 839ad8db4957 chore: re-trigger CI (previous run hit a transient compile-step failure)
    • 03b84cbc7321 fix(reconcile): requeue ConfigurationError instead of dropping the identity
    Downloads
  • v0.5.18 6a76a73085

    v0.5.18 Stable

    pipeline-bot released this 2026-07-27 23:37:13 +00:00 | 15 commits to trunk since this release

    Security

    • Refuse redirects on Kratos Admin API calls. 0.5.16 pinned
      kratosAdminURL to the in-namespace kratos-admin Service to stop a CR
      author from redirecting the controller's Secret-backed password submission to
      an arbitrary endpoint, but the pin only constrained the URL the operator
      dials. The shared client set no CheckRedirect, so Go followed up to ten
      redirects across origins and replayed the request body on 307/308 — and the
      create/update bodies carry the plaintext password. Anyone able to create a
      Service named kratos-admin on port 4434 in their own namespace satisfied
      the pin and could then forward the credential anywhere, which is exactly the
      confused-deputy the pin was added to prevent. The client now returns the 3xx
      to the caller, where it fails the status-code check like any other unexpected
      response; the Kratos Admin API never answers a legitimate request with a
      redirect. Both halves now come from one controller.NewAdminHTTPClient
      constructor so the shipped client and the tested client cannot drift.

    Included changes (v0.5.17 -> v0.5.18)

    • 569b504a5d12 fix(security): refuse redirects on Kratos Admin API calls
    Downloads
  • v0.5.17 cb6f0c220b

    v0.5.17 Stable

    pipeline-bot released this 2026-07-24 09:39:55 +00:00 | 18 commits to trunk since this release

    Fixed

    • Verify schema, active state, and canonicalized traits on every steady-state
      identity read so out-of-band Kratos edits are repaired without re-writing an
      unchanged password on the next pass.
    • Reject ambiguous credential-identifier lookups instead of silently adopting
      the first returned identity, and preserve HTTP status in typed client errors
      so invalid configuration stops retrying while conflicts, throttling, and
      outages continue through controller backoff.
    • Upgrade both build/validation toolchains to Go 1.26.5 and the
      x/net/x/text dependency family to patched versions identified by
      govulncheck; make standalone Athens defaults fail over on any proxy error.

    Included changes (v0.5.16 -> v0.5.17)

    • 0e5740415a78 build: align validation toolchain and Athens fallback
    • 148ce5459439 fix(identity): repair remote drift and classify API errors
    Downloads
  • v0.5.16 d7dc4b6b6b

    v0.5.16 Stable

    pipeline-bot released this 2026-07-23 17:25:43 +00:00 | 23 commits to trunk since this release

    Security

    • Require every KratosIdentity to use the exact namespace-local Admin API
      endpoint (http://kratos-admin.<namespace>.svc.cluster.local:4434). This
      prevents a CR author from redirecting the controller's Secret-backed password
      submission to an arbitrary or cross-tenant HTTP endpoint.
    • Path-escape Kratos-returned identity IDs before update and delete requests so
      a malformed or compromised response cannot alter the Admin API path.

    Changed

    • Fail safely instead of panicking when the reconciler HTTP client is not
      configured.
    • Clear the repository's lint and gosec backlog (unchecked response closes,
      mock response writes, and stale controller-runtime assertions); both strict
      full-repository gates now report zero issues.

    Included changes (v0.5.15 -> v0.5.16)

    • 6b8737bc5354 fix(controller): constrain Kratos admin requests
    Downloads