sean/kratos-identity-operator
Watch
1
0
Fork
You've already forked kratos-identity-operator
 0
Code Issues Pull requests Projects Releases 14 Packages Wiki Activity
14 releases 25 tags
  • v0.5.7 86113c115a

    v0.5.7 Stable

    pipeline-bot released this 2026-07-13 18:33:45 +00:00 | 45 commits to main since this release

    Fixed

    • Bump libseanfarm-operator v0.4.1 → v0.4.7. Pulls in the v0.4.4 reconcile fix
      (BLOCKER): the shared harness no longer stamps ObservedGeneration on a Converge
      error under ObservedGenOnConvergedOnly. Previously a transient identity-update
      failure stamped ObservedGeneration=N while leaving the CR not-yet-converged, so the
      generation-skip fast path short-circuited the failed generation on the next pass and
      masked it as Ready — silently dropping the spec change (groups/posix/name traits) while
      reporting fully reconciled. Also carries five releases of accumulated harness fixes +
      test coverage (v0.4.2–v0.4.7). Build + full controller test suite green on v0.4.7.

    Included changes (v0.5.6 -> v0.5.7)

    • fe9a7d62008b fix(deps): bump libseanfarm-operator v0.4.1 -> v0.4.7 (blocker: ObservedGen-stamp-on-error)
    • b44c2b0260fa fix(cicd): auto-resolve CHANGELOG land conflicts via .gitattributes merge=union
    • a905a1425668 fix(ci): pin golang:1.25 builder base by digest
    • d25973d872e3 docs(reconciliation): fix secret-watch mapfunc name (mapSecret)
    • 9de83757e0de chore(staging): open v0.5.7-dev dev cycle
    Downloads
  • v0.5.6 aae7b16336

    v0.5.6 Stable

    gitea_admin released this 2026-07-01 13:49:05 +00:00 | 55 commits to main since this release

    Fixed

    • HTTP client: bound the success-path (HTTP 200/201) JSON response decoders with
      io.LimitReader(maxResponseBodySize), matching the guard already applied on the
      error paths. A hostile or malfunctioning Kratos admin API could otherwise stream
      an unbounded response body into json.Decode, exhausting operator memory; the
      success paths are now capped identically to the error paths.
    Downloads
  • v0.5.5 68ff262720

    v0.5.5 Stable

    gitea_admin released this 2026-07-01 10:32:40 +00:00 | 61 commits to main since this release

    Changed

    • CI/build: bring the Dockerfiles to parity with the sibling operators — route Go
      module fetches through the in-cluster Athens proxy (GOPROXY, direct fallback),
      add the # syntax directive + buildkit gomod/go-build cache mounts, and drop
      go build -a (which force-rebuilt every package and defeated the go-build cache).
      Cold builds no longer re-download the module graph from proxy.golang.org.
    Downloads
  • v0.5.4 223da31266

    v0.5.4 Stable

    gitea_admin released this 2026-06-28 18:21:08 +00:00 | 67 commits to main since this release

    Changed

    • Onboarded to the seanfarm consolidated CI/CD pipeline (staging-trunk model): releases
      now ship via the shared ArgoCD-delivered go-operator-image pipeline (buildkitd build,
      cosign-EC sign by digest, dist/install.yaml) instead of Forgejo Actions. Added a
      staging dev trunk, ci-test.Dockerfile, and a make build-installer target.
    Downloads