• v0.12.24 ce3ca23051

    v0.12.24 Stable

    pipeline-bot released this 2026-07-23 14:16:27 +00:00 | 24 commits to main since this release

    Fixed

    • Bring the legacy secret-sync CRDs onto the same Kubernetes status contract as
      the native controllers: OpenBaoAuth, OpenBaoConnection, and
      OpenBaoDynamicSecret now publish current-generation Ready conditions and
      observedGeneration, while retaining their legacy status fields. Status
      writes retry conflicts, recovered auth resources clear stale errors, failed
      DynamicSecret syncs remain retryable, and public conditions redact OpenBao
      response bodies.
    • Replace the shared, concurrency-unsafe math/rand.Rand used for lease jitter
      with bounded crypto/rand sampling and overflow-safe duration arithmetic.
    • Regenerate dist/install.yaml from the current manifests and v0.12.23 image,
      repairing the stale v0.12.3 pin and missing released CRD fields.

    Included changes (v0.12.23 -> v0.12.24)

    • 4cf45281d5c6 fix(secrets): standardize status and lease jitter
    Downloads