Skip to content

Latest commit

 

History

History
686 lines (464 loc) · 21.2 KB

CHANGELOG.md

File metadata and controls

686 lines (464 loc) · 21.2 KB
Raw

CHANGELOG

NEXT RELEASE

  • New flag for kapitan compile --compose-node-name. This needs to be used in conjuction with inventory/reclass-config.yml option compose_node_name: true. This allows us to make the same subfolder structure in the inventory folder inside the compiled folder. More info on issue #932

Breaking

  • Reclass PR#10 Value of inventory (Reclass) automatic variable parameters._reclass_.name.short has changed. Before it was the first value of a target name BEFORE a dot (.). AFTER it's the last value after a dot. Example, for a target called test.project:
    • BEFORE: parameters._reclass_.name.short = test
    • AFTER: parameters._reclass_.name.short = project

0.30.0-rc.0

  • Helm binary support (KAP 09) (#701) special thanks @Jean-Daniel @sebradloff @srueg
  • Gojsonnet support (#753) special thanks @pvanderlinden @janeklb
  • Fix searchvar not finding vars with false values (#670) thanks @roman8422
  • Adds input params to jinja2 input type (#752) thanks @sebradloff
  • Update boto3 and remove urllib3 (#744)
  • Add support for application/x-compressed and application/x-compressed-tar dependencies (#731) thanks @jperville
  • Relax kadet output type requirement. (#710) thanks @Jean-Daniel
  • Fix usage of undefined variable. (#707) thanks @Jean-Daniel
  • Bump reclass submodule to latest commit on develop branch (#703) thanks @simu
  • Let the logger format the message lazily. (#700) thanks @Jean-Daniel
  • Bump httplib2 from 0.18.1 to 0.19.0 (#692)
  • Ignore copy file on missing source (#687) thanks @ademariag

0.29.5

  • Note for jsonnet on arm. Skip import if not used (#663)
  • Fix error for null inventory path in kadet (#664)
  • Bump jsonnet from 0.16.0 to 0.17.0 (#665)
  • Fix empty kadet output_obj crash (#667)
  • Set default multiprocessing to fork & update helm version (#641)
  • Add parameter to set kube version for Helm charts rendering (#671)
  • Handle KeyError in kapitan secrets/refs (#681)
  • Find release version script

0.29.4

  • Fix inventory_path not found error (#661)
  • Bump requests from 2.24.0 to 2.25.0 (#657)
  • Bump boto3 from 1.15.10 to 1.16.26 (#654)
  • Bump cffi from 1.14.2 to 1.14.4 (#650)
  • Bump azure-identity from 1.4.0 to 1.4.1 (#645)
  • Bump boto3 from 1.15.10 to 1.16.9 (#642)
  • Bump gitpython from 3.1.7 to 3.1.11 (#640)
  • Bump cryptography to fix CVE-2020-25659 (#636)
  • Add libssl for static(x) binary (#628)

0.29.3

  • Bump boto3 from 1.14.52 to 1.15.10 (#619)
  • VAULT_SKIP_VERIFY supports with yaml boolean defined in parameters (#623)
  • Add staticx and patchelf to pyinstaller.sh to build a Linux static binary (#624)
  • remove inventory_path parameter in InputType classes (#625)

0.29.2

  • Fix for reveal of secret for dir with json (#607)
  • Fix FileExistsError when fetching multiple dependencies with unpack=True (#608)
  • Create External Input (#587)
  • Update reclass dependency (#610)
  • Bump yamllint from 1.24.2 to 1.25.0 (#616)

0.29.1

  • Fix reveal from ref file bug (#605)
  • Update dependencies (#600, #601, #602, #603)

0.29.0

  • Fix issue #572 Enable adding reclass classes from remote inventories before they are available (#574)
  • Add a dedicated directory in the temp path (#584)
  • Fix issue with dynamically created array of pointers with cffi (#586)
  • New remove input type (#589)
  • Update pip dependencies (#578, #580, #581, #577, #576, #582)
  • Rename remote inventory key to inventory instead of inventories (#570)
  • Add support for remote inventory fetching (#521)
  • Adds input_params for compile time parameter injection into kadet modules (#560)
  • Add logging fix for python 3.8+ on macOS (#559)
  • Allow reclass override none feature (#562)
  • Update python dependencies (#555, #556, #557)
  • Enable helm values files to be injected for input type "helm" (#545)
  • Fix issue #500: Add --ref-file or --tag to refs --reveal option. (#548)
  • Add TOML Jinja2 Filters (#534)
  • Fix issues #535 and #536 by resolving relative paths in the copy input type and not clobbering the output dir (#539)

0.29.0-rc.2

  • Fix issue #572 Enable adding reclass classes from remote inventories before they are available (#574)
  • Add a dedicated directory in the temp path (#584)
  • Fix issue with dynamically created array of pointers with cffi (#586)
  • New remove input type (#589)
  • Update pip dependencies (#578, #580, #581, #577, #576, #582)

0.29.0-rc.1

  • Rename remote inventory key to inventory instead of inventories (#570)

0.29.0-rc.0

  • Add support for remote inventory fetching (#521)

0.28.1-rc.4

  • Adds input_params for compile time parameter injection into kadet modules (#560)
  • Add logging fix for python 3.8+ on macOS (#559)
  • Allow reclass override none feature (#562)
  • Update python dependencies (#555, #556, #557)

0.28.1-rc.3

  • Enable helm values files to be injected for input type "helm" (#545)
  • Fix issue #500: Add --ref-file or --tag to refs --reveal option. (#548)

0.28.1-rc.0

  • Add TOML Jinja2 Filters (#534)
  • Fix issues #535 and #536 by resolving relative paths in the copy input type and not clobbering the output dir (#539)

0.28.0

  • Update reclass and some pip dependencies. (#528)
  • Allow using .yaml output file extension along with .yml (#525)
    • Note: if you have .yaml files in your inventory instead of .yml, now kapitan should recognise them as expected. If you see changes in your compiled output just rename your .yaml files to .yml to keep the compiled diff identical.
  • Fix embedded refs encoding value (#523)
  • Add new Helm dependency input type (#520)
  • adding dir_files_list and dir_files_read in jsonnet (#519)
  • Add file_exists function to jsonnet (#518)

0.28.0-rc.2

  • Update reclass and some pip dependencies. (#528)

0.28.0-rc.1

  • Allow using .yaml output file extension along with .yml (#525)

0.28.0-rc.0

  • Fix embedded refs encoding value (#523)
  • Add new Helm dependency input type (#520)
  • adding dir_files_list and dir_files_read in jsonnet (#519)
  • Add file_exists function to jsonnet (#518)

0.27.4

  • Fix linter argument flag to refs-path instead of deprecated secrets-path (#516)

0.27.3

  • Fix Vaultkv Error Handling (#512)
  • Fix Running init with kapitan binary doesn't work (#514)
  • Show traceback to explain source of the issue (#507)
  • Handle function calling logic in argparse instead of using equals (#509)
  • Update pip dependencies to latest versions (#504)
  • Compile refs in embedded format (#502)

0.27.3-rc.3

  • Fix Vaultkv Error Handling (#512)
  • Fix Running init with kapitan binary doesn't work (#514)

0.27.3-rc.2

  • Show traceback to explain source of the issue (#507)
  • Handle function calling logic in argparse instead of using equals (#509)

0.27.3-rc.1

  • Update pip dependencies to latest versions (#504)

0.27.3-rc.0

  • Compile refs in embedded format (#502)

0.27.2

  • Check if input obj is None before writing to disk (#485)

0.27.1

  • Display full path of target after compilation (#464)
  • Always re-pull dependencies with --fetch (#465)
  • Support search paths in jinja2 (#474)
  • This release might add extra whitespace to some of your jinja2 generated configurations.

0.27.1-rc.0

  • Display full path of target after compilation (#464)
  • Always re-pull dependencies with --fetch (#465)
  • Support search paths in jinja2 (#474)

0.27.0

  • Update all dependency versions

0.26.1

  • Enable prune, per compile target (#451)
  • Install net-tools in CI Image
  • Fix issue #434 Output as a string does not interpolate secrets (#438)
  • Upgrade to Cloud SDK version 274.0.0 (#441)
  • Fix issue #445: Explicitly create directories for all outputted CompiledFile objects. (#446)
  • Add key info for RefBackendError for easier debugging (#439)
  • Update python dependencies to latest versions (#447)

0.26.1-rc.2

  • Enable prune, per compile target (#451)

0.26.1-rc.1

  • Fix issue #434 Output as a string does not interpolate secrets (#438)
  • Upgrade to Cloud SDK version 274.0.0 (#441)
  • Fix issue #445: Explicitly create directories for all outputted CompiledFile objects. (#446)
  • Add key info for RefBackendError for easier debugging (#439)
  • Update python dependencies to latest versions (#447)

0.26.0

  • Fix issue #431: jsonnet compile fails for a single string that isn't an object with items in it. (#432)
  • Fix input_paths globbing when search paths are defined (#426)
  • Support for ed25519 public/private keys in refs (#422)
  • New copy input type (#423)

0.26.0-rc.1

  • Fix input_paths globbing when search paths are defined (#426)

0.26.0-rc.0

  • Support for ed25519 public/private keys in refs (#422)
  • New copy input type (#423)

0.25.5

  • add input_paths globbing support (#419)
  • add kap.yaml_load_stream() function (#416)
  • new yaml_dump_stream() native jsonnet function (#415)
  • Add mysql client, openssh-client to Dockerfile.ci (#413)

0.25.4

  • Add bsdmainutils to Dockerfile.ci

0.25.3

  • Update Dockerfile.ci to debian 10, latest terraform, gcloud sdk and docker (#406)

0.25.2

  • Update wrong path for binaries (#400)
  • Fix template for kapitan init so that the results compiles out of the box (#403)

0.25.1

  • Add jsonnet back to dockerfile.ci (#398)

0.25.0

  • Add support for revealing files in subdirectories (#386)
  • Upgrade to TF 0.12.10 in Dockerfile.ci (#391)
  • Label selectors for compilation (#388)
  • Normalise helm compile (#385)
  • Jsonschema function for jsonnet (#380)
  • Fix issue 381: Document .kapitan and update jsonnet, git and hvac dependencies (#383)
  • Vault secret backend added - read-only (#310)
  • Add yq to the docker images (#375)
  • Update all Dockerfiles to use multi-stage builds (#370)
  • Add additional content type header for fetching GZIP files (#364)
  • Fix Helm binding errors in docker (#359)
  • Restore old order in compile_targets to fix process fork issue (#396)

Breaking

For these breaking changes, run ./scripts/kap_5_migrate.py to help you migrate the majority of secrets.

  • Move to Kap5 ref types (#334)
  • Fix issue #277: Change first '|' operator in secrets functions with '||' (#382)

0.25.0-rc.2

  • Add support for revealing files in subdirectories (#386)
  • Upgrade to TF 0.12.10 in Dockerfile.ci (#391)
  • Label selectors for compilation (#388)
  • Normalise helm compile (#385)

0.25.0-rc.1

  • Jsonschema function for jsonnet (#380)
  • Fix issue 381: Document .kapitan and update jsonnet, git and hvac dependencies (#383)
  • Vault secret backend added - read-only (#310)

Breaking

  • Move to Kap5 ref types (#334)
  • Fix issue #277: Change first '|' operator in secrets functions with '||' (#382)

0.24.1-rc.3

  • Add yq to the docker images (#375)

0.24.1-rc.2

  • Update all Dockerfiles to use multi-stage builds (#370)

0.24.1-rc.1

  • Add additional content type header for fetching GZIP files (#364)
  • Fix Helm binding errors in docker (#359)

0.24.0

  • Add standalone binary to github releases
  • Upgrade some packages in requirements.txt (#344)
  • Upgrade kapp and kbld to v0.11.0 (#344)
  • Fix dependency manager's behavior for files to unpack (#342)
  • creating standalone binary for kapitan (#323)
  • Add reveal_maybe custom jinja2 filter (#332)
  • Add support to import Helm input type (#307)
  • Make boto3 requirement more flexible (#320)
  • Add kubernetes manifest validation (#317)
  • Improve json schema validation error display for inventory (#318)
  • Multi-document yaml outputs (#308)
  • Add external dependency management (#304)
  • Fix bug in resources.py when passing config to reclass (#296)
  • Fix requests version to circumvent urllib3 version conflict (#300)
  • Upgrade to jsonnet 0.13.0 (#309)
  • Add kapp and kbld to kapitan-ci (#314)
  • Implement secret sub-variables (#282)

0.24.0-rc.6

  • Testing github release of standalone binary

0.24.0-rc.4

  • Upgrade some packages in requirements.txt (#344)
  • Upgrade kapp and kbld to v0.11.0 (#344)
  • Fix dependency manager's behavior for files to unpack (#342)
  • creating standalone binary for kapitan (#323)

0.24.0-rc.3

  • Add reveal_maybe custom jinja2 filter (#332)
  • Add support to import Helm input type (#307)

0.24.0-rc.2

  • Make boto3 requirement more flexible (#320)
  • Add kubernetes manifest validation (#317)
  • Improve json schema validation error display for inventory (#318)
  • Multi-document yaml outputs (#308)

0.24.0-rc.1

  • Add external dependency management (#304)

0.24.0-rc.0

  • Fix bug in resources.py when passing config to reclass (#296)
  • Fix requests version to circumvent urllib3 version conflict (#300)
  • Upgrade to jsonnet 0.13.0 (#309)
  • Add kapp and kbld to kapitan-ci (#314)
  • Implement secret sub-variables (#282)

0.23.1

  • Fix pypi package by including requirements.txt (#287)
  • Make jsonnet & kadet support plain text output_type (#288)
  • Fallback to reclass 1.5.6 because of regression (#284)
  • Add parseYaml function in jsonnet (#263)
  • Add support for specifying custom jinja2 filters (#267)
  • Update minor dependencies (#283)

0.23.1-rc.1

  • Fallback to reclass 1.5.6 because of regression (#284)

0.23.1-rc.0

  • Add parseYaml function in jsonnet (#263)
  • Add support for specifying custom jinja2 filters (#267)
  • Update reclass (1.6.0) and other minor dependencies (#283)

0.23.0

  • Add support for writing ref type secrets in cli (#242)
  • Validate target name matches target yml file name (#243)
  • randomstr now generates exactly as many characters as requested (#245)
  • Add yamllint in kapitan linter checks (#246)
  • Added more jinja2 filters (#234)
  • Improved tests coverage (#236)
  • Fix included input templates (#229)
  • Added kapitan init (#213)
  • Removed ujson dependency (#220)
  • Tests for terraform compile (#225)

Breaking

  • Fixed and updated kapitan version checking (#233)

0.23.0-rc.2

  • Add support for writing ref type secrets in cli (#242)
  • Validate target name matches target yml file name (#243)
  • randomstr now generates exactly as many characters as requested (#245)
  • Add yamllint in kapitan linter checks (#246)

0.23.0-rc.1

  • Added more jinja2 filters (#234)
  • Improved tests coverage (#236)

0.23.0-rc.0

Breaking

  • Fixed and updated kapitan version checking (#233)

0.22.4-rc.1

  • Fix included input templates (#229)

0.22.4-rc.0

  • Added kapitan init (#213)
  • Removed ujson dependency (#220)
  • Tests for terraform compile (#225)

0.22.3

  • Fixed bug in secrets --validate-targets and --update-targets (#207)

0.22.2 (secrets validation broken, do not use)

  • Fixed failing docker builds and added it to the tests (#204)
  • Update google api python client (#204)

0.22.1 (secrets validation broken, do not use)

  • Added some basic linter functionality (kapitan linter -h) (#193)
  • Added support for Kadet input type (python, still a beta feature) (#190)

0.22.0

Updates

  • Updated python dependencies: pyyaml and six
  • Added AWS KMS support as a secrets backend (#179)
  • Refactor input_type code into classes (#180)
  • Fix GPG failing when expiry of gpg key is infinite (#181)

Breaking

  • Added reveal secrets function, updated rsapublic function (#182)
  • parameters.kapitan.secrets.recipients is deprecated, please use parameters.kapitan.secrets.gpg.recipients (#183)

0.21.0

0.20.1

  • Added jinja2 base64 filter (#170)

0.20.0

  • Fix re.sub hanging (#158)
  • gCloud KMS secrets backend (#159)
  • Support .yaml in refs (#160)
  • Better kapitan version checking (#163)
  • Secrets fixes (#165)
  • Travis, Docker and requirements updates (#166)
  • gkms update and validate secrets (#167)
  • Added promtool to CI image (#168)

0.20.0-rc.2

  • Travis, Docker and requirements updates (#166)
  • gkms update and validate secrets (#167)

0.20.0-rc.1

  • Better kapitan version checking (#163)
  • Secrets fixes (#165)

0.20.0-rc.0

  • gCloud KMS secrets backend (#159)
  • Fix re.sub hanging (#158)
  • Support .yaml in refs (#160)

0.19.0

  • Fix cli secrets (#154)
  • Add python_requires (#149) - thanks @Code0x58
  • update reclass to release v1.5.6 (#146)
  • Secrets restructure (#148)

0.18.2

  • Fixed gzip_b64 determinism

0.18.1

  • Dependencies update (#137)
  • Made cache an optional flag (--cache). Support for additional cache paths (--cache-paths) (#138)
  • Small fix in caching (#140)
  • Added gzip_b64 jsonnet function to support gzip compression of strings + base64
  • Added Python 3.7 support

0.18.0

Breaking

  • Renamed --search-path to --search-paths in eval and compile, enabling multiple paths for jsonnet/jinja2 and adding support for jsonnet bundler (#133)

Updates

  • Inventory and folders caching; only compile targets that changed (#134)
  • Updated reclass to v1.5.5 (#135)
  • Updated jsonnet to v0.11.2 (#136)

0.17.1

  • Command flags support in .kapitan (#125)
  • Upgraded reclass to 1.5.4 (#127)
  • Added rsapublic function to gpg backend (#128)

0.17.0

Breaking

  • kapitan compile does not prune jsonnet output anymore by default (#118). --no-prune flag has been removed and replaced with --prune. If you want to keep jsonnet output consistent with <0.17.0, you can do kapitan compile --prune.

Updates

  • Add pretty printer (-p) option to searchvar (#121)
  • Cleaned up examples (#123)
  • Updated requests to 2.19.1 (#124)

0.16.11

  • Updated RSA key format to PKCS#8 (#120)

0.16.10

  • GPG backend cleanup (no change in usage or cli) (#116)
  • Improved caching (#117)
  • Verbose options for inventory and searchvar commands (#119)

0.16.9

  • Fixed bug with searchvar keys chain (#115)

0.16.8

  • Reclass submodule integration fixes

0.16.5

  • Reclass update (#112)

0.16.4

  • Fixed deep_get recursion and search (#108)
  • Customizable indentation of yaml/json (#110)

0.16.3

  • Allow recursive search and globbing in searchvar and inventory commands (#97)
  • terraform in CI image (#98)
  • Updated kube.libjsonnet and fixed secrets example (#101)
  • Added secrets info in docs
  • Updates to GPG backend functions (#103):
    • RSA private keys ?{gpg:common/rsa.key|rsa}
    • Support for pipes ?{gpg:mysql/root/password|randomstr|base64}
    • SHA256 function ?{gpg:mysql/root/password|randomstr|sha256}
    • Deprecated |randomstrb64 in favor of |randomstr|base64

0.16.2

  • Do not escape forward slashes in json.dump (#92)
  • sha256 jsonnet function (#94)

0.16.1

  • Fix for #81
  • Clearer message for version check (#82)
  • Support for jinja2 'do' extension (#89)

0.16.0

  • Updated reclass
  • (#78) Support for creating a target secret on compile time, if the secret does not already exist:
?{gpg:path/to/new_secret|randomstr:32}

If path/to/new_secret does not exist under secrets_path it evaluates randomstr:32, which returns a 32 byte-log random string generated by secrets.token_urlsafe and creates the secret with its content.

  • (#79) Support for YAML C bindings to improve compilation performance.

If you're using the pip version of Kapitan, you can benefit from YAML C bindings support by running:

Linux: sudo apt-get install python3-yaml Mac: brew install libyaml

0.15.0

  • Updates to deepmind/kapitan:ci Docker image
  • kapitan secrets --write and kapitan secrets --update-targets are now consistent in terms of the recipients list #67
  • Significant performance improvement to kapitan compile #71
  • kapitan compile now writes the version to .kapitan and future executions will check if the last used kapitan version is <= than the current kapitan version, to keep compilations consistent. You can skip version check by doing kapitan compile --ignore-version-check. For more info see #57 and #72

0.14.0

  • Kapitan now requires python 3.6
  • Fixed dockerfile to ensure delegated volumes (#47)
  • Fixed missing target compiled directory
  • Target compilation error improvements (#62)
  • gnupg updated to 0.4.2
  • Inventory target pattern command parsing improvements

0.13.0

  • Added --pattern feature to inventory cli (#41)
  • now using python3 lru_cache instead of memoize
  • fixed searchvar (#40)

0.12.0

  • moved to python 3 (python 2 should still work but no longer supported)
  • updated to jsonnet v0.10.0
  • new yaml jinja2 filter
  • target secrets support (#36)
  • more tests

0.11.0

  • Supports compiling specific targets
  • Breaking change: non inventory target files are gone

0.10.0

  • Supports reading targets from the inventory as well as target files
  • Breaking change: the keys in compile items changed, see (#22)

0.9.19

  • checks for gpg key expiry
  • allow base64 encoding content for secrets
  • support for revealing files in directories

0.9.18

  • fixes a bug that overwrites the output_path if it is set to '.'

0.9.17

  • breaking change: the compile command will compile all targets found (#16)
  • log/print friendlier error messages avoiding tracebacks for known failure behaviours (#15) (fixes #11)

0.9.16

  • gpg secrets support
  • compiled secret tags
  • new --reveal flag for compile sub-command
  • new --no-verify for secrets sub-command
  • new yaml_dump() native jsonnet function

0.9.15

  • Documentation Improvements
  • New --version flag
  • Now using jsonnet 0.9.5
  • inventory_global in jinja and jsonnet
  • Packaged lib/kapitan.libjsonnet

0.9.14

Initial public version