ImageSwap v1.4.0-prerelease

[phenixblue]

Hello all, we just published the v1.4.0-prerelease. This is a pretty major change and introduces some major changes to the operation of the ImageSwap Webhook.

This is a combination of things I've wanted to do for a while and some requests from various folks using the webhook in production environments.

I'd love for folks to test if they can and provide feedback here. If it's quiet or not much feedback, I'll move forward with a proper v1.4.0 release within a week or two.

Quickstart

We do keep the main "QuickStart" install reference on the README pointing at the latest stable release, so here's the reference for the prerelease:

$ kubectl apply -f https://raw.githubusercontent.com/phenixblue/imageswap-webhook/v1.4.0-prerelease/deploy/install.yaml

Changelog

This release addresses a few security fixes for dependent libraries and introduces some major enhancements.

!!! Please read carefully as there is new functoinality that is not directly backwards compatible !!!

ImageSwap v1.4.0 requires some new configuration settings and makes major changes to the default image swap logic.

Enhancements

• Introduces new MAPS swap mode logic (New Swap Mode #29)
• Updates to logging when disable label is supplied (New Swap Mode #29)
• Added a kustomize overlay for LEGACY swap mode (New Swap Mode #29)
• Update image swap logic to preserve image org/project (New Swap Mode #29)

MAPS LOGIC: There is a new MAPS mode logic that has been added to allow for more flexibility in the image swapping logic.
The existing logic, referred to as LEGACY mode, is still available, but has been deprecated.
To continue using the LEGACY mode logic set the IMAGESWAP_MODE environment variable accordingly. Please reference the configuration section for more information.

Image Definition Preservation: Updates have been made to how image definitions are processed during a swap. Previously the swap logic would drop the image org/project before adding the prefix (ie. nginx/nginx-ingress:latest would drop the nginx/ portion of the image definition).
In v1.4.0+ the swap logic will preserve all parts of the image except the Registry (ie. docker.io/nginx/nginx-ingress will drop the docker.io only from the image definition).

Security Fixes

• Bump jinja2 from 2.11.2 to 2.11.3 in /app/imageswap (Bump urllib3 from 1.26.4 to 1.26.5 in /app/imageswap-init #28 authored by dependabot)
• Bump urllib3 from 1.26.3 to 1.26.4 in /app/imageswap-init (Bump urllib3 from 1.26.3 to 1.26.4 in /app/imageswap-init #26 authored by dependabot)
• Bump urllib3 from 1.26.4 to 1.26.5 in /app/imageswap-init (Bump jinja2 from 2.11.2 to 2.11.3 in /app/imageswap #25 authored by dependabot)