v0.7.6

What's Changed

• [release-0.7] Start centralizing APIExport indexers by @ncdc in #1765

Full Changelog: v0.7.5...v0.7.6

v0.7.5

What's Changed

• [release-0.7] syncer: handle only the k8s export by @openshift-cherrypick-robot in #1750

Full Changelog: v0.7.4...v0.7.5

v0.7.4

What's Changed

• Forbid system:masters access to kcp-front-proxy, make tests shard aware by @s-urbaniak in #1448
• server/home: create home workspace with final URL on ~ access by @sttts in #1530
• cli: require absolute type with --ignore-existing by @sttts in #1533
• Fix typos in APIExport bootstrapped ClusterRoleBindings by @davidfestal in #1540
• Add KCP CLI arguments to enable home workspaces as well as specific options, especially the groups bound to the get/create ~ permissions by @davidfestal in #1539
• server: add --shard-external-url by @ncdc in #1542
• ddsif: fix lost event handlers by @sttts in #1550
• Add shortName ws for workspace by @xingxingxia in #1524
• reconciler/apiexport: switch from rsa4096 to 256 bit cryptographic random string by @sttts in #1548
• cli: take URL from Workspace also in absolute references by @sttts in #1554
• ddsif: replace discovery polling by @ncdc in #1473
• sharded-test-server: set shard external URL to front-proxy by @sttts in #1552
• Part 2: Scoping controllers in pkg/server by @varshaprasad96 in #1504
• Part 3: Make APIResource controller client calls scoped by @varshaprasad96 in #1558
• server/home: improve log output by @sttts in #1549
• server/home: check owner properly by @sttts in #1493
• Part 4: Wrap client calls in API Binding and Heartbeat controller by @varshaprasad96 in #1569
• apis/tenancy: rename tenancy.kcp.dev/owner -> experimental.tenancy.kcp.dev/owner by @sttts in #1565
• introduce system:shard logical cluster by @p0lyn0mial in #1573
• e2e/clusterworkspacedeletion: deflake by @ncdc in #1576
• syncer/namespace-locator: Rename path to workspace by @jmprusi in #1566
• Adding CEL Validation for Permission Claim by @shawn-hurley in #1529
• e2e: reduce client-side throttling by @ncdc in #1543
• kcp server: introduce root-shard-kubeconfig-file flag by @p0lyn0mial in #1575
• Syncer: Refactors KCPClusterName to SyncTargetWorkspace. by @jmprusi in #1574
• docs: tweaks to the Location concept description by @markmc in #1586
• remove unused apiResourceSchemaIndexer from the apibinding controller by @p0lyn0mial in #1589
• Add workspaces overview to README by @MikeSpreitzer in #1584
• Don't add /clusters/ prefix to /services/ requests by @kylape in #1590
• e2e/clusterworkspacedeletion: use correct root shard system:master client for deletion checks by @sttts in #1570
• e2e: use a better helper for waiting for readiness by @stevekuznetsov in #1588
• Part 5: Wrap controllers in scheduling/tenancy pkgs by @varshaprasad96 in #1578
• Part 6: Scope workload controllers by @varshaprasad96 in #1595
• Extend README with introduction to workspaces by @MikeSpreitzer in #1594
• bootstrap the root workspace only on the root shard by @p0lyn0mial in #1587
• run the clusterworkspaceshard controller only on the root shard by @p0lyn0mial in #1597
• enable ExperimentalWatchProgressNotifyInterval for etcd by @p0lyn0mial in #1596
• clusterworkspace scheduling: default to assigning to the root shard by @p0lyn0mial in #1585
• Makefile improvements by @sttts in #1606
• apis/apis: split out CEL test helper into pkg/apis/test by @sttts in #1603
• clusterworkspacetypes: simplify system types by @sttts in #1607
• k8s 1.24 rebase by @stevekuznetsov in #1568
• cli/sync: create service account secret in advance to trigger token creation by @sttts in #1613
• embeddedetcd: restructure with options/config/server pattern by @sttts in #1608
• make: explicitly list build deps by @stevekuznetsov in #1612
• apibinding controller with root shard informers by @p0lyn0mial in #1598
• server/embeddedetcd: fix npe by @sttts in #1619
• server: restructure with options/config/server pattern by @sttts in #1609
• Documentation: Add Home, Homebucket, and Homeroot workspace info by @pweil- in #1561
• add exports to synctarget API for location workspace by @qiujian16 in #1571
• logging: move clusterworkspaceshard reconciler to structured logging by @stevekuznetsov in #1614
• Add owners files and notes on review/approver role to CONTRIBUTING.md by @pweil- in #1601
• home workspaces: handle slow bootstrapping by @ncdc in #1633
• build(deps): bump imjasonh/setup-ko from 0.4 to 0.5 by @dependabot in #1630
• Fix print column on location labels by @qiujian16 in #1638
• webhook: fix npe by @ncdc in #1639
• Refactor ns scheduler for location workspace by @qiujian16 in #1618
• Enable avoiding using podman by @davidfestal in #1628
• move Config to separate file by @deitch in #1637
• Add initial per-workspace quota support by @ncdc in #1236
• Part 8: Wrap clients in test/e2e/apibinding by @varshaprasad96 in #1640
• e2e: reduce global, trivial Sheriff fixture by @sttts in #1642
• server: keep retrying bootstrapping by @sttts in #1641
• remove deprecated command from use description by @ReToCode in #1645
• virtual: give VWs an order in order to control precedence by @sttts in #1643
• Update minimum Go version in CONTRIBUTING.md doc to 1.18 by @dseapy in #1651
• Misc syncer e2e cleanups and fixes by @sttts in #1652
• wire TemporaryRootShardKcpSharedInformerFactory by @p0lyn0mial in #1572
• Cleanup Syncer to prepare for Syncer Virtual Workspace transformations by @davidfestal in #1629
• syncer: move namespace locator normalization to indexer by @sttts in #1656
• Fix flaky informers by @ncdc in #1649
• Makefile: allow WAIT=1 to keep server running in test-e2e-{sharded,shared} targets by @sttts in #1659
• SyncTarget Uniqueness by @jmprusi in #1600
• apis: add age column where it makes sense by @sttts in #1658
• Part 9: Scope client calls in test/e2e by @varshaprasad96 in #1648
• reconciler/workload/resource: remove syncer finalizer when SyncTarget is gone by @sttts in #1293
• apis/workload/v1alpha1: Fix comment as the value of InternalSyncTargetPlacementAnnotationKey changed by @jmprusi in #1660
• e2e: undo ForeverTestTimeout/30 by @ncdc in #1662
• e2e/apibinding: improve log output and workspace names by @sttts in #1664
• apis/scheduling: remove unused PlacementState struct and constants by @sttts in #1655
• e2e: fix long api groups exhausting label value length by @sttts in #1663
• apis/workload: remove unused func by @sttts in #1668
• api change: adds VirtualWorkspaceURL to ClusterWorkspaceShard by @p0lyn0mial in #1669
• Switch to cluster name annotation by @ncdc in #1673
• Labels sync targets with the SyncTargetKey for reverse lookup by @jmprusi in #1672
• Part 12: Scope syncer and workspacetype tests by @varshaprasad96 in #1678
• use ClusterWorkspaceShard.VirtualWorkspaceURL by @p0lyn0mial in #1670
• apiexport controller: assigns ClusterWorkspaceShard.VirtualWorkspaceURL by @p0lyn0mial in #1681
• runs e2e-sharded with two shards by @p0lyn0mial in #1653
• Part 10: scope cross_logical_cluster tests by @varshaprasad96 in #1667
• Part 11: Sco...

v0.6.4

What's Changed

• cli/sync: create service account secret in advance to trigger token creation (#1616)
• fix flaky informers (#1657)

Full Changelog: v0.6.3...v0.6.4

v0.6.3

What's Changed

• 0.6: ddsif: replace discovery polling by @sttts in #1602

Full Changelog: v0.6.2...v0.6.3

v0.6.2

What's Changed

• [release-0.6] Don't add /clusters/ prefix to /services/ requests by @openshift-cherrypick-robot in #1593

Full Changelog: v0.6.1...v0.6.2

v0.6.1

What's Changed

• [release-0.6] syncer/namespace-locator: Rename path to workspace by @openshift-cherrypick-robot in #1577

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed since v0.6.0-alpha.1

• [release-0.6] cli: require absolute type with --ignore-existing by @openshift-cherrypick-robot in #1534
• [release-0.6] server/home: create home workspace with final URL on '~' access by @sttts in #1537
• [release-0.6] Fix typos in APIExport bootstrapped ClusterRoleBindings by @openshift-cherrypick-robot in #1541
• [release-0.6] server: add --shard-external-url by @openshift-cherrypick-robot in #1547
• [release-0.6] ddsif: fix lost event handlers by @openshift-cherrypick-robot in #1551
• [release-0.6] reconciler/apiexport: switch from rsa4096 to 256 bit cryptographic random string by @openshift-cherrypick-robot in #1556

Full Changelog: v0.6.0-alpha.0...v0.6.0

v0.6.0-alpha.0

Milestone Blocker Epics

• #1225 Multi-Release-Epic: Sharding
• #1219 API Export Permissions on Binding
• #1149 ClusterWorkspaceType Take 2
• #1069 User home workspaces
• #981 Multi-workspace controller development
• #912 Consume Compute via Transparent Multi Cluster set up in a different workspace

What's Changed

• virtual: Avoid error logs for /readz requests by @davidfestal in #1185
• Add authorizers in virtual workspaces by @davidfestal in #1186
• kubectl/crd snapshot: support multidoc by @ncdc in #1182
• adds crdNoOverlappingGVRAdmission admission by @p0lyn0mial in #1170
• pkg/authorization/apibinding_authorizer: don't ignore indexer errors. by @s-urbaniak in #1197
• Unify workloads.kcp.dev => workload.kcp.dev by @sttts in #1200
• Syncer/mutators: Resolve fieldRef "metadata.namespace" Envs before pushing to pcluster by @jmprusi in #1199
• Add technical docs of locations and state machine by @sttts in #1174
• Implement the Syncer virtual workspace authorizer by @davidfestal in #1176
• makefile: manage boilerplate verification locally by @stevekuznetsov in #1173
• Change gitops folder commit hash update is applied to by @kylape in #1204
• Change gitops folder commit hash update is applied to (take 2) by @kylape in #1205
• adding authorizer for the api export virtual workspace by @shawn-hurley in #1177
• CONTRIBUTING.md: add Go Proverbs by @sttts in #1208
• Replace --use with --enter by @MikeSpreitzer in #1212
• APIExport virtual workspace: add core/v1 by @ncdc in #1220
• e2e: extract APIExport/APIBinding helpers by @ncdc in #1218
• contrib: rename demo to demos-unmaintained by @sttts in #1215
• Added ppc64le support to KCP image by @mayurwaghmode in #1216
• Add E2E tests for cordon/uncordon/drain CLI by @chrisahl in #1098
• Add virtual workspace readiness checks to the KCP server in the embedded case by @davidfestal in #1226
• build(deps): bump docker/setup-qemu-action from 1 to 2 by @dependabot in #1229
• e2e/apibinding: require.Eventually for discovery by @sttts in #1231
• e2e/virtual/initializers: fix flake in TestInitializingWorkspacesVirtualWorkspaceDiscovery by @sttts in #1232
• clusterworkspacetype: stop special-casing Universal by @stevekuznetsov in #1237
• Enable syncer finalizers (k8s & virtual) by default. by @jmprusi in #1228
• APIBinding reconciler checks for overlapping CRDs in a logical cluster by @p0lyn0mial in #1217
• Fix Ingress cluster assignment based on namespace placement by @astefanutti in #1241
• CONTRIBUTING.md: document nested require statements by @sttts in #1251
• e2e/virtual/syncer: fixing race with resource controller in TestSyncerVirtualWorkspace by @sttts in #1247
• ci: turn off GitHub CI for jobs we run in Prow by @stevekuznetsov in #1207
• pkg/etcd,server: add --embedded-etcd-force-new-cluster by @s-urbaniak in #1250
• ci: delete demos.yaml by @ncdc in #1252
• Added ppc64le and arm64 support to the Syncer image by @mayurwaghmode in #1235
• tenancy: qualify cluster workspace types by @stevekuznetsov in #1230
• Update video on readme to v0.4 by @robszumski in #1260
• ClusterWorkspace+Types: allow name "org" by @sttts in #1263
• pkg/authorization: don't check for cluster workspace lister. by @s-urbaniak in #1265
• apibinding: make reference.workspace.path optional and defaulted by @sttts in #1262
• clusterworkspaces: make initializers implicit by @stevekuznetsov in #1264
• kubectl kcp ws: fix type printing by @stevekuznetsov in #1268
• reconciler/workload/resource: use RF3339 timestamp format by @jmprusi in #1269
• Placement API by @qiujian16 in #1258
• README.md: add hypercube logo and sources by @sttts in #1210
• clusterworkspacetype: expose virtual workspace URLs by @stevekuznetsov in #1270
• initializingworkspaces: enforce permissions by @stevekuznetsov in #1267
• virtual: Remove unsupported verbs from virtual API server discovery by @astefanutti in #1272
• Remove logo icon file with invalid name by @astefanutti in #1276
• virtual workspaces: skips registartion of default health checks by @p0lyn0mial in #1273
• authorization: clarify/fix service accounts and workspace initialization by @s-urbaniak in #1261
• Added prerequisites on the README by @ppatierno in #1284
• cmd/test-server: pass flags to kcp by @sttts in #1286
• fix typo: indexByWorks{ap->pa}ce by @sttts in #1290
• reconciler/apiexport: don't klog.Fatal by @sttts in #1291
• cli: fix ClusterWorkspace columns output by @sttts in #1296
• cmd/kcp: non-zero return code on error by @sttts in #1287
• server: centrally create and start ddsif by @sttts in #1295
• Reduce log noise by @sttts in #1297
• reconciler/placement: fix patch typo by @sttts in #1298
• e2e: switch NewWorkspaceFixture to options by @sttts in #1289
• Clean up unused e2e helpers by @sttts in #1300
• admission/clusterworkspace: check errors in unit test by @sttts in #1302
• pkg/reconciler/apis/apiexport: clarify patching strategy in case of programming errors by @s-urbaniak in #1304
• Makefile: add test-e2e-shared by @sttts in #1310
• tenancy: show Deleting in phase column during ClusterWorkspace deletion by @sttts in #1303
• APIBinding/Workspace deletion improvement by @sttts in #1299
• github/ci.yaml: use test-e2e-shared make target by @sttts in #1311
• e2e/syncer: less noise with framework.Eventually by @sttts in #1317
• reconciler/clusterworkspace: split into independent reconcilers by @sttts in #1288
• admin.kubeconfig: remove cross-cluster context by @sttts in #1312
• e2e/framework: wait some time until printing message in Eventually by @sttts in #1292
• authorizer: unify workspace access reason by @sttts in #1314
• admission: record the user creating a workspace by @stevekuznetsov in #1321
• Fix partial meta request determination logic by @ncdc in #1322
• ClusterWorkspaces: add optional spec.shard scheduling constraints by @sttts in #1318
• admission/apibinding: fail closed when OpenAPI does not validate by @sttts in #1301
• Update replace directive to last k/k commit by @davidfestal in #1306
• server/apiextensions: use indexes and fixes by @sttts in #1294
• front-proxy: add --authentication-{pass-on,drop}-groups by @sttts in #1305
• virtualworkspace: add a proxy for workspace content by @stevekuznetsov in #1323
• turn the watch cache on by @p0lyn0mial in #1240
• pkg/virtual: externalize VW name and remove extra informers by @sttts in #1328
• virtualworkspaces: propagate clarifying changes by @stevekuznetsov in #1329
• virtualworkspaces: allow access to remove iniitalizers by @stevekuznetsov in #1330
• pkg/admission: add reserved metadata admission plugin by @s-urbaniak in #1343
• e2e/syncer: switch to multi-arch image by @sttts in #1347
• Use logicalcluster.ClusterHeade...

v0.5.0-alpha.1

Milestone Blocker Epics

• #280 Deploy an Application: SA Kubeconfigs point to KCP
• #759 Code-generate scoping wrappers for arbitrary k8s.io/code-generator generated clients and informers
• #846 APIBindings: delete CRs when the APIBinding is deleted
• #912 Multi-Release-Epic: Consume Compute via Transparent Multi Cluster set up in a different workspace
• #914 Advanced Scheduling
• #981 Multi-Release-Epic: multi-workspace controller development
• #1013 Add Authorizer that let's APIExport owner restrict what a user can do with objects of an APIBinding

Source: https://github.com/kcp-dev/kcp/issues?q=is%3Aissue+label%3Amilestone-blocker+milestone%3Av0.5.0+is%3Aopen+label%3Aepic

What's Changed

• reconciler/scheduling/location: add missing index by @sttts in #970
• Remove WorkloadClusterSpec.Kubeconfig by @itdove in #974
• build(deps): bump actions/checkout from 2 to 3 by @dependabot in #962
• build(deps): bump actions/upload-artifact from 2 to 3 by @dependabot in #963
• build(deps): bump actions/setup-go from 2 to 3 by @dependabot in #964
• Towards more stable syncer by @ncdc in #955
• Default to -v=2 by @ncdc in #979
• reconciler/workload/scheduling: remove wrong resource enqueuing avoiding optimization by @sttts in #978
• bump(kube): 902041f0e10a by @ncdc in #986
• Make 'kubectl kcp workload sync' idempotent by @itdove in #975
• Stop dynamic informers when their APIs go away + a couple of ns controller fixes by @ncdc in #987
• Don't log when systemCRDProvider can't find ws by @ncdc in #991
• Fix workspace deletion e2e flake by @qiujian16 in #989
• Front proxy: set sane transport defaults and enable http2 to backends by @csams in #993
• ci: update to actions/upload-artifact@v3 by @sttts in #965
• docs/auth: document authorization by @s-urbaniak in #627
• docs/authorization.md: typo fix by @sttts in #995
• Advanced scheduling by @jmprusi in #942
• Revert "ci: update to actions/upload-artifact@v3" by @sttts in #1001
• Remove kube imports in staging by @ncdc in #1000
• Handle logical cluster move to kcp-dev/logicalcluster by @fabianvf in #1002
• cleanup ClusterRoleBinding on failed workspace creation by @geoberle in #1010
• Add front proxy by @kylape in #973
• Forbid kcp.dev CRD groups outside system:system-crds by @robinbobbitt in #1006
• Follow-ups of namespace scheduler fixing by @sttts in #997
• Fetch external hostname from kcp-front-proxy route. by @csams in #1014
• syncer: refactor into two normal controllers by @sttts in #1011
• Generate openapiv2 code for all KCP APIs by @davidfestal in #1023
• image: Add entrypoint to container image by @micahhausler in #1020
• Add helpers in CommonAPIResourceSpec by @davidfestal in #1024
• Prepare for other types of virtuall workspaces by @davidfestal in #1025
• Allow several virtual workspace commands by @davidfestal in #1027
• admission: complain about the type of the correct object by @stevekuznetsov in #1029
• ci: ensure no k8s.io modules are imported from outside of the fork by @stevekuznetsov in #1031
• reconcilers/workload: shut down controllers correctly by @sttts in #1034
• server: initialize logs early to avoid races by @sttts in #1036
• virtual: add ForwardingRegistry by @sttts in #1037
• Dynamic Virtual workspace implementation by @davidfestal in #1039
• reconciler/scheduling: fix tombstone handling on delete by @sttts in #1049
• authorization: nits by @stevekuznetsov in #1047
• Misc pre-754 changes by @sttts in #1053
• Syncer virtual workspace by @davidfestal in #754
• virtual: fix some GoDoc by @stevekuznetsov in #1048
• dynamic-informer: stop informers when context is done by @sttts in #1054
• Update Syncer VSCode launch configuration by @davidfestal in #1068
• virtual/syncer: add documentation to the URL parsing by @stevekuznetsov in #1075
• virtual: expand APIDefinitionSetGetter by @stevekuznetsov in #1076
• add kcp workload cordon/uncordon/drain by @chrisahl in #1005
• Use private gitops repo to deploy from main by @kylape in #928
• e2e test transparent SA rewrite in downstream deployment by @geoberle in #1044
• Adds virtualworkspaceurls-controller by @jmprusi in #1018
• Add the WorkloadCluster name to the current context in the syncer virtual workspace by @davidfestal in #1065
• ci: Config author for commit to gitops repo by @kylape in #1079
• Avoid trying to sync namespaces as namespaced resources. by @davidfestal in #1091
• admission: make api binding mutating admission work by @stevekuznetsov in #1080
• test/e2e: quiet down spammy log messages by @stevekuznetsov in #1093
• apibinding: remove initializers by @stevekuznetsov in #1095
• pkg/server: add workspace annotation by @ibihim in #1042
• add initial revision of FAQ by @pweil- in #1045
• test/e2e: quiet down more spam by @stevekuznetsov in #1094
• Fix make test-e2e WHAT so that it works by using WHAT-TESTS by @chrisahl in #1099
• virtual: factor label selector injection out by @stevekuznetsov in #1055
• Add break when cluster found by @itdove in #1106
• virtual: expose fields in internal api struct by @stevekuznetsov in #1107
• admission: add a mutating webhook for clusterworkspaces by @stevekuznetsov in #1081
• Apply audit config to server by @kylape in #1109
• Wire syncer to the virtual workspace by @davidfestal in #1067
• test: stop using require.Equal for composite objects by @stevekuznetsov in #1102
• Deflake namespace reconciler e2e by @ncdc in #1114
• ci: Wrap commit ID in quotes by @kylape in #1115
• Bump kcp-dev/kubernetes dependency by @fabianvf in #1112
• Support APIExport identity in the Syncer virtual workspace by @davidfestal in #1111
• Sync from multiple workspaces by @davidfestal in #927
• Split workloads/namespace controller in namespace and resources controllers by @sttts in #1108
• Makefile: fix WHAT for test-e2e by @sttts in #1117
• reconciler/workloads/apiexport: fix missing byWorkspace index for exports by @sttts in #1118
• e2e: print failing server log with newlines by @sttts in #1120
• apis/workloads: move scheduling labels here by @sttts in #1119
• reconciler/workloads/apiexport: don't stomp all APIExport, but only those named 'kubernetes' by @sttts in #1121
• forbid resource creation when APIBinding is deleting by @qiujian16 in #1043
• Delete custom resources when apibinding is deleted by @qiujian16 in #1040
• Don't sync ServiceAccounts by default by @jmprusi in #1123
• Fix typo in goals.md by @pavolloffay in #1122
• api: Enables the binding of APIs in protected groups by @astefanutti in #1104
• hack: Remove conflicting bash flag by @rgolangh in #1126
• virtualworkspace: inspect available verbs from storage by @stevekuznetsov in #1101
• hack: check for missin...