YuzuZensai/netbird-kubernetes-operator
1
0
Fork 0
mirror of https://github.com/YuzuZensai/netbird-kubernetes-operator.git synced 2026-09-13 10:49:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
119 Commits 1 Branch 0 Tags
0c542db9d70656fbe5d84b75d59196ab66d6c48b
Commit Graph
119 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Philip LaineandGitHub 0c542db9d7 Fix group reconcile removing peers (#226) 
This changes the group reconcile to get the existing group first and
then update it in place. If not done like this peers will be removed
from the group on the next reconcile.

Fixes #221
 2026-05-05 11:12:50 +02:00
Philip LaineandGitHub f8a383f533 Pin the default client image with digest (#227) 
This changes the default client image from latest to a pinned digest. It
also enforces that the default image version tag matches the version of
the Netbird dependency.

This makes testing a lot easier and also ensures that we wont get
untested behavior introduced if the client makes a breaking change.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-05 11:12:37 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		ebe21492bb Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 (#223) 
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from
2.28.1 to 2.28.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/ginkgo/releases">github.com/onsi/ginkgo/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.28.3</h2>
<h2>2.28.3</h2>
<h3>Maintenance</h3>
<p>Bump all dependencies</p>
<h2>v2.28.2</h2>
<h2>2.28.2</h2>
<ul>
<li>Add ArtifactDir() to support Go 1.26 testing.TB interface
[f3a36b6]</li>
<li>Implement shell completion [94151c8]</li>
<li>Add asan CLI option mirroring msan implementation [4d21dbb]</li>
<li>Bump uri from 1.0.3 to 1.0.4 in /docs (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1630">#1630</a>)
[c102161]</li>
<li>fix aspect ratio [9619647]</li>
<li>update logos [5779304]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md">github.com/onsi/ginkgo/v2's
changelog</a>.</em></p>
<blockquote>
<h2>2.28.3</h2>
<h3>Maintenance</h3>
<p>Bump all dependencies</p>
<h2>2.28.2</h2>
<ul>
<li>Add ArtifactDir() to support Go 1.26 testing.TB interface
[f3a36b6]</li>
<li>Implement shell completion [94151c8]</li>
<li>Add asan CLI option mirroring msan implementation [4d21dbb]</li>
<li>Bump uri from 1.0.3 to 1.0.4 in /docs (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1630">#1630</a>)
[c102161]</li>
<li>fix aspect ratio [9619647]</li>
<li>update logos [5779304]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/onsi/ginkgo/commit/5de9c152e440036fef089e065449ecaae64264f9"><code>5de9c15</code></a>
v2.28.3</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/7e2fa191179736dde68165bc101e99c4980fe124"><code>7e2fa19</code></a>
bump dependencies</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/1a819128ddbbcc39f57ac8716943d82c4bd6ef6f"><code>1a81912</code></a>
v2.28.2</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/f3a36b6dfbb5576e0f29fff37944a0b5f9aca079"><code>f3a36b6</code></a>
Add ArtifactDir() to support Go 1.26 testing.TB interface</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/94151c8fa4ecd9240c78548dcedfb7791b9c4e7e"><code>94151c8</code></a>
Implement shell completion</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/4d21dbbdf4285c1a76058f77aed1bb1adc4a77ed"><code>4d21dbb</code></a>
Add asan CLI option mirroring msan implementation</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/c1021613df439a0d5d68fc04238c0fe06a201e89"><code>c102161</code></a>
Bump uri from 1.0.3 to 1.0.4 in /docs (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1630">#1630</a>)</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/96196475f2d8b069fa8e6a4529d7938e015fc2bf"><code>9619647</code></a>
fix aspect ratio</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/5779304bdba168d5e65680aee7f8a8ef2795eb41"><code>5779304</code></a>
update logos</li>
<li>See full diff in <a
href="https://github.com/onsi/ginkgo/compare/v2.28.1...v2.28.3">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-04 16:51:19 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		994f41c96c Bump github.com/netbirdio/netbird from 0.69.0 to 0.70.4 (#224) 
Bumps
[github.com/netbirdio/netbird](https://github.com/netbirdio/netbird)
from 0.69.0 to 0.70.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's
releases</a>.</em></p>
<blockquote>
<h2>v0.70.4</h2>
<h2>What's Changed</h2>
<ul>
<li>[misc] fix MSI generation add installer tests by <a
href="https://github.com/mlsmaycon"><code>@​mlsmaycon</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6031">netbirdio/netbird#6031</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.3...v0.70.4">https://github.com/netbirdio/netbird/compare/v0.70.3...v0.70.4</a></p>
<h2>v0.70.3</h2>
<h2>What's Changed</h2>
<ul>
<li>[client] Enable UI autostart for silent and MSI installs by <a
href="https://github.com/shuuri-labs"><code>@​shuuri-labs</code></a> in
<a
href="https://redirect.github.com/netbirdio/netbird/pull/6026">netbirdio/netbird#6026</a></li>
<li>[management] Prevent JWT reuse during peer login by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6002">netbirdio/netbird#6002</a></li>
<li>[client] Use BindListener for all userspace bind in lazyconn
activity by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6028">netbirdio/netbird#6028</a></li>
<li>[client] Tolerate EEXIST when adding macOS scoped default routes by
<a href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6027">netbirdio/netbird#6027</a></li>
<li>[client] Trigger mobile submodule bump PRs on release tags by <a
href="https://github.com/pappz"><code>@​pappz</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6029">netbirdio/netbird#6029</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.2...v0.70.3">https://github.com/netbirdio/netbird/compare/v0.70.2...v0.70.3</a></p>
<h2>v0.70.2</h2>
<h2>What's Changed</h2>
<ul>
<li>[client] Move macOS sleep detection into the daemon (purego) by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5926">netbirdio/netbird#5926</a></li>
<li>[client] Fix Windows installer upgrade detection for pre-0.70.1
installs by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6025">netbirdio/netbird#6025</a></li>
<li>[misc] Add comment automation on release workflow for PRs by <a
href="https://github.com/jnfrati"><code>@​jnfrati</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6016">netbirdio/netbird#6016</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.1...v0.70.2">https://github.com/netbirdio/netbird/compare/v0.70.1...v0.70.2</a></p>
<h2>v0.70.1</h2>
<h2>What's Changed</h2>
<ul>
<li>[management] removed legacy network map code by <a
href="https://github.com/crn4"><code>@​crn4</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5565">netbirdio/netbird#5565</a></li>
<li>[management] Add Microsoft AD FS support for embedded Dex identity
providers by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6008">netbirdio/netbird#6008</a></li>
<li>[management] Handle single-string JWT group claim from IdPs by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6014">netbirdio/netbird#6014</a></li>
<li>[client] Don't mark management disconnected on transient job stream
errors by <a href="https://github.com/pappz"><code>@​pappz</code></a> in
<a
href="https://redirect.github.com/netbirdio/netbird/pull/6005">netbirdio/netbird#6005</a></li>
<li>[relay] evict foreign client cache on disconnect by <a
href="https://github.com/pappz"><code>@​pappz</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6015">netbirdio/netbird#6015</a></li>
<li>[self-hosted] fix(getting-started): Infinite healthcheck loop with
existing traefik by <a
href="https://github.com/WalidDevIO"><code>@​WalidDevIO</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5871">netbirdio/netbird#5871</a></li>
<li>[management] Drop netmap calculation on peer read by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6006">netbirdio/netbird#6006</a></li>
<li>[client] Use WinRT COM for Windows toasts by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6013">netbirdio/netbird#6013</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/WalidDevIO"><code>@​WalidDevIO</code></a> made
their first contribution in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5871">netbirdio/netbird#5871</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.0...v0.70.1">https://github.com/netbirdio/netbird/compare/v0.70.0...v0.70.1</a></p>
<h2>v0.70.0</h2>
<h2>Release Notes for v0.70.0</h2>
<h3>What's New</h3>
<h4>Client signatures</h4>
<p>We've updated our Windows and MacOS installers and binary signatures.
This means your users might be prompted again, but we expect minimum
impact for most organizations.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netbirdio/netbird/commit/3fc5a8d4a1fe308ff1068764a09b90b0859ab8fe"><code>3fc5a8d</code></a>
[misc] fix MSI generation add installer tests (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6031">#6031</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/57945fc3286a4a7c7f06c688fb251e90e38bfbce"><code>57945fc</code></a>
[client] Trigger mobile submodule bump PRs on release tags (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6029">#6029</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/ed828b7af4e25e64d5f2fdccaaa1285964e27bd8"><code>ed828b7</code></a>
Tolerate EEXIST when adding macOS scoped default routes (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6027">#6027</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/11ac2af2f5130899633b31ac575a683afea7e308"><code>11ac2af</code></a>
Use BindListener for all userspace bind in lazyconn activity (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6028">#6028</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/df197d5001c19dbeedb6e4bb44f51a6d298b3422"><code>df197d5</code></a>
[management] Prevent JWT reuse during peer login (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6002">#6002</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/ad93dcf9807e46ac648ff67b0ab994696b8cb6fc"><code>ad93dcf</code></a>
[client] Enable UI autostart for silent and MSI installs (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6026">#6026</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/7eba5dafd8bbba9e5a0c4e8bd34d14dfda565db9"><code>7eba5da</code></a>
[misc] Add comment automation on release workflow for PRs (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6016">#6016</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/28fe26637b3d94b45444cbe5fa9cab921257cf09"><code>28fe266</code></a>
[client] Fix Windows installer upgrade detection for pre-0.70.1 installs
(<a
href="https://redirect.github.com/netbirdio/netbird/issues/6025">#6025</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/407e9d304b839c934fa7b30f42d01d7777651f9e"><code>407e9d3</code></a>
[client] Move macOS sleep detection into the daemon (purego) (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5926">#5926</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/e5474e199fefc5dcceaf1bde67470321254a67a3"><code>e5474e1</code></a>
[client] Use WinRT COM for Windows toasts (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6013">#6013</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netbirdio/netbird/compare/v0.69.0...v0.70.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-04 16:42:13 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		c858d03cf1 Bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0 (#225) 
Bumps
[sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime)
from 0.23.3 to 0.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/controller-runtime/releases">sigs.k8s.io/controller-runtime's
releases</a>.</em></p>
<blockquote>
<h2>v0.24.0</h2>
<h2>⚠️ Breaking Changes</h2>
<ul>
<li>Dependencies: Update to k8s.io/* v1.36 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506">#3506</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3462">#3462</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3486">#3486</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3450">#3450</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Cache: Fix IndexField blocking until informer is synced (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3445">#3445</a>)</li>
<li>Cache: Wait for cache sync when ReaderFailOnMissingInformer is true
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3425">#3425</a>)</li>
<li>Client: Update typed ApplyConfigurations with server response (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475">#3475</a>)</li>
<li>Fakeclient: Fix SSA status patch resource version check (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3443">#3443</a>)</li>
<li>Fakeclient: Fix panic when using CRs with embedded pointer structs
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3431">#3431</a>)</li>
<li>Fakeclient: Fix status apply if existing object has managedFields
set (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3430">#3430</a>)</li>
<li>Fakeclient: Retry GenerateName on AlreadyExists collisions (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498">#3498</a>)</li>
<li>HTTP servers: Wire up base context into http servers (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3452">#3452</a>)</li>
</ul>
<h2>🌱 Others</h2>
<ul>
<li>Builder/Webhooks: Remove deprecated custom path function (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3465">#3465</a>)</li>
<li>Cache: Test cache reader waits for cache sync (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3434">#3434</a>)</li>
<li>Certwatcher: Deflake certwatcher tests (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3457">#3457</a>)</li>
<li>Dependencies: Use forked version of btree (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3449">#3449</a>)</li>
<li>Envtest: Ensure envtest stops the whole process group (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3447">#3447</a>)</li>
<li>Logging: Add missing space in zap-log-level flag description (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3492">#3492</a>)</li>
<li>Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3489">#3489</a>)</li>
<li>Owners: Cleanup (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3453">#3453</a>)</li>
<li>Recorder: Add logger into context for structured logging (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3454">#3454</a>)</li>
<li>Recorder: Switch to <code>StartLogging</code> for event debug logs
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3451">#3451</a>)</li>
<li>Scheme: Deprecate the scheme builder (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3461">#3461</a>)</li>
<li>Source/Kind: Improve logging for dynamic type kind source (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3494">#3494</a>)</li>
<li>Webhooks: Reduce memory usage of default webhooks (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3463">#3463</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3468">#3468</a>)</li>
</ul>
<h2>🌱 CI &amp; linters</h2>
<ul>
<li>Chore: Update golangci-lint version to v2.8.0 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3448">#3448</a>)</li>
<li>Chore: Update golangci-lint version to v2.10.1 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3470">#3470</a>)</li>
<li>Chore: Update golangci-lint version to v2.11.3 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3482">#3482</a>)</li>
<li>Migrate away from custom GitHub action approval workflow (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3491">#3491</a>)</li>
<li>Release: Auto-create git tags for the
<code>tools/setup-envtest</code> submodule (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3476">#3476</a>)</li>
</ul>
<p>📖 Additionally, there has been 1 contribution to our
documentation. (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3477">#3477</a>)</p>
<h2>Dependencies</h2>
<h3>Added</h3>
<ul>
<li>github.com/cenkalti/backoff/v5: <a
href="https://github.com/cenkalti/backoff/tree/v5.0.3">v5.0.3</a></li>
<li>gonum.org/v1/gonum: v0.16.0</li>
<li>k8s.io/streaming: v0.36.0</li>
</ul>
<h3>Changed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/d3eaef3ab45410342c30528d1eaab982137c4d5a"><code>d3eaef3</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475">#3475</a>
from alvaroaleman/fixfix</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/3296f32e58d6e578aa1932dc5584411c5f25c3db"><code>3296f32</code></a>
🐛 Update typed Applyconfigurations with server response</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/c8b4b9d61fbddd8924c1075ec2face3aa7a5f768"><code>c8b4b9d</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506">#3506</a>
from troy0820/troy0820/update-deps-k8s</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/557c3147e26a62272c87db88e3aadda9890931f1"><code>557c314</code></a>
update to k8s.io v1.36.0</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/e4a998cc6b09afaf5f2d7f30b6a9b728f21918a3"><code>e4a998c</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3499">#3499</a>
from kubernetes-sigs/dependabot/github_actions/all-g...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/1a31c56032fa26cd09de18a6c64b1ba86614f4a4"><code>1a31c56</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498">#3498</a>
from vieux/fix-fake-client-generatename-retry</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/80bc294688dda063f418bb38e72089ab9f857cc0"><code>80bc294</code></a>
fakeclient: retry GenerateName on AlreadyExists collisions (match K8s
1.32 be...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/77b730ab1c9b09af172b67a336886558211b493a"><code>77b730a</code></a>
🌱 Bump the all-github-actions group with 2 updates</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/6210f847b2c1df3f28e5be34a4b1458f03896c73"><code>6210f84</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3494">#3494</a>
from erikgb/improve-kind-source-logging</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/6f89e1d9d45867133034b829fb1a3e3563b5065d"><code>6f89e1d</code></a>
Improve logging for dynamic type kind source</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.3...v0.24.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-04 15:46:35 +02:00
Philip LaineandGitHub 59e0ee8daa Refactor Dockerfile to build Go binary outside of Docker (#218) 
This change moves building the Go binary out of the Dockerfile, and also
fixes some issues in the makefile. These things will speed up build
times and avoid rebuilding when not needed. Additionally it will make
getting version data easier to use as part of the user agent.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-04 14:44:10 +02:00
Philip LaineandGitHub 74012deb27 Enforce import ordering and aliases (#216) 
This change ensures import ordering and aliases is standardized.
Something that is extra important when working with Kuberentes apis that
have "standard" import aliases.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-30 13:39:11 +02:00
Philip LaineandGitHub cae1ab796b Switch to using local golang ci lint and cleanup Makefile (#176) 
Managing the Golang CI Lint version is a bit cumbersome when it is hard
coded in the Makefile. This switches to using the local version. In the
end the version specified in the GH actions flow with be the authority.
 2026-04-30 10:24:16 +02:00
Philip LaineandGitHub 37d48b5ca8 Set best practice defaults for network router deployment (#214) 
This change sets some Kubernetes best practices as defaults. Such as
topology spread and pod disruption budget.

It also exposes log level and image settings in the root struct to make
it easier to override commonly configured settings.

Fixes #77 
Fixes #162

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-28 15:18:15 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		a94071224b Bump github.com/fluxcd/pkg/runtime from 0.104.0 to 0.105.0 (#206) 
Bumps [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg)
from 0.104.0 to 0.105.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/f595d79563dc72a7229676aebd83e54339c73edc"><code>f595d79</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1188">#1188</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/0177f62c5aaa1a86934a1bed93847f227e51af51"><code>0177f62</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d2cda98cb4d9bc9a86a30715c187a6e7235d624a"><code>d2cda98</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1187">#1187</a> from
fluxcd/fix-cel-observed-gen</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3619c73c8d445668e713fd9bea2295d4b9abd479"><code>3619c73</code></a>
runtime/cel: fix requiring int status.observedGeneration</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4f94dc680419f2300cddb6854859999b12789ee9"><code>4f94dc6</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1186">#1186</a> from
guineveresaenger/drop-autoscaling-v2beta2-hpa</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b5624d85787a5c19c6c4038d8dc58f2b669bddd1"><code>b5624d8</code></a>
Remove autoscaling/v2beta2 from HPA normalization</li>
<li>See full diff in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.104.0...runtime/v0.105.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-28 11:24:14 +02:00
Philip LaineandGitHub a90227ab33 Remove old e2e tests workflow (#211) 
The e2e tests that existed before are flaky and test the old resources.
This change removes them until we have implemented new e2e tests for the
new resources.

Part of #209
 2026-04-28 11:14:26 +02:00
Philip LaineandGitHub 1d2bceae15 Fix Helm repo link (#205) 
Fixes the Helm repo link to use the one from the "helms" repo.
 2026-04-24 16:47:48 +02:00
Philip LaineandGitHub dd054d50ec Update documentation with refactored resources (#204) 
This updates the documentation and examples to use the new resources. It
also adds automatic documentation creation for the api reference.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-24 16:22:04 +02:00
Philip LaineandGitHub fe715ae40c Set default API secret reference and remove plain text option (#203) 
The majority of users are using the operator with an API key, so the
default should be to look for the secret. This change also removes the
option to set the api key in plain text as that is just bad practice.
Also bumps the chart version to prepare for a minor release.
 2026-04-24 16:14:34 +02:00
Philip LaineandGitHub 91036022c0 Add path component to finalizer (#202) 
The Kubernetes client warns about not having a path component in the
finalizer. This change adds a unqiue path component for each reconciler
kind.
 2026-04-23 19:18:06 +02:00
Philip LaineandGitHub 9838f0dccc Add sidecar profile (#192) 
This change adds a new SidecarProfile resource which allows configuring
client sidecar injection into pods. It replaces the older annotation
based solution. This removes any pod specific configuration from the
setup key and puts it all in this side car configuration.

Fixes #188

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 19:17:53 +02:00
Philip LaineandGitHub 876a0e1eb3 Update Gateway API to use new resources (#201) 
We dont want to promote the use of the "old" resources with NB prefix so
the Gateway API integration should only support the new ones.

---------

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 16:11:15 +02:00
Philip LaineandGitHub 99ef70603f Allow references to groups by name (#195) 
Group names are unique so we can safely use the name as a reference
method to groups. This makes assigning resources created in the cluster
to groups that already exist a lot easier.
 2026-04-23 13:12:09 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		1a593dafc2 Bump the github-actions group with 3 updates (#200) 
Bumps the github-actions group with 3 updates:
[actions/setup-go](https://github.com/actions/setup-go),
[docker/login-action](https://github.com/docker/login-action) and
[docker/build-push-action](https://github.com/docker/build-push-action).

Updates `actions/setup-go` from 6.3.0 to 6.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Add go-download-base-url input for custom Go distributions by <a
href="https://github.com/gdams"><code>@​gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/721">actions/setup-go#721</a></li>
</ul>
<h3>Dependency update</h3>
<ul>
<li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/727">actions/setup-go#727</a></li>
</ul>
<h3>Documentation update</h3>
<ul>
<li>Rearrange README.md, add advanced-usage.md by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/724">actions/setup-go#724</a></li>
<li>Fix Microsoft build of Go link by <a
href="https://github.com/gdams"><code>@​gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/734">actions/setup-go#734</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/gdams"><code>@​gdams</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/721">actions/setup-go#721</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v6.4.0">https://github.com/actions/setup-go/compare/v6...v6.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-go/commit/4a3601121dd01d1626a1e23e37211e3254c1c06c"><code>4a36011</code></a>
docs: fix Microsoft build of Go link (<a
href="https://redirect.github.com/actions/setup-go/issues/734">#734</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/8f19afcc704763637be6b1718da0af52ca05785d"><code>8f19afc</code></a>
feat: add go-download-base-url input for custom Go distributions (<a
href="https://redirect.github.com/actions/setup-go/issues/721">#721</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/27fdb267c15a8835f1ead03dfa07f89be2bb741a"><code>27fdb26</code></a>
Bump minimatch from 3.1.2 to 3.1.5 (<a
href="https://redirect.github.com/actions/setup-go/issues/727">#727</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/def8c394e3ad351a79bc93815e4a585520fe993b"><code>def8c39</code></a>
Rearrange README.md, add advanced-usage.md (<a
href="https://redirect.github.com/actions/setup-go/issues/724">#724</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/login-action` from 4.0.0 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<ul>
<li>Fix scoped Docker Hub cleanup path when registry is omitted by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/945">docker/login-action#945</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1020.0 in <a
href="https://redirect.github.com/docker/login-action/pull/930">docker/login-action#930</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.77.0 to 0.86.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/932">docker/login-action#932</a>
<a
href="https://redirect.github.com/docker/login-action/pull/936">docker/login-action#936</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
href="https://redirect.github.com/docker/login-action/pull/952">docker/login-action#952</a></li>
<li>Bump fast-xml-parser from 5.3.4 to 5.3.6 in <a
href="https://redirect.github.com/docker/login-action/pull/942">docker/login-action#942</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/login-action/pull/944">docker/login-action#944</a></li>
<li>Bump glob from 10.3.12 to 10.5.0 in <a
href="https://redirect.github.com/docker/login-action/pull/940">docker/login-action#940</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/login-action/pull/949">docker/login-action#949</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 8.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/937">docker/login-action#937</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/login-action/pull/958">docker/login-action#958</a></li>
<li>Bump minimatch from 3.1.2 to 3.1.5 in <a
href="https://redirect.github.com/docker/login-action/pull/941">docker/login-action#941</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/login-action/pull/948">docker/login-action#948</a></li>
<li>Bump undici from 6.23.0 to 6.24.1 in <a
href="https://redirect.github.com/docker/login-action/pull/938">docker/login-action#938</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.0.0...v4.1.0">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/4907a6ddec9925e35a0a9e82d7399ccc52663121"><code>4907a6d</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/930">#930</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="https://github.com/docker/login-action/commit/1e233e691a8881d7f35ca7c2d5dfaaed80b39636"><code>1e233e6</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/6c24ead68057f18c30c808a431f0b85dc25663cb"><code>6c24ead</code></a>
build(deps): bump the aws-sdk-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/ee034d70944e3546349cd24295914f139342f1e6"><code>ee034d7</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/958">#958</a>
from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/1527209db9734bd2352a2dc1a63d79c9aa5358bb"><code>1527209</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/937">#937</a>
from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li>
<li><a
href="https://github.com/docker/login-action/commit/d39362aba4d72f8d9d93e0962119840690133e1b"><code>d39362a</code></a>
build(deps): bump lodash from 4.17.23 to 4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/a6f092b568105cbb6d9deb7e55e0a4c5c1025fce"><code>a6f092b</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/60953f0bed2120ec69659d271fe18d34bc069779"><code>60953f0</code></a>
build(deps): bump the proxy-agent-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/62c688590fb4ab6c6e89a217ced0a7b2ddcf1340"><code>62c6885</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/936">#936</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/login-action/commit/102c0e672992d2e992c89b6f4808d65a353b5a1a"><code>102c0e6</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/build-push-action` from 7.0.0 to 7.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/build-push-action/releases">docker/build-push-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<ul>
<li>Git context <a
href="https://docs.docker.com/build/concepts/context/#url-queries">query
format</a> support by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1505">docker/build-push-action#1505</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.79.0 to 0.87.0 by
<a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1505">docker/build-push-action#1505</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1500">docker/build-push-action#1500</a></li>
<li>Bump fast-xml-parser from 5.4.2 to 5.5.7 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1489">docker/build-push-action#1489</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1491">docker/build-push-action#1491</a></li>
<li>Bump glob from 10.3.12 to 10.5.0 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1490">docker/build-push-action#1490</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1497">docker/build-push-action#1497</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1510">docker/build-push-action#1510</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1496">docker/build-push-action#1496</a></li>
<li>Bump undici from 6.23.0 to 6.24.1 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1486">docker/build-push-action#1486</a></li>
<li>Bump vite from 7.3.1 to 7.3.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1509">docker/build-push-action#1509</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v7.0.0...v7.1.0">https://github.com/docker/build-push-action/compare/v7.0.0...v7.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/build-push-action/commit/bcafcacb16a39f128d818304e6c9c0c18556b85f"><code>bcafcac</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1509">#1509</a>
from docker/dependabot/npm_and_yarn/vite-7.3.2</li>
<li><a
href="https://github.com/docker/build-push-action/commit/18e62f1158d9c45a4a84a58a6828d21f8ed3644b"><code>18e62f1</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1510">#1510</a>
from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
<li><a
href="https://github.com/docker/build-push-action/commit/46580d2c9d43b0888270cb6fa90956e483de56fc"><code>46580d2</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/3f80b252ca2331f6ec3e890f4346b5506ee1dc81"><code>3f80b25</code></a>
chore(deps): Bump lodash from 4.17.23 to 4.18.1</li>
<li><a
href="https://github.com/docker/build-push-action/commit/efeec9557c40a646afe433e39a1e94ca689103f0"><code>efeec95</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1505">#1505</a>
from crazy-max/refactor-git-context</li>
<li><a
href="https://github.com/docker/build-push-action/commit/ddf04b08eb12882258ed936fea4a2806754ff349"><code>ddf04b0</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1511">#1511</a>
from docker/dependabot/github_actions/crazy-max-dot-...</li>
<li><a
href="https://github.com/docker/build-push-action/commit/db08d97a08e4a0d15f85d1c4e64dfd5f88cbe1a9"><code>db08d97</code></a>
chore(deps): Bump the crazy-max-dot-github group with 2 updates</li>
<li><a
href="https://github.com/docker/build-push-action/commit/ef1fb9688fc3626d0fd5e462f502cbbdc6456feb"><code>ef1fb96</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1508">#1508</a>
from docker/dependabot/github_actions/docker/login-a...</li>
<li><a
href="https://github.com/docker/build-push-action/commit/2d8f2a1a378a5c302dcd7b2b4326cefa24180bb1"><code>2d8f2a1</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/919ac7bd7d1aa8cb13fe4de76545abea8d8b5ed2"><code>919ac7b</code></a>
fix test since secrets are not written to temp path anymore</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...bcafcacb16a39f128d818304e6c9c0c18556b85f">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-23 12:05:05 +02:00
Philip LaineandGitHub d082a45b19 Update dependabot to run weekly (#197) 
This change updates the dependabot interval to run weekly. It also
groups all Github Actions update into a single PR. This will make
dependency updates a bit easier to manage without spamming too many PRs.
 2026-04-23 12:00:10 +02:00
Philip LaineandGitHub 1daeb670ba Make network resource names unique (#196) 
Network resource names are unique per Netbird account. This change moves
the existing name to the description and uses the UID for the name of
the resource instead.
 2026-04-23 11:59:07 +02:00
Philip LaineandGitHub 7bc9c87de7 Remove the creation and use of the Kubectl image to apply configuration (#198) 
Using kubectl to manage configuration is not a sustainable solution and
not something that we want to promote users to do. This removes the
creation of the image and use of the image in the Helm charts.
 2026-04-23 11:58:09 +02:00
Philip LaineandGitHub 20a3ddd4ed Add validation of setup key duration (#199) 
This adds more validation to the setup key duration to make sure the
unit and format is correct.
 2026-04-23 11:47:17 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		38f2a8cb99 Bump sigs.k8s.io/structured-merge-diff/v6 from 6.3.2 to 6.4.0 (#185) 
Bumps
[sigs.k8s.io/structured-merge-diff/v6](https://github.com/kubernetes-sigs/structured-merge-diff)
from 6.3.2 to 6.4.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/d56620e25cf07b2e4b592fd9a36c1763fd97066c"><code>d56620e</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/323">#323</a>
from aramase/aramase/f/fix_generators_inline</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/6e51105e56a2966a75df9a1a91b6642ac27c8643"><code>6e51105</code></a>
fix(value): detect inline fields structurally instead of matching
&quot;,inline&quot; tag</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/8fd4c42aee2614581d2db098bd4974e8cb913601"><code>8fd4c42</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/312">#312</a>
from alvaroaleman/unexported</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/eedc5365731c428d67da403defc8fb52b8d13a10"><code>eedc536</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/320">#320</a>
from inteon/use_slices_funcs</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/ee543853b6cf69af62f089b0219771ea44af3183"><code>ee54385</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/322">#322</a>
from inteon/typed_allocator</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/f0a2e6ec225fd5d50a305cdd984f676ab60410cb"><code>f0a2e6e</code></a>
add benchmark for FromValue function</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/7ba0b4efa39e596a5dd4f3d21e37de4c54289f6b"><code>7ba0b4e</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/314">#314</a>
from inteon/tests_add_state</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/138fc0a13636adba330a92a67970c7a3243e7561"><code>138fc0a</code></a>
fully clear freed objects</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/f7fc3d8623e37f800e447e8668f9b4e2199a22b9"><code>f7fc3d8</code></a>
make freelist typed</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/910648e439842165cfd9025e9f6993f9759100ba"><code>910648e</code></a>
Code cleanup: use modern slices.BinarySearchFunc and slices.Insert where
poss...</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/structured-merge-diff/compare/v6.3.2...v6.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigs.k8s.io/structured-merge-diff/v6&package-manager=go_modules&previous-version=6.3.2&new-version=6.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-23 10:20:52 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		327c8dd5a4 Bump github.com/fluxcd/pkg/runtime from 0.103.0 to 0.104.0 (#190) 
Bumps [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg)
from 0.103.0 to 0.104.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/1bfcca47168cb6d2d7dfdc5b35d8b379a773976d"><code>1bfcca4</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1184">#1184</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/29717cf12f2287d4af942bfa28b15425a28f15b7"><code>29717cf</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/56b4f164d7c70a4e419f508db29727e468648204"><code>56b4f16</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1183">#1183</a> from
fluxcd/cel-api-group</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6b6497f0bf6c7d7252f35c66e2de8ad6d5b478b1"><code>6b6497f</code></a>
runtime/cel: allow empty kind in status reader</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/8f83548109570226fefc580b954b6d83e948b1e8"><code>8f83548</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1180">#1180</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9b58a01df04b801a0569d4ca0e5d0dcb9f534b35"><code>9b58a01</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/31385e2a96dc8639124e7e61418a38a49073c691"><code>31385e2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1179">#1179</a> from
fluxcd/go-git-5.18</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d527b349de65e94327158a12ba054db60a3256d0"><code>d527b34</code></a>
Upgrade go-git to v5.18</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/edb5072051e73f78ee5e26d50bc45972e1009934"><code>edb5072</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1178">#1178</a> from
fluxcd/cleanup-aws-eni</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d7014c457a86606ca629dbf1a7a06113b322a028"><code>d7014c4</code></a>
tests/intergration: cleanup AWS ENIs</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.103.0...runtime/v0.104.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-23 10:19:56 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Philip Laine
 		b77bcd74ab Bump github.com/netbirdio/netbird from 0.66.4 to 0.69.0 (#187) 
Bumps
[github.com/netbirdio/netbird](https://github.com/netbirdio/netbird)
from 0.66.4 to 0.69.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's
releases</a>.</em></p>
<blockquote>
<h2>v0.69.0</h2>
<h2>Release Notes for v0.69.0</h2>
<h3>What's New</h3>
<p><strong>Reverse Proxy IP Reputation Integration</strong>
Now you can use CrowdSec to block malicious traffic based on IP
reputation on your exposed service in the reverse proxy.</p>
<p>This feature requires self-hosted installations to add another
container to their deployment. See instructions in the <a
href="https://docs.netbird.io/selfhosted/migration/enable-reverse-proxy#step-7-optional-enable-crowd-sec-ip-reputation">reverse
proxy migration documentation</a>.</p>
<blockquote>
<p>For Cloud users, support is coming soon.</p>
</blockquote>
<p>Learn more about <a
href="https://docs.netbird.io/manage/reverse-proxy">here</a>.</p>
<p><strong>macOS p2p connectivity improvements</strong>
We've improved macOS p2p connectivity with a better routing exclusion
mechanism to avoid loops. Now the client doesn't add /32 routes per
remote candidate addresses avoiding limitations on accessing remote
peer's local addresses via tunnel connections. Learn more about <a
href="https://redirect.github.com/netbirdio/netbird/pull/5918">this
change</a>.</p>
<blockquote>
<p>To use the old behavior run:</p>
<p><code>sudo netbird service reconfigure --service-env
&quot;NB_USE_LEGACY_ROUTING=true&quot;</code></p>
</blockquote>
<h4>Client Improvements</h4>
<ul>
<li>Added <strong>PCP support</strong>. This change adds support for the
PCP protocol to the client to improve the rate of P2P connectivity.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5219">netbirdio/netbird#5219</a></li>
<li>Added <strong>--disable-networks flag</strong> to block network
selection for users.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5896">netbirdio/netbird#5896</a></li>
<li>Fixed <strong>clearing service env vars with --service-env
&quot;&quot;</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5893">netbirdio/netbird#5893</a></li>
<li>Guarded against <strong>container DNAT bypass of ACL rules in
iptables</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5697">netbirdio/netbird#5697</a></li>
<li>Populated <strong>NetworkAddresses on iOS for posture
checks</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5900">netbirdio/netbird#5900</a></li>
<li>Reconnected <strong>conntrack netlink listener on error</strong>.<br
/>
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5885">netbirdio/netbird#5885</a></li>
<li>Replaced <strong>exclusion routes with scoped default + IP_BOUND_IF
on macOS</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5918">netbirdio/netbird#5918</a></li>
<li>Fixed <strong>incorrect SSH client config combining Host and Match
directives</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5903">netbirdio/netbird#5903</a></li>
<li>Fixed <strong>WGIface.Close deadlock when DNS filter hook re-enters
GetDevice</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5916">netbirdio/netbird#5916</a></li>
</ul>
<h4>Management Improvements</h4>
<ul>
<li>Enforced <strong>peer or peer groups requirement for network
routers</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5894">netbirdio/netbird#5894</a></li>
<li>Reused <strong>single cache store across all management server
consumers</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5889">netbirdio/netbird#5889</a></li>
<li>Fixed <strong>lint error on Google Workspace
integration</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5907">netbirdio/netbird#5907</a></li>
</ul>
<h4>Proxy Enhancements</h4>
<ul>
<li>Added <strong>CrowdSec IP reputation integration for reverse
proxy</strong>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netbirdio/netbird/commit/3098f48b25e2a613d8f70466243d992c498e0fd2"><code>3098f48</code></a>
[client] fix ios network addresses mac filter (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5906">#5906</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/7f023ce8014084385e677e67c541677336e25431"><code>7f023ce</code></a>
[client] Android debug bundle support (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5888">#5888</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/e3611265159bd372f77ca404d32c86127e036525"><code>e361126</code></a>
[client] Fix WGIface.Close deadlock when DNS filter hook re-enters
GetDevice ...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/95213f715714177b7c9672b3f264f84c9a31cf04"><code>95213f7</code></a>
[client] Use Match host+exec instead of Host+Match in SSH client config
(<a
href="https://redirect.github.com/netbirdio/netbird/issues/5903">#5903</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/2e0e3a3601d90a5d7a6b39dc16ebde2522fdf580"><code>2e0e3a3</code></a>
[client] Replace exclusion routes with scoped default + IP_BOUND_IF on
macOS ...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/8ae8f2098fb4bb7a9177b3f2d8d908a413b8fc49"><code>8ae8f20</code></a>
[management] chores: fix lint error on google workspace (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5907">#5907</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/a39787d6796ee26e1f6ad9c67ea33a9da7bf8d66"><code>a39787d</code></a>
[infrastructure] Add CrowdSec LAPI container to self-hosted setup script
(<a
href="https://redirect.github.com/netbirdio/netbird/issues/5880">#5880</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/53b04e512af0d94f619e870467115c43d200830b"><code>53b04e5</code></a>
[management] Reuse a single cache store across all management server
consumer...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/633dde8d1f5985afc52071462c42857cb844b9ac"><code>633dde8</code></a>
[client] Reconnect conntrack netlink listener on error (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5885">#5885</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/7e4542adde54ebe71a3a47f5228c5915c9c1052a"><code>7e4542a</code></a>
fix(client): populate NetworkAddresses on iOS for posture checks (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5900">#5900</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netbirdio/netbird/compare/v0.66.4...v0.69.0">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 09:50:41 +02:00
Philip LaineandGitHub 6768a76c9c Add network router and resource (#189) 
This change adds two new resources, NetworkRouter and NetworkResource,
which enable clusters to expose Kubernetes services to Netbird.

The NetworkRouter is responsible for creating the network, group, setup
key and routing peer all of which are unique to the isntance. Along with
the deployment of the client in the cluster.

The NetworkResource exposes a service by linking to the specific router
it wants to expose to. This makes coupling between the resource and
network easy to understand.

Routers also set a DNS zone which is used to give names to resources
based on the name and namespace of the service being exposed.

Part of #172

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 08:55:49 +02:00
Philip LaineandGitHub af11e31b28 Add ready conditon and cleanup finalizer and status patching (#186) 
This change adds a ready condition. It also sets a standard for status
fields and documentation. It makes use of helper functions from FluxCD
to better manage patching of finalizers and status.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-21 15:42:11 +02:00
Philip LaineandGitHub 1bcd58a7cd Implement mock for Netbird API and client (#184) 
This makes testing of the operator a lot simpler by enabling a quick way
to implement the crud endpoints for all the resources used.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-15 10:25:45 +02:00
Philip LaineandGitHub 9c4ca73712 Implement group resource (#181) 
This change implements a new group resource. 

It also sets the standard for a resource reference will be done through
out the controller. A resource reference can either be done by ID or as
a local named reference to the actual resource. This allows end users to
chose if they want to manage things completely in the cluster or not.

Part of #172

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-15 10:16:10 +02:00
Philip LaineandGitHub 26479a19c0 Implement new setup key resource (#178) 
This change implements a new resource called SetupKey that manages the
lifecycle of setup keys and stores them in secrets.

A major change here is that we are also switching to using SSA for
resource management.

Part of #172

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-13 12:20:35 +02:00
Philip LaineandGitHub 3efacfd4c8 Update controller-gen version and switch to using go tool (#170) 
This makes updating of the versions a lot easier. Also we need to update
the controller gen version to support apply configuration.
 2026-04-02 11:05:16 +02:00
Philip LaineandGitHub f1c382e6f2 Revert "Cleanup routing peer deployment creation" (#159) 
Reverts netbirdio/kubernetes-operator#155
 2026-03-23 17:56:43 +01:00
Philip LaineandGitHub a20570b692 Cleanup resource delete reconcile (#158) 
This fixes resource delete to always run even when there are no
finalizers.
 2026-03-23 15:52:14 +01:00
Philip LaineandGitHub 3a36cb6961 Cleanup routing peer deployment creation (#155) 
This refactors the deployment creation for the routing peer to use the
create or update method. Keeping this a lot cleaner. It also changes to
set controller reference using the util method.
 2026-03-23 11:44:09 +01:00
Nicolas FratiandGitHub b7ecf3c95d Release v0.3.0 rc.2 (#156) 2026-03-23 10:20:56 +01:00
Philip LaineandGitHub 8adc8855e5 Add support for private gateway (#154) 
This change adds support for TCPRoutes when using a private gateway
class. This is similar to annotating services today. It also moves the
gateway classes to the Helm chart as it makes things a lot simpler for
the end user as they no longer have to define them.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-23 09:59:48 +01:00
Nicolas FratiandGitHub 2aa814f031 release candidate 0.3.0-rc.1 (#152) 2026-03-20 13:15:41 +01:00
Philip LaineandGitHub 54b2ab8efc Use Gateway listener to reference routing peer (#150) 
This just changes how a routing peer is referenced. In my head this
model makes more sense, especially as we need at least one listener
right now.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-20 10:01:06 +01:00
Philip LaineandGitHub 39ab189fae Share NBResource between different routes (#149) 
This changes the behavior of the Netbird resource so that they can be
shared between routes rather than having one unique created per route.
This is important as we may want to have different route types pointing
to the same service.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-19 18:28:35 +01:00
Philip LaineandGitHub e83dc472e2 Remove webhook for setup key resource (#148) 
The webhook for the NBSetupKey does a mix of runtime validation and
configuration validation. The validation of secret key ref has been
switched to using CEL rules to achieve the same thing.

The other logic is just being removed as it is goes against common
practice in Kubernetes. We should not block secret deletion if a pod is
using the secret. Existing pods will keep running while new pods will
not be able to be created. This is expected behavior in other tools and
should be dealt with during reconcile.

Checking that secrets exist and other dependency problems should be done
during reconcile and then bubbled up with conditions instead.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-19 15:48:38 +01:00
Philip LaineandGitHub 7acd175882 Gateway API support (#117) 
This change adds support for the new proxy service to the operator
through Gateway API. This change attempts to standardize concepts around
the Gateway API to allow for compatibility with other projects.

Fixes #111
Fixes #44

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-19 13:01:58 +01:00
Philip LaineandGitHub ccf819d2ff Make runtime namespace configurable (#145) 
Making the runtime namespace configurable makes it possible to run
locally outside of the cluster. This is useful for quick development
testing.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-18 12:00:31 +01:00
Philip LaineandGitHub 8267cc406a Remove option to disable http2 for metrics server (#143) 
HTTP2 was disabled to mitigate security risks from CVE-2023-44487 and
CVE-2023-39325 which have long since been fixed in Go. Removing the
option that was false by default enables http2 and also reduces some
confusion about why it is an option in the first place.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-18 09:56:43 +01:00
Philip LaineandGitHub 9313fef43d Share Netbird client between all reconcilers (#122) 
This changes the reconcilers to take a netbird client rather than
creating their own on setup.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-03-16 11:23:26 +01:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		dca7782571 Bump github.com/netbirdio/netbird from 0.66.3 to 0.66.4 (#139) 
Bumps
[github.com/netbirdio/netbird](https://github.com/netbirdio/netbird)
from 0.66.3 to 0.66.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's
releases</a>.</em></p>
<blockquote>
<h2>v0.66.4</h2>
<h2>Release Notes for v0.66.4</h2>
<h3>What's New</h3>
<h4>Management Improvements</h4>
<ul>
<li>
<p>Create a <strong>shallow copy of the account when buffering</strong>
to improve memory safety and performance.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5572">netbirdio/netbird#5572</a></p>
</li>
<li>
<p>Set <strong>network map components by default</strong> and optimize
<strong>memory usage</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5575">netbirdio/netbird#5575</a></p>
</li>
</ul>
<h4>Self-Hosted Improvements</h4>
<ul>
<li>Removed <strong>extra proxy domain instructions</strong> from the
getting started guide to simplify setup.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5573">netbirdio/netbird#5573</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.66.3...v0.66.4">https://github.com/netbirdio/netbird/compare/v0.66.3...v0.66.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netbirdio/netbird/commit/b5489d4986e6131f663ba24e330cbb3af4b92580"><code>b5489d4</code></a>
[management] set components network map by default and optimize memory
usage ...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/7a23c57cf8157f1c62619e68c6c104202c58a96b"><code>7a23c57</code></a>
[self-hosted] Remove extra proxy domain from getting started (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5573">#5573</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/11f891220e2ee5b1395e33a2e7a3672cd07f4bef"><code>11f8912</code></a>
[management] create a shallow copy of the account when buffering (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5572">#5572</a>)</li>
<li>See full diff in <a
href="https://github.com/netbirdio/netbird/compare/v0.66.3...v0.66.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/netbirdio/netbird&package-manager=go_modules&previous-version=0.66.3&new-version=0.66.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-12 21:49:10 +01:00
Philip LaineandGitHub 9a422a4d17 Add checks for manifest and code generation (#140) 
Manifest generation has drifted from what is committed to the repo. This
change adds checks for both manifests and code generation to make sure
it is up to date in every PR.
 2026-03-12 21:40:51 +01:00
Philip LaineandGitHub 47b1f55c45 Set Go toolchain to v1.26.1 and apply modernizations (#138) 
This change makes sure that we use the latest Go version when building
and applies some modernization fixes.
 2026-03-12 21:40:36 +01:00
Philip LaineandGitHub 0fde3631b2 Remove unused scheme passed to reconcilers (#121) 
The scheme is part of the manager so we do not need to pass it in the
struct.
 2026-03-12 21:39:56 +01:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Philip Laine
 		81f7a2bd51 Bump sigs.k8s.io/controller-runtime from 0.20.0 to 0.23.3 (#134) 
Bumps
[sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime)
from 0.20.0 to 0.23.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/controller-runtime/releases">sigs.k8s.io/controller-runtime's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.3</h2>
<h2>What's Changed</h2>
<ul>
<li>🐛 Ensure DefaulterRemoveUnknownOrOmitableFields is still working
even if objects are equal by <a
href="https://github.com/k8s-infra-cherrypick-robot"><code>@​k8s-infra-cherrypick-robot</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3469">kubernetes-sigs/controller-runtime#3469</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.2...v0.23.3">https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.2...v0.23.3</a></p>
<h2>v0.23.2</h2>
<h2>What's Changed</h2>
<ul>
<li>🐛 Fix fake client's SSA status patch resource version check by <a
href="https://github.com/k8s-infra-cherrypick-robot"><code>@​k8s-infra-cherrypick-robot</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3446">kubernetes-sigs/controller-runtime#3446</a></li>
<li>✨ Reduce memory usage of default webhooks by <a
href="https://github.com/k8s-infra-cherrypick-robot"><code>@​k8s-infra-cherrypick-robot</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3467">kubernetes-sigs/controller-runtime#3467</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.1...v0.23.2">https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.1...v0.23.2</a></p>
<h2>v0.23.1</h2>
<h2>What's Changed</h2>
<ul>
<li>🐛 Cache reader: Wait for cache sync when ReaderFailOnMissingInformer
is true by <a
href="https://github.com/k8s-infra-cherrypick-robot"><code>@​k8s-infra-cherrypick-robot</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3433">kubernetes-sigs/controller-runtime#3433</a></li>
<li>🐛 Fix panic when using CRs with embedded pointer structs by <a
href="https://github.com/k8s-infra-cherrypick-robot"><code>@​k8s-infra-cherrypick-robot</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3436">kubernetes-sigs/controller-runtime#3436</a></li>
<li>🌱 Test cache reader waits for cache sync by <a
href="https://github.com/k8s-infra-cherrypick-robot"><code>@​k8s-infra-cherrypick-robot</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3438">kubernetes-sigs/controller-runtime#3438</a></li>
<li>🐛 Fakeclient: Fix status apply if existing object has
managedFields set by <a
href="https://github.com/k8s-infra-cherrypick-robot"><code>@​k8s-infra-cherrypick-robot</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3437">kubernetes-sigs/controller-runtime#3437</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.0...v0.23.1">https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.0...v0.23.1</a></p>
<h2>v0.23.0</h2>
<h2>🔆 Highlights</h2>
<ul>
<li>Client: Add subresource Apply support by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3321">kubernetes-sigs/controller-runtime#3321</a></li>
<li>Conversion: Enable implementation of conversion outside of API
packages by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3335">kubernetes-sigs/controller-runtime#3335</a></li>
<li>Priorityqueue: Various improvements, bug fixes and now enabled per
default</li>
<li>Webhooks: Generic Validator and Defaulter by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3360">kubernetes-sigs/controller-runtime#3360</a></li>
</ul>
<h2>⚠️ Breaking changes</h2>
<ul>
<li>Dependencies: Update to k8s.io/* v1.35 by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
<a
href="https://github.com/dongjiang1989"><code>@​dongjiang1989</code></a>
<a href="https://github.com/kannon92"><code>@​kannon92</code></a> (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3316">#3316</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3349">#3349</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3386">#3386</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3391">#3391</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3401">#3401</a>)</li>
<li>Client: Add subresource Apply support by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3321">kubernetes-sigs/controller-runtime#3321</a></li>
<li>Events: Migration to the new events API by <a
href="https://github.com/clebs"><code>@​clebs</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3262">kubernetes-sigs/controller-runtime#3262</a>
<ul>
<li>Using the new <code>GetEventRecorderFor</code> requires updating
your rbac for events to use the <code>events.k8s.io</code> apiGroup
rather than the `` (core) apiGroup</li>
</ul>
</li>
<li>Fakeclient: Set ResourceVersion for SSA Create by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3311">kubernetes-sigs/controller-runtime#3311</a></li>
<li>Webhooks: Generic Validator and Defaulter by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3360">kubernetes-sigs/controller-runtime#3360</a>
<ul>
<li>Existing code of the form
<code>builder.WebhookManagedBy(mgr).For(&amp;corev1.Deployment{})</code>
has to be changed to <code>builder.WebhookManagedBy(mgr,
&amp;appsv1.Deployment{})</code></li>
<li>Existing webhook implementations have to be changed to take the
concrete object rather than <code>runtime.Object</code>, for example
from <code>ValidateCreate(ctx context.Context, obj runtime.Object)
(admission.Warnings, error)</code> to <code>ValidateCreate(ctx
context.Context, obj *appsv1.Deployment) (admission.Warnings,
error)</code></li>
</ul>
</li>
</ul>
<h2>✨ Features</h2>
<ul>
<li>Cache: Allow fine-granular SyncPeriod configuration by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3376">kubernetes-sigs/controller-runtime#3376</a></li>
<li>Client: Add FieldOwner option to client.Options by <a
href="https://github.com/aerfio"><code>@​aerfio</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3389">kubernetes-sigs/controller-runtime#3389</a></li>
<li>Client: Add FieldValidation option to client.Options by <a
href="https://github.com/aerfio"><code>@​aerfio</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3393">kubernetes-sigs/controller-runtime#3393</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/f9589b9f2b9dddf8532b432bb8315f2820ab9971"><code>f9589b9</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3469">#3469</a>
from k8s-infra-cherrypick-robot/cherry-pick-3468-to-...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/25615ad1d1229db805cec6b0f3f29f284fe53be1"><code>25615ad</code></a>
Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if
object...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/8122a6266696b980fc9219c2fbb48bb4ce60d12b"><code>8122a62</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3467">#3467</a>
from k8s-infra-cherrypick-robot/cherry-pick-3463-to-...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/35093c6117da44c29f3a03d06e379d606814018d"><code>35093c6</code></a>
Reduce memory usage of default webhooks</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/4dbfa5c66aa24a35003c41507385c2a91e94d404"><code>4dbfa5c</code></a>
[release-0.23] 🐛 Fix fake client's SSA status patch resource version
check (#...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/f52bbb8bb1a2275cbe90dec8d6c12d5cacb1a7de"><code>f52bbb8</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3437">#3437</a>
from k8s-infra-cherrypick-robot/cherry-pick-3430-to-...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/4f41337fdd898537c6633a174cd539cb2e0c4d15"><code>4f41337</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3438">#3438</a>
from k8s-infra-cherrypick-robot/cherry-pick-3434-to-...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/e29a1b93fae5c5f22c992c57b11dcf90ccc35c53"><code>e29a1b9</code></a>
seedling: Test cache reader waits for cache sync</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/83c8dc31c46c621c336c8a7749ee41658b6d17e1"><code>83c8dc3</code></a>
bug: Fakeclient: Fix status apply if existing object has managedFields
set</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/bf6bcd55b4d5eba00273426d61db313dcd2a6c7f"><code>bf6bcd5</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3436">#3436</a>
from k8s-infra-cherrypick-robot/cherry-pick-3431-to-...</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.20.0...v0.23.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigs.k8s.io/controller-runtime&package-manager=go_modules&previous-version=0.20.0&new-version=0.23.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Philip Laine <philip.laine@gmail.com>
 2026-03-11 14:18:09 +01:00