YuzuZensai/netbird-kubernetes-operator
1
0
Fork 0
mirror of https://github.com/YuzuZensai/netbird-kubernetes-operator.git synced 2026-09-13 10:49:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
136 Commits 1 Branch 0 Tags
7744dc08f5b34e7eb12570a1e7c2682eb6bacbb9
Commit Graph
136 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		7744dc08f5 Bump github.com/netbirdio/netbird from 0.70.4 to 0.71.2 (#260) 
Bumps
[github.com/netbirdio/netbird](https://github.com/netbirdio/netbird)
from 0.70.4 to 0.71.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's
releases</a>.</em></p>
<blockquote>
<h2>v0.71.2</h2>
<h2>What's Changed</h2>
<ul>
<li>[management] Avoid peer IP reallocation when account settings update
preserves the network range by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6173">netbirdio/netbird#6173</a></li>
<li>[management] Avoid context cancellation in
<code>cancelPeerRoutines</code> by <a
href="https://github.com/mlsmaycon"><code>@​mlsmaycon</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6175">netbirdio/netbird#6175</a></li>
<li>[client] Clean up legacy 32-bit and HKCU registry entries on Windows
install by <a href="https://github.com/lixmal"><code>@​lixmal</code></a>
in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6176">netbirdio/netbird#6176</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.71.1...v0.71.2">https://github.com/netbirdio/netbird/compare/v0.71.1...v0.71.2</a></p>
<h2>v0.71.1</h2>
<h2>What's Changed</h2>
<ul>
<li>[client] Mirror v4 exit selection onto v6 pair and honour
SkipAutoApply per route by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6150">netbirdio/netbird#6150</a></li>
<li>[client] Drop DNS probes for passive health projection by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5971">netbirdio/netbird#5971</a></li>
<li>[proxy] auth token generation on mapping by <a
href="https://github.com/crn4"><code>@​crn4</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6157">netbirdio/netbird#6157</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.71.0...v0.71.1">https://github.com/netbirdio/netbird/compare/v0.71.0...v0.71.1</a></p>
<h2>v0.71.0</h2>
<h2>Release Notes for v0.71.0</h2>
<h3>What's New</h3>
<p><strong>IPv6 overlay addressing</strong>
NetBird's overlay is now dual-stack. Every account gets its own IPv6
prefix (default <code>/64</code>, configurable from <code>/48</code> to
<code>/120</code>), and peers can receive both an IPv4 and an IPv6
overlay address. DNS serves AAAA
and reverse PTR records alongside A records, ACLs apply to both families
automatically, network routes accept IPv6 CIDRs (with masquerade), exit
nodes that route <code>0.0.0.0/0</code> get a matching <code>::/0</code>
route, and
domain routes resolve both A and AAAA.</p>
<p>Rollout is group-gated: new accounts enable IPv6 for the
<strong>All</strong> group by default; existing accounts opt in under
<strong>Settings &gt; Network</strong>. Assignment is also gated on a
per-peer capability, so older clients keep
working on IPv4 until they upgrade. Hosts can opt out individually with
<code>netbird up --disable-ipv6</code></p>
<p>Read more in the <a
href="https://netbird.io/knowledge-hub/ipv6-overlay-addressing">IPv6
Overlay Addressing announcement</a> and the <a
href="https://docs.netbird.io/manage/settings/ipv6">IPv6
documentation</a>.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5631">netbirdio/netbird#5631</a>
by <a href="https://github.com/lixmal"><code>@​lixmal</code></a></p>
<p><strong>MFA for local users</strong>
Local users (non-IdP) can now enable multi-factor authentication,
closing a gap for deployments that don't federate auth through an
external provider.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5804">netbirdio/netbird#5804</a>
by <a href="https://github.com/jnfrati"><code>@​jnfrati</code></a></p>
<p><strong>Bring your own proxy (backend ready)</strong>
Backend support for per-account reverse-proxy lifecycle has landed:
proxy tokens, per-account cluster allow-lists, conflict detection, and
one-proxy-per-account enforcement. Full rollout (dashboard, docs) comes
in a later release.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5627">netbirdio/netbird#5627</a>
by <a href="https://github.com/crn4"><code>@​crn4</code></a></p>
<h4>Client Improvements</h4>
<ul>
<li>Included <strong>MTU and SSH auth config in debug bundle</strong> by
<a href="https://github.com/lixmal"><code>@​lixmal</code></a>.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/6071">netbirdio/netbird#6071</a></li>
<li>Added <strong>public key to debug bundle config.txt</strong> by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a>.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/6092">netbirdio/netbird#6092</a></li>
<li>iOS: <strong>structured ResolvedIPs collection for domain
routes</strong> by <a
href="https://github.com/pappz"><code>@​pappz</code></a>.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/6090">netbirdio/netbird#6090</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netbirdio/netbird/commit/3f91f49277e1841bdfccda06ae7baa0430e6de2e"><code>3f91f49</code></a>
Clean up legacy 32-bit and HKCU registry entries on Windows install (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6176">#6176</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/347c5bf317794729a044ce9f866f29e357d386d9"><code>347c5bf</code></a>
Avoid context cancellation in <code>cancelPeerRoutines</code> (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6175">#6175</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/22e2519d7113dffec718198e54474cc0a6d71c87"><code>22e2519</code></a>
[management] Avoid peer IP reallocation when account settings update
preserve...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/e916f12cca508dfea584e7b72cf99a135acebc2b"><code>e916f12</code></a>
[proxy] auth token generation on mapping (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6157">#6157</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/9ed2e2a5b463077f8abe3e3926695f5dc9411e29"><code>9ed2e2a</code></a>
[client] Drop DNS probes for passive health projection (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5971">#5971</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/2ccae7ec479c106efb6d7a7edff4bb55affb2aa4"><code>2ccae7e</code></a>
[client] Mirror v4 exit selection onto v6 pair and honour SkipAutoApply
per r...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/07e5450117dd0451aaeefc18729a822115587e69"><code>07e5450</code></a>
[management] Bracket IPv6 reverse-proxy target hosts when building URL
Host f...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/3f914090cbb345707a88b5edb20d9c1351873b4c"><code>3f91409</code></a>
[client] Bracket IPv6 in embed listeners, expand debug bundle (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6134">#6134</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/ea9fab4396fc5513f7c62e3465dd361dc8bb9e91"><code>ea9fab4</code></a>
[management] Allocate and preserve IPv6 overlay addresses for embedded
proxy ...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/77b479286e399660ef2bdcbe7983363946660574"><code>77b4792</code></a>
[management] fix offline statuses for public proxy clusters (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6133">#6133</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netbirdio/netbird/compare/v0.70.4...v0.71.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/netbirdio/netbird&package-manager=go_modules&previous-version=0.70.4&new-version=0.71.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-18 11:02:55 +02:00
Philip LaineandGitHub 0b7c67f22e Verify management url correct format (#254) 
Makes sure that we can parse the management url if configured by user.

Fixes #78

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-14 15:27:42 +02:00
Philip LaineandGitHub 0bd774dc62 Fix missing Kustomization for CRDs (#253) 
This fixes so things like make run works again.
 2026-05-13 15:36:27 +02:00
Philip LaineandGitHub f92fdee6f2 Fix incorrect arch build for ARM64 in multiarch images (#252) 
GOARCH was used instead of the input variable when building mulitarch
images.

Fixes #237

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-13 14:02:51 +02:00
Philip LaineandGitHub c56f8de162 Fix sidecar injection when pod annotations is nil. (#250) 
When a pod does not have any annotations the injector will fail. This
change adds a test for the case and also fixes the issue.

Fixes #246

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-13 12:54:52 +02:00
Philip LaineandGitHub 227618aabf Revert back to storing CRDs in config directory. (#249) 
This changes the CRD directory and makes sure it stays up to date. The
Helm chart will update the CRDs by copying them from the config
directory.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-13 12:48:38 +02:00
Philip LaineandGitHub 11ecc80d58 Add issue template (#251) 
This makes sure that bugs will be reported as issues while feature
requests and other questions will be created as discussions.
 2026-05-13 12:47:14 +02:00
Philip LaineandGitHub 360ef52aa3 Add build version to NetBird client user agent. (#248) 
This also fix the runtime import aliases to avoid conflicts with stdlib
runtime.
 2026-05-13 12:43:46 +02:00
Philip LaineandGitHub 0ef20e5dc3 Move docs to NetBird documentation website. (#247) 
We should not keep duplicate documentation so this change updates the
README and removes the docs from the repository.
 2026-05-13 12:43:27 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		bf436ef347 Bump golang.org/x/mod from 0.35.0 to 0.36.0 (#240) 
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.35.0 to
0.36.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/mod/commit/643da9ba74f1165d8cae1505d453b3de3cf21b7b"><code>643da9b</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/mod/commit/ccc3cdf529d1eee2a832437eb1b85240044d21cb"><code>ccc3cdf</code></a>
zip: include 'but content has correct sum' note in TestVCS</li>
<li><a
href="https://github.com/golang/mod/commit/ab3031803214705d2c9f1102318b083e7086a155"><code>ab30318</code></a>
zip: update zip hashes for new flate compression</li>
<li>See full diff in <a
href="https://github.com/golang/mod/compare/v0.35.0...v0.36.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-12 13:22:43 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		931ebd75a3 Bump github.com/fluxcd/pkg/runtime from 0.105.0 to 0.106.0 (#242) 
Bumps [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg)
from 0.105.0 to 0.106.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/f3ad4b56adec90eb5661af565cdebec997ad4bfb"><code>f3ad4b5</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1195">#1195</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/f35b4fd025cdee1664ca3d7aede2eb2fd594583d"><code>f35b4fd</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/18e165c2592fb2a9633b9a80371e730d88bcab29"><code>18e165c</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1194">#1194</a> from
fluxcd/k8s-1.36</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/fe4377874a6d57593120ee524e1913ca81a5d2e5"><code>fe43778</code></a>
Update controller-gen to v0.21.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2498ab414d7e2abaee4131142293e520ee76b390"><code>2498ab4</code></a>
Update cloud auth SDKs</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b3bb0e0ff6bc2f42f23ff110baa0e7ae0f2ee685"><code>b3bb0e0</code></a>
Update go-git to v5.19.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/545dc4f55ab3850dca6401177c94e37ed40b5c87"><code>545dc4f</code></a>
Update distribution to v3.1.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b23cbf9f0581b9dc5594e8659739f1bc9c870d35"><code>b23cbf9</code></a>
Update Kubernetes packages to 1.36</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/c6042810b61f1937c72a0e04d81d0091ca6e7dae"><code>c604281</code></a>
Update Go to 1.26</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/939c616718374460667e648c796487bfedfa6d98"><code>939c616</code></a>
ssa: Fix race condition in CRD tests</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.105.0...runtime/v0.106.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/fluxcd/pkg/runtime&package-manager=go_modules&previous-version=0.105.0&new-version=0.106.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-12 13:12:04 +02:00
Philip LaineandGitHub 25964a8eea Add missing pdb rbac permissions (#235) 
RBAC was missed because we dont have full covering e2e tests yet. Yet
another reason to give prio to it.

Fixes #234
 2026-05-06 14:01:55 +02:00
Philip LaineandGitHub ae34898735 Rename Helm chart and Docker image and move to GHCR (#233) 
This change does a few things, none of these are breaking.

It changes the registry from Docker Hub to GHCR, as we dont have the
same rate limiting issues with unauthenticated pulls.

It changes the release process to push the Helm chart as an OCI artifact
removing the need for GH pages.

It renames both the image and chart from kubernetes-operator to
netbird-operator. This name is cleaner and easier for people to
understand in a sea of Helm charts. Funnily enough this is not a
breaking change as the release name is used and not the chart name. So
in place upgrades just work.

Fixes #207

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-06 12:26:32 +02:00
Philip LaineandGitHub ea9f1cb081 Modernize for Go 1.26 (#232) 
This change replaces all uses of pointer utils with the new `new`
function which does the same job.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-05 13:53:44 +02:00
Philip LaineandGitHub 69afe3aade Fix SPDX license header (#231) 
This change adds SPDX license headers to all files and eforces it with
the linter.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-05 12:59:36 +02:00
Philip LaineandGitHub 8f8aeb562f Add minimal e2e tests to verify operator starts (#230) 
This is a minimal version of #228 which just spins up a cluster and
verifies that the operator starts. Once this is merged expanding the e2e
tests will be easier. In the meantime we have some validation that the
Helm chart will run in a cluster.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-05 12:31:30 +02:00
Philip LaineandGitHub af7c408386 Add check for go mod being dirty (#229) 2026-05-05 12:31:20 +02:00
Philip LaineandGitHub 0c542db9d7 Fix group reconcile removing peers (#226) 
This changes the group reconcile to get the existing group first and
then update it in place. If not done like this peers will be removed
from the group on the next reconcile.

Fixes #221
 2026-05-05 11:12:50 +02:00
Philip LaineandGitHub f8a383f533 Pin the default client image with digest (#227) 
This changes the default client image from latest to a pinned digest. It
also enforces that the default image version tag matches the version of
the Netbird dependency.

This makes testing a lot easier and also ensures that we wont get
untested behavior introduced if the client makes a breaking change.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-05 11:12:37 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		ebe21492bb Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 (#223) 
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from
2.28.1 to 2.28.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/ginkgo/releases">github.com/onsi/ginkgo/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.28.3</h2>
<h2>2.28.3</h2>
<h3>Maintenance</h3>
<p>Bump all dependencies</p>
<h2>v2.28.2</h2>
<h2>2.28.2</h2>
<ul>
<li>Add ArtifactDir() to support Go 1.26 testing.TB interface
[f3a36b6]</li>
<li>Implement shell completion [94151c8]</li>
<li>Add asan CLI option mirroring msan implementation [4d21dbb]</li>
<li>Bump uri from 1.0.3 to 1.0.4 in /docs (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1630">#1630</a>)
[c102161]</li>
<li>fix aspect ratio [9619647]</li>
<li>update logos [5779304]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md">github.com/onsi/ginkgo/v2's
changelog</a>.</em></p>
<blockquote>
<h2>2.28.3</h2>
<h3>Maintenance</h3>
<p>Bump all dependencies</p>
<h2>2.28.2</h2>
<ul>
<li>Add ArtifactDir() to support Go 1.26 testing.TB interface
[f3a36b6]</li>
<li>Implement shell completion [94151c8]</li>
<li>Add asan CLI option mirroring msan implementation [4d21dbb]</li>
<li>Bump uri from 1.0.3 to 1.0.4 in /docs (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1630">#1630</a>)
[c102161]</li>
<li>fix aspect ratio [9619647]</li>
<li>update logos [5779304]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/onsi/ginkgo/commit/5de9c152e440036fef089e065449ecaae64264f9"><code>5de9c15</code></a>
v2.28.3</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/7e2fa191179736dde68165bc101e99c4980fe124"><code>7e2fa19</code></a>
bump dependencies</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/1a819128ddbbcc39f57ac8716943d82c4bd6ef6f"><code>1a81912</code></a>
v2.28.2</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/f3a36b6dfbb5576e0f29fff37944a0b5f9aca079"><code>f3a36b6</code></a>
Add ArtifactDir() to support Go 1.26 testing.TB interface</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/94151c8fa4ecd9240c78548dcedfb7791b9c4e7e"><code>94151c8</code></a>
Implement shell completion</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/4d21dbbdf4285c1a76058f77aed1bb1adc4a77ed"><code>4d21dbb</code></a>
Add asan CLI option mirroring msan implementation</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/c1021613df439a0d5d68fc04238c0fe06a201e89"><code>c102161</code></a>
Bump uri from 1.0.3 to 1.0.4 in /docs (<a
href="https://redirect.github.com/onsi/ginkgo/issues/1630">#1630</a>)</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/96196475f2d8b069fa8e6a4529d7938e015fc2bf"><code>9619647</code></a>
fix aspect ratio</li>
<li><a
href="https://github.com/onsi/ginkgo/commit/5779304bdba168d5e65680aee7f8a8ef2795eb41"><code>5779304</code></a>
update logos</li>
<li>See full diff in <a
href="https://github.com/onsi/ginkgo/compare/v2.28.1...v2.28.3">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-04 16:51:19 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		994f41c96c Bump github.com/netbirdio/netbird from 0.69.0 to 0.70.4 (#224) 
Bumps
[github.com/netbirdio/netbird](https://github.com/netbirdio/netbird)
from 0.69.0 to 0.70.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's
releases</a>.</em></p>
<blockquote>
<h2>v0.70.4</h2>
<h2>What's Changed</h2>
<ul>
<li>[misc] fix MSI generation add installer tests by <a
href="https://github.com/mlsmaycon"><code>@​mlsmaycon</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6031">netbirdio/netbird#6031</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.3...v0.70.4">https://github.com/netbirdio/netbird/compare/v0.70.3...v0.70.4</a></p>
<h2>v0.70.3</h2>
<h2>What's Changed</h2>
<ul>
<li>[client] Enable UI autostart for silent and MSI installs by <a
href="https://github.com/shuuri-labs"><code>@​shuuri-labs</code></a> in
<a
href="https://redirect.github.com/netbirdio/netbird/pull/6026">netbirdio/netbird#6026</a></li>
<li>[management] Prevent JWT reuse during peer login by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6002">netbirdio/netbird#6002</a></li>
<li>[client] Use BindListener for all userspace bind in lazyconn
activity by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6028">netbirdio/netbird#6028</a></li>
<li>[client] Tolerate EEXIST when adding macOS scoped default routes by
<a href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6027">netbirdio/netbird#6027</a></li>
<li>[client] Trigger mobile submodule bump PRs on release tags by <a
href="https://github.com/pappz"><code>@​pappz</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6029">netbirdio/netbird#6029</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.2...v0.70.3">https://github.com/netbirdio/netbird/compare/v0.70.2...v0.70.3</a></p>
<h2>v0.70.2</h2>
<h2>What's Changed</h2>
<ul>
<li>[client] Move macOS sleep detection into the daemon (purego) by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5926">netbirdio/netbird#5926</a></li>
<li>[client] Fix Windows installer upgrade detection for pre-0.70.1
installs by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6025">netbirdio/netbird#6025</a></li>
<li>[misc] Add comment automation on release workflow for PRs by <a
href="https://github.com/jnfrati"><code>@​jnfrati</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6016">netbirdio/netbird#6016</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.1...v0.70.2">https://github.com/netbirdio/netbird/compare/v0.70.1...v0.70.2</a></p>
<h2>v0.70.1</h2>
<h2>What's Changed</h2>
<ul>
<li>[management] removed legacy network map code by <a
href="https://github.com/crn4"><code>@​crn4</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5565">netbirdio/netbird#5565</a></li>
<li>[management] Add Microsoft AD FS support for embedded Dex identity
providers by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6008">netbirdio/netbird#6008</a></li>
<li>[management] Handle single-string JWT group claim from IdPs by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6014">netbirdio/netbird#6014</a></li>
<li>[client] Don't mark management disconnected on transient job stream
errors by <a href="https://github.com/pappz"><code>@​pappz</code></a> in
<a
href="https://redirect.github.com/netbirdio/netbird/pull/6005">netbirdio/netbird#6005</a></li>
<li>[relay] evict foreign client cache on disconnect by <a
href="https://github.com/pappz"><code>@​pappz</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6015">netbirdio/netbird#6015</a></li>
<li>[self-hosted] fix(getting-started): Infinite healthcheck loop with
existing traefik by <a
href="https://github.com/WalidDevIO"><code>@​WalidDevIO</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5871">netbirdio/netbird#5871</a></li>
<li>[management] Drop netmap calculation on peer read by <a
href="https://github.com/bcmmbaga"><code>@​bcmmbaga</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6006">netbirdio/netbird#6006</a></li>
<li>[client] Use WinRT COM for Windows toasts by <a
href="https://github.com/lixmal"><code>@​lixmal</code></a> in <a
href="https://redirect.github.com/netbirdio/netbird/pull/6013">netbirdio/netbird#6013</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/WalidDevIO"><code>@​WalidDevIO</code></a> made
their first contribution in <a
href="https://redirect.github.com/netbirdio/netbird/pull/5871">netbirdio/netbird#5871</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/netbirdio/netbird/compare/v0.70.0...v0.70.1">https://github.com/netbirdio/netbird/compare/v0.70.0...v0.70.1</a></p>
<h2>v0.70.0</h2>
<h2>Release Notes for v0.70.0</h2>
<h3>What's New</h3>
<h4>Client signatures</h4>
<p>We've updated our Windows and MacOS installers and binary signatures.
This means your users might be prompted again, but we expect minimum
impact for most organizations.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netbirdio/netbird/commit/3fc5a8d4a1fe308ff1068764a09b90b0859ab8fe"><code>3fc5a8d</code></a>
[misc] fix MSI generation add installer tests (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6031">#6031</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/57945fc3286a4a7c7f06c688fb251e90e38bfbce"><code>57945fc</code></a>
[client] Trigger mobile submodule bump PRs on release tags (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6029">#6029</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/ed828b7af4e25e64d5f2fdccaaa1285964e27bd8"><code>ed828b7</code></a>
Tolerate EEXIST when adding macOS scoped default routes (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6027">#6027</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/11ac2af2f5130899633b31ac575a683afea7e308"><code>11ac2af</code></a>
Use BindListener for all userspace bind in lazyconn activity (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6028">#6028</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/df197d5001c19dbeedb6e4bb44f51a6d298b3422"><code>df197d5</code></a>
[management] Prevent JWT reuse during peer login (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6002">#6002</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/ad93dcf9807e46ac648ff67b0ab994696b8cb6fc"><code>ad93dcf</code></a>
[client] Enable UI autostart for silent and MSI installs (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6026">#6026</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/7eba5dafd8bbba9e5a0c4e8bd34d14dfda565db9"><code>7eba5da</code></a>
[misc] Add comment automation on release workflow for PRs (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6016">#6016</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/28fe26637b3d94b45444cbe5fa9cab921257cf09"><code>28fe266</code></a>
[client] Fix Windows installer upgrade detection for pre-0.70.1 installs
(<a
href="https://redirect.github.com/netbirdio/netbird/issues/6025">#6025</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/407e9d304b839c934fa7b30f42d01d7777651f9e"><code>407e9d3</code></a>
[client] Move macOS sleep detection into the daemon (purego) (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5926">#5926</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/e5474e199fefc5dcceaf1bde67470321254a67a3"><code>e5474e1</code></a>
[client] Use WinRT COM for Windows toasts (<a
href="https://redirect.github.com/netbirdio/netbird/issues/6013">#6013</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netbirdio/netbird/compare/v0.69.0...v0.70.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-04 16:42:13 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		c858d03cf1 Bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0 (#225) 
Bumps
[sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime)
from 0.23.3 to 0.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/controller-runtime/releases">sigs.k8s.io/controller-runtime's
releases</a>.</em></p>
<blockquote>
<h2>v0.24.0</h2>
<h2>⚠️ Breaking Changes</h2>
<ul>
<li>Dependencies: Update to k8s.io/* v1.36 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506">#3506</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3462">#3462</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3486">#3486</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3450">#3450</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Cache: Fix IndexField blocking until informer is synced (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3445">#3445</a>)</li>
<li>Cache: Wait for cache sync when ReaderFailOnMissingInformer is true
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3425">#3425</a>)</li>
<li>Client: Update typed ApplyConfigurations with server response (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475">#3475</a>)</li>
<li>Fakeclient: Fix SSA status patch resource version check (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3443">#3443</a>)</li>
<li>Fakeclient: Fix panic when using CRs with embedded pointer structs
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3431">#3431</a>)</li>
<li>Fakeclient: Fix status apply if existing object has managedFields
set (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3430">#3430</a>)</li>
<li>Fakeclient: Retry GenerateName on AlreadyExists collisions (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498">#3498</a>)</li>
<li>HTTP servers: Wire up base context into http servers (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3452">#3452</a>)</li>
</ul>
<h2>🌱 Others</h2>
<ul>
<li>Builder/Webhooks: Remove deprecated custom path function (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3465">#3465</a>)</li>
<li>Cache: Test cache reader waits for cache sync (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3434">#3434</a>)</li>
<li>Certwatcher: Deflake certwatcher tests (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3457">#3457</a>)</li>
<li>Dependencies: Use forked version of btree (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3449">#3449</a>)</li>
<li>Envtest: Ensure envtest stops the whole process group (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3447">#3447</a>)</li>
<li>Logging: Add missing space in zap-log-level flag description (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3492">#3492</a>)</li>
<li>Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3489">#3489</a>)</li>
<li>Owners: Cleanup (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3453">#3453</a>)</li>
<li>Recorder: Add logger into context for structured logging (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3454">#3454</a>)</li>
<li>Recorder: Switch to <code>StartLogging</code> for event debug logs
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3451">#3451</a>)</li>
<li>Scheme: Deprecate the scheme builder (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3461">#3461</a>)</li>
<li>Source/Kind: Improve logging for dynamic type kind source (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3494">#3494</a>)</li>
<li>Webhooks: Reduce memory usage of default webhooks (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3463">#3463</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3468">#3468</a>)</li>
</ul>
<h2>🌱 CI &amp; linters</h2>
<ul>
<li>Chore: Update golangci-lint version to v2.8.0 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3448">#3448</a>)</li>
<li>Chore: Update golangci-lint version to v2.10.1 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3470">#3470</a>)</li>
<li>Chore: Update golangci-lint version to v2.11.3 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3482">#3482</a>)</li>
<li>Migrate away from custom GitHub action approval workflow (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3491">#3491</a>)</li>
<li>Release: Auto-create git tags for the
<code>tools/setup-envtest</code> submodule (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3476">#3476</a>)</li>
</ul>
<p>📖 Additionally, there has been 1 contribution to our
documentation. (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3477">#3477</a>)</p>
<h2>Dependencies</h2>
<h3>Added</h3>
<ul>
<li>github.com/cenkalti/backoff/v5: <a
href="https://github.com/cenkalti/backoff/tree/v5.0.3">v5.0.3</a></li>
<li>gonum.org/v1/gonum: v0.16.0</li>
<li>k8s.io/streaming: v0.36.0</li>
</ul>
<h3>Changed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/d3eaef3ab45410342c30528d1eaab982137c4d5a"><code>d3eaef3</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3475">#3475</a>
from alvaroaleman/fixfix</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/3296f32e58d6e578aa1932dc5584411c5f25c3db"><code>3296f32</code></a>
🐛 Update typed Applyconfigurations with server response</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/c8b4b9d61fbddd8924c1075ec2face3aa7a5f768"><code>c8b4b9d</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3506">#3506</a>
from troy0820/troy0820/update-deps-k8s</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/557c3147e26a62272c87db88e3aadda9890931f1"><code>557c314</code></a>
update to k8s.io v1.36.0</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/e4a998cc6b09afaf5f2d7f30b6a9b728f21918a3"><code>e4a998c</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3499">#3499</a>
from kubernetes-sigs/dependabot/github_actions/all-g...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/1a31c56032fa26cd09de18a6c64b1ba86614f4a4"><code>1a31c56</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3498">#3498</a>
from vieux/fix-fake-client-generatename-retry</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/80bc294688dda063f418bb38e72089ab9f857cc0"><code>80bc294</code></a>
fakeclient: retry GenerateName on AlreadyExists collisions (match K8s
1.32 be...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/77b730ab1c9b09af172b67a336886558211b493a"><code>77b730a</code></a>
🌱 Bump the all-github-actions group with 2 updates</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/6210f847b2c1df3f28e5be34a4b1458f03896c73"><code>6210f84</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3494">#3494</a>
from erikgb/improve-kind-source-logging</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/6f89e1d9d45867133034b829fb1a3e3563b5065d"><code>6f89e1d</code></a>
Improve logging for dynamic type kind source</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.3...v0.24.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-04 15:46:35 +02:00
Philip LaineandGitHub 59e0ee8daa Refactor Dockerfile to build Go binary outside of Docker (#218) 
This change moves building the Go binary out of the Dockerfile, and also
fixes some issues in the makefile. These things will speed up build
times and avoid rebuilding when not needed. Additionally it will make
getting version data easier to use as part of the user agent.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-05-04 14:44:10 +02:00
Philip LaineandGitHub 74012deb27 Enforce import ordering and aliases (#216) 
This change ensures import ordering and aliases is standardized.
Something that is extra important when working with Kuberentes apis that
have "standard" import aliases.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-30 13:39:11 +02:00
Philip LaineandGitHub cae1ab796b Switch to using local golang ci lint and cleanup Makefile (#176) 
Managing the Golang CI Lint version is a bit cumbersome when it is hard
coded in the Makefile. This switches to using the local version. In the
end the version specified in the GH actions flow with be the authority.
 2026-04-30 10:24:16 +02:00
Philip LaineandGitHub 37d48b5ca8 Set best practice defaults for network router deployment (#214) 
This change sets some Kubernetes best practices as defaults. Such as
topology spread and pod disruption budget.

It also exposes log level and image settings in the root struct to make
it easier to override commonly configured settings.

Fixes #77 
Fixes #162

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-28 15:18:15 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		a94071224b Bump github.com/fluxcd/pkg/runtime from 0.104.0 to 0.105.0 (#206) 
Bumps [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg)
from 0.104.0 to 0.105.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/f595d79563dc72a7229676aebd83e54339c73edc"><code>f595d79</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1188">#1188</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/0177f62c5aaa1a86934a1bed93847f227e51af51"><code>0177f62</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d2cda98cb4d9bc9a86a30715c187a6e7235d624a"><code>d2cda98</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1187">#1187</a> from
fluxcd/fix-cel-observed-gen</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3619c73c8d445668e713fd9bea2295d4b9abd479"><code>3619c73</code></a>
runtime/cel: fix requiring int status.observedGeneration</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4f94dc680419f2300cddb6854859999b12789ee9"><code>4f94dc6</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1186">#1186</a> from
guineveresaenger/drop-autoscaling-v2beta2-hpa</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b5624d85787a5c19c6c4038d8dc58f2b669bddd1"><code>b5624d8</code></a>
Remove autoscaling/v2beta2 from HPA normalization</li>
<li>See full diff in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.104.0...runtime/v0.105.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-28 11:24:14 +02:00
Philip LaineandGitHub a90227ab33 Remove old e2e tests workflow (#211) 
The e2e tests that existed before are flaky and test the old resources.
This change removes them until we have implemented new e2e tests for the
new resources.

Part of #209
 2026-04-28 11:14:26 +02:00
Philip LaineandGitHub 1d2bceae15 Fix Helm repo link (#205) 
Fixes the Helm repo link to use the one from the "helms" repo.
 2026-04-24 16:47:48 +02:00
Philip LaineandGitHub dd054d50ec Update documentation with refactored resources (#204) 
This updates the documentation and examples to use the new resources. It
also adds automatic documentation creation for the api reference.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-24 16:22:04 +02:00
Philip LaineandGitHub fe715ae40c Set default API secret reference and remove plain text option (#203) 
The majority of users are using the operator with an API key, so the
default should be to look for the secret. This change also removes the
option to set the api key in plain text as that is just bad practice.
Also bumps the chart version to prepare for a minor release.
 2026-04-24 16:14:34 +02:00
Philip LaineandGitHub 91036022c0 Add path component to finalizer (#202) 
The Kubernetes client warns about not having a path component in the
finalizer. This change adds a unqiue path component for each reconciler
kind.
 2026-04-23 19:18:06 +02:00
Philip LaineandGitHub 9838f0dccc Add sidecar profile (#192) 
This change adds a new SidecarProfile resource which allows configuring
client sidecar injection into pods. It replaces the older annotation
based solution. This removes any pod specific configuration from the
setup key and puts it all in this side car configuration.

Fixes #188

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 19:17:53 +02:00
Philip LaineandGitHub 876a0e1eb3 Update Gateway API to use new resources (#201) 
We dont want to promote the use of the "old" resources with NB prefix so
the Gateway API integration should only support the new ones.

---------

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 16:11:15 +02:00
Philip LaineandGitHub 99ef70603f Allow references to groups by name (#195) 
Group names are unique so we can safely use the name as a reference
method to groups. This makes assigning resources created in the cluster
to groups that already exist a lot easier.
 2026-04-23 13:12:09 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		1a593dafc2 Bump the github-actions group with 3 updates (#200) 
Bumps the github-actions group with 3 updates:
[actions/setup-go](https://github.com/actions/setup-go),
[docker/login-action](https://github.com/docker/login-action) and
[docker/build-push-action](https://github.com/docker/build-push-action).

Updates `actions/setup-go` from 6.3.0 to 6.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Add go-download-base-url input for custom Go distributions by <a
href="https://github.com/gdams"><code>@​gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/721">actions/setup-go#721</a></li>
</ul>
<h3>Dependency update</h3>
<ul>
<li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/727">actions/setup-go#727</a></li>
</ul>
<h3>Documentation update</h3>
<ul>
<li>Rearrange README.md, add advanced-usage.md by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/724">actions/setup-go#724</a></li>
<li>Fix Microsoft build of Go link by <a
href="https://github.com/gdams"><code>@​gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/734">actions/setup-go#734</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/gdams"><code>@​gdams</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/721">actions/setup-go#721</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v6.4.0">https://github.com/actions/setup-go/compare/v6...v6.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-go/commit/4a3601121dd01d1626a1e23e37211e3254c1c06c"><code>4a36011</code></a>
docs: fix Microsoft build of Go link (<a
href="https://redirect.github.com/actions/setup-go/issues/734">#734</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/8f19afcc704763637be6b1718da0af52ca05785d"><code>8f19afc</code></a>
feat: add go-download-base-url input for custom Go distributions (<a
href="https://redirect.github.com/actions/setup-go/issues/721">#721</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/27fdb267c15a8835f1ead03dfa07f89be2bb741a"><code>27fdb26</code></a>
Bump minimatch from 3.1.2 to 3.1.5 (<a
href="https://redirect.github.com/actions/setup-go/issues/727">#727</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/def8c394e3ad351a79bc93815e4a585520fe993b"><code>def8c39</code></a>
Rearrange README.md, add advanced-usage.md (<a
href="https://redirect.github.com/actions/setup-go/issues/724">#724</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/login-action` from 4.0.0 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<ul>
<li>Fix scoped Docker Hub cleanup path when registry is omitted by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/945">docker/login-action#945</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1020.0 in <a
href="https://redirect.github.com/docker/login-action/pull/930">docker/login-action#930</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.77.0 to 0.86.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/932">docker/login-action#932</a>
<a
href="https://redirect.github.com/docker/login-action/pull/936">docker/login-action#936</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
href="https://redirect.github.com/docker/login-action/pull/952">docker/login-action#952</a></li>
<li>Bump fast-xml-parser from 5.3.4 to 5.3.6 in <a
href="https://redirect.github.com/docker/login-action/pull/942">docker/login-action#942</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/login-action/pull/944">docker/login-action#944</a></li>
<li>Bump glob from 10.3.12 to 10.5.0 in <a
href="https://redirect.github.com/docker/login-action/pull/940">docker/login-action#940</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/login-action/pull/949">docker/login-action#949</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 8.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/937">docker/login-action#937</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/login-action/pull/958">docker/login-action#958</a></li>
<li>Bump minimatch from 3.1.2 to 3.1.5 in <a
href="https://redirect.github.com/docker/login-action/pull/941">docker/login-action#941</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/login-action/pull/948">docker/login-action#948</a></li>
<li>Bump undici from 6.23.0 to 6.24.1 in <a
href="https://redirect.github.com/docker/login-action/pull/938">docker/login-action#938</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.0.0...v4.1.0">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/4907a6ddec9925e35a0a9e82d7399ccc52663121"><code>4907a6d</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/930">#930</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="https://github.com/docker/login-action/commit/1e233e691a8881d7f35ca7c2d5dfaaed80b39636"><code>1e233e6</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/6c24ead68057f18c30c808a431f0b85dc25663cb"><code>6c24ead</code></a>
build(deps): bump the aws-sdk-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/ee034d70944e3546349cd24295914f139342f1e6"><code>ee034d7</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/958">#958</a>
from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/1527209db9734bd2352a2dc1a63d79c9aa5358bb"><code>1527209</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/937">#937</a>
from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li>
<li><a
href="https://github.com/docker/login-action/commit/d39362aba4d72f8d9d93e0962119840690133e1b"><code>d39362a</code></a>
build(deps): bump lodash from 4.17.23 to 4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/a6f092b568105cbb6d9deb7e55e0a4c5c1025fce"><code>a6f092b</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/60953f0bed2120ec69659d271fe18d34bc069779"><code>60953f0</code></a>
build(deps): bump the proxy-agent-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/62c688590fb4ab6c6e89a217ced0a7b2ddcf1340"><code>62c6885</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/936">#936</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/login-action/commit/102c0e672992d2e992c89b6f4808d65a353b5a1a"><code>102c0e6</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/build-push-action` from 7.0.0 to 7.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/build-push-action/releases">docker/build-push-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<ul>
<li>Git context <a
href="https://docs.docker.com/build/concepts/context/#url-queries">query
format</a> support by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1505">docker/build-push-action#1505</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.79.0 to 0.87.0 by
<a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1505">docker/build-push-action#1505</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1500">docker/build-push-action#1500</a></li>
<li>Bump fast-xml-parser from 5.4.2 to 5.5.7 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1489">docker/build-push-action#1489</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1491">docker/build-push-action#1491</a></li>
<li>Bump glob from 10.3.12 to 10.5.0 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1490">docker/build-push-action#1490</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1497">docker/build-push-action#1497</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1510">docker/build-push-action#1510</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1496">docker/build-push-action#1496</a></li>
<li>Bump undici from 6.23.0 to 6.24.1 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1486">docker/build-push-action#1486</a></li>
<li>Bump vite from 7.3.1 to 7.3.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1509">docker/build-push-action#1509</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v7.0.0...v7.1.0">https://github.com/docker/build-push-action/compare/v7.0.0...v7.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/build-push-action/commit/bcafcacb16a39f128d818304e6c9c0c18556b85f"><code>bcafcac</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1509">#1509</a>
from docker/dependabot/npm_and_yarn/vite-7.3.2</li>
<li><a
href="https://github.com/docker/build-push-action/commit/18e62f1158d9c45a4a84a58a6828d21f8ed3644b"><code>18e62f1</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1510">#1510</a>
from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
<li><a
href="https://github.com/docker/build-push-action/commit/46580d2c9d43b0888270cb6fa90956e483de56fc"><code>46580d2</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/3f80b252ca2331f6ec3e890f4346b5506ee1dc81"><code>3f80b25</code></a>
chore(deps): Bump lodash from 4.17.23 to 4.18.1</li>
<li><a
href="https://github.com/docker/build-push-action/commit/efeec9557c40a646afe433e39a1e94ca689103f0"><code>efeec95</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1505">#1505</a>
from crazy-max/refactor-git-context</li>
<li><a
href="https://github.com/docker/build-push-action/commit/ddf04b08eb12882258ed936fea4a2806754ff349"><code>ddf04b0</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1511">#1511</a>
from docker/dependabot/github_actions/crazy-max-dot-...</li>
<li><a
href="https://github.com/docker/build-push-action/commit/db08d97a08e4a0d15f85d1c4e64dfd5f88cbe1a9"><code>db08d97</code></a>
chore(deps): Bump the crazy-max-dot-github group with 2 updates</li>
<li><a
href="https://github.com/docker/build-push-action/commit/ef1fb9688fc3626d0fd5e462f502cbbdc6456feb"><code>ef1fb96</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1508">#1508</a>
from docker/dependabot/github_actions/docker/login-a...</li>
<li><a
href="https://github.com/docker/build-push-action/commit/2d8f2a1a378a5c302dcd7b2b4326cefa24180bb1"><code>2d8f2a1</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/919ac7bd7d1aa8cb13fe4de76545abea8d8b5ed2"><code>919ac7b</code></a>
fix test since secrets are not written to temp path anymore</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...bcafcacb16a39f128d818304e6c9c0c18556b85f">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-23 12:05:05 +02:00
Philip LaineandGitHub d082a45b19 Update dependabot to run weekly (#197) 
This change updates the dependabot interval to run weekly. It also
groups all Github Actions update into a single PR. This will make
dependency updates a bit easier to manage without spamming too many PRs.
 2026-04-23 12:00:10 +02:00
Philip LaineandGitHub 1daeb670ba Make network resource names unique (#196) 
Network resource names are unique per Netbird account. This change moves
the existing name to the description and uses the UID for the name of
the resource instead.
 2026-04-23 11:59:07 +02:00
Philip LaineandGitHub 7bc9c87de7 Remove the creation and use of the Kubectl image to apply configuration (#198) 
Using kubectl to manage configuration is not a sustainable solution and
not something that we want to promote users to do. This removes the
creation of the image and use of the image in the Helm charts.
 2026-04-23 11:58:09 +02:00
Philip LaineandGitHub 20a3ddd4ed Add validation of setup key duration (#199) 
This adds more validation to the setup key duration to make sure the
unit and format is correct.
 2026-04-23 11:47:17 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		38f2a8cb99 Bump sigs.k8s.io/structured-merge-diff/v6 from 6.3.2 to 6.4.0 (#185) 
Bumps
[sigs.k8s.io/structured-merge-diff/v6](https://github.com/kubernetes-sigs/structured-merge-diff)
from 6.3.2 to 6.4.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/d56620e25cf07b2e4b592fd9a36c1763fd97066c"><code>d56620e</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/323">#323</a>
from aramase/aramase/f/fix_generators_inline</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/6e51105e56a2966a75df9a1a91b6642ac27c8643"><code>6e51105</code></a>
fix(value): detect inline fields structurally instead of matching
&quot;,inline&quot; tag</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/8fd4c42aee2614581d2db098bd4974e8cb913601"><code>8fd4c42</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/312">#312</a>
from alvaroaleman/unexported</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/eedc5365731c428d67da403defc8fb52b8d13a10"><code>eedc536</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/320">#320</a>
from inteon/use_slices_funcs</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/ee543853b6cf69af62f089b0219771ea44af3183"><code>ee54385</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/322">#322</a>
from inteon/typed_allocator</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/f0a2e6ec225fd5d50a305cdd984f676ab60410cb"><code>f0a2e6e</code></a>
add benchmark for FromValue function</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/7ba0b4efa39e596a5dd4f3d21e37de4c54289f6b"><code>7ba0b4e</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/structured-merge-diff/issues/314">#314</a>
from inteon/tests_add_state</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/138fc0a13636adba330a92a67970c7a3243e7561"><code>138fc0a</code></a>
fully clear freed objects</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/f7fc3d8623e37f800e447e8668f9b4e2199a22b9"><code>f7fc3d8</code></a>
make freelist typed</li>
<li><a
href="https://github.com/kubernetes-sigs/structured-merge-diff/commit/910648e439842165cfd9025e9f6993f9759100ba"><code>910648e</code></a>
Code cleanup: use modern slices.BinarySearchFunc and slices.Insert where
poss...</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/structured-merge-diff/compare/v6.3.2...v6.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigs.k8s.io/structured-merge-diff/v6&package-manager=go_modules&previous-version=6.3.2&new-version=6.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-23 10:20:52 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		327c8dd5a4 Bump github.com/fluxcd/pkg/runtime from 0.103.0 to 0.104.0 (#190) 
Bumps [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg)
from 0.103.0 to 0.104.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/1bfcca47168cb6d2d7dfdc5b35d8b379a773976d"><code>1bfcca4</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1184">#1184</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/29717cf12f2287d4af942bfa28b15425a28f15b7"><code>29717cf</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/56b4f164d7c70a4e419f508db29727e468648204"><code>56b4f16</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1183">#1183</a> from
fluxcd/cel-api-group</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6b6497f0bf6c7d7252f35c66e2de8ad6d5b478b1"><code>6b6497f</code></a>
runtime/cel: allow empty kind in status reader</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/8f83548109570226fefc580b954b6d83e948b1e8"><code>8f83548</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1180">#1180</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9b58a01df04b801a0569d4ca0e5d0dcb9f534b35"><code>9b58a01</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/31385e2a96dc8639124e7e61418a38a49073c691"><code>31385e2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1179">#1179</a> from
fluxcd/go-git-5.18</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d527b349de65e94327158a12ba054db60a3256d0"><code>d527b34</code></a>
Upgrade go-git to v5.18</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/edb5072051e73f78ee5e26d50bc45972e1009934"><code>edb5072</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1178">#1178</a> from
fluxcd/cleanup-aws-eni</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d7014c457a86606ca629dbf1a7a06113b322a028"><code>d7014c4</code></a>
tests/intergration: cleanup AWS ENIs</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.103.0...runtime/v0.104.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-23 10:19:56 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Philip Laine
 		b77bcd74ab Bump github.com/netbirdio/netbird from 0.66.4 to 0.69.0 (#187) 
Bumps
[github.com/netbirdio/netbird](https://github.com/netbirdio/netbird)
from 0.66.4 to 0.69.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's
releases</a>.</em></p>
<blockquote>
<h2>v0.69.0</h2>
<h2>Release Notes for v0.69.0</h2>
<h3>What's New</h3>
<p><strong>Reverse Proxy IP Reputation Integration</strong>
Now you can use CrowdSec to block malicious traffic based on IP
reputation on your exposed service in the reverse proxy.</p>
<p>This feature requires self-hosted installations to add another
container to their deployment. See instructions in the <a
href="https://docs.netbird.io/selfhosted/migration/enable-reverse-proxy#step-7-optional-enable-crowd-sec-ip-reputation">reverse
proxy migration documentation</a>.</p>
<blockquote>
<p>For Cloud users, support is coming soon.</p>
</blockquote>
<p>Learn more about <a
href="https://docs.netbird.io/manage/reverse-proxy">here</a>.</p>
<p><strong>macOS p2p connectivity improvements</strong>
We've improved macOS p2p connectivity with a better routing exclusion
mechanism to avoid loops. Now the client doesn't add /32 routes per
remote candidate addresses avoiding limitations on accessing remote
peer's local addresses via tunnel connections. Learn more about <a
href="https://redirect.github.com/netbirdio/netbird/pull/5918">this
change</a>.</p>
<blockquote>
<p>To use the old behavior run:</p>
<p><code>sudo netbird service reconfigure --service-env
&quot;NB_USE_LEGACY_ROUTING=true&quot;</code></p>
</blockquote>
<h4>Client Improvements</h4>
<ul>
<li>Added <strong>PCP support</strong>. This change adds support for the
PCP protocol to the client to improve the rate of P2P connectivity.
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5219">netbirdio/netbird#5219</a></li>
<li>Added <strong>--disable-networks flag</strong> to block network
selection for users.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5896">netbirdio/netbird#5896</a></li>
<li>Fixed <strong>clearing service env vars with --service-env
&quot;&quot;</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5893">netbirdio/netbird#5893</a></li>
<li>Guarded against <strong>container DNAT bypass of ACL rules in
iptables</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5697">netbirdio/netbird#5697</a></li>
<li>Populated <strong>NetworkAddresses on iOS for posture
checks</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5900">netbirdio/netbird#5900</a></li>
<li>Reconnected <strong>conntrack netlink listener on error</strong>.<br
/>
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5885">netbirdio/netbird#5885</a></li>
<li>Replaced <strong>exclusion routes with scoped default + IP_BOUND_IF
on macOS</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5918">netbirdio/netbird#5918</a></li>
<li>Fixed <strong>incorrect SSH client config combining Host and Match
directives</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5903">netbirdio/netbird#5903</a></li>
<li>Fixed <strong>WGIface.Close deadlock when DNS filter hook re-enters
GetDevice</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5916">netbirdio/netbird#5916</a></li>
</ul>
<h4>Management Improvements</h4>
<ul>
<li>Enforced <strong>peer or peer groups requirement for network
routers</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5894">netbirdio/netbird#5894</a></li>
<li>Reused <strong>single cache store across all management server
consumers</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5889">netbirdio/netbird#5889</a></li>
<li>Fixed <strong>lint error on Google Workspace
integration</strong>.<br />
<a
href="https://redirect.github.com/netbirdio/netbird/pull/5907">netbirdio/netbird#5907</a></li>
</ul>
<h4>Proxy Enhancements</h4>
<ul>
<li>Added <strong>CrowdSec IP reputation integration for reverse
proxy</strong>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/netbirdio/netbird/commit/3098f48b25e2a613d8f70466243d992c498e0fd2"><code>3098f48</code></a>
[client] fix ios network addresses mac filter (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5906">#5906</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/7f023ce8014084385e677e67c541677336e25431"><code>7f023ce</code></a>
[client] Android debug bundle support (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5888">#5888</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/e3611265159bd372f77ca404d32c86127e036525"><code>e361126</code></a>
[client] Fix WGIface.Close deadlock when DNS filter hook re-enters
GetDevice ...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/95213f715714177b7c9672b3f264f84c9a31cf04"><code>95213f7</code></a>
[client] Use Match host+exec instead of Host+Match in SSH client config
(<a
href="https://redirect.github.com/netbirdio/netbird/issues/5903">#5903</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/2e0e3a3601d90a5d7a6b39dc16ebde2522fdf580"><code>2e0e3a3</code></a>
[client] Replace exclusion routes with scoped default + IP_BOUND_IF on
macOS ...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/8ae8f2098fb4bb7a9177b3f2d8d908a413b8fc49"><code>8ae8f20</code></a>
[management] chores: fix lint error on google workspace (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5907">#5907</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/a39787d6796ee26e1f6ad9c67ea33a9da7bf8d66"><code>a39787d</code></a>
[infrastructure] Add CrowdSec LAPI container to self-hosted setup script
(<a
href="https://redirect.github.com/netbirdio/netbird/issues/5880">#5880</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/53b04e512af0d94f619e870467115c43d200830b"><code>53b04e5</code></a>
[management] Reuse a single cache store across all management server
consumer...</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/633dde8d1f5985afc52071462c42857cb844b9ac"><code>633dde8</code></a>
[client] Reconnect conntrack netlink listener on error (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5885">#5885</a>)</li>
<li><a
href="https://github.com/netbirdio/netbird/commit/7e4542adde54ebe71a3a47f5228c5915c9c1052a"><code>7e4542a</code></a>
fix(client): populate NetworkAddresses on iOS for posture checks (<a
href="https://redirect.github.com/netbirdio/netbird/issues/5900">#5900</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netbirdio/netbird/compare/v0.66.4...v0.69.0">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 09:50:41 +02:00
Philip LaineandGitHub 6768a76c9c Add network router and resource (#189) 
This change adds two new resources, NetworkRouter and NetworkResource,
which enable clusters to expose Kubernetes services to Netbird.

The NetworkRouter is responsible for creating the network, group, setup
key and routing peer all of which are unique to the isntance. Along with
the deployment of the client in the cluster.

The NetworkResource exposes a service by linking to the specific router
it wants to expose to. This makes coupling between the resource and
network easy to understand.

Routers also set a DNS zone which is used to give names to resources
based on the name and namespace of the service being exposed.

Part of #172

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-23 08:55:49 +02:00
Philip LaineandGitHub af11e31b28 Add ready conditon and cleanup finalizer and status patching (#186) 
This change adds a ready condition. It also sets a standard for status
fields and documentation. It makes use of helper functions from FluxCD
to better manage patching of finalizers and status.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-21 15:42:11 +02:00
Philip LaineandGitHub 1bcd58a7cd Implement mock for Netbird API and client (#184) 
This makes testing of the operator a lot simpler by enabling a quick way
to implement the crud endpoints for all the resources used.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-15 10:25:45 +02:00
Philip LaineandGitHub 9c4ca73712 Implement group resource (#181) 
This change implements a new group resource. 

It also sets the standard for a resource reference will be done through
out the controller. A resource reference can either be done by ID or as
a local named reference to the actual resource. This allows end users to
chose if they want to manage things completely in the cluster or not.

Part of #172

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-15 10:16:10 +02:00
Philip LaineandGitHub 26479a19c0 Implement new setup key resource (#178) 
This change implements a new resource called SetupKey that manages the
lifecycle of setup keys and stores them in secrets.

A major change here is that we are also switching to using SSA for
resource management.

Part of #172

Signed-off-by: Philip Laine <philip.laine@gmail.com>
 2026-04-13 12:20:35 +02:00
Philip LaineandGitHub 3efacfd4c8 Update controller-gen version and switch to using go tool (#170) 
This makes updating of the versions a lot easier. Also we need to update
the controller gen version to support apply configuration.
 2026-04-02 11:05:16 +02:00
Philip LaineandGitHub f1c382e6f2 Revert "Cleanup routing peer deployment creation" (#159) 
Reverts netbirdio/kubernetes-operator#155
 2026-03-23 17:56:43 +01:00