Skip to content

v1.0.0-rc.7

Pre-release
Pre-release
Compare
Choose a tag to compare
@github-actions github-actions released this 25 Aug 22:01
· 618 commits to main since this release
v1.0.0-rc.7
3e5256a
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

✨ New Features

  • Introducing OPA engine integration to support Rego Policy
    • Embeds OPA engine in Ratify so that service can make verifications using the OPA engine for Rego Policies.
    • Adds support for multiple verifiers against the same artifact.
    • Users can still provide a configuration Policy which is the default option.
    • Introduces new Policy controller and CRD that allows switching between configuration policy and Rego Policy at runtime
    • More information here
  • Introducing support to enable High Availability (HA) for Ratify
    • Unifies all existing in-memory caches through a new cache interface that allows registering and specifying new cache providers
    • Implements Ristretto as the default cache provider
    • Implements support for Dapr cache provider
    • More info here
  • Introducing integration with Helmfile Tool
    • Simplifies helm install for upgrade scenarios to HA support
    • Simplifies helm install for quick start experience
  • Introducing Terraform configs for Azure
    • Adds Terraform configs to simplify the deployment of Azure Resources for Ratify
  • Enable optional image mutation in Helm chart
    • Allows image mutation to be optional in helm chart since there might be scenarios where OPA Gatekeeper constraints are based on image tags.
  • Introduce graceful shutdown for http server
    • Adds support for ‘Shutdown’ command to be invoked on SIGTERM signal or interrupt OS command
    • Adds channel to wait on shutdown process to complete (6 second context timeout)
  • Introducing improved error handling
    • Refactor most errors to a custom error struct
    • Introduce error codes for faster searching
    • Adds stacks to improve debuggability
    • Adds a configurable internal logger utility that initializes the logger for Ratify and configures the context with a trace-id from requests
    • More info here
  • Introducing new Ratify arm64 & arm/v7 images
  • Introducing new Ratify Logo
    • We are improving the project branding. Check out the new Ratify Logo here

💥 🚨 BREAKING CHANGES 🚨 💥

  • Notation signature verifier name now registered using name notation instead of notaryv2
    • More information here
  • logLevel helm chart value now found at logger.level
    • More information here
  • TLS certs are NOT auto generated by Ratify chart. It's recommended to set featureFlags.RATIFY_CERT_ROTATION to true.
  • PKCS12 certs with Azure Key Vault setup is NOT supported

📄 Documentation

🧪 Tests

CLI

  • Verifier Scenarios
    • Notation
    • Cosign
      • Keyed
      • Keyless
    • SBOM
    • License Checker
    • JSON Schema Validation
    • All verifier types in one
  • Dynamic OCI Plugins
    • Verifier Plugin
    • Store Plugin

Kubernetes

  • Verifier Scenarios
    • Notation
    • Cosign
    • SBOM
    • License Checker
    • JSON Schema Validation
    • All verifier types in one
  • ORAS Store Authentication Providers
    • Docker
    • Kubernetes Secrets
    • Azure Workload Identity
    • Azure Managed Identity
  • Certificate Store Providers
    • Inline Certificate
    • Azure Key Vault Certificate
  • Mutation Provider
  • Dynamic OCI Plugins
    • Verifier Plugin
  • CertifacteProvider CRD Status
  • TLS Certificate
    • TLS Certificate Watcher
    • TLS Certificate Rotation
  • High Availability Tests
    • 2 Replicas, Redis + Dapr, Notation

🐛 🩹 Bug Fixes

🎉 New Contributors

📝 Changelog

Full Changelog: v1.0.0-rc.5...v1.0.0-rc.7

Contributors

binbin-li, duffney, and 9 other contributors
Assets 8
Loading