Skip to content

Releases: brancz/kube-rbac-proxy

0.6.0 / 2020-06-11

11 Jun 12:16
459c9d7
Compare
Choose a tag to compare
  • [CHANGE] Use gcr.io/distroless/static as base image instead of alpine. #67
  • [ENHANCEMENT] Add multi-arch container images for amd64, arm, arm64, ppc64le and s390x. #67

0.5.0 / 2020-02-17

17 Feb 13:24
a6da502
Compare
Choose a tag to compare
  • [CHANGE] Move from glog to klog for logging. #57
  • [FEATURE] Support token audience reviews. #56
  • [FEATURE] Support custom upstream CAs. #34
  • [ENHANCEMENT] Reload TLS certificates at runtime. #47
  • [ENHANCEMENT] Add host in self-signed certs. #43

0.4.1 / 2019-01-23

28 Jan 10:30
v0.4.1
4109f99
Compare
Choose a tag to compare
  • [ENHANCEMENT] Use golang.org/x/net http2 server. #29
  • [ENHANCEMENT] Update Kubernetes to 1.13.2 #28
  • [ENHANCEMENT] Make multi-arch builds possible. #21
  • [BUGFIX] Log when server isn't able to start. #27
  • [BUGFIX] Set user specified TLS configuration when explicit TLS certificates are provided.

0.4.0 / 2018-10-24

24 Oct 12:08
v0.4.0
7d54c31
Compare
Choose a tag to compare
  • [CHANGE] The config file flag has been renamed to --config-file.
  • [CHANGE] There is a breaking change in the configuration. All configuration that was previously valid, is now nested in .authorization.resourceAttributes.
  • [FEATURE] Add OIDC token authentication provider (note: this is not a client code flow for client authentication).
  • [FEATURE] Add ability to rewrite SubjectAccessReviews based on request query parameters.

0.3.1 / 2018-06-20

24 Oct 12:08
v0.3.1
c617c88
Compare
Choose a tag to compare

This release is unmodified code from v0.3.0, but built with latest golang.

  • [BUGFIX] Fix x509: cannot parse dnsName in intermediate certificates.

0.3.0 / 2018-03-27

27 Mar 20:26
v0.3.0
21c0c3c
Compare
Choose a tag to compare
  • [FEATURE] Add HTTP/2 support.
  • [ENHANCEMENT] Add ability to choose TLS cipher suites.
  • [ENHANCEMENT] Add ability to choose minimum TLS version and default to TLS 1.2.

0.2.0 - 2018-01-03

03 Jan 16:27
v0.2.0
72e9999
Compare
Choose a tag to compare
  • [CHANGE] --listen-address flag renamed to --insecure-listen-address.
  • [FEATURE] Add TLS support.

0.1.0 / 2017-12-19

19 Dec 16:12
v0.1.0
acd2528
Compare
Choose a tag to compare

Initial release of the kube-rbac-proxy. Features of this release include a plain HTTP proxy, which performs a Kubernetes TokenReview on a provided token of incoming requests as well as a configurable SubjectAccessReview . See the README.md for more detail.