Skip to content

Releases: gocardless/theatre

v3.1.1

13 Jul 12:17
944a9ed
Compare
Choose a tag to compare

Changelog

944a9ed Release theatre v3.1.1
c1a4e9e Fix: Console authorisation rule list length mismatch

v3.1.0

18 Mar 17:28
c68262d
Compare
Choose a tag to compare

3ffe458 Add debug logging to theatre-secrets
7cdd17b Allow config of theatre-secrets debug and timeout

v3.0.2

17 Mar 17:05
afe2135
Compare
Choose a tag to compare

865a93c Bump codebase to v3

v3.0.1

17 Mar 13:20
ab5d955
Compare
Choose a tag to compare

4f7b043 Merge pull request #232 from gocardless/dyson-improve-errored-console-output
a935e15 Dump pod logs on errored console creation
ff361d5 Fix detaching from interactive consoles
92ed20f Preserve metadata in console template CRD

v3.0.0 Remove envconsul dependency from theatre-envconsul

01 Mar 11:11
7e2d3ea
Compare
Choose a tag to compare

Previously we've shelled-out to the envconsul binary in order to
retrieve our secret material from Vault. Through this we've discovered
several shortcomings:

  • Failure to provision 'secret files' which have large/non-ASCII bodies.
  • Failure to provision environment variables which are referencing the
    same Vault key path.
  • Hanging when a process is wrapped with envconsul but there's no
    secret material to fetch.
  • Workarounds required for shellwords splitting.

By removing envconsul and implementing the fetching from Vault
ourselves we simplify the code significantly and end up with something
that's more performant and easy to reason about, as well as fixing the
above issues.

We also change the namespace annotation to enable the webhook from
envconsul-secrets-injector to theatre-secrets-injector. We retain
support for the old pod annotation envconsul-injector.vault.crd.gocardless.com
to allow for a phased migration.

e1820c8 theatre-envconsul: add support for writing files
8e45f2c theatre-envconsul: Fix double error logging
4f9b21d theatre-envconsul: Log envconsul output upon failure
32c81b5 theatre-envconsul: acceptance test for vault-file support
daf489b Remove envconsul dependency from theatre-envconsul
08844bf Update tests for theatre-secrets/envconsul
d272c98 %s/envconsul/secrets/g
b8159db theatre-secrets: support old theatre-envconsul annotation

v2.4.0

27 Nov 09:33
44dc112
Compare
Choose a tag to compare

f32dcdd Handle attaching to stopped pod gracefully
0a7f53c Fix splitting env vars in theatre-envconsul env
579059a Update theatre-envconsul README
c8c3d43 Fix info log in theatre-envconsul
64ce621 Remove the lease option from theatre-envconsul
25bf152 Update ctx todos in vault manager acceptance test
709c411 Delete theatre-envconsul acceptance test
0f0df74 Look up path of the binary to execute before executing
1750791 Update acceptance test code
abd7883 Add lease option to theatre-envconsul exec
6329d99 Add env command to theatre-envconsul

v2.3.2

07 Oct 13:17
dadee4a
Compare
Choose a tag to compare

c39a9fd Correctly handle errors in console runner
bf64751 GetAttachablePod takes context.Context

v2.3.1

07 Oct 11:54
bca04bd
Compare
Choose a tag to compare

b7054de Console runner handles *metav1.Status

v2.3.0

28 Sep 17:35
ca7e1c9
Compare
Choose a tag to compare

b807065 pkg/workloads/console/runner.MultipleConsoleTemplateError

v2.2.1

24 Sep 15:45
e90cbb3
Compare
Choose a tag to compare

Changelog

e90cbb3 Merge pull request #216 from gocardless/lawrence-update-dependencies
dc8869e Update Kubernetes v0.18.6 -> v0.18.9