v3.11.0

This stable release has no other changes from v3.11.0-rc.1.

Notable changes

• External data is promoted to beta ✨
  • 📢 It is now required to use TLS/mTLS with external data providers
• Gator CLI is promoted to beta 🐊
• Gator CLI now supports trace, AdmissionReview and specifying an OCI image 🎉

Features

• add resource labels to audit logs (#2354) #2354 (davis-haba)
• expose AdmissionReview for gator verify (#2348) #2348 (alex)
• add tracing to gator test, verify (#2364) #2364 (alex)
• add --image flag in gator test|expand (#2398) #2398 (davis-haba)

Bug Fixes

• helm: allow installation of post-install and post-upgrade jobs (#2351) #2351 (Mathieu Parent)
• exclude gs namespace in matchExpressions (#2385) #2385 (Rita Zhang)
• log constraint violations on log denies (#2428) #2428 (alex)
• make gator output relative paths (#2443) #2443 (alex)
• make audit fault tolerant (#2447) #2447 (Rita Zhang)
• docs: adjust link to the mutation docs (#2445) #2445 (Tolleiv Nietsch)
• helm: do not mix ignore and podSecurity labels (#2451) #2451 (Mathieu Parent)

Documentation

• update required version for expansion and rel link for versione… (#2350) #2350 (Rita Zhang)
• search docs (#2362) #2362 (Sertaç Özercan)
• add external data provider list (#2369) #2369 (Sertaç Özercan)
• add expansion and warn to demo (#2368) #2368 (Rita Zhang)
• clairfy g8r requires user for tracing (#2358) #2358 (alex)
• adding doc to enable apiserver authentication in versioned docs (#2378) #2378 (Jaydipkumar Arvindbhai Gabani)
• rename policy library on website (#2414) #2414 (Rita Zhang)
• add library and new features to website (#2417) #2417 (Sertaç Özercan)
• gator: add addmission review doc (#2388) #2388 (alex)

Tests

• vendor in testify (again) (#2374) #2374 (alex)

Continuous Integration

• add k8s 1.26 (#2446) #2446 (Sertaç Özercan)
• bump bats to v1.8.2 🦇 (#2441) #2441 (Sertaç Özercan)
• fix tagged release test for release-3.11 (#2467) #2467 (Sertaç Özercan)
• bump release timeout to 45m (release-3.11) (#2471) #2471 (Sertaç Özercan)

Chores

• bump peaceiris/actions-gh-pages from 3.8.0 to 3.9.0 (#2356) #2356 (dependabot[bot])
• bump github/codeql-action from 2.1.28 to 2.1.29 (#2361) #2361 (dependabot[bot])
• bump @docusaurus/core from 2.1.0 to 2.2.0 in /website (#2371) #2371 (dependabot[bot])
• bump @docusaurus/preset-classic from 2.1.0 to 2.2.0 in /website (#2370) #2370 (dependabot[bot])
• Authenticating api server against webhook (#2359) #2359 (Jaydipkumar Arvindbhai Gabani)
• bump github/codeql-action from 2.1.29 to 2.1.30 (#2383) #2383 (dependabot[bot])
• bump github.com/prometheus/client_golang from 1.13.0 to 1.13.1 (#2384) #2384 (dependabot[bot])
• adding a tag to indicate dry run requests in valication request count metric (#2379) #2379 (Jaydipkumar Arvindbhai Gabani)
• bump loader-utils from 2.0.2 to 2.0.3 in /website (#2392) #2392 (dependabot[bot])
• bump github/codeql-action from 2.1.30 to 2.1.31 (#2391) #2391 (dependabot[bot])
• bump k8s.io/client-go from 0.24.7 to 0.24.8 (#2405) #2405 (dependabot[bot])
• bump github/codeql-action from 2.1.31 to 2.1.32 (#2409) #2409 (dependabot[bot])
• bump loader-utils from 2.0.3 to 2.0.4 in /website (#2411) #2411 (dependabot[bot])
• bump stefanprodan/helm-gh-pages from 1.6.0 to 1.7.0 (#2412) #2412 (dependabot[bot])
• bump github/codeql-action from 2.1.32 to 2.1.33 (#2415) #2415 (dependabot[bot])
• Verify CN name as part of client cert check while authenticating api server (#2396) #2396 (Jaydipkumar Arvindbhai Gabani)
• helmify: Add icon to Chart.yaml (#2419) #2419 (Manuel Rüger)
• bump github/codeql-action from 2.1.33 to 2.1.35 (#2424) #2424 (dependabot[bot])
• upgrade CF to 1c9ce4f and fix gator tests (#2436) #2436 (alex)
• promote gator to beta for v3.11.0 (#2437) #2437 (alex)
• bump github/codeql-action from 2.1.35 to 2.1.36 (#2444) #2444 (dependabot[bot])
• adds Google Analytics (#2439) #2439 (Nilekh Chaudhari)
• bump k8s.io/client-go from 0.24.8 to 0.24.9 (#2449) #2449 (dependabot[bot])
• bump actions/checkout from 3.1.0 to 3.2.0 (#2456) #2456 (dependabot[bot])
• bump externaldata v1beta1 api (#2438) #2438 (Sertaç Özercan)
• Prepare v3.11.0-rc.1 release (#2460) #2460 (github-actions[bot])
• Prepare v3.11.0 release (#2488) #2488 (github-actions[bot])

Reverts

• Revert "feat: Add extraEnv support to deployments (#2330)" (#2355) #2355 (Sertaç Özercan)
• Revert docusaurus 2.2.0 (#2372) #2372 (Sertaç Özercan)

New Contributors

• @JaydipGabani made their first contribution in #2336
• @madmatt112 made their first contribution in #2330
• @tolleiv made their first contribution in #2445

Full Changelog: v3.10.0...v3.11.0