Skip to content

CHANGELOG.md

Latest commit

 

History

History
246 lines (165 loc) · 7.2 KB

CHANGELOG.md

File metadata and controls

246 lines (165 loc) · 7.2 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

0.5.0 - 2026-10-22

Changed

  • Breaking: this release changes the LocalStack CRD. Re-apply controller.yaml when upgrading, updating the controller image alone is not enough. spec.podSchedulingConfig now matches the format LocalStack reads. Entries under services only choose profiles (profile, arm64, amd64), settings such as tolerations or resources must live under profiles. topologySpreadConstraint is renamed to topologySpreadConstraints and takes a list. Resources using the old fields were already rejected by LocalStack at startup, after upgrading they are accepted, but the old fields are silently dropped, so move those settings into a profile. If the new controller runs against the old CRD, Kubernetes prunes services.<name>.profile as an unknown field and the per-service settings never reach LocalStack.

Fixed

  • Security updates to fix
    • CVE-2026-111943 (Go standard library, updated to 1.26.10)
    • DSA-6572-1 (ca-certificates)

0.4.18 - 2026-10-13

Fixed

  • Security updates to fix
    • CVE-2026-56857
    • CVE-2026-56866
    • CVE-2026-78659
    • CVE-2026-78660
    • CVE-2026-78663
    • CVE-2026-78667
    • CVE-2026-78669
    • CVE-2026-94439
    • CVE-2026-94440
    • CVE-2026-94448
    • CVE-2026-97030
    • CVE-2026-97031
    • CVE-2026-97032
  • Updated dependencies
    • golang.org/x/net v0.60.0
    • golang.org/x/sync v0.23.0
    • golang.org/x/sys v0.48.0
    • golang.org/x/term v0.46.0
    • golang.org/x/text v0.42.0
    • stdlib v1.26.9

0.4.17 - 2026-09-30

Fixed

  • Security updates to fix
    • CVE-2026-81870
    • GHSA-gcjh-h69q-9w9g

0.4.16 - 2026-09-09

Fixed

  • Security updates to fix
    • CVE-2026-84445

0.4.15 - 2026-09-03

Fixed

  • Security updates to fix
    • CVE-2026-84304

0.4.14 - 2026-08-19

Fixed

  • Security updates to fix
    • CVE-2026-33818
    • CVE-2026-39821
    • CVE-2026-46600
    • CVE-2026-56853
    • CVE-2026-56858
    • CVE-2026-56859
    • CVE-2026-56860
    • CVE-2026-56862

0.4.13 - 2026-08-11

Added

  • Added optional mutating webhook to transparently reconfigure workload pods to talk to LocalStack as a drop-in replacement for AWS. Optionally, with the ability to use cert-manager for certificates management.

0.4.12 - 2026-07-22

Fixed

  • Security updates to fix
    • CVE-2026-46600
    • CVE-2026-56852

0.4.11 - 2026-07-20

Fixed

  • Security updates to fix
    • CVE-2026-39822

0.4.10 - 2026-07-07

Fixed

  • Security updates to fix CVEs (all golang.org/x/net)
    • CVE-2026-25681
    • CVE-2026-27136
    • CVE-2026-42506
    • CVE-2026-39821
    • CVE-2026-25680
    • CVE-2026-42506

0.4.9 - 2026-06-30

Added

  • Support for specifying a runtimeClassName in the serviceSchedulingConfig to control the container runtime for pods spawned by LocalStack

0.4.8 - 2026-06-16

Fixed

  • CoreDNS Corefile corruption with multiple LocalStack instances
  • Security updates to fix
    • CVE-2026-42504

0.4.7 - 2026-05-28

Added

  • Supports PodSchedulingConfig to control where pods are executed

Fixed

  • Fixed license version matching

0.4.6 - 2026-05-19

Fixed

  • Security updates to fix
    • CVE-2026-33811
    • CVE-2026-33814
    • CVE-2026-39820
    • CVE-2026-39836
    • CVE-2026-42499

0.4.5 - 2026-04-28

Fixed

  • Security updates to fix CVE-2026-39883

0.4.4 - 2026-04-08

Fixed

  • Security Updates to fix CVE-2026-33186 and CVE-2026-24051

0.4.3 - 2026-03-16

Added

  • Option to disable ssl enforcement during license check (set LOCALSTACK_LICENSE_SSL_NO_VERIFY=1 for the operator pod)

Changed

  • Removed the rbac-proxy image and updated the kubebuilder authentication method for the metrics endpoint

0.4.2 - 2026-01-28

Fixed

  • Fixed not setting the searches field of the dnsConfig for the LocalStack pod when running as a non-root user

0.4.1 - 2025-12-16

Added

  • Support for specifying a custom CA certificate when fetching the license. See the caCertificate field of the LocalStack CRD object in the api docs for more information

0.4.0 - 2025-12-09

Added

  • Expand RBAC permissions to support creating EC2 instances (pods)
  • Added functionality to support running in non-root environments
  • Support setting PodSecurityContext and ContainerSecurityContext for the LocalStack pod
  • Support mounting the LocalStack volume with a PVC
  • Support overriding the default image pull policy. This defaults to Always if the image tag is latest, otherwise IfNotPresent

Fixed

  • Present better feedback if the auth token can be read from a secret, but the secret value is blank
  • Prevent endless AAAA DNS request loops

Changed

  • Bumped version of Go used to compile the operator to 1.25 resolving numerous CVEs

0.3.3 - 2025-08-23

Added

Fixed

  • Using ClusterFirst as the dns policy rather than Default which is not a valid setting
  • Filter kubectl annotations before forwarding them to child pods to remove any annotations starting with kubectl.kubernetes.io
  • Set the default lambda runtime timeout to 60 seconds
  • Add RBAC policies to support running RDS clusters
    • Added pods/exec and pods/log for the operator

Changed

  • Do not change the ulimit at pod startup

Removed