v1.6.4
What's Changed
-
feature: Restrict Kubechecks to a Single Namespace for App Watcher by @Greyeye in #235
-
Namespace Restriction for Kubechecks:
- Current Behavior: Kubechecks monitors all ArgoCD applications and ApplicationSet CRDs across the entire cluster. This is not ideal when multiple ArgoCD instances are running in a single cluster (e.g., for testing purposes).
- New Behavior: Introduces the ability to specify a namespace for ArgoCD. Kubechecks will now watch ArgoCD CRDs only within the specified namespace.
- Added a new flag
argocd-api-namespace
and a corresponding server configArgoCDNameSpace
. - Modified
NewApplicationInformer
to target the specifiedargocdnamespace
. - argocd-api-namespace /KUBECHECKS_ARGOCD_NAMESPACE default is
argocd
, Please make sure this matches with your environment
- Added a new flag
-
Improvement to
dumpcrd
:dumpcrd
can now run without requiring a localkubectl
binary.
-
Modification to GitHub Webhook Check:
- The webhook check for GitHub has been updated to validate against the payload URL instead of the hook's API URL.
-
OpenAI ChatGPT Model Update:
- Updated to use the
GPT-4o
model.
- Updated to use the
-
Bump go-github to v62
Localdev Changes
-
Earthly File Renaming:
- Renamed the local earthly file to
earthly.sh
to minimize confusion.
- Renamed the local earthly file to
-
TiltFile Fix:
- Updated
TiltFile
to read the.tools-version
file directly, preventing failures during the earthly build. - Updated to read
.secret
instead of.env
; as secrets env vars are read from the .secret
- Updated
-
Values.yaml Update:
- Renamed
KUBECHECKS_ARGOCD_NAMESPACE
toKUBECHECKS_ARGOCD_API_NAMESPACE
inlocaldev/kubechecks/values.yaml
.
- Renamed
-
Configuration Change:
- Set
KUBECHECKS_ENABLE_CONFTEST
tofalse
as the./policy
path is not valid.
- Set
Full Changelog: v1.6.3...v1.6.4