kanisterio · mergify · Oct 18, 2024 · Oct 18, 2024 · Oct 18, 2024 · Oct 18, 2024
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,38 +1,66 @@
 # Release Notes
 
+## 0.112.0
+
+### New Features
+
+<!-- releasenotes/notes/multi-container-run-function-d488516c0f3b22c6.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Introduced new Kanister function `MultiContainerRun` to run pods with two containers connected by shared volume.
+
+<!-- releasenotes/notes/pre-release-0.112.0-78fed87c3f58d801.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Introduced a GRPC client/server to `kando` to run/check processes.
+
+### Security Issues
+
+<!-- releasenotes/notes/limit-rbac-kanister-operator-3c933af021b8d48a.yaml @ b'a9edc6dc95d8772de502cb09b386f55e20baa33f' -->
+* Enhanced security by removing the default `edit` `ClusterRoleBinding` assignment, minimizing the risk of excessive permissions.
+
+### Upgrade Notes
+
+<!-- releasenotes/notes/limit-rbac-kanister-operator-3c933af021b8d48a.yaml @ b'a9edc6dc95d8772de502cb09b386f55e20baa33f' -->
+* Users upgrading from previous versions should note that the `edit` `ClusterRoleBinding` is no longer included by default. They must now create their own `Role` / `RoleBinding` with appropriate permissions for Kanister's Service Account in the application's namespace.
+
+### Other Notes
+
+<!-- releasenotes/notes/pre-release-0.112.0-78fed87c3f58d801.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Update ubi-minimal base image to ubi-minimal:9.4-1227.1726694542.
+
+<!-- releasenotes/notes/pre-release-0.112.0-78fed87c3f58d801.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Add `gci` and `unparam` linters to test packages.
+
 ## 0.111.0
 
 ### New Features
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Add support for Read-Only and Write Access Modes when connecting to the Kopia Repository Server in `kando`.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Add support for Cache Size Limits to the `kopia server start` command.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Add support to pass labels and annotations to the methods that create/clone VolumeSnapshot and VolumeSnapshotContent resources.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Support `image` argument for `ExportRDSSnapshotToLocation` and `RestoreRDSSnapshot` functions to override default postgres-kanister-tools image.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Added support to customise the labels and annotations of the temporary pods that are created by some Kanister functions.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Added two new fields, `podLabels` and `podAnnotations`, to the ActionSet. These fields can be used to configure the labels and annotations of the Kanister function pod run by an ActionSet.
 
 ### Security Issues
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Update Go to 1.22.7 to pull in latest security updates.
 
 ### Other Notes
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Update ubi-minimal base image to ubi-minimal:9.4-1227.1725849298.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
+<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'd207c416a800fdff15f570275f1e3dfe0ede4ffe' -->
 * Add `stylecheck`, `errcheck`, and `misspel` linters to test packages.
 
 ## 0.110.0

diff --git a/CHANGELOG_CURRENT.md b/CHANGELOG_CURRENT.md
@@ -1,36 +1,29 @@
 # Release Notes
 
-## 0.111.0
+## 0.112.0
 
 ## New Features
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Add support for Read-Only and Write Access Modes when connecting to the Kopia Repository Server in `kando`.
+<!-- releasenotes/notes/multi-container-run-function-d488516c0f3b22c6.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Introduced new Kanister function `MultiContainerRun` to run pods with two containers connected by shared volume.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Add support for Cache Size Limits to the `kopia server start` command.
+<!-- releasenotes/notes/pre-release-0.112.0-78fed87c3f58d801.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Introduced a GRPC client/server to `kando` to run/check processes.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Add support to pass labels and annotations to the methods that create/clone VolumeSnapshot and VolumeSnapshotContent resources.
-
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Support `image` argument for `ExportRDSSnapshotToLocation` and `RestoreRDSSnapshot` functions to override default postgres-kanister-tools image.
-
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Added support to customise the labels and annotations of the temporary pods that are created by some Kanister functions.
+## Security Issues
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Added two new fields, `podLabels` and `podAnnotations`, to the ActionSet. These fields can be used to configure the labels and annotations of the Kanister function pod run by an ActionSet.
+<!-- releasenotes/notes/limit-rbac-kanister-operator-3c933af021b8d48a.yaml @ b'a9edc6dc95d8772de502cb09b386f55e20baa33f' -->
+* Enhanced security by removing the default `edit` `ClusterRoleBinding` assignment, minimizing the risk of excessive permissions.
 
-## Security Issues
+## Upgrade Notes
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Update Go to 1.22.7 to pull in latest security updates.
+<!-- releasenotes/notes/limit-rbac-kanister-operator-3c933af021b8d48a.yaml @ b'a9edc6dc95d8772de502cb09b386f55e20baa33f' -->
+* Users upgrading from previous versions should note that the `edit` `ClusterRoleBinding` is no longer included by default. They must now create their own `Role` / `RoleBinding` with appropriate permissions for Kanister's Service Account in the application's namespace.
 
 ## Other Notes
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Update ubi-minimal base image to ubi-minimal:9.4-1227.1725849298.
+<!-- releasenotes/notes/pre-release-0.112.0-78fed87c3f58d801.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Update ubi-minimal base image to ubi-minimal:9.4-1227.1726694542.
 
-<!-- releasenotes/notes/pre-release-0.111.0-478149ddf5d56f80.yaml @ b'07949285eea9a1c7f0768bd8c8354d64278b0d82' -->
-* Add `stylecheck`, `errcheck`, and `misspel` linters to test packages.
+<!-- releasenotes/notes/pre-release-0.112.0-78fed87c3f58d801.yaml @ b'278e79a1ab5bc54fb1aa55d13474a49b6f319836' -->
+* Add `gci` and `unparam` linters to test packages.
diff --git a/examples/aws-rds/postgresql/README.md b/examples/aws-rds/postgresql/README.md
@@ -9,7 +9,7 @@ This example is to demonstrate how Kanister can be integrated with AWS RDS insta
 ## Prerequisites
 
 - Kubernetes 1.10+
-- Kanister controller version 0.111.0 installed in your cluster
+- Kanister controller version 0.112.0 installed in your cluster
 - Kanctl CLI installed (https://docs.kanister.io/tooling.html#kanctl)
 
 ## Create RDS instance on AWS

diff --git a/examples/aws-rds/postgresql/rds-postgres-blueprint.yaml b/examples/aws-rds/postgresql/rds-postgres-blueprint.yaml
@@ -14,7 +14,7 @@ actions:
     - func: KubeTask
       name: backupSnapshots
       args:
-        image: "ghcr.io/kanisterio/postgres-kanister-tools:0.111.0"
+        image: "ghcr.io/kanisterio/postgres-kanister-tools:0.112.0"
         namespace: "{{ .Object.metadata.namespace }}"
         command:
           - bash
@@ -53,7 +53,7 @@ actions:
     - func: KubeTask
       name: restoreSnapshots
       args:
-        image: "ghcr.io/kanisterio/postgres-kanister-tools:0.111.0"
+        image: "ghcr.io/kanisterio/postgres-kanister-tools:0.112.0"
         namespace: "{{ .Object.metadata.namespace }}"
         command:
           - bash
@@ -90,7 +90,7 @@ actions:
     - func: KubeTask
       name: restoreSnapshots
       args:
-        image: "ghcr.io/kanisterio/postgres-kanister-tools:0.111.0"
+        image: "ghcr.io/kanisterio/postgres-kanister-tools:0.112.0"
         namespace: "{{ .Namespace.Name }}"
         command:
           - bash

diff --git a/examples/aws-rds/postgresql/rds-postgres-dump-blueprint.yaml b/examples/aws-rds/postgresql/rds-postgres-dump-blueprint.yaml
@@ -66,7 +66,7 @@ actions:
       name: deleteBackup
       args:
         namespace: "{{ .Namespace.Name }}"
-        image: ghcr.io/kanisterio/kanister-tools:0.111.0
+        image: ghcr.io/kanisterio/kanister-tools:0.112.0
         command:
           - bash
           - -o

diff --git a/examples/cassandra/README.md b/examples/cassandra/README.md
@@ -7,7 +7,7 @@ As the official documentation of [Cassandra](http://cassandra.apache.org/) says,
 * Kubernetes 1.9+
 * Kubernetes beta APIs enabled only if `podDisruptionBudget` is enabled
 * PV support on the underlying infrastructure
-* Kanister controller version 0.111.0 installed in your cluster, let's say in namespace `<kanister-operator-namespace>`
+* Kanister controller version 0.112.0 installed in your cluster, let's say in namespace `<kanister-operator-namespace>`
 * Kanctl CLI installed (https://docs.kanister.io/tooling.html#kanctl)
 
 To install kanister and related tools you can follow [this](https://docs.kanister.io/install.html#install) link.
@@ -29,7 +29,7 @@ $ helm repo add bitnami https://charts.bitnami.com/bitnami
 $ helm repo update
 # remove app-namespace with the namespace you want to deploy the Cassandra app in
 $ kubectl create ns <app-namespace>
-$ helm install cassandra bitnami/cassandra --namespace <app-namespace> --set image.repository=kanisterio/cassandra --set image.tag=0.111.0 --set cluster.replicaCount=2 --set image.registry=ghcr.io --set image.pullPolicy=Always
+$ helm install cassandra bitnami/cassandra --namespace <app-namespace> --set image.repository=kanisterio/cassandra --set image.tag=0.112.0 --set cluster.replicaCount=2 --set image.registry=ghcr.io --set image.pullPolicy=Always
 
 
 ```

diff --git a/examples/cassandra/cassandra-blueprint.yaml b/examples/cassandra/cassandra-blueprint.yaml
@@ -130,7 +130,7 @@ actions:
       name: restoreFromObjectStore
       args:
         namespace: "{{ .StatefulSet.Namespace }}"
-        image: ghcr.io/kanisterio/kanister-tools:0.111.0
+        image: ghcr.io/kanisterio/kanister-tools:0.112.0
         backupArtifactPrefix: "{{ .ArtifactsIn.params.KeyValue.backupPrefixLocation }}"
         pods: "{{ range .StatefulSet.Pods }} {{.}}{{end}}"
         restorePath: "{{ .ArtifactsIn.params.KeyValue.restorePathPrefix }}"

diff --git a/examples/cockroachdb/cockroachdb-blueprint.yaml b/examples/cockroachdb/cockroachdb-blueprint.yaml
@@ -151,7 +151,7 @@ actions:
       - func: KubeTask
         name: deleteFromS3Store
         args:
-          image: ghcr.io/kanisterio/kanister-tools:0.111.0
+          image: ghcr.io/kanisterio/kanister-tools:0.112.0
           namespace: "{{ .Namespace.Name }}"
           command:
             - bash

diff --git a/examples/couchbase/blueprint-v2/couchbase-blueprint.yaml b/examples/couchbase/blueprint-v2/couchbase-blueprint.yaml
@@ -21,7 +21,7 @@ actions:
           namespace: "{{ .Object.metadata.namespace }}"
       args:
         namespace: "{{ .Object.metadata.namespace }}"
-        image: ghcr.io/kanisterio/couchbase-tools:0.111.0
+        image: ghcr.io/kanisterio/couchbase-tools:0.112.0
         command:
           - bash
           - -o
@@ -58,7 +58,7 @@ actions:
           namespace: "{{ .Object.metadata.namespace }}"
       args:
         namespace: "{{ .Object.metadata.namespace }}"
-        image: ghcr.io/kanisterio/couchbase-tools:0.111.0
+        image: ghcr.io/kanisterio/couchbase-tools:0.112.0
         command:
           - bash
           - -o
@@ -89,7 +89,7 @@ actions:
       name: deleteBackup
       args:
         namespace: "{{ .Namespace.Name }}"
-        image: ghcr.io/kanisterio/couchbase-tools:0.111.0
+        image: ghcr.io/kanisterio/couchbase-tools:0.112.0
         command:
           - bash
           - -o

diff --git a/examples/couchbase/couchbase-blueprint.yaml b/examples/couchbase/couchbase-blueprint.yaml
@@ -79,7 +79,7 @@ actions:
       name: deleteBackup
       args:
         namespace: "{{ .Namespace.Name }}"
-        image: ghcr.io/kanisterio/kanister-tools:0.111.0
+        image: ghcr.io/kanisterio/kanister-tools:0.112.0
         command:
           - bash
           - -o

diff --git a/examples/csi-snapshot/README.md b/examples/csi-snapshot/README.md
@@ -8,7 +8,7 @@ This example demonstrates Kanister's ability to protect an application called Ti
 
 - Helm 3 installed
 - Kubernetes 1.16+ with Beta APIs enabled
-- Kanister controller version 0.111.0 installed in the cluster, let's assume in namespace `kanister`
+- Kanister controller version 0.112.0 installed in the cluster, let's assume in namespace `kanister`
 - Kanctl CLI installed (https://docs.kanister.io/tooling.html#install-the-tools)
 - VolumeSnapshot CRDs, Snapshot Controller & a CSI Driver
 

diff --git a/examples/elasticsearch/README.md b/examples/elasticsearch/README.md
@@ -20,7 +20,7 @@ moving on to Elasticsearch 6.0.
 
 * Kubernetes 1.20+
 * PV provisioner support in the underlying infrastructure
-* Kanister controller version 0.111.0 installed in your cluster
+* Kanister controller version 0.112.0 installed in your cluster
 * Kanctl CLI installed (https://docs.kanister.io/tooling.html#install-the-tools)
 
 ## StatefulSets Details
@@ -74,7 +74,7 @@ Add Kanister Helm repository and install Kanister operator
 ```bash
 $ helm repo add kanister https://charts.kanister.io
 $ helm install kanister --namespace kanister --create-namespace \
-  kanister/kanister-operator --set image.tag=0.111.0
+  kanister/kanister-operator --set image.tag=0.112.0
 ```
 
 ### Create Profile

diff --git a/examples/elasticsearch/blueprint-v2/elasticsearch-blueprint.yaml b/examples/elasticsearch/blueprint-v2/elasticsearch-blueprint.yaml
@@ -20,7 +20,7 @@ actions:
           namespace: "{{ .StatefulSet.Namespace }}"
       args:
         namespace: "{{ .StatefulSet.Namespace }}"
-        image: "ghcr.io/kanisterio/es-sidecar:0.111.0"
+        image: "ghcr.io/kanisterio/es-sidecar:0.112.0"
         command:
         - bash
         - -o
@@ -50,7 +50,7 @@ actions:
           namespace: "{{ .StatefulSet.Namespace }}"      
       args:
         namespace: "{{ .StatefulSet.Namespace }}"
-        image: "ghcr.io/kanisterio/es-sidecar:0.111.0"
+        image: "ghcr.io/kanisterio/es-sidecar:0.112.0"
         command:
         - bash
         - -o
@@ -75,7 +75,7 @@ actions:
       name: deleteFromStore
       args:
         namespace: "{{ .Namespace.Name }}"
-        image: "ghcr.io/kanisterio/es-sidecar:0.111.0"
+        image: "ghcr.io/kanisterio/es-sidecar:0.112.0"
         command:
         - bash
         - -o

diff --git a/examples/elasticsearch/elasticsearch-blueprint.yaml b/examples/elasticsearch/elasticsearch-blueprint.yaml
@@ -18,7 +18,7 @@ actions:
           namespace: "{{ .StatefulSet.Namespace }}"
       args:
         namespace: "{{ .StatefulSet.Namespace }}"
-        image: "ghcr.io/kanisterio/es-sidecar:0.111.0"
+        image: "ghcr.io/kanisterio/es-sidecar:0.112.0"
         command:
         - bash
         - -o
@@ -48,7 +48,7 @@ actions:
           namespace: "{{ .StatefulSet.Namespace }}"
       args:
         namespace: "{{ .StatefulSet.Namespace }}"
-        image: "ghcr.io/kanisterio/es-sidecar:0.111.0"
+        image: "ghcr.io/kanisterio/es-sidecar:0.112.0"
         command:
         - bash
         - -o
@@ -69,7 +69,7 @@ actions:
       name: deleteFromObjectStore
       args:
         namespace: "{{ .Namespace.Name }}"
-        image: "ghcr.io/kanisterio/es-sidecar:0.111.0"
+        image: "ghcr.io/kanisterio/es-sidecar:0.112.0"
         command:
         - bash
         - -o

diff --git a/examples/etcd/etcd-in-cluster/k8s/etcd-incluster-blueprint.yaml b/examples/etcd/etcd-in-cluster/k8s/etcd-incluster-blueprint.yaml
@@ -12,7 +12,7 @@ actions:
     - func: KubeTask
       name: takeSnapshot
       args:
-        image: ghcr.io/kanisterio/kanister-kubectl-1.18:0.111.0
+        image: ghcr.io/kanisterio/kanister-kubectl-1.18:0.112.0
         command:
           - sh
           - -o
@@ -37,7 +37,7 @@ actions:
     - func: KubeTask
       name: uploadSnapshot
       args:
-        image: ghcr.io/kanisterio/kanister-kubectl-1.18:0.111.0
+        image: ghcr.io/kanisterio/kanister-kubectl-1.18:0.112.0
         command:
           - sh
           - -o
@@ -55,7 +55,7 @@ actions:
     - func: KubeTask
       name: removeSnapshot
       args:
-        image: ghcr.io/kanisterio/kanister-kubectl-1.18:0.111.0
+        image: ghcr.io/kanisterio/kanister-kubectl-1.18:0.112.0
         command:
           - sh
           - -o
@@ -74,7 +74,7 @@ actions:
       name: deleteFromObjectStore
       args:
         namespace: "{{ .Namespace.Name }}"
-        image: "ghcr.io/kanisterio/kanister-tools:0.111.0"
+        image: "ghcr.io/kanisterio/kanister-tools:0.112.0"
         command:
         - bash
         - -o