constellation/CHANGELOG.md

Changelog

All notable changes to Constellation will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Added

• Sign generated SBOMs and store container image SBOMs in registry for easier usage.

Changed

• Verify measurements using Rekor transparency log.
• The constellation create on Azure now uses Terraform to create and destroy cloud resources.
• Constellation OS images are now based on Fedora directly and are built using mkosi.

Deprecated

Removed

• endpoint flag of constellation init. IP is now always taken from the constellation-id.json file.
• constellation-state.json file won't be created anymore. Resources are now managed through Terraform.

Fixed

Security

Internal

• Support for AWS metadata operations

2.1.0 - 2022-10-07

Added

• MiniConstellation: Try out Constellation locally without any cloud subscription required just with one command: constellation mini up
• Loadbalancer for control-plane recovery
• K8s conformance mode
• Local cluster creation based on QEMU
• Verification of Azure trusted launch attestation keys
• Kubernetes version v1.25 is now fully supported.
• Enabled Konnectivity.

Changed

• Autoscaling is now directly managed inside Kubernetes, by the Constellation node operator.
• The constellation create on GCP now uses Terraform to create and destroy cloud resources.
• GCP instances are now created without public IPs by default.
• Kubernetes default version used in Constellation is now v1.24.

Deprecated

Removed

• CLI options for autoscaling, as this is now managed inside Kubernetes.
• Kubernetes version v1.22 is no longer supported.

Fixed

Security

Vulnerability inside the Go standard library fixed by updating to Go 1.19.2:

• GO-2022-1037 (CVE-2022-2879)
• GO-2022-1038 (CVE-2022-2880)
• GO-2022-0969 (CVE-2022-27664)

Internal

2.0.0 - 2022-09-12

Initial release of Constellation.