NetworkEnforcer v0.1.0

What's Changed

• docs: initial network-enforcer RFC by @dottorblaster in #9
• docs: add initial dev docs by @Andreagit97 in #11
• fix: emit real ports in NetworkPolicyProposal generation by @dottorblaster in #12
• cleanup: remove no more used backends by @Andreagit97 in #14
• chore: add zizmor action by @dottorblaster in #16
• chore: add GitHub issue templates by @dottorblaster in #17
• fix: dedicated directory for controller cmd by @dottorblaster in #15
• feat: rework of the current POC by @Andreagit97 in #18
• refactor: apply linters to all files by @Andreagit97 in #23
• chore: setup dependabot by @dottorblaster in #24
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.34.0 to 1.44.0 by @dependabot[bot] in #26
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #25
• chore(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in #31
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.31.0 by @dependabot[bot] in #29
• ci: don't trigger jobs twice on PR pushes by @Andreagit97 in #36
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.1 by @dependabot[bot] in #34
• chore(deps): bump k8s.io/apimachinery from 0.36.0 to 0.36.2 by @dependabot[bot] in #33
• chore(deps): bump k8s.io/api from 0.36.0 to 0.36.2 by @dependabot[bot] in #39
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #37
• chore(deps): bump github.com/cilium/cilium from 1.19.4 to 1.19.5 by @dependabot[bot] in #38
• chore(deps): bump k8s.io/client-go from 0.36.0 to 0.36.2 by @dependabot[bot] in #35
• docs: add cniWatcher RFC by @kyledong-suse in #22
• chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #41
• chore(deps): bump go.mongodb.org/mongo-driver from 1.17.6 to 1.17.7 by @dependabot[bot] in #42
• chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #45
• chore(deps): bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #43
• refactor: remove no more used test/utils folder + some makefile targets by @Andreagit97 in #46
• refactor: rename networkpolicyproposals api group by @Andreagit97 in #47
• refactor: remove all kubebuilder generated stuff by @Andreagit97 in #55
• docs: add a new RFC for monitor mode by @Andreagit97 in #40
• refactor: rename network policy proposal by @Andreagit97 in #56
• chore: fix Calico setup with tilt by @Andreagit97 in #54
• feat(api): add WorkloadNetworkPolicy CRD by @dottorblaster in #59
• chore: automate cniwatcher RBAC generation via Go markers by @dottorblaster in #60
• feat: implement WNPP reconciler to handle proposal promotion by @Andreagit97 in #61
• chore: rename go module into github.com/rancher-sandbox/network-enforcer by @Andreagit97 in #62
• chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #63
• feat: implement WorkloadNetworkPolicyReconciler with protect/monitor mode enforcement by @dottorblaster in #64
• feat(cniwatcher): add per-node violation buffer and ScrapeViolations GRPC server by @dottorblaster in #85
• chore(cniwatcher): refine Dockerfile.cniwatcher COPY stage by @kyledong-suse in #92
• feat(workflow): provide main branch builds by @holyspectral in #93
• chore: add a PR template by @dottorblaster in #94
• feat(api): add violation lifecycle by @dottorblaster in #88
• chore: replace custom NamespaceLabelKey with corev1.LabelMetadataName by @dottorblaster in #96
• feat(workflows): release pipeline by @holyspectral in #95
• chore(deps): bump rancher-sandbox/runtime-enforcer/.github/actions/attestation from 3ef087afd4c8131a1eacdd84873b7ddcaa13beaf to 89394bdcf7d1e8728a3c57aefdfbc3fcabd1140c by @dependabot[bot] in #102
• chore(deps): bump rancher-sandbox/runtime-enforcer/.github/actions/container-build from 3ef087afd4c8131a1eacdd84873b7ddcaa13beaf to 89394bdcf7d1e8728a3c57aefdfbc3fcabd1140c by @dependabot[bot] in #104
• chore(deps): bump rancher-sandbox/runtime-enforcer/.github/actions/merge-multiarch from 3ef087afd4c8131a1eacdd84873b7ddcaa13beaf to 89394bdcf7d1e8728a3c57aefdfbc3fcabd1140c by @dependabot[bot] in #103
• chore: provide sample crd yaml files by @holyspectral in #101
• chore(deps): update go version using updatecli by @holyspectral in #98
• deps(go): update Go to 1.26.5 version by @github-actions[bot] in #107
• chore(ci): provide values.schema.json by @holyspectral in #100
• chore(deps): add updatecli policy for opentelemetry-ebpf-instrumentation by @dottorblaster in #108
• fix: updatecli OBI job now also updates the subchart by @dottorblaster in #110
• chore: claude settings.json by @holyspectral in #112
• feat: scrape cniwatcher deny events and sync WorkloadNetworkPolicy by @dottorblaster in #106
• fix(helm): allow Helm v4 dependency key in values schema by @dottorblaster in #113
• refactor: rename cmd/netenforcer to cmd/controller by @dottorblaster in #114
• chore(deps): bump updatecli/updatecli-action from 3.3.0 to 3.4.0 by @dependabot[bot] in #115
• fix(updatecli): add HOME env and dependson ordering to OBI pipeline by @dottorblaster in #116
• fix(updatecli): switch to single shell step for helm and OBI by @dottorblaster in #118
• fix(updatecli): manually call git add -A to avoid updatecli internal errors by @dottorblaster in #119
• chore: stop vendoring opentelemetry-ebpf-instrumentation chart tarball by @dottorblaster in #121
• chore(deps): bump rancher-sandbox/runtime-enforcer/.github/actions/attestation from 89394bdcf7d1e8728a3c57aefdfbc3fcabd1140c to d3dbdc129a21016d114bc3bdae6eb47491c0db25 by @dependabot[bot] in #130
• chore(deps): bump rancher-sandbox/runtime-enforcer/.github/actions/container-build from 89394bdcf7d1e8728a3c57aefdfbc3fcabd1140c to d3dbdc129a21016d114bc3bdae6eb47491c0db25 by @dependabot[bot] in #129
• chore(deps): bump rancher-sandbox/runtime-enforcer/.github/actions/merge-multiarch from 89394bdcf7d1e8728a3c57aefdfbc3fcabd1140c to d3dbdc129a21016d114bc3bdae6eb47491c0db25 by @dependabot[bot] in #128
• chore: improve controller dockerfile and remove an unused make target by @Andreagit97 in #131
• refactor: refine cniwatcher unit tests by @kyl...

network-enforcer-chart-0.1.1

SUSE Security Network Enforcer helm chart