0.1.0-rc.6

0.1.0-rc.6

Published 2026-03-30.

Docs snapshot unavailable

This release note is archived, but a matching versioned docs snapshot is not published in this site yet.

GitHub release

View release assets, tag metadata, and the GitHub release entry.

Open

Features

• api: add OpenBaoCluster observedGeneration and printer columns (#286) (1c8f8ae)
• ast-grep: add policy-driven architecture guardrails with CI enforcement (#201) (1faee9a)
• core: add consistent Kubernetes lifecycle events (#226) (93687af)
• core: harden lifecycle contracts and supporting coverage (#237) (44de947)
• infra: add default node and zone spreading for OpenBao StatefulSets (#214) (1d7afc8)
• infra: add pod metadata hooks for workload identity (#216) (9bd2546)
• operator: add supported single-tenant custom identity install paths (#239) (d41ff74)
• security: tighten operator security and authentication contracts (#238) (7b14fb1)
• upgrade: unify manual upgrade requests on OpenBaoCluster (#228) (b6f6848)

Bug Fixes

• admission: allow hardened image verification defaults (#240) (817f144)
• auth: harden operator OIDC bootstrap discovery (#242) (c6fef5d)
• auth: retry kubernetes jwks discovery via api service (#241) (37358f6)
• ci: always run perf weekly issue job after failed schedule check (3d0eb18)
• ci: harden mainline publish workflows (#224) (3bebc04)
• controller: recheck admission dependencies at runtime (#262) (8203a59)
• controller: refresh cluster status on standard cadence (#257) (5fd50f3)
• infra: fail closed on hostile OIDC bootstrap discovery (#263) (2dbd9be)
• rolling: handle retry status conflicts during upgrade resume (#192) (c6957f2)
• security: harden managed image digests and gateway validation reads (#243) (62a44d0)
• security: remove resolved govulncheck ignores (#249) (58be543)
• security: validate UMASK bounds in bao-wrapper (#195) (08b5f8a)
• security: wrap bundle fallback verification error (#200) (827899e)
• status: make lifecycle status guidance more actionable (#227) (6bf9147)
• storage: enforce storage class immutability consistently (#215) (c0a551f)
• upgrade: clear rolling retry failure state with merge status patch (#205) (f4b47f9)
• upgrade: harden OpenBaoCluster upgrade validation, recovery, and documentation (#225) (a170c0a)
• validation: block upgrade strategy switches (#288) (b5f0af4)

Miscellaneous Chores

• trigger release-please for 0.1.0-rc.6 (#293) (9f8bfa1)