chore(release): 8.0.0 [skip ci] (93ec1417) · Commits · to be continuous... / Kubernetes

CHANGELOG.md

+10 −0

Original line number	Diff line number	Diff line
		# [8.0.0](https://gitlab.com/to-be-continuous/kubernetes/compare/7.5.0...8.0.0) (2025-08-13)


		* feat(vault)!: enable certificate verification ([f63bed1](https://gitlab.com/to-be-continuous/kubernetes/commit/f63bed1e78a9d3d321f6aa7694215f9dd8c07d38))


		### BREAKING CHANGES

		* self-signed certificates must be declared in your GitLab DEFAULT_CA_CERTS or with VAULT_CA_CERTS variable

		# [7.5.0](https://gitlab.com/to-be-continuous/kubernetes/compare/7.4.0...7.5.0) (2025-08-12)

README.md

+8 −8

Original line number	Diff line number	Diff line
		@@ -16,7 +16,7 @@ Add the following to your `.gitlab-ci.yml`:
		```yaml
		include:
		# 1: include the component
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@7.5.0
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@8.0.0
		# 2: set/override component inputs
		inputs:
		# ⚠ this is only an example
		@@ -35,7 +35,7 @@ Add the following to your `.gitlab-ci.yml`:
		include:
		# 1: include the template
		- project: 'to-be-continuous/kubernetes'
		ref: '7.5.0'
		ref: '8.0.0'
		file: '/templates/gitlab-ci-k8s.yml'

		variables:
		@@ -523,12 +523,12 @@ With:
		```yaml
		include:
		# main template
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@7.5.0
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@8.0.0
		inputs:
		# ⚠ oc-container image (includes required curl)
		kubectl-image: docker.io/docker.io/appuio/oc:v4.14
		# Vault variant
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s-vault@7.5.0
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s-vault@8.0.0
		inputs:
		# audience claim for JWT
		vault-oidc-aud: "https://vault.acme.host"
		@@ -589,9 +589,9 @@ With a common default `GCP_OIDC_PROVIDER` and `GCP_OIDC_ACCOUNT` configuration f
		```yaml
		include:
		# main template
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@7.5.0
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@8.0.0
		# Google Cloud variant
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8ss-gcp@7.5.0
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8ss-gcp@8.0.0
		inputs:
		# common OIDC config for non-prod envs
		gcp-oidc-provider: "projects/<gcp_nonprod_proj_id>/locations/global/workloadIdentityPools/<pool_id>/providers/<provider_id>"
		@@ -634,9 +634,9 @@ With a common default `AWS_OIDC_ROLE_ARN` configuration for non-prod environmen
		```yaml
		include:
		# main template
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@7.5.0
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s@8.0.0
		# AWS variant
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s-aws@7.5.0
		- component: $CI_SERVER_FQDN/to-be-continuous/kubernetes/gitlab-ci-k8s-aws@8.0.0
		inputs:
		# common OIDC config for non-prod envs
		aws-oidc-role-arn: "arn:aws:iam::<project_id>:role/<role_name>"

templates/gitlab-ci-k8s-vault.yml

+1 −1

Original line number	Diff line number	Diff line
		@@ -22,7 +22,7 @@ variables:
		.k8s-base:
		services:
		- name: "$TBC_TRACKING_IMAGE"
		command: ["--service", "--port", "8082", "kubernetes", "7.5.0"]
		command: ["--service", "--port", "8082", "kubernetes", "8.0.0"]
		- name: "$TBC_VAULT_IMAGE"
		alias: "vault-secrets-provider"
		variables:

templates/gitlab-ci-k8s.yml

+1 −1

Original line number	Diff line number	Diff line
		@@ -885,7 +885,7 @@ stages:
		entrypoint: [""]
		services:
		- name: "$TBC_TRACKING_IMAGE"
		command: ["--service", "kubernetes", "7.5.0"]
		command: ["--service", "kubernetes", "8.0.0"]
		before_script:
		- !reference [.k8s-scripts]
		- install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"