Skip to content

v0.37.0

Choose a tag to compare

@github-actions github-actions released this 09 Apr 15:26
· 101 commits to main since this release
43b74ef
  • Add ServiceUser field accessControl, type object: AccessControl configures service-specific access control rules for the user.
    When this block is present, the operator manages the full access-control scope it contains
  • Add OpenSearchACLConfig to manage OpenSearch ACL
  • BREAKING: Removed ClickhouseUser/ServiceUser field connInfoSecretSource.namespace, type string: cross-namespace
    secret references are no longer supported. The source secret must be in the same namespace as the resource.
    This fixes a potential confused deputy vulnerability where the operator could be exploited to exfiltrate secrets from other namespaces.