[dev-v2.13] Bump rancher-webhook to v0.9.0 #6503

rancher-pr-and-push-webhook · 2025-11-19T16:49:37Z

Release note for v0.9.0

What's Changed

[0.7] Remove references to Restricted Admin by @JonCrowther in [0.7] Remove references to Restricted Admin webhook#549
[main/2.10.2] Add resource request and limit validation when creating a namespace by @crobby in [main/2.10.2] Add resource request and limit validation when creating a namespace webhook#550
Add sync deps workflow by @tomleb in Add sync deps workflow webhook#552
Fix missing new line in sync script by @tomleb in Fix missing new line in sync script webhook#555
Fix PR not triggering CI by @tomleb in Fix PR not triggering CI webhook#563
Fix sync dependency script by @tomleb in Fix sync dependency script webhook#565
Fix quote for syncing deps workflow by @tomleb in Fix quote for syncing deps workflow webhook#566
Add workflow to release webhook in rancher/charts and rancher/rancher by @tomleb in Add workflow to release webhook in rancher/charts and rancher/rancher webhook#449
Fix release rancher and release charts GHA workflows by @tomleb in Fix release rancher and release charts GHA workflows webhook#575
Fix release charts and release rancher GHA workflow again by @tomleb in Fix release charts and release rancher GHA workflow again webhook#576
Ensure go telemetry files aren't added to the commit by @tomleb in Ensure go telemetry files aren't added to the commit webhook#577
Update year to 2025 by @tomleb in Update year to 2025 webhook#578
Prevent deletion of local cluster by @dharmit in Prevent deletion of local cluster webhook#551
Replace Name with GlobalRoleName in GlobalRoleBinding log by @JonCrowther in Replace Name with GlobalRoleName in GlobalRoleBinding log webhook#598
[main] Upgrade go version to 1.23 by @vatsalparekh in [main] Upgrade go version to 1.23 webhook#583
Add versioning information and update renovate by @tomleb in Add versioning information and update renovate webhook#547
[v0.7|main] Make admission rejection message more useful for namespace creation by @crobby in [v0.7|main] Make admission rejection message more useful for namespace creation webhook#572
Revert "Prevent deletion of local cluster (Update storageos-operator to version 0.3.1 #551)" by @crobby in Revert "Prevent deletion of local cluster (#551)" webhook#634
Update dependency go to v1.23.6 (main) by @renovate-rancher[bot] in Update dependency go to v1.23.6 (main) webhook#614
Update actions/setup-go action to v5.3.0 (main) by @renovate-rancher[bot] in Update actions/setup-go action to v5.3.0 (main) webhook#618
Update actions/upload-artifact action to v4.6.0 (main) by @renovate-rancher[bot] in Update actions/upload-artifact action to v4.6.0 (main) webhook#619
Update docker/build-push-action action to v6.13.0 (main) by @renovate-rancher[bot] in Update docker/build-push-action action to v6.13.0 (main) webhook#621
Update module golang.org/x/tools to v0.29.0 (main) by @renovate-rancher[bot] in Update module golang.org/x/tools to v0.29.0 (main) webhook#627
Update docker/setup-buildx-action action to v3.9.0 (main) by @renovate-rancher[bot] in Update docker/setup-buildx-action action to v3.9.0 (main) webhook#623
Update docker/setup-qemu-action action to v3.4.0 (main) by @renovate-rancher[bot] in Update docker/setup-qemu-action action to v3.4.0 (main) webhook#624
Add initial Renovate configuration by @renovate-rancher[bot] in Add initial Renovate configuration webhook#599
Update actions/download-artifact action to v4.1.8 (main) by @renovate-rancher[bot] in Update actions/download-artifact action to v4.1.8 (main) webhook#613
Update module github.com/evanphx/json-patch to v5.9.11+incompatible (main) by @renovate-rancher[bot] in Update module github.com/evanphx/json-patch to v5.9.11+incompatible (main) webhook#615
Update actions/checkout action to v4.2.2 (main) by @renovate-rancher[bot] in Update actions/checkout action to v4.2.2 (main) webhook#617
Update module github.com/stretchr/testify to v1.10.0 (main) by @renovate-rancher[bot] in Update module github.com/stretchr/testify to v1.10.0 (main) webhook#625
Update docker/login-action action to v3.3.0 (main) by @renovate-rancher[bot] in Update docker/login-action action to v3.3.0 (main) webhook#622
Update module github.com/rancher/lasso to v0.2.0 (main) by @renovate-rancher[bot] in Update module github.com/rancher/lasso to v0.2.0 (main) webhook#608
Update golang.org/x/exp digest to f9890c6 (main) by @renovate-rancher[bot] in Update golang.org/x/exp digest to f9890c6 (main) webhook#611
Update module github.com/rancher/rke to v1.7.2 (main) by @renovate-rancher[bot] in Update module github.com/rancher/rke to v1.7.2 (main) webhook#616
Update dependency helm/helm to v3.17.0 (main) by @renovate-rancher[bot] in Update dependency helm/helm to v3.17.0 (main) webhook#620
Update module golang.org/x/tools to v0.30.0 (main) by @renovate-rancher[bot] in Update module golang.org/x/tools to v0.30.0 (main) webhook#655
Update k8s.io/utils digest to 24370be (main) by @renovate-rancher[bot] in Update k8s.io/utils digest to 24370be (main) webhook#612
Update golang.org/x/exp digest to 939b2ce (main) by @renovate-rancher[bot] in Update golang.org/x/exp digest to 939b2ce (main) webhook#654
[main] Change lasso with tagged release by @vatsalparekh in [main] Change lasso with tagged release webhook#607
Update dependency helm/helm to v3.17.1 (main) by @renovate-rancher[bot] in Update dependency helm/helm to v3.17.1 (main) webhook#667
Update dependency golangci/golangci-lint to v1.64.5 (main) by @renovate-rancher[bot] in Update dependency golangci/golangci-lint to v1.64.5 (main) webhook#663
Update dependencies for k8s 1.32 by @vatsalparekh in Update dependencies for k8s 1.32 webhook#672
Support for Version Management on Imported RKE2/K3s Clusters by @jiaqiluo in Support for Version Management on Imported RKE2/K3s Clusters webhook#669
Update renovate.json to ignore packages by @rohitsakala in Update renovate.json to ignore packages webhook#685
Correct syntax for matchPackagePatterns by @rohitsakala in Correct syntax for matchPackagePatterns webhook#699
(feat): Cattle Cluster Agent PDB and PC Validation by @HarrisonWAffel in (feat): Cattle Cluster Agent PDB and PC Validation webhook#702
feat(setting): add validation for auth-user-session-idle-ttl-minutes by @alegrey91 in feat(setting): add validation for auth-user-session-idle-ttl-minutes webhook#510
Remove golang.org/x/exp by @rohitsakala in Remove golang.org/x/exp webhook#705
Prevent deletion of namespaces and cluster by @dharmit in Prevent deletion of namespaces and cluster webhook#651
Fix validation. by @bigkevmcd in Fix validation. webhook#666
Validate LDAP/AD authconfigs by @pmatseykanets in Validate LDAP/AD authconfigs webhook#682
Update module github.com/go-ldap/ldap/v3 to v3.4.10 (main) by @renovate-rancher[bot] in Update module github.com/go-ldap/ldap/v3 to v3.4.10 (main) webhook#726
Update actions/download-artifact action to v4.1.9 (main) by @renovate-rancher[bot] in Update actions/download-artifact action to v4.1.9 (main) webhook#730
Validate authconfig only if the auth provider is enabled by @pmatseykanets in Validate authconfig only if the auth provider is enabled webhook#738
Disable Imperative API for webhook integration tests by @crobby in Disable Imperative API for webhook integration tests webhook#743
[main] Bump Rancher to pull in type updates by @HarrisonWAffel in [main] Bump Rancher to pull in type updates webhook#744
Update docker/setup-qemu-action action to v3.6.0 (main) by @renovate-rancher[bot] in Update docker/setup-qemu-action action to v3.6.0 (main) webhook#735
Update dependency golangci/golangci-lint to v1.64.6 (main) by @renovate-rancher[bot] in Update dependency golangci/golangci-lint to v1.64.6 (main) webhook#753
Update docker/setup-buildx-action action to v3.10.0 (main) by @renovate-rancher[bot] in Update docker/setup-buildx-action action to v3.10.0 (main) webhook#734
Do not validate PC and PDB settings if they have not been customized by @HarrisonWAffel in Do not validate PC and PDB settings if they have not been customized webhook#765
Add new User validation webhook by @JonCrowther in Add new User validation webhook webhook#786
Update branch by @tomleb in Update branch webhook#809
docs: add alternative method to test webhook development by @alegrey91 in docs: add alternative method to test webhook development webhook#850
Prevent creating Rancher PR if RC not yet in rancher/charts by @tomleb in Prevent creating Rancher PR if RC not yet in rancher/charts webhook#851
Don't remove previous RCs by @tomleb in Don't remove previous RCs webhook#868
Bump Go to 1.24.2 by @pmatseykanets in Bump Go to 1.24.2 webhook#871
Use backing namespace for projects by @JonCrowther in Use backing namespace for projects webhook#869
Make sure to update the project with the generated name by @JonCrowther in Make sure to update the project with the generated name webhook#876
Update default chart branch to dev-v2.12 by @crobby in Update default chart branch to dev-v2.12 webhook#877
[main] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [main] Sync webhook dependencies webhook#887
Fix create cluster error message by @andypitcher in Fix create cluster error message webhook#891
feat: updatepsa for project level by @alegrey91 in feat: updatepsa for project level webhook#798
Update renovate config to allow k8s.io and sig.k8s.io patch versions (but not major/minor) by @crobby in Update renovate config to allow k8s.io and sig.k8s.io patch versions (but not major/minor) webhook#896
Migrate renovate config by @renovate-rancher[bot] in Migrate renovate config webhook#695
[main] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [main] Sync webhook dependencies webhook#909
[main] Bump wrangler by @joshmeranda in [main] Bump wrangler webhook#914
Preserves the original sequence of machineConfigGlobal["kube-apiserver-arg"] by @apoorvajagtap in Preserves the original sequence of machineConfigGlobal["kube-apiserver-arg"] webhook#913
fix: add matchCondition to invoke mutation webhook only for cloud-credential secret by @pratikjagrut in fix: add matchCondition to invoke mutation webhook only for cloud-credential secret webhook#912
Don't require certificate if tls is on for ldap/ad authconfigs by @pmatseykanets in Don't require certificate if tls is on for ldap/ad authconfigs webhook#927
Refactors keyValueArgs handling for improved efficiency by @apoorvajagtap in Refactors keyValueArgs handling for improved efficiency webhook#928
🌱 Allow creation of fleetworkspace for existing namespace when annotation is present and set to true by @yiannistri in 🌱 Allow creation of fleetworkspace for existing namespace when annotation is present and set to true webhook#932
Add support for k8s 1.33 by @rohitsakala in Add support for k8s 1.33 webhook#954
Bump wrangler to v3.2.2-rc.3 by @crobby in Bump wrangler to v3.2.2-rc.3 webhook#958
[main] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [main] Sync webhook dependencies webhook#959
Update registry.suse.com/bci/bci-micro Docker tag to v15.7 (main) by @renovate-rancher[bot] in Update registry.suse.com/bci/bci-micro Docker tag to v15.7 (main) webhook#946
[main] Validate auditlog by @joshmeranda in [main] Validate auditlog webhook#960
[main] register AuditPolicy webhook validation handler by @joshmeranda in [main] register AuditPolicy webhook validation handler webhook#961
Identify and block malformed NO_PROXY values by @HarrisonWAffel in Identify and block malformed NO_PROXY values webhook#962
Update module github.com/rancher/wrangler/v3 to v3.2.2 (main) by @renovate-rancher[bot] in Update module github.com/rancher/wrangler/v3 to v3.2.2 (main) webhook#966
[main] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [main] Sync webhook dependencies webhook#973
Add update validation for User.UserName by @JonCrowther in Add update validation for User.UserName webhook#943
Update branch following rancher/rancher branching by @tomleb in Update branch following rancher/rancher branching webhook#989
Migrate renovate config by @renovate-rancher[bot] in Migrate renovate config webhook#980
Move username validation to happen before manage-users check by @JonCrowther in Move username validation to happen before manage-users check webhook#1016
fix: removing imported cluster warning by @Felipalds in fix: removing imported cluster warning webhook#990
[main] Label admission-configuration-psact secret to be backed up by @jbiers in [main] Label admission-configuration-psact secret to be backed up webhook#998
[2.13] add validation for etcd s3 cloud credential by @jiaqiluo in [2.13] add validation for etcd s3 cloud credential webhook#985
validate password for local users by @raulcabello in validate password for local users webhook#1015
Bump rancher-version by @tomleb in Bump rancher-version webhook#1007
Update GitHub Actions (main) by @renovate-rancher[bot] in Update GitHub Actions (main) webhook#803
Update GitHub Actions (main) (major) by @renovate-rancher[bot] in Update GitHub Actions (main) (major) webhook#856
Update module github.com/rancher/wrangler/v3 to v3.2.3 (main) by @renovate-rancher[bot] in Update module github.com/rancher/wrangler/v3 to v3.2.3 (main) webhook#1032
Extend the username uniqueness check to updates as well as creates by @JonCrowther in Extend the username uniqueness check to updates as well as creates webhook#1053
48484 bug webhook error msg by @marytlf in 48484 bug webhook error msg webhook#1046
Update module golang.org/x/tools to v0.37.0 (main) by @renovate-rancher[bot] in Update module golang.org/x/tools to v0.37.0 (main) webhook#767
Update dependency golangci/golangci-lint to v1.64.8 (main) by @renovate-rancher[bot] in Update dependency golangci/golangci-lint to v1.64.8 (main) webhook#794
Update dependency helm/helm to v3.19.0 (main) by @renovate-rancher[bot] in Update dependency helm/helm to v3.19.0 (main) webhook#805
Update wrangler-lasso (main) by @renovate-rancher[bot] in Update wrangler-lasso (main) webhook#1057
Update dependency golangci/golangci-lint to v2 (main) by @renovate-rancher[bot] in Update dependency golangci/golangci-lint to v2 (main) webhook#841
Update module github.com/go-ldap/ldap/v3 to v3.4.11 (main) by @renovate-rancher[bot] in Update module github.com/go-ldap/ldap/v3 to v3.4.11 (main) webhook#893
Update module github.com/rancher/rke to v1.8.6 (main) by @renovate-rancher[bot] in Update module github.com/rancher/rke to v1.8.6 (main) webhook#1010
Update module go.uber.org/mock to v0.6.0 (main) by @renovate-rancher[bot] in Update module go.uber.org/mock to v0.6.0 (main) webhook#1035
Update module github.com/stretchr/testify to v1.11.1 (main) by @renovate-rancher[bot] in Update module github.com/stretchr/testify to v1.11.1 (main) webhook#1047
Update actions/setup-go action to v6 (main) by @renovate-rancher[bot] in Update actions/setup-go action to v6 (main) webhook#1054
Update module github.com/rancher/dynamiclistener to v0.7.1 (main) by @renovate-rancher[bot] in Update module github.com/rancher/dynamiclistener to v0.7.1 (main) webhook#1067
Update actions/create-github-app-token digest to 6701853 (main) by @renovate-rancher[bot] in Update actions/create-github-app-token digest to 6701853 (main) webhook#1089
[main] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [main] Sync webhook dependencies webhook#1098
Fix crash when rancherd patches local cluster (Split 2.5 and 2.6 workflows to separate workflows #1100) by @jakefhyde in Fix crash when rancherd patches local cluster (#1100) webhook#1105
bump dynamiclistener v0.7.2-rc1 by @marytlf in bump dynamiclistener v0.7.2-rc1 webhook#1114
Bump to lasso v0.2.5-rc.1 and k8s v0.34.1 by @ericpromislow in Bump to lasso v0.2.5-rc.1 and k8s v0.34.1 webhook#1116
Preserves kube-apiserver-arg, webhook prepends PSACT mount path if needed by @apoorvajagtap in Preserves kube-apiserver-arg, webhook prepends PSACT mount path if needed webhook#1096
52095 bump dependencies by @ericpromislow in 52095 bump dependencies webhook#1126
Fix admin can deactivate itself by @raulcabello in Fix admin can deactivate itself webhook#1129
[52223] Validate RKEConfig for provisioning cluster by @jakefhyde in [52223] Validate RKEConfig for provisioning cluster webhook#1137
Fix the check for the password matching username by @pmatseykanets in Fix the check for the password matching username webhook#1138
Add GHA to publish head images by @crobby in Add GHA to publish head images webhook#1141
[main] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [main] Sync webhook dependencies webhook#1146
Ensure operation is update when validating RKEConfig by @jakefhyde in Ensure operation is update when validating RKEConfig webhook#1145
Update docker/login-action action to v3.6.0 (main) by @renovate-rancher[bot] in Update docker/login-action action to v3.6.0 (main) webhook#1119
validate the new project state for consistency, ignore old state by @andreas-kupries in validate the new project state for consistency, ignore old state webhook#1118
removing tls environment var by @marytlf in removing tls environment var webhook#1151
[main] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [main] Sync webhook dependencies webhook#1157
[v0.9] Update GHA references to new branch by @tomleb in [v0.9] Update GHA references to new branch webhook#1159
[release/v0.9] Sync webhook dependencies by @rancher-pr-and-push-webhook[bot] in [release/v0.9] Sync webhook dependencies webhook#1177

New Contributors

@alegrey91 made their first contribution in feat(setting): add validation for auth-user-session-idle-ttl-minutes webhook#510
@bigkevmcd made their first contribution in Fix validation. webhook#666
@andypitcher made their first contribution in Fix create cluster error message webhook#891
@pratikjagrut made their first contribution in fix: add matchCondition to invoke mutation webhook only for cloud-credential secret webhook#912

Full Changelog: rancher/webhook@v0.6.1...v0.9.0

Useful links

Commit comparison: rancher/webhook@v0.9.0-rc.14...v0.9.0
Release v0.9.0-rc.14: https://github.com/rancher/webhook/releases/tag/v0.9.0-rc.14

About this PR

The workflow was triggered by nicholasSUSE.

github-actions · 2025-11-19T16:49:49Z

Validation steps

Ensure all container images have repository and tag on the same level to ensure that all container images are included in rancher-images.txt which are used by airgap customers.

  Ex:-
    longhorn-controller:
      repository: rancher/hardened-sriov-cni
      tag: v2.6.3-build20230913

Add a 👍 (thumbs up) reaction to this comment once done. CI won't pass without this reaction to the github-action bot's latest validation comment.
Approve the PR to run the CI check.

rancher-pr-and-push-webhook bot added 3 commits November 19, 2025 16:49

Bump rancher-webhook to v0.9.0

1a1479e

make charts

83b554c

Add rancher-webhook 108.0.0+up0.9.0 to release.yaml

09e0842

rancher-pr-and-push-webhook bot requested a review from a team as a code owner November 19, 2025 16:49

nicholasSUSE approved these changes Nov 19, 2025

View reviewed changes

briandowns approved these changes Nov 19, 2025

View reviewed changes

nicholasSUSE merged commit 142d9ba into dev-v2.13 Nov 19, 2025
4 checks passed

nicholasSUSE deleted the bump-webhook-19509267873-1 branch November 19, 2025 17:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[dev-v2.13] Bump rancher-webhook to v0.9.0 #6503

[dev-v2.13] Bump rancher-webhook to v0.9.0 #6503

Uh oh!

rancher-pr-and-push-webhook bot commented Nov 19, 2025

Uh oh!

github-actions bot commented Nov 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[dev-v2.13] Bump rancher-webhook to v0.9.0 #6503

[dev-v2.13] Bump rancher-webhook to v0.9.0 #6503

Uh oh!

Conversation

rancher-pr-and-push-webhook bot commented Nov 19, 2025

Release note for v0.9.0

What's Changed

New Contributors

Useful links

About this PR

Uh oh!

github-actions bot commented Nov 19, 2025

Validation steps

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants