What's Changed

• chore: codecov by @miparnisari in #428
• feat: support configurable PodDisruptionBudget by @davidxia in #422
• docs: document how to try local operator changes by @ivanauth in #424
• feat: warn when version/channel are placed under .spec.config by @ivanauth in #427
• fix: codecov logo by @miparnisari in #430
• Reject pinned versions that are not in the update graph by @vroldanbet in #434
• add mage:lint targets by @ivanauth in #431
• docs: document datastoreTLSSecretName mount path and usage by @ivanauth in #385
• fix: skipMigrations deployments shouldn't claim the real migration hash by @ivanauth in #436
• Update SpiceDB proposed graph to v1.54.0 by @tstirrat15 in #438

New Contributors

• @davidxia made their first contribution in #422

Full Changelog: v1.25.1...v1.26.0

What's Changed

• fix: avoid panic when all credential refs are skipped by @ivanauth in #423

Full Changelog: v1.25.0...v1.25.1

What's Changed

• Add skipTLSWarning config option by @ivanauth in #389
• Enable CockroachDB rangefeeds in example for Watch API by @ivanauth in #413
• adoption: use per-role label keys and indexes to fix multi-secret conflicts by @ecordell in #417
• Update SpiceDB proposed graph to v1.52.0 by @tstirrat15 in #421

New Contributors

• @ivanauth made their first contribution in #389

Full Changelog: v1.24.0...v1.25.0

What's Changed

• chore: update SpiceDB proposed graph to v1.51.1 by @tstirrat15 in #412

Full Changelog: v1.23.0...v1.24.0

Highlights

• Brought in recent SpiceDB versions
• Add explicit secret reference support - this means that you no longer need to have a specific name and structure of the associated secret

What's Changed

• add v1.48.0 to update graph by @miparnisari in #398
• Bump the actions-version group across 1 directory with 2 updates by @dependabot[bot] in #392
• Bump the gomod-version group across 1 directory with 14 updates by @dependabot[bot] in #393
• Bump golang from 1.25.5-alpine to 1.25.6-alpine in the docker-version group by @dependabot[bot] in #399
• Bump the actions-version group with 2 updates by @dependabot[bot] in #402
• Add explicit secret reference support by @ecordell in #403
• chore: add 1.49.2 to graph by @tstirrat15 in #404
• Bump golang from 1.25.6-alpine to 1.26.0-alpine in the docker-version group by @dependabot[bot] in #400

Full Changelog: v1.22.0...v1.23.0

Highlights

• New SpiceDB versions
• Added support for watching endpointslices for peers

What's Changed

• chore: fix linting failures by @miparnisari in #383
• build: add -race to unit tests by @miparnisari in #382
• infra: Add v1.47.1 to the update graph by @barakmich in #388
• chore: use go 1.25.5 by @miparnisari in #394
• support watching endpointslices for peers by @ecordell in #395

New Contributors

• @miparnisari made their first contribution in #383
• @barakmich made their first contribution in #388

Full Changelog: v1.21.0...v1.22.0

Highlights

• Added a PodDisruptionBudget that can help prevent service degradation when deployments would also result in the underlying nodes rolling
• Update the update graph to include the most recent release of SpiceDB

What's Changed

• Generate a PDB that protects SpiceDB replicas by @ecordell in #366
• allow overriding the base-image defined in the update graph by @ecordell in #367
• switch to maxUnavailable=1 and create PDB even if replicas=1 by @vroldanbet in #368
• feat: Add common labels to resources by @adinhodovic in #370
• fix: Slugify version labels by @adinhodovic in #374
• fix: handle boolean values in passthrough config by @THE-BRAHMA in #373
• Bump actions/checkout from 4 to 5 in the actions-version group by @dependabot[bot] in #376
• Bump golang from 1.24-alpine to 1.25-alpine in the docker-version group by @dependabot[bot] in #375
• updates to use same Spanner SDK and emulator as SpiceDB by @vroldanbet in #378
• Add v1.45.4 to update graph by @tstirrat15 in #381

New Contributors

• @adinhodovic made their first contribution in #370
• @THE-BRAHMA made their first contribution in #373

Full Changelog: v1.20.1...v1.21.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.21.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.21.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.21.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.21.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.21.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.21.0
• quay.io/authzed/spicedb-operator:v1.21.0
• ghcr.io/authzed/spicedb-operator:v1.21.0

What's Changed

• Fix golangci-lint config by @tstirrat15 in #365
• update golang.org/x/crypto to v0.38.0 by @jackwellsxyz in #364

New Contributors

• @jackwellsxyz made their first contribution in #364

Full Changelog: v1.20.0...v1.20.1

What's Changed

• Bump the gomod-version group with 9 updates by @dependabot in #356
• Prevent patches from patching out required fields by @ecordell in #360
• propose v1.42.1 in the stable channel by @ecordell in #361

Full Changelog: v1.19.0...v1.20.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.20.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.20.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.20.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.20.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.20.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.20.0
• quay.io/authzed/spicedb-operator:v1.20.0
• ghcr.io/authzed/spicedb-operator:v1.20.0

Highlights

SpiceDB 1.40.1 added to the stable channel!

What's Changed

• Bump golang from 1.23-alpine to 1.24-alpine in the docker-version group by @dependabot in #352
• Bump the gomod-version group across 1 directory with 11 updates by @dependabot in #353
• Add 1.40.1 to update graph by @tstirrat15 in #355

New Contributors

• @tstirrat15 made their first contribution in #355

Full Changelog: v1.18.0...v1.19.0

Install with kubectl

kubectl apply --server-side -f https://github.com/authzed/spicedb-operator/releases/download/v1.19.0/bundle.yaml

Include or modify this release in your own kustomize bundle

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://github.com/authzed/spicedb-operator/config?ref=v1.19.0
images:
  - name: ghcr.io/authzed/spicedb-operator
    newTag: v1.19.0

Install with kustomizer

Release manifests can be found at oci://ghcr.io/authzed/spicedb-operator-manifests:v1.19.0 and can be installed or inspected with kustomizer:

kustomizer apply inventory spicedb-operator --artifact oci://ghcr.io/authzed/spicedb-operator-manifests:v1.19.0

Docker Images

This release's image is available at:

• authzed/spicedb-operator:v1.19.0
• quay.io/authzed/spicedb-operator:v1.19.0
• ghcr.io/authzed/spicedb-operator:v1.19.0