From 6e86e5706324df56d088c569bfd8eca46df0c3c5 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 30 Jun 2026 09:01:49 +0000 Subject: [PATCH 1/2] [tagpr] prepare for the next release --- charts/aws-workload-identity-operator/Chart.yaml | 4 ++-- charts/aws-workload-identity-operator/README.md | 14 +++++++------- charts/aws-workload-identity-operator/values.yaml | 2 +- docs/guides/install-helm.md | 4 ++-- .../ocm-addon-framework-token-file-sidecar.md | 6 +++--- docs/guides/remote-irsa-consumers.md | 10 +++++----- docs/reference/compatibility.md | 14 +++++++------- 7 files changed, 27 insertions(+), 27 deletions(-) diff --git a/charts/aws-workload-identity-operator/Chart.yaml b/charts/aws-workload-identity-operator/Chart.yaml index a452788..faebc80 100644 --- a/charts/aws-workload-identity-operator/Chart.yaml +++ b/charts/aws-workload-identity-operator/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 name: aws-workload-identity-operator description: Helm chart for the AWS Workload Identity Operator type: application -version: 0.1.0 -appVersion: "0.1.0" +version: 0.1.1 +appVersion: "0.1.1" kubeVersion: ">=1.35.0-0" home: https://github.com/appthrust/aws-workload-identity-operator sources: diff --git a/charts/aws-workload-identity-operator/README.md b/charts/aws-workload-identity-operator/README.md index b8586b6..5bb2ad3 100644 --- a/charts/aws-workload-identity-operator/README.md +++ b/charts/aws-workload-identity-operator/README.md @@ -11,10 +11,10 @@ provider ARN. ## Install -Chart version `0.1.0` is the targeted first release. The chart OCI artifact at +Chart version `0.1.1` is the targeted first release. The chart OCI artifact at `oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator` and the -`ghcr.io/appthrust/aws-workload-identity-operator:0.1.0` image are not -published until the `v0.1.0` tag is cut; until then, install from +`ghcr.io/appthrust/aws-workload-identity-operator:0.1.1` image are not +published until the `v0.1.1` tag is cut; until then, install from `./charts/aws-workload-identity-operator` with a locally built image (see [Local Image Override](../../docs/guides/install-helm.md#local-image-override)). @@ -23,7 +23,7 @@ After the first tag is cut, install the chart from GHCR's OCI registry: ```sh helm upgrade --install aws-workload-identity-operator \ oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator \ - --version 0.1.0 \ + --version 0.1.1 \ --namespace aws-workload-identity-operator-system \ --create-namespace ``` @@ -141,14 +141,14 @@ See [Hub-Side Remote IRSA Consumers](../../docs/guides/remote-irsa-consumers.md# image: registry: ghcr.io repository: appthrust/aws-workload-identity-operator - tag: "0.1.0" + tag: "0.1.1" digest: "" ``` Release automation should keep the default `image.tag` aligned with the chart version. When `image.tag` is empty, the chart uses `appVersion`. The default -`0.1.0` tag is the targeted first release and is not published until the -`v0.1.0` tag is cut; see the pre-release note in [Install](#install) for the +`0.1.1` tag is the targeted first release and is not published until the +`v0.1.1` tag is cut; see the pre-release note in [Install](#install) for the local checkout workaround. ## Runtime Defaults diff --git a/charts/aws-workload-identity-operator/values.yaml b/charts/aws-workload-identity-operator/values.yaml index 2ec3730..fb900e1 100644 --- a/charts/aws-workload-identity-operator/values.yaml +++ b/charts/aws-workload-identity-operator/values.yaml @@ -14,7 +14,7 @@ image: repository: appthrust/aws-workload-identity-operator # Empty tag falls back to .Chart.AppVersion (see _helpers.tpl: awio.image), # making Chart.yaml the single source of version truth across releases. - tag: "0.1.0" + tag: "0.1.1" digest: "" pullPolicy: IfNotPresent pullSecrets: [] diff --git a/docs/guides/install-helm.md b/docs/guides/install-helm.md index 3ccf1b9..15608cd 100644 --- a/docs/guides/install-helm.md +++ b/docs/guides/install-helm.md @@ -2,7 +2,7 @@ The first public tag has not been cut yet, so the OCI artifact below is not yet published; the command becomes installable once the release lands. The -planned release tag is `v0.1.0`; the Helm chart version is `0.1.0`. Future +planned release tag is `v0.1.1`; the Helm chart version is `0.1.1`. Future release pull requests update this command through tagpr version sync. Install the chart from GHCR's OCI registry: @@ -10,7 +10,7 @@ Install the chart from GHCR's OCI registry: ```sh helm upgrade --install aws-workload-identity-operator \ oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator \ - --version 0.1.0 \ + --version 0.1.1 \ --namespace aws-workload-identity-operator-system \ --create-namespace ``` diff --git a/docs/guides/ocm-addon-framework-token-file-sidecar.md b/docs/guides/ocm-addon-framework-token-file-sidecar.md index af36aaa..5a1794c 100644 --- a/docs/guides/ocm-addon-framework-token-file-sidecar.md +++ b/docs/guides/ocm-addon-framework-token-file-sidecar.md @@ -170,10 +170,10 @@ For Kubernetes native sidecars, place `aws-irsa-sidecar` in `initContainers` with `restartPolicy: Always`. If the hosting cluster does not support native sidecars, run the same container as a normal long-running sidecar. -The `aws-irsa-sidecar:0.1.0` tag below points at the planned first-release +The `aws-irsa-sidecar:0.1.1` tag below points at the planned first-release coordinates for AWIO. The first public tag has not been cut yet, so the OCI artifact at those coordinates is not yet published; the example becomes -pullable once `v0.1.0` lands. +pullable once `v0.1.1` lands. ```yaml apiVersion: apps/v1 @@ -208,7 +208,7 @@ spec: secretName: {{ .ManagedKubeConfigSecret }} initContainers: - name: aws-irsa-sidecar - image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.0 + image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.1 restartPolicy: Always command: - /aws-irsa-sidecar diff --git a/docs/guides/remote-irsa-consumers.md b/docs/guides/remote-irsa-consumers.md index 46e4bbd..f054ba6 100644 --- a/docs/guides/remote-irsa-consumers.md +++ b/docs/guides/remote-irsa-consumers.md @@ -146,10 +146,10 @@ template value as volume `managed-kubeconfig-secret` at For a manifest-level guide focused only on addon-framework hosted agents, see [OCM Add-On Framework IRSA Sidecar](ocm-addon-framework-token-file-sidecar.md). -The `aws-irsa-sidecar:0.1.0` tag below points at the planned first-release +The `aws-irsa-sidecar:0.1.1` tag below points at the planned first-release coordinates for AWIO. The first public tag has not been cut yet, so the OCI artifact at those coordinates is not yet published; the example becomes -pullable once `v0.1.0` lands. +pullable once `v0.1.1` lands. ```yaml apiVersion: apps/v1 @@ -182,7 +182,7 @@ spec: secretName: {{ .ManagedKubeConfigSecret }} initContainers: - name: aws-irsa-sidecar - image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.0 + image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.1 restartPolicy: Always args: - --kubeconfig=/managed/config/kubeconfig @@ -236,7 +236,7 @@ The `credential_process` value in the ConfigMap intentionally stays on one physical AWS shared-config line. The AWS SDK executes that line as the command; the multi-line examples above are only for readability in this guide. -The `remote-irsa-tools:0.1.0` tag below points at the same planned +The `remote-irsa-tools:0.1.1` tag below points at the same planned first-release coordinates as the sidecar earlier on this page. No public tag has been cut yet, so that OCI artifact is not yet published either. @@ -269,7 +269,7 @@ spec: volumes: - name: remote-irsa-tools image: - reference: ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.0 + reference: ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.1 - name: ocm-cp-creds image: reference: quay.io/open-cluster-management/cp-creds:latest diff --git a/docs/reference/compatibility.md b/docs/reference/compatibility.md index 91a17d9..3efc285 100644 --- a/docs/reference/compatibility.md +++ b/docs/reference/compatibility.md @@ -1,7 +1,7 @@ # Compatibility And Prerequisites -This documentation targets the upcoming `v0.1.0` release. The chart version -is `0.1.0` and the planned release tag is `v0.1.0`. No public tag has been +This documentation targets the upcoming `v0.1.1` release. The chart version +is `0.1.1` and the planned release tag is `v0.1.1`. No public tag has been cut yet, so the OCI artifacts under these coordinates are not yet published. ## Platform Matrix @@ -40,9 +40,9 @@ Optional `EKSPodIdentity` facts: ## Versioned Artifacts -| Artifact | `v0.1.0` reference | +| Artifact | `v0.1.1` reference | | --- | --- | -| Helm chart | `oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator --version 0.1.0` | -| Operator image tag default | `ghcr.io/appthrust/aws-workload-identity-operator:0.1.0` | -| Remote IRSA tools examples | `ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.0` | -| AWS IRSA sidecar examples | `ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.0` | +| Helm chart | `oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator --version 0.1.1` | +| Operator image tag default | `ghcr.io/appthrust/aws-workload-identity-operator:0.1.1` | +| Remote IRSA tools examples | `ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.1` | +| AWS IRSA sidecar examples | `ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.1` | From 5b5b9c99b3218428edb68879b66d4f1d7a5cf5ff Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 30 Jun 2026 09:01:49 +0000 Subject: [PATCH 2/2] [tagpr] update CHANGELOG.md --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4dc68c6..278b8f7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,2 +1,3 @@ # Changelog +## [v0.1.1](https://github.com/appthrust/aws-workload-identity-operator/compare/v0.1.0...v0.1.1) - 2026-06-30