appthrust · github-actions · Jun 30, 2026 · Jun 30, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,2 +1,3 @@
 # Changelog
 
+## [v0.1.1](https://github.com/appthrust/aws-workload-identity-operator/compare/v0.1.0...v0.1.1) - 2026-06-30
diff --git a/charts/aws-workload-identity-operator/Chart.yaml b/charts/aws-workload-identity-operator/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: aws-workload-identity-operator
 description: Helm chart for the AWS Workload Identity Operator
 type: application
-version: 0.1.0
-appVersion: "0.1.0"
+version: 0.1.1
+appVersion: "0.1.1"
 kubeVersion: ">=1.35.0-0"
 home: https://github.com/appthrust/aws-workload-identity-operator
 sources:

diff --git a/charts/aws-workload-identity-operator/README.md b/charts/aws-workload-identity-operator/README.md
@@ -11,10 +11,10 @@ provider ARN.
 
 ## Install
 
-Chart version `0.1.0` is the targeted first release. The chart OCI artifact at
+Chart version `0.1.1` is the targeted first release. The chart OCI artifact at
 `oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator` and the
-`ghcr.io/appthrust/aws-workload-identity-operator:0.1.0` image are not
-published until the `v0.1.0` tag is cut; until then, install from
+`ghcr.io/appthrust/aws-workload-identity-operator:0.1.1` image are not
+published until the `v0.1.1` tag is cut; until then, install from
 `./charts/aws-workload-identity-operator` with a locally built image (see
 [Local Image Override](../../docs/guides/install-helm.md#local-image-override)).
 
@@ -23,7 +23,7 @@ After the first tag is cut, install the chart from GHCR's OCI registry:
 ```sh
 helm upgrade --install aws-workload-identity-operator \
   oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator \
-  --version 0.1.0 \
+  --version 0.1.1 \
   --namespace aws-workload-identity-operator-system \
   --create-namespace
 ```
@@ -141,14 +141,14 @@ See [Hub-Side Remote IRSA Consumers](../../docs/guides/remote-irsa-consumers.md#
 image:
   registry: ghcr.io
   repository: appthrust/aws-workload-identity-operator
-  tag: "0.1.0"
+  tag: "0.1.1"
   digest: ""
 ```
 
 Release automation should keep the default `image.tag` aligned with the chart
 version. When `image.tag` is empty, the chart uses `appVersion`. The default
-`0.1.0` tag is the targeted first release and is not published until the
-`v0.1.0` tag is cut; see the pre-release note in [Install](#install) for the
+`0.1.1` tag is the targeted first release and is not published until the
+`v0.1.1` tag is cut; see the pre-release note in [Install](#install) for the
 local checkout workaround.
 
 ## Runtime Defaults

diff --git a/charts/aws-workload-identity-operator/values.yaml b/charts/aws-workload-identity-operator/values.yaml
@@ -14,7 +14,7 @@ image:
   repository: appthrust/aws-workload-identity-operator
   # Empty tag falls back to .Chart.AppVersion (see _helpers.tpl: awio.image),
   # making Chart.yaml the single source of version truth across releases.
-  tag: "0.1.0"
+  tag: "0.1.1"
   digest: ""
   pullPolicy: IfNotPresent
   pullSecrets: []

diff --git a/docs/guides/install-helm.md b/docs/guides/install-helm.md
@@ -2,15 +2,15 @@
 
 The first public tag has not been cut yet, so the OCI artifact below is not
 yet published; the command becomes installable once the release lands. The
-planned release tag is `v0.1.0`; the Helm chart version is `0.1.0`. Future
+planned release tag is `v0.1.1`; the Helm chart version is `0.1.1`. Future
 release pull requests update this command through tagpr version sync.
 
 Install the chart from GHCR's OCI registry:
 
 ```sh
 helm upgrade --install aws-workload-identity-operator \
   oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator \
-  --version 0.1.0 \
+  --version 0.1.1 \
   --namespace aws-workload-identity-operator-system \
   --create-namespace
 ```

diff --git a/docs/guides/ocm-addon-framework-token-file-sidecar.md b/docs/guides/ocm-addon-framework-token-file-sidecar.md
@@ -170,10 +170,10 @@ For Kubernetes native sidecars, place `aws-irsa-sidecar` in `initContainers`
 with `restartPolicy: Always`. If the hosting cluster does not support native
 sidecars, run the same container as a normal long-running sidecar.
 
-The `aws-irsa-sidecar:0.1.0` tag below points at the planned first-release
+The `aws-irsa-sidecar:0.1.1` tag below points at the planned first-release
 coordinates for AWIO. The first public tag has not been cut yet, so the OCI
 artifact at those coordinates is not yet published; the example becomes
-pullable once `v0.1.0` lands.
+pullable once `v0.1.1` lands.
 
 ```yaml
 apiVersion: apps/v1
@@ -208,7 +208,7 @@ spec:
             secretName: {{ .ManagedKubeConfigSecret }}
       initContainers:
         - name: aws-irsa-sidecar
-          image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.0
+          image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.1
           restartPolicy: Always
           command:
             - /aws-irsa-sidecar

diff --git a/docs/guides/remote-irsa-consumers.md b/docs/guides/remote-irsa-consumers.md
@@ -146,10 +146,10 @@ template value as volume `managed-kubeconfig-secret` at
 For a manifest-level guide focused only on addon-framework hosted agents, see
 [OCM Add-On Framework IRSA Sidecar](ocm-addon-framework-token-file-sidecar.md).
 
-The `aws-irsa-sidecar:0.1.0` tag below points at the planned first-release
+The `aws-irsa-sidecar:0.1.1` tag below points at the planned first-release
 coordinates for AWIO. The first public tag has not been cut yet, so the OCI
 artifact at those coordinates is not yet published; the example becomes
-pullable once `v0.1.0` lands.
+pullable once `v0.1.1` lands.
 
 ```yaml
 apiVersion: apps/v1
@@ -182,7 +182,7 @@ spec:
             secretName: {{ .ManagedKubeConfigSecret }}
       initContainers:
         - name: aws-irsa-sidecar
-          image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.0
+          image: ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.1
           restartPolicy: Always
           args:
             - --kubeconfig=/managed/config/kubeconfig
@@ -236,7 +236,7 @@ The `credential_process` value in the ConfigMap intentionally stays on one
 physical AWS shared-config line. The AWS SDK executes that line as the command;
 the multi-line examples above are only for readability in this guide.
 
-The `remote-irsa-tools:0.1.0` tag below points at the same planned
+The `remote-irsa-tools:0.1.1` tag below points at the same planned
 first-release coordinates as the sidecar earlier on this page. No public tag
 has been cut yet, so that OCI artifact is not yet published either.
 
@@ -269,7 +269,7 @@ spec:
       volumes:
         - name: remote-irsa-tools
           image:
-            reference: ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.0
+            reference: ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.1
         - name: ocm-cp-creds
           image:
             reference: quay.io/open-cluster-management/cp-creds:latest

diff --git a/docs/reference/compatibility.md b/docs/reference/compatibility.md
@@ -1,7 +1,7 @@
 # Compatibility And Prerequisites
 
-This documentation targets the upcoming `v0.1.0` release. The chart version
-is `0.1.0` and the planned release tag is `v0.1.0`. No public tag has been
+This documentation targets the upcoming `v0.1.1` release. The chart version
+is `0.1.1` and the planned release tag is `v0.1.1`. No public tag has been
 cut yet, so the OCI artifacts under these coordinates are not yet published.
 
 ## Platform Matrix
@@ -40,9 +40,9 @@ Optional `EKSPodIdentity` facts:
 
 ## Versioned Artifacts
 
-| Artifact | `v0.1.0` reference |
+| Artifact | `v0.1.1` reference |
 | --- | --- |
-| Helm chart | `oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator --version 0.1.0` |
-| Operator image tag default | `ghcr.io/appthrust/aws-workload-identity-operator:0.1.0` |
-| Remote IRSA tools examples | `ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.0` |
-| AWS IRSA sidecar examples | `ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.0` |
+| Helm chart | `oci://ghcr.io/appthrust/helm-charts/aws-workload-identity-operator --version 0.1.1` |
+| Operator image tag default | `ghcr.io/appthrust/aws-workload-identity-operator:0.1.1` |
+| Remote IRSA tools examples | `ghcr.io/appthrust/aws-workload-identity-operator/remote-irsa-tools:0.1.1` |
+| AWS IRSA sidecar examples | `ghcr.io/appthrust/aws-workload-identity-operator/aws-irsa-sidecar:0.1.1` |
Original file line number	Diff line number	Diff line change
		@@ -1,2 +1,3 @@
		# Changelog

		## [v0.1.1](https://github.com/appthrust/aws-workload-identity-operator/compare/v0.1.0...v0.1.1) - 2026-06-30