v4.0.0

What's Changed

🚀 Features

• feat(api): add ExternalHost property for routes by @ebaron in #877
• feat(tls): generate client certificates for agents by @ebaron in #938
• feat(agent): add nginx proxy for agent communication by @ebaron in #957
• feat(insights): use separate deployment for Insights by @ebaron in #962
• feat(storage): enable at-rest encryption on storage container by @andrewazores in #963
• feat(service): add part-of, instance selector labels and appProtocol by @andrewazores in #974
• feat(agent): add pod mutation webhook to inject agent by @ebaron in #991
• feat(agent): add CRD option to disable hostname verification by @ebaron in #1011
• feat(agent): add object selector for pod webhook by @ebaron in #1018
• feat(agent): add CRD property and label for agent callback by @ebaron in #1021
• feat(agent): add label to control which container is mutated by @ebaron in #1025
• feat(deploy): split Deployments by @andrewazores in #1009
• feat(consoleplugin): operator installs and configures ConsolePlugin by @andrewazores in #1023
• feat(agent): add label for read-only agent by @ebaron in #1029
• feat(agent): add label for Java options variable name by @ebaron in #1035
• feat(agent): add option for init container resources by @ebaron in #1037
• feat(agent): add labels for Harvester exit uploads (backport #1050) by @mergify in #1056
• feat(agent): add toggle to allow insecure connections (backport #1076) by @mergify in #1078

🔧 Fixes

• fix(versions): regenerate for new dev version by @andrewazores in #873
• test(scorecard): fix failing built-in olm scorecard test by @tthvo in #868
• fix(grafana): use relative dashboard path by @andrewazores in #874
• fix(tls): detect modified CA and reissue certs by @ebaron in #897
• ci(build): query scorecard image tags with registry v2 api by @tthvo in #915
• fix(webhook): make label selectors unambiguous by @ebaron in #926
• fix(db): correct hibernate config after Flyway introduction by @andrewazores in #939
• fix(olm): rename deployment to handle immutable selector by @ebaron in #943
• fix(watch): enqueue CR when target namespace is deleted by @ebaron in #950
• fix(tls): use fixed-length cert CommonNames by @andrewazores in #968
• fix(plugin): check OpenShift version compatibility by @ebaron in #1031
• fix(service): set appProtocol to https if TLS enabled by @andrewazores in #1034
• fix(rbac): remove unused permissions from ClusterRole by @ebaron in #1036
• fix(oauth): make OAuth2 Proxy config map mutable by @ebaron in #1038
• fix(insights): correct environment variable order in overlay (backport #1073) by @mergify in #1074
• fix(agent): don't require TLS when cert-manager is disabled (backport #1077) by @mergify in #1079

📄 Documentation

• chore(docs): update links to point to 3.0 by @mwangggg in #893
• docs(deploy): add instructions on how to obtain static manifests by @tthvo in #903
• chore(docs): update doc/config.md to reflect 3.0 changes by @mwangggg in #922
• docs(readme): point user to OperatorHub for installation, move development steps to end by @andrewazores in #980
• docs(quickstart): add agent autoconfig quickstart (backport #1048) by @mergify in #1061
• docs(links): update to point to 4.0.0 tag (backport #1065) by @mergify in #1066

⚙️ Maintenance

• build(deps): bump k8s.io/client-go from 0.28.9 to 0.28.10 by @dependabot in #862
• chore(release): prepare for release by @andrewazores in #863
• build(deps): bump sigs.k8s.io/controller-runtime from 0.16.5 to 0.16.6 by @dependabot in #859
• ci(workflow): only attempt push if repo owner is upstream project by @andrewazores in #871
• build(deps): bump github.com/go-logr/logr from 1.4.1 to 1.4.2 by @dependabot in #855
• chore(csv): bump csv minKubeVersion to 1.21.0 by @tthvo in #882
• build(deps): bump github.com/cert-manager/cert-manager from 1.13.5 to 1.13.6 by @dependabot in #856
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.3 by @dependabot in #860
• build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 by @dependabot in #861
• chore(api): deprecate v1beta1 API version by @ebaron in #880
• build(deps): bump k8s.io/client-go from 0.28.10 to 0.28.11 by @dependabot in #890
• test(img): correct test to assert pull policy on db and storage containers by @andrewazores in #905
• chore(csv): bump csv min k8s version to 1.25 by @tthvo in #910
• test(scorecard): preserve CR when retrying on conflict by @ebaron in #912
• chore(rename): update references after repo rename by @andrewazores in #918
• build(deps): bump k8s.io/client-go from 0.28.11 to 0.28.13 by @dependabot in #931
• chore(scorecard): bump Scorecard image tag by @ebaron in #945
• build(deps): bump k8s.io/client-go from 0.28.13 to 0.28.15 by @dependabot in #965
• test(sample): update sample application images and configs by @andrewazores in #928
• test(scorecard): adjust scorecard report generation expectation by @andrewazores in #985
• test(webhook): add test for Cryostat defaulter webhook by @ebaron in #988
• test(sampleapp): configure Cryostat Agent sample app to use k8s serviceaccount token auth by @andrewazores in #983
• build(deps): bump github.com/cert-manager/cert-manager from 1.13.6 to 1.15.4 by @dependabot in #972
• ci(criu): add CRIU PPA for Podman dependency by @andrewazores in #998
• build(oci): switch builder image to ubi9 go toolset by @andrewazores in #997
• chore(base): upgrade to UBI9 by @andrewazores in #953
• build(deps): bump golang.org/x/net from 0.26.0 to 0.33.0 by @dependabot in #1002
• build(deps): bump k8s.io/client-go from 0.30.8 to 0.30.9 by @dependabot in #1014
• build(deps): bump sigs.k8s.io/controller-runtime from 0.18.6 to 0.18.7 by @dependabot in #999
• build(deps): bump github.com/cert-manager/cert-manager from 1.15.4 to 1.15.5 by @dependabot in #1013
• ci(bundle): build plain-k8s and OCP bundle modes by @andrewazores in #1027
• ci(bundle): regenerate bundle before building image by @andrewazores in #1032
• chore(plugin): set default requests/limits and replicas by @andrewazores in #1040
• build(nginx): update Nginx to UBI9 by @ebaron in #1041
• build(agent): add agent init image to related images by @ebaron in #1042
• build(versions): set versions for 4.0 release branch by @ebaron in #1044
• build(insights): add Kustomize patch to adjust pull policy (backport #1045) by @mergify in #1046
• test(scorecard): disable NetworkPolicies during scorecard testing (backport #1058) by @mergify in #1060
• chore(scorecard): bump Scorecard tag (backport #1063) by @mergify in #1064
• chore(release): set versions for 4.0.0 by @andrewazores in #1081
• ci(bundle): correct bundle tagging on release branches (backport #1083) by @mergify in #1084
• test(agent): fix failing pull policy test on release (backport #1085) by @mergify in #1086

Full Changelog: v3.0.0...v4.0.0