Release MongoDB Kubernetes Operator v0.8.3

config/manager/manager.yaml

@@ -47,14 +47,14 @@ spec:
         - name: AGENT_IMAGE
           value: quay.io/mongodb/mongodb-agent:12.0.25.7724-1
         - name: VERSION_UPGRADE_HOOK_IMAGE
-          value: quay.io/mongodb/mongodb-kubernetes-operator-version-upgrade-post-start-hook:1.0.7
+          value: quay.io/mongodb/mongodb-kubernetes-operator-version-upgrade-post-start-hook:1.0.8
         - name: READINESS_PROBE_IMAGE
-          value: quay.io/mongodb/mongodb-kubernetes-readinessprobe:1.0.15
+          value: quay.io/mongodb/mongodb-kubernetes-readinessprobe:1.0.17
         - name: MONGODB_IMAGE
           value: mongodb-community-server
         - name: MONGODB_REPO_URL
           value: quay.io/mongodb
-        image: quay.io/mongodb/mongodb-kubernetes-operator:0.8.2
+        image: quay.io/mongodb/mongodb-kubernetes-operator:0.8.3
         imagePullPolicy: Always
         name: mongodb-kubernetes-operator
         resources:

deploy/openshift/operator_openshift.yaml

@@ -49,14 +49,14 @@ spec:
         - name: AGENT_IMAGE
           value: quay.io/mongodb/mongodb-agent:12.0.25.7724-1
         - name: READINESS_PROBE_IMAGE
-          value: quay.io/mongodb/mongodb-kubernetes-readinessprobe:1.0.15
+          value: quay.io/mongodb/mongodb-kubernetes-readinessprobe:1.0.17
         - name: VERSION_UPGRADE_HOOK_IMAGE
-          value: quay.io/mongodb/mongodb-kubernetes-operator-version-upgrade-post-start-hook:1.0.7
+          value: quay.io/mongodb/mongodb-kubernetes-operator-version-upgrade-post-start-hook:1.0.8
         - name: MONGODB_IMAGE
           value: mongo
         - name: MONGODB_REPO_URL
           value: quay.io
-        image: quay.io/mongodb/mongodb-kubernetes-operator:0.8.2
+        image: quay.io/mongodb/mongodb-kubernetes-operator:0.8.3
         imagePullPolicy: Always
         name: mongodb-kubernetes-operator
         resources:

docs/RELEASE_NOTES.md

@@ -3,4 +3,19 @@
 ## MongoDBCommunity Resource
 
 - Changes
-  - MongoDB 7.0.0 and onwards is not supported. Supporting it requires a newer Automation Agent version. Until a new version is available, the Operator will fail all deployments with this version. To ignore this error and force the Operator to reconcile these resources, use `IGNORE_MDB_7_ERROR` environment variable and set it to `true`. 
+  - Introduced support for X.509 authentication for client and agent
+    - `spec.security.authentication.modes` now supports value `X509`
+    - The agent authentication mode will default to the value in `spec.security.authentication.modes` if there is only one specified.
+    - Otherwise, agent authentication will need to be specified through `spec.security.authentication.agentMode`.
+    - When agent authentication is set to `X509`, the field `spec.security.authentication.agentCertificateSecretRef` can be set (default is `agent-certs`).
+    - The secret that `agentCertificateSecretRef` points to should contain a signed X.509 certificate (under the `tls.crt` key) and a private key (under `tls.key`) for the agent.
+    - X.509 users can be added the same way as before under `spec.users`. The `db` field must be set to `$external` for X.509 authentication.
+    - For these users, `scramCredentialsSecretName` and `passwordSecretRef` should **not** be set.
+    - Sample resource [yaml](config/samples/mongodb.com_v1_mongodbcommunity_x509.yaml)
+    - Sample agent certificate [yaml](config/samples/external_access/agent-certificate.yaml)
+  - Add support for configuring [logRotate](https://www.mongodb.com/docs/ops-manager/current/reference/cluster-configuration/#mongodb-instances) on the automation-agent. The settings can be found under `processes[n].logRotate.<setting>`.
+  - Additionally, [systemLog](https://www.mongodb.com/docs/manual/reference/configuration-options/#systemlog-options) can now be configured. In particular the settings: `path`, `destination` and `logAppend`.
+  - MongoDB 7.0.0 and onwards is not supported. Supporting it requires a newer Automation Agent version. Until a new version is available, the Operator will fail all deployments with this version. To ignore this error and force the Operator to reconcile these resources, use `IGNORE_MDB_7_ERROR` environment variable and set it to `true`.
+  - Introduced support for ARM64 architecture
+    - A manifest supporting both AMD64 and ARCH64 architectures is released for each version.
+  - `ubuntu` based images are deprecated, users should move to `ubi` images next release.

release.json

@@ -1,6 +1,6 @@
 {
   "golang-builder-image": "golang:1.21",
-  "mongodb-kubernetes-operator": "0.8.2",
+  "mongodb-kubernetes-operator": "0.8.3",
   "version-upgrade-hook": "1.0.8",
   "readiness-probe": "1.0.17",
   "mongodb-agent": {