v4.1.0

What's Changed

🚀 Features

• feat(agent): add labels for Harvester exit uploads by @andrewazores in #1050
• feat(agent): add toggle to allow insecure connections by @andrewazores in #1076
• feat(agent): add default log level and control label by @andrewazores in #1091
• feat(deploy): add secret/config map hash to pod templates by @ebaron in #1112
• feat(credentials): Implement declarative stored credentials by @Josh-Matsuoka in #1089
• feat(reports): configure reports for presigned recording transfer by @andrewazores in #1102
• feat(network): implement optional cryostat egress network policy by @andrewazores in #1051
• feat(fips): detect FIPS clusters and use TLSv1.3 by @ebaron in #1154
• feat(deploy): apply default resource limits by @ebaron in #1156
• feat(deploy): increase container resource limits by @andrewazores in #1157
• feat(datasource): configure jfr-datasource for presigned recording transfer by @andrewazores in #1159
• feat(storage): add configuration for external object storage provider by @andrewazores in #1146
• feat(storage): add toggle to disable presigned file transfers by @andrewazores in #1168
• feat(jmcagent): Add support for declarative jmc agent probe templates by @Josh-Matsuoka in #1179
• feat(rules): Add support for declarative automated rules by @Josh-Matsuoka in #1176
• feat(fips): use modern keystore crypto algorithms by @ebaron in #1177

🔧 Fixes

• fix(insights): correct environment variable order in overlay by @ebaron in #1073
• fix(agent): don't require TLS when cert-manager is disabled by @ebaron in #1077
• fix(reports): correct reports service URL configuration key by @andrewazores in #1101
• fix(agent): pass log level as part of javaagent arg by @ebaron in #1120
• fix(cryostat): use container-internal curl cmd liveness probe by @andrewazores in #1138
• fix(plugin): add delete permission for ConsolePlugins by @ebaron in #1144
• fix(insights): update proxy service URL by @ebaron in #1163
• fix(jmx): mount cryostat keystore volume to JMX client keystore directory by @andrewazores in #1171
• fix(diagnostics): Add heap dumps upload path to nginx allowed paths config by @Josh-Matsuoka in #1174
• fix(storage): disable checksum validation when deploying managed storage (backport #1190) by @mergify[bot] in #1194

📄 Documentation

• docs(quickstart): add agent autoconfig quickstart by @andrewazores in #1048
• docs(links): update to point to 4.0.0 tag by @andrewazores in #1065

⚙️ Maintenance

• build(versions): bump versions for 4.1.0 development by @ebaron in #1043
• build(insights): add Kustomize patch to adjust pull policy by @ebaron in #1045
• test(scorecard): disable NetworkPolicies during scorecard testing by @andrewazores in #1058
• chore(scorecard): bump Scorecard tag by @ebaron in #1063
• ci(bundle): correct bundle tagging on release branches by @andrewazores in #1083
• test(agent): fix failing pull policy test on release by @ebaron in #1085
• build(deps): bump k8s.io/client-go from 0.30.9 to 0.30.12 by @dependabot[bot] in #1097
• chore(scorecard): add '-list' flag and implement wildcard test selection by @andrewazores in #1105
• test(scorecard): verify database and storage deployment availability by @tthvo in #1107
• build(deps): bump golang.org/x/net from 0.34.0 to 0.38.0 by @dependabot[bot] in #1093
• build(deps): bump k8s.io/client-go from 0.30.12 to 0.30.13 by @dependabot[bot] in #1116
• chore(discovery): replace Endpoints with EndpointSlices by @andrewazores in #1094
• test(samples): add liveness/readiness probes to sample apps by @andrewazores in #1098
• build(deps): bump github.com/go-logr/logr from 1.4.2 to 1.4.3 by @dependabot[bot] in #1122
• build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot[bot] in #1062
• build(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.27.0 by @dependabot[bot] in #1135
• build(deps): bump k8s.io/client-go from 0.30.13 to 0.30.14 by @dependabot[bot] in #1130
• chore(oauth): deploy upstream openshift oauth-proxy build by @andrewazores in #1148
• chore(version): configure release branch for 4.1 by @ebaron in #1182
• chore(release): set versions for 4.1.0 by @andrewazores in #1207

Others

• fix(cert): avoid owner ref conflicts with cert-manager (backport #1183) by @mergify[bot] in #1186
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 (backport #1180) by @mergify[bot] in #1187
• fix(tls): revert change to keystore password key (backport #1192) by @mergify[bot] in #1195
• fix(secret): add access key to existing storage secret (backport #1193) by @mergify[bot] in #1196
• chore(storage): increase default PVC size (backport #1202) by @mergify[bot] in #1203

Full Changelog: v4.0.3...v4.1.0