v1.1.0

This release adds support for two new platforms: bare-metal SNP and bare-metal TDX, both for k3s. Checkout out the documentation on how to get started with Contrast on bare metal!

Also part of this release: workload secrets. These are provided by the Coordinator for each workload and can be used to secure state.

What's Changed

🛠 Breaking changes

• manifest: add CPU model (aka product name) to reference values by @Freax13 in #817
• Derive and pass workload secrets to initializer by @3u13r in #788
• Align policy hash verification between SNP and TDX by @burgerdev in #901
• allow reading logs by default by @Freax13 in #918

🎁 New features

• node-installer: run nydus snapshotter on bare metal platforms by @katexochen in #798
• treewide: allow multiple validators by @msanft in #783

🔧 Other changes

• microsoft.kata*: update to 3.2.0.azl2 / AKS 202406.19.0 by @katexochen in #823
• microsoft.kata-kernel-uvm: 6.1.0.mshv16 -> 6.1.58-mshv4 by @katexochen in #824
• kata.{kata-runtime,kata-agent,kata-image,genpolicy}: 3.7.0 -> 3.8.0 by @katexochen in #844
• AKS: use k8s version 1.30 by @blenessy in #880
• kata: 3.8.0 -> 3.9.0 by @katexochen in #896

📖 Documentation

• docs: update docs to include bare metal SNP by @Freax13 in #846
• docs: add instructions for bare-metal TDX by @Freax13 in #866
• docs: add security considerations by @burgerdev in #909

Upgrading

Contrast currently doesn't come with an upgrade path. To use the newest version of Contrast, undeploy your existing Contrast deployment, install the new CLI and setup a fresh Contrast deployment.

Full Changelog: v1.0.0...v1.1.0