v4.0.0

Features

• add syncset controller, feat: syncset readiness (open-policy-agent#3030) #3348,#3030 (alex)
• Update audit and controller manager with pod labels (open-policy-agent#3240) #3348,#3240 (James Bruce)
• add disableAudit helm option (open-policy-agent#3270) #3348,#3270 (Dor Bareket)
• vap generation (open-policy-agent#3266) #3348,#3266 (Rita Zhang)
• enable vap in helm (open-policy-agent#3329) #3348,#3329 (Rita Zhang)
• Enable toggling of deferring to VAP (open-policy-agent#3335) #3348,#3335 (Max Smythe)
• helm: matchConditions added in Validating & MutatingWebhookConfiguration (open-policy-agent#3343) #3348,#3343 (leewoobin789)
• add support for CONNECT operations (open-policy-agent#3459) #3459 (Thomas Chaplin)
• adding scopedenforcementactions (open-policy-agent#3321) #3321 (Jaydipkumar Arvindbhai Gabani)
• separate podlabels in controller-manager and audit deployment (open-policy-agent#3378) #3378 (Robert Bublik)
• add logStatsAdmission and logStatsAudit into Helm chart (open-policy-agent#3526) #3526 (Yuedong Wu)
• Implement config pod status (open-policy-agent#3544) #3544 (avinash patnala)
• Gator sync test support (open-policy-agent#3098) #3098 (Anlan Du)
• add generate operation and wait for VAPB generation (open-policy-agent#3573) #3573 (Jaydip Gabani)
• moving CEL engine to GA (open-policy-agent#3685) #3685 (Jaydip Gabani)

Bug Fixes

• helm: add nindent in objectSelector (open-policy-agent#3071) #3348,#3071 (leewoobin789)
• limit length of ExpansionTemplate names to <64 (open-policy-agent#3078) #3348,#3078 (Davis Haba)
• support DELETE configs validation (open-policy-agent#3089) #3348,#3089 (alex)
• auto signing PR for dco (open-policy-agent#3120) #3348,#3120 (Jaydipkumar Arvindbhai Gabani)
• fixes disable cache flow (open-policy-agent#3132) #3348,#3132 (Nilekh Chaudhari)
• ns exclusion audit from cache (open-policy-agent#3129) #3348,#3129 (alex)
• check name length for all gk resources (open-policy-agent#3094) #3348,#3094 (alex)
• only validate gk res (open-policy-agent#3158) #3348,#3158 (alex)
• Ident podLabels on deployments (open-policy-agent#3153) #3348,#3153 (João Silva)
• log panic in am (open-policy-agent#3174) #3348,#3174 (alex)
• disable psp as default (open-policy-agent#3179) #3348,#3179 (Rita Zhang)
• fixing panic in debug log (open-policy-agent#3244) #3348,#3244 (Jaydipkumar Arvindbhai Gabani)
• fixing panic in error log (open-policy-agent#3246) #3348,#3246 (Jaydipkumar Arvindbhai Gabani)
• Remove validation of constraint template rego (open-policy-agent#3262) #3348,#3262 (Mohammad Zuber Khan)
• update unit test for vap generation; add custom assets for envtest (open-policy-agent#3289) #3348,#3289 (Rita Zhang)
• fixing metrics views (open-policy-agent#3307) #3348,#3307 (Jaydipkumar Arvindbhai Gabani)
• store constraint status audit results in sorted order (open-policy-agent#3293) #3348,#3293 (Prachi Pendse)
• over-restrictive validation of wildcard match patterns (open-policy-agent#3310) #3348,#3310 (Ben Couture)
• fixing artifact upload error (open-policy-agent#3437) #3437 (Jaydipkumar Arvindbhai Gabani)
• adding pod subresources in mutation rules (open-policy-agent#3426) #3426 (Jaydipkumar Arvindbhai Gabani)
• include cel flags on audit deployment (open-policy-agent#3414) #3414 (Noah Reisch)
• only set matchConditions on webhook when not empty (open-policy-agent#3412) #3412 (Martijn van der Ploeg)
• open-policy-agent#3146 Support close open/fail for Ready Tracker & surface errors swallowed by grp.Wait() (open-policy-agent#3308) [open-policy-agent#3308](http...