Bundle Builder v2 (#578)

* Add group fetcher container

* Spike group fetcher functionality

* Rename group fetcher to user info fetcher

* Generalize enrichment endpoints to have room for arbitrary user info

* Expose user roles

* Make UIF configurable

* Make UIF credentials configurable too

* OPA 0.45 -> 0.51

* Broke out UIF into its own crate

* UIF error handling

* Ingest custom attributes

* Shut down on SIGTERM

* Split keycloak backend out into separate module

* Fix UIF startup when using none backend

* Rename GroupMembershipRequest to UserInfoRequest

* Cache fetched UserInfo

* Switch UIF to also use workspace dependencies

* Configurable UIF cache ttl

* UIF crate metadata

* Move userInfo rule into helm chart

* Turn UIF custom attributes into a multidict

* UIF smoke test

* Remove rules from Helm chart until we have a better way to deploy them

* Lint-b-gone

* Update CRD

* UIF readme

* SNAFU error for UIF config

* Revert Cmd wrapper enum

* docs

* Prototype of new bundle builder

* Include cm ns in bundle path

* Update bundle builder to Axum 0.7

* Disable unused futures 0.1.x compat layer

* Deploy bundle builder v2

* Fix bundle builder log collection

* Avoid cloning bundle for status requests

* Handle and report errors

* Respect watch namespace

* Fix bundle builder Cargo metadata

* Move dependencies into the workspace level

* Loosen dependency bounds for consistency

* Formatting

* Log bundled files

* Log bundle invalidations

* Upgrade to operator-rs main and Kube-rs 0.92

* Switch bundle builder from multilog to tracing-appender

* Log bundle builder output as JSON

* Update operator-rs

* Regenerate Nix definitions

* Changelog

* Bump operator-rs

* Update operator-rs

* Use released build of operator-rs

* Remove dead bundle builder log bytes constant

* Move bundle builder bugfix to unreleased

* Add comment about bundle builder log rotation

Author: nightkr

CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Changed
+
+- Rewrite of the OPA bundle builder ([#578]).
+
+### Fixed
+
+- Bundle builder should no longer keep serving deleted rules until it is restarted ([#578]).
+
+[#578]: https://github.com/stackabletech/opa-operator/pull/578
+
 ## [24.7.0] - 2024-07-24
 
 ### Added