Release v0.14.0

Changes included in v0.14.0:

🔨 Refactoring

• OIDC validation and defaulting #157
  • [OPERATOR][BREAKING] The naming restriction for the default OIDC provider has been removed (was restricted to default before) and it is now defaulted to openmcp instead.
  • [USER][BREAKING] The validation for the spec.iam.oidcProviders field in the ManagedControlPlaneV2 resource has been changed in multiple ways:
    • usernamePrefix and groupsPrefix have been removed and are now always assumed to be <name>:
    • name is not allowed to be set to system (prevents k8s service account impersonation)
    • The regex validation rule for name has been fixed
    • issuer and clientID are now required and the former one must look like an URL
    • Duplicate OIDC provider names or ones that clash with the default OIDC provider are now prevented
• change default scheduler scope to 'Cluster' #153
  • [OPERATOR][BREAKING] The scheduler's default scope has been changed to Cluster (was Namespaced before).
• make logging verbosity case-insensitive #155
  • [OPERATOR][OTHER] It is now possible to specify the logging verbosity in the PlatformService, ClusterProvider, and ServiceProvider resources also in lowercase.

🚀 Features

• sync Cluster conditions to MCP #152
  • [USER][FEATURE] The MCPv2 resource now syncs conditions from its primary Cluster into its own status.
• MCP purpose override #151
  • [USER][FEATURE] The label core.openmcp.cloud/purpose can now be used on ManagedControlPlaneV2 resources to override the default cluster purpose.