Release v1.0.0

This release introduces:

• Compatibility with Crossplane v2
• Support for Crossplane v2 namespace-scoped Managed Resources (MRs) alongside existing cluster-scoped MRs.
• Upgrade to crossplane-runtime v2.0.0.
• Removal of External Secret Store support.

Please review the breaking changes carefully before upgrading.

Namespace-scope MR Support (Crossplane v2-only)

• New namespace-scoped MR APIs are available under the m.upbound.io API group.
• All new APIs are at version v1beta1.
• ProviderConfig
  • ProviderConfig.m.upbound.io is now namespace-scoped.
  • A new cluster-scoped ClusterProviderConfig.m.upbound.io resource was added; new MRs can reference either ProviderConfig or ClusterProviderConfig via spec.providerConfigRef.kind.
  • spec.providerConfigRef defaults to ClusterProviderConfig with name default when omitted.
• spec.writeConnectionSecretToRef and sensitive parameter refs (e.g., spec.forProvider.fooSecretRef) in namespace-scoped MRs are now local secret references (if no namespace is specified, it defaults to the MR's namespace).
• Cross-resource references are now namespace-scoped by default, however, cross-namespace references are allowed.
• This provider will serve both the new namespace-scoped and cluster-scoped APIs.

Removed Features

• External Secret Store support has been removed from all MRs (spec.publishConnectionDetailsTo is no longer available) as the feature has been removed in Crossplane v2.

Other Notable Changes

• SafeStart capability has been added (Crossplane v2-only): Controllers start once their CRD is installed.
• Repository structure changes:
  • apis, controllers, and examples now have scoped subdirectories: cluster and namespaced.
  • Resource configurations are also scoped; updates must be applied to both where relevant.
  • Examples for namespace-scoped MRs are included.

Backward Compatibility Notes

• This provider can be installed in Crossplane v1.x environments:
  • Both cluster-scoped and namespace-scoped CRDs will be installed; namespace-scoped CRDs cannot be composed in v1.x.
  • SafeStart will be disabled.
• When upgrading from v1.x providers, review all breaking resource API changes noted above. The package itself is Crossplane v1.x compatible, but there can be resources that have API changes that need adjustment in your control plane.

Upgrade Guide

1. Review all affected resources listed under Breaking API Changes.
2. Update manifests to reflect renamed/removed properties.
3. For Crossplane v2.x users:
   • Ensure secret and reference configurations align with the new namespace-scoped MR behavior.
   • Decide whether to use ProviderConfig or ClusterProviderConfig.
4. Remove any spec.publishConnectionDetailsTo usage.
5. Validate repository structure changes if maintaining custom resource configurations.

What's Changed

• 20250312 provider maintenance by @ldalorion in https://github.com/upbound/provider-upbound/pull/22
• add visibility and publish fields to Repository resource by @ldalorion in https://github.com/upbound/provider-upbound/pull/23
• Add missing target for build cache step in CI. by @jastang in https://github.com/upbound/provider-upbound/pull/25
• [StepSecurity] Apply security best practices by @stepsecurity-app[bot] in https://github.com/upbound/provider-upbound/pull/27
• set defaults for public and publish values by @ldalorion in https://github.com/upbound/provider-upbound/pull/28
• add basic plumbing for provider startup checks. by @jastang in https://github.com/upbound/provider-upbound/pull/30
• fix(panic): fix panic because of the logger by @haarchri in https://github.com/upbound/provider-upbound/pull/31
• Fix login API endpoint so that it makes use of the API endpoint configured in ProviderConfig by @ulucinar in https://github.com/upbound/provider-upbound/pull/32
• Bump crossplane-runtime to v2 and introduce namespaced MRs by @ulucinar in https://github.com/upbound/provider-upbound/pull/33

New Contributors

• @ldalorion made their first contribution in https://github.com/upbound/provider-upbound/pull/22
• @jastang made their first contribution in https://github.com/upbound/provider-upbound/pull/25
• @stepsecurity-app[bot] made their first contribution in https://github.com/upbound/provider-upbound/pull/27
• @ulucinar made their first contribution in https://github.com/upbound/provider-upbound/pull/32

Full Changelog: https://github.com/upbound/provider-upbound/compare/v0.8.0...v1.0.0