feat: Add resource-info-fetcher

CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Added
+
+- Add an initial version of resource-info-fetcher, which is similar to user-info-fetcher, but allows to fetch additional metadata about resource information from a data catalog.
+  For now only DataHub is supported.
+  Also, a rego-rule library has been added to make it easier to call resource-info-fetcher from within OPA.
+  The API (especially the response) might change in the future once more data catalogs are supported ([#863]).
+- Allow specifying the maximum number of cached entries in the user-info-fetcher ([#863]).
+
 ### Changed
 
 - Internal operator refactoring: introduce a build() step in the reconciler that
@@ -12,6 +20,10 @@ All notable changes to this project will be documented in this file.
 - The RBAC ServiceAccount and RoleBinding are now built with the operator-rs `v2::rbac`
   functions and carry the full set of recommended labels ([#861]).
 - All product containers now run with `securityContext.runAsNonRoot` set to `true` to improve security ([#871]).
+- The user-info-fetcher Keycloak and Entra backends now cache their OAuth2 access token for the
+  lifetime the identity provider reports, instead of minting a new one for every user lookup. This
+  removes one round trip per lookup. If the provider rejects the cached token before it expires, it is
+  re-minted and the lookup is retried once ([#863]).
 - Bump `stackable-operator` to 0.116.0 ([#867], [#880]).
 - Environment variable overrides (`envOverrides`) are now applied after all environment
   variables set by the operator. In particular, `CONTAINERDEBUG_LOG_DIRECTORY` can now be
@@ -27,11 +39,15 @@ All notable changes to this project will be documented in this file.
 - Fix a longstanding problem of including empty `categories`, `shortNames` and `additionalPrinterColumns` in the CRDs,
   which could cause problems with GitOps tools (e.g. ArgoCD) reporting a diff in the custom resources.
   See [our internal issue](https://github.com/stackabletech/hdfs-operator/issues/626) and [the fix](https://github.com/kube-rs/kube/pull/2042) for details ([#871]).
+- The file logs of the user-info-fetcher and resource-info-fetcher sidecars are now collected by the
+  Vector agent. Both sidecars log below `/stackable/log`, but did not mount the shared `log` volume,
+  so their logs were unreachable for Vector and not accounted for in the volume's size limit ([#863]).
 - The reconciler now applies resources and derives the cluster status in discrete
   apply and update_status steps for the `opa_controller` ([#872]).
 
 [#852]: https://github.com/stackabletech/opa-operator/pull/852
 [#861]: https://github.com/stackabletech/opa-operator/pull/861
+[#863]: https://github.com/stackabletech/opa-operator/pull/863
 [#867]: https://github.com/stackabletech/opa-operator/pull/867
 [#871]: https://github.com/stackabletech/opa-operator/pull/871
 [#872]: https://github.com/stackabletech/opa-operator/pull/872