metalbear-co · Razz4780 · Dec 10, 2024 · Dec 10, 2024 · Dec 10, 2024
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,31 @@ This project uses [*towncrier*](https://towncrier.readthedocs.io/) and the chang
 
 <!-- towncrier release notes start -->
 
+## [3.127.0](https://github.com/metalbear-co/mirrord/tree/3.127.0) - 2024-12-10
+
+
+### Added
+
+- `MirrordPolicy` can now block traffic mirroring (requires operator support).
+
+
+### Changed
+
+- Updated dependencies.
+  [#2952](https://github.com/metalbear-co/mirrord/issues/2952)
+
+
+### Fixed
+
+- Fixed link to operator docs.
+
+
+### Internal
+
+- Added `mirrord-protocol` message for rejecting mirror port subscription due
+  to `MirrordPolicy`.
+- Updated hickory dependency version.
+
 ## [3.126.0](https://github.com/metalbear-co/mirrord/tree/3.125.3) - 2024-12-06
 
 

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -27,7 +27,7 @@ resolver = "2"
 
 # latest commits on rustls suppress certificate verification
 [workspace.package]
-version = "3.126.0"
+version = "3.127.0"
 edition = "2021"
 license = "MIT"
 readme = "README.md"

diff --git a/changelog.d/+block-mirroring-policy.added.md b/changelog.d/+block-mirroring-policy.added.md
diff --git a/changelog.d/+block-mirroring-response-error.internal.md b/changelog.d/+block-mirroring-response-error.internal.md
diff --git a/changelog.d/+link-to-operator-docs.fixed.md b/changelog.d/+link-to-operator-docs.fixed.md
diff --git a/changelog.d/+update-deps.internal.md b/changelog.d/+update-deps.internal.md
diff --git a/changelog.d/2952.changed.md b/changelog.d/2952.changed.md
diff --git a/mirrord/operator/src/setup.rs b/mirrord/operator/src/setup.rs
@@ -724,7 +724,7 @@ impl OperatorRole {
         let rules = vec![
             // Allow the operator to fetch Secrets in the operator's namespace
             PolicyRule {
-                api_groups: Some(vec![MirrordKafkaClientConfig::group(&()).into_owned()]),
+                api_groups: Some(vec!["".to_owned()]),
                 resources: Some(vec!["secrets".to_owned()]),
                 verbs: ["get", "list", "watch"]
                     .into_iter()