securityContext/podSecurityContext defaults on the bundled valkey sub-chart, which were inadvertently dropped during the CRD-chart split (0.3.0). Without them, Kyverno’s disallow-privilege-escalation and restrict-seccomp-strict policies reject the muster-valkey Deployment because the init container reuses the main container’s securityContext and the upstream defaults omit allowPrivilegeEscalation: false and seccompProfile: RuntimeDefault.agentic-platform-crds chart (helm/agentic-platform-crds/): a CRD-only umbrella that vendors the upstream agentgateway-crds (v1.2.1) and muster-crds sub-charts, shipping all five CRDs the platform’s CRs consume. Install it before agentic-platform; CRD and workload lifecycles are now decoupled (two releases in sequence, Flux/Argo-agnostic). The muster CRDs are helm.sh/resource-policy: keep-protected via muster-crds.crds.annotations.architect/push-to-app-catalog job (package-and-push-crds-chart) building and publishing agentic-platform-crds alongside agentic-platform on git tags.agentic-platform into the new agentic-platform-crds chart. agentic-platform now installs zero CRDs — it renders only the CRs (Gateway, AgentgatewayParameters, plus muster’s). helm template agentic-platform emitting any CustomResourceDefinition is a regression.muster.crds.install defaulted to false in agentic-platform values, so the bundled muster sub-chart renders no CRDs (the currently pinned muster 0.1.197 still defaults crds.install: true).Chart.yaml description: CRDs now ship in the companion agentic-platform-crds chart.agentgateway-crds sub-chart dependency (condition: agentgateway-crds.enabled) and the agentgateway-crds: values block from agentic-platform. The CRDs are provided by agentic-platform-crds.Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.212...v0.1.213
Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.211...v0.1.212
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.0.94...v0.0.95
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.0.93...v0.0.94
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.0.92...v0.0.93
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.0.91...v0.0.92
Full Changelog: https://github.com/giantswarm/klaus-oci/compare/v0.0.31...v0.0.32
Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.210...v0.1.211