Connectivity

  • Changes

    • Add instance label to default topologySpreadConstraints label selector
    • Update kong/kubernetes-ingress-controller to 2.8.1.
    • Suggest using giantswarm/kong-gateway:2.8.2.3-debian as enterprise container image.
    • Use /readyz path for ingress controller readiness check.
    • Update kubernetes api token secret with projected volume. This should fix problems with empty or expired ServiceAccount tokens.
  • Added

    • Metrics: Add app.kubernetes.io/component to selector. (#393)

    Removed

    • HPA: Remove controller.autoscaling.apiVersion, use capabilites instead. (#392)
  • Fixed

    • Hardcode external-dns.name default name dropping the -app suffix (#235)
  • Added

    • Service: Add CAPA support. (#380)
    • Webhook: Use cert-manager for certificate lifecycle management. (#386)
    • HPA: Make apiVersion configurable. (#387)
    • Metrics: Align to upstream. (#388)
      • Values: Align to upstream.
      • Service: Make optional, enabled by default.
      • Service: Implement controller.metrics.service.annotations.
      • Service: Implement controller.metrics.service.type.
      • Service: Implement controller.metrics.service.clusterIP.
      • Service: Implement controller.metrics.service.externalIPs.
      • Service: Implement controller.metrics.service.loadBalancerIP.
      • Service: Implement controller.metrics.service.loadBalancerSourceRanges.
      • Service: Implement controller.metrics.service.externalTrafficPolicy.
      • Service: Implement controller.metrics.portName.
      • Service: Implement controller.metrics.service.nodePort.

    Changed

    • Metrics: Align to upstream. (#388)
      • Service: Rename controller-metrics-service.yaml -> controller-service-metrics.yaml.
      • Service: Align labels to upstream.
      • Service: Order name & namespace.
      • Service: Rename from -monitoring to -metrics.
      • Service: Align indention of ports.
  • Fixed

    • Restore missing pod annotations in deployment (#232).
  • Changed

    • Service account irsa annotation for aws and capa to align with aws-pod-identity-webhook-app changes
    • Deployment: Align to upstream (#227 #229 #224).
      • Template deployment strategy from values
      • Align indentation
      • Move blocks to match upstream structure
      • Add annotations for secret reload
      • Take imagePullPolicy from values
      • Add secret’s mount subpath
      • Take securityContext from values
      • Add new arguments for logging and events
  • Added

    • HPA: Align to upstream. (#369)
      • HPA: Add labels & annotations.
      • HPA: Add controller.kind switch.
      • HPA: Add controller.autoscalingTemplate.
      • HPA: Add controller.autoscaling.behavior.
      • HPA: Add all KEDA values.
    • PDB: Add minAvailable. (#373)
    • Webhook: Align to upstream. (#374)
      • Webhook: Add controller.admissionWebhooks.service.clusterIP.
      • Webhook: Add controller.admissionWebhooks.service.externalIPs.
      • Webhook: Add controller.admissionWebhooks.service.loadBalancerIP.
      • Webhook: Add controller.admissionWebhooks.service.loadBalancerSourceRanges.
    • Ingress Class: Align to upstream. (#377)
      • Ingress Class: Add controller.ingressClass.
    • RBAC: Align to upstream. (#378)
      • Values: Add RBAC & service account configuration.
      • Helpers: Add ingress-nginx.serviceAccountName.
      • Values: Add controller.electionID.
      • Helpers: Add podSecurityPolicy.apiGroup.
      • Values: Add controller.existingPsp.
      • Values: Add controller.hostNetwork & controller.hostPort.
      • Values: Add controller.image.chroot.
      • Values: Add controller.sysctls.
      • Values: Add controller.metrics.enabled & controller.metrics.portName.
      • Values: Add tcp & udp.

    Changed

    • HPA: Align to upstream. (#369)
      • HPA: Reorder name & namespace.
      • HPA: Use ingress-nginx.controller.fullname.
      • HPA: Use autoscaling/v2beta2.
      • HPA: Fix indention.
      • HPA: Swap CPU & memory block.
      • HPA: Disable when KEDA is enabled.
    • Admission Webhooks: Align from upstream. (#370)
    • Ingress Class: Align from upstream. (#371, #374, #377)
    • Helpers: Rename labels.selector to ingress-nginx.selectorLabels. (#372)
    • PDB: Align from upstream. (#373)
    • Webhook: Align to upstream. (#374)
    • RBAC: Align to upstream. (#378)
      • RBAC: Move ClusterRoleBinding to separate file.
      • RBAC: Move RoleBinding to separate file.
      • RBAC: Move ClusterRole to separate file.
      • RBAC: Move Role to separate file.
      • RBAC: Rename service-account.yaml to controller-serviceaccount.yaml.
      • RBAC: Rename psp.yaml to controller-psp.yaml.
      • RBAC: Move PSP ClusterRoleBinding to clusterrolebinding.yaml.
      • RBAC: Move PSP ClusterRole to clusterrole.yaml.
      • RBAC: Align ServiceAccount.
      • RBAC: Align ClusterRoleBinding to upstream.
      • RBAC: Align ClusterRole to upstream.
      • RBAC: Reorder coordination.k8s.io/leases in ClusterRole.
      • RBAC: Indent ClusterRole.
      • RBAC: Indent Role.
      • Helpers: Rename controller.leader.election.id to ingress-nginx.controller.electionID.
      • Helpers: Align ingress-nginx.controller.electionID to upstream.
      • RBAC: Align Role to upstream.
      • RBAC: Align RoleBinding to upstream.
      • RBAC: Move PSP ClusterRole & PSP ClusterRoleBinding to Role.
      • RBAC: Reorder & indent PodSecurityPolicy.
      • RBAC: Align PodSecurityPolicy to upstream.
  • Added

    • Add projected volumes for capa (#219).
    • Add nodeSelector, affinity, topologySpreadContraints and tolerations values to align to upstream (223)

    Changed

    • ServiceAccount: Align to upstream (#222).
      • Labels: Add labels from values.
    • Allow overrides of service account annotations (#221).