Connectivity

  • Added

    • Allow enabling the --enable-ssl-chain-completion flag. Disabled by default. Use this to autocomplete SSL certificate chains with missing intermediate CA certificates. Certificates uploaded to Kubernetes must have the “Authority Information Access” X.509 v3 extension for this to succeed.
  • Changed

    • Allow setting the AWS default region (aws.region) indepentent from any other value.
  • This release contains a potential breaking change in case you are using and relying on the configuration setting use-forwarded-headers. From now on the default value will change to false. In case you’re relying on this feature, you’ll need override this in your customized values like this: configmap: use-forwarded-headers: “true”

    Changed

    • Push chart to control plane catalog.
    • Disable use-forwarded-headers by default.
  • This release contains some changes to mitigate rate limiting on AWS clusters. Please take note of the defaults for values aws.batchChangeInterval, aws.zonesCacheDuration, externalDNS.interval and externalDNS.minEventSyncInterval. If you already specify --aws-batch-change-interval or --aws-zones-cache-duration, please migrate to the new values aws.batchChangeInterval and aws.zonesCacheDuration.

    Added

    • Allow to set --aws-batch-change-interval through aws.batchChangeInterval value. Default 10s.
    • Allow to set --aws-zones-cache-duration through aws.zonesCacheDuration value. Default 3h.

    Changed

    • Set default externalDNS.interval to 5m.
    • Set default externalDNS.minEventSyncInterval to 30s.
    • Allow setting Route53 credentials (externalDNS.aws_access_key_id and externalDNS.aws_secret_access_key) indepentent from aws.access value.
    • Allow setting the AWS default region (aws.region) indepentent from aws.access value.
    • Allow to omit the --domain-filter flag completely by setting externalDNS.domainFilterList to null.
  • Changed

    • Add deployment to run one replica of coredns in master nodes (for clusters with no node pools).
  • Added

    • Allow disabling external-dns annotations.
    • Augment monitoring annotations to have a stable name for monitoring. (#263)
    • Update aws-load-balancer annotations for internal cluster use.
    • Add required external-dns annotation to internal controller service.
    • Add documentation for service configuration.

    Changed

    • Update controller container image to v1.1.1. (#264)
    • Swap kube-webhook-certgen container image for ingress-nginx image to ensure compatibility with kubernetes >= 1.22 (#265)
  • Added

    • Adds KIC startupProbes to allow longer boot times in big clusters. As stated in upstream docs, during boot time it gathers all Services, Endpoints and Secrets on the cluster, which can take longer than the liveness probe threshold.
  • Changed

    • Add ability to specify extra arguments to the external-dns deployment through externalDNS.extraArgs.
  • Breaking Changes

    • KIC now defaults to version 2.1. If you use a database, you must first perform a temporary intermediate upgrade to disable KIC before upgrading it to 2.x and re-enabling it. See the upgrade guide for detailed instructions.
    • ServiceAccount are now always created by default unless explicitly disabled. ServiceAccount customization has moved under the deployment section of configuration to reflect this. This accommodates configurations that need a ServiceAccount but that do not use the ingress controller. (#455)

    Updates

    • Align with upstream chart 2.6.4
    • Default Kong IC version updated to 2.1
    • Default Kong proxy version updated to 2.7 Note chart versions 2.3.0 through 2.5.0 contained an incorrect KongIngress CRD. The proxy.path field was missing. Helm will not fix this automatically on upgrade. You can fix it by running:
    kubectl apply -f https://raw.githubusercontent.com/Kong/charts/main/charts/kong/crds/custom-resource-definitions.yaml
    

    For a detailed description of all the changes please check the upstream changelog

  • Changed

    • Update coredns to upstream version 1.8.6.