Connectivity
Added
- Add
awsPartition value to support non-standard AWS partitions (e.g. China). - Add
oidcDomain and oidcDomains values to support multiple OIDC providers; the IAM trust policy now iterates over all provided domains. - Add
managed-by: external-dns-crossplane-resources tag to the IAM role.
Changed
- Add
io.giantswarm.application.audience: giantswarm annotation. - Migrate chart metadata annotations to
io.giantswarm.application.* format. - Move
required validation for awsPartition and accountID into named template helpers. - Replace deprecated
app.giantswarm.io/branch, application.kubernetes.io/managed-by, and giantswarm.io/service-type labels with app.kubernetes.io/* equivalents. - Update chart description, icon, and owning team (
cabbage).
Removed
- Remove
name, serviceType, project.branch, and project.commit values that were leftover hackathon scaffolding. - Remove hardcoded
baseDomain-based OIDC provider URL; replaced by oidcDomain/oidcDomains.
Added
- Add
coredns-adopter job to adopt default CoreDNS resources on EKS clusters (disabled by default).
Changed
- Update Envoy Gateway to v1.7.1.
Changed
- Make VPA resource more flexible:
updateMode, controlledValues, and mode are now configurable per container group; maxAllowed is supported for both proxy and controller containers.
Changed
- Update
coredns image to 1.14.2.
Changed
- Remove restriction when deploying VPA and HPA together.
Changed
- Update Envoy Gateway to v1.7.0.
Added
- Add convenience values switch for enabling Envoy Gateway Backend extension. Disabled by default.
- Add optional Kyverno policies for restricting usage of Backend resources with problematic targets like localhost, cloud metadata endpoints, envoy admin ports or dynamic resolver usage.
See
values.yaml file for more information.
Changed
- Update Envoy Gateway to v1.6.3.
Changed
- Upgrade application to version 1.26.7 (includes coredns 1.13.1)
