Connectivity
Changed
- Update kong ingress controller to 3.1.6
- Update kong gateway to 3.6.1.7
- Enable ServiceMonitor by default, with relabelings for
node and app labels. - Update kubectl-apply-job to 0.8.0 for enabling
readOnlyRootFilesystem: true for kubectl CRD install job container.
Added
- Chart: Sync to upstream. (#673)
- Values: Add
controller.disableLeaderElection. - Values: Add
controller.electionTTL.
Changed
- Chart: Sync to upstream. (#673)
- Controller: Update image to
v1.11.1.
Changed
- Make the app visible for all providers.
Changes
- Update kubectl-apply-job to 0.8.0 for enabling
readOnlyRootFilesystem: true for kubectl CRD install job container.
Changed
- Reduce security exceptions #89.
- Enable readOnly FS moving config to emptyDir volume.
- Remove
NET_ADMIN and drop ALL capabilities. - Add
NET_BIND_SERVICE capability. - Add policy exception for
require-non-root-groups/autogen-check-runasgroup. - Remove disallow-capabilities-* policy exceptions.
Changed
- Deployments/DaemonSets: Make pod affinity templatable. (#654)
- ServiceMonitor: Relabel app & node. (#654)
Changed
- Update PolicyException CR version to v2beta1.
Added
- Ingress Class: Make annotations configurable. (#639)
- Admission Webhook: Make patch job RBAC configurable. (#639)
- Default Backend: Add topology spread constraints. (#639)
Changed
- Chart: Require Kubernetes version >= 1.21.0-0. (#639)
- Config Map: Support templates in values. (#639)
- Service: Fix app protocol semver comparison. (#639)
- Admission Webhook: Update patch job image to
v1.4.1. (#639) - Default Backend: Reorder HPA. (#639)
