Fixed
- Fixed container
securityContext.
Continuous Deployment
Changed
- Updated default
securityContextvalues to comply with PSS policies.
- Updated default
Added
- Added
node-role.kubernetes.io/control-planeto crd install jobs toleration
- Added
Added
- VerticalPodAutoscaler config for automatically lifting Requests when Pod OOMs
Added
- Added the use the runtime/default seccomp profile.
- Added
clusterRoles.installvalue that can disable installing theflux-viewandflux-editcluster roles. Enabled by default to install these resources.
Changed
- Use Cilium network policy when available for CRD installer
- Updated flux apps to v0.41.2
- Changed PSP to allow the same volumes as restricted, to prevent seccomp profile changes breaking pod creation.
Removed
- Removed obslete values related to PVCs under:
.Values.volumes
- initial Helm Chart and repository configuration.
Added
- Added
PriorityClass. - Added
CiliumNetworkPolicy.
- Added
Fixed
Fixed condition for internal upgrade.
Changed
- Control CPU limits and min allowed CPU + memory requests with VPA as well for flux controllers