Fleet Management

  • Fixed

    • krew archives now include the LICENSE file, so validate-krew-manifest accepts the gs plugin release.
  • Fixed

    • krew install of the gs plugin: releases again publish .tar.gz archives (kubectl-gs-<tag>-<os>-<arch>.tar.gz) for every platform and the krew manifest references them.
  • Added

    • login: new --api-endpoint flag enables a fully offline direct-OIDC workload cluster login. When set together with --oidc-issuer, --oidc-client-id and --api-ca-file, the login skips all management cluster access, so the user needs no RBAC on the management cluster.
    • template cluster: support --provider aks for templating AKS workload clusters via the cluster-aks / release-aks chart. Reuses --region, --azure-subscription-id, and --management-cluster for the required Azure inputs.
    • template cluster: new --azure-cluster-identity-name and --azure-cluster-identity-namespace flags for both capz and aks, setting global.providerSpecific.azureClusterIdentity. Omitted when unset so the chart’s built-in defaults apply.

    Changed

    • Release binaries now include darwin/amd64, darwin/arm64, windows/amd64, and windows/arm64 alongside the existing linux targets. Windows binaries are named kubectl-gs-windows-<arch>.exe.
    • krew manifest updated to reference bare binaries directly instead of tarballs, and extended with windows/arm64 support.
    • (CAPA): Derive the number of VPC chunks from --az-usage-limit. This enables small single-AZ VPC layouts (e.g. a /24 VPC with a /25 private subnet and a /26 public subnet).
  • Changed

    • Update to upstream Helm Chart v0.1.122 and Zot v2.1.18.
  • Changed

    • Update to upstream Helm Chart v0.1.117 and Zot v2.1.17.
  • Changed

    • Fix ABS config to not override AppVersion in Chart.yaml
  • Changed

    • Use Giant Swarm hosted app icon
  • Added

    • login: new --oidc-scope flag (repeatable, comma-separated) appends extra scopes to the direct workload-cluster OIDC request. Use --oidc-scope=groups with Okta to receive group memberships in the ID token when the workload cluster’s structured auth is configured with groupsClaim.
  • Changed

    • Build and publish a multi-arch (linux/amd64 + linux/arm64) container image.
    • Add io.giantswarm.application.audience: all annotation to publish the app to the customer Backstage catalog.
    • Migrate chart metadata annotations to io.giantswarm.application.* format.
  • Added

    • Add valuesFromSecret value to optionally inject a Secret as an additional valuesFrom source in the HelmRelease.