Fleet Management
Fixed
- krew archives now include the
LICENSE file, so validate-krew-manifest accepts the gs plugin release.
Fixed
- krew install of the
gs plugin: releases again publish .tar.gz archives (kubectl-gs-<tag>-<os>-<arch>.tar.gz) for every platform and the krew manifest references them.
Added
login: new --api-endpoint flag enables a fully offline direct-OIDC workload cluster login. When set together with --oidc-issuer, --oidc-client-id and --api-ca-file, the login skips all management cluster access, so the user needs no RBAC on the management cluster.template cluster: support --provider aks for templating AKS workload clusters via the cluster-aks / release-aks chart. Reuses --region, --azure-subscription-id, and --management-cluster for the required Azure inputs.template cluster: new --azure-cluster-identity-name and --azure-cluster-identity-namespace flags for both capz and aks, setting global.providerSpecific.azureClusterIdentity. Omitted when unset so the chart’s built-in defaults apply.
Changed
- Release binaries now include darwin/amd64, darwin/arm64, windows/amd64, and windows/arm64 alongside the existing linux targets. Windows binaries are named
kubectl-gs-windows-<arch>.exe. - krew manifest updated to reference bare binaries directly instead of tarballs, and extended with
windows/arm64 support. - (CAPA): Derive the number of VPC chunks from
--az-usage-limit. This enables small single-AZ VPC layouts (e.g. a /24 VPC with a /25 private subnet and a /26 public subnet).
Changed
- Update to upstream Helm Chart
v0.1.122 and Zot v2.1.18.
Changed
- Update to upstream Helm Chart
v0.1.117 and Zot v2.1.17.
Changed
- Fix ABS config to not override AppVersion in Chart.yaml
Changed
- Use Giant Swarm hosted app icon
Added
login: new --oidc-scope flag (repeatable, comma-separated) appends extra scopes to the direct workload-cluster OIDC request. Use --oidc-scope=groups with Okta to receive group memberships in the ID token when the workload cluster’s structured auth is configured with groupsClaim.
Changed
- Build and publish a multi-arch (linux/amd64 + linux/arm64) container image.
- Add
io.giantswarm.application.audience: all annotation to publish the app to the customer Backstage catalog. - Migrate chart metadata annotations to
io.giantswarm.application.* format.
Added
- Add
valuesFromSecret value to optionally inject a Secret as an additional valuesFrom source in the HelmRelease.