Fleet Management

  • Changed

    • Synchronize with upstream helm chart version 1.4.1 containing AWS Load Balancer Controller v2.4.1
  • Fixed

    • Set correct labels of GiantSwarm components on cluster templates.

    Changed

    • login: simplify description for the --certificate-ttl flag.
  • Added

    • Add description column to the get catalog limited to 80 characters.
    • Add --enable-long-names feature flag to template cluster/networkpool/nodepool to allow resource names longer than 5 characters. Only for internal testing.
    • Implement get clusters command for OpenStack.

    Changed

    • Add missing availability zones to cluster configuration for OpenStack.
    • Change default catalog for cluster-* and default-apps-* apps from giantswarm to cluster.
  • Added

    • Add OIDC flags to the template cluster command (OpenStack only).

    Changed

    • Improve flag handling and naming for template cluster command (no user facing changes).
    • Add new flags for template cluster --provider-openstack to be able to use existing networks and subnets.
    • Update the kubectl version in Dockerfile
  • Added

    • Prevent rbac-controller fluxauth and externalresources resources from reconciling cluster namespaces
    • Dynamically bind read-in-cluster-ns clusterRole if read-all clusterRole is bound in an org-namespace
    • Dynamically bind write-in-cluster-ns clusterRole if cluster-admin clusterRole is bound in an org-namespace

    Changed

    • Renamed role read-cluster-apps-in-cluster-ns to read-in-cluster-ns
    • Renamed role write-cluster-apps-in-cluster-ns to write-in-cluster-ns
    • Renamed role binding read-cluster-app to read-in-cluster-ns
    • Renamed role binding write-cluster-apps to write-in-cluster-ns
  • Changed

    • Policies no longer the cluster-apps-operator.giantswarm.io/version label since cluster-apps-operator don’t use it.
  • Added

    • First version.
  • Changed

    • Add default audit log config file to KubeadmControlPlane.
  • Fixed

    • Fixed crash if listing nodepools when one is missing the release version label.
    • Add audit log configuration file to the KubeadmControlPlane CR.
    • Use the CAPZ controller manager env vars for control-plane identity when authenticating to Azure API.
  • Fixed

    • Fixed default value for admission controller PDB.