Fleet Management

  • Added

    • Add description column to the get catalog limited to 80 characters.
    • Add --enable-long-names feature flag to template cluster/networkpool/nodepool to allow resource names longer than 5 characters. Only for internal testing.
    • Implement get clusters command for OpenStack.

    Changed

    • Add missing availability zones to cluster configuration for OpenStack.
    • Change default catalog for cluster-* and default-apps-* apps from giantswarm to cluster.
  • Added

    • Add OIDC flags to the template cluster command (OpenStack only).

    Changed

    • Improve flag handling and naming for template cluster command (no user facing changes).
    • Add new flags for template cluster --provider-openstack to be able to use existing networks and subnets.
    • Update the kubectl version in Dockerfile
  • Added

    • Prevent rbac-controller fluxauth and externalresources resources from reconciling cluster namespaces
    • Dynamically bind read-in-cluster-ns clusterRole if read-all clusterRole is bound in an org-namespace
    • Dynamically bind write-in-cluster-ns clusterRole if cluster-admin clusterRole is bound in an org-namespace

    Changed

    • Renamed role read-cluster-apps-in-cluster-ns to read-in-cluster-ns
    • Renamed role write-cluster-apps-in-cluster-ns to write-in-cluster-ns
    • Renamed role binding read-cluster-app to read-in-cluster-ns
    • Renamed role binding write-cluster-apps to write-in-cluster-ns
  • Changed

    • Policies no longer the cluster-apps-operator.giantswarm.io/version label since cluster-apps-operator don’t use it.
  • Added

    • First version.
  • Changed

    • Add default audit log config file to KubeadmControlPlane.
  • Fixed

    • Fixed crash if listing nodepools when one is missing the release version label.
    • Add audit log configuration file to the KubeadmControlPlane CR.
    • Use the CAPZ controller manager env vars for control-plane identity when authenticating to Azure API.
  • Fixed

    • Fixed default value for admission controller PDB.
    • Update some role descriptions.
    • Enhance log messages in the bootstrapping part, remove unneeded messages.
  • Added

    • Add externalresources resource that binds read-default-catalogs and read-releases roles for any subject with org-namespace access.
    • Add creation of read-default-catalogs Role.
    • Add creation of read-releases ClusterRole.
    • Improve logging for the orgpermissions, clusternamespace, and rbac controllers.