Managed Apps

• Oct 17, 2023 Managed Apps loki-app v0.13.0

  Changed

  • Added caching with memcached in default values (disabled).
  • Added documentation for using cache.
• Oct 17, 2023 Managed Apps cloudflared-app v0.5.0

  Added

  • Ability to specify annotations of the Deployment

  Changed

  • Do not install PodSecurityPolicy if api not available.
  • Make deployment PSS compliant.
  • Do not install cleaning hook when Quick Tunnel is enabled.
• Oct 16, 2023 Managed Apps hello-world-app v2.1.0

  Added

  • Values: Add global.podSecurityStandards.enforced. ((#118)[https://github.com/giantswarm/hello-world-app/pull/118])

  Changed

  • Values: Tighten securityContext. ((#118)[https://github.com/giantswarm/hello-world-app/pull/118])
  • Values: Make topologySpreadConstraints an array. ((#118)[https://github.com/giantswarm/hello-world-app/pull/118])
• Oct 16, 2023 Managed Apps kong-app v3.5.0

  This version contains fixes for HTTP/2 stream reset attacks (CVE-2023-44487).

  Changes

  • Align with upstream chart version 2.29.0 (Changes in upstream repository)
  • Update kong to 3.4.2
  • Update kong ingress controller to 2.12.0
  • Execute enterprise tests with kong-gateway container image version 3.4.1.1-debian
  • Add Values.global.podSecurityStandards.enforced flag in preparation of PSP to PSS migration
  • Prevent installation of PodDisruptionBudget with replicaCount: 1 or autoscaling.minReplicas: 1
• Oct 16, 2023 Managed Apps loki-app v0.12.4

  Changed

  • Upgraded upstream chart from 5.26.0 to 5.29.0 - see changelog for more information.
• Oct 12, 2023 Managed Apps ingress-nginx-app v3.1.0

  Added

  • Controller: Add controller.enableAnnotationValidations. (#536)
  • OpenTelemetry: Add controller.opentelemetry.resources. (#536)
  • Values: Add global.podSecurityStandards.enforced. (#544)

  Changed

  • Image: Update to v1.9.0. (#536)
  • Deployment/DaemonSet: Make controller.topologySpreadConstraints an array. (#536)
    NOTE: This is part of our alignment to upstream. Please convert any overrides of controller.topologySpreadConstraints to an array, too.
  • Tests: Upgrade dependencies & remove explicit ATS version. (#538)
  • Service: Fix wildcard subdomain. (#539)
  • Chart: Tighten securityContexts and Pod Security Policies. (#540)
  • OpenTelemetry: Use own registry. (#541)
  • Admission Webhooks: Update kube-webhook-certgen image to v20231011-8b53cabe0. (#542)
  • Image: Update to v1.9.3. (#547)

  Removed

  • Controller: Drop support for controller.kind: Both. (#547)
• Oct 12, 2023 Managed Apps ingress-nginx-app v3.0.2

  Changed

  • Image: Update to v1.8.4. (#545)
  • Tests: Upgrade dependencies & remove explicit ATS version. (#538)
• Oct 12, 2023 Managed Apps cert-manager-app v3.5.0

  Added

  • cert-manager-giantswarm-clusterissuer: Allow setting hostedZoneID for route53 DNS01 challenge.
  • cert-manager-giantswarm-clusterissuer: Make accessKeyID and secretAccessKey optional for route53 DNS01 challenge.
• Oct 12, 2023 Managed Apps aws-load-balancer-controller-app v1.4.3
• Oct 11, 2023 Managed Apps linkerd2-cni-app v1.2.1

  Changed

  • Upgrade ATS to 0.4.1 and its python deps.
  • Add PolicyException.

• Newer entries
• Older entries