Managed Apps
Changed
- Remove custom
giantswarm service for monitoring in favor of upstream servicemonitor - Moved
imagePullSecrets to multiTenantAuth.image.pullSecrets
Fixed
- Fix loki-backend sidecar pod security standard violations.
Changed
- Upgraded upstream chart from 5.23.0 to 5.26.0 - see changelog for more information.
Changed
- Add kyverno-policy-exceptions.
Changed
- Upgrade upstream chart to 0.25.0 and agent to 0.36.2.
- Add kyverno policy exception.
Added
- Added
seccompProfile for PSS compliance.
Changed
- Add condition for PSP installation in helm chart.
Changed
- Propagate
global.podSecurityStandards.enforced value set to false for PSS migration
Changed
- Update deployment to be PSS compliant and PSP toggle.
Changed
- Install PSP resource based on global values.
Changed
- Make App compliant with PSS policies (#234):
- Set seccompProfile to
RuntimeDefault. - Fix capabilities typo.
- Remove
NET_BIND_SERVICE capabilities. - Set
runAsNonRoot as true.