Managed Apps
Fixed
- Added
projected
volume type to csi-node PSP to allow the user of IRSA.
Added
- Added
node-role.kubernetes.io/control-plane
to crd install jobs toleration
Changed
- Updated templates to consistently use
{{ include "external-secrets.name" . }}
instead of {{ include "external-secrets.fullName" . }}
- The conversion webhook on CRDs use
{{ include "external-secrets.name" . }}
- The
ClusterRole
previously called {{ include "external-secrets.fullName" . }}-servicebindings
was renamed to {{ include "external-secrets.name" . }}-servicebindings
- The
external-secrets
service account was renamed from using external-secrets.fullName
to external-secrets.name
by default
Changed
- Update
external-secrets
to v0.8.3
Changed
- Install
giantswarm-selfsigned
ClusterIssuer regardless of global.giantSwarmClusterIssuer.install
value. It is required as a default component for Giant Swarm cluster installations.
Added
- Add ClusterPolicy
restrict-policy-kind-wildcards
to prevent running (Cluster)Policies which match all API Kinds. - Add PolicyException for Giant Swarm’s
chart-operator
.
Fixed
- Remove
container_id
from drop labels in KSM metrics.
Fixed
- Remove
container_id
from drop labels in KSM metrics.