Managed Apps

  • Added

    • Add node-role.kubernetes.io/control-plane to crd install jobs toleration.
  • Fixed

    • The VPA for external-secrets erroneously picks up the kubectl pod created by the CRD installer job and changes the resource requirements for it potentially causing OOM kill for it
  • Added

    • Add circle ci job to push to capz-app-collection on new release.
    • Static client for GitOps Server.
  • Added

    • Helpers: Align to upstream. (#429)
      • Helpers: Add controller.containerSecurityContext.
      • Helpers: Add ingress-nginx.image.
      • Helpers: Add ingress-nginx.imageDigest.
      • Helpers: Add ingress-nginx.controller.publishServicePath.
      • Helpers: Add ingress-nginx.params.
      • Helpers: Add isControllerTagValid.
      • Helpers: Add extraModules.
    • Chart: Align to upstream. (#431)
      • Chart: Add .helmignore.
      • Chart: Add NOTES.txt.
    • Chart: Add CI values from upstream. (#432)
    • Deployment: Align to upstream. (#433)
      • Deployment: Implement controller.kind.
      • Deployment: Implement controller.labels.
      • Deployment: Implement controller.annotations.
      • Deployment: Implement revisionHistoryLimit.
      • Deployment: Implement controller.podAnnotations.
      • Deployment: Implement controller.dnsConfig.
      • Deployment: Implement controller.hostname.
      • Deployment: Implement controller.dnsPolicy.
      • Deployment: Implement controller.podLabels.
      • Deployment: Implement imagePullSecrets.
      • Deployment: Implement controller.priorityClassName.
        NOTE: Removes the hardcoded default system-cluster-critical. Please override if required.
      • Deployment: Implement controller.podSecurityContext & controller.sysctls.
      • Deployment: Implement controller.shareProcessNamespace.
      • Deployment: Implement controller.containerName.
      • Deployment: Implement controller.updateStrategy.
      • Deployment: Implement controller.publishService.
      • Deployment: Implement controller.ingressClass.
        NOTE: If you are currently overriding controller.ingressClassResource.name, there are two cases which require manual intervention:
        • You are assigning ingresses to an ingress controller by annotation.
        • You enabled controller.ingressClassByName. Please set controller.ingressClass to the value of controller.ingressClassResource.name if any of these cases applies to you.
      • Deployment: Implement controller.configMapNamespace.
      • Deployment: Implement controller.tcp.configMapNamespace.
      • Deployment: Implement controller.udp.configMapNamespace.
      • Deployment: Implement controller.scope.namespace.
      • Deployment: Implement controller.scope.namespaceSelector.
      • Deployment: Implement controller.reportNodeInternalIp.
      • Deployment: Implement controller.admissionWebhooks.certificate & controller.admissionWebhooks.key.
      • Deployment: Implement controller.maxmindLicenseKey.
      • Deployment: Implement controller.healthCheckHost.
      • Deployment: Implement controller.healthCheckPath.
      • Deployment: Implement controller.enableTopologyAwareRouting.
      • Deployment: Implement controller.extraArgs.
      • Deployment: Implement serviceAccount.name.
      • Deployment: Implement controller.containerSecurityContext.
      • Deployment: Implement controller.hostPort.
      • Deployment: Implement controller.metrics.portName.
      • Deployment: Implement tcp & udp ports.
      • Deployment: Implement controller.customTemplate.
      • Deployment: Implement controller.extraVolumeMounts.
      • Deployment: Implement controller.opentelemetry.
      • Deployment: Implement controller.extraContainers.
      • Deployment: Implement controller.extraInitContainers.
      • Deployment: Implement controller.hostNetwork.
      • Deployment: Implement controller.nodeSelector.
      • Deployment: Implement controller.tolerations.
      • Deployment: Implement controller.affinity.
      • Deployment: Add DaemonSet option.

    Changed

    • Helpers: Align to upstream. (#429)
      • Helpers: Rename name to ingress-nginx.name.
      • Helpers: Rename chart to ingress-nginx.chart.
      • Helpers: Align ingress-nginx.fullname.
      • Helpers: Align ingress-nginx.controller.fullname.
      • Helpers: Align ingress-nginx.controller.electionID.
      • Helpers: Align ingress-nginx.defaultBackend.fullname.
      • Helpers: Align ingress-nginx.labels.
      • Helpers: Align ingress-nginx.selectorLabels.
      • Helpers: Align ingress-nginx.defaultBackend.serviceAccountName.
    • Chart: Align to upstream. (#431)
      • Chart: Align Chart.yaml.
    • HPA: Use capabilities, reorder if. (#434)
    • Deployment: Align to upstream. (#433)
      • Deployment: Align controller.image.
      • Deployment: Align startupProbe.
        NOTE: Please remove controller.startupProbe.enabled from your overrides and remove/set controller.startupProbe instead.
      • Deployment: Align livenessProbe.
        NOTE: Please remove controller.livenessProbe.enabled from your overrides and remove/set controller.livenessProbe instead.
      • Deployment: Align readinessProbe.
        NOTE: Please remove controller.readinessProbe.enabled from your overrides and remove/set controller.readinessProbe instead.
      • Deployment: Update controller.image.tag to v1.6.4.

    Removed

    • Helpers: Align to upstream. (#429)
      • Helpers: Remove resource.controller-service-internal.name.
      • Helpers: Remove resource.controller-service.name.
    • Deployment: Align to upstream. (#433)
      • Deployment: Remove controller.extraAnnotations.deployment.
        NOTE: This is part of our alignment to upstream. Use controller.annotations instead.
      • Deployment: Remove controller.extraAnnotations.pod.
        NOTE: This is part of our alignment to upstream. Use controller.podAnnotations instead.
      • Deployment: Remove sysctls setting net.ipv4.ip_local_port_range.
        NOTE: Set via controller.sysctls if required.
      • Deployment: Remove initContainers setting net.core.somaxconn.
        NOTE: Set via controller.sysctls if required.
      • Deployment: Remove controller.maxSurge.
        NOTE: This is part of our alignment to upstream. Use controller.updateStrategy instead.
      • Deployment: Remove controller.maxUnavailable.
        NOTE: This is part of our alignment to upstream. Use controller.updateStrategy instead.
      • Deployment: Remove controller.userID.
        NOTE: This is part of our alignment to upstream. Use controller.image.runAsUser instead.
      • Deployment: Remove controller.groupID.
        NOTE: This is part of our alignment to upstream. There is no replacement for this key.
      • Deployment: Remove controller.antiAffinityScheduling & controller.nodeAffinity. NOTE: This is part of our alignment to upstream. Use controller.affinity instead.
  • Added

    • Add ServiceMonitor and default values (#245).
  • Changed

    • Sync with upstream update concerning image.registry
  • Changed

    • Update to upstream version 0.7.0/app version 0.37.2.
  • Changed

    • Default to new IRSA role for cert-manager-controller that has permissions needed for the DNS01 challenge via AWS Route53
  • Fixed

    • Fix kube-state-metrics image repository.
  • Fixed

    • Fix kube-state-metrics image repository.