Observability
Fixed
- Fix read pods by adding another CNP to allow those egress access to world.
Added
- Add additional ciliumNetworkPolicies for backend and write pods.
Added
- Auto reload multi-tenant-proxy config when it changes.
- Upgraded upstream chart from 5.43.1 to 5.43.2 - see changelog for more information.
Fixed
- Fix multi-tenant-proxy labels to be able to use the ciliumnetworkpolicies and to align with the other components.
Fixed
- Fix CNP to be able to access DNS.
Fixed
- Fix
CiliumNetworkPolicy to allow cluster ingress (for e.g. Prometheus).
Changed
- upgrade
prometheus-agent to 0.6.8.
Added
- Add coredns egress networkpolicy.
- Upgraded upstream chart from 5.42.3 to 5.43.1 - see changelog for more information.
Changed
- Upgraded upstream chart from 5.42.2 to 5.42.3 - see changelog for more information to fix an issue with network policies.
Fixed
- Fix Cilium Network Policies onprem.
Changed
- Upgrade to latest weekly build to be able to use our upstream fixes (custom service account for the ruler, psp fix).
- Remove customized rbac and use upstream one.