Changed
- Rename app to
kube-prometheus-stack - Upgraded chart dependency to kube-prometheus-stack-51.9.4
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
kube-prometheus-stackkube-prometheus-stackkube-state-metrics psp when pod security policies are enforced.This release contains security relevant changes. Please check your Ingress resources for invalid annotations or paths before installing it.
controller.enableAnnotationValidations by default. (#552)Ingress resources. Upstream is enabling this by default, too: https://github.com/kubernetes/ingress-nginx/issues/10186.controller.config.strict-validate-path-type by default. (#553)Ingress resources only. Upstream is enabling this by default, too: https://github.com/kubernetes/ingress-nginx/issues/10186.memcached in default values (disabled).global.podSecurityStandards.enforced. ((#118)[https://github.com/giantswarm/hello-world-app/pull/118])securityContext. ((#118)[https://github.com/giantswarm/hello-world-app/pull/118])topologySpreadConstraints an array. ((#118)[https://github.com/giantswarm/hello-world-app/pull/118])--organization flag visible when templating App CR.kubectl-gs login: listen only on localhost for callbacksThis version contains fixes for HTTP/2 stream reset attacks (CVE-2023-44487).
Values.global.podSecurityStandards.enforced flag in preparation of PSP to PSS migrationreplicaCount: 1 or autoscaling.minReplicas: 1