Changes and Releases
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
Changed
- Upgraded upstream chart from 5.26.0 to 5.29.0 - see changelog for more information.
Changed
- prometheus remote-writes: filter on URL
Added
- Controller: Add
controller.enableAnnotationValidations. (#536) - OpenTelemetry: Add
controller.opentelemetry.resources. (#536) - Values: Add
global.podSecurityStandards.enforced. (#544)
Changed
- Image: Update to
v1.9.0. (#536) - Deployment/DaemonSet: Make
controller.topologySpreadConstraints an array. (#536)
NOTE: This is part of our alignment to upstream. Please convert any overrides of controller.topologySpreadConstraints to an array, too. - Tests: Upgrade dependencies & remove explicit ATS version. (#538)
- Service: Fix wildcard subdomain. (#539)
- Chart: Tighten
securityContexts and Pod Security Policies. (#540) - OpenTelemetry: Use own registry. (#541)
- Admission Webhooks: Update
kube-webhook-certgen image to v20231011-8b53cabe0. (#542) - Image: Update to
v1.9.3. (#547)
Removed
- Controller: Drop support for
controller.kind: Both. (#547)
Changed
- Image: Update to
v1.8.4. (#545) - Tests: Upgrade dependencies & remove explicit ATS version. (#538)
Added
- cert-manager-giantswarm-clusterissuer: Allow setting
hostedZoneID for route53 DNS01 challenge. - cert-manager-giantswarm-clusterissuer: Make
accessKeyID and secretAccessKey optional for route53 DNS01 challenge.
Fixed
- Fix real issues and remove policy exception.
Changed
- Upgrade
prometheus-operator-app to 6.2.1. - Upgrade
prometheus-agent to 0.6.5.
Changed
- Install PSP resource based on values for PSP deprecation.
- Add PolicyExceptions for PSS compliance.
- Replace build pipeline with ABS.
- Replace testing pipeline with ATS basic test.