Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.279...v0.0.280
Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.278...v0.0.279
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.167.1...v0.167.2
login: new --api-endpoint flag enables a fully offline direct-OIDC workload cluster login. When set together with --oidc-issuer, --oidc-client-id and --api-ca-file, the login skips all management cluster access, so the user needs no RBAC on the management cluster.template cluster: support --provider aks for templating AKS workload clusters via the cluster-aks / release-aks chart. Reuses --region, --azure-subscription-id, and --management-cluster for the required Azure inputs.template cluster: new --azure-cluster-identity-name and --azure-cluster-identity-namespace flags for both capz and aks, setting global.providerSpecific.azureClusterIdentity. Omitted when unset so the chart’s built-in defaults apply.kubectl-gs-windows-<arch>.exe.windows/arm64 support.--az-usage-limit. This enables small single-AZ VPC layouts (e.g. a /24 VPC with a /25 private subnet and a /26 public subnet).Full Changelog: https://github.com/giantswarm/muster/compare/v1.1.0...v1.2.0
Full Changelog: https://github.com/giantswarm/muster/compare/v1.0.8...v1.1.0
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.167.0...v0.167.1
automation ServiceAccount the kamaji-datastore-manager ClusterRole, so cluster apps using Kamaji can manage their kamaji.clastix.io/datastores CR. The referenced ClusterRole is provisioned by the global Kamaji app.patch-charts Role for automation ServiceAccounts.Full Changelog: https://github.com/giantswarm/muster/compare/v1.0.7...v1.0.8
affinity and podSecurityContext values by setting additionalProperties: true on their $ref-based schema entries, which were previously rejecting all keys (e.g. affinity.podAntiAffinity).