Security
Changed
- Set VPA max 6 CPU / 24Gi memory and adjust default requests/limits for
reports-controller. - Set VPA max 4 CPU / 8Gi memory and adjust default requests/limits for
background-controller. - Set starting CPU limit of request+25% for
cleanup-controller.
Removed
- Disable Kyverno CRDs install Job in favor of
kyverno-crds App.
Changed
- Default
ingress.tls.clusterIssuer values to letsencrypt-giantswarm - Update
cert-manager.io/cluster-issuer annotation to use default.
Changed
- Introduced
podAntiAffinity so teleport-kube-agent pods run on different control-plane nodes also increased the number of replicas to 3 to maintain better high availability.
Fixed
- Improves
cainjector’s Vertical Pod Autoscaler.