Security
Added
- Added readiness check for
cert-manager-app-webhook before attempting installation on clusterIssuers chart
Fixed
- Add missing CiliumNetworkPolicies for pre-delete and post-ugprade hooks.
Changed
- Disable namespace creation by default since it was moved to Kyverno.
- Check if namespace exists before creation.
Changed
- Fix label selector
kyverno-policy-reporter to talk to kyverno-ui rule. - Add
policy-exceptions namespace if it doesn’t exist.
Added
- Added support for
azureDNS dns01 challenge solver on cluster-issuer chart
Changed
- Disables
dex-k8s-authenticator to be installed by default by setting deployDexK8SAuthenticator to false.
Added
- Added
acme-solvers-networkpolicy NetworkPolicy namespace to kube-system
Fixed
- Move pss values under the global property
Changed
- Allow
kyverno-policy-reporter to talk to kyverno-ui.