Added
- Add
node-role.kubernetes.io/control-planekey to list of tolerations
Security
Fixed
- The VPA for
external-secretserroneously picks up thekubectlpod created by the CRD installer job and changes the resource requirements for it potentially causing OOM kill for it
- The VPA for
Added
- Added the use of the runtime/default seccomp profile.
Fixed
- Prevented deletion of Organization CR until the organization namespace is deleted successfully
Added
- Add circle ci job to push to
capz-app-collectionon new release. - Static client for GitOps Server.
- Add circle ci job to push to
Changed
- Update to upstream version
0.7.0/app version0.37.2.
- Update to upstream version
Added
- Added the use of the runtime/default seccomp profile.
- Added reconciliation of static resources like e.g. ClusterRoles, ClusterRoleBindings, ServiceAccounts in the default namespace, etc.
Changed
- Default to new IRSA role for
cert-manager-controllerthat has permissions needed for the DNS01 challenge via AWS Route53
- Default to new IRSA role for
Not released because of build failure.
- Add cluster and world to CiliumNetworkPolicy
Added
- Add additional annotations on all
ingressobjects to support DNS record creation viaexternal-dns
- Add additional annotations on all