Security
Changed
- Add missing controller config ConfigMap template. (#352)
Changed
- Make
spec.enableServiceLinks field configurable for controller, cainjector and webhook Deployments and startupapicheck Job. (#350) - Update chart from upstream. Relevant upstream PRs: #6241, #6156, #6292, #5337. (#350)
Removed
- Remove
write-clusters and write-nodepools cluster roles as it is unused.
Fixed
- Fix Cilium Network Policy indentation.
Fixed
- Allow egress to Coredns in Cilium network policy.
Fixed
- Correct DNS port in network policies.
Added
- Add RoleBindingTemplate controller and api
Changed
- Added non-root UID/GID for the cleanup jobs.
- Re-enable
PolicyViolation events for all controllers.
Added
- Updated Kyverno to upstream version v1.10.2.
- Add core Policy
disallow-noisy-policy-contexts.