Security
Changed
- Excludes
kube-system
namespace from webhooks. - Bump
kyverno-plugin
resources.
Added
- Add support for filtering connectors with
connector_filter
query parameter on connector selection (login) page.
Changed
- Use external image schema.
- Allowed null values of OIDC connectors in the values schema
Added
- Add initial chart to deploy
external-secrets
as a Giant Swarm application
Changed
- Update
kyverno
to upstream version 1.8.4 / chart version 2.6.4. - Update
kyverno-policy-reporter
to upstream version 2.11.0 / chart version 2.14.0.
Changed
- Migrate build step to app-build-suite
- Add basic chart tests
Added
- Add annotation to dex deployment template to roll pods whenever secret changes.
Changed
- If more connectors are specified in
Values.oidc.customer.connectors
in addition to an existing one in Values.oidc.customer.connectorConfig
, include both in the dex secret.
Fixed
- Fix deployment template securityContext.
- Allow an array of write-all-groups.
Added
- Added
VerticalPodAutoscaler
to policy-reporter
.