Security
- Extend readonly ClusterRole to include pods/log so customers can debug failures on the management clusters.
Added
- Add CI job to push to
openstack-app-collection
. - Add CI job to push to
gcp-app-collection
. - Configured read header timeout in the http server
Fixed
- Dependency updates for security.
Changed
- Fix schema type for tolerations (#157).
Changed
- Make ServiceMonitor relabelings configurable and drop unhelpful pod, container, and service labels by default.
- Build with
app-build-suite
. - Add
app-test-suite
basic smoke tests.
Changed
- Push
kyverno
to the cloud-director app collection. - Update
kyverno-policy-reporter
to upstream version 2.10.1 / chart version 2.13.1.
Changed
- Align
PodSecurityPolicy
for CRD & ClusterIssuer
install jobs to actual needs. - Fix
PodSecurityPolicy
name for CA injector.
Changed
- Change namespace on GCP management clusters to
kyverno
.
Added
- Push
kyverno
to the GCP app collection.
Changed
- Add Service and Deployment annotations for Giant Swarm platform monitoring.
- Change target namespace for Giant Swarm management clusters.
- Build with
app-build-suite
. - Add
app-test-suite
tests.