Security
- Use Go 1.17, dependency updates
- Add PodDisruptionBudget
Added
- Add Organization CR example
- Move PR template into .github folder
Changed
- Use
k8smetadata
for labels and annotations instead of apiextensions
. - Use
organization-operator
to import Organization
CRD. - Bump
giantswarm/k8sclient
to v7.0.1
. - Bump
giantswarm/operatorkit
to v7.0.1
. - Bump k8s dependencies to
v0.20.15
. - Bump
controller-runtime
to v0.8.3
. - Selector moved from watcher to individual handlers for rbac controller.
Added
- Add default port to Kubernetes API values to make it configurable.
Added
- Add
externalresources
resource that binds organization-$org-read
role for any subject with org-namespace access. - Deprecate
orgpermissions
controller as it is replaced by the above.
Added
- Add configurable nodeSelector to Helm values.
Changed
Changed
- Drop dependency on apiextensions by moving Organization API into this repository.
- Update k8sclient and operatorkit to v6.
- Require Go v1.17
Fixed
- Add missing
imagePullSecret
.
Changed
- Use
ebpf
driver instead of kernel module by default.
Changed
- Update to upstream version 0.9.1 with
starboard-operator
version 0.14.1. - Move resource limit overrides to the App instead of modifying the upstream chart.
- Override Trivy version to use newer v0.24.0.