Security
Added
- Add CI job to push to
openstack-app-collection. - Add CI job to push to
gcp-app-collection. - Configured read header timeout in the http server
Fixed
- Dependency updates for security.
Changed
- Fix schema type for tolerations (#157).
Changed
- Make ServiceMonitor relabelings configurable and drop unhelpful pod, container, and service labels by default.
- Build with
app-build-suite. - Add
app-test-suite basic smoke tests.
Changed
- Push
kyverno to the cloud-director app collection. - Update
kyverno-policy-reporter to upstream version 2.10.1 / chart version 2.13.1.
Changed
- Align
PodSecurityPolicy for CRD & ClusterIssuer install jobs to actual needs. - Fix
PodSecurityPolicy name for CA injector.
Changed
- Change namespace on GCP management clusters to
kyverno.
Added
- Push
kyverno to the GCP app collection.
Changed
- Add Service and Deployment annotations for Giant Swarm platform monitoring.
- Change target namespace for Giant Swarm management clusters.
- Build with
app-build-suite. - Add
app-test-suite tests.
Changed
- Update
kyverno to upstream version 1.7.4 / chart version 2.5.4. - Update
kyverno-policy-reporter to upstream version 2.10.0 / chart version 2.13.0.
Changed
- Update
kyverno to upstream version 1.7.3 / chart version 2.5.3.