Security
Changed
- Dependencies: replace
github.com/dgrijalva/jwt-go with github.com/golang-jwt/jwt/v4.
- Use Go 1.17, dependency updates
- Add PodDisruptionBudget
Added
- Add Organization CR example
- Move PR template into .github folder
Changed
- Use
k8smetadata for labels and annotations instead of apiextensions. - Use
organization-operator to import Organization CRD. - Bump
giantswarm/k8sclient to v7.0.1. - Bump
giantswarm/operatorkit to v7.0.1. - Bump k8s dependencies to
v0.20.15. - Bump
controller-runtime to v0.8.3. - Selector moved from watcher to individual handlers for rbac controller.
Added
- Add default port to Kubernetes API values to make it configurable.
Added
- Add
externalresources resource that binds organization-$org-read role for any subject with org-namespace access. - Deprecate
orgpermissions controller as it is replaced by the above.
Added
- Add configurable nodeSelector to Helm values.
Changed
Changed
- Drop dependency on apiextensions by moving Organization API into this repository.
- Update k8sclient and operatorkit to v6.
- Require Go v1.17
Fixed
- Add missing
imagePullSecret.
Changed
- Use
ebpf driver instead of kernel module by default.