Security
Changed
- Update to upstream version 0.9.1 with
starboard-operator version 0.14.1. - Move resource limit overrides to the App instead of modifying the upstream chart.
- Override Trivy version to use newer v0.24.0.
Changed
- Build with
app-build-suite instead of architect. - Update to upstream version
0.4.12/app version 0.24.0.
Added
- Add NodeAffinity to run the exporter only on Linux Nodes with AMD64.
Fixed
- Change to using
maxUnavailable to match existing configs.
Changed
- Enable Pod Disruption Budget by default.
Added
- Add annotation
app.giantswarm.io/secret-checksum to dex deployment for automatic restarts of the dex pods on config changes.
Changed
- Enable upgrade tests again, now that there are two releases in the catalog.
Changed
- Set
priorityClass of giantswarm-critical for Falco DaemonSet.
Added
- Add PodDisruptionBudget with
minAvailable: 1
Fixed
- Fix Firestore collection name used for writing RUM data.