Security
Added
- Add default value for giantswarm CLIAuth client ID.
Added
- Reconcile individual clusterRoleBinding for each org namespace to grant and revoke automation access to silences.
Changed
- Build with
app-build-suite instead of architect. - Set more restrictive
securityContexts to comply with restricted PSS standards. - Apply a PriorityLevelConfig and FlowSchema for starboard’s API requests.
Fixed
- RBAC for
cmctl upgrade migrate-api-version (#249).
Changed
- Update to upstream version
0.4.13/app version 0.28.1.
Added
- Allow selectively enabling/disabling controllers for each report type.
Fixed
- Automatically try to execute
cmctl upgrade migrate-api-version in crd install job to upgrade stored apiversions (#245)
Added
- Replace
|- with | in CA templating.
Added
- Enforce the management cluster name in workload cluster info and automatically fill in the CA.
Fixed
- Fix broken relative link in README
Changed
- Upgrade to upstream image
v1.7.3 which increases some hard-coded timeouts for certain ACME issuers (ZeroSSL and Sectigo) (#243) - Update kubectl container version to
1.24.2 (#243)