Security
Changed
- Ensure that
kubeadm configs are not defaulted for control planes.
Added
- Push
falco-app to giantswarm catalog.
Added
- Add annotation which sets
ludacris as app owner. - Allow ingress on port 8000 for scraping metrics.
- Add ServiceMonitor for metrics to be scraped.
- Push
kyverno to giantswarm catalog.
Changed
- Update architect-orb to v4.1.0.
Removed
- Remove Service Monitor policy pending upstream bug fix.
Fixed
- Fix group
controlplane for AWSManagedControlPlaneCR.
Added
- Defaulting
region and sshKeyName in AWSManagedControlPlane CR.
Changed
- Enable labeling policies to work with v1alpha4 types.
Changed
- Fix a bug in certs secret.
Changed
- Update to upstream
v1.4.2 (#174). This deprecates v1alpha2, v1alpha3 and v1beta1 versions of cert-manager.io and acme.cert-manager.io CRDs. Further information can be found in the upstream release notes of cert-manager. - Increase resource requests for the ClusterIssuer and CRD installation Jobs (#174) to prevent timeouts.