Security
Changed
- Rename clusterissuer subchart to match it’s name in its Chart.yaml. (#140)
- Make pods of deployments use read-only file systems. (#140)
- Make pre-install/pre-upgrade hooks use server side apply. Possibly fixes upgrade timeouts. (#140)
Changed
- Update
dex to v2.28.1. - Add annotation for owning team
- Update devctl and architect version
- Add pushing to VMware app collection
- Fix Giant Swarm logo URL
Changed
- Install all the
rbac-operator resources by default.
Changed
- Set docker.io as the default registry
Changed
- Label default ClusterRoles, which needs to be displayed in Happa.
Deleted
- Remove selector in
orgpermissions controller.
Changed
- Update
read-all ClusterRole on every bootstrap. - Extend
rbac-operator service account ClusterRole permissions to namespaces.
Changed
- Move management of static resources from Helm into code.
- Remove
view-all related roles/bindings. - Bind customer admin group to
cluster-admin cluster role in target organization namespace.