Security
Fixed
- Fix github release workflow.
Changed
- Fixed leader election namespace. (#41)
- Template validatingwebhook namespace selector. (#43)
- Align CRD templating with the main chart. (#42)
Added
- Add Github release workflow.
- Upgrade cert-manager from 0.9.0 to 0.15.2 (#31)
- This is a breaking change. Please review the upgrade notes here.
- Upgrade helmclient to 1.0.2
- Upgrade architect-orb to 0.10.0
Added
- Webhook component to validate requests and prevent incorrect configurations.
Added
- Add github release workflows.
Changed
Changed
- Change
rbac controller label selector to match organization namespaces as well.
- Fix
namespacelabeler controller label selector. - Fix
role name reference in OIDC group and service accounts rolebinding.
Changed
- Push tags to aliyun repository.
- Move
rbac controller code into rbac package. - Add
namespacelabeler controller, which labels legacy namespaces. - Add
automation service account in global namespace, which has admin access to all the tenant namespaces.
Changed
- Reconcile
rolebinding subject group changes properly. - Fix bug with binding role to the
view-all read role instead of tenant-admin write role.
Added
- Add condition for ingress resource installation.
- Add support for internal Control Plane API access.