What’s Changed
- chore(deps): update goreleaser/goreleaser-action action to v7.2.2 by @renovate[bot] in https://github.com/giantswarm/muster/pull/754
Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.214...v0.1.215
Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.214...v0.1.215
Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.213...v0.1.214
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.0.95...v0.0.96
securityContext defaults to the bundled valkey metrics exporter sidecar (valkey.valkey.metrics.exporter.securityContext). 0.4.0 hardened the main valkey container and its init container, but the redis_exporter sidecar (containers[1], port 9121) lives under a separate values key and was still rejected by Kyverno’s disallow-privilege-escalation policy.securityContext/podSecurityContext defaults on the bundled valkey sub-chart, which were inadvertently dropped during the CRD-chart split (0.3.0). Without them, Kyverno’s disallow-privilege-escalation and restrict-seccomp-strict policies reject the muster-valkey Deployment because the init container reuses the main container’s securityContext and the upstream defaults omit allowPrivilegeEscalation: false and seccompProfile: RuntimeDefault.agentic-platform-crds chart (helm/agentic-platform-crds/): a CRD-only umbrella that vendors the upstream agentgateway-crds (v1.2.1) and muster-crds sub-charts, shipping all five CRDs the platform’s CRs consume. Install it before agentic-platform; CRD and workload lifecycles are now decoupled (two releases in sequence, Flux/Argo-agnostic). The muster CRDs are helm.sh/resource-policy: keep-protected via muster-crds.crds.annotations.architect/push-to-app-catalog job (package-and-push-crds-chart) building and publishing agentic-platform-crds alongside agentic-platform on git tags.agentic-platform into the new agentic-platform-crds chart. agentic-platform now installs zero CRDs — it renders only the CRs (Gateway, AgentgatewayParameters, plus muster’s). helm template agentic-platform emitting any CustomResourceDefinition is a regression.muster.crds.install defaulted to false in agentic-platform values, so the bundled muster sub-chart renders no CRDs (the currently pinned muster 0.1.197 still defaults crds.install: true).Chart.yaml description: CRDs now ship in the companion agentic-platform-crds chart.agentgateway-crds sub-chart dependency (condition: agentgateway-crds.enabled) and the agentgateway-crds: values block from agentic-platform. The CRDs are provided by agentic-platform-crds.Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.212...v0.1.213
Full Changelog: https://github.com/giantswarm/muster/compare/v0.1.211...v0.1.212
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.0.94...v0.0.95
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.0.93...v0.0.94