Connectivity
Fixed
- CRD install job: bump the
kubectl-apply-job dependency to 0.14.0 and pull it from oci://gsoci.azurecr.io/charts/giantswarm. Its fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
Fixed
- CRD install job: bump the
kubectl-apply-job dependency to 0.14.0, whose fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
Fixed
- CRD install job: bump the
kubectl-apply-job dependency to 0.14.0 and pull it from oci://gsoci.azurecr.io/charts/giantswarm. Its fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
Fixed
- CRD install job: bump the
kubectl-apply-job dependency to 0.14.0, whose fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
Fixed
- Values schema: accept arbitrary keys again in free-form maps and pass-through Kubernetes objects (annotations, labels,
nodeSelector, affinity, security contexts, probes, resources, extraArgs as a map, tlsConfig, secretConfiguration.data), and name in imagePullSecrets items. This broke installs, for example with the IRSA eks.amazonaws.com/role-arn service account annotation on CAPA. - Values schema: accept the
aws values that cluster-aws still sets. They have no effect.
Changed
- Upgrade external-dns to v0.23.0.
- Sync to upstream helm chart 1.23.0.
Fixed
- Make the DNS Service redirected by the
CiliumLocalRedirectPolicy configurable. - The
helm.sh/chart label is valid for long chart versions: the 63-character cut trims the whole trailing run of -, . and _.
Added
- Chart metadata: add
io.giantswarm.application.managed annotation ("true"). - Chart metadata: add
keywords.
Added
- Chart metadata: add
io.giantswarm.application.managed annotation ("true").
Changed
- Fix all performance tests suites.
- Fix stale and contradictory instructions in
CLAUDE.md and the perf-report claude skill. - Update Envoy Gateway to v1.9.2.
Changed
- Update
coredns image to 1.14.7.
Fixed
- The
helm.sh/chart label is valid for long chart versions: the 63-character cut trims the whole trailing run of -, . and _.
Added
- Chart metadata: add
io.giantswarm.application.managed annotation ("true"). - Chart metadata: add
keywords.
Fixed
- The
helm.sh/chart label is valid for long chart versions: the 63-character cut trims the whole trailing run of -, . and _.
Added
- Chart metadata: add
io.giantswarm.application.managed annotation ("true"). - Chart metadata: add
keywords.
Changed
- Run the E2E test suites automatically on release PRs by adding
.github/release-pr-body.md. - Upgrade external-dns to v0.22.0.
- Sync to upstream helm chart 1.22.0.
- Add
replicaCount value to scale the deployment down to 0 or back to 1. - Add
service.enabled value to skip creating the Service. - Add
hostAliases value to inject entries into the pod’s /etc/hosts. - Add
crd as a valid registry value, with the matching RBAC on dnsrecords. - Install the new
DNSRecord CRD. - Narrow the RBAC verbs on
dnsendpoints/status from * to update. policy is now a required value. Our default of sync is unchanged.- Pin
annotationPrefix to external-dns.alpha.kubernetes.io/, keeping the previous annotation prefix after upstream changed the default.
Fixed
- Honor the deprecated
configmap.log, loadbalancePolicy and configmap.cache again. Since 1.31.0 coredns.<zone>.log, coredns.<zone>.loadbalance and coredns.<zone>.cache.success.ttl shipped defaults that shadowed them, so the old keys were silently ignored. They are now unset by default, restoring the documented fallback chain. Rendering with default values is unchanged.
Changed
- Update
coredns image to 1.14.6. - Run the E2E test suites automatically on release PRs by adding
.github/release-pr-body.md.