Connectivity
Changed
- Chart: Sync to upstream. (#760)
- Controller: Update image to v1.11.4.
- Kube Webhook CertGen: Update image to v1.5.0.
- changed:
app.giantswarm.io label group was changed to application.giantswarm.io - Sync with upstream 1.2.1 helm chart
- Add team cabbage annotation and label
- Add values.schema.json
- Adapt the namespace to our taste
- Set requests and limits for certgen Job
- Improve security for PSS compliance
Changed
- Update
coredns image to 1.11.4. - Explicitly expose liveness and readiness probe ports in deployments.
Removed
- Remove PodSecurityPolicy and associated Resources and values.
Changed
- Chart: Sync to upstream. (#741)
- Controller: Update image to v1.11.3.
- Kube Webhook CertGen: Update image to v1.4.4.
- Chart: Implement
controller.admissionWebhooks.service.servicePort. - Chart: Rework ServiceMonitor.
- Chart: Align default backend
PodDisruptionBudget. - Chart: Specify
matchLabelKeys in Topology Spread Constraints.
Changed
- Update
coredns image to 1.11.3.
Removed
- Removed legacy Giant Swarm monitoring labels as coredns is monitored through a prometheus-operator generated servicemonitor.
Changed
- Chart: Sync to upstream. (#687)
- Controller: Update image to v1.11.2.
- OpenTelemetry: Update image to v20240813-b933310d.
- Kube Webhook CertGen: Update image to v1.4.3.
Removed
- Chart: Sync to upstream. (#687)
- Helpers: Remove useless
isControllerTagValid.
Fixed
- Fix Cilium pod being restarted too soon – instead of every 15 minutes – in case of failed regeneration recovery. This was because creation date parsing failed.
Added
- Chart: Sync to upstream. (#687)
- Chart: Explicitly set
runAsGroup.
