Connectivity

  • Added

    • Deployment: Align to upstream (#214).
      • Add extraVolumes and extraVolumeMounts from values.
      • Add environment variables from values.
      • Add secretConfiguration for injecting secrets to deployment.
  • Changed

    • ServiceAccount: Align to upstream (#207).
      • Helper: Add upstream helpers.
      • ServiceAccount: Add annotations from values.
    • RBAC: Align to upstream (#209)
      • Split rbac.yaml into clusterrole.yaml and clusterrolebinding.yaml.
      • Compose role rules based on values.
      • Rename ClusterRoleBinding.
      • Enable RBAC creation based on values.
    • Deployment: Align to upstream (#210 #211).
      • Add annotations from values.
      • Add labels in pods from values.
      • Add annotations in pods from values.
      • Add deployment specs.
  • Added

    • Possibility to set scale down stabilizationWindowSeconds behaviour
  • Added

    • CAPA provider for service account irsa annotation
  • Added

    • Support for running behind a proxy.
      • HTTP_PROXY,HTTPS_PROXY and NO_PROXY are set as environment variables in the deployment if defined in values.yaml.
    • Support for using cluster-apps-operator specific cluster.proxy values.
  • Changed

    • Allow using AWS Route53 from any provider #200
  • Added

    • Added CiliumNetworkPolicy for the CRD install job.

    Changed

    • The helm job that installs CRDs is not removed if the job fails.
  • Added

    • Add support for GCP workload identity for authentication.
  • Added

    • Templates: Add controller.admissionWebhooks.patch.labels. (#360)
    • Templates: Add controller.admissionWebhooks.annotations. (#362)
    • Webhook: Add labels & selectors. (#364)
    • Templates: Add controller.admissionWebhooks.existingPsp. (#365)
    • Webhook: Align values & functions. (#366)
      • Webhook: Rename & align NetworkPolicy.
      • Helpers: Add ingress-nginx.controller.fullname.
      • Webhook: Add controller.admissionWebhooks.extraEnvs.
      • Webhook: Add controller.admissionWebhooks.createSecretJob.resources.
      • Webhook: Add controller.admissionWebhooks.patchWebhookJob.resources.
      • Webhook: Add controller.admissionWebhooks.patch.securityContext.

    Changed

    • Helpers: Rename resource.default.name to ingress-nginx.fullname. (#356)
    • Repository: Rename master to main. (#357)
    • Helpers: Rename labels.common to ingress-nginx.labels. (#358)
    • Templates: Align hook annotations, namespaces & indention. (#359, #361)
    • Templates: Align ValidatingWebhookConfiguration. (#363)
    • Webhook: Align values & functions. (#366)
      • Webhook: Disable privilege escalation.
      • Webhook: Align image concatenation.
      • Webhook: Align values.yaml.

    Removed

    • Webhook: Align values & functions. (#366)
      • Webhook: Remove controller.admissionWebhooks.patch.backoffLimit.
        backoffLimit was set to the default value of 6 all the time anyway, so we remove it to ease future upstream alignments.
    • Revert ‘Add support to create internal Load Balancers on GCP.’. (#367)
  • Changed

    • Use CoreDNS as upstream in order to avoid double configuration for internal domains.