Connectivity
Added
- Deployment: Align to upstream (#214).
- Add extraVolumes and extraVolumeMounts from values.
- Add environment variables from values.
- Add secretConfiguration for injecting secrets to deployment.
Changed
- ServiceAccount: Align to upstream (#207).
- Helper: Add upstream helpers.
- ServiceAccount: Add annotations from values.
- RBAC: Align to upstream (#209)
- Split rbac.yaml into clusterrole.yaml and clusterrolebinding.yaml.
- Compose role rules based on values.
- Rename ClusterRoleBinding.
- Enable RBAC creation based on values.
- Deployment: Align to upstream (#210 #211).
- Add annotations from values.
- Add labels in pods from values.
- Add annotations in pods from values.
- Add deployment specs.
Added
- Possibility to set scale down
stabilizationWindowSeconds behaviour
Added
- CAPA provider for service account
irsa annotation
Added
- Support for running behind a proxy.
HTTP_PROXY,HTTPS_PROXY and NO_PROXY are set as environment variables in the deployment if defined in values.yaml.
- Support for using
cluster-apps-operator specific cluster.proxy values.
Changed
- Allow using AWS Route53 from any provider #200
Added
- Added
CiliumNetworkPolicy for the CRD install job.
Changed
- The helm job that installs CRDs is not removed if the job fails.
Added
- Add support for GCP workload identity for authentication.
Added
- Templates: Add
controller.admissionWebhooks.patch.labels. (#360) - Templates: Add
controller.admissionWebhooks.annotations. (#362) - Webhook: Add labels & selectors. (#364)
- Templates: Add
controller.admissionWebhooks.existingPsp. (#365) - Webhook: Align values & functions. (#366)
- Webhook: Rename & align
NetworkPolicy. - Helpers: Add
ingress-nginx.controller.fullname. - Webhook: Add
controller.admissionWebhooks.extraEnvs. - Webhook: Add
controller.admissionWebhooks.createSecretJob.resources. - Webhook: Add
controller.admissionWebhooks.patchWebhookJob.resources. - Webhook: Add
controller.admissionWebhooks.patch.securityContext.
Changed
- Helpers: Rename
resource.default.name to ingress-nginx.fullname. (#356) - Repository: Rename
master to main. (#357) - Helpers: Rename
labels.common to ingress-nginx.labels. (#358) - Templates: Align hook annotations, namespaces & indention. (#359, #361)
- Templates: Align
ValidatingWebhookConfiguration. (#363) - Webhook: Align values & functions. (#366)
- Webhook: Disable privilege escalation.
- Webhook: Align image concatenation.
- Webhook: Align values.yaml.
Removed
- Webhook: Align values & functions. (#366)
- Webhook: Remove
controller.admissionWebhooks.patch.backoffLimit.
backoffLimit was set to the default value of 6 all the time anyway, so we remove it to ease future upstream alignments.
- Revert ‘Add support to create internal Load Balancers on GCP.’. (#367)
Changed
- Use CoreDNS as upstream in order to avoid double configuration for internal domains.