Added
- Added
CiliumNetworkPolicyfor the CRD install job.
Changed
- The helm job that installs CRDs is not removed if the job fails.
CiliumNetworkPolicy for the CRD install job.controller.admissionWebhooks.patch.labels. (#360)controller.admissionWebhooks.annotations. (#362)controller.admissionWebhooks.existingPsp. (#365)NetworkPolicy.ingress-nginx.controller.fullname.controller.admissionWebhooks.extraEnvs.controller.admissionWebhooks.createSecretJob.resources.controller.admissionWebhooks.patchWebhookJob.resources.controller.admissionWebhooks.patch.securityContext.resource.default.name to ingress-nginx.fullname. (#356)master to main. (#357)labels.common to ingress-nginx.labels. (#358)ValidatingWebhookConfiguration. (#363)This version drops support for kubernetes versions below 1.22.0.
PodSecurityPolicy for Kubernetes >= v1.25. (#352)Please upgrade to any v2.18.x version before upgrading to this release or above since the controller image contained in there migrates your setup to the Lease API.
Additionally the controller version included in this release deprecates some metric names and introduces others as a replacement. See this PR and the upstream docs for more details.
controller.service.externalTrafficPolicy and controller.service.internal.externalTrafficPolicy to only allow Local and Cluster. (#344)controller.service.loadBalancerSourceRanges & controller.service.internal.loadBalancerSourceRanges for configuring source IP address ranges which can access the ingress service.