Changed
- Fix ABS config to not override AppVersion in Chart.yaml
Removed
- Remove redundant L7 rule from the CiliumNetworkPolicy. The removed rule allowed DNS queries to any DNS domain so removing it has no effect.
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
agentic-platform-mcps sub-chart 0.3.0 -> 0.4.0, which adds
identityProviders.<name>.expectedIssuer (rendered into the muster MCPServer
tokenExchange.expectedIssuer). Required to repoint tunneled MCP servers at
tunnelport :8443 in-cluster Services, where the exchanged token’s iss stays
the public Dex issuer and must be pinned (giantswarm#36883).Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.97...v0.0.98
kagent-muster-token-init): no longer depends on a shell in the kubectl image, which is distroless (registry.k8s.io/kubectl) and crash-looped BackoffLimitExceeded on /bin/sh: no such file or directory, failing post-upgrade. The token is now minted via a projected serviceAccountToken volume, the Bearer <token> Secret manifest is rendered by a busybox init container, and kubectl is invoked with args only to apply it. The Job runs as kagent-muster-client (the identity muster trusts); the serviceaccounts/token create RBAC is dropped.agents.muster: replaced tokenDuration (Go duration) with tokenExpirationSeconds (integer, fed to the projected token volume); added busyboxImage.Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.96...v0.0.97
Full Changelog: https://github.com/giantswarm/klaus-operator/compare/v0.0.95...v0.0.96
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.2.3...v0.2.4
networkPolicy.musterInClusterMcpPorts: add 8443 to the default so muster’s supplementary
egress CNP permits reaching tunnelport RemoteApp tunnels (ghostunnel terminates TLS on 8443).
Without it, muster’s connection to in-cluster tunnel backends
(e.g. mcp-kubernetes-garm.agentic-platform.svc:8443) was silently dropped by Cilium and timed
out (context deadline exceeded).klaus-gateway subchart to 0.1.5.