Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
azure-container-registry-config.io.giantswarm.application.managed chart annotation for Backstage visibility.cluster-reader ClusterRole (off by default, enabled via clusterReader.enabled: true) that aggregates into the built-in view ClusterRole and grants read access (get/list/watch) on cluster-scoped resources.login: new --oidc-scope flag (repeatable, comma-separated) appends extra scopes to the direct workload-cluster OIDC request. Use --oidc-scope=groups with Okta to receive group memberships in the ID token when the workload cluster’s structured auth is configured with groupsClaim.adaptive thinking interface with a configurable effort (aiChat.anthropic.effort, default high), while older Claude models keep the legacy budget-based interface.io.giantswarm.application.audience: all annotation to publish the app to the customer Backstage catalog.io.giantswarm.application.* format.valuesFromSecret value to optionally inject a Secret as an additional valuesFrom source in the HelmRelease.login: stop silently rerouting client-certificate logins to direct OIDC. Passing any cert-only flag now skips structured-auth detection.template cluster: expand the command’s --help with a multi-line Long description, a docs URL, and worked examples — including how to add an arm64 worker node pool to the generated values.yaml for AWS clusters.gsoci.azurecr.io/giantswarm/envoy-gateway-crds) is built and a pre-install/pre-upgrade hook Job applies the CRDs via kubectl apply --server-side. This avoids CRD ownership conflicts and allows safe upgrades.install.listenersets value to standard (renamed from xlistenersets)install.tlsroutes value to standard