Security
Fixed
- Bring back port 53 for DNS resolution.
Changed
- Removed check capabilities from VerticalPodAutoscaler resources.
- Dropped
CPU from Reports Controller VerticalPodAutoscaler controlled resources.
Fixed
- Fix applying RoleBindingTemplate to multiple namespaces
Added
- Add cr example
- Add namespace check to rolebindingtemplate controller
Fixed
- Fixed selector labels for Cilium network policy
Changed
- Move flux auth out of org/cluster namespace controllers and reconcile it via RoleBindingTemplates instead.
Added
- Add NetworkPolicies for controller and cainjector. (#354)
Changed
- Add missing controller config ConfigMap template. (#352)
Changed
- Make
spec.enableServiceLinks field configurable for controller, cainjector and webhook Deployments and startupapicheck Job. (#350) - Update chart from upstream. Relevant upstream PRs: #6241, #6156, #6292, #5337. (#350)
Removed
- Remove
write-clusters and write-nodepools cluster roles as it is unused.