Security
Changed
- Run preinstall job as non-root.
Changed
- Move cert-manager ownership to team BigMac. (#349)
- Add default cpu and memory limits to controller, cainjector and webhook deployments. (#367)
- Change the Pod Disruption Budget (PDB) to percentage-based (#372)
Added
- First release of the Exception Recommender App.
Added
- New config var
resyncPeriod to control the reconcile loop resync period
Added
- Added
seccompProfile for PSS compliance.
Fixed
- Try to fix flaky tests by increasing retries.
Changed
- Propagate
global.podSecurityStandards.enforced value set to false for PSS migration
Changed
- Propagate
global.podSecurityStandards.enforced value set to false for PSS migration
Changed
- Propagate
global.podSecurityStandards.enforced value set to false for PSS migration
Changed
- Update deployment to be PSS compliant and PSP toggle.