Security
Added
- Push to OCI registry on build.
Changed
- Remove public kubernetes api port in k8s-authenticator configmap template for MCs since the port is already included in the address.
- Add team annotation
Added
- Spread (jitter) re-queueing of reports by +/- 10% by default to help smooth resource utilization.
Added
- Reconcile and expose metrics for
ConfigAuditReport custom resources. Requires Starboard v0.15.0 or above.
Changed
- Move crds subtree out of upstream chart.
- Use crd-install pre-install job.
- Move specs subtree out of upstream chart.
- Use spec-install post-install job.
Changed
- Update to upstream version 0.10.3 with
starboard-operator version 0.15.3. - Add
specs folder as a new subtree.
Changed
- Update to upstream version
0.4.13/app version 0.25.0.
Changed
- Use retagged container image for HTTP01 AcmeSolver (#212)
- Pin kubectl to 1.23.3 in crd-install and clusterissuer-install jobs (#216)
- Add
application.giantswarm.io/team to default labels (#224).
Added
- Push policies to
giantswarm catalog.
Changed
- Track upstream PSS policies with a subtree.
- Push PSS policies to AWS, Azure, KVM, OpenStack, and VSphere catalogs and collections.
- Remove catalog and collections push for common and shared policies.
Changed
- Break
kyverno-policies chart into its own separate app. - Change
kyverno chart to a subtree tracking the upstream kyverno chart.