Security
Changed
- Use retagged container image for HTTP01 AcmeSolver (#212)
- Pin kubectl to 1.23.3 in crd-install and clusterissuer-install jobs (#216)
- Add
application.giantswarm.io/team to default labels (#224).
Added
- Push policies to
giantswarm catalog.
Changed
- Track upstream PSS policies with a subtree.
- Push PSS policies to AWS, Azure, KVM, OpenStack, and VSphere catalogs and collections.
- Remove catalog and collections push for common and shared policies.
Changed
- Break
kyverno-policies chart into its own separate app. - Change
kyverno chart to a subtree tracking the upstream kyverno chart.
Removed
- Remove
orgpermissions controller as it is deprecated and all its resources have been cleaned up.
Changed
- Dependencies: replace
github.com/dgrijalva/jwt-go with github.com/golang-jwt/jwt/v4.
- Use Go 1.17, dependency updates
- Add PodDisruptionBudget
Added
- Add Organization CR example
- Move PR template into .github folder
Changed
- Use
k8smetadata for labels and annotations instead of apiextensions. - Use
organization-operator to import Organization CRD. - Bump
giantswarm/k8sclient to v7.0.1. - Bump
giantswarm/operatorkit to v7.0.1. - Bump k8s dependencies to
v0.20.15. - Bump
controller-runtime to v0.8.3. - Selector moved from watcher to individual handlers for rbac controller.