Security
Added
- Add default port to Kubernetes API values to make it configurable.
Added
- Add
externalresources resource that binds organization-$org-read role for any subject with org-namespace access. - Deprecate
orgpermissions controller as it is replaced by the above.
Added
- Add configurable nodeSelector to Helm values.
Changed
Changed
- Drop dependency on apiextensions by moving Organization API into this repository.
- Update k8sclient and operatorkit to v6.
- Require Go v1.17
Fixed
- Add missing
imagePullSecret.
Changed
- Use
ebpf driver instead of kernel module by default.
Changed
- Update to upstream version 0.9.1 with
starboard-operator version 0.14.1. - Move resource limit overrides to the App instead of modifying the upstream chart.
- Override Trivy version to use newer v0.24.0.
Changed
- Build with
app-build-suite instead of architect. - Update to upstream version
0.4.12/app version 0.24.0.
Added
- Add NodeAffinity to run the exporter only on Linux Nodes with AMD64.
Fixed
- Change to using
maxUnavailable to match existing configs.