Security
Changed
- Updated Ingress resources in helm chart.
- Add workaround for Chart upgrade not working when not using lets encrypt due to changed secret type.
Added
- Increase
trivy scan Job memory limits to 1G.
Added
- Create RBAC for customer-facing Flux to access organization namespaces.
- Add
automation ServiceAccount to organization namespaces with permissions to handle Flux resources in that namespace by default.
Removed
- Disable policy-reporter monitoring (ServiceMonitors) by default.
Fixed
- Add missing
imagePullSecret.
Fixed
- Match
appVersion to the starboard-operator app version.
Added
- Add
clusterCA in dex authenticator configmap from cluster values. - Add
smoke test scenario to check if the chart can be deployed. - Add schema validation for the
dex-app helm chart.
Added
- Initial version of the RBAC bootstrapping app
Changed
- Update to upstream version 0.14.0 (chart version 0.9.0).
- Automatically delete
VulnerabilityReports after 7 days to trigger re-scan. - Only scan the current revision of a ReplicaSet.
Removed
- Remove unused
envSecret values from values.yaml.
Added
- Make pod annotations configurable.
- Bump
golang, prometheus, and starboard versions.