Changed
- Update to cloudnative-pg v1.27.1 (chart v0.26.1).
Fixed
- Fix chart configuration so renovate picks up new versions.
Security
Changed
- Use teleport v18.4.0
Fixed
- Fix plugin-barman-cloud name label in cilium network policy.
Changed
- Update main cilium network policy to allow egress to cluster and plugin-barman-cloud.
Changed
- Update
flowcontrolschemaAPI versions. - Use GVK for specifying Kinds in core-policies.
- Add
runAsGroupto container security contexts.
- Update
Changed
- Upgrading to the
v0.20.4version. Included changes:- https://github.com/external-secrets/external-secrets/releases/tag/v0.19.0
- Includes a breaking change because the CRDs are now too big. Apply them with
--server-sideflag ofkubectl apply.
- Includes a breaking change because the CRDs are now too big. Apply them with
- https://github.com/external-secrets/external-secrets/releases/tag/v0.19.1
- https://github.com/external-secrets/external-secrets/releases/tag/v0.19.2
- https://github.com/external-secrets/external-secrets/releases/tag/v0.20.0
- Includes a change in CRDs that make it non-backward compatible with Kubernetes releases older than
v1.30.
- Includes a change in CRDs that make it non-backward compatible with Kubernetes releases older than
- https://github.com/external-secrets/external-secrets/releases/tag/v0.20.1
- https://github.com/external-secrets/external-secrets/releases/tag/v0.20.2
- https://github.com/external-secrets/external-secrets/releases/tag/v0.20.3
- https://github.com/external-secrets/external-secrets/releases/tag/v0.20.4
- https://github.com/external-secrets/external-secrets/releases/tag/v0.19.0
Removed
- Remove PSP support (in CRD installer job, RBAC, values.yaml).
- Upgrading to the
Added
- Add PodLogs for log collection.
Changed
- Update chart-operator
PolicyExceptionto v2.
Changed
- Updated RBAC rules to include
organizations/finalizersfor managing.metadata.ownerReferences.blockOwnerDeletion. - Disable
PodSecurityPoliciesby deafult.
- Updated RBAC rules to include
Added
- Add E2E tests using apptest-framework for automated PR testing across multiple providers (CAPA, CAPV, CAPZ, CAPVCD).
- Basic test suite: Validates fresh installations
- Upgrade test suite: Tests upgrade scenarios and certificate reconciliation
- Add certificate issuance integration test to cluster-test-suites.
Changed
- Upgrade cert-manager to v1.18.2.
- Add E2E tests using apptest-framework for automated PR testing across multiple providers (CAPA, CAPV, CAPZ, CAPVCD).