Security
Added
- Webhook component to validate requests and prevent incorrect configurations.
Changed
- Upgrade cert-manager from 0.9.0 to 0.15.2 (#31).
- This is a breaking change. Please review the upgrade notes here.
- Upgrade helmclient to 1.0.2.
- Upgrade architect-orb to 0.10.0.
Added
- Add github release workflows.
Changed
Changed
- Change
rbac controller label selector to match organization namespaces as well.
- Fix
namespacelabeler controller label selector. - Fix
role name reference in OIDC group and service accounts rolebinding.
Changed
- Push tags to aliyun repository.
- Move
rbac controller code into rbac package. - Add
namespacelabeler controller, which labels legacy namespaces. - Add
automation service account in global namespace, which has admin access to all the tenant namespaces.
Changed
- Reconcile
rolebinding subject group changes properly. - Fix bug with binding role to the
view-all read role instead of tenant-admin write role.
Added
- Add condition for ingress resource installation.
- Add support for internal Control Plane API access.
Changed
- Allowed resource requests and limits to be configured with
values.yaml. (#24)
Changed
- Use Release.Revision in annotation for Helm 3 compatibility.