2022.09.1

What's Changed

• BREAKING Add extra_config to ingress nginx config object by @CalleB3 in #774
• Remove default value on unique_suffix in core module by @NissesSenap in #776
• upgrade AWS calico to 3.24 by @NissesSenap in #778
• Update Falco helm chart to 2.0.16 by @NissesSenap in #775
• Upgrade flux v2 to 0.17.0 and update source CR to v1beta2 by @NissesSenap in #777
• Add AWS CSI driver by @NissesSenap in #780
• prepare 2022.09.1 by @NissesSenap in #782

Full Changelog: 2022.08.3...2022.09.1

2022.08.3

What's Changed

• AKS audit logs for audit by @NissesSenap in #715
• Fix Linkerd cert expiring 8 years too early by @phillebaba in #764
• Replace linkerd image registry with ghcr by @phillebaba in #765
• Skip Linkerd proxy for Ingress Nginx webhook by @phillebaba in #766
• Enable a seperate helm-crd for oci helm charts by @NissesSenap in #767
• Use OCI helm chart in xenit linkerd fork and update linkerd to 2.12.0 by @NissesSenap in #768
• Make region optinal in ingress-health fqdn by @jimgus in #771
• Set correct linkerd-cni chart by @NissesSenap in #772
• Prepare 2022.08.3 by @NissesSenap in #773

Full Changelog: 2022.08.2...2022.08.3

Due to changes in #715 you need to create a new RG in your governance config.
You also need to update the core module to this release, which will create a new storage account where you can store audit logs.

For easiest upgrade create 3 separate PR:s since, one for each module and they all have to pass in governance -> core -> AKS.

2022.08.2

What's Changed

• BREAKING Add multi region support by @jimgus in #691
• Prepare release 2022.08.2 by @jimgus in #762

Full Changelog: 2022.08.1...2022.08.2

Major breaking change, this release makes us multi region compatible. We have redone file structures and a bunch moved around multiple resources to new and old tf state.

2022.08.1

What's Changed

• Enable chroot in AWS again by @NissesSenap in #748
• Update terraform and tooling by @simongottschlag in #756
• Fix tf-latest-version by @simongottschlag in #757
• Add cert permissions to group owners by @jimgus in #743
• Bump terraform tls provider by @simongottschlag in #759
• Move secrets-store-csi-driver-provider-azure helm chart location by @simongottschlag in #760
• Prepare release 2022.08.1 by @jimgus in #761

Full Changelog: 2022.07.2...2022.08.1

2022.07.2

What's Changed

• Prepare 2022.07.1 by @jimgus in #742
• Add configurable external_dns_hostname annotation for ingress-nginx by @CalleB3 in #744
• Update ingress-nginx to 4.2.0 by @NissesSenap in #745
• Get VPA crd from correct helm chart by @NissesSenap in #746
• Fix cert-manager webhook AWS config by @NissesSenap in #747
• Update gatekeeper to 3.9.0 by @NissesSenap in #749
• Add 1.23 as a supported version by @NissesSenap in #753
• Prepare release 2022.07.2 by @NissesSenap in #754

This PR adds support for kubernetes 1.23.
After gatekeeper 3.9.0 we feel safe to jump up to next release.

Full Changelog: 2022.07.01...2022.07.2

2022.07.01

What's Changed

• [Breaking] Make it possible to disable unique_suffix by @NissesSenap in #735
• Update fluxv1 and helm operator by @phillebaba in #736
• Disable datadog-operator crd installation by @CalleB3 in #738
• Give tenant access to read VPA by @NissesSenap in #739
• Update linkerd versions by @phillebaba in #741
• [Breaking] Make EKS admin assume role principals configurable by @jimgus in #740

Please pay attention to the breaking changes

Full Changelog: 2022.06.3...2022.07.01

2022.06.3

What's Changed

• Upgrade ingress-nginx helm chart to 4.1.4 and enable chroot by @NissesSenap in #714
• Remove force conflicts by @phillebaba in #717
• Set resource requests for datadog-cluster-agent, starboard-operator, ingress-nginx and goldilocks-controller by @NissesSenap in #716
• Remove create before destroy by @phillebaba in #718
• Upgrade flux v1 config rbac to v1 by @NissesSenap in #719
• Allow datadog ingress by default to tenant namespace by @slarwise in #721
• [Manual] Upgrade azad-kube-proxy to 0.0.34 by @NissesSenap in #724
• Upgrade git-auth-proxy to v0.7.2 by @NissesSenap in #727
• override public ip prefix name in aks global by @NissesSenap in #729
• Add resources to, datadog agent, datadog-operator, cert-manager by @NissesSenap in #733
• Set resource request and limits to node ttl by @phillebaba in #732
• Prepare 2022.06.3 by @NissesSenap in #731

If you have upgraded to k8s 1.22 already and are using azad-kube-proxy you will need to follow the manual steps defined in: #724

New Contributors

• @slarwise made their first contribution in #721

Full Changelog: 2022.06.2...2022.06.3

2022.06.2

What's Changed

• AKS Set kubelet config pod_max_pid by @NissesSenap in #641
• [Breaking] Upgrade linkerd CNI to 2.11.2 and control-plane to edge-22.6.1 by @NissesSenap in #709
• Increase prometheus resource request and limit by @phillebaba in #710
• Set EKS addons resolve conflicts to overwrite by @jimgus in #712
• Bump prometheus extras chart version by @phillebaba in #713
• Prepare 2022.06.2 by @NissesSenap in #711

Full Changelog: 2022.06.1...2022.06.2

2022.06.1

What's Changed

• Add node local dns to AWS and enable by default by @phillebaba in #636
• Fix k8s version check and update supported versions by @phillebaba in #688
• Specify latest addon version in EKS and update tf aws to 4.9.0 by @phillebaba in #654
• metrics-server take extraArgs as a list by @NissesSenap in #690
• [BREAKING] Add node ttl to EKS and AKS by @phillebaba in #692
• Add premium zrs storage class by @phillebaba in #698
• Set default environment in datadog agent by @NissesSenap in #697
• Update Helm provider to latest version by @phillebaba in #699
• Fix node-ttl OCI registry by @phillebaba in #700
• Add breaking info to changelog on PR692 by @NissesSenap in #702
• Exclude prometheus ns from gatekeeper by @NissesSenap in #703
• Lift ingress-healthz nginx to 12.0.3 by @qhris in #707
• Add datadog nginx-ingress-controller logs config by @NissesSenap in #701
• Prepare 2022.06.1 by @NissesSenap in #708

New Contributors

• @qhris made their first contribution in #707

Full Changelog: 2022.05.4...2022.06.1

2022.05.4

What's Changed

• Update aad pod identity by @phillebaba in #684
• Update csi secrets store by @phillebaba in #685
• Update monitoring applications by @phillebaba in #686
• Prepare release of 2022.05.4 by @phillebaba in #687

Full Changelog: 2022.05.3...2022.05.4