API Changes
- Add
nonecredential type (credentials.type: none) that disables built-in credential injection. Users supply provider-specific credentials viapodOverrides.envand can setpodOverrides.serviceAccountNamefor workload identity (IRSA, GKE Workload Identity, Azure Workload Identity). This enables AWS Bedrock, Google Vertex AI, and other providers without provider-specific CRD fields. (#785)
Features
- Update gemini image from 0.34.0 to 0.35.0 (#790)
- Update opencode image from 1.2.27 to 1.3.2 (#772)
- Add --controller-resource-requests and --controller-resource-limits flags to kelos install for configuring controller container resources. The previously hardcoded resource limits have been removed to prevent OOM kills. (#783)