pulumi/pulumi-kubernetes v4.24.0

on GitHub

Added

• Added a plainHttp option to the v4.Chart resource. (#3250)

Changed

• The pulumi.com/waitFor annotation now uses an
  RFC9535-compliant JSONPath
  parser. This makes it possible to wait for more complex scenarios.

  For example:

  • To wait for a Pod's status.phase to be "Running" or "Succeeded":

    pulumi.com/waitFor: "jsonpath={.status[?@ == 'Running' || @ == 'Succeeded' ]}"

  • To wait for for an object to have a "Failed" or "Complete" condition with
    a "True" value:

    pulumi.com/waitFor: "jsonpath={.conditions[?(@.type=='Failed'||@.type=='Complete')].status}=True

  (Tools like jsonpath.com are very helpful for
  ensuring your JSONPath expression works as expected.)

  Importantly, please note that kubectl wait --for=jsonpath=... supports only
  a subset of RFC9535. This means some complex waitFor annotations will not
  be reproducible with kubectl.

  Existing expressions should continue to work normally with one notable
  exception: a selector like .items[] now requires an explicit wildcard, i.e.
  .items[*].

  As a reminder, the pulumi.com/waitFor annotation is experimental and
  subject to change. Similarly, RFC9535 is still only proposed and may also
  change in the future.

• enableConfigMapMutable and enableSecretMutable are now stable.
  (#3886)

Fixed

• Helm resources all now use the correct registry/config.json file for
  credentials. For backward-compatibility registry.json is preferred if
  it exists. (#3606)

• Fixed an issue where deletions could take longer than necessary. (#3317)

• Significantly reduced memory usage. (#3713)

• Fixed incorrect deprecation warnings for VolumeAttributesClass. (#3772)

• SecretPatch inputs are now automatically marked as secret.