• Feat: allow to runAsNonRoot puppetserver deployement (masters & compilers) pods
• Feat: add PodDisruptionBudget
• Feat: add networkPolicy
• Feat: allow to configure different affinity between masters & compilers
• Feat: no need to define manually the clusterIP of the puppetdb when using singleCA feature with public certificate authority
• Fix: Update PodSecurityPolicy, add missing allowedCapabilities
• Fix: puppetserver restart issue because of certificate name
• Fix: error in puppetserver log about dropsonde