Dependency Bumps
- solo-io/k8s-utils has been upgraded to v0.6.3.
Helm Changes
-
- Add helm values for all containers to allow defining containers' securityContexts * Add global.podSecurityStandards.enableRestrictedContainerDefaults to default to using a restricted set of container defaults * Add new helper template to render the container securityContexts and apply the defaults if neccessary (#8864)
New Features
- Add helm values for all containers to allow for conforming to Pod Security Standards (#8864)
Fixes
- gateway2: simplify how plugins handle delegated routes
This change simplifies how plugins may perform merging
of policies in a delegation chain, particularly in the
case of RouteOptions. It performs an in-place merge
such that the policy on a child route may be overridden
by by a subsequent call to the plugin with a different
route context.
Further, it accurately tracks the source RouteOptions
involved in the merge so that the statuses on them
can be correctly reported. (https://github.com/solo-io/solo-projects/issues/6204)
- Removed the
--proxy-nsflag fromglooctl get proxy, as proxies are now all written to the discoveryNamespace specified in settings. (https://github.com/solo-io/solo-projects/issues/6088)