stable-1.15-1.8.0

• [kibana]: Fixes an issue causing an outdated version of Kibana to be deployed to GCP. (#249, @branden)

stable-1.16-1.7.0

• [prometheus]
  • [CHANGE] Restrict api extension RBAC rules
  • [BUGFIX] Fix statefulset crash loop on kubernetes (#219, @shaneutt)
• [dex]: support specifying root CA for LDAP connectors in Dex controller. (#224, @jieyu)
• [velero]: bump velero to chart version 3.0.3, which includes velero-minio RELEASE.2020-04-10T03-34-42Z (#215, @jieyu)
• [dex-k8s-authenticator] added support for the konvoy credentials plugin (#193, @jr0d)
• [velero]: switch minio backend logging from plaintext to json (#216, @vespian)

stable-1.15-1.7.0

• [prometheus]
  • [CHANGE] Restrict api extension RBAC rules
  • [BUGFIX] Fix statefulset crash loop on kubernetes (#219, @shaneutt)
• [dex]: support specifying root CA for LDAP connectors in Dex controller. (#224, @jieyu)
• [velero]: bump velero to chart version 3.0.3, which includes velero-minio RELEASE.2020-04-10T03-34-42Z (#215, @jieyu)
• [dex-k8s-authenticator] added support for the konvoy credentials plugin (#193, @jr0d)
• [velero]: switch minio backend logging from plaintext to json (#216, @vespian)

stable-1.16-1.6.0

• [dex-k8s-authenticator]: Now supports a kubectl credentials plugin for automatically managing identity tokens. Instructions for downloading the plugin and configuring kubectl can be found at https://<cluster-ip>/token/plugin. (#212, @jr0d)
• [cert-manager] usages is no longer definable as part of issuerRef, instead it is a key on its own (#196, @sebbrandt87)
• [elasticsearch] Fixes an issue that may cause the elasticsearch addon to fail to deploy. (#206, @branden)

stable-1.15-1.6.0

• [dex-k8s-authenticator]: Now supports a kubectl credentials plugin for automatically managing identity tokens. Instructions for downloading the plugin and configuring kubectl can be found at https://<cluster-ip>/token/plugin. (#212, @jr0d)
• [cert-manager] usages is no longer definable as part of issuerRef, instead it is a key on its own (#196, @sebbrandt87)
• [elasticsearch] Fixes an issue that may cause the elasticsearch addon to fail to deploy. (#206, @branden)

stable-1.16-1.5.0

• [Elasticsearch] revert the PVC size to default (30G) for data nodes (#203, @jieyu)
• [Prometheus] Upgrade prometheus-operator chart to v8.8.4 (#205, @joejulian)
• [awsebscsiprovisioner] Upgrade awsebscsiprovisioner chart to 0.3.5 and aws-ebs-csi-driver to 0.5.0. (#186, @sebbrandt87)
• [kube-oidc-proxy] allow using default system CA bundle. (#191, @jieyu)
• [Traefik] Upgrade Traefik to 1.7.23. This change fixes the ability to access the Kubernetes API server when the connection needs to be upgraded to SPDY, among other bug fixes. For more details, see mesosphere/charts#514. (#190, @joejulian)
• [dex-k8s-authenticator] allow to use system default CA (#189, @jieyu)
• [Istio] Disable Istio PodDisruptionBudget, the default settings and replica count of 1 prevents pods on nodes from being drained. (#183, @dkoshkin)

stable-1.15-1.5.0

• [Elasticsearch] revert the PVC size to default (30G) for data nodes (#203, @jieyu)
• [Prometheus] Upgrade prometheus-operator chart to v8.8.4 (#205, @joejulian)
• [awsebscsiprovisioner] Upgrade awsebscsiprovisioner chart to 0.3.5 and aws-ebs-csi-driver to 0.5.0. (#186, @sebbrandt87)
• [kube-oidc-proxy] allow using default system CA bundle. (#191, @jieyu)
• [Traefik] Upgrade Traefik to 1.7.23. This change fixes the ability to access the Kubernetes API server when the connection needs to be upgraded to SPDY, among other bug fixes. For more details, see mesosphere/charts#514. (#190, @joejulian)
• [dex-k8s-authenticator] allow to use system default CA (#189, @jieyu)
• [Istio] Disable Istio PodDisruptionBudget, the default settings and replica count of 1 prevents pods on nodes from being drained. (#183, @dkoshkin)

stable-1.16-1.4.1

• [Velero] revert the velero refactor in stable-1.16-1.4.0 due to a data loss issue (#197, @jieyu)
• [Velero-minio] fix a data loss issue after upgrade (#200, @jieyu)

stable-1.15-1.4.1

• [Velero] revert the velero refactor in stable-1.16-1.4.0 due to a data loss issue (#197, @jieyu)
• [Velero-minio] fix a data loss issue after upgrade (#200, @jieyu)

DO NOT USE: stable-1.16-1.4.0

WARNING: This upgrade will delete the secret for the velero backups. The data will remain but it will be inaccessible without that secret.

• [Dex] Add SAML connector support in dex controller allowing users to add SAML IDP using Kubernetes API. (#173, @jieyu)
• [Velero] switch to use minio helm chart (instead of operator) for backup storage. This allow users to install their own minio operator for general purpose object storage. (#174, @jieyu)