diff --git a/CHANGELOG.md b/CHANGELOG.md index 03d3571..bf89ec7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [v1.3.2] - 2024-12-18 +### Changed +- Activate deny all networkpolicy in helm values. + +### Fixed +- [#74] Missing `get`- and `update`-permissions for `tcp-services` and `udp-services` configmaps + - These are necessary to update exposed ports + ## [v1.3.1] - 2024-12-17 ### Fixed - [#72] Missing `get`-permission for ingress objects diff --git a/Dockerfile b/Dockerfile index 1b619bc..e76c8f9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -31,7 +31,7 @@ RUN make compile-generic FROM gcr.io/distroless/static:nonroot LABEL maintainer="hello@cloudogu.com" \ NAME="k8s-service-discovery" \ - VERSION="1.3.1" + VERSION="1.3.2" WORKDIR / diff --git a/Makefile b/Makefile index 435ec8a..f4b75d7 100644 --- a/Makefile +++ b/Makefile @@ -1,6 +1,6 @@ # Set these to the desired values ARTIFACT_ID=k8s-service-discovery -VERSION=1.3.1 +VERSION=1.3.2 IMAGE=cloudogu/${ARTIFACT_ID}:${VERSION} GOTAG?=1.23.4 diff --git a/k8s/helm/component-patch-tpl.yaml b/k8s/helm/component-patch-tpl.yaml index a41ac29..1078db8 100644 --- a/k8s/helm/component-patch-tpl.yaml +++ b/k8s/helm/component-patch-tpl.yaml @@ -1,7 +1,7 @@ apiVersion: v1 values: images: - serviceDiscovery: cloudogu/k8s-service-discovery:1.3.1 + serviceDiscovery: cloudogu/k8s-service-discovery:1.3.2 patches: values.yaml: manager: diff --git a/k8s/helm/templates/service-discovery-role.yaml b/k8s/helm/templates/service-discovery-role.yaml index 5b18aa1..6ebb148 100644 --- a/k8s/helm/templates/service-discovery-role.yaml +++ b/k8s/helm/templates/service-discovery-role.yaml @@ -32,6 +32,18 @@ rules: - list - get - watch + # update exposed ports in tcp- and udp-services configmaps + - apiGroups: + - "" + resources: + - configmaps + resourceNames: + - tcp-services + - udp-services + verbs: + - get + - update + # create and update ingress objects for dogus - apiGroups: - networking.k8s.io resources: diff --git a/k8s/helm/values.yaml b/k8s/helm/values.yaml index d4e596f..1480602 100644 --- a/k8s/helm/values.yaml +++ b/k8s/helm/values.yaml @@ -26,7 +26,7 @@ manager: image: registry: docker.io repository: cloudogu/k8s-service-discovery - tag: 1.3.1 + tag: 1.3.2 env: logLevel: info stage: production @@ -43,5 +43,5 @@ ingress: controller: nginx-ingress # currently only supported ingress controller networkPolicies: enabled: true - denyAll: false + denyAll: true ingressControllerAllowedCIDR: "0.0.0.0/0"