jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-10-27 20:41:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

release: push gateway chart 0.3.4 (#8126)

Browse Source 
Publish push gateway chart 0.3.4 through the normal chart release
workflow. The chart version and implementation were merged in
[#8113](https://github.com/block/buzz/pull/8113); this release PR
records the release notes and triggers the immutable chart tag and OCI
publisher.

Publication is authorized. The pending security review of #8113 is a
blocker for pinning the chart in the later infrastructure PR, not for
this publication. No gateways or relays are activated.

### Validation

The merged implementation passed the complete chart render suite, chart
CI, and all 14 local wrapper tests. This release changes only the
changelog; chart contents are unchanged from the validated
implementation. Published OCI contents and digest will be verified after
publication.

---------

Signed-off-by: Tom Brow <tomb@block.xyz>
This commit is contained in:
Tom Brow
2026-10-06 11:05:10 -07:00
committed by GitHub
parent 73a2a05c97
commit c6dd587e2a
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
deploy/charts/buzz-push-gateway/CHANGELOG.md
View File

@@ -1,5 +1,27 @@
# Chart release notes
## 0.3.4
Adds runtime Pod labels, a service account name, and a configurable termination
grace period of at least 60 seconds. Reserved selector labels cannot be overridden.
Allows a platform to replace the runtime NetworkPolicy by explicitly naming its
replacement. External policy mode supports PodMonitor without requiring unused
chart-owned monitoring selectors or APNs destinations. The complete-render gate
requires exactly one ordinary replacement NetworkPolicy
in the effective release namespace, selecting the runtime Pods and declaring
both ingress and egress policy types. Helm and Argo CD hook policies are rejected.
External-policy callers must supply independent Deployment, policy and namespace
expectations so removed or overwritten markers fail closed. The gate validates
selector expression grammar and expands Kubernetes Lists. Operators must validate
the full parent render including hooks; a Helm 3 post-renderer alone is insufficient.
Migration NetworkPolicy remains chart-owned and continues to require database
and DNS destinations. Runtime settings do not change migration Pod identity.
Default runtime rendering is unchanged.
Implemented in [#8113](https://github.com/block/buzz/pull/8113).
## 0.3.3
`gatewayOrigin` is now only an HTTPRoute routing input. It is optional unless