bd1ff00e48
Publish gateway chart 0.3.5 through the normal immutable release workflow. This release includes Deployment metadata annotations from [#8136](https://github.com/block/buzz/pull/8136), while preserving chart-owned policy markers and existing default manifests. Only the chart version and release notes change. The gateway binary appVersion remains 0.1.0. ### Validation Full gateway chart render suite and release-contract validation passed. The feature's full repository validation and exact-head owner review passed before merge. Publication will be verified from the OCI registry before advancing the wrapper dependency. `buzz-review-completed`: Agent validation passed; automated DCO finding was reconciled against the signed exact-head commit and green DCO check. Tom confirmed the human-testing rule is inapplicable to this chart-only release; personal testing is not claimed. Signed-off-by: Tom Brow <tomb@block.xyz>
2.3 KiB
Chart release notes
0.3.5
Adds optional string-valued deploymentAnnotations for Deployment metadata,
including secret-reloader configuration. Chart-owned policy annotations remain
reserved. Runtime Pod and migration annotations are unchanged, and the empty
default preserves existing manifests.
Implemented in #8136.
0.3.4
Adds runtime Pod labels, a service account name, and a configurable termination grace period of at least 60 seconds. Reserved selector labels cannot be overridden.
Allows a platform to replace the runtime NetworkPolicy by explicitly naming its replacement. External policy mode supports PodMonitor without requiring unused chart-owned monitoring selectors or APNs destinations. The complete-render gate requires exactly one ordinary replacement NetworkPolicy in the effective release namespace, selecting the runtime Pods and declaring both ingress and egress policy types. Helm and Argo CD hook policies are rejected. External-policy callers must supply independent Deployment, policy and namespace expectations so removed or overwritten markers fail closed. The gate validates selector expression grammar and expands Kubernetes Lists. Operators must validate the full parent render including hooks; a Helm 3 post-renderer alone is insufficient.
Migration NetworkPolicy remains chart-owned and continues to require database and DNS destinations. Runtime settings do not change migration Pod identity. Default runtime rendering is unchanged.
Implemented in #8113.
0.3.3
gatewayOrigin is now only an HTTPRoute routing input. It is optional unless
httpRoute.enabled=true, and is no longer passed to the gateway container as
BUZZ_PUSH_GATEWAY_ORIGIN. Implemented in
#7877.
Adds optional migration.podAnnotations for the migration Job's Pod template.
The default is empty. Annotation values must be strings, and migration Pod
annotations are independent of runtime Deployment Pod annotations and Job hook
metadata.
For example, operators can set migration.podAnnotations.sidecar.istio.io/inject
to the string "false" to opt migration Pods out of Istio sidecar injection.
Implemented in #8105.