⚠️ This release drops support for Helm 2 and adopts Kubernetes Recommended Labels for the helm deployment.

Please check upgrade instructions and blog article before upgrading.

Added

• If you want to save MySQL backup to AWS S3, AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY were the only options, but now you can use AWS_SESSION_TOKEN or AWS_ROLE_ARN and AWS_WEB_IDENTITY_TOKEN_FILE
• Add orchestrator.persistence.selector.matchLabels and orchestrator.persistence.annotations for persistence depolyment with constraints
• Add orchestrator.persistence.fsGroupWorkaroundEnabled for persistent volume provisioners wich don't support fsGroup in security context (fixes #615)
• Add appSecretLabels, appSecretAnnotations, backupSecretLabels, backupSecretAnnotations to provide custom labels and annotations to created app and backup secrets
• Update rclone to v1.57.0
• For s3, enable the no_check_bucket option for rclone
• Allow setting metrics and health checking listening addresses

Changed

• Allow setting pod security context when deploying with Helm
• Use distroless as base image for orchestrator container
• Use networking.k8s.io/v1 instead of extensions/v1beta1 for ingress
• Use Service.spec.publishNotReadyAddresses instead of service.alpha.kubernetes.io/tolerate-unready-endpoints
• Use git-semver for setting versions
• Graceful shutdown is enabled by default

Removed

• Removed support for Helm 2

Fixed

• Make sure orchestrator can find its templates #741
• Workaround CRD generation with preserveUnknownFields=false kubernetes-sigs/controller-tools#476