0.6.0

Changes

• allow all pods within namespace to talk to each other (#31) @etwillbefine
• allow setting custom labels for network policies (#29) @etwillbefine
• remove network policy and psp allowed groups defaults (#28) @etwillbefine

🚧 Maintenance

• unify naming and use network_ prefix for network policy vars (#30) @etwillbefine

0.5.0

Changes

• do not use default egress ports (#25) @etwillbefine

🚀 Features

• make deny-all optional, allow specifying types allow-policy applies to (#26) @etwillbefine
• allow to configure network policy ports (#24) @etwillbefine

‼️ Breaking changes

• make deny-all optional, allow specifying types allow-policy applies to (#26) @etwillbefine

💬 Documentation

• some docs about network policies (#27) @etwillbefine

0.4.2

Changes

• avoid duplicate role names (#23) @etwillbefine

🐛 Bug Fixes

• service account subjects must be an array (#22) @etwillbefine

0.4.1

Changes

🐛 Bug Fixes

• fix: do not set defaults when max value is set to 0 (#21) @etwillbefine

0.4.0

Changes

🚀 Features

• improvement: limit default groups allowed to use psp (#19) @etwillbefine
• improvement: removed enable_psp_binding variable (#19) @etwillbefine

💬 Documentation

• docs: update readme (#19, #20) @etwillbefine

0.3.0

Changes

🚀 Features

• feat: create service account specific rbac rules (#17) @etwillbefine
• feat: allow adding extra rbac roles (#18) @etwillbefine
• feat: default allow all users to use default psp (#16) @etwillbefine

‼️ Breaking changes

• feat: create service account specific rbac rules (#17) @etwillbefine
• break: shorten SA name and rbac permissions (#14) @etwillbefine (replaced with custom rbac roles, #18)

0.2.0

Updates

• allow to configure environment variable instead in addition of stage
• dynamic list of additional labels to attach
• namespace name as output
• removed default from stage
• more default values for resource limits
• terraform 12 syntax for variable types

Initial release

Features

• creates new kubernetes namespace
• creates new kubernetes limit range
• annotations can be attached to the namespace
• creates rbac role binding to a service account (optional)
• creates network policies to only allow http traffic (optional)