0.13.0

triskaidekaphobia
/ˌtrɪskʌɪdɛkəˈfəʊbɪə/
noun

1. an irrational or disproportionate fear of the number thirteen

What's Changed

🚨 Breaking changes

• This release brings several improvements in the definitions of the statefulset and pod resources backing the app workload. This means that all workload pods will be restarted after an upgrade. Use caution and upgrade in a maintenance window.
• Gateway API v1.1.0 contains a breaking change. According to their guide the existing BackendTLSPolicy resource definition should be deleted before installing the new version. This should not affect Korifi as we are not using BackendTLSPolicy, but might affect other software running on your cluster.

Partial Managed Services Support

• This is an experimental feature. It is disabled by default. To enable it set the experimental.managedServices.enabled flag to true
• Future releases might contain incompatible changes with regards to managed services
• Supported commands so far:
  • cf create-service-broker
  • cf update-service-broker
  • cf service-brokers
  • cf delete-service-broker
  • cf service-access
  • cf enable-service-access
  • cf disable-service-access
  • cf marketplace
  • cf create-service
  • cf services
  • cf delete-service
• Some limitations:
  • Space scoped brokers are not supported
  • Space plan visibility is not supported

Bug Fixes

• Fix BuildWorkload getting stuck in failed status (thanks @pbusko)
• Fix pushing apps with latest cf CLI

Misc

• Documentation improvements (thanks @benjaminguttmann-avtq @FloThinksPi @marsteg)
• Use topology spread constraint instead of pod affinity in workload statefulsets (thanks @modulo11, @c0d1ngm0nk3y)
• Korifi's Gateway ports and infrastructure are now configureable (thanks @pbusko)
• Multi-arch builds for local development are now supported (thanks @pbusko)
• Use the Kubernetes downward API to set CF_INSTANCE_INDEX environment variable (thanks @pbusko)
• Adopt go-functional (thanks @BooleanCat)
• cf restart-app-instance command now works (thanks @marsteg)
• The statefulsetRunnerTemporarySetPodSeccompProfile and jobTaskRunnerTemporarySetPodSeccompProfile flags have been removed and the pod security context is now unconditionally setting the seccomp profile to RuntimeDefault. This allows for better support of Istio CNI.

Full Changelog: v0.12.0...v0.13.0

⚒️ Ready to try it? See the install instructions!