Release v20.1.4

README.md

@@ -12,6 +12,7 @@ to all Giant Swarm installations.
 ## AWS
 - v20
   - v20.1
+    - [v20.1.4](https://github.com/giantswarm/releases/tree/master/aws/v20.1.4)
     - [v20.1.3](https://github.com/giantswarm/releases/tree/master/aws/v20.1.3)
     - [v20.1.2](https://github.com/giantswarm/releases/tree/master/aws/v20.1.2)
     - [v20.1.1](https://github.com/giantswarm/releases/tree/master/aws/v20.1.1)

aws/kustomization.yaml

@@ -14,5 +14,6 @@ resources:
 - v20.1.1
 - v20.1.2
 - v20.1.3
+- v20.1.4
 transformers:
 - releaseNotesTransformer.yaml

aws/v20.1.3/release.yaml

@@ -181,7 +181,7 @@ spec:
   - name: kubernetes
     version: 1.25.16
   date: "2024-07-03T08:03:37Z"
-  state: active
+  state: deprecated
 status:
   inUse: false
   ready: false

aws/v20.1.4/README.md

@@ -0,0 +1,13 @@
+# :zap: Giant Swarm Release v20.1.4 for AWS :zap:
+
+This patch release fixes an issue with cert-manager acme-http01-solver-image argument and improves container security.
+
+## Change details
+
+### cert-manager [3.7.9](https://github.com/giantswarm/cert-manager-app/releases/tag/v3.7.9)
+
+#### Fix
+- Remove quotes from acme-http01-solver-image argument. The quotes are used when looking up the image which causes an error.
+
+#### Update
+- Improves container security by setting `runAsGroup` and `runAsUser` greater than zero for all deployments.

aws/v20.1.4/announcement.md

@@ -0,0 +1,2 @@
+**Workload cluster release v20.1.4 for AWS is available**. This is a patch release that fixes an issue with cert-manager acme-http01-solver-image argument and improves container security.
+Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-aws/releases/aws-v20.1.4/).

aws/v20.1.4/kustomization.yaml

@@ -0,0 +1,2 @@
+resources:
+- release.yaml

aws/v20.1.4/release.yaml

@@ -0,0 +1,187 @@
+# Generated with:
+# devctl release create --provider aws --base 20.1.3 --name 20.1.4 --app [email protected]
+apiVersion: release.giantswarm.io/v1alpha1
+kind: Release
+metadata:
+  annotations:
+    giantswarm.io/docs: https://docs.giantswarm.io/reference/cp-k8s-api/releases.release.giantswarm.io/
+  creationTimestamp: null
+  name: v20.1.4
+spec:
+  apps:
+  - componentVersion: 1.24.1
+    dependsOn:
+    - vertical-pod-autoscaler-crd
+    name: aws-cloud-controller-manager
+    version: 1.25.14-gs2
+  - componentVersion: 1.21.0
+    dependsOn:
+    - vertical-pod-autoscaler-crd
+    name: aws-ebs-csi-driver
+    version: 2.30.1
+  - dependsOn:
+    - aws-ebs-csi-driver
+    name: aws-ebs-csi-driver-servicemonitors
+    version: 0.1.0
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: cert-exporter
+    version: 2.9.0
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: cert-manager
+    version: 3.7.9
+  - name: chart-operator
+    version: 3.2.1
+  - dependsOn:
+    - prometheus-operator-crd
+    name: chart-operator-extensions
+    version: 1.1.2
+  - componentVersion: 1.15.1
+    dependsOn:
+    - aws-cloud-controller-manager
+    name: cilium
+    version: 0.22.0
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - vertical-pod-autoscaler-crd
+    name: cluster-autoscaler
+    version: 1.25.3-gs2
+  - componentVersion: 1.11.1
+    dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    name: coredns
+    version: 1.21.0
+  - componentVersion: 0.11.0
+    dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: external-dns
+    version: 3.1.0
+  - componentVersion: 0.6.4
+    dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: metrics-server
+    version: 2.4.2
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: net-exporter
+    version: 1.18.2
+  - componentVersion: 1.3.1
+    dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: node-exporter
+    version: 1.19.0
+  - componentVersion: 1.1.0
+    dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: vertical-pod-autoscaler
+    version: 5.1.0
+  - name: vertical-pod-autoscaler-crd
+    version: 3.0.0
+  - dependsOn:
+    - vertical-pod-autoscaler-crd
+    name: etcd-kubernetes-resources-count-exporter
+    version: 1.10.0
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    name: observability-bundle
+    version: 1.3.4
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - kyverno
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: k8s-dns-node-cache-app
+    version: 2.6.1
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - kyverno
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: prometheus-blackbox-exporter
+    version: 0.4.1
+  - dependsOn:
+    - prometheus-operator-crd
+    name: cilium-servicemonitors
+    version: 0.1.2
+  - dependsOn:
+    - prometheus-operator-crd
+    name: irsa-servicemonitors
+    version: 0.0.1
+  - catalog: giantswarm
+    dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - prometheus-operator-crd
+    - vertical-pod-autoscaler-crd
+    name: security-bundle
+    version: 1.6.4
+  - dependsOn:
+    - aws-cloud-controller-manager
+    - cilium
+    - coredns
+    - kyverno
+    - vertical-pod-autoscaler-crd
+    name: k8s-audit-metrics
+    version: 0.9.0
+  components:
+  - name: app-operator
+    version: 6.11.0
+  - name: aws-operator
+    releaseOperatorDeploy: true
+    version: 16.1.1
+  - name: cert-operator
+    releaseOperatorDeploy: true
+    version: 3.4.0
+  - name: cluster-operator
+    releaseOperatorDeploy: true
+    version: 5.11.1
+  - name: containerlinux
+    version: 3815.2.5
+  - name: etcd
+    version: 3.5.13
+  - name: kubernetes
+    version: 1.25.16
+  date: "2024-07-09T07:58:07Z"
+  state: active
+status:
+  inUse: false
+  ready: false