Skip to content

Upgrade k8gb pack to 0.20.0 - #293

Open
CarlosRamirezSWO wants to merge 2 commits into
spectrocloud:mainfrom
CarlosRamirezSWO:k8gb-0200
Open

Upgrade k8gb pack to 0.20.0#293
CarlosRamirezSWO wants to merge 2 commits into
spectrocloud:mainfrom
CarlosRamirezSWO:k8gb-0200

Conversation

@CarlosRamirezSWO

@CarlosRamirezSWO CarlosRamirezSWO commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Upgrade k8gb pack to 0.20.0

bulwark-sc-ent[bot]
bulwark-sc-ent Bot requested changes Aug 7, 2026
View reviewed changes

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

✅ Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 6
  • Clean images: 6
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 2 image(s)

    • docker.io/absaoss/k8gb:v0.20.0: 1 error occurred:

      • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/absaoss/k8gb:v0.20.0':

    • snap: snap file "docker.io/absaoss/k8gb:v0.20.0" does not exist

    • docker: pull failed: Error response from daemon: manifest for absaoss/k8gb:v0.20.0 not found: manifest unknown: manifest unknown

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0

    • snap: strconv.Atoi: parsing "v0.20.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • registry.k8s.io/external-dns/external-dns:0.20.0: 1 error occurred:

      • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'registry.k8s.io/external-dns/external-dns:0.20.0':

    • snap: snap file "registry.k8s.io/external-dns/external-dns:0.20.0" does not exist

    • docker: pull failed: Error response from daemon: manifest for registry.k8s.io/external-dns/external-dns:0.20.0 not found: manifest unknown: Failed to fetch "0.20.0"

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://us-east4-docker.pkg.dev/v2/k8s-artifacts-prod/images/external-dns/external-dns/manifests/0.20.0: MANIFEST_UNKNOWN: Failed to fetch "0.20.0"

    • oci-model: failed to fetch descriptor: GET https://us-east4-docker.pkg.dev/v2/k8s-artifacts-prod/images/external-dns/external-dns/manifests/0.20.0: MANIFEST_UNKNOWN: Failed to fetch "0.20.0"

    • snap: strconv.Atoi: parsing "0.20.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

Please review the findings above and address any issues before merging.

bulwark-sc-ent[bot]
bulwark-sc-ent Bot requested changes Aug 7, 2026
View reviewed changes

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Combined scan completed with failures (conclusion: failure).

✅ Secret Scan: No secrets detected

Scan Summary:

  • Total images scanned: 6
  • Clean images: 6
  • Images with secrets: 0

⚠️ CVE Scan Errors:

  • CVE scan failed for 2 image(s)

    • docker.io/absaoss/k8gb:v0.20.0: 1 error occurred:

      • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/absaoss/k8gb:v0.20.0':

    • snap: snap file "docker.io/absaoss/k8gb:v0.20.0" does not exist

    • docker: pull failed: Error response from daemon: manifest for absaoss/k8gb:v0.20.0 not found: manifest unknown: manifest unknown

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0

    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0

    • snap: strconv.Atoi: parsing "v0.20.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

    • registry.k8s.io/external-dns/external-dns:0.20.0: 1 error occurred:

      • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'registry.k8s.io/external-dns/external-dns:0.20.0':

    • snap: snap file "registry.k8s.io/external-dns/external-dns:0.20.0" does not exist

    • docker: pull failed: Error response from daemon: manifest for registry.k8s.io/external-dns/external-dns:0.20.0 not found: manifest unknown: Failed to fetch "0.20.0"

    • podman: podman not available: no host address

    • containerd: containerd not available: no grpc connection or services is available: unavailable

    • oci-registry: failed to get image descriptor from registry: GET https://us-east4-docker.pkg.dev/v2/k8s-artifacts-prod/images/external-dns/external-dns/manifests/0.20.0: MANIFEST_UNKNOWN: Failed to fetch "0.20.0"

    • oci-model: failed to fetch descriptor: GET https://us-east4-docker.pkg.dev/v2/k8s-artifacts-prod/images/external-dns/external-dns/manifests/0.20.0: MANIFEST_UNKNOWN: Failed to fetch "0.20.0"

    • snap: strconv.Atoi: parsing "0.20.0": invalid syntax

    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

Please review the findings above and address any issues before merging.

bulwark-sc-ent[bot]
bulwark-sc-ent Bot requested changes Aug 7, 2026
View reviewed changes

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 2 image(s).

Scan Summary:

  • Total images scanned: 4
  • Clean images: 0
  • Images with CVEs: 4
  • Total CVEs found: 283

🔴 Critical CVEs: 8
🟠 High CVEs: 53
🟡 Medium CVEs: 21
🟢 Low CVEs: 201

Images with CVEs:

  • coredns/coredns:1.13.1: 91 CVEs (Critical: 3, High: 19, Medium: 9, Low: 60)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-35579
  • jaegertracing/all-in-one:1.76.0: 152 CVEs (Critical: 4, High: 23, Medium: 6, Low: 119)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-31789
  • otel/opentelemetry-collector:0.155.0: 8 CVEs (Critical: 0, High: 1, Medium: 1, Low: 6)
  • registry.k8gb.io/k8gb-io/k8s_crd:v0.5.0: 32 CVEs (Critical: 1, High: 10, Medium: 5, Low: 16)
    Critical CVEs: CVE-2026-27143

⚠️ Scan Errors: 2 image(s) failed to scan

  • docker.io/absaoss/k8gb:v0.20.0: 1 error occurred:

    • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/absaoss/k8gb:v0.20.0':
    • snap: snap file "docker.io/absaoss/k8gb:v0.20.0" does not exist
    • docker: pull failed: Error response from daemon: manifest for absaoss/k8gb:v0.20.0 not found: manifest unknown: manifest unknown
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0
    • snap: strconv.Atoi: parsing "v0.20.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

  • registry.k8s.io/external-dns/external-dns:0.20.0: 1 error occurred:

    • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'registry.k8s.io/external-dns/external-dns:0.20.0':

❌ One or more images could not be scanned. See errors above.

bulwark-sc-ent[bot]
bulwark-sc-ent Bot requested changes Aug 7, 2026
View reviewed changes

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ CVE scan failed for 2 image(s).

Scan Summary:

  • Total images scanned: 4
  • Clean images: 0
  • Images with CVEs: 4
  • Total CVEs found: 283

🔴 Critical CVEs: 8
🟠 High CVEs: 52
🟡 Medium CVEs: 21
🟢 Low CVEs: 202

Images with CVEs:

  • coredns/coredns:1.13.1: 91 CVEs (Critical: 3, High: 19, Medium: 9, Low: 60)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-35579
  • jaegertracing/all-in-one:1.76.0: 152 CVEs (Critical: 4, High: 22, Medium: 6, Low: 120)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-31789
  • otel/opentelemetry-collector:0.155.0: 8 CVEs (Critical: 0, High: 1, Medium: 1, Low: 6)
  • registry.k8gb.io/k8gb-io/k8s_crd:v0.5.0: 32 CVEs (Critical: 1, High: 10, Medium: 5, Low: 16)
    Critical CVEs: CVE-2026-27143

⚠️ Scan Errors: 2 image(s) failed to scan

  • docker.io/absaoss/k8gb:v0.20.0: 1 error occurred:

    • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'docker.io/absaoss/k8gb:v0.20.0':
    • snap: snap file "docker.io/absaoss/k8gb:v0.20.0" does not exist
    • docker: pull failed: Error response from daemon: manifest for absaoss/k8gb:v0.20.0 not found: manifest unknown: manifest unknown
    • podman: podman not available: no host address
    • containerd: containerd not available: no grpc connection or services is available: unavailable
    • oci-registry: failed to get image descriptor from registry: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0
    • oci-model: failed to fetch descriptor: GET https://index.docker.io/v2/absaoss/k8gb/manifests/v0.20.0: MANIFEST_UNKNOWN: manifest unknown; unknown tag=v0.20.0
    • snap: strconv.Atoi: parsing "v0.20.0": invalid syntax
    • additionally, the following providers failed with file does not exist: docker-archive, oci-archive, oci-dir, singularity, local-file, local-directory

  • registry.k8s.io/external-dns/external-dns:0.20.0: 1 error occurred:

    • failed to catalog image for any supported platform (tried linux/amd64, linux/arm64): errors occurred attempting to resolve 'registry.k8s.io/external-dns/external-dns:0.20.0':

❌ One or more images could not be scanned. See errors above.

bulwark-sc-ent[bot]
bulwark-sc-ent Bot reviewed Aug 8, 2026
View reviewed changes

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ CVE scan completed successfully.

Scan Summary:

  • Total images scanned: 6
  • Clean images: 0
  • Images with CVEs: 6
  • Total CVEs found: 358

🔴 Critical CVEs: 10
🟠 High CVEs: 64
🟡 Medium CVEs: 26
🟢 Low CVEs: 258

Images with CVEs:

  • coredns/coredns:1.13.1: 91 CVEs (Critical: 3, High: 19, Medium: 9, Low: 60)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-35579
  • jaegertracing/all-in-one:1.76.0: 153 CVEs (Critical: 4, High: 23, Medium: 6, Low: 120)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-31789
  • otel/opentelemetry-collector:0.155.0: 8 CVEs (Critical: 0, High: 1, Medium: 1, Low: 6)
  • registry.k8gb.io/k8gb-io/k8gb:v0.20.0: 6 CVEs (Critical: 0, High: 1, Medium: 0, Low: 5)
  • registry.k8gb.io/k8gb-io/k8s_crd:v0.5.0: 32 CVEs (Critical: 1, High: 10, Medium: 5, Low: 16)
    Critical CVEs: CVE-2026-27143
  • registry.k8s.io/external-dns/external-dns:v0.20.0: 68 CVEs (Critical: 2, High: 10, Medium: 5, Low: 51)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

bulwark-sc-ent[bot]
bulwark-sc-ent Bot reviewed Aug 8, 2026
View reviewed changes

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ CVE scan completed successfully.

Scan Summary:

  • Total images scanned: 6
  • Clean images: 0
  • Images with CVEs: 6
  • Total CVEs found: 356

🔴 Critical CVEs: 10
🟠 High CVEs: 63
🟡 Medium CVEs: 26
🟢 Low CVEs: 257

Images with CVEs:

  • coredns/coredns:1.13.1: 91 CVEs (Critical: 3, High: 19, Medium: 9, Low: 60)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-35579
  • jaegertracing/all-in-one:1.76.0: 151 CVEs (Critical: 4, High: 22, Medium: 6, Low: 119)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-31789
  • otel/opentelemetry-collector:0.155.0: 8 CVEs (Critical: 0, High: 1, Medium: 1, Low: 6)
  • registry.k8gb.io/k8gb-io/k8gb:v0.20.0: 6 CVEs (Critical: 0, High: 1, Medium: 0, Low: 5)
  • registry.k8gb.io/k8gb-io/k8s_crd:v0.5.0: 32 CVEs (Critical: 1, High: 10, Medium: 5, Low: 16)
    Critical CVEs: CVE-2026-27143
  • registry.k8s.io/external-dns/external-dns:v0.20.0: 68 CVEs (Critical: 2, High: 10, Medium: 5, Low: 51)
    Critical CVEs: CVE-2025-68121, CVE-2026-27143

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

@vishwanaths

vishwanaths commented Aug 23, 2026

Copy link
Copy Markdown
Collaborator

Pack review — k8gb-0.20.0

Packs Validation: passed (run https://github.com/spectrocloud/pack-central/actions/runs/31234552115/job/93044584053)
source annotation: community
Pack metadata: name=k8gb version=0.20.0 addonType=system app layer=addon displayName=k8gb contributor=spectrocloud

Compared against packs/k8gb-0.12.2/

Summary of differences

  • pack.json: version 0.12.2 -> 0.20.0 (minor bump on a 0.x line — behaves like a major); chart filename charts/k8gb-0.12.2.tgz -> charts/k8gb-v0.20.0.tgz (adds v prefix); added annotations.source: community; new top-level constraints block declaring an optional dependency on kubernetes >= 1.29 and minimum CPU/memory (100m / 128Mi); indentation reformatted from 4-space to 2-space.
  • values.yaml (pack): images repointed from docker.io/absaoss/* and ghcr.io/k8gb-io/* to registry.k8gb.io/k8gb-io/*; added external-dns chart under pack.content.charts (repo https://kubernetes-sigs.github.io/external-dns, v1.21.1) alongside coredns which now points at https://coredns.github.io/helm v1.46.0; k8gb main image v0.12.2 -> v0.20.0, k8s_crd v0.0.11 -> v0.5.0, external-dns v0.13.4-azure-ns -> v0.20.0, coredns 1.13.1, otel-collector 0.57.2 -> 0.155.0, jaeger 1.37.0 -> 1.76.0. Config schema reworked: single dnsZone / edgeDNSZone replaced by dnsZones[] array with parentZone / loadBalancedZone (backward-compat noted); new toggles installLegacyCrds, validatingAdmissionPolicy.enabled, nsRecordTTL, resources, tolerations, podAnnotations, podLabels. Provider blocks route53, ns1, rfc2136 collapsed into a single extdns toggle (default disabled). CoreDNS block expanded with servers, resources, corefile.reload, extraVolumes/Mounts. splitBrainCheck removed. edgeDNSServers default changed from 169.254.169.253 (Route 53 resolver) to 1.1.1.1.
  • charts: previous shipped charts/k8gb-0.12.2.tgz (30.8 KiB) plus a nested subchart tarball charts/k8gb/charts/coredns-1.15.3.tgz (12.1 KiB); new ships a single charts/k8gb-v0.20.0.tgz (70.1 KiB) with the coredns + external-dns subcharts unpacked as YAML under charts/k8gb/charts/. Main tarball delta: +39.3 KiB (+127%). Chart contents themselves were not inspected.
  • logo.png: 2.6 KiB -> 26.8 KiB (+24.2 KiB / ~+924%). Binary not inspected — assumed to be an updated logo asset.
  • Files added: README.md (pack-level, 93 lines), presets.yaml (22 lines), schema.yaml (2 lines), charts/k8gb/LICENSE (Apache 2.0, 202 lines), charts/k8gb/charts/coredns/** (subchart materialized: 22 files, templates + tests + values), charts/k8gb/charts/external-dns/** (new subchart: 17 files including CRDs, templates, values.schema.json), charts/k8gb/crd/k8gb.io_gslbs.yaml, charts/k8gb/crd/k8gb.io_zonedelegation.yaml, charts/k8gb/crd/dns-endpoint-crd-manifest.yaml, charts/k8gb/templates/_validators.tpl, charts/k8gb/templates/cluster_role.yaml, charts/k8gb/templates/cluster_role_binding.yaml, charts/k8gb/templates/coredns/cm.yaml, charts/k8gb/templates/coredns/rbac.yaml, charts/k8gb/templates/otel/{jaeger-deployment,jaeger-svc,otel-config,otel-svc}.yaml, charts/k8gb/templates/validatingadmissionpolicy.yaml.
  • Files removed: charts/k8gb/templates/coredns-cm.yaml (relocated to templates/coredns/cm.yaml), charts/k8gb/templates/external-dns/external-dns.yaml, charts/k8gb/templates/external-dns/rbac.yaml (both replaced by the new external-dns subchart).

pack.json diff

--- a/packs/k8gb-0.12.2/pack.json
+++ b/packs/k8gb-0.20.0/pack.json
@@ -1,17 +1,39 @@
 {
-    "name": "k8gb",
-    "displayName": "k8gb",
-    "annotations": {
-        "description": "Kubernetes Global Balancer",
-        "contributor": "spectrocloud"
-    },
-    "version": "0.12.2",
-    "charts": [
-        "charts/k8gb-0.12.2.tgz"
+  "addonType": "system app",
+  "cloudTypes": [
+    "all"
+  ],
+  "displayName": "k8gb",
+  "charts": [
+    "charts/k8gb-v0.20.0.tgz"
+  ],
+  "layer": "addon",
+  "name": "k8gb",
+  "version": "0.20.0",
+  "annotations": {
+    "description": "Kubernetes Global Balancer",
+    "source": "community",
+    "contributor": "spectrocloud"
+  },
+  "constraints": {
+    "dependencies": [
+      {
+        "packName": "kubernetes",
+        "layer": "k8s",
+        "minVersion": "1.29",
+        "maxVersion": "",
+        "type": "optional"
+      }
     ],
-    "layer": "addon",
-    "addonType": "system app",
-    "cloudTypes": [
-        "all"
+    "resources": [
+      {
+        "type": "cpu",
+        "minLimit": 100
+      },
+      {
+        "type": "memory",
+        "minLimit": 128
+      }
     ]
+  }
 }

values.yaml diff (top-level pack values, truncated to ~80 lines)

@@ pack.content.images @@
-      - image: docker.io/absaoss/k8gb:v0.12.2
-      - image: absaoss/k8s_crd:v0.0.11
-      - image: ghcr.io/k8gb-io/external-dns:v0.13.4-azure-ns
-      - image: otel/opentelemetry-collector:0.57.2
-      - image: jaegertracing/all-in-one:1.37.0
+      - image: registry.k8gb.io/k8gb-io/k8gb:v0.20.0
+      - image: registry.k8gb.io/k8gb-io/k8s_crd:v0.5.0
+      - image: coredns/coredns:1.13.1
+      - image: registry.k8s.io/external-dns/external-dns:v0.20.0
+      - image: otel/opentelemetry-collector:0.155.0
+      - image: jaegertracing/all-in-one:1.76.0

@@ pack.content.charts @@
-      - repository: https://absaoss.github.io/coredns-helm
+      - repository: https://coredns.github.io/helm
         name: coredns
-        version: 1.15.3
+        version: 1.46.0
+      - repository: https://kubernetes-sigs.github.io/external-dns
+        name: external-dns
+        version: 1.21.1

@@ charts.k8gb.k8gb @@
-      imageRepo: "docker.io/absaoss/k8gb"
-      dnsZone: "cloud.example.com"
-      dnsZoneNegTTL: 300
-      edgeDNSZone: "example.com"
-      edgeDNSServers: [ "169.254.169.253" ]
-      extGslbClustersGeoTags: "us"
-      splitBrainCheck: false
-      coredns:
-        extra_plugins: ""
+      imageRepo: registry.k8gb.io/k8gb-io/k8gb
+      installLegacyCrds: true
+      dnsZones:
+        - parentZone: "example.com"
+          loadBalancedZone: "cloud.example.com"
+          dnsZoneNegTTL: 30
+          extraPlugins: []
+          extraServerBlocks: ""
+          geoDataFilePath: ""
+          geoDataField: ""
+      edgeDNSServers: [ "1.1.1.1" ]
+      extGslbClustersGeoTags: "eu,us"
+      nsRecordTTL: 30
+      validatingAdmissionPolicy: { enabled: false }
+      resources:
+        requests: { memory: "32Mi", cpu: "100m" }
+        limits:   { memory: "128Mi", cpu: "500m" }
+      tolerations: []

@@ charts.k8gb.externaldns / route53 / ns1 / rfc2136 -> extdns @@
-    externaldns: { image: ghcr.io/k8gb-io/external-dns:v0.13.4-azure-ns, ... }
-    route53:  { enabled: false, hostedZoneID: ZXXXSSS, ... }
-    ns1:      { enabled: false, ignoreSSL: false, ... }
-    rfc2136:  { enabled: false, ... }
+    extdns:
+      enabled: false

diff truncated — see the Files tab for the full change (values.yaml alone is +138 / -103 lines).

Blockers

  • (none)

Nits / observations

  • Chart tarball roughly doubles in size (30.8 KiB -> 70.1 KiB); the previous version's nested coredns subchart tarball is gone, so the net on-disk footprint is closer to +30 KiB rather than +40 KiB. Expected given the newly bundled external-dns subchart.
  • logo.png grew ~10x (2.6 KiB -> 26.8 KiB). Not a blocker, but worth a glance to confirm it is intentional and not a source-file swap. Consider re-exporting at similar compression if the artwork is meant to be unchanged.
  • Breaking values-schema changes for existing users: dnsZone / edgeDNSZone / route53 / ns1 / rfc2136 / splitBrainCheck keys removed at the top level (backward-compat is claimed in-comment for the DNS zone fields; the provider blocks were consolidated under extdns). Users upgrading from 0.12.x will need to remap presets.
  • edgeDNSServers default flipped from AWS's 169.254.169.253 link-local resolver to 1.1.1.1. Fine for most deployments, but a functional change for AWS-native clusters that relied on the previous default.
  • Big version jump on a 0.x line (0.12 -> 0.20) skipping 0.13 - 0.19. That is the upstream cadence, just calling it out so a reviewer knows this is not a typo.
  • The new pack ships a chart-level LICENSE (Apache 2.0) that was absent in 0.12.2 — good hygiene.

Review generated by the pack-reviewer Claude Code subagent.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bulwark-sc-ent bulwark-sc-ent[bot] bulwark-sc-ent[bot] requested changes

Requested changes must be addressed to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@CarlosRamirezSWO @vishwanaths