v1.15.0

What's Changed

🎁 New features

• cli/generate: add flag for insecure debug shell access by @katexochen in #1894
• manifest: support URI address as SAN by @burgerdev in #1822
• docs: registry authentication by @charludo in #1900

🐛 Bug fixes

• atls: add timeout for optional endorsement fetching by @katexochen in #1904
• kata/runtime: assign GPU devices to multiple containers by @charludo in #1903

🔧 Other changes

• cli: print AMD product name in version command by @katexochen in #1873
• coordinator: reduce log level of non-critical errors by @burgerdev in #1879
• cli/generate: ignore unsupported resources by @davidweisse in #1842
• nodeinstaller: remove serviceaccount and clusterrole by @davidweisse in #1889
• kata.runtime: 3.21.0 -> 3.22.0 by @katexochen in #1902
• nixos/nvidia-driver: 580.95.05 -> 580.105.08 by @katexochen in #1908
• kata.runtime: support full DeploymentSpec, JobSpec by @katexochen in #1912
• resources: ensure emptyDir for secrets is memory-backed by @katexochen in #1939

📖 Documentation

• docs: update resources that influence policy by @katexochen in #1874
• docs: add 'immutable deployment' howto by @charludo in #1840
• docs: mention terminationMessagePath limitation by @burgerdev in #1920
• docs: update supported CC GPUs by @katexochen in #1924
• docs: use reported TCB in manifest by @katexochen in #1925
• docs: update how to obtain TDX MrSeam by @katexochen in #1926
• docs: update how to obtain AMD TCB SVNs by @katexochen in #1927

Full Changelog: v1.14.0...v1.15.0