# Panfactum Changelog — edge.25-02-10

> Adds wait options to speed up deployments, fixes VPA CRD management issues, ensures bastion high availability with two replicas, and resolves policy deployment conflicts during bootstrapping.

## Highlights

- Apply `kube_vpa` before any other module — required ordering for this release
- New `wait` input on Kubernetes modules — set to `false` to skip readiness checks for faster deploys
- `kube_bastion` now always uses two replicas for immediate tunnel reconnection

## Breaking Changes

- This update requires that you apply [`kube_vpa`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_vpa) before any other module. See upgrade instructions.
  - Impacts: iac-module `kube_vpa` — Must be applied before all other modules in this release

## Additions

- Most Kubernetes modules now have a `wait` input that can be set to `false` to skip waiting for resources to

## Fixes

- [`kube_bastion`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_bastion) now always uses two replicas to ensure tunnels can immediately reconnect if one bastion gets restarted.
  - Impacts: iac-module `kube_bastion` — Now uses two replicas for immediate tunnel reconnection
  - Reference (issue-report): [kube_bastion needs two replicas for tunnel reconnection](https://github.com/Panfactum/stack/issues/216)
- VPA CRDs included in [`kube_vpa`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_vpa) were not appropriately updated in the previous release due to a Helm CRD management bug.
  - Impacts: iac-module `kube_vpa` — Fix VPA CRDs not being updated due to Helm CRD management bug
- Fixes an issue that prevented [`kube_policies`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_policies) from being deployed during bootstrapping due to a non-existent `node-image-cache` namespace.
  - Impacts: iac-module `kube_policies` — Fix deployment failure during bootstrapping from missing namespace
  - Reference (issue-report): [kube_policies deployment fails due to missing namespace](https://github.com/Panfactum/stack/issues/207)

## Upgrade Instructions

## Apply `kube_vpa` First

This update requires that you apply
[`kube_vpa`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_vpa) before any other module.

If you run into any issues, set `vpa_enabled` to `false` before applying the module, then re-enable it once
the module is successfully deployed.

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.25-02-10.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel