CAPVCD Releases

  • This release reverts removal of PolicyExceptions v2alpha1 API version for smoother transition for any customer and GS workloads. The deprecated API version of v2alpha1 will be fully removed in next major release.

    Changes compared to v30.1.0

    Apps

    • security-bundle from v1.10.0 to v1.10.1

    security-bundle v1.10.0…v1.10.1

    Important

    Note: Kyverno PolicyExceptions (API group kyverno.io) versions v2alpha1 and v2beta1 are deprecated and will be removed in the next Kyverno minor release (v1.14). Please update all Kyverno PolicyExceptions to v2. No action is required for Giant Swarm Policy API PolicyExceptions (API group policy.giantswarm.io), which are handled automatically.

    Changed

    • Update kyverno-crds (app) to v1.13.1.
  • Changes compared to v30.0.0

    Components

    • cluster-cloud-director from v0.65.0 to v0.66.0
    • Kubernetes from v1.30.10 to v1.30.11
    • os-tooling from v1.23.1 to v1.24.0

    cluster-cloud-director v0.65.0…v0.66.0

    Changed

    • Chart: Update cluster to v2.2.0.

    os-tooling v1.23.1…v1.24.0

    Added

    • Added nvidia_runtime to allow running of GPU workloads

    Apps

    • capi-node-labeler from v1.0.1 to v1.0.2
    • cert-exporter from v2.9.4 to v2.9.5
    • cilium from v0.31.0 to v0.31.1
    • etcd-defrag from v1.0.1 to v1.0.2
    • etcd-kubernetes-resources-count-exporter from v1.10.1 to v1.10.3
    • k8s-audit-metrics from v0.10.1 to v0.10.2
    • net-exporter from v1.21.0 to v1.22.0
    • node-exporter from v1.20.1 to v1.20.2
    • observability-bundle from v1.9.0 to v1.11.0
    • security-bundle from v1.9.1 to v1.10.0
    • teleport-kube-agent from v0.10.3 to v0.10.4

    capi-node-labeler v1.0.1…v1.0.2

    Changed

    • Go: Update dependencies.

    cert-exporter v2.9.4…v2.9.5

    Changed

    • Go: Update dependencies.

    cilium v0.31.0…v0.31.1

    Changed

    etcd-defrag v1.0.1…v1.0.2

    Changed

    • Chart: Update dependency ahrtr/etcd-defrag to v0.25.0. (#17)

    etcd-kubernetes-resources-count-exporter v1.10.1…v1.10.3

    Changed

    • Go: Update dependencies.

    k8s-audit-metrics v0.10.1…v0.10.2

    Changed

    • Go: Update dependencies.

    net-exporter v1.21.0…v1.22.0

    Changed

    • Narrow down CiliumNetworkPolicy to allow desired traffic only.

    Removed

    • Remove NetworkPolicy resource and rely on CiliumNetworkPolicy only.

    node-exporter v1.20.1…v1.20.2

    Changed

    • Go: Update dependencies.

    observability-bundle v1.9.0…v1.11.0

    Changed

    • prometheus-operator will not check promql syntax for prometheusRules that are labelled observability.giantswarm.io/rule-type: logs
    • Upgrade alloy to chart 0.9.0.
      • Bumps alloy from to 1.5.1 to 1.7.1
    • Upgrade kube-prometheus-stack from 66.2.1 to 69.5.1
      • Bumps prometheus-operator to 0.80.1
      • Bumps prometheus to 3.0.1

    security-bundle v1.9.1…v1.10.0

    Added

    • Add e2e tests for the security-bundle and all is components

    Changed

    • Update kyverno (app) to v0.19.0.
    • Update kyverno-crds (app) to v1.13.0.
    • Update kyverno-policies (app) to v0.23.0.
    • Update edgedb (app) to v0.1.0.
    • Update falco (app) to v0.10.0.
    • Update trivy (app) to v0.13.2.

    teleport-kube-agent v0.10.3…v0.10.4

    Added

    • Add headless service on diag port 3000.

    Changed

    • Migrated to ABS
  • Changes compared to v29.3.2

    Components

    • cluster-cloud-director from v0.64.2 to v0.65.0
    • Flatcar from v4081.2.1 to v4152.2.1
    • Kubernetes from v1.29.13 to v1.30.10

    cluster-cloud-director v0.64.2…v0.65.0

    Changed

    • Chart: Update cluster to v2.1.1.
    • Chart: Enable coredns-extensions and etcd-defrag.

    Apps

    • capi-node-labeler from v0.5.0 to v1.0.1
    • cert-exporter from v2.9.3 to v2.9.4
    • cert-manager from v3.8.2 to v3.9.0
    • cilium from v0.25.2 to v0.31.0
    • coredns from v1.23.0 to v1.24.0
    • coredns-extensions v0.1.2
    • etcd-defrag v1.0.1
    • etcd-k8s-res-count-exporter from v1.10.0 to v1.10.1
    • external-dns from v3.1.0 to v3.2.0
    • k8s-audit-metrics from v0.10.0 to v0.10.1
    • metrics-server from v2.4.2 to v2.6.0
    • node-exporter from v1.20.0 to v1.20.1
    • vertical-pod-autoscaler from v5.3.1 to v5.4.0
    • vertical-pod-autoscaler-crd from v3.1.2 to v3.2.0

    capi-node-labeler v0.5.0…v1.0.1

    Changed

    • Main: Improve sleep. (#125)
    • Go: Update go.mod and .nancy-ignore. (#123)

    cert-exporter v2.9.3…v2.9.4

    Changed

    • Repository: Some chores. (#418)
    • Go: Update go.mod and .nancy-ignore. (#437)

    cert-manager v3.8.2…v3.9.0

    Added

    • Adds new sync method based on Vendir to sync from upstream

    Changed

    • Updates Cert-manager Chart to Upstream 1.16.2

    cilium v0.25.2…v0.31.0

    Changed

    • Upgrade Cilium to v1.16.6.
    • Move provider specific custom CNI configuration to subchart.
    • Improve security defaults for:
      • Hubble UI
      • Hubble Relay
      • Cilium Operator

    Removed

    • Delete defaultPolicies and extraPolicies templates.

    coredns v1.23.0…v1.24.0

    Changed

    • Update coredns image to 1.12.0.
    • Disable HPA Memory target.
    • Increase threshold for HPA CPU target to 80%.

    coredns-extensions v0.1.2

    Added

    • Add VPA for CoreDNS deployments.
    • Add value to enable or disable VPA resources.

    Changed

    • Push App to the default-catalog.
    • Publish App in giantswarm-catalog.

    etcd-defrag v1.0.1

    Added

    • Chart: Add moveLeader. (#11)

    Changed

    • Chart: Update dependency ahrtr/etcd-defrag to v0.24.0. (#16)
    • Values: Rename cluster into useClusterEndpoints. (#8)

    etcd-k8s-res-count-exporter v1.10.0…v1.10.1

    Changed

    • Set readOnlyRootFilesystem to true in the container security context.
    • Update Kyverno PolicyExceptions to v2beta1.
    • Go: Update go.mod and .nancy-ignore. (#242)

    external-dns v3.1.0…v3.2.0

    Changed

    • Update architect-orb and ATS.
    • Add DNSEndpoints as a source for DNS records.

    k8s-audit-metrics v0.10.0…v0.10.1

    Changed

    • Update Kyverno PolicyExceptions to v2beta1.
    • Go: Update go.mod and .nancy-ignore. (#248)

    metrics-server v2.4.2…v2.6.0

    Added

    • Add VPA setting for metrics-server.

    Changed

    • Upgrade metrics-server to v0.7.2.
    • Chart: Update PolicyExceptions to v2beta1. (#226)

    node-exporter v1.20.0…v1.20.1

    Changed

    • Update Kyverno PolicyExceptions to v2beta1.
    • Go: Update go.mod. (#322)

    vertical-pod-autoscaler v5.3.1…v5.4.0

    Changed

    • Chart: Update Helm release vertical-pod-autoscaler to v10.0.0 (#335)

    vertical-pod-autoscaler-crd v3.1.2…v3.2.0

    Changed

    • Chart: Sync to upstream. (#126)
  • Changes compared to v29.3.1

    Apps

    • cloud-provider-cloud-director from v0.4.0 to v0.5.0

    cloud-provider-cloud-director v0.4.0…v0.5.0

    Changed

    • Update to 1.6.1-gs of CPI. (Upstream version 1.6.1 plus unreleased patch to address LB health monitor upgrade issue).
    • Update to 1.6.0 of CSI. This also removes --v=5 from the CSI plugin as this flag is no longer supported in this version.
  • Changes compared to v28.0.0

    Apps

    • cloud-provider-cloud-director from v0.3.1 to v0.4.0

    cloud-provider-cloud-director v0.3.1…v0.4.0

    Changed

    • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
  • Changes compared to v29.0.0

    Apps

    • cloud-provider-cloud-director from v0.3.1 to v0.4.0

    cloud-provider-cloud-director v0.3.1…v0.4.0

    Changed

    • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
  • Changes compared to v29.1.0

    Apps

    • cloud-provider-cloud-director from v0.3.1 to v0.4.0

    cloud-provider-cloud-director v0.3.1…v0.4.0

    Changed

    • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
  • Changes compared to v29.2.0

    Apps

    • cloud-provider-cloud-director from v0.3.1 to v0.4.0

    cloud-provider-cloud-director v0.3.1…v0.4.0

    Changed

    • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
  • Changes compared to v29.3.0

    Apps

    • cloud-provider-cloud-director from v0.3.1 to v0.4.0

    cloud-provider-cloud-director v0.3.1…v0.4.0

    Changed

    • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
  • Changes compared to v29.2.0

    Components

    • cluster-cloud-director from v0.64.0 to v0.64.2
    • Flatcar from v3975.2.2 to v4081.2.1
    • Kubernetes from v1.29.12 to v1.29.13

    cluster-cloud-director v0.64.0…v0.64.2

    Added

    • Add components.containerd to the schema and values.

    Changed

    • Make CPI helmrelease catalog configurable.

    Apps

    • cilium from v0.25.1 to v0.25.2
    • prometheus-blackbox-exporter from v0.4.2 to v0.5.0
    • security-bundle from v1.8.2 to v1.9.1
    • vertical-pod-autoscaler from v5.3.0 to v5.3.1
    • vertical-pod-autoscaler-crd from v3.1.1 to v3.1.2

    cilium v0.25.1…v0.25.2

    Changed

    prometheus-blackbox-exporter v0.4.2…v0.5.0

    Changed

    • Harden security context to pass PSS compliance.

    Removed

    • Remove PSP resources.

    security-bundle v1.8.2…v1.9.1

    Breaking changes

    Note: When upgrading to this security-bundle version with Falco enabled, the Falco App will fail to upgrade due to a breaking change in the upstream chart. To finish the upgrade, disable, then re-enable the Falco App by setting apps.falco.enabled=[false|true] in the security-bundle user values Config Map.

    Changed

    • Update trivy-operator (app) to v0.10.3.
    • Update trivy (app) to v0.13.1.
    • Update kyverno (app) to v0.18.1.
    • Update kyverno-crds (app) to v1.12.0.
    • Update kyverno-policies (app) to v0.21.0.
    • Update starboard-exporter (app) to v0.8.0.
    • Update falco (app) to v0.9.1.

    vertical-pod-autoscaler v5.3.0…v5.3.1

    Changed

    • Chart: Update Helm release vertical-pod-autoscaler to v9.9.1. (#333)

    vertical-pod-autoscaler-crd v3.1.1…v3.1.2

    Changed

    • Chart: Sync to upstream. (#124)

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.