CAPVCD Releases

• Jun 12, 2025 CAPVCD releases releases cloud-director-31.0.0

  Changes compared to v30.1.3

  Components

  • cluster-cloud-director from v0.66.1 to v0.67.0
  • Flatcar from v4152.2.1 to v4152.2.3
  • Kubernetes from v1.30.11 to v1.31.9
  • os-tooling from v1.24.0 to v1.26.1

  cluster-cloud-director v0.66.1…v0.67.0

  Changed

  • Chart: Update cluster to v2.3.0.
  • Chart: Update cluster to v2.4.0.

  Apps

  • capi-node-labeler from v1.0.2 to v1.1.1
  • cert-exporter from v2.9.5 to v2.9.7
  • cert-manager from v3.9.0 to v3.9.1
  • cilium from v0.31.5 to v1.2.1
  • coredns from v1.24.0 to v1.25.0
  • etcd-defrag from v1.0.2 to v1.0.5
  • etcd-k8s-res-count-exporter from v1.10.3 to v1.10.5
  • k8s-audit-metrics from v0.10.2 to v0.10.4
  • net-exporter from v1.22.0 to v1.23.0
  • node-exporter from v1.20.2 to v1.20.3
  • observability-bundle from v1.11.0 to v2.0.0
  • observability-policies from v0.0.1 to v0.0.2
  • security-bundle from v1.10.1 to v1.11.0
  • teleport-kube-agent from v0.10.4 to v0.10.5
  • vertical-pod-autoscaler from v5.4.0 to v5.5.1
  • vertical-pod-autoscaler-crd from v3.2.0 to v3.3.1

  capi-node-labeler v1.0.2…v1.1.1

  Changed

  • Go: Update dependencies.
  • Improve Control Plane node detection.
  • Taint Control Plane nodes if not already tainted.
  • Go: Update dependencies.

  cert-exporter v2.9.5…v2.9.7

  Changed

  • Go: Update dependencies.
  • Fix linting issues.
  • Go: Update dependencies.

  cert-manager v3.9.0…v3.9.1

  Added

  • Added Vertical Pod Autoscaler support for controller pods.
  • Added renovate configutarion

  Removed

  • Removed dependabot configuration

  cilium v0.31.5…v1.2.1

  Changed

  • Enable conntrack accounting in Cilium agent by default.
  • Re-enable Cilium agent and operator metrics port.
  • Add resource requests and limits to Hubble UI and Relay.
  • Add resource requests and limits to Cilium Operator.
  • Upgrade Cilium to v1.17.4.
  • Cilium v1.17.4 disables kubernetes api connectivity check for liveness probes. (Upstream PR: https://github.com/cilium/cilium/pull/38703)
  • Upgrade Cilium to v1.17.3.
  • Upgrade Cilium to v1.17.2.
  • Remove cleanup kube-proxy patch.
  • Identity computation label exclusion list regular expressions. Remove controller-uid, since this is excluded by default now.
  • Upgrade Cilium to v1.17.0.
  • Use upstream default value for prometheus.metrics.
  • Enable Envoy Proxy in standalone DaemonSet.

  coredns v1.24.0…v1.25.0

  Changed

  • Update coredns image to 1.12.1.

  etcd-defrag v1.0.2…v1.0.5

  Changed

  • Chart: Update dependency ahrtr/etcd-defrag to v0.28.0. (#34)
  • Chart: Update dependency ahrtr/etcd-defrag to v0.27.0. (#29)
  • Chart: Update dependency ahrtr/etcd-defrag to v0.26.0. (#22)

  etcd-k8s-res-count-exporter v1.10.3…v1.10.5

  Changed

  • Go: Update dependencies.

  Fixed

  • Fix linting issues.
  • Go: Update dependencies.

  k8s-audit-metrics v0.10.2…v0.10.4

  Changed

  • Go: Update dependencies.

  Fixed

  • Fix linting issues.
  • Go: Update dependencies.

  net-exporter v1.22.0…v1.23.0

  Changed

  • Check for errors when closing connections.
  • Switch from Endpoints to EndpointSlices for neighbors discovery.

  node-exporter v1.20.2…v1.20.3

  Changed

  • Go: Update dependencies.

  observability-bundle v1.11.0…v2.0.0

  Added

  • Add support for enabling pre-configured custom resources in KSM
  • Add metrics containing labels for Crossplane resources

  Changed

  • Upgrade alloy-app from 0.10.0 to 0.11.0
    • This bumps the version of Alloy from 1.8.3 to 1.9.0
  • Upgrade alloy-app from 0.9.0 to 0.10.0
    • This bumps the version of Alloy from 1.7.1 to 1.8.3
  • Reconfigure Flux-related part of the KSM to use wildcards instead of hardcoded versions.
  • Rename Flux-related metrics produced by the KSM.
  • Upgrade kube-prometheus-stack to 72.3.0
    • Bumps prometheus-operator to 0.82.0
    • Bumps prometheus-operator CRDs to 0.82.0
  • Upgrade kube-prometheus-stack to 72.3.0
    • Bumps prometheus-operator to 0.82.0
  • Upgrade kube-prometheus-stack from 69.5.1 to 70.1.1
    • Bumps prometheus-operator to 0.81.0
    • Bumps prometheus to 3.2.1

  Fixed

  • Fix catalog for alloy apps as it is now pushed to the default catalog.

  Removed

  • Clean up old and deprecated telemetry collectors:
    • promtail
    • grafana-agent
    • promtheus-agent
  • Disable PodSecurityPolicies by default as PodSecurityPolicies are deprecated and removed in Kubernetes v1.25+ clusters

  observability-policies v0.0.1…v0.0.2

  Changed

  • Add Cluster Role to allow latest Kyverno versions to work (https://github.com/giantswarm/giantswarm/issues/33416)
  • Switch .Values.disabled to .Values.enabled to follow best practices.

  security-bundle v1.10.1…v1.11.0

  Added

  • Add policy-api-crds app to manage Policy API CRDs.

  Changed

  • Update trivy (app) to v0.13.4.
  • Update cloudnative-pg (app) to v0.0.7.
  • Update starboard-exporter (app) to v0.8.1.
  • Update kyverno-policy-operator (app) to v0.0.11.
  • Update cloudnative-pg (app) to v0.0.9.

  Notes

  Note: Kyverno PolicyExceptions (API group kyverno.io) versions v2alpha1 and v2beta1 are deprecated and will be removed in the next Kyverno minor release (v1.14). Please update all Kyverno PolicyExceptions to v2. No action is required for Giant Swarm Policy API PolicyExceptions (API group policy.giantswarm.io), which are handled automatically.

  teleport-kube-agent v0.10.4…v0.10.5

  Added

  • Set Home URL in chart metadata.

  vertical-pod-autoscaler v5.4.0…v5.5.1

  Changed

  • Chart: Update Helm release vertical-pod-autoscaler to v10.2.1. (#355)
  • Chart: Update Helm release vertical-pod-autoscaler to v10.1.0. (#350)
  • Chart: Update Helm release vertical-pod-autoscaler to v10.2.0. (#351)
  • Chart: Update Helm release vertical-pod-autoscaler to v10.0.1. (#346)

  vertical-pod-autoscaler-crd v3.2.0…v3.3.1

  Changed

  • Chart: Sync to upstream. (#146)
  • Chart: Sync to upstream. (#140)
  • Chart: Sync to upstream. (#136)
• May 27, 2025 CAPVCD releases releases cloud-director-30.1.3

  This release re-enables metrics ingestion of Cilium.

  Changes compared to v30.1.2

  Apps

  • cilium from v0.31.4 to v0.31.5
  • cilium-servicemonitors from v0.1.2 to v0.1.3

  cilium v0.31.4…v0.31.5

  Changed

  • Reenable Cilium agent metrics.

  cilium-servicemonitors v0.1.2…v0.1.3

  Changed

  • Fix home URL in chart metadata
  • Change ownership from phoenix to cabbage.
  • Use the app-build-suite.
• May 22, 2025 CAPVCD releases releases cloud-director-30.1.2

  This release reconfigures the Cilium HelmRelease to avoid disruptions during cluster upgrades.

  Changes compared to v30.1.1

  Components

  • cluster-cloud-director from v0.66.0 to v0.66.1

  cluster-cloud-director v0.66.0…v0.66.1

  Changed

  • Chart: Update cluster to v2.2.1.

  Apps

  • cilium from v0.31.1 to v0.31.4

  cilium v0.31.1…v0.31.4

  Changed

  • Upgrade Cilium to v1.16.10.
• May 1, 2025 CAPVCD releases releases cloud-director-30.1.1

  This release reverts removal of PolicyExceptions v2alpha1 API version for smoother transition for any customer and GS workloads. The deprecated API version of v2alpha1 will be fully removed in next major release.

  Changes compared to v30.1.0

  Apps

  • security-bundle from v1.10.0 to v1.10.1

  security-bundle v1.10.0…v1.10.1

  Important

  Note: Kyverno PolicyExceptions (API group kyverno.io) versions v2alpha1 and v2beta1 are deprecated and will be removed in the next Kyverno minor release (v1.14). Please update all Kyverno PolicyExceptions to v2. No action is required for Giant Swarm Policy API PolicyExceptions (API group policy.giantswarm.io), which are handled automatically.

  Changed

  • Update kyverno-crds (app) to v1.13.1.
• Mar 18, 2025 CAPVCD releases releases cloud-director-30.1.0

  Changes compared to v30.0.0

  Components

  • cluster-cloud-director from v0.65.0 to v0.66.0
  • Kubernetes from v1.30.10 to v1.30.11
  • os-tooling from v1.23.1 to v1.24.0

  cluster-cloud-director v0.65.0…v0.66.0

  Changed

  • Chart: Update cluster to v2.2.0.

  os-tooling v1.23.1…v1.24.0

  Added

  • Added nvidia_runtime to allow running of GPU workloads

  Apps

  • capi-node-labeler from v1.0.1 to v1.0.2
  • cert-exporter from v2.9.4 to v2.9.5
  • cilium from v0.31.0 to v0.31.1
  • etcd-defrag from v1.0.1 to v1.0.2
  • etcd-kubernetes-resources-count-exporter from v1.10.1 to v1.10.3
  • k8s-audit-metrics from v0.10.1 to v0.10.2
  • net-exporter from v1.21.0 to v1.22.0
  • node-exporter from v1.20.1 to v1.20.2
  • observability-bundle from v1.9.0 to v1.11.0
  • security-bundle from v1.9.1 to v1.10.0
  • teleport-kube-agent from v0.10.3 to v0.10.4

  capi-node-labeler v1.0.1…v1.0.2

  Changed

  • Go: Update dependencies.

  cert-exporter v2.9.4…v2.9.5

  Changed

  • Go: Update dependencies.

  cilium v0.31.0…v0.31.1

  Changed

  • Upgrade Cilium to v1.16.7.

  etcd-defrag v1.0.1…v1.0.2

  Changed

  • Chart: Update dependency ahrtr/etcd-defrag to v0.25.0. (#17)

  etcd-kubernetes-resources-count-exporter v1.10.1…v1.10.3

  Changed

  • Go: Update dependencies.

  k8s-audit-metrics v0.10.1…v0.10.2

  Changed

  • Go: Update dependencies.

  net-exporter v1.21.0…v1.22.0

  Changed

  • Narrow down CiliumNetworkPolicy to allow desired traffic only.

  Removed

  • Remove NetworkPolicy resource and rely on CiliumNetworkPolicy only.

  node-exporter v1.20.1…v1.20.2

  Changed

  • Go: Update dependencies.

  observability-bundle v1.9.0…v1.11.0

  Changed

  • prometheus-operator will not check promql syntax for prometheusRules that are labelled observability.giantswarm.io/rule-type: logs
  • Upgrade alloy to chart 0.9.0.
    • Bumps alloy from to 1.5.1 to 1.7.1
  • Upgrade kube-prometheus-stack from 66.2.1 to 69.5.1
    • Bumps prometheus-operator to 0.80.1
    • Bumps prometheus to 3.0.1

  security-bundle v1.9.1…v1.10.0

  Added

  • Add e2e tests for the security-bundle and all is components

  Changed

  • Update kyverno (app) to v0.19.0.
  • Update kyverno-crds (app) to v1.13.0.
  • Update kyverno-policies (app) to v0.23.0.
  • Update edgedb (app) to v0.1.0.
  • Update falco (app) to v0.10.0.
  • Update trivy (app) to v0.13.2.

  teleport-kube-agent v0.10.3…v0.10.4

  Added

  • Add headless service on diag port 3000.

  Changed

  • Migrated to ABS
• Mar 13, 2025 CAPVCD releases releases cloud-director-30.0.0

  Changes compared to v29.3.2

  Components

  • cluster-cloud-director from v0.64.2 to v0.65.0
  • Flatcar from v4081.2.1 to v4152.2.1
  • Kubernetes from v1.29.13 to v1.30.10

  cluster-cloud-director v0.64.2…v0.65.0

  Changed

  • Chart: Update cluster to v2.1.1.
  • Chart: Enable coredns-extensions and etcd-defrag.

  Apps

  • capi-node-labeler from v0.5.0 to v1.0.1
  • cert-exporter from v2.9.3 to v2.9.4
  • cert-manager from v3.8.2 to v3.9.0
  • cilium from v0.25.2 to v0.31.0
  • coredns from v1.23.0 to v1.24.0
  • coredns-extensions v0.1.2
  • etcd-defrag v1.0.1
  • etcd-k8s-res-count-exporter from v1.10.0 to v1.10.1
  • external-dns from v3.1.0 to v3.2.0
  • k8s-audit-metrics from v0.10.0 to v0.10.1
  • metrics-server from v2.4.2 to v2.6.0
  • node-exporter from v1.20.0 to v1.20.1
  • vertical-pod-autoscaler from v5.3.1 to v5.4.0
  • vertical-pod-autoscaler-crd from v3.1.2 to v3.2.0

  capi-node-labeler v0.5.0…v1.0.1

  Changed

  • Main: Improve sleep. (#125)
  • Go: Update go.mod and .nancy-ignore. (#123)

  cert-exporter v2.9.3…v2.9.4

  Changed

  • Repository: Some chores. (#418)
  • Go: Update go.mod and .nancy-ignore. (#437)

  cert-manager v3.8.2…v3.9.0

  Added

  • Adds new sync method based on Vendir to sync from upstream

  Changed

  • Updates Cert-manager Chart to Upstream 1.16.2

  cilium v0.25.2…v0.31.0

  Changed

  • Upgrade Cilium to v1.16.6.
  • Move provider specific custom CNI configuration to subchart.
  • Improve security defaults for:
    • Hubble UI
    • Hubble Relay
    • Cilium Operator

  Removed

  • Delete defaultPolicies and extraPolicies templates.

  coredns v1.23.0…v1.24.0

  Changed

  • Update coredns image to 1.12.0.
  • Disable HPA Memory target.
  • Increase threshold for HPA CPU target to 80%.

  coredns-extensions v0.1.2

  Added

  • Add VPA for CoreDNS deployments.
  • Add value to enable or disable VPA resources.

  Changed

  • Push App to the default-catalog.
  • Publish App in giantswarm-catalog.

  etcd-defrag v1.0.1

  Added

  • Chart: Add moveLeader. (#11)

  Changed

  • Chart: Update dependency ahrtr/etcd-defrag to v0.24.0. (#16)
  • Values: Rename cluster into useClusterEndpoints. (#8)

  etcd-k8s-res-count-exporter v1.10.0…v1.10.1

  Changed

  • Set readOnlyRootFilesystem to true in the container security context.
  • Update Kyverno PolicyExceptions to v2beta1.
  • Go: Update go.mod and .nancy-ignore. (#242)

  external-dns v3.1.0…v3.2.0

  Changed

  • Update architect-orb and ATS.
  • Add DNSEndpoints as a source for DNS records.

  k8s-audit-metrics v0.10.0…v0.10.1

  Changed

  • Update Kyverno PolicyExceptions to v2beta1.
  • Go: Update go.mod and .nancy-ignore. (#248)

  metrics-server v2.4.2…v2.6.0

  Added

  • Add VPA setting for metrics-server.

  Changed

  • Upgrade metrics-server to v0.7.2.
  • Chart: Update PolicyExceptions to v2beta1. (#226)

  node-exporter v1.20.0…v1.20.1

  Changed

  • Update Kyverno PolicyExceptions to v2beta1.
  • Go: Update go.mod. (#322)

  vertical-pod-autoscaler v5.3.1…v5.4.0

  Changed

  • Chart: Update Helm release vertical-pod-autoscaler to v10.0.0 (#335)

  vertical-pod-autoscaler-crd v3.1.2…v3.2.0

  Changed

  • Chart: Sync to upstream. (#126)
• Feb 10, 2025 CAPVCD releases releases cloud-director-29.3.2

  Changes compared to v29.3.1

  Apps

  • cloud-provider-cloud-director from v0.4.0 to v0.5.0

  cloud-provider-cloud-director v0.4.0…v0.5.0

  Changed

  • Update to 1.6.1-gs of CPI. (Upstream version 1.6.1 plus unreleased patch to address LB health monitor upgrade issue).
  • Update to 1.6.0 of CSI. This also removes --v=5 from the CSI plugin as this flag is no longer supported in this version.
• Feb 6, 2025 CAPVCD releases releases cloud-director-28.0.1

  Changes compared to v28.0.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
• Feb 6, 2025 CAPVCD releases releases cloud-director-29.0.1

  Changes compared to v29.0.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
• Feb 6, 2025 CAPVCD releases releases cloud-director-29.1.1

  Changes compared to v29.1.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)

• Older entries