CAPVCD Releases

• Mar 13, 2025 CAPVCD releases releases cloud-director-30.0.0

  Changes compared to v29.3.2

  Components

  • cluster-cloud-director from v0.64.2 to v0.65.0
  • Flatcar from v4081.2.1 to v4152.2.1
  • Kubernetes from v1.29.13 to v1.30.10

  cluster-cloud-director v0.64.2…v0.65.0

  Changed

  • Chart: Update cluster to v2.1.1.
  • Chart: Enable coredns-extensions and etcd-defrag.

  Apps

  • capi-node-labeler from v0.5.0 to v1.0.1
  • cert-exporter from v2.9.3 to v2.9.4
  • cert-manager from v3.8.2 to v3.9.0
  • cilium from v0.25.2 to v0.31.0
  • coredns from v1.23.0 to v1.24.0
  • coredns-extensions v0.1.2
  • etcd-defrag v1.0.1
  • etcd-k8s-res-count-exporter from v1.10.0 to v1.10.1
  • external-dns from v3.1.0 to v3.2.0
  • k8s-audit-metrics from v0.10.0 to v0.10.1
  • metrics-server from v2.4.2 to v2.6.0
  • node-exporter from v1.20.0 to v1.20.1
  • vertical-pod-autoscaler from v5.3.1 to v5.4.0
  • vertical-pod-autoscaler-crd from v3.1.2 to v3.2.0

  capi-node-labeler v0.5.0…v1.0.1

  Changed

  • Main: Improve sleep. (#125)
  • Go: Update go.mod and .nancy-ignore. (#123)

  cert-exporter v2.9.3…v2.9.4

  Changed

  • Repository: Some chores. (#418)
  • Go: Update go.mod and .nancy-ignore. (#437)

  cert-manager v3.8.2…v3.9.0

  Added

  • Adds new sync method based on Vendir to sync from upstream

  Changed

  • Updates Cert-manager Chart to Upstream 1.16.2

  cilium v0.25.2…v0.31.0

  Changed

  • Upgrade Cilium to v1.16.6.
  • Move provider specific custom CNI configuration to subchart.
  • Improve security defaults for:
    • Hubble UI
    • Hubble Relay
    • Cilium Operator

  Removed

  • Delete defaultPolicies and extraPolicies templates.

  coredns v1.23.0…v1.24.0

  Changed

  • Update coredns image to 1.12.0.
  • Disable HPA Memory target.
  • Increase threshold for HPA CPU target to 80%.

  coredns-extensions v0.1.2

  Added

  • Add VPA for CoreDNS deployments.
  • Add value to enable or disable VPA resources.

  Changed

  • Push App to the default-catalog.
  • Publish App in giantswarm-catalog.

  etcd-defrag v1.0.1

  Added

  • Chart: Add moveLeader. (#11)

  Changed

  • Chart: Update dependency ahrtr/etcd-defrag to v0.24.0. (#16)
  • Values: Rename cluster into useClusterEndpoints. (#8)

  etcd-k8s-res-count-exporter v1.10.0…v1.10.1

  Changed

  • Set readOnlyRootFilesystem to true in the container security context.
  • Update Kyverno PolicyExceptions to v2beta1.
  • Go: Update go.mod and .nancy-ignore. (#242)

  external-dns v3.1.0…v3.2.0

  Changed

  • Update architect-orb and ATS.
  • Add DNSEndpoints as a source for DNS records.

  k8s-audit-metrics v0.10.0…v0.10.1

  Changed

  • Update Kyverno PolicyExceptions to v2beta1.
  • Go: Update go.mod and .nancy-ignore. (#248)

  metrics-server v2.4.2…v2.6.0

  Added

  • Add VPA setting for metrics-server.

  Changed

  • Upgrade metrics-server to v0.7.2.
  • Chart: Update PolicyExceptions to v2beta1. (#226)

  node-exporter v1.20.0…v1.20.1

  Changed

  • Update Kyverno PolicyExceptions to v2beta1.
  • Go: Update go.mod. (#322)

  vertical-pod-autoscaler v5.3.1…v5.4.0

  Changed

  • Chart: Update Helm release vertical-pod-autoscaler to v10.0.0 (#335)

  vertical-pod-autoscaler-crd v3.1.2…v3.2.0

  Changed

  • Chart: Sync to upstream. (#126)
• Feb 10, 2025 CAPVCD releases releases cloud-director-29.3.2

  Changes compared to v29.3.1

  Apps

  • cloud-provider-cloud-director from v0.4.0 to v0.5.0

  cloud-provider-cloud-director v0.4.0…v0.5.0

  Changed

  • Update to 1.6.1-gs of CPI. (Upstream version 1.6.1 plus unreleased patch to address LB health monitor upgrade issue).
  • Update to 1.6.0 of CSI. This also removes --v=5 from the CSI plugin as this flag is no longer supported in this version.
• Feb 6, 2025 CAPVCD releases releases cloud-director-28.0.1

  Changes compared to v28.0.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
• Feb 6, 2025 CAPVCD releases releases cloud-director-29.0.1

  Changes compared to v29.0.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
• Feb 6, 2025 CAPVCD releases releases cloud-director-29.1.1

  Changes compared to v29.1.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
• Feb 6, 2025 CAPVCD releases releases cloud-director-29.2.1

  Changes compared to v29.2.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
• Feb 6, 2025 CAPVCD releases releases cloud-director-29.3.1

  Changes compared to v29.3.0

  Apps

  • cloud-provider-cloud-director from v0.3.1 to v0.4.0

  cloud-provider-cloud-director v0.3.1…v0.4.0

  Changed

  • Update to 1.6.0-gs of CPI. (Upstream 1.6.0 plus custom patch from previous release.)
• Jan 27, 2025 CAPVCD releases releases cloud-director-29.3.0

  Changes compared to v29.2.0

  Components

  • cluster-cloud-director from v0.64.0 to v0.64.2
  • Flatcar from v3975.2.2 to v4081.2.1
  • Kubernetes from v1.29.12 to v1.29.13

  cluster-cloud-director v0.64.0…v0.64.2

  Added

  • Add components.containerd to the schema and values.

  Changed

  • Make CPI helmrelease catalog configurable.

  Apps

  • cilium from v0.25.1 to v0.25.2
  • prometheus-blackbox-exporter from v0.4.2 to v0.5.0
  • security-bundle from v1.8.2 to v1.9.1
  • vertical-pod-autoscaler from v5.3.0 to v5.3.1
  • vertical-pod-autoscaler-crd from v3.1.1 to v3.1.2

  cilium v0.25.1…v0.25.2

  Changed

  • Upgrade cilium to v1.15.13.

  prometheus-blackbox-exporter v0.4.2…v0.5.0

  Changed

  • Harden security context to pass PSS compliance.

  Removed

  • Remove PSP resources.

  security-bundle v1.8.2…v1.9.1

  Breaking changes

  Note: When upgrading to this security-bundle version with Falco enabled, the Falco App will fail to upgrade due to a breaking change in the upstream chart. To finish the upgrade, disable, then re-enable the Falco App by setting apps.falco.enabled=[false|true] in the security-bundle user values Config Map.

  Changed

  • Update trivy-operator (app) to v0.10.3.
  • Update trivy (app) to v0.13.1.
  • Update kyverno (app) to v0.18.1.
  • Update kyverno-crds (app) to v1.12.0.
  • Update kyverno-policies (app) to v0.21.0.
  • Update starboard-exporter (app) to v0.8.0.
  • Update falco (app) to v0.9.1.

  vertical-pod-autoscaler v5.3.0…v5.3.1

  Changed

  • Chart: Update Helm release vertical-pod-autoscaler to v9.9.1. (#333)

  vertical-pod-autoscaler-crd v3.1.1…v3.1.2

  Changed

  • Chart: Sync to upstream. (#124)
• Dec 12, 2024 CAPVCD releases releases cloud-director-29.2.0

  Changes compared to v29.1.0

  Components

  • cluster-cloud-director from v0.63.1 to v0.64.0
  • Kubernetes from v1.29.10 to v1.29.12

  cluster-cloud-director v0.63.1…v0.64.0

  Changed

  • Chart: Update cluster to v1.7.0.
    • Add teleport-init systemd unit to handle initial token setup before teleport service starts
    • Improve teleport service reliability by adding proper file and service dependencies and pre-start checks

  Apps

  • cert-manager from v3.8.1 to v3.8.2
  • coredns from v1.22.0 to v1.23.0
  • observability-bundle from v1.8.0 to v1.9.0

  cert-manager v3.8.1…v3.8.2

  Changed

  • Changed ownership to team Shield

  Removed

  • Get rid of label giantswarm.io/monitoring_basic_sli as this slo generation label is not used anymore.

  coredns v1.22.0…v1.23.0

  Changed

  • Update coredns image to 1.11.4.
  • Explicitly expose liveness and readiness probe ports in deployments.

  Removed

  • Remove PodSecurityPolicy and associated Resources and values.

  observability-bundle v1.8.0…v1.9.0

  Added

  • Add alloy v0.7.0 as alloyEvents.

  Changed

  • Upgrade alloy-logs and alloy-metrics to chart 0.7.0.
    • Bumps alloy from 1.4.2 to 1.5.0
  • upgrade kube-prometheus-stack from 65.1.1 to 66.2.1
    • prometheus-operator CRDs from 0.75.0 to 0.78.1
    • prometheus-operator from 0.77.1 to 0.78.1
    • prometheus from 2.54.1 to 2.55.1
    • kube-state-metrics from 2.13.0 to 2.14.0
    • grafana from 8.5.0 to 8.6.0
• Nov 25, 2024 CAPVCD releases releases cloud-director-29.1.0

  Changes compared to v29.0.0

  Apps

  • cert-exporter from v2.9.2 to v2.9.3
  • observability-bundle from v1.6.2 to v1.8.0

  cert-exporter v2.9.2…v2.9.3

  Changed

  • Chart: Enable global.podSecurityStandards.enforced. (#420)

  observability-bundle v1.6.2…v1.8.0

  Changed

  • Upgrade prometheus-agent from v0.6.9 to v0.7.0.
    • Adds extraArgs to be able to use nice features like wal truncation
  • upgrade kube-prometheus-stack from 61.0.0 to 65.1.1
    • prometheus-operator CRDs from 0.73.0 to 0.75.0
    • prometheus-operator from 0.75.0 to 0.77.1
    • prometheus upgraded from 2.53.0 to 2.54.1
    • grafana from 8.2.0 to 8.5.0
    • thanos ruler upgraded from 0.35.1 to 0.36.1
    • prometheus-node-exporter upgraded from 1.8.1 to 1.8.2
  • Add missing depends on annotation on alloy-metrics and alloy-logs to make sure they are deployed after the prometheus-operator-crds.
  • Upgrade alloyLogs to v0.6.1
    • Allow passing PodLogs via helm chart values
    • Upgrade to Alloy v1.4.2 which fixes a bug with component reload/evaluation and keeping Alloy up-to-date
    • Fixes an issue with CiliumNetworkPolicy preventing Alloy to run in clustering mode

• Newer entries
• Older entries