1. Docs
  2. Changes and releases
  3. Connectivity

Connectivity

  • Connectivity envoy-gateway-app v1.10.5

    Changed

    • Update Envoy Gateway to v1.9.3.
    • Update Envoy Proxy image to distroless-v1.39.6, which includes CVE fixes and ca-certificates without the compromised eMudhra intermediate CAs.
    • Update architect to v10.16.4, which pushes the chart to the git catalogs with the architect GitHub App instead of the catalogbot account.

    Fixed

    • Fix the basic e2e suite for gateway-api-bundle v2, which deploys envoy-gateway as a Flux HelmRelease instead of an App CR.
    • The helm.sh/chart label is valid for long chart versions: the 63-character cut trims the whole trailing run of -, . and _.
  • Connectivity external-dns-app v3.7.2

    Fixed

    • Values schema: accept the values the Giant Swarm platform injects that the stricter schema from 3.7.0 rejected with values-schema-violation: managementCluster, global.podSecurityStandards, and the externalDNSIP and helm cluster values cluster-apps-operator sets for private clusters and the management cluster. global now allows additional properties.
  • Connectivity coredns-app v1.35.0

    Added

    • Support the forward max_age option (#528)

    Fixed

    • Render forward integer options when set to 0 (#528)
    • Validate additionalZones cache, forward, kubernetes, log and loadbalance blocks against the public and cluster zone schemas (#528)

    Changed

    • Update coredns image to 1.15.0.
    • Update gsoci.azurecr.io/giantswarm/docker-kubectl to v1.37.1 (#520)
  • Connectivity external-dns-app v3.4.1

    Fixed

    • CRD install job: bump the kubectl-apply-job dependency to 0.14.0 and pull it from oci://gsoci.azurecr.io/charts/giantswarm. Its fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
  • Connectivity external-dns-app v3.7.1

    Fixed

    • CRD install job: bump the kubectl-apply-job dependency to 0.14.0, whose fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
  • Connectivity external-dns-app v3.5.1

    Fixed

    • CRD install job: bump the kubectl-apply-job dependency to 0.14.0 and pull it from oci://gsoci.azurecr.io/charts/giantswarm. Its fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
  • Connectivity external-dns-app v3.6.1

    Fixed

    • CRD install job: bump the kubectl-apply-job dependency to 0.14.0, whose fallback image is gsoci.azurecr.io/giantswarm/docker-kubectl instead of quay.io/giantswarm/docker-kubectl:1.26.0, which quay.io now refuses with 401.
  • Connectivity external-dns-app v3.7.0

    Fixed

    • Values schema: accept arbitrary keys again in free-form maps and pass-through Kubernetes objects (annotations, labels, nodeSelector, affinity, security contexts, probes, resources, extraArgs as a map, tlsConfig, secretConfiguration.data), and name in imagePullSecrets items. This broke installs, for example with the IRSA eks.amazonaws.com/role-arn service account annotation on CAPA.
    • Values schema: accept the aws values that cluster-aws still sets. They have no effect.

    Changed

    • Upgrade external-dns to v0.23.0.
    • Sync to upstream helm chart 1.23.0.
  • Connectivity k8s-dns-node-cache-app v2.11.1

    Fixed

    • Make the DNS Service redirected by the CiliumLocalRedirectPolicy configurable.
    • The helm.sh/chart label is valid for long chart versions: the 63-character cut trims the whole trailing run of -, . and _.

    Added

    • Chart metadata: add io.giantswarm.application.managed annotation ("true").
    • Chart metadata: add keywords.
  • Connectivity envoy-gateway-app v1.10.4

    Added

    • Chart metadata: add io.giantswarm.application.managed annotation ("true").

    Changed

    • Fix all performance tests suites.
    • Fix stale and contradictory instructions in CLAUDE.md and the perf-report claude skill.
    • Update Envoy Gateway to v1.9.2.