Changed
- Upgrade upstream external-dns from v0.7.3 to v0.7.4.
Connectivity
Changed
- Upgrade ingress-nginx-controller from v0.35.0 to v0.40.2.
Important upstream changes to pay special attention to:
- App/chart requires Kubernetes 1.16+ based platform release
- It is recommended to change API group of Ingress resources from
extensions/v1beta1tonetworking.k8s.io/v1beta1(available since Kubernetes 1.14)
- It is recommended to change API group of Ingress resources from
- Default configuration changes:
gzip-leveldefault changed from5to1ssl-session-ticketsdefault changed fromtruetofalseuse-gzipdefault changed fromtruetofalseupstream-keepalive-connectionschanged from32to320upstream-keepalive-requestschanged from100to10000
- App/chart requires Kubernetes 1.16+ based platform release
- Support and enable by default mimalloc as a drop-in malloc replacement to reduce nginx memory utilization.
- Support configuring additional environment variables for NGINX Ingress Controller container, to support configuring additional mimalloc options.
- Adjust Helm
hook-delete-policyandhook-weightto make admission webhook management more reliable.
- Upgrade ingress-nginx-controller from v0.35.0 to v0.40.2.
Important upstream changes to pay special attention to:
Changed
- Split registry value to allow switching registry.
Added
giantswarm.io/monitoringlabel (in addition to existing annotation) for the new sharded TC Prometheus to pick up the service.
Changed
- Upgrade to ingress-nginx v0.35.0.
Updated
- Upgraded architect-orb to 0.10.0
- Add github workflows for release automation
- Sync with upstream chart v1.8.0
- Update busybox 1.31.0 -> 1.32.0
Improvements
From upstream CHANGELOG:
- Update default Kong version to 2.1.
- Update Kong Enterprise images to 1.5.0.4 (kong-enterprise-edition) and 2.0.4.2 (kong-enterprise-k8s).
- Updated default controller version to 0.9.1. (#150)
- Added support for ServiceMonitor targetLabels (for use with the Prometheus Operator). (#162)
- Automatically handle the new port_maps setting for the proxy service. (#169)
- Add support for hybrid mode deployments. (#160)
Fixed
- Uses fix from upstream-branch next to resolve issue “CONTROLLER_ADMISSION_WEBHOOK_LISTEN” which overwrites our fix below.
- Force cast to string for Admission Webhook port #59
Added
- Monitoring headless Service.
- More Giant Swarm custom monitoring annotations.
- Explicitly expose metrics container port.
Changed
- Use default external-dns metrics port 7979.
Added
- Added monitoring and common labels.
Changed
- Upgrade upstream external-dns from v0.7.2 to v0.7.3.
- Upgrade architect-orb to 0.10.1
- Configure explicit helm hook weights to make validating webhook resource management reliable.
- Support Ingress resources validating webhook.
Fixed
- Fix NetworkPolicy templating, to allow Pod ingress traffic (Prometheus scrape requests) on same port that the metrics/monitoring service advertises.