Fleet Management

  • Changed

    • Change how login works on CAPA and gcp to use our DNS record for the k8s API when using these providers, rather than the value found in the CAPI CRs.
  • Changed

    WARNING: this version requires Cilium to run because of the dependency on the CiliumNetworkPolicy CRD

    • Upgrade dependency chart to 9.2.0.
    • Adjusted the resource and limits to accomodate larger clusters by default
    • Adjusted the admission controller to give it more QPS against the API
    • Adjusted the updater to give it more QPS against the API
    • Adjusted the recommender to give it
      • more QPS against the API
      • doubling the memory in case of an OOMKilled event
      • Using the 95% percentile for the calculation of the CPU usage: should allow to scale up more precisely to account for spikes in CPU consumption of the workload
      • Adjusted the resource and limits to accomodate larger clusters by default
      • Calculating recommendations only for workloads which do have a VPA custom resource, instead of all workloads
      • Removed standard network policies to decrease maintenance burden
      • Fixed Cilium Network Policy to allow CRD jobs execution
      • Added Cilium Network Policy weight for an early execution
      • Disabled VPA for the updater pod otherwise it keeps on getting re-scheduled because the memory consumption varies a lot between reconsiling resources and idle
      • Disabled VPA for the recommender pod otherwise it keeps on getting re-scheduled because the memory consumption varies a lot between reconsiling resources and idle
  • Added

    • Adding opsctl login support for EKS clusters.
  • Added

    • Add --login-timeout flag to control the time period of OIDC login timeout
    • Add experimental support for templating cluster-eks with provider eks.

    Changed

    • Graceful failure of the login command in case workload cluster API is not known
    • Improved error message after login timeout
    • Adjusted description of the --cluster-admin flag in the login command
    • Specified failureThreshold and periodSeconds for recommender’s liveness probe.
    • Upgrade dependency chart to 7.1.0.
    • Upgrade VPA components to 0.14.0
  • Fixed

    • Add required values for pss policies.
  • Added

    • Values.image.registry

    Changed

    • Template for image reference in deployment.yaml
    • application.giantswarm.io/team annotation to Phoenix
  • Added

    • Add Service Monitor.

    Changed

    • Defined the use of the RuntimeDefault Seccompprofiles in the pod and container security context.
  • Changed

    • Add VPA

    Fixed

    • Detect China region to fix IRSA role
  • Added

    • Add cluster-autoscaler safe-to-evict annotation to recommender and updater