Highlights
Highlights for the week ending December 03, 2021
Apps
- aws-load-balancer-controller-app v1.0.1 adds further Giant Swarm monitoring.
- kong-app v2.3.4 adds further Giant Swarm monitoring.
- nginx-ingress-controller-appv2.5.0 updates the controller image to upstream v1.1.0.
- nginx-ingress-controller-app v2.6.0 adds the ability to specify a custom LoadBalancer Service name suffix.
User interfaces
In
kubectl-gs
we had to make the--release
flag mandatory, which specifies the workload cluster release version in the template cluster and template nodepool subcommands.Highlights for the week ending November 26, 2021
Apps
Dex now supports more than one customer connector. If you plan to admit users from different identity providers to workload clusters, please give this a try and contact us in case you have questions.
User interfaces
In the web UI, we fixed a problem that prevented users with legacy accounts to use the “Forgot password” form.
Documentation
We added an FAQ page on kubectl-gs as well as a page to help with migration from gsctl.
Highlights for the week ending November 19, 2021
Apps
AWS LB Controller is now available! Find it in the managed apps catalog.
oauth2-proxy version v7.2.0 is now available, as well as support for configuring extra arguments (per provider, or for all providers).
User interfaces
In the Web UI, we now guide users to create a node pool after cluster creation.
On AWS in the node pool creation UI - spot instances are now disabled by default and can be enabled by toggling “Enable spot instances” in the node pool creation form.
Added
--self-contained
flag tokubectl-gs login
command for workload clusters to allow the output of standalone kubeconfig file. This file can be passed on to other users without management cluster access.You can now specify a Service Account token when logging in, to help automation use cases.
Documentation
Added documentation on how to scale down workload clusters and silence alerts for a specified period of time. This can be used, for example, to limit workload clusters costs.
Highlights for the week ending November 12, 2021
Apps
Flux v0.7.0 provides the Flux Toolkit version 0.21.0 and adds service discovery labels for Prometheus, so that metrics are scraped.
User interfaces
In the web UI, we now display if a cluster has upgrades scheduled.
kubectl gs login
has been improved in several ways. Most importantly, the command now also supports using a service account token for authentication via the--token
flag. This facilitates creation of workload cluster client certificates especially in automation. (Docs)Additionally, when creating a client certificate for a workload cluster, the flag
--organization
is now optional as long as the workload cluster name is unique.kubectl gs
will also notify you when using an outdated plugin version. When that happens, the newkubectl gs selfupdate
command allows to update the plugin to the latest version, for those not using Krew.Management API
For
kubectl get apps.application.giantswarm.io
(or justkubectl get apps
) we changed the output columns for the App CRD. With that, for apps installed in workload clusters, you can now differentiate the installed version from the desired version.In automation, please make sure to use JSON or YAML output of
kubectl get
commands instead if plain text, so your implementation is not affected by a change like the above.Monitoring
If you are using Flux CD in the management cluster for your own good, you’ll want to check out the two new Grafana dashboards on Flux CD metrics which we added this week. Flux Cluster Stats showcases reconcilers and operator data, while Flux Control Plane will give you an insight into resource usage, number of API requests, and ongoing operation rates.
Highlights for the week ending November 5, 2021
Documentation
- A new article on managing workload clusters with GitOps, explaining how to use Flux in our management clusters.
- Added documentation for handling cloud provider credentials via the Management API (for AWS).
- If you’ve been trying to figure out how to use
kubectl gs login
with workload clusters, the docs article now provides more detailed information and better examples.
User interfaces
- Our web interface is now fully migrated to the Management API on AWS. So customers who already switched to single sign-on will notice some UI improvements.
gsctl
adds more information about deprecated commands. Make sure to use the latest version.
Highlights for the week ending October 29, 2021
User interfaces
kubectl gs
now offers a new commandupdate app
to simply upgrade an installed app to a newer version.kubectl gs
now also provides the capability to create client certificates for accessing workload clusters via thelogin
command.
Documentation
- We published a new guide on how to set up Dex in a workload cluster to use OIDC authentication.
- Our guide on reparing AWS accounts got a big update.
Highlights for the week ending October 15, 2021
General
As part of our continuous effort to align our terminology with the Kubernetes project where appropriate, we phase out the term “key pair” and will instead use “client certificate” in the future. Expect this to land in the web UI and documentation soon. Commands in
gsctl
will not be affected by the change however.User interfaces
We have added changes to
kubectl gs
:- The
template cluster
andtemplate nodepool
commands for releasev20.0.0
now use Management API for defaulting, making it the same across providers including Cluster API (for AWS, AWS using EKS, and for Azure).
- The
Highlights for the week ending October 8, 2021
Apps
nginx-ingress-controller-app v2.3.0 updates the controller image to upstream v1.0.3 to fix problems some users had with a special LUA module.
Documentation
Terminology update: what has been called “master nodes” by the Kubernetes project in the past is now called the Control plane or the control plane nodes. We are aligning with these changes in our documentation as well as the user interfaces. Note that we are making an exception for gsctl and the Rest API, which we plan to phase out in the future.
User interfaces
We have several important changes in
kubectl gs
:- The
template cluster
andtemplate nodepool
commands will automatically use the namespace of the organization owning the cluster. - We added the command
get releases
to fetch information on cluster releases. - The
template nodepool
command now ensures thegiantswarm.io/machine-pool
labels for each worker node in a node pool, both on AWS and Azure.
Users of
gsctl
will notice deprecation warnings in a growing number of commands with new releases. These will inform you on whichkubectl gs
command to check out as a replacement. If you are usinggsctl
in automation, these warnings are printed to STDERR and as we hope should not affect your processing of any STDOUT output.- The
Highlights for the week ending September 17, 2021
Apps
Flux App v0.4.0 updates the flux toolkit version to upstream v0.17.1.
Dashboards
We welcome two new Grafana dashboards:
Managed apps gives you an overview of the apps installed in your workload clusters, plus a extra information on available app updates.
AWS cluster status shows some key metrics on your workload clusters. Available only in AWS installations.
User interfaces
With kubectl-gs v1.39.1, in the
template cluster
andtemplate nodepool
command, we replaced the flag--owner
by--organization
. And added the new commandtemplate organization
for creating an Organization CR.In the web interface we improved the performance when browsing apps significantly.
Documentation
We updated all our documentation on ingress controllers: the basic guide on installing an ingress controller and all our advanced ingress docs.