By Category

Back to all categories

Highlights

Aug 5, 2022 Highlights
Highlights for the week ending August 5, 2022
Apps
- kong-app version v2.11.0 Align with upstream chart version 2.11.0 (Changes in upstream repository) Update kong/kubernetes-ingress-controller to 2.5.0.
- nginx-ingress-controller-app version v2.15.0 added Support for annotations, labels and suffix on the internal controller service. NOTE: Adding, changing or removing the suffix results in a different name of the controller service resource. Since Helm does not keep track of the old resource, we recommend to uninstall and reinstall the app when changing the suffix. Changed: Omit service.beta.kubernetes.io/aws-load-balancer-proxy-protocol for use-proxy-protocol: “false”
- linkerd2-app version v0.7.2 Add Giant Swarm team label to resources and init container to destination and injector services to avoid the known issue of missing IP in post hook action. Update pytest-helm-charts from beta to v0.7.0 (#84)
- linkerd2-cni-app version v0.7.2 Add Giant Swarm team label to resources and Update pytest-helm-charts from beta to v0.7.0 (#68)
Jul 22, 2022 Highlights
Highlights for the week ending July 22, 2022
General
- We split Flux related alerts to Giant Swarm and Customer alerts based on which Flux reconciles the resources. Giant Swarm alerts remain in alert mode for Team Honey Badger while Customer alerts were moved to notify mode. Eventually Customer notifications will be routed to customers via chosen Flux native channels.
Apps
- app-operator version v6.2.0 now supports a list of extra configuration layers than can be applied to the 3 core - catalog, cluster, user - configuration levels. You can read more about it at: https://docs.giantswarm.io/app-platform/app-configuration/#extra-configs
Jul 15, 2022 Highlights
Highlights for the week ending July 15, 2022
Apps
- jiralert-app v0.0.3 updates to Jiralert version 1.2, supporting automatic resolution of Jira issues when an alert closes.
- starboard-exporter version v0.5.1 allows users to control which resource types are watched by the exporter, so that it can be deployed with either trivy-operator or starboard.
- flux-app v0.12 upgrades to Flux v0.31.3. Breaking changes: from v0.31 on, Flux is no longer compatible with kubeconfigs using client.authentication.k8s.io/v1alpha1, this version was deprecated and removed in Kubernetes 1.24. Full details in Flux v0.31.0 release notes.
Jul 8, 2022 Highlights
Highlights for the week ending July 8, 2022
General
This week we have updated cert-manager and added OIDC support on workload clusters via dex and athena.
Apps
- cert-manager version v2.15.1 Upgrades to upstream image v1.7.3 which increases some hard-coded timeouts for certain ACME issuers (ZeroSSL and Sectigo) (#243) and updates kubectl container version to 1.24.2 (#243)
User interfaces
kubectl gs login now supports OIDC on workload clusters via dex and athena. Please check the documentation on workload cluster OIDC configuration as well as the login command reference to find out more.
Jul 1, 2022 Highlights
Highlights for the week ending July 1, 2022
General
Introduced in gitops-template repository the out-of-band delivery feature that allow resources not included in Helm charts (= not supported by App CRs) to be delivered directly to workload clusters via Flux, bypassing the App Platform components.
Apps
- starboard-exporter version v0.5.0 introduces support for exporting CIS benchmark reports, and makes it possible to shard metrics across multiple instances of the exporter.
User interfaces
The web UI’s new permission inspection feature now also shows whether someone has the permissions required to use the web UI. Yes, we do think that makes sense.
Jun 24, 2022 Highlights
Highlights for the week ending June 24, 2022
General
- We added extended validation and linting for GitOps repositories.
Apps
- Loki v0.4.0 updates to Loki Upstream Chart v0.48.5 and updates Loki to v.2.5.0. This release has some breaking changes - please see the Changelog for instructions.
- Loki v0.4.1 sets loki config.auth_enabled to false by default.
- Promtail v.0.3.2 updates the upstream chart to v6.0.0 and Promtail to v.2.5.0. This update contains some breaking changes, please see the Changelog for instructions.
- Cert-Manager v2.14.0 We fixed the broken relative URLs in the Readme. Updates to Upstream Image v1.7.2 which completely removes cert-manager API versions v1alpha2, v1alpha3, and v1beta1. If you need to upgrade your resources, this document explains the process.
- Grafana-app v1.0.0 Upgrade upstream chart from version 6.24.1 to 6.31.0, and grafana from 8.4.2 to 9.0.1. This release includes a small set of breaking changes that you can check here. This release also allows some existing values to be templetized (tpl function) and adds a bit more configurability options (e.g. network policies).
Jun 17, 2022 Highlights
Highlights for the week ending June 17, 2022
General
With nginx-ingress-controller-app release v2.12.1 we updated the controller image to fix the upstream issue which fixes CVE-2021-25748. It is highly recommended to update all nginx-ingress-controller-app installations.
Apps
- kyverno-app version v0.10.1 updates the CRDs installed by Kyverno to match the upstream version 1.6.2 CRDs.
- security-pack version v0.3.1 updates kyverno-app to v0.10.1.
- trivy-operator-app version v0.0.1 is the first release for testing trivy-operator, which is intended to eventually replace starboard. App version 0.0.1 contains upstream version 0.0.5.
User interfaces
With kubectl gs release v2.14.0, the service priority cluster label can be set when using the template cluster command with the --service-priority flag.
You can also set the service priority label during cluster creation via the web UI, and inspect cluster labels in their raw format from the cluster details page.
Jun 10, 2022 Highlights
Highlights for the week ending June 10, 2022
General
We are introducing a service priority classification for workload clusters. You will see this being rolled out in various parts of our user interfaces, in documentation, and in monitoring. Please check our documentation to learn more.
User interfaces
kubectl gs will print the cluster’s service priority when using get clusters. The template cluster command now includes the service priority cluster label by default, setting the priority to the highest value.
Apps
nginx-ingress-controller-app version v2.12.1: Update controller container image to v1.2.1 which removes the root and alias directives from the internal NGINX. (#311).
Documentation
There is a new documentation article explaining the permission inspection function in our web UI.
Jun 3, 2022 Highlights
Highlights for the week ending June 03, 2022
General
With nginx-ingress-controller-app release v2.11.0 we added fixes for CVE-2021-25745 and CVE-2021-25746. Please also see the upstream issue for CVE-2021-25745 and the upstream issue for CVE-2021-25746. It is highly recommended to update all nginx-ingress-controller-app installations.
User interfaces
You can now inspect permissions for service accounts via the web UI, in addition to users and groups.
Apps
- kong-app version v2.10.0 updates to upstream version 2.8.2 and changes default values to more evenly schedule of pods.
Documentation
We completely updated our article on labelling workload clusters and added information on a new recommended label for indicating a cluster’s importance.
May 27, 2022 Highlights
Highlights for the week ending May 27, 2022
Apps
flux-app version v0.11.0 updates to upstream version v0.30.2.
vertical-pod-autoscaler-app version v2.4.0 Use patched docker image tagged 0.10.0-oomfix for recommender and updater and fixes the issue that VPA can not detect out of memory. Please also see VPA not detecting OOM
User interfaces
In our web UI’s new function to inspect permission, we now also show kubectl commands to gather similar information from the Management API using a CLI.
We fixed the end of life date shown for Kubernetes 1.21 to June 28 in accordance with upstream. Our apologies for falsely showing the EOL label previously!

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.