Highlights

  • Highlights for the week ending April 15, 2022

    Apps

    User interfaces

    When installing apps into workload clusters via the web UI, it is now much easier to see what cluster you are installing to. Also we are displaying in the catalog which apps are installed in that cluster already.

    Documentation

    We improved our kubectl-gs installation instructions so they are easier to follow and we added info for ARM binaries for Linux and macOS.

  • Highlights for the week ending April 8, 2022

    Apps

    • dashboards versions v2.1.0 and v2.0.0 adds all dashboards form g8s-grafana, grafana sidecar annotation to all config maps, dashboard for ceph cluster usage in KVM. Splits each dashboards in specific configmaps and makes the mixin dashboard private.
    • efk-stack-app version v0.7.3 adds team annotations in Chart.yaml for alert routing and fixes deprecated api for rbac.
    • kyverno-app version v0.10.0 updates to Kyverno version 1.6.2 including performance and stability improvements.
    • kyverno-policies version v0.17.1 includes policies for enforcing Kubernetes Pod Security Standards (PSS). This is the first release of this app intended for use outside Giant Swarm’s own clusters.
    • nginx-ingress-controller-app versions v2.10.0 and v2.1.4 fix CVE-2022-0778 in OpenSSL and CVE-2022-23308 in libxml2.
    • security-pack version v0.1.0 enables Kyverno installation by default, updates to Falco app version 0.3.2, and includes the kyverno-policies app for PSS policy enforcement.

    Documentation

    The first iteration of our GitOps template repository gitops-template is available. It covers documented examples that show how we envision management of Giant Swarm resources (organizations, workload cluster templates and instances) with GitOps. This template is the pattern we recommend and support. This is still a work in progress: we will continue adding more use cases so major changes and revisions could happen.

  • Highlights for the week ending April 1, 2022

    User interfaces

    In our Web UI we now explain how to upgrade a cluster via the Management API (spoiler: kubectl gs update cluster) if an upgrade is available. On Azure you’ll now also find information regarding the Azure Tenant in which the workload cluster is running.

    In Grafana you have a new dashboard Kubernetes Proxy, which you can use to drill down into the kube-proxy metrics of your workload clusters.

  • Highlights for the week ending March 25, 2022

    Apps

    • falco-app v0.3.2 changes the default driver from the kernel module to ebpf, supporting Linux kernel versions used in CAPI clusters.
    • security-pack v0.0.1 has been released to the playground catalog as convenient way to install multiple security pack components at once.
    • starboard-app v0.6.0 updates to Starboard version 0.14.1 and uses the newer Trivy 0.24.0 backend.
    • trivy-app v0.2.0 updates to Trivy version 0.24.0.

    User interfaces

    The kubectl gs template catalog command provides a new flag --visibility to control whether the catalog should be visible in the web interface.

    Documentation

    For customers using clusters on AWS or Azure, we added more information on how to spread workloads over several availability zones for better availability/resilience. If you haven’t heard of topologySpreadConstraints before, check our example.

  • Highlights for the week ending March 18, 2022

    Apps

    New version release:

    • Dex-app v2.31.0 is available and contains bug fixes, mainly.
    • aws-load-balancer-controller-app v1.1.0 updates to AWS LoadBalancer Controller version v2.4.1. This release uses the new Ingress API version networking.k8s.io/v1 available in kubernetes 1.19 and later releases.
    • flux-app v0.10.0 upgrade to upstream flux toolkit version 0.27.3 that enables cross-namespace reference for image-controller.
    • kyverno-app v0.9.0 have Pod Disruption Budget enabled by default to improve stability during cluster upgrades.

    User interfaces

    In our latest Web UI, the top navigation, organization selection, and user menu have been improved to work in much more narrow viewports. This will simplify the use in a narrow browser window.

  • Highlights for the week ending March 11, 2022

    Apps

    kong-app v2.7.2 fixes an issue with permissions in the CRD installation.

    User interfaces

    kubectl gs get catalog <name> command’s output has been extended with app description column.

    Documentation

    Authentication for the Management API has been updated with an example of how to create kubeconfig for programmatic access.

  • Highlights for the week ending March 4, 2022

    General

    This week’s highlights are (almost) all about access control.

    We released the last of a series of changes that finally enable you to admit non-admin users to our web interface, given that your installation is switched to single sign-on already. Please read our blog post for details. We will get in contact with all customers who use single sign-on already to assist with establishing more fine-grained user roles and permissions.

    Apps

    • Our Dex app is now available in the Giant Swarm catalog, which means that we recommend it for production use in workload clusters. For customers who installed it from the Playground catalog, we updated the App CRs accordingly.
    • We welcome our RBAC bootstrap app in the Giant Swarm catalog. It is a very simple app to allow configuring your initial RBAC bindings in a fresh workload cluster.

    User interfaces

    • The web interface now fully adapts to the permissions a user has via the Management API.
    • For AWS clusters, the instructions to inspect a workload cluster via kubectl has been fixed to actually work. Sorry about that!

    Documentation

    • We added the article on Authorization in the Management API to explain where resources reside, which pre-defined roles are available and what they do, what additional automation is working behind the scenes, and how to put all of that to use based on typical use cases.
  • Highlights for the week ending February 25, 2022

    Apps

  • Highlights for the week ending February 18, 2022

    User interfaces

    In our web UI, when creating a new cluster on AWS with a single control plane node, the node will be assigned to an availability zone randomly.

    Apps

    kong-app v2.7.1 fixes a problem in the CRD installation where no registry was mentioned. As well adds updating of CRDs via helm hooks and aligns with the upstream chart version 2.7.0 and also updates the kong/kubernetes-ingress-controller image to 2.2.1.

  • Highlights for the week ending February 11, 2022

    User interfaces

    • The kubectl gs login command has been improved in several ways in kubectl-gs v2.1.0. You can now use --self-contained when logging in to a management cluster to output the login credentials to a self-contained kubectl configuration file. The new --keep-context flag allows to avoid changing your current kubectl context. And token renewal should be more robust now.

    Apps

    Documentation

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.