By Category

Back to all categories

Highlights

Mar 11, 2022 Highlights
Highlights for the week ending March 11, 2022
Apps
kong-app v2.7.2 fixes an issue with permissions in the CRD installation.
User interfaces
kubectl gs get catalog <name> command’s output has been extended with app description column.
Documentation
Authentication for the Management API has been updated with an example of how to create kubeconfig for programmatic access.
Mar 4, 2022 Highlights
Highlights for the week ending March 4, 2022
General
This week’s highlights are (almost) all about access control.
We released the last of a series of changes that finally enable you to admit non-admin users to our web interface, given that your installation is switched to single sign-on already. Please read our blog post for details. We will get in contact with all customers who use single sign-on already to assist with establishing more fine-grained user roles and permissions.
Apps
- Our Dex app is now available in the Giant Swarm catalog, which means that we recommend it for production use in workload clusters. For customers who installed it from the Playground catalog, we updated the App CRs accordingly.
- We welcome our RBAC bootstrap app in the Giant Swarm catalog. It is a very simple app to allow configuring your initial RBAC bindings in a fresh workload cluster.
User interfaces
- The web interface now fully adapts to the permissions a user has via the Management API.
- For AWS clusters, the instructions to inspect a workload cluster via kubectl has been fixed to actually work. Sorry about that!
Documentation
- We added the article on Authorization in the Management API to explain where resources reside, which pre-defined roles are available and what they do, what additional automation is working behind the scenes, and how to put all of that to use based on typical use cases.
Feb 25, 2022 Highlights
Highlights for the week ending February 25, 2022
Apps
- nginx-ingress-controller-app v2.9.1 adds support for modifying the ‘maxSurge’ parameter for the controller deployment strategy.
Feb 18, 2022 Highlights
Highlights for the week ending February 18, 2022
User interfaces
In our web UI, when creating a new cluster on AWS with a single control plane node, the node will be assigned to an availability zone randomly.
Apps
kong-app v2.7.1 fixes a problem in the CRD installation where no registry was mentioned. As well adds updating of CRDs via helm hooks and aligns with the upstream chart version 2.7.0 and also updates the kong/kubernetes-ingress-controller image to 2.2.1.
Feb 11, 2022 Highlights
Highlights for the week ending February 11, 2022
User interfaces
- The kubectl gs login command has been improved in several ways in kubectl-gs v2.1.0. You can now use --self-contained when logging in to a management cluster to output the login credentials to a self-contained kubectl configuration file. The new --keep-context flag allows to avoid changing your current kubectl context. And token renewal should be more robust now.
Apps
- nginx-ingress-controller-app v2.9.0 adds support for enabling the ‘–enable-ssl-chain-completion’ flag.
Documentation
- We added documentation for creating test Cluster API for Azure clusters with the Azure v20.0.0-alpha1 release.
Feb 4, 2022 Highlights
Highlights for the week ending February 4, 2022
User interfaces
- kubectl-gs v2.0.0 has been released, removing some old flags that were previously deprecated and replaced by others. Also adding some options to the template app command.
Apps
- external-dns-app v2.9.1 allows for setting the AWS default region independently from any other value.
- flux-app version 0.9.0 has been released with support for variable substitution.
Documentation
- As our next releases for AWS and Azure will provide cgroups v2, which is known to conflict with some applications (especially older Java runtime environments), we provide documentation on how to activate cgroups v1 in selected node pools.
- We extended our documentation for the kubectl gs login command to provide more information for accessing workload clusters.
- We improved the GitOps documentation around Role-Based Access and how it ties in to Management API.
Jan 28, 2022 Highlights
Highlights for the week ending January 28, 2022
Apps
- external-dns-app v2.9.0 contains changes to mitigate rate limiting on AWS clusters. Please check the changelog for additional notes if you already specify ‘–aws-batch-change-interval’ or ‘–aws-zones-cache-duration’.
- nginx-ingress-controller-app v2.8.0 contains a potential breaking change, and disables the configuration setting ‘use-forwarded-headers’ by default, to increase security. Please check the changelog for additional notes if you require this configuration.
Documentation
- We added documentation for creating an app catalog for deploying apps using Helm charts from the community or publishing your own apps.
Jan 21, 2022 Highlights
Highlights for the week ending January 21, 2022
Apps
- kong-app v2.5.0 adds startup probes to allow for longer boot times in large clusters.
- nginx-ingress-controller-app v2.7.0 updates to controller image v1.1.1, among other improvements. Please note, previous versions are not compatible with Kubernetes versions greater than 1.22.
User interfaces
- In Organisations, Happa now displays the description for Access Control roles.
- Kubectl gs:
  - template app command supports installation of MC Apps with the --in-cluster flag.
  - login command now allows deletion of the required CertConfig resource only, instead of all, for a namespace.
Jan 14, 2022 Highlights
Highlights for the week ending January 14, 2022
Apps
- falco-app v0.2.0 Update to upstream charts: Falco 1.16.2/0.30.0, exporter 0.6.3/0.6.0, sidekick 0.4.4/2.24.0.
- kong-app v2.4.0 upgrades to upstream v2.6.4. This release includes breaking changes, it is recommended to check the changelog for specific details.
- Dex monitoring is now available through our Public Grafana ( Docs here )
User interfaces
If you haven’t done so yet, please upgrade your kubectl-gs version to 1.58.2, to prevent an issue with the login command when creating workload cluster certificates.
In the web UI on KVM installations, we fixed a problem that prevented clusters from being deleted. Also the number of apps with a pending upgrade is now calculated correctly.
Management API
- rbac-operator v0.19.0 added user-friendly descriptions to created ClusterRole resources, via annotations using the giantswarm.io/notes key and changed the CI build process to use architect-orb.
- kyverno-policies v0.13.0 added policies-openstack for OpenStack-specific policies and added policy for OpenStack which defaults failureDomain based on MachineDeployment request’s machine-deployment.giantswarm.io/failure-domain label.
Dec 17, 2021 Highlights
Highlights for the week ending December 17, 2021
Apps
- cert-manager-app v2.12.0 upgrades to upstream v1.6.1. This version stops serving cert-manager API versions v1alpha2, v1alpha3, and v1beta1 - if you need to upgrade your resources, this document explains the process.
- cloudlfared-app v0.3.0 upgrades to upstream 2021.11.0.
- efk-stack-app v0.7.1 upgrades to upstream 1.13.3. This version mitigates CVE-2021-44228.
- efk-stack-app v0.7.2 correctly selects api version for ingress resources between [networking.k8s.io/v1](https://networking.k8s.io/v1) or [networking.k8s.io/v1beta1](https://networking.k8s.io/v1beta1) depending on cluster version.
- external-dns-app v2.7.0 upgrades to upstream v0.10.2. This version removes support for Kubernetes versions <= 1.18.
- grafana-app v0.3.0 upgrades to upstream v8.3.2. This version fixes CVE-2021-43813 and CVE-2021-43798.
- prometheus-operator-app v0.12.0 upgrades to upstream 23.2.0. This version fixes CVE-2021-43798.
- prometheus-operator-app v0.12.1 fixes a bug with CRD installation.
User interfaces
The new update cluster command in kubectl-gs allows to upgrade a workload cluster, either immediately or at some scheduled point in the future. See the documentation for more details.

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.