Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

• Sep 30, 2024 Workload cluster releases for CAPA releases aws-27.2.0

  Changes compared to v27.1.1

  Components

  • cluster-aws from v1.3.2 to v1.3.3
  • Kubernetes from v1.27.14 to v1.27.16

  cluster-aws v1.3.2…v1.3.3

  Changed

  • Chart: Update cluster to v1.0.2.
    • Chart: Add OS tooling named template.
• Sep 30, 2024 Workload cluster releases for CAPA releases aws-28.2.0

  Changes compared to v28.1.2

  Components

  • cluster-aws from v1.3.2 to v1.3.3
  • Kubernetes from v1.28.11 to v1.28.14

  cluster-aws v1.3.2…v1.3.3

  Changed

  • Chart: Update cluster to v1.0.2.
    • Chart: Add OS tooling named template.
• Sep 30, 2024 Workload cluster releases for CAPA releases aws-29.3.0

  Changes compared to v29.2.0

  This release does not contain any changes to components or apps, but makes use of an updated machine image, which includes a fix for accessing private Elastic Container Registries (ECR).

  ⚠️ Breaking change introduced in v29.2.0 with cluster-aws version 2.1.0

  • Do not allow additional properties in the following fields in order to avoid unnoticed typos:

    • global.connectivity.network
    • global.connectivity.network.pods
    • global.connectivity.network.services
    • global.connectivity.subnets[]
    • global.connectivity.topology
    • global.controlPlane
    • global.controlPlane.additionalSecurityGroups[]
    • global.controlPlane.machineHealthCheck
    • global.controlPlane.oidc
    • global.providerSpecific
    • global.providerSpecific.instanceMetadataOptions

  If you were using values like global.controlPlane.containerdVolumeSizeGB and global.controlPlane.kubeletVolumeSizeGB, please move to the new .global.controlPlane.libVolumeSizeGB which defines the size of disk volume used for /var/lib mount point.

• Sep 30, 2024 Workload cluster releases for Azure releases azure-29.2.0

  Changes compared to v29.1.0

  This release does not contain any changes to components or apps, but makes use of an updated machine image, which includes a fix for accessing private Elastic Container Registries (ECR).

• Sep 26, 2024 Managed Apps teleport-kube-agent-app v0.10.3

  Changed

  • Disable JAMF components on chart templates
• Sep 26, 2024 Highlights

  Highlights for the week ending 2024-09-26

  Observability

  • dashboardsversion 3.24.0

    • Updated Alertmanager dashboard to show related logs.
    • Add Loki mixins dashboards update script.
    • Update Mimir mixins dashboards via script.
    • Fix Alloy mixin tags.

  • alloy-app version 0.5.2 introduces the following changes:

    • Add a helm chart templating test to the ci pipeline.
    • Add tests with ats in the CI pipeline.
    • Push alloy as a gateway component in collections.

  • kyverno-policies-observability version 0.5.0

    • Remove the policy for ServiceMonitor and PodMonitor relabelling schemas as we no longer need the enforcement.

  • fluent-logshipping-app version 5.2.2

    • Fix the Nginx Parser based on the upstream parser.

  • logging-operator version 0.12.1

    • Fix usage of structured metadata for clusters before v20.
    • Move high cardinality values into structured metadata.
    • Add Kubernetes audit log resource label, filename label, and output stream label.
    • Rename the node_name label into node to match the metric label.

  • loki-app version 0.24.0

    • Add “manual e2e” testing procedure.
    • Add PR message template referring to the manual testing procedure.

  • observability-bundle version 1.6.2:

    • Fixed alloyMetrics catalog

  • observability-operator version 0.6.0:

    • Require observability-bundle >= 1.6.2 for Alloy monitoring agent support; this is due to the incorrect alloyMetrics catalogue in observability-bundle
    • Fix invalid Alloy config due to missing comma on external labels
    • Disable logger development mode to avoid panicking; use zap as a logger.
    • Fix CircleCI release pipeline.
    • Add manual e2e testing procedure and script.

  • prometheus-meta-operator version 4.79.0:

    • Remove unused #alert and #alert-test-installation slack integration.

  • prometheus-rules version 4.15.2:

    • Update MimirHPAReachedMaxReplicas operation recipe link
    • Fix aggregation rule of the slo:current_burn_rate:ratio slo.
    • Remove aggregation of slo:period_error_budget_remaining:ratio` as this value can be easily computed and creates a lot of time series in Grafana Cloud
    • Add aggregations for SLO metrics to export them to the Grafana cloud
    • Add MimirHPAReachedMaxReplicas alert to detect when Mimir’s HPAs have reached maximum capacity.
    • Added dashboards to several Mimir alerts
    • Change IRSAACMCertificateExpiringInLessThan60Days to IRSAACMCertificateExpiringInLessThan45Days. The ACM certificate is renewed 60 days before expiration, and the alert can fire prematurely.

  • tekton-dashboard-loki-proxy version 0.4.0:

    • Change app.giantswarm.io/* labels to application.giantswarm.io/
    • Update Golang to v1.23.1

  Cluster management

  • aws-pod-identity-webhook version 1.17.0:

    • Fix VPA being ineffective due to referring to a non-existing Deployment name

  • aws-crossplane-cluster-config-operator version 0.3.0

    • Configure the Crossplane ProviderConfig to use the CAPA controller role directly without going through a middleman. For this to work, the CAPA controller must have the correct trust policy granting access to the Crossplane provider’s service account.
    • Write a value oidcDomains to the config map containing all service account issuer domains, as defined by the new aws.giantswarm.io/irsa-trust-domains annotation on the AWSCluster. The primary domain is still written to value oidcDomain.

  • cluster version 1.4.1

    • Remove deprecation message for customNodeLabels and customNodeTaints, because they are not deprecated.
    • Allow configuring kube-controller-manager --node-cidr-mask-size flag.
    • Chart: Support multiple service account issuers.\ Change providerIntegration.controlPlane.kubeadmConfig.clusterConfiguration.apiServer.serviceAccountIssuer to plural providerIntegration.controlPlane.kubeadmConfig.clusterConfiguration.apiServer.serviceAccountIssuers and render them in the specified order as --service-account-issuer parameters for the API server.
    • Only add the customNodeLabels value to the kubelet node-labels argument in the KubeadmConfig when customNodeLabels is defined.

  Connectivity

  • aws-load-balancer-controller-app version 2.1.0
    • Update to upstream version 2.8.3.

  Security

  • kyverno-policies-dx version 0.5.1

    • Use Enforce and Audit validationFailureAction.

  • kyverno-policies-ux version 0.7.3

    • cluster-names now targets Cluster by GVK
    • Use Enforce validationFailureAction.

  • kyverno-app version 0.18.0

    • Update Kyverno to the upstream version v1.12.5.

  • kyverno-crds version 1.12.0

    • Update Kyverno CRDs to Kyverno v1.12.

  • kyverno-policies version 0.21.0

    • Update to upstream Kyverno Policies version 1.12.5.
    • Don’t push to vsphere-app-collection, capz-app-collection, capa-app-collection or cloud-director-app-collection. We started to consume kyverno-policies from security-bundle.
• Sep 26, 2024 Web UI backstage v0.37.2

  Fixes

  • GS plugin: Fix Grafana link application name.
• Sep 26, 2024 Observability Platform loki-app v0.25.0

  Added

  • Support for canary deploymnent

  Changed

  • Upgraded upstream chart from 6.10.0 to 6.12.0 - see changelog for more information.
• Sep 25, 2024 Web UI backstage v0.37.1

  Fixes

  • GS plugin: Fix the error in the DeploymentDetailsPicker scaffolder field when pre-selected installation was missing in the form data.

  Changed

  • Update dependencies.
• Sep 25, 2024 Platform API kyverno-policies v0.21.0

  Changed

  • Update to upstream Kyverno Policies version 1.12.5.
  • Don’t push to vsphere-app-collection, capz-app-collection, capa-app-collection or cloud-director-app-collection. We started to consume kyverno-policies from security-bundle.

• Newer entries
• Older entries