Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

• Oct 13, 2023 Observability dashboards v3.1.0

  Changed

  • prometheus remote-writes: filter on URL
• Oct 12, 2023 Connectivity ingress-nginx-app v3.1.0

  Added

  • Controller: Add controller.enableAnnotationValidations. (#536)
  • OpenTelemetry: Add controller.opentelemetry.resources. (#536)
  • Values: Add global.podSecurityStandards.enforced. (#544)

  Changed

  • Image: Update to v1.9.0. (#536)
  • Deployment/DaemonSet: Make controller.topologySpreadConstraints an array. (#536)
    NOTE: This is part of our alignment to upstream. Please convert any overrides of controller.topologySpreadConstraints to an array, too.
  • Tests: Upgrade dependencies & remove explicit ATS version. (#538)
  • Service: Fix wildcard subdomain. (#539)
  • Chart: Tighten securityContexts and Pod Security Policies. (#540)
  • OpenTelemetry: Use own registry. (#541)
  • Admission Webhooks: Update kube-webhook-certgen image to v20231011-8b53cabe0. (#542)
  • Image: Update to v1.9.3. (#547)

  Removed

  • Controller: Drop support for controller.kind: Both. (#547)
• Oct 12, 2023 Managed Apps ingress-nginx-app v3.1.0

  Added

  • Controller: Add controller.enableAnnotationValidations. (#536)
  • OpenTelemetry: Add controller.opentelemetry.resources. (#536)
  • Values: Add global.podSecurityStandards.enforced. (#544)

  Changed

  • Image: Update to v1.9.0. (#536)
  • Deployment/DaemonSet: Make controller.topologySpreadConstraints an array. (#536)
    NOTE: This is part of our alignment to upstream. Please convert any overrides of controller.topologySpreadConstraints to an array, too.
  • Tests: Upgrade dependencies & remove explicit ATS version. (#538)
  • Service: Fix wildcard subdomain. (#539)
  • Chart: Tighten securityContexts and Pod Security Policies. (#540)
  • OpenTelemetry: Use own registry. (#541)
  • Admission Webhooks: Update kube-webhook-certgen image to v20231011-8b53cabe0. (#542)
  • Image: Update to v1.9.3. (#547)

  Removed

  • Controller: Drop support for controller.kind: Both. (#547)
• Oct 12, 2023 Connectivity ingress-nginx-app v3.0.2

  Changed

  • Image: Update to v1.8.4. (#545)
  • Tests: Upgrade dependencies & remove explicit ATS version. (#538)
• Oct 12, 2023 Managed Apps ingress-nginx-app v3.0.2

  Changed

  • Image: Update to v1.8.4. (#545)
  • Tests: Upgrade dependencies & remove explicit ATS version. (#538)
• Oct 12, 2023 Managed Apps cert-manager-app v3.5.0

  Added

  • cert-manager-giantswarm-clusterissuer: Allow setting hostedZoneID for route53 DNS01 challenge.
  • cert-manager-giantswarm-clusterissuer: Make accessKeyID and secretAccessKey optional for route53 DNS01 challenge.
• Oct 12, 2023 Security cert-manager-app v3.5.0

  Added

  • cert-manager-giantswarm-clusterissuer: Allow setting hostedZoneID for route53 DNS01 challenge.
  • cert-manager-giantswarm-clusterissuer: Make accessKeyID and secretAccessKey optional for route53 DNS01 challenge.
• Oct 12, 2023 Managed Apps aws-load-balancer-controller-app v1.4.3
• Oct 12, 2023 Fleet Management aws-load-balancer-controller-app v1.4.3
• Oct 12, 2023 Highlights

  Highlights for the week ending October 10 2023

  Apps

  security-bundle versions 1.1.0 and 0.18.0 With these two releases we include two new tools supporting migration away from Pod Security Policies, exception-recommender and kyverno-policy-operator. With exception-recommender analyzes the current policy reports in a cluster get analyzed and based on the results a Giant Swarm PolicyExceptionDrafts gets generated. Once the drafts have been reviewed and accepted, kyverno-policy-operator takes the resulting Giant Swarm PolicyExceptions and generates the necessary Kyverno resources to allow workloads to continue running.

  Documentation

  We have started the migration away from Pod Security Policies! Therefore we have added a cluster administrator migration guide containing all information about the new Policy API and all the assistive tooling available to help you securely migrate workloads off of PSPs. Reach out for any questions regarding the Pod Security Policies to Pod Security Standards migration

• Newer entries
• Older entries