Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • Changed

    • Push mimir to onprem collections.
    • Add PVC retention policy for compactor and store-gateway.
    • changed: app.giantswarm.io label group was changed to application.giantswarm.io
  • Fix

    • Remove quotes from acme-http01-solver-image argument. The quotes are used when looking up the image which causes an error.
  • Changed

    • Reduce security exceptions #89.
      • Enable readOnly FS moving config to emptyDir volume.
      • Remove NET_ADMIN and drop ALL capabilities.
      • Add NET_BIND_SERVICE capability.
      • Add policy exception for require-non-root-groups/autogen-check-runasgroup.
      • Remove disallow-capabilities-* policy exceptions.
  • Changed

    • Update Backstage to 1.28.4.
  • Changed

    • Get rid of the app label in Phoenix dashboards.
  • Added

    • Improves container security by setting runAsGroup and runAsUser greater than zero for all deployments.
  • Changed

    • Upgrade kube-prometheus-stack to 11.0.0 and prometheus-operator-crd to 11.0.0. This upgrade mainly consists in:
      • kube-prometheus-stack dependency chart upgraded from 56.21.2 to 61.0.0
      • prometheus upgrade from 2.50.1 to 2.53.0
      • thanos ruler upgrade from 0.34.1 to 0.35.1
      • kube-state-metrics from 2.10.0 to 2.12.0
      • prometheus-operator from 0.71.2 0.75.0 - adding remoteWrite.proxyFromEnvironment and Scrape Class support
      • prometheus-node-exporter upgraded from 1.8.0 to 1.8.1
    • Upgrade grafana-agent from 0.4.3 to 0.4.4
      • This version enables the override the grafana agent CiliumNetworkPolicy egress and ingress sections.
  • Added

    • Add plugin-scaffolder-backend-module-gs backend module with custom parseClusterRef filter for scaffolder plugin.
    • GS Auth: add custom sign-in resolver for GitHub auth provider.

    Removed

    • Clean up catalog templates.
  • Added

    • Add “BPF map pressure” graph to “Cilium performance” dashboard.
    • Add kube-builder logs in “Kube-Builder Operators” dashboard.

    Changed

    • fluentbit dashboard: cluster selection

    Fixed

    • Mimir Cost Estimation: fix RAM usage

    Removed

    • Removed the dashboard ‘Webhook Health’.