Changes and Releases
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
Changed
- Update Envoy Gateway to v1.8.3.
- Update cert-manager config in the cluster values for all performance test suites.
Added
- Set
karpenter.sh/do-not-disrupt: "true" on the Envoy Gateway control-plane pods, so Karpenter does not voluntarily consolidate them. A control-plane reschedule forces the Envoy proxies to reconnect and can leave them wedged with stale/absent TLS secrets over delta xDS until restarted (see envoyproxy/gateway#9519). - Add
perf-report repo-specific claude skill to automatically generate performance test report as html files.
Added
- RBAC: Grant the
automation ServiceAccounts of all organization namespaces (org-<organization>) full access to Kyverno PolicyExceptions in the namespaces they are managed in. For this, a write-policy-exceptions Role granting all verbs on policyexceptions.kyverno.io resources, plus a RoleBinding of the same name, are created in each of the kube-system, giantswarm and policy-exceptions namespaces. Every organization’s automation ServiceAccount is aggregated into the subjects of these RoleBindings, and removed again once its organization namespace is deleted. Namespaces which do not exist on the management cluster are skipped.
Changed
Added
- (agent-platform) Add version-tolerant kagent client in #1998 by @marians
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.168.0...v0.169.0
Fixed
- (deps) Update module github.com/giantswarm/apptest-framework/v5 to v5.2.2 in #993 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/muster/compare/v1.3.4...v1.3.5
Changed
- (deps) Update dependency @apidevtools/json-schema-ref-parser to v15.5.0 in #1987 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.167.17...v0.167.18
Changed
- (ui-react) Consolidate ContentRow onto shared bui component in #1993 by @marians
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.167.15...v0.167.16