Changes and Releases
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
Added
- Add supplemental security and best practices policies:
check-resources-request-and-limits-ratio
check-serviceaccount-secrets
disallow-gitrepo-volume
disallow-latest-tag
prevent-bare-pods
require-container-requests-and-limits
require-emptydir-requests-and-limits
require-pod-probes
restrict-binding-clusteradmin
restrict-binding-system-groups
restrict-sa-automount-sa-token
Added
- Add supplemental security and best practices policies:
check-resources-request-and-limits-ratio
check-serviceaccount-secrets
disallow-gitrepo-volume
disallow-latest-tag
prevent-bare-pods
require-container-requests-and-limits
require-emptydir-requests-and-limits
require-pod-probes
restrict-binding-clusteradmin
restrict-binding-system-groups
restrict-sa-automount-sa-token
In this release:
- Custom CA information was added to installation details page.
- Non-standard access documentation was added to installation details page.
- GitOps indicator on cluster details page was refactored to be configurable via app configuration.
See ./docs/releases/v0.54.0-changelog.md for more information.
Changed
- Narrow down CiliumNetworkPolicy egress rule to match DNS service only.
- Narrow down CiliumNetworkPolicy ingress rule to allow traffic from namespace.
Changed
- Narrow down CiliumNetworkPolicy egress rule to match DNS service only.
- Narrow down CiliumNetworkPolicy ingress rule to allow traffic from namespace.
Added
- Add Loki log volume dashboard
Changed
- Update the home dashboard
- Change Alerts link to point to Alerting > Active notifications
- Add grafana organization link
- Add new data ingestion link
- Replace Node overview with Cluster overview dashboard
- Fix broken Custom dashboards link
Fixed
- Fix Cluster overview dashboard to consistently open links in new tabs.
Changed
- Upgrade Alloy upstream chart from 0.10.1 to 0.11.0
- This bumps the version of Alloy from 1.5.0 to 1.6.1
In this release:
- Backstage was updated to v1.36.1.
- Update other dependencies.
- Enable default auth policy.
GS plugins changes:
- Refactored how GS Kubernetes API is used.
- Refactored data fetching hooks to share common logic.
See ./docs/releases/v0.53.0-changelog.md for more information.