Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • Changes compared to v30.0.0

    Components

    • cluster-cloud-director from v0.65.0 to v0.66.0
    • Kubernetes from v1.30.10 to v1.30.11
    • os-tooling from v1.23.1 to v1.24.0

    cluster-cloud-director v0.65.0…v0.66.0

    Changed

    • Chart: Update cluster to v2.2.0.

    os-tooling v1.23.1…v1.24.0

    Added

    • Added nvidia_runtime to allow running of GPU workloads

    Apps

    • capi-node-labeler from v1.0.1 to v1.0.2
    • cert-exporter from v2.9.4 to v2.9.5
    • cilium from v0.31.0 to v0.31.1
    • etcd-defrag from v1.0.1 to v1.0.2
    • etcd-kubernetes-resources-count-exporter from v1.10.1 to v1.10.3
    • k8s-audit-metrics from v0.10.1 to v0.10.2
    • net-exporter from v1.21.0 to v1.22.0
    • node-exporter from v1.20.1 to v1.20.2
    • observability-bundle from v1.9.0 to v1.11.0
    • security-bundle from v1.9.1 to v1.10.0
    • teleport-kube-agent from v0.10.3 to v0.10.4

    capi-node-labeler v1.0.1…v1.0.2

    Changed

    • Go: Update dependencies.

    cert-exporter v2.9.4…v2.9.5

    Changed

    • Go: Update dependencies.

    cilium v0.31.0…v0.31.1

    Changed

    etcd-defrag v1.0.1…v1.0.2

    Changed

    • Chart: Update dependency ahrtr/etcd-defrag to v0.25.0. (#17)

    etcd-kubernetes-resources-count-exporter v1.10.1…v1.10.3

    Changed

    • Go: Update dependencies.

    k8s-audit-metrics v0.10.1…v0.10.2

    Changed

    • Go: Update dependencies.

    net-exporter v1.21.0…v1.22.0

    Changed

    • Narrow down CiliumNetworkPolicy to allow desired traffic only.

    Removed

    • Remove NetworkPolicy resource and rely on CiliumNetworkPolicy only.

    node-exporter v1.20.1…v1.20.2

    Changed

    • Go: Update dependencies.

    observability-bundle v1.9.0…v1.11.0

    Changed

    • prometheus-operator will not check promql syntax for prometheusRules that are labelled observability.giantswarm.io/rule-type: logs
    • Upgrade alloy to chart 0.9.0.
      • Bumps alloy from to 1.5.1 to 1.7.1
    • Upgrade kube-prometheus-stack from 66.2.1 to 69.5.1
      • Bumps prometheus-operator to 0.80.1
      • Bumps prometheus to 3.0.1

    security-bundle v1.9.1…v1.10.0

    Added

    • Add e2e tests for the security-bundle and all is components

    Changed

    • Update kyverno (app) to v0.19.0.
    • Update kyverno-crds (app) to v1.13.0.
    • Update kyverno-policies (app) to v0.23.0.
    • Update edgedb (app) to v0.1.0.
    • Update falco (app) to v0.10.0.
    • Update trivy (app) to v0.13.2.

    teleport-kube-agent v0.10.3…v0.10.4

    Added

    • Add headless service on diag port 3000.

    Changed

    • Migrated to ABS
  • Changes compared to v30.0.0

    Components

    • cluster-vsphere from v0.69.0 to v1.1.0
    • Kubernetes from v1.30.10 to v1.30.11
    • os-tooling from v1.23.1 to v1.24.0

    cluster-vsphere v0.69.0…v1.1.0

    Added

    • Add global.providerSpecific.templateSuffix to set a suffix on the VM template to use.

    Changed

    • Chart: Update cluster to v2.2.0.
    • Split cloud provider app into separate HelmReleases.

    os-tooling v1.23.1…v1.24.0

    Added

    • Added nvidia_runtime to allow running of GPU workloads

    Apps

    • capi-node-labeler from v1.0.1 to v1.0.2
    • cert-exporter from v2.9.4 to v2.9.5
    • cilium from v0.31.0 to v0.31.1
    • cloud-provider-vsphere from v1.12.0 to v2.0.1
    • etcd-defrag from v1.0.1 to v1.0.2
    • etcd-kubernetes-resources-count-exporter from v1.10.1 to v1.10.3
    • k8s-audit-metrics from v0.10.1 to v0.10.2
    • kube-vip added at v0.2.0
    • kube-vip-cloud-provider added at v0.3.0
    • net-exporter from v1.21.0 to v1.22.0
    • node-exporter from v1.20.1 to v1.20.2
    • observability-bundle from v1.9.0 to v1.11.0
    • security-bundle from v1.9.1 to v1.10.0
    • teleport-kube-agent from v0.10.3 to v0.10.4
    • vsphere-csi-driver added at v3.4.2

    capi-node-labeler v1.0.1…v1.0.2

    Changed

    • Go: Update dependencies.

    cert-exporter v2.9.4…v2.9.5

    Changed

    • Go: Update dependencies.

    cilium v0.31.0…v0.31.1

    Changed

    cloud-provider-vsphere v1.12.0…v2.0.1

    Changed

    • Remove subcharts in order to deploy only the vSphere CPI (at upstream version v1.30.0).

    etcd-defrag v1.0.1…v1.0.2

    Changed

    • Chart: Update dependency ahrtr/etcd-defrag to v0.25.0. (#17)

    etcd-kubernetes-resources-count-exporter v1.10.1…v1.10.3

    Changed

    • Go: Update dependencies.

    k8s-audit-metrics v0.10.1…v0.10.2

    Changed

    • Go: Update dependencies.

    kube-vip v0.2.0

    Added

    • Initial release which tracks upstream version 0.8.4.

    kube-vip-cloud-provider v0.3.0

    Added

    • Initial release which tracks upstream version 0.0.10.

    Changed

    • Run container with a read-only filesystem.

    net-exporter v1.21.0…v1.22.0

    Changed

    • Narrow down CiliumNetworkPolicy to allow desired traffic only.

    Removed

    • Remove NetworkPolicy resource and rely on CiliumNetworkPolicy only.

    node-exporter v1.20.1…v1.20.2

    Changed

    • Go: Update dependencies.

    observability-bundle v1.9.0…v1.11.0

    Changed

    • prometheus-operator will not check promql syntax for prometheusRules that are labelled observability.giantswarm.io/rule-type: logs
    • Upgrade alloy to chart 0.9.0.
      • Bumps alloy from to 1.5.1 to 1.7.1
    • Upgrade kube-prometheus-stack from 66.2.1 to 69.5.1
      • Bumps prometheus-operator to 0.80.1
      • Bumps prometheus to 3.0.1

    security-bundle v1.9.1…v1.10.0

    Added

    • Add e2e tests for the security-bundle and all is components

    Changed

    • Update kyverno (app) to v0.19.0.
    • Update kyverno-crds (app) to v1.13.0.
    • Update kyverno-policies (app) to v0.23.0.
    • Update edgedb (app) to v0.1.0.
    • Update falco (app) to v0.10.0.
    • Update trivy (app) to v0.13.2.

    teleport-kube-agent v0.10.3…v0.10.4

    Added

    • Add headless service on diag port 3000.

    Changed

    • Migrated to ABS

    vsphere-csi-driver v3.4.2

    Added

    • Add upstream chart at v3.3.0.

    Changed

    • Correct kubectl image tag.

    Removed

    • Remove superfluous update script.
  • In this release, layout of deployments and clusters pages was changed. Now it allows to add filters for a table. See ./docs/releases/v0.55.0-changelog.md for more information.

  • Changed

    • Add API capabilities check for Kyverno PolicyExceptions before switching to v2.
  • Changed

    • Make livenessProbe.initialDelaySeconds configurable.
  • Added

    • Added support for read-all-customer-groups bindings.

    Changed

    • Change ownership to Team Shield
  • Changed

    • Add HTTP->HTTPS redirect in the HTTPRoute CR.
    • Added option to use Service Account token to be used of Alertmanager authentication.

    Fixed

    • Replace Alertmanager RoundTripper with custom NewRequest.
    • Fix CVE-2024-45338 by updating golang.org/x/net to v0.33.0
  • Changes compared to v29.3.2

    Components

    • cluster-cloud-director from v0.64.2 to v0.65.0
    • Flatcar from v4081.2.1 to v4152.2.1
    • Kubernetes from v1.29.13 to v1.30.10

    cluster-cloud-director v0.64.2…v0.65.0

    Changed

    • Chart: Update cluster to v2.1.1.
    • Chart: Enable coredns-extensions and etcd-defrag.

    Apps

    • capi-node-labeler from v0.5.0 to v1.0.1
    • cert-exporter from v2.9.3 to v2.9.4
    • cert-manager from v3.8.2 to v3.9.0
    • cilium from v0.25.2 to v0.31.0
    • coredns from v1.23.0 to v1.24.0
    • coredns-extensions v0.1.2
    • etcd-defrag v1.0.1
    • etcd-k8s-res-count-exporter from v1.10.0 to v1.10.1
    • external-dns from v3.1.0 to v3.2.0
    • k8s-audit-metrics from v0.10.0 to v0.10.1
    • metrics-server from v2.4.2 to v2.6.0
    • node-exporter from v1.20.0 to v1.20.1
    • vertical-pod-autoscaler from v5.3.1 to v5.4.0
    • vertical-pod-autoscaler-crd from v3.1.2 to v3.2.0

    capi-node-labeler v0.5.0…v1.0.1

    Changed

    • Main: Improve sleep. (#125)
    • Go: Update go.mod and .nancy-ignore. (#123)

    cert-exporter v2.9.3…v2.9.4

    Changed

    • Repository: Some chores. (#418)
    • Go: Update go.mod and .nancy-ignore. (#437)

    cert-manager v3.8.2…v3.9.0

    Added

    • Adds new sync method based on Vendir to sync from upstream

    Changed

    • Updates Cert-manager Chart to Upstream 1.16.2

    cilium v0.25.2…v0.31.0

    Changed

    • Upgrade Cilium to v1.16.6.
    • Move provider specific custom CNI configuration to subchart.
    • Improve security defaults for:
      • Hubble UI
      • Hubble Relay
      • Cilium Operator

    Removed

    • Delete defaultPolicies and extraPolicies templates.

    coredns v1.23.0…v1.24.0

    Changed

    • Update coredns image to 1.12.0.
    • Disable HPA Memory target.
    • Increase threshold for HPA CPU target to 80%.

    coredns-extensions v0.1.2

    Added

    • Add VPA for CoreDNS deployments.
    • Add value to enable or disable VPA resources.

    Changed

    • Push App to the default-catalog.
    • Publish App in giantswarm-catalog.

    etcd-defrag v1.0.1

    Added

    • Chart: Add moveLeader. (#11)

    Changed

    • Chart: Update dependency ahrtr/etcd-defrag to v0.24.0. (#16)
    • Values: Rename cluster into useClusterEndpoints. (#8)

    etcd-k8s-res-count-exporter v1.10.0…v1.10.1

    Changed

    • Set readOnlyRootFilesystem to true in the container security context.
    • Update Kyverno PolicyExceptions to v2beta1.
    • Go: Update go.mod and .nancy-ignore. (#242)

    external-dns v3.1.0…v3.2.0

    Changed

    • Update architect-orb and ATS.
    • Add DNSEndpoints as a source for DNS records.

    k8s-audit-metrics v0.10.0…v0.10.1

    Changed

    • Update Kyverno PolicyExceptions to v2beta1.
    • Go: Update go.mod and .nancy-ignore. (#248)

    metrics-server v2.4.2…v2.6.0

    Added

    • Add VPA setting for metrics-server.

    Changed

    • Upgrade metrics-server to v0.7.2.
    • Chart: Update PolicyExceptions to v2beta1. (#226)

    node-exporter v1.20.0…v1.20.1

    Changed

    • Update Kyverno PolicyExceptions to v2beta1.
    • Go: Update go.mod. (#322)

    vertical-pod-autoscaler v5.3.1…v5.4.0

    Changed

    • Chart: Update Helm release vertical-pod-autoscaler to v10.0.0 (#335)

    vertical-pod-autoscaler-crd v3.1.2…v3.2.0

    Changed

    • Chart: Sync to upstream. (#126)
  • This release fixes the sorting behavior for version columns by changing alphanumeric sorting to semver-aware sorting. See ./docs/releases/v0.54.1-changelog.md for more information.