Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • In this release:

    • Custom CA information was added to installation details page.
    • Non-standard access documentation was added to installation details page.
    • GitOps indicator on cluster details page was refactored to be configurable via app configuration. See ./docs/releases/v0.54.0-changelog.md for more information.
  • Changed

    • Narrow down CiliumNetworkPolicy egress rule to match DNS service only.
    • Narrow down CiliumNetworkPolicy ingress rule to allow traffic from namespace.
  • Added

    • Add Loki log volume dashboard

    Changed

    • Update the home dashboard
      • Change Alerts link to point to Alerting > Active notifications
      • Add grafana organization link
      • Add new data ingestion link
      • Replace Node overview with Cluster overview dashboard
      • Fix broken Custom dashboards link

    Fixed

    • Fix Cluster overview dashboard to consistently open links in new tabs.
  • Changed

    • Upgrade Alloy upstream chart from 0.10.1 to 0.11.0
      • This bumps the version of Alloy from 1.5.0 to 1.6.1
  • In this release:

    • Backstage was updated to v1.36.1.
    • Update other dependencies.
    • Enable default auth policy. GS plugins changes:
    • Refactored how GS Kubernetes API is used.
    • Refactored data fetching hooks to share common logic. See ./docs/releases/v0.53.0-changelog.md for more information.
  • Changed

    • Upgraded upstream chart from 6.25.1 to 6.27.0 - see changelog for more information.
      • This upgrades Loki from 3.3.2 to 3.4.2
  • Changed

    • Update kyverno to upstream version v1.13.4.
    • Use GVK for specifying Kinds in core-policies.
    • Add runAsGroup to container security contexts.
  • Changed

    • Update to upstream Kyverno Policies version 1.13.4.

    Added

    • Add supplemental policies restrict-external-ips, require-ro-rootfs, and enable upstream policy require-non-root-groups.
    • Add supplemental policy to generate default deny-all Network Policies in newly created namespaces.
  • Changed

    • Update architect-orb and ATS.
    • Add DNSEndpoints as a source for DNS records.
  • Added

    • Allow users to change the unhealthyPodEvictionPolicy of the generated PodDisruptionPolicy. Default is IfHealthyBudget
    • Allow users to disable CRD installation Job by setting kubectlApplyJob.enabled to false