Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

• Jul 8, 2024 Managed Apps kong-app v3.7.1

  Changes

  • Update kubectl-apply-job to 0.8.0 for enabling readOnlyRootFilesystem: true for kubectl CRD install job container.
• Jul 8, 2024 Observability mimir-app v0.7.0

  Changed

  • Push mimir to onprem collections.
  • Add PVC retention policy for compactor and store-gateway.
• Jul 8, 2024 Observability alloy-app v0.1.0
  • changed: app.giantswarm.io label group was changed to application.giantswarm.io
• Jul 8, 2024 Managed Apps cert-manager-app v3.7.9

  Fix

  • Remove quotes from acme-http01-solver-image argument. The quotes are used when looking up the image which causes an error.
• Jul 8, 2024 Security cert-manager-app v3.7.9

  Fix

  • Remove quotes from acme-http01-solver-image argument. The quotes are used when looking up the image which causes an error.
• Jul 8, 2024 Connectivity k8s-dns-node-cache-app v2.8.0

  Changed

  • Reduce security exceptions #89.
    • Enable readOnly FS moving config to emptyDir volume.
    • Remove NET_ADMIN and drop ALL capabilities.
    • Add NET_BIND_SERVICE capability.
    • Add policy exception for require-non-root-groups/autogen-check-runasgroup.
    • Remove disallow-capabilities-* policy exceptions.
• Jul 8, 2024 Managed Apps k8s-dns-node-cache-app v2.8.0

  Changed

  • Reduce security exceptions #89.
    • Enable readOnly FS moving config to emptyDir volume.
    • Remove NET_ADMIN and drop ALL capabilities.
    • Add NET_BIND_SERVICE capability.
    • Add policy exception for require-non-root-groups/autogen-check-runasgroup.
    • Remove disallow-capabilities-* policy exceptions.
• Jul 5, 2024 Cluster apps for CAPI cluster v0.34.1

  Fixed

  • Restore single dependency for k8s-audit-metrics app.
• Jul 4, 2024 Developer Portal backstage v0.27.0

  Changed

  • Update Backstage to 1.28.4.
• Jul 3, 2024 CAPA releases releases aws-25.1.0

  This release updates the components, keeping them up to date with Vintage AWS v20.1.x series. Several improvements for Vintage to CAPA migration have also been included.

  Change details compared to CAPA 25.0.0

  cluster-aws 1.1.0

  Fixed

  • Fixed China IRSA suffix

  Added

  • Add the Management Cluster name as a tag to the AWS resources created by CAPA.
  • Add the node pool name as a tag to the AWS resources associated with the node pool.

  Changed

  • Update cluster chart to 0.35.0

  cert-manager 3.7.9

  Fix

  • Remove quotes from acme-http01-solver-image argument. The quotes are used when looking up the image which causes an error.

  Update

  • Improves container security by setting runAsGroup and runAsUser greater than zero for all deployments.

  containerlinux 3815.2.5

  Changes since Stable 3815.2.4

  Security fixes:

  • openssh (CVE-2024-6387)

  Updates:

  • Linux (6.1.96)
  • openssh (9.7_p1)

  cilium 0.25.1

  Changed

  • Fix regression setting Policy BPF Max map policyMapMax back to 65536 from 16384.
  • Upgrade cilium to v1.15.6.

• Newer entries
• Older entries