Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • In this release:

    • Custom CA information was added to installation details page.
    • Non-standard access documentation was added to installation details page.
    • GitOps indicator on cluster details page was refactored to be configurable via app configuration. See ./docs/releases/v0.54.0-changelog.md for more information.
  • Changed

    • Narrow down CiliumNetworkPolicy egress rule to match DNS service only.
    • Narrow down CiliumNetworkPolicy ingress rule to allow traffic from namespace.
  • Changed

    • Narrow down CiliumNetworkPolicy egress rule to match DNS service only.
    • Narrow down CiliumNetworkPolicy ingress rule to allow traffic from namespace.
  • Added

    • Add Loki log volume dashboard

    Changed

    • Update the home dashboard
      • Change Alerts link to point to Alerting > Active notifications
      • Add grafana organization link
      • Add new data ingestion link
      • Replace Node overview with Cluster overview dashboard
      • Fix broken Custom dashboards link

    Fixed

    • Fix Cluster overview dashboard to consistently open links in new tabs.
  • Changed

    • Upgrade Alloy upstream chart from 0.10.1 to 0.11.0
      • This bumps the version of Alloy from 1.5.0 to 1.6.1
  • In this release:

    • Backstage was updated to v1.36.1.
    • Update other dependencies.
    • Enable default auth policy. GS plugins changes:
    • Refactored how GS Kubernetes API is used.
    • Refactored data fetching hooks to share common logic. See ./docs/releases/v0.53.0-changelog.md for more information.
  • Changed

    • Upgraded upstream chart from 6.25.1 to 6.27.0 - see changelog for more information.
      • This upgrades Loki from 3.3.2 to 3.4.2
  • Changed

    • Update kyverno to upstream version v1.13.4.
    • Use GVK for specifying Kinds in core-policies.
    • Add runAsGroup to container security contexts.
  • Changed

    • Update kyverno to upstream version v1.13.4.
    • Use GVK for specifying Kinds in core-policies.
    • Add runAsGroup to container security contexts.
  • Changed

    • Update to upstream Kyverno Policies version 1.13.4.

    Added

    • Add supplemental policies restrict-external-ips, require-ro-rootfs, and enable upstream policy require-non-root-groups.
    • Add supplemental policy to generate default deny-all Network Policies in newly created namespaces.

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.