Changes and Releases
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
In this release:
- Custom CA information was added to installation details page.
- Non-standard access documentation was added to installation details page.
- GitOps indicator on cluster details page was refactored to be configurable via app configuration.
See ./docs/releases/v0.54.0-changelog.md for more information.
Changed
- Narrow down CiliumNetworkPolicy egress rule to match DNS service only.
- Narrow down CiliumNetworkPolicy ingress rule to allow traffic from namespace.
Changed
- Narrow down CiliumNetworkPolicy egress rule to match DNS service only.
- Narrow down CiliumNetworkPolicy ingress rule to allow traffic from namespace.
Added
- Add Loki log volume dashboard
Changed
- Update the home dashboard
- Change Alerts link to point to Alerting > Active notifications
- Add grafana organization link
- Add new data ingestion link
- Replace Node overview with Cluster overview dashboard
- Fix broken Custom dashboards link
Fixed
- Fix Cluster overview dashboard to consistently open links in new tabs.
Changed
- Upgrade Alloy upstream chart from 0.10.1 to 0.11.0
- This bumps the version of Alloy from 1.5.0 to 1.6.1
In this release:
- Backstage was updated to v1.36.1.
- Update other dependencies.
- Enable default auth policy.
GS plugins changes:
- Refactored how GS Kubernetes API is used.
- Refactored data fetching hooks to share common logic.
See ./docs/releases/v0.53.0-changelog.md for more information.
Changed
- Upgraded upstream chart from 6.25.1 to 6.27.0 - see changelog for more information.
- This upgrades Loki from 3.3.2 to 3.4.2
Changed
- Update
kyverno
to upstream version v1.13.4. - Use GVK for specifying Kinds in core-policies.
- Add
runAsGroup
to container security contexts.
Changed
- Update
kyverno
to upstream version v1.13.4. - Use GVK for specifying Kinds in core-policies.
- Add
runAsGroup
to container security contexts.
Changed
- Update to upstream
Kyverno Policies
version 1.13.4.
Added
- Add supplemental policies
restrict-external-ips
, require-ro-rootfs
, and enable upstream policy require-non-root-groups
. - Add supplemental policy to generate default deny-all Network Policies in newly created namespaces.