Connectivity

  • Added

    • Add ability to extend nginx-ingress-controllerwith specific values from appcatalog.
    • User value validation through a values.schema.json file based on the current values.yaml.

    Changed

    • Update image to v0.41.2. (#133)
  • Added

    • Add minReadySeconds to deployment template as optional parameter

    Updated

    • architect-orb 0.11.0 -> 0.14.0
    • github workflow
  • Breaking changes

    • Kong Ingress Controller 1.0 removes support for several deprecated flags and the KongCredential custom resource. Please see the controller changelog for details. Note that Helm 3 will not remove the KongCredential CRD by default: you should delete it manually after converting KongCredentials to credential Secrets. If you manage CRDs using Helm (check to see if your KongCredential CRD has a app.kubernetes.io/managed-by: Helm label), perform the credential Secret conversion before upgrading to chart 1.11.0 to avoid losing credential configuration.
    • The chart no longer uses the extensions API for PodSecurityPolicy, and now uses the modern policy API. This breaks compatibility with Kubernetes versions 1.11 and older. (#195)

    Updated

    • Update architect-orb to 0.11.0
    • Sync with upstream chart 1.11.0
    • Please check the upstream CHANGELOG.md

    Changed

    • Change upstream default branch in upstream-sync script
  • Changed

    • Upgrade upstream external-dns from v0.7.3 to v0.7.4.
  • Changed

    • Upgrade ingress-nginx-controller from v0.35.0 to v0.40.2. Important upstream changes to pay special attention to:
      • App/chart requires Kubernetes 1.16+ based platform release
        • It is recommended to change API group of Ingress resources from extensions/v1beta1 to networking.k8s.io/v1beta1 (available since Kubernetes 1.14)
      • Default configuration changes:
    • Support and enable by default mimalloc as a drop-in malloc replacement to reduce nginx memory utilization.
    • Support configuring additional environment variables for NGINX Ingress Controller container, to support configuring additional mimalloc options.
    • Adjust Helm hook-delete-policy and hook-weight to make admission webhook management more reliable.
  • Changed

    • Split registry value to allow switching registry.
  • Added

    • giantswarm.io/monitoring label (in addition to existing annotation) for the new sharded TC Prometheus to pick up the service.

    Changed

  • Updated

    • Upgraded architect-orb to 0.10.0
    • Add github workflows for release automation
    • Sync with upstream chart v1.8.0
    • Update busybox 1.31.0 -> 1.32.0

    Improvements

    From upstream CHANGELOG:

    • Update default Kong version to 2.1.
    • Update Kong Enterprise images to 1.5.0.4 (kong-enterprise-edition) and 2.0.4.2 (kong-enterprise-k8s).
    • Updated default controller version to 0.9.1. (#150)
    • Added support for ServiceMonitor targetLabels (for use with the Prometheus Operator). (#162)
    • Automatically handle the new port_maps setting for the proxy service. (#169)
    • Add support for hybrid mode deployments. (#160)

    Fixed

    • Uses fix from upstream-branch next to resolve issue “CONTROLLER_ADMISSION_WEBHOOK_LISTEN” which overwrites our fix below.
      • Force cast to string for Admission Webhook port #59
  • Added

    • Monitoring headless Service.
    • More Giant Swarm custom monitoring annotations.
    • Explicitly expose metrics container port.

    Changed

    • Use default external-dns metrics port 7979.
  • Added

    • Added monitoring and common labels.

    Changed

    • Upgrade upstream external-dns from v0.7.2 to v0.7.3.
    • Upgrade architect-orb to 0.10.1