1. Docs
  2. Changes and releases
  3. Observability

Observability

  • Observability observability-bundle v3.4.0

    Changed

    • Values: Update Prometheus Operator CRD and Kube Prometheus Stack to v23.0.0.
  • Observability kube-prometheus-stack-app v23.0.0

    Changed

    • Chart: Upgrade kube-prometheus-stack to v88.6.3, including:
      • prometheus-operator to v0.93.1
      • kube-state-metrics to v8.4.1
      • prometheus-node-exporter to v4.56.3
      • grafana to v12.11.2
  • Observability prometheus-operator-app v23.0.0

    Changed

    • Chart: Upgrade kube-prometheus-stack to v88.6.3, including:
      • prometheus-operator to v0.93.1
      • kube-state-metrics to v8.4.1
      • prometheus-node-exporter to v4.56.3
      • grafana to v12.11.2
  • Observability loki-app v0.48.0

    Fixed

    • Keep the provider-kubernetes identity RBAC on uninstall, so the crossplane Objects can drop their finalizers instead of hanging.

    Added

    • Add gatewayRoute.requestMirror, an optional RequestMirror filter on gatewayRoute.additionalRules, plus the ReferenceGrant a cross-namespace backendRef needs. Disabled by default.
  • Observability observability-platform-api v0.5.0

    Added

    • Add loki.write.requestMirror, an optional RequestMirror filter on the Loki write route. Disabled by default.
    • Add opt-in Basic Auth read routes for Mimir and Loki on a dedicated hostname (basicAuth.*, disabled by default).
  • Observability grafana-app v2.40.0

    Added

    • Brand Grafana with the Giant Swarm logo mark and favicon, by mounting the assets in helm/grafana/branding over the ones the Grafana image ships. Set grafana.extraConfigmapMounts to [] to get Grafana’s own branding back.
    • Add make branding-verify (run by the verify-branding CI job) and make branding-update, which keep the hashed logo path in sync with the Grafana image and generate the pod annotation that rolls the deployment when a branding asset changes.

    Changed

    • Upgrade grafana chart: 12.10.3 => 12.11.2
    • Upgrade grafana (appVersion): 13.1.2 => 13.2.0
  • Observability loki-app v0.47.0

    Changed

    • Upgrade upstream loki helm chart from v13 (13.7.2) to v18 (18.10.1). Loki app version goes from 3.7.2 to 3.7.6.
    • Breaking: loki.networkPolicy.flavor is gone. Upstream dropped Cilium network policy support, so this chart renders the CiliumNetworkPolicy resources itself, switched by the new top-level ciliumNetworkPolicy.enabled (default true). Set it to false where you used flavor: kubernetes. The standard NetworkPolicy resources now render alongside them.
    • The ServiceMonitor is no longer gated on the prometheus-operator CRD being present: set loki.monitoring.serviceMonitor.enabled: false on clusters without it.
    • The built-in MinIO subchart is deprecated upstream: loki.minio.enabled now also needs loki.ignoreMinioDeprecation: true, and goes away on 2026-10-31.
  • Observability silence-operator v0.21.0

    Added

    • Add startsAt, endsAt, and duration fields to the v1alpha2 Silence CRD for explicit silence scheduling. duration accepts weeks (w), days (d), hours (h), minutes (m), and seconds (s), each at most once and ordered largest to smallest: "7d", "2w", "1d12h". endsAt and duration are mutually exclusive. When neither is set, the valid-until annotation is used as a fallback.

    Changed

    • Regenerate .github/workflows/zz_generated.*.yaml via devctl to use the centralized reusable workflow, removing the Node-20 mindsers/changelog-reader-action dependency.
    • Update Go dependencies, which resolves CVE-2026-63209 (github.com/klauspost/compress) and CVE-2026-56852 (golang.org/x/text) and removes their .nancy-ignore entries.

    Fixed

    • Quote the = scalars in the generated matchType CRD schema so the rendered chart parses under PyYAML (unblocks the HelmTemplateValidator step added in app-build-suite 2.2.0).
    • Fix various CVEs by updating dependencies:
    • Skip failing CI jobs using private secrets for external contributions from fork
    • Replace deprecated controller-runtime scheme.Builder with apimachinery runtime.NewSchemeBuilder
    • Fix gosec, goconst and errcheck linter errors in tests
  • Observability loki-app v0.46.1

    Changed

    • Upgrade upstream loki helm chart from v13.5.0 to v13.7.2. Loki app version goes from 3.7.1 to 3.7.2 (CVE fixes, ruler panic fix, S3 SDK bump).
    • k8s-sidecar bumped 2.7.1 → 2.7.3.
  • Observability loki-app v0.46.0

    Added

    • Support for Azure Workload Identity

    Changed

    • Move the AWS and Azure deployment instructions out of the README into docs/deploying-on-aws.md and docs/deploying-on-azure.md.

    Fixed

    • Add a kubernetes-flavor NetworkPolicy granting the backend pods egress to the kube-apiserver (TCP 443/6443) to fix standalone platforms and CI tests.
    • Fix ABS config to not override AppVersion in Chart.yaml