Observability

  • Added

    • Add app.circleci.com/circle-project-reponame label to the KSM Pods labels allowed list.

    Changed

    • Fix ABS config to not override AppVersion in Chart.yaml
  • Added

    • Add Teleport dashboard for Teleport (on EKS), deployed only when provider.kind is teleport.
  • Added

    • Add CI checks to validate dashboards supported version (v1 or v2)
    • Add CI checks to validate dashboards have an “owner” tag
    • Make Observability dashboards public
    • Move Observability related dashboards under Observability folder

    Changed

    • Update Cluster Overview dashboard with organization selector
    • Update generated configmap names to use the same pattern
    • Rename Cloud folder to Cloud Provider
    • Improved dashboard validation scripts
    • Replace “Shared Org/Kubernetes” dashboards copy with a symlink
    • Move dashboards from public_dashboards to their respective team under the “Shared Org” organization folder
    • Move dashboards from private_dashboards to their respective team under the “Giant Swarm” organization folder
      • Replace “Giant Swarm/Kubernetes” with “Giant Swarm/Kubernetes-dev” folder
    • Fixed owner tag for all dashboards
    • Add Envoy Logs dashboard to Team Cabbage

    Fixed

    • Fixed Alloy Metrics Targets datasource
    • Fixed broken folder annotation for organization-root dashboards
  • Changed

    • Update alloy-app to 0.20.1
  • Changed

    • Update alloy-app to 0.21.0
  • Changed

    • Fix ABS config to not override AppVersion in Chart.yaml

    Removed

    • Remove redundant L7 rule from the CiliumNetworkPolicy. The removed rule allowed DNS queries to any DNS domain so removing it has no effect.
  • Added

    • feat: Add Kubernetes mixins dashboard to the public Shared Org (#900)
  • Changed

    • Migrate sub-apps from App CRs to Flux HelmRelease CRs.
    • Remove ‘cluster-values’ ConfigMap reference from HelmReleases.
    • Add new alloy-podlogs-crds chart.
    • Update alloy-app to 0.20.0
  • Added

    • Add alloy-podlogs-crds chart to manage the PodLogs CRD independently of the alloy chart’s crds subchart.
  • Changed

    • Upgrade Tempo Vulture chart from 0.12.9 to 0.12.10 (only bumps the tempo-vulture image from 2.10.4 to 2.10.5)
    • Upgrade Tempo chart from 2.14.3 to 2.23.0
      • Upgrades Tempo from 2.10.4 to 2.10.5
      • Bumps the rollout-operator sub-dependency from 0.47.0 to 0.49.0
      • Adds (disabled by default) experimental backend-scheduler / backend-worker components (chart 2.17.0)
      • Several components migrated to a shared pod template / defaults layer (chart 2.16.x – 2.17.x)
      • Adds unhealthyPodEvictionPolicy support on every PodDisruptionBudget (chart 2.23.0)
    • [BREAKING] Tempo chart 2.17.10 converts the memcached Service to headless (clusterIP: None) and changes the StatefulSet serviceName. Both fields are immutable, so helm upgrade will fail on existing installations with: Service "tempo-memcached" is invalid: spec.clusterIPs[0]: Invalid value: ["None"]: may not change once set && StatefulSet.apps "tempo-memcached" is invalid: spec: Forbidden: updates to statefulset spec for fields other than 'replicas', ... Before upgrading, delete the affected Services and orphan-delete the StatefulSets so the new chart can recreate them:
      kubectl -n <namespace> delete service --selector 'app.kubernetes.io/instance=<release>,app.kubernetes.io/component in (memcached,memcached-bloom,memcached-parquet-footer,memcached-frontend-search)'
      kubectl -n <namespace> delete statefulset --selector 'app.kubernetes.io/instance=<release>,app.kubernetes.io/component in (memcached,memcached-bloom,memcached-parquet-footer,memcached-frontend-search)' --cascade=orphan