Observability
Changed
- Upgrade Alloy upstream chart from 1.8.2 to 1.10.0 (CHANGELOG)
- This bumps the version of Alloy from 1.16.1 to 1.17.0 (CHANGELOG), which includes several CVE fixes and a fix for cluster nodes failing to join when TLS is enabled.
- Adds opt-in
controller.autoscaling.horizontal.externalHPA (externally-managed HPAs, e.g. KEDA) and service.externalTrafficPolicy values. Neither is enabled in our defaults.
Changed
- HelmReleases: honor the App platform
priority field (1-150, default 25) on extraConfigs entries. spec.valuesFrom now reproduces the App platform merge order — all configMaps before all secrets (a secret always overrides a configMap), each kind ordered by priority around the user-config layer — preserving the App CR merge semantics after the migration. (giantswarm#36096)
Added
- Add CODEOWNERS for each team sub chart
Changed
- Rename team sub-charts to the capability they represent (
team_atlas → observability, team_tenet → kubernetes, team_phoenix → cloud, team_shield → security, team_cabbage → networking, team_honeybadger → app_platform)
Added
- Add
app.circleci.com/circle-project-reponame label to the KSM Pods labels allowed list.
Changed
- Fix ABS config to not override AppVersion in Chart.yaml
Added
- Add
app.circleci.com/circle-project-reponame label to the KSM Pods labels allowed list.
Changed
- Fix ABS config to not override AppVersion in Chart.yaml
Added
- Add Teleport dashboard for Teleport (on EKS), deployed only when
provider.kind is teleport.
Added
- Add CI checks to validate dashboards supported version (v1 or v2)
- Add CI checks to validate dashboards have an “owner” tag
- Make Observability dashboards public
- Move Observability related dashboards under Observability folder
Changed
- Update Cluster Overview dashboard with organization selector
- Update generated configmap names to use the same pattern
- Rename Cloud folder to Cloud Provider
- Improved dashboard validation scripts
- Replace “Shared Org/Kubernetes” dashboards copy with a symlink
- Move dashboards from public_dashboards to their respective team under the “Shared Org” organization folder
- Move dashboards from private_dashboards to their respective team under the “Giant Swarm” organization folder
- Replace “Giant Swarm/Kubernetes” with “Giant Swarm/Kubernetes-dev” folder
- Fixed
owner tag for all dashboards - Add Envoy Logs dashboard to Team Cabbage
Fixed
- Fixed Alloy Metrics Targets datasource
- Fixed broken
folder annotation for organization-root dashboards
Changed
- Update
alloy-app to 0.20.1
Changed
- Update
alloy-app to 0.21.0
Changed
- Fix ABS config to not override AppVersion in Chart.yaml
Removed
- Remove redundant L7 rule from the CiliumNetworkPolicy. The removed rule allowed DNS queries to any DNS domain so removing it has no effect.