Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • Changed

    • Change karpenter to it’s own namespace.
    • Bump karpenter to v1.6.3.
    • Allow changing karpenter app versions.
  • Added

    • Add KSM metrics for IRSAClaim objects
  • Changed

    • Remove empty service port value.
  • Fixed

  • Fixed

  • Changed

    • Update falco to upstream version 0.41.3.
  • Changed

    • Add alloy ingress rules for cainjector metrics ingestion.
  • Added

  • Changed

    • Update PolicyException apiVersion to v2.
  • Changes compared to v30.1.4

    Components

    • cluster-azure from v2.1.2 to v2.3.1
    • Flatcar from v4152.2.1 to v4152.2.3
    • Kubernetes from v1.30.11 to v1.31.11
    • os-tooling from v1.24.0 to v1.26.1

    cluster-azure v2.1.2…v2.3.1

    Changed

    • Chart: Update cluster to v2.5.2.
    • Chart: Update Cilium configuration.
    • Chart: Update cluster to v2.5.0.
    • Chart: Update cluster to v2.4.0.

    Apps

    • azure-cloud-controller-manager from v1.30.14-gs1 to v1.31.8-gs1
    • azure-cloud-node-manager from v1.30.14-gs1 to v1.31.8-gs1
    • azuredisk-csi-driver from v1.30.12-gs1 to v1.31.11-gs1
    • azurefile-csi-driver from v1.30.10-gs1 to v1.31.7-gs1
    • capi-node-labeler from v1.0.2 to v1.1.2
    • cert-exporter from v2.9.5 to v2.9.8
    • cert-manager from v3.9.0 to v3.9.1
    • cilium from v0.31.5 to v1.2.2
    • coredns from v1.24.0 to v1.26.0
    • etcd-defrag from v1.0.2 to v1.0.6
    • etcd-k8s-res-count-exporter from v1.10.3 to v1.10.6
    • k8s-audit-metrics from v0.10.2 to v0.10.5
    • k8s-dns-node-cache from v2.8.1 to v2.9.0
    • net-exporter from v1.22.0 to v1.23.0
    • node-exporter from v1.20.2 to v1.20.4
    • observability-bundle from v1.11.0 to v2.0.0
    • observability-policies from v0.0.1 to v0.0.2
    • security-bundle from v1.10.1 to v1.12.0
    • teleport-kube-agent from v0.10.4 to v0.10.6
    • vertical-pod-autoscaler from v5.4.0 to v5.5.1
    • vertical-pod-autoscaler-crd from v3.2.0 to v3.3.1

    azure-cloud-controller-manager v1.30.14-gs1…v1.31.8-gs1

    Changed

    • Chart: Update to upstream v1.31.8. (#112)

    azure-cloud-node-manager v1.30.14-gs1…v1.31.8-gs1

    Changed

    • Chart: Update to upstream v1.31.8. (#105)
    • Update PolicyExceptions apiVersion to v2.

    azuredisk-csi-driver v1.30.12-gs1…v1.31.11-gs1

    Changed

    • Chart: Update to upstream v1.31.11.

    azurefile-csi-driver v1.30.10-gs1…v1.31.7-gs1

    Changed

    • Chart: Update to upstream v1.31.7.

    capi-node-labeler v1.0.2…v1.1.2

    Changed

    • Go: Update dependencies.
    • Go: Update dependencies.
    • Improve Control Plane node detection.
    • Taint Control Plane nodes if not already tainted.
    • Go: Update dependencies.

    cert-exporter v2.9.5…v2.9.8

    Changed

    • Go: Update dependencies.
    • Go: Update dependencies.
    • Fix linting issues.
    • Go: Update dependencies.

    cert-manager v3.9.0…v3.9.1

    Added

    • Added Vertical Pod Autoscaler support for controller pods.
    • Added renovate configutarion

    Removed

    • Removed dependabot configuration

    cilium v0.31.5…v1.2.2

    Changed

    • Upgrade Cilium to v1.17.6.
    • Updated E2E tests to use apptest-framework v1.14.0
    • Increase Cilium operator resource limits.
    • Enable conntrack accounting in Cilium agent by default.
    • Re-enable Cilium agent and operator metrics port.
    • Add resource requests and limits to Hubble UI and Relay.
    • Add resource requests and limits to Cilium Operator.
    • Upgrade Cilium to v1.17.4.
    • Cilium v1.17.4 disables kubernetes api connectivity check for liveness probes. (Upstream PR: https://github.com/cilium/cilium/pull/38703)
    • Upgrade Cilium to v1.17.3.
    • Upgrade Cilium to v1.17.0.
    • Use upstream default value for prometheus.metrics.
    • Enable Envoy Proxy in standalone DaemonSet.

    Removed

    • Remove deprecated “partial” mode from Kube Proxy Replacement options.

    coredns v1.24.0…v1.26.0

    Changed

    • Update coredns image to 1.12.2.
    • Update coredns image to 1.12.1.

    etcd-defrag v1.0.2…v1.0.6

    Changed

    • Chart: Update dependency ahrtr/etcd-defrag to v0.29.0. (#43)
    • Chart: Update dependency ahrtr/etcd-defrag to v0.28.0. (#34)
    • Chart: Update dependency ahrtr/etcd-defrag to v0.27.0. (#29)
    • Chart: Update dependency ahrtr/etcd-defrag to v0.26.0. (#22)

    etcd-k8s-res-count-exporter v1.10.3…v1.10.6

    Changed

    • Go: Update dependencies.
    • Go: Update dependencies.

    Fixed

    • Fix linting issues.
    • Go: Update dependencies.

    k8s-audit-metrics v0.10.2…v0.10.5

    Changed

    • Go: Update dependencies.
    • Go: Update dependencies.

    Fixed

    • Fix linting issues.
    • Go: Update dependencies.

    k8s-dns-node-cache v2.8.1…v2.9.0

    Changed

    • Upgrade application to version 1.26.4 (includes coredns 1.11.3)
    • Increase ServiceMonitor’s scrapping interval to 1m.
    • Remove obsolete PSPs

    net-exporter v1.22.0…v1.23.0

    Changed

    • Check for errors when closing connections.
    • Switch from Endpoints to EndpointSlices for neighbors discovery.

    node-exporter v1.20.2…v1.20.4

    Changed

    • Go: Update to v1.24.5.
    • Go: Update dependencies.

    observability-bundle v1.11.0…v2.0.0

    Added

    • Add support for enabling pre-configured custom resources in KSM
    • Add metrics containing labels for Crossplane resources

    Changed

    • Upgrade alloy-app from 0.10.0 to 0.11.0
    • This bumps the version of Alloy from 1.8.3 to 1.9.0
    • Upgrade alloy-app from 0.9.0 to 0.10.0
      • This bumps the version of Alloy from 1.7.1 to 1.8.3
    • Reconfigure Flux-related part of the KSM to use wildcards instead of hardcoded versions.
    • Rename Flux-related metrics produced by the KSM.
    • Upgrade kube-prometheus-stack to 72.3.0
      • Bumps prometheus-operator to 0.82.0
      • Bumps prometheus-operator CRDs to 0.82.0
    • Upgrade kube-prometheus-stack to 72.3.0
      • Bumps prometheus-operator to 0.82.0
    • Upgrade kube-prometheus-stack from 69.5.1 to 70.1.1
      • Bumps prometheus-operator to 0.81.0
      • Bumps prometheus to 3.2.1

    Fixed

    • Fix catalog for alloy apps as it is now pushed to the default catalog.

    Removed

    • Clean up old and deprecated telemetry collectors:
      • promtail
      • grafana-agent
      • promtheus-agent
    • Disable PodSecurityPolicies by default as PodSecurityPolicies are deprecated and removed in Kubernetes v1.25+ clusters

    observability-policies v0.0.1…v0.0.2

    Changed

    security-bundle v1.10.1…v1.12.0

    Added

    • Add policy-api-crds app to manage Policy API CRDs.

    Changed

    • Update trivy-operator (app) to v0.11.1.
    • Update trivy (app) to v0.14.0.
    • Update falco (app) to v0.10.1.
    • Update cloudnative-pg (app) to v0.0.10.
    • Update starboard-exporter (app) to v0.8.2.
    • Updated E2E tests to use apptest-framework v1.14.0
    • Update trivy (app) to v0.13.4.
    • Update cloudnative-pg (app) to v0.0.7.
    • Update starboard-exporter (app) to v0.8.1.
    • Update kyverno-policy-operator (app) to v0.0.11.
    • Update cloudnative-pg (app) to v0.0.9.

    teleport-kube-agent v0.10.4…v0.10.6

    Added

    • Set Home URL in chart metadata.

    Changed

    • AppVersion upgrade to 17.5.4

    vertical-pod-autoscaler v5.4.0…v5.5.1

    Changed

    • Chart: Update Helm release vertical-pod-autoscaler to v10.2.1. (#355)
    • Chart: Update Helm release vertical-pod-autoscaler to v10.1.0. (#350)
    • Chart: Update Helm release vertical-pod-autoscaler to v10.2.0. (#351)
    • Chart: Update Helm release vertical-pod-autoscaler to v10.0.1. (#346)

    vertical-pod-autoscaler-crd v3.2.0…v3.3.1

    Changed

    • Chart: Sync to upstream. (#146)
    • Chart: Sync to upstream. (#140)
    • Chart: Sync to upstream. (#136)