1. Docs
  2. Changes and releases

Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • Observability grafana-app v2.27.1

    Changed

    • upgrade grafana chart: 10.1.0 => 10.1.2
    • upgrade pg-cluster-recovery-test subchart: v0.2.3 => v0.2.4
  • CAPA releases releases aws-33.0.1

    This release improves the stability of Karpenter node pools.

    Changes compared to v33.0.0

    Components

    • cluster-aws from v6.0.0 to v6.2.0

    cluster-aws v6.0.0…v6.2.0

    Added

    • Add capa-karpenter-taint-remover to handle CAPA - Karpenter taint race condition.

    Changed

    • Change default consolidation time to 6 hours to avoid constant node rolling.
    • Rename capa-karpenter-taint-remover app.
    • Set terminationGracePeriod default to 30m, to avoid having karpenter nodes stuck in Deleting state due to Pods blocking the deletion i.e. PDBs.

    Apps

    • aws-pod-identity-webhook from v1.19.1 to v2.0.0
    • karpenter from v1.3.0 to v1.4.0
    • Added karpenter-taint-remover v1.0.1
    • security-bundle from v1.12.0 to v1.13.1

    aws-pod-identity-webhook v1.19.1…v2.0.0

    Changed

    • Upgrade IRSA to latest v0.6.9

    karpenter v1.3.0…v1.4.0

    Changed

    • Updated karpenter to 1.8.1
    • Fixes RBAC issues when OwnerReferencesPermissionEnforcement featuregate is enabled by allowing finalizers sub’resource modification.

    karpenter-taint-remover v1.0.1

    Changed

    • Use default catalog

    security-bundle v1.12.0…v1.13.1

    Changed

    • Revert previous kyverno update (#536, #531, #538).
    • Update kyverno-policy-operator (app) to v0.1.6.
    • Update kyverno (app) to v0.20.0.
    • Update kyverno-crds (app) to v1.14.0.
    • Update kyverno-policies (app) to v0.24.0.
    • Update kyverno-policy-operator (app) to v0.1.5.
    • Update trivy-operator (app) to v0.12.1.
    • Update trivy (app) to v0.14.1.
    • Update falco (app) to v0.11.0.
  • Security organization-operator v2.1.2

    Changed

    • Updated RBAC rules to include organizations/finalizers for managing .metadata.ownerReferences.blockOwnerDeletion.
    • Disable PodSecurityPolicies by deafult.
  • CAPV releases releases vsphere-33.0.1

    Changes compared to v33.0.0

    Apps

    • security-bundle from v1.12.0 to v1.13.1

    security-bundle v1.12.0…v1.13.1

    Changed

    • Revert previous kyverno update (#536, #531, #538).
    • Update kyverno-policy-operator (app) to v0.1.6.
    • Update kyverno (app) to v0.20.0.
    • Update kyverno-crds (app) to v1.14.0.
    • Update kyverno-policies (app) to v0.24.0.
    • Update kyverno-policy-operator (app) to v0.1.5.
    • Update trivy-operator (app) to v0.12.1.
    • Update trivy (app) to v0.14.1.
    • Update falco (app) to v0.11.0.
  • CAPZ releases releases azure-33.0.1

    Changes compared to v33.0.0

    Apps

    • security-bundle from v1.12.0 to v1.13.1

    security-bundle v1.12.0…v1.13.1

    Changed

    • Revert previous kyverno update (#536, #531, #538).
    • Update kyverno-policy-operator (app) to v0.1.6.
    • Update kyverno (app) to v0.20.0.
    • Update kyverno-crds (app) to v1.14.0.
    • Update kyverno-policies (app) to v0.24.0.
    • Update kyverno-policy-operator (app) to v0.1.5.
    • Update trivy-operator (app) to v0.12.1.
    • Update trivy (app) to v0.14.1.
    • Update falco (app) to v0.11.0.
  • Connectivity gateway-api-app v1.5.1

    Changed

  • Security cert-manager-app v3.9.4

    Added

    • Add E2E tests using apptest-framework for automated PR testing across multiple providers (CAPA, CAPV, CAPZ, CAPVCD).
      • Basic test suite: Validates fresh installations
      • Upgrade test suite: Tests upgrade scenarios and certificate reconciliation
    • Add certificate issuance integration test to cluster-test-suites.

    Changed

    • Upgrade cert-manager to v1.18.2.
  • Fleet Management capa-karpenter-taint-remover v1.0.1

    Changed

    • Use default catalog
  • Developer Portal backstage v0.88.1

    Fixed

  • Fleet Management capa-karpenter-taint-remover v1.0.0

    Changed

    • Not managing the CAPI taint anymore, it manages the karpenter.sh/unregistered karpenter taint that is applied by CAPI controllers when using a stale version for the patch request.