Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • What’s Changed

    Full Changelog: https://github.com/giantswarm/happa/compare/v1.57.7...v1.57.8

  • Added

    • Chart: Add PSP with runtime/default seccomp profile.
  • Added

    • Service: Align to upstream. (#425)
      • Service: Implement controller.service.clusterIP.
        NOTE: The cluster IP of existing services can not be changed. The app deployment might fail when defining this for already installed app instances.
      • Service: Implement controller.service.externalIPs.
      • Service: Implement controller.service.loadBalancerIP.
      • Service: Implement controller.service.sessionAffinity.
      • Service: Implement controller.service.healthCheckNodePort.
        NOTE: The health check node port of existing services can not be changed. The app deployment might fail when defining this for already installed app instances.
      • Service: Implement controller.service.ipFamilyPolicy.
      • Service: Implement controller.service.ipFamilies.
      • Service: Implement controller.service.enableHttp.
      • Service: Implement controller.service.enableHttps.
      • Service: Implement controller.service.appProtocol.
      • Service: Implement controller.service.external.enabled.
      • Service: Add portNamePrefix.
      • Service: Add controller.service.nodePorts.tcp & controller.service.nodePorts.udp.
      • Service: Implement node ports for tcp and udp.
      • Internal Service: Implement controller.service.internal.loadBalancerIP.
      • Internal Service: Implement controller.service.enableHttp & controller.service.enableHttps.
      • Internal Service: Implement controller.service.appProtocol.
      • Internal Service: Add controller.service.internal.nodePorts.tcp & controller.service.internal.nodePorts.udp.
      • Internal Service: Implement node ports for tcp and udp.

    Changed

    • Service: Align to upstream. (#425)
      • Service: Reorder name & namespace.
      • Service: Align controller.service.loadBalancerSourceRanges.
      • Service: Align controller.service.externalTrafficPolicy.
      • Service: Align indention of ports.
      • Service: Align node port checks.
      • Internal Service: Align initial check.
      • Internal Service: Reorder name & namespace.
      • Internal Service: Align controller.service.internal.loadBalancerSourceRanges.
      • Internal Service: Reorder controller.service.internal.externalTrafficPolicy.
      • Internal Service: Align indention of ports.
      • Internal Service: Align node port checks.
      • Values: Align to upstream.

    Removed

    • Service: Align to upstream. (#425)
      • Internal Service: Remove controller.service.internal.labels.
        NOTE: This is part of our alignment to upstream. Use controller.service.labels instead.
      • Internal Service: Remove controller.service.internal.type.
        NOTE: This is part of our alignment to upstream. Use controller.service.type instead.
      • Internal Service: Remove controller.service.internal.ports.http.
        NOTE: This is part of our alignment to upstream. Use controller.service.ports.http instead.
      • Internal Service: Remove controller.service.internal.ports.https.
        NOTE: This is part of our alignment to upstream. Use controller.service.ports.https instead.
  • Removed

    • Remove namespace singleton temporarily, as it has some issues

    Changed

    • Updated upstream chart from v6.8.2 to v6.8.3
    • Updated app from 2.7.2 to 2.7.3
  • Changed

    • Change the name of metric ETCD Backend Quota Low Space to ETCD Keyspace usage.
  • Added

    • Add VPA CR to VPA.
  • Changed

    • Upgrade to AppVersion 0.13.0
    • Add cluster and world to CiliumNetworkPolicy
  • Added

    • Add workload cluster login support for CAPZ based clusters
    • CAPA: Add hidden flags --aws-prefix-list-id and --aws-transit-gateway-id for private clusters

    Changed

    • CAPA: Renamed hidden parameter --role to --aws-cluster-role-identity-name and adapted manifest output to the new name awsClusterRoleIdentityName (see cluster-aws change)
  • Added

    • Add cilium network policy so that the crd-install job can reach the k8s api to install the CRDs.
    • README: doc improvements

    Changed

    • Remove push-to-app-collection jobs for onprem providers since this app became a part of default apps bundle.
    • Moved to chart dependency
    • ⚠ Major upgrade, breaking changes
      • values structure changes. We rely on a subchart, meaning all of previous setup goes to a vertical-pod-autoscaler section
      • the upstream repo has changed and thus as did the helm chart config
      • for more detailed explanations, check the README