Changes and Releases
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
Changed
- Fix ABS config to not override AppVersion in Chart.yaml
- Upgrade Tempo Vulture chart from 0.12.10 to 0.13.0
- Bumps the tempo-vulture image from 2.10.5 to 3.0.2, which is the only change in the chart
- Pins
-tempo-metrics-backoff-duration=0s: the TraceQL metrics check went from disabled to enabled (every 10s) upstream, and it cannot pass here because we do not enable the metrics-generator local-blocks processor - Drops support for the
-rhythm-rf1-after flag (unused here) and starts honouring -tempo-push-tls, which was previously ignored (we leave it disabled)
- Upgrade Tempo chart from 2.23.0 to 2.26.2
- Upgrades Tempo from 2.10.5 to 2.10.7
- Bumps the memcached image from 1.6.42-alpine to 1.6.43-alpine
- Bumps the
rollout-operator sub-dependency from 0.49.0 to 0.50.0 (not enabled here) - The metrics-generator now gets a
livenessProbe (/ready, 60s initial delay), which it did not have when running as a StatefulSet (chart 2.25.4) - Ingester and metrics-generator moved onto the shared pod template; container ports are reordered and the ingester grpc port is now declared via
ingester.extraPorts. Rendered output is otherwise unchanged, so this is a rolling restart only - Adds (disabled by default)
ingest/Kafka write path with the experimental block-builder and live-store components, plus ingester.enabled to turn the ingester off (chart 2.24.0) - Adds a
dnsConfig value on every component with defaults/tempo fallback, deprecating dnsConfigOverides (chart 2.26.1) - Adds
distributor.shutdownDelay for graceful load-balancer draining, disabled by default (chart 2.26.0)
Changed
- Update Envoy Gateway to v1.8.3.
- Update cert-manager config in the cluster values for all performance test suites.
Added
- Set
karpenter.sh/do-not-disrupt: "true" on the Envoy Gateway control-plane pods, so Karpenter does not voluntarily consolidate them. A control-plane reschedule forces the Envoy proxies to reconnect and can leave them wedged with stale/absent TLS secrets over delta xDS until restarted (see envoyproxy/gateway#9519). - Add
perf-report repo-specific claude skill to automatically generate performance test report as html files.
Added
- RBAC: Grant the
automation ServiceAccounts of all organization namespaces (org-<organization>) full access to Kyverno PolicyExceptions in the namespaces they are managed in. For this, a write-policy-exceptions Role granting all verbs on policyexceptions.kyverno.io resources, plus a RoleBinding of the same name, are created in each of the kube-system, giantswarm and policy-exceptions namespaces. Every organization’s automation ServiceAccount is aggregated into the subjects of these RoleBindings, and removed again once its organization namespace is deleted. Namespaces which do not exist on the management cluster are skipped.
Changed
Added
- (agent-platform) Add version-tolerant kagent client in #1998 by @marians
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.168.0...v0.169.0
Changed
- (deps) Update dependency @apidevtools/json-schema-ref-parser to v15.5.0 in #1987 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.167.17...v0.167.18
Changed
- (ui-react) Consolidate ContentRow onto shared bui component in #1993 by @marians
Full Changelog: https://github.com/giantswarm/backstage/compare/v0.167.15...v0.167.16
