Changes and Releases
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
Changed
- App: migrate the Clusters, Deployments, Installations, Catalog, and Flux pages to the new frontend system page header. The Flux page’s list and tree views are now header tabs (
/flux redirects to /flux/list), and the catalog page title is now just “Catalog” (overridable via app-config). - App: migrate the Grafana plugin to the actively maintained
@backstage-community/plugin-grafana — a drop-in replacement with no behavior change.
Fixed
- Auth: the MCP OAuth2 authenticator now sends the RFC 8707
resource parameter in authorization and token requests when a resource option is configured on an mcp-* auth provider, so issued access tokens are audience-bound to the target MCP server. This fixes the AI chat losing access to MCP servers fronted by JWT-validating gateways that reject tokens without the expected aud claim.
See ./docs/releases/v0.133.2-changelog.md for more information.
Added
- Import load testing framework from microservices-demo app.
Fixed
- Correct the ports path and format in the Envoy Gateway ingress
CiliumNetworkPolicy. The previous empty toPorts entry put the endpoint into default-deny mode, silently dropping all xDS connections from new proxy pods.
Changed
- Bumped DaemonSet
updateStrategy.rollingUpdate.maxUnavailable to 10% so chart upgrades on larger management clusters can finish within the Flux HelmRelease timeout.
Changed
- Values: Tolerate
node.cloudprovider.kubernetes.io/uninitialized. - Values: Ignore taints regardless of value.
- Values: Pass HTTP proxy settings to sub-chart.
Changed
- Updated
trivy to upstream version v0.70.0.
Changed
- Updated
falco to upstream version v0.44.0. - Updated
k8s-metacollector to upstream version v0.1.2.
Changed
- Update Envoy Gateway to v1.8.1 (data plane Envoy bumped to v1.38.1).
Changed
- update CoreDNS icon to light version