Changed
- Controller: Update image to v1.15.6 fixing CVE-2026-9256 (nginx rewrite heap overflow)
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
rollout-operator sub-dependency from 0.47.0 to 0.49.0backend-scheduler / backend-worker components (chart 2.17.0)unhealthyPodEvictionPolicy support on every PodDisruptionBudget (chart 2.23.0)clusterIP: None) and changes the StatefulSet serviceName. Both fields are immutable, so helm upgrade will fail on existing installations with:
Service "tempo-memcached" is invalid: spec.clusterIPs[0]: Invalid value: ["None"]: may not change once set && StatefulSet.apps "tempo-memcached" is invalid: spec: Forbidden: updates to statefulset spec for fields other than 'replicas', ...
Before upgrading, delete the affected Services and orphan-delete the StatefulSets so the new chart can recreate them:kubectl -n <namespace> delete service --selector 'app.kubernetes.io/instance=<release>,app.kubernetes.io/component in (memcached,memcached-bloom,memcached-parquet-footer,memcached-frontend-search)'
kubectl -n <namespace> delete statefulset --selector 'app.kubernetes.io/instance=<release>,app.kubernetes.io/component in (memcached,memcached-bloom,memcached-parquet-footer,memcached-frontend-search)' --cascade=orphan
K6 Tests Results dashboard to the Shared Org Grafana organization.login: do not break the generated kubeconfig when the OIDC provider does not return a refresh token. The plugin now serves the still-valid ID token first and only requires a refresh token at renewal time.v0.31.1 to v0.32.1v3.10.0 to v3.11.3-distroless (distroless variant now enabled by default)1.7.8 to 1.8.2v0.31.1 to v0.32.1v3.10.0 to v3.11.3-distroless (distroless variant now enabled by default)1.7.8 to 1.8.2