Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
updatePolicy.updateMode from deprecated Auto to Recreate.namespaceOverride value to support deploying external-dns into a different namespace than the Helm release (useful for subchart usage).enableGatewayListenerSets value to opt into Gateway API ListenerSet resource support.sourceNamespace value (used with namespaced=true) to watch resources in a namespace different from the deployment namespace.gatewayNamespace is set, reducing required permissions.extraArgs map handling: boolean values now render as --flag / --no-flag and string values are properly quoted.policy-reporter to upstream version v3.7.2.kyverno to upstream version v1.17.2.HorizontalPodAutoscaler feature for the admission-controller deployment.node.cluster.x-k8s.io/uninitialized taint.global.release.version to template output for EKSdefault-apps-eks Appapp.branding.theme configuration.aiChat.skills (opt out of bundled skills with bundled: false, load extra skills from a directory with dir, or define them inline with inline).ci-values-case3-sqlite-persistent.yaml) inject a real backend.database.connection.directory override and update the surrounding comment so it reflects what current Backstage actually accepts. The previous comment suggested connection: /var/lib/backstage/db.sqlite, which the Sqlite3Connector rejects at runtime with "connection.filename" is not supported for the base sqlite connection.
See ./docs/releases/v0.127.0-changelog.md for more information.<details>/<summary> HTML in AI chat markdown.useBackstageUserToken option, so user-context tools like auth.who-am-i work without a static external-access token.fa-kubernetes Font Awesome icon with an inline SVG and remove the Font Awesome kit integration.@terasky/backstage-plugin-catalog-mcp-backend with the built-in catalog.query-catalog-entities action from @backstage/plugin-mcp-actions-backend.getCurrentUserInfo AI chat agent tool, superseded by the upstream auth.who-am-i tool from the mcp-actions MCP server.
See ./docs/releases/v0.126.0-changelog.md for more information.appVersion field to Chart.yaml.global.connectivity.dns.hostedZoneName.global.connectivity.dns.delegationIdentityName.network.giantswarm.io/base-domain with the base domain value used for the workload cluster.network.giantswarm.io/wildcard-cname-target annotation on AWSCluster via global.connectivity.dns.wildcardCnameTarget.rbac-bootstrap as a default HelmRelease app.appName before catalog lookup in aws-nth-app template to ensure correct catalog resolution from Release CR.rbac-bootstrap as a default HelmRelease app with a default ClusterRoleBinding for giantswarm:giantswarm-admins.rbac-bootstrap HelmRelease.rbac-bootstrap default role from read-all to view and add additional groups for token forwarded cases..appVersion in Chart.yaml with version detected by ABS..Chart.AppVersion instead of .Chart.Version for OCIRepository tag.io.giantswarm.application.audience: all annotation to publish the app to the customer Backstage catalog.io.giantswarm.application.* format.architect-orb to v6.15.0.managementCluster (when isManagementCluster=true) or clusterID (otherwise) are set, failing early with a clear error message.kubeconfig-incluster): run cluster-autoscaler on the management cluster using a pre-existing kubeconfig to connect to the workload cluster.clusterAPI values section for configuring CAPI mode (autodiscovery, kubeconfig secret, configmaps namespace).rbac.clusterScoped toggle to support namespace-scoped RBAC (no ClusterRole/ClusterRoleBinding) for CAPI deployments.policy-exceptions Namespace.pre-install,pre-upgrade hook so it takes effect before chart resources are created.coredns-adopter job to adopt default CoreDNS resources on EKS clusters (disabled by default).coredns image to 1.14.2.configmap.log.enabled helm value to toggle CoreDNS query logging (default: false).AAAA NOERROR configurable for IPv6.alias: upstream), eliminating fork maintenance.giantswarm.workloadValues transformer to route values under upstream: key with extras (podLogs, global) at top level.controller.env entries for upstream compatibility.giantswarm.combineImage helper to merge split registry+repository into single repository path.values.yaml into annotated BUNDLE-ONLY / UPSTREAM / EXTRAS sections.io.giantswarm.application.audience: all annotation to publish the app to the customer Backstage catalog.io.giantswarm.application.* format for both the karpenter and karpenter-bundle charts..appVersion in Chart.yaml with version detected by ABS..Chart.AppVersion instead of .Chart.Version for OCIRepository tag.vendir.yml, vendir.lock.yml, vendor/ directory, and Makefile.custom.mk.application.giantswarm.io/team annotation from HelmReleases as label to KSM emitted metrics.Chart.yaml to OpenContainers format (io.giantswarm.application.team).http_2xx_insecure module with insecure_skip_verify: true to support probing workload cluster API servers from the management cluster. The MC’s service account CA (http_2xx_k8sca) only covers the MC itself; workload clusters have their own CA which is not available to the blackbox exporter, making TLS verification impossible without this module.priorityClassName to system-node-critical to ensure DaemonSet pods are scheduled even on full nodes.io.giantswarm.application.audience and io.giantswarm.application.managed chart annotations for Backstage visibility.falco (app) to v0.11.2.gel (app) to v1.0.2.kubescape (app) to v0.0.6.reports-server (app) to v0.1.3.starboard-exporter (app) to v1.0.3.trivy (app) to v0.14.2.trivy-operator (app) to v0.12.2.rbac-bootstrap as a default HelmRelease app.rbac-bootstrap as a default HelmRelease app with a default ClusterRoleBinding for giantswarm:giantswarm-admins.rbac-bootstrap HelmRelease.rbac-bootstrap default role from read-all to view and add additional groups for token forwarded cases.coredns-adopter job to adopt default CoreDNS resources on EKS clusters (disabled by default).coredns image to 1.14.2.configmap.log.enabled helm value to toggle CoreDNS query logging (default: false).AAAA NOERROR configurable for IPv6.application.giantswarm.io/team annotation from HelmReleases as label to KSM emitted metrics.Chart.yaml to OpenContainers format (io.giantswarm.application.team).io.giantswarm.application.audience and io.giantswarm.application.managed chart annotations for Backstage visibility.falco (app) to v0.11.2.gel (app) to v1.0.2.kubescape (app) to v0.0.6.reports-server (app) to v0.1.3.starboard-exporter (app) to v1.0.3.trivy (app) to v0.14.2.trivy-operator (app) to v0.12.2.rbac-bootstrap as a default HelmRelease app.values key to kube-vip-cloud-provider HelmRelease.rbac-bootstrap as a default HelmRelease app with a default ClusterRoleBinding for giantswarm:giantswarm-admins.rbac-bootstrap HelmRelease.rbac-bootstrap default role from read-all to view and add additional groups for token forwarded cases.v1.35.1.version field of Chart.yaml to latest repo release fix ci checks.1.35.0.PodSecurityPolicy.podSecurityPolicy helm value.coredns-adopter job to adopt default CoreDNS resources on EKS clusters (disabled by default).coredns image to 1.14.2.configmap.log.enabled helm value to toggle CoreDNS query logging (default: false).AAAA NOERROR configurable for IPv6.application.giantswarm.io/team annotation from HelmReleases as label to KSM emitted metrics.Chart.yaml to OpenContainers format (io.giantswarm.application.team).io.giantswarm.application.audience and io.giantswarm.application.managed chart annotations for Backstage visibility.falco (app) to v0.11.2.gel (app) to v1.0.2.kubescape (app) to v0.0.6.reports-server (app) to v0.1.3.starboard-exporter (app) to v1.0.3.trivy (app) to v0.14.2.trivy-operator (app) to v0.12.2.