Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

  • Added

    • Add custom review step for scaffolder templates.
    • Add multi-source value editing for app deployment scaffolder templates.
    • Add isValidDNSSubdomainName utility for validating Kubernetes resource names.
    • Add passwordManagerIgnoreProps utility and height/maxHeight options to YamlEditor.
    • Add fromJson Nunjucks template filter for deserializing JSON strings in scaffolder templates.

    Changed

    • Discover app deployment templates by label instead of hardcoded name.
    • Disable Edit Deployment button when deployment structure is incompatible with the edit template.
    • Warn when an app deployment is managed through GitOps.

    Fixed

  • Fixed

    • Disabled per-component serviceaccounts so we rely on a central serviceaccount that has proper IRSA annotation.
  • Changed

    • Updated Loki Helm chart dependency to use grafana-community/helm-charts repository.
    • Upgrade upstream loki helm chart from v6 (6.53.0) to v11 (11.6.4), Loki app version 3.6.5 → 3.7.1.
    • Remove custom ScaledObject wrapper templates (backend, gateway, read, write); upstream v11 ships native ScaledObject support, keeping both caused duplicate resources.
    • Remove kedaAutoscaling value blocks consumed only by the deleted wrapper templates.
    • Remove selfMonitoring dead code; removed from upstream prior to v11.
    • Remove redundant podSecurityContext and containerSecurityContext overrides for loki and gateway components; they are now identical to upstream v11 defaults.
    • Rename sample_configs/ directory to examples/.
  • Added

    • Make AAAA NOERROR configurable for IPv6.
  • Added

    • Add awsPartition value to support non-standard AWS partitions (e.g. China).
    • Add oidcDomain and oidcDomains values to support multiple OIDC providers; the IAM trust policy now iterates over all provided domains.
    • Add managed-by: external-dns-crossplane-resources tag to the IAM role.

    Changed

    • Add io.giantswarm.application.audience: giantswarm annotation.
    • Migrate chart metadata annotations to io.giantswarm.application.* format.
    • Move required validation for awsPartition and accountID into named template helpers.
    • Replace deprecated app.giantswarm.io/branch, application.kubernetes.io/managed-by, and giantswarm.io/service-type labels with app.kubernetes.io/* equivalents.
    • Update chart description, icon, and owning team (cabbage).

    Removed

    • Remove name, serviceType, project.branch, and project.commit values that were leftover hackathon scaffolding.
    • Remove hardcoded baseDomain-based OIDC provider URL; replaced by oidcDomain/oidcDomains.
  • Added

    • Add control plane node toleration to CA injector deployment.

    Removed

    • Remove PodSecurityPolicy (PSP) and related resources.
    • Remove Giant Swarm PSP to PSS migration logic.
  • Added

    • Add envoy-gateway-loadtesting dashboard

    Changed

    • Reorganize Grafana Cloud directories: dashboards/grafana-cloud/sources/, grafana-cloud/grafana-cloud/backup/, GC API scripts → grafana-cloud/scripts/
    • Update backup workflow and README to reflect new paths
  • Changed

    • Updgrade Flux to 2.6.4 version.
  • Added

    • Add monthly GitHub Actions workflow to auto-update Tempo, Mimir, Loki, and Alloy mixin dashboards
    • Add Monitoring Landscape / Customer Audit dashboard to audit monitoring tools across workload clusters and compare resource consumption with the GiantSwarm observability platform

    Changed

    • Move Tempo dashboards from private_dashboards_mz to team_atlas under Giant Swarm/Observability/Tempo
    • Move Loki dashboards from private_dashboards_al to team_atlas under Giant Swarm/Observability/Loki
    • Refresh Loki dashboards from latest upstream mixin
    • Move Mimir dashboards from private_dashboards_mz to team_atlas under Giant Swarm/Observability/Mimir
    • Refresh Mimir mixin dashboards from upstream mimir-2.17.6
    • Move Alloy dashboards from private_dashboards_al to team_atlas under Giant Swarm/Observability/Alloy
    • Refresh Alloy mixin dashboards from upstream v1.15.0
      • Adds alloy-loki and alloy-otel-engine-overview dashboards
  • Fixed

    • Updated dependencies