Skip to content

Commit

Permalink
Reset changelog for release v0.31.0 (#1667)
Browse files Browse the repository at this point in the history
  • Loading branch information
lucianvlad authored Jul 6, 2023
1 parent 8a96494 commit a66773e
Show file tree
Hide file tree
Showing 2 changed files with 101 additions and 96 deletions.
101 changes: 101 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
# Compliant Kubernetes changelog
<!-- BEGIN TOC -->
- [v0.31.0](#v0310---2023-07-06)
- [v0.30.0](#v0300---2023-05-10)
- [v0.29.0](#v0290---2023-03-03)
- [v0.28.0](#v0280---2023-01-20)
Expand Down Expand Up @@ -34,6 +35,106 @@
- [v0.5.0](#v050---2020-08-06)
<!-- END TOC -->

-------------------------------------------------
## v0.31.0 - 2023-07-06

### Release notes
- Opensearch
- New functionality to perform common administrative operations on your Opensearch indices, such as CRUD (Create, Read, Update, and Delete) functions, through the UI.
- New feature, searchable snapshots, which allows searching indices that are stored as snapshots within remote repositories without needing to download all of the index data ahead of time.
- New UI functionality to manage and restore from snapshots.
- More support for analyzing trace data collected by Jaeger in the Observability feature.
- New Security Analytics plugin includes tools to help you analyze security event logs, identify attack signatures, visualize threat patterns, and create security alerts.
- Support for multiple authentication options.
- Full release notes:
- [v2.4.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.4.0.md)
- [v2.5.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.5.0.md)
- [v2.6.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.6.0.md)
- [v2.7.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.7.0.md)
- [v2.8.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.8.0.md)


- Harbor is upgraded to v2.8.2, which drops support for chartmuseum. If you are using chartmuseum you will need to migrate your [charts](https://github.com/goharbor/harbor/wiki/Migrate-helm-chart-to-oci-registry-in-Harbor).


### Added

- Added so Grafana egress can be configured from sc-config.
- Added possibility to change Alertmanager template for slack alerts.
- Add additional pre-commit checks with codespell, editorconfig, and shellcheck
- Added exceptions for falco alerts generated by Tekton
- Added exceptions for falco alerts generated by ingress-nginx
- Added All instances option to OpenSearch dashboard
- Add networkpolicy generator chart with common rules
- Added option to enable harbor GC via config
- Added openstack api metrics.
- Added config option to support [Cluster API](https://cluster-api.sigs.k8s.io/) managed Kubernetes clusters
- Added grafana dashboard for cluster-api management
- Alerts for CoreDNS and Node-local-dns
- Added RBAC for admin users to view events and logs
- Possibility to add custom config for node-local-dns
- Added Prometheus Blackbox Exporter dashboard to Grafana
- Added option to configure `max_shards_per_node` in opensearch via config option `opensearch.maxShardsPerNode`
- Dependency check to main bin scripts
- Add possibility to add and tune disk usage alerts
- Add pattern matching for node and disk
- Added support for configuring multiple kube-apiservers for blackbox exporter in sc
- `./bin/ck8s update-ips` now adds the IPs and port for swift endpoint

### Changed

- Moved `.monitoring.rook` and `.rookCeph.enabled` keys under `rookCeph.monitoring` and `rookCeph.gatekeeperPsp`
- The value for `networkPolicies.global.externalLoadBalancer` and `networkPolicies.global.ingressUsingHostNetwork` is now set by the init script, based on the `.global.ck8sCloudProvider` value
- Updated ingress-nginx chart to `v4.7.0` with upgrade ingess-nginx to `v1.8.0`
- Dropped support for kubernetes `v1.23.0`
- Added, removed and deprecated prometheus metric names [#8728](https://github.com/kubernetes/ingress-nginx/pull/8728)
- Change Trivy Operator Dashboard to only count image states once per image instead for each namespace and resource
- Rework thanos networkpolicies with generator chart
- Rework monitoring networkpolicies with generator chart
- New fluentd-elasticsearch custom image tag `v4.3.9-ck8s1` which includes a plugin for dot replacement, as this functionality has been removed from the `kubernetes_metadata_filter` plugin.
- Changed location for opensearch-curator image.
- Reworked Ops-Grafana
- Moved to a separate release instead of deploying it through `kube-prometheus-stack`
- Renamed `grafana-ops` to `grafana-dashboards`
- Moved all grafana value templates to a separate folder
- Moved grafana config from `prometheus.grafana` and `user.grafana` to `grafana.ops` and `grafana.user`
- Requirements installer will now update binaries if they are of the wrong version or missing
- It will also not try to install already correct installed requirements

### Fixed

- Fixed issue with compaction job on ephemeral volumes
- Fixed duplicate exception for falco alerts
- Another network policy fix for Harbor to allow garbage collection
- Fix migration and race condition for HNC and HierarchyConfigurations
- Rook-Ceph mgr netpol to allow blackbox exporter probes
- Run log-manager compaction with emptyDir volume
- Use set cluster DNS for egress rule
- Add missing ingress rules for harbor core

### Updated

- Upgraded Thanos helm chart to version `12.6.2` which bumps the application version to `0.31.0`
- Now supports authentication via Openstack application credentials when using Swift as the object storage backend
- Allow egress to port 53 TCP for all network policies
- Update Trivy Operator Dashboard to improve the user experience
- Bump sops to version `3.7.3`.
- Update Falco rules
- Opensearch to v2.8.0, chart v2.13.0 and Opensearch Dashboard to v2.8.0, chart v2.11.0
- Upgrade chart `fluentd` to version `5.8.2`, app version `1.16.1`.
- Upgrade chart `fluentd-elasticsearch` to version `13.10.0`, app version `4.3.9`.
- Updated harbor chart to `v1.12.2` which upgraded harbor to `v2.8.2`
- Dropped support for chartmuseum
- Default login page is now OIDC, for local login refer to path `<url>/account/sign-in`
- Upgraded Grafana chart version to `6.57.1` and app version to `9.5.3`
- Updated harbor network policies, now generated by the network policies generator.
- Also updated how external database/redis np is configured.

### Removed

- Removed calico-node from test script
- Leftover InfluxDB config

-------------------------------------------------
## v0.30.0 - 2023-05-10

Expand Down
96 changes: 0 additions & 96 deletions WIP-CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,96 +0,0 @@
### Release notes
- Opensearch
- New functionality to perform common administrative operations on your Opensearch indices, such as CRUD (Create, Read, Update, and Delete) functions, through the UI.
- New feature, searchable snapshots, which allows searching indices that are stored as snapshots within remote repositories without needing to download all of the index data ahead of time.
- New UI functionality to manage and restore from snapshots.
- More support for analyzing trace data collected by Jaeger in the Observability feature.
- New Security Analytics plugin includes tools to help you analyze security event logs, identify attack signatures, visualize threat patterns, and create security alerts.
- Support for multiple authentication options.
- Full release notes:
- [v2.4.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.4.0.md)
- [v2.5.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.5.0.md)
- [v2.6.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.6.0.md)
- [v2.7.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.7.0.md)
- [v2.8.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.8.0.md)


- Harbor is upgraded to v2.8.2, which drops support for chartmuseum. If you are using chartmuseum you will need to migrate your [charts](https://github.com/goharbor/harbor/wiki/Migrate-helm-chart-to-oci-registry-in-Harbor).


### Added

- Added so Grafana egress can be configured from sc-config.
- Added possibility to change Alertmanager template for slack alerts.
- Add additional pre-commit checks with codespell, editorconfig, and shellcheck
- Added exceptions for falco alerts generated by Tekton
- Added exceptions for falco alerts generated by ingress-nginx
- Added All instances option to OpenSearch dashboard
- Add networkpolicy generator chart with common rules
- Added option to enable harbor GC via config
- Added openstack api metrics.
- Added config option to support [Cluster API](https://cluster-api.sigs.k8s.io/) managed Kubernetes clusters
- Added grafana dashboard for cluster-api management
- Alerts for CoreDNS and Node-local-dns
- Added RBAC for admin users to view events and logs
- Possibility to add custom config for node-local-dns
- Added Prometheus Blackbox Exporter dashboard to Grafana
- Added option to configure `max_shards_per_node` in opensearch via config option `opensearch.maxShardsPerNode`
- Dependency check to main bin scripts
- Add possibility to add and tune disk usage alerts
- Add pattern matching for node and disk
- Added support for configuring multiple kube-apiservers for blackbox exporter in sc
- `./bin/ck8s update-ips` now adds the IPs and port for swift endpoint

### Changed

- Moved `.monitoring.rook` and `.rookCeph.enabled` keys under `rookCeph.monitoring` and `rookCeph.gatekeeperPsp`
- The value for `networkPolicies.global.externalLoadBalancer` and `networkPolicies.global.ingressUsingHostNetwork` is now set by the init script, based on the `.global.ck8sCloudProvider` value
- Updated ingress-nginx chart to `v4.7.0` with upgrade ingess-nginx to `v1.8.0`
- Dropped support for kubernetes `v1.23.0`
- Added, removed and deprecated prometheus metric names [#8728](https://github.com/kubernetes/ingress-nginx/pull/8728)
- Change Trivy Operator Dashboard to only count image states once per image instead for each namespace and resource
- Rework thanos networkpolicies with generator chart
- Rework monitoring networkpolicies with generator chart
- New fluentd-elasticsearch custom image tag `v4.3.9-ck8s1` which includes a plugin for dot replacement, as this functionality has been removed from the `kubernetes_metadata_filter` plugin.
- Changed location for opensearch-curator image.
- Reworked Ops-Grafana
- Moved to a separate release instead of deploying it through `kube-prometheus-stack`
- Renamed `grafana-ops` to `grafana-dashboards`
- Moved all grafana value templates to a separate folder
- Moved grafana config from `prometheus.grafana` and `user.grafana` to `grafana.ops` and `grafana.user`
- Requirements installer will now update binaries if they are of the wrong version or missing
- It will also not try to install already correct installed requirements

### Fixed

- Fixed issue with compaction job on ephemeral volumes
- Fixed duplicate exception for falco alerts
- Another network policy fix for Harbor to allow garbage collection
- Fix migration and race condition for HNC and HierarchyConfigurations
- Rook-Ceph mgr netpol to allow blackbox exporter probes
- Run log-manager compaction with emptyDir volume
- Use set cluster DNS for egress rule
- Add missing ingress rules for harbor core

### Updated

- Upgraded Thanos helm chart to version `12.6.2` which bumps the application version to `0.31.0`
- Now supports authentication via Openstack application credentials when using Swift as the object storage backend
- Allow egress to port 53 TCP for all network policies
- Update Trivy Operator Dashboard to improve the user experience
- Bump sops to version `3.7.3`.
- Update Falco rules
- Opensearch to v2.8.0, chart v2.13.0 and Opensearch Dashboard to v2.8.0, chart v2.11.0
- Upgrade chart `fluentd` to version `5.8.2`, app version `1.16.1`.
- Upgrade chart `fluentd-elasticsearch` to version `13.10.0`, app version `4.3.9`.
- Updated harbor chart to `v1.12.2` which upgraded harbor to `v2.8.2`
- Dropped support for chartmuseum
- Default login page is now OIDC, for local login refer to path `<url>/account/sign-in`
- Upgraded Grafana chart version to `6.57.1` and app version to `9.5.3`
- Updated harbor network policies, now generated by the network policies generator.
- Also updated how external database/redis np is configured.

### Removed

- Removed calico-node from test script
- Leftover InfluxDB config

0 comments on commit a66773e

Please sign in to comment.