-
Notifications
You must be signed in to change notification settings - Fork 7
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Reset changelog for release v0.31.0 (#1667)
- Loading branch information
1 parent
8a96494
commit a66773e
Showing
2 changed files
with
101 additions
and
96 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,96 +0,0 @@ | ||
### Release notes | ||
- Opensearch | ||
- New functionality to perform common administrative operations on your Opensearch indices, such as CRUD (Create, Read, Update, and Delete) functions, through the UI. | ||
- New feature, searchable snapshots, which allows searching indices that are stored as snapshots within remote repositories without needing to download all of the index data ahead of time. | ||
- New UI functionality to manage and restore from snapshots. | ||
- More support for analyzing trace data collected by Jaeger in the Observability feature. | ||
- New Security Analytics plugin includes tools to help you analyze security event logs, identify attack signatures, visualize threat patterns, and create security alerts. | ||
- Support for multiple authentication options. | ||
- Full release notes: | ||
- [v2.4.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.4.0.md) | ||
- [v2.5.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.5.0.md) | ||
- [v2.6.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.6.0.md) | ||
- [v2.7.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.7.0.md) | ||
- [v2.8.0](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.8.0.md) | ||
|
||
|
||
- Harbor is upgraded to v2.8.2, which drops support for chartmuseum. If you are using chartmuseum you will need to migrate your [charts](https://github.com/goharbor/harbor/wiki/Migrate-helm-chart-to-oci-registry-in-Harbor). | ||
|
||
|
||
### Added | ||
|
||
- Added so Grafana egress can be configured from sc-config. | ||
- Added possibility to change Alertmanager template for slack alerts. | ||
- Add additional pre-commit checks with codespell, editorconfig, and shellcheck | ||
- Added exceptions for falco alerts generated by Tekton | ||
- Added exceptions for falco alerts generated by ingress-nginx | ||
- Added All instances option to OpenSearch dashboard | ||
- Add networkpolicy generator chart with common rules | ||
- Added option to enable harbor GC via config | ||
- Added openstack api metrics. | ||
- Added config option to support [Cluster API](https://cluster-api.sigs.k8s.io/) managed Kubernetes clusters | ||
- Added grafana dashboard for cluster-api management | ||
- Alerts for CoreDNS and Node-local-dns | ||
- Added RBAC for admin users to view events and logs | ||
- Possibility to add custom config for node-local-dns | ||
- Added Prometheus Blackbox Exporter dashboard to Grafana | ||
- Added option to configure `max_shards_per_node` in opensearch via config option `opensearch.maxShardsPerNode` | ||
- Dependency check to main bin scripts | ||
- Add possibility to add and tune disk usage alerts | ||
- Add pattern matching for node and disk | ||
- Added support for configuring multiple kube-apiservers for blackbox exporter in sc | ||
- `./bin/ck8s update-ips` now adds the IPs and port for swift endpoint | ||
|
||
### Changed | ||
|
||
- Moved `.monitoring.rook` and `.rookCeph.enabled` keys under `rookCeph.monitoring` and `rookCeph.gatekeeperPsp` | ||
- The value for `networkPolicies.global.externalLoadBalancer` and `networkPolicies.global.ingressUsingHostNetwork` is now set by the init script, based on the `.global.ck8sCloudProvider` value | ||
- Updated ingress-nginx chart to `v4.7.0` with upgrade ingess-nginx to `v1.8.0` | ||
- Dropped support for kubernetes `v1.23.0` | ||
- Added, removed and deprecated prometheus metric names [#8728](https://github.com/kubernetes/ingress-nginx/pull/8728) | ||
- Change Trivy Operator Dashboard to only count image states once per image instead for each namespace and resource | ||
- Rework thanos networkpolicies with generator chart | ||
- Rework monitoring networkpolicies with generator chart | ||
- New fluentd-elasticsearch custom image tag `v4.3.9-ck8s1` which includes a plugin for dot replacement, as this functionality has been removed from the `kubernetes_metadata_filter` plugin. | ||
- Changed location for opensearch-curator image. | ||
- Reworked Ops-Grafana | ||
- Moved to a separate release instead of deploying it through `kube-prometheus-stack` | ||
- Renamed `grafana-ops` to `grafana-dashboards` | ||
- Moved all grafana value templates to a separate folder | ||
- Moved grafana config from `prometheus.grafana` and `user.grafana` to `grafana.ops` and `grafana.user` | ||
- Requirements installer will now update binaries if they are of the wrong version or missing | ||
- It will also not try to install already correct installed requirements | ||
|
||
### Fixed | ||
|
||
- Fixed issue with compaction job on ephemeral volumes | ||
- Fixed duplicate exception for falco alerts | ||
- Another network policy fix for Harbor to allow garbage collection | ||
- Fix migration and race condition for HNC and HierarchyConfigurations | ||
- Rook-Ceph mgr netpol to allow blackbox exporter probes | ||
- Run log-manager compaction with emptyDir volume | ||
- Use set cluster DNS for egress rule | ||
- Add missing ingress rules for harbor core | ||
|
||
### Updated | ||
|
||
- Upgraded Thanos helm chart to version `12.6.2` which bumps the application version to `0.31.0` | ||
- Now supports authentication via Openstack application credentials when using Swift as the object storage backend | ||
- Allow egress to port 53 TCP for all network policies | ||
- Update Trivy Operator Dashboard to improve the user experience | ||
- Bump sops to version `3.7.3`. | ||
- Update Falco rules | ||
- Opensearch to v2.8.0, chart v2.13.0 and Opensearch Dashboard to v2.8.0, chart v2.11.0 | ||
- Upgrade chart `fluentd` to version `5.8.2`, app version `1.16.1`. | ||
- Upgrade chart `fluentd-elasticsearch` to version `13.10.0`, app version `4.3.9`. | ||
- Updated harbor chart to `v1.12.2` which upgraded harbor to `v2.8.2` | ||
- Dropped support for chartmuseum | ||
- Default login page is now OIDC, for local login refer to path `<url>/account/sign-in` | ||
- Upgraded Grafana chart version to `6.57.1` and app version to `9.5.3` | ||
- Updated harbor network policies, now generated by the network policies generator. | ||
- Also updated how external database/redis np is configured. | ||
|
||
### Removed | ||
|
||
- Removed calico-node from test script | ||
- Leftover InfluxDB config | ||