v0.47.2

v0.47.2 - 26 Aug 2024

• vmalertmanager: allow to change webserver listen port with spec.Port. See this PR for details.
• operator: updates default vm apps version to v1.102.1
• operator: fixes statefulset rollingUpdate strategyType readiness check.
• operator: fixes statefulset reconcile endless loop bug introduced at v0.47.1 version with commit.
• vmuser: fixes crd.kind enum param for VMAlertmanager, it now supports both VMAlertmanager and VMAlertManager. See this issue for details.
• operator: adds sorting for configReloaderExtraArgs.

v0.47.1

v0.47.1 - 23 Aug 2024

It is recommended upgrading to operator v0.47.2 because v0.47.1 contains a bug, which can lead to endless statefulset reconcile loop.

• operator: properly update statefulset on revisionHistoryLimitCount change. See this issue for details.
• vmalertmanagerconfig: properly construct tls_config for emails notifications. See this issue for details.
• operator: fixed Prometheus scrape config metricsPath conversion. See this issue
• config-reloader: Added reload prefix to all config-reloader tls* flags to avoid collision with flags from external package. See this issue

v0.47.0

v0.47.0 - 15 Aug 2024

Breaking changes

• Update note 1: operator now forbids cross VMAlertmanagerConfig or global receiver references. VMAlertmanagerConfig must include only local receivers .

• Update note 2: removed deprecated mute_time_intervals from VMAlertmanagerConfig.spec. Use VMAlertmanagerConfig.spec.time_intervals instead.

• Update note 3: operator adds blackhole as default route for VMalertmanager if root route receiver is empty. Previously it added a first VMAlertmanagerConfig receiver. Update global VMalertmanager configuration with proper route receiver if needed

• victoria-logs: added VLogs resource for VictoriaLogs management. Related issue.

• config-reloader: adds new flags tlsCaFile, tlsCertFile,tlsKeyFile,tlsServerName,tlsInsecureSkipVerify. It allows to configure tls for reload endpoint. Related issue.

• vmuser: adds status.lastSyncError field, adds server-side validation for spec.targetRefs.crd.kind. Adds small refactoring.

• vmuser: allows to skip VMUser from VMAuth config generation if it has misconfigured fields. Such as references to non-exist CRD objects or missing fields. It's highly recommended to enable Validation webhook for VMUsers, it should reduce surface of potential misconfiguration. See this issue for details.

• vmagent: adds status and lastSyncError status fields to all scrape objects - VMServiceScrape, VMPodScrape, VMNodeScrape,VMPodScrape, VMStaticScrape and VMScrapeConfig. It allows to track config generation for vmagent from scrape objects.

• operator: refactors config builder for VMAgent. It fixes minor bug with incorrect skip of scrape object with incorrect references for secrets and configmaps.

• operator: allows to secure metrics-bind-address webserver with TLS and mTLS protection via flags tls.enable,tls.certDir,tls.certName,tls.key``,mtls.enable,mtls.clietCA`. See this issue for details.

• operator: fixes bug with possible tlsConfig SecretOrConfigmap references clash. Operator adds configmap prefix to the configmap refrenced tls asset. See this issue for details.

• operator: properly release PodDisruptionBudget object finalizer. Previously it could be kept due to typo. See this issue for details.

• operator: refactors finalizers usage. Simplifies finalizer manipulation with helper functions

• operator: adds tls_config and authKey settings to auto-created VMServiceScrape for CRD objects from extraArgs. See this issue for details.

• vmalertmanagerconfig: Improves config validation. Now it properly tracks required fields and provides better feedback for misconfiguration. Adds new status fields - status and lastSyncError. Related issue.

• vmalertmanager: adds webConfig that simplifies tls configuration for alertmanager and allows to properly build probes and access urls for alertmanager. See this issue for details.

• vmalertmanager: adds gossipConfig to setup client and server TLS configuration for alertmanager.

• vmagent/vmsingle: sync stream aggregation options dropInputLabels, ignoreFirstIntervals, ignoreOldSamples from upstream, and support using configMap as the source of aggregation rules.

• operator: added -client.qps and -client.burst flags to override default QPS and burst K8S params. Related issue.

v0.46.4

v0.46.4 - 9 Jul 2024

Breaking changes

• Update note 1: for operatorhub based VMAgent deployment serviceAccount vmagent must be removed. It's no longer shipped with bundle. After deletion operator will create new account with needed permissions.

• [manifests]: properly add webhook.enable for operatorhub deployments. See this commit 7a460b0 for details.

• [manifests]: removes exact user from runAsUser setting. It must be defined at docker image or security profile level. See this commit 1cc4a0e for details. by @AndrewChubatiuk

• operator: switches from distroless to scratch base image. See this commit 768bf76 for details. by @AndrewChubatiuk

• config-reloader: do not specify command for container. command configured at docker image level. See this commit 2192115 for details. by @AndrewChubatiuk

• [build-scripts]: fixed replaced version extraction by @AndrewChubatiuk in #1026

Full Changelog: v0.46.3...v0.46.4

v0.46.3

v0.46.3 - 5 Jul 2024

• operator: fixes config-reloader image tag name after 0.46.0 release. See this issue for details.
• prometheus-converter: fixes panic at PodMonitor convertion with configured tlsConfig. See this issue for details.
• api: return back targetPort for VMPodScrape definition. See this issue for details.
• fixed not yet existing operator path by @AndrewChubatiuk in #1016
• fixed yaml by @AndrewChubatiuk in #1019
• fixed olm manifest generation by @AndrewChubatiuk in #1020
• fixed envdocs by @AndrewChubatiuk in #1024
• added ability to test olm packages locally, added examples and annotations to OLM, restored operator-sdk descriptors by @AndrewChubatiuk in #1023

Full Changelog: v0.46.2...v0.46.3

v0.46.2

v0.46.2 - 4 Jul 2024

Updates

• Typos fixes by @AndrewChubatiuk in #1014
• api: return back targetPort for VMPodScrape definition. See this issue for details.

Full Changelog: v0.46.0...v0.46.2

v0.46.1

v0.46.1 - 3 Jul 2024

Breaking changes

• Update note 1: the --metrics-addr command-line flag at operator was deprecated. Use --metrics-bind-address instead.
• Update note 2: the --enable-leader-election command-line flag at operator was deprecated. Use --leader-elect instead.
• Update note 3: the --http.readyListenAddr command-line flag at operator was deprecated. Use --health-probe-bind-address instead.
• Update note 4: multitenant endpoints suffix /insert/multitenant/<suffix> needs to be added in remoteWrite.url if storage supports multitenancy when using remoteWriteSettings.useMultiTenantMode, as upstream vmagent has deprecated -remoteWrite.multitenantURL command-line flag since v1.102.0.

Updates

• operator: adds tls flag check for AsURL method. It must allow to use https configuration for VMUser service discovery. See this issue for details.
• operator: kubebuilder v2 -> v4 upgrade
• operator: operator docker images are now distroless based
• operator: upgraded certificates.cert-manager.io/v1alpha2 to certificates.cert-manager.io/v1
• operator: code-generator v0.27.11 -> v0.30.0 upgrade
• vmalertmanagerconfig: adds missing handleReconcileErr callback to the reconcile loop. It must properly handle errors and deregister objects.
• vmrule: sync group attributes eval_offset, eval_delay and eval_alignment from upstream.
• operator: fix VM CRs' xxNamespaceSelector and xxSelector options, previously they are inverted. See this issue for details.
• vmnodescrape: remove duplicated series_limit and sample_limit fields in generated scrape_config. See this issue.

v0.46.0

v0.46.0 - 3 Jul 2024

Breaking changes

• Update note 1: the --metrics-addr command-line flag at operator was deprecated. Use --metrics-bind-address instead.
• Update note 2: the --enable-leader-election command-line flag at operator was deprecated. Use --leader-elect instead.
• Update note 3: the --http.readyListenAddr command-line flag at operator was deprecated. Use --health-probe-bind-address instead.
• Update note 4: multitenant endpoints suffix /insert/multitenant/<suffix> needs to be added in remoteWrite.url if storage supports multitenancy when using remoteWriteSettings.useMultiTenantMode, as upstream vmagent has deprecated -remoteWrite.multitenantURL command-line flag since v1.102.0.

Updates

• operator: adds tls flag check for AsURL method. It must allow to use https configuration for VMUser service discovery. See this issue for details.
• operator: kubebuilder v2 -> v4 upgrade
• operator: operator docker images are now distroless based
• operator: upgraded certificates.cert-manager.io/v1alpha2 to certificates.cert-manager.io/v1
• operator: code-generator v0.27.11 -> v0.30.0 upgrade
• vmalertmanagerconfig: adds missing handleReconcileErr callback to the reconcile loop. It must properly handle errors and deregister objects.
• vmrule: sync group attributes eval_offset, eval_delay and eval_alignment from upstream.
• operator: fix VM CRs' xxNamespaceSelector and xxSelector options, previously they are inverted. See this issue for details.
• vmnodescrape: remove duplicated series_limit and sample_limit fields in generated scrape_config. See this issue.

v0.46.0-rc5

removes psp RBAC

v0.45.0

v0.45.0 - 10 Jun 2024

• operator: expose only command-line flags related to the operator. Remove all transitive dependency flags. See this issue for details.
• vmalertmanager: ignores content of cr.spec.configSecret if it's name clashes with secret used by operator for storing alertmanager config. See this issue for details.
• operator: remove finalizer for child objects with non-empty DeletetionTimestamp. See this issue for details.
• operator: skip storageClass check if there is no PVC size change. See this issue for details.
• vmauth: fix url when default http port is changed in targetRef. See this issue for details.
• vmauth: fix deployment when custom reloader is used. See this pull request.
• prometheus-converter: removed dependence on getting the list of API resources for all API groups in the cluster (including those that are not used by the operator). Now API resources are requested only for the required groups (monitoring.coreos.com/*).
• alertmanagerconfig-converter: fix alertmanagerconfig converting with receiver opsgenie_configs. See this issue.