From e69b74c73f02f359598145097ac0c0a66f9927e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C5=81ukasz=20Jakimczuk?= Date: Wed, 3 Jul 2024 14:01:41 +0200 Subject: [PATCH 01/13] Adding patch release --- capa/kustomization.yaml | 1 + capa/v25.1.0/README.md | 30 ++++++++ capa/v25.1.0/announcement.md | 3 + capa/v25.1.0/kustomization.yaml | 2 + capa/v25.1.0/release.yaml | 124 ++++++++++++++++++++++++++++++++ 5 files changed, 160 insertions(+) create mode 100644 capa/v25.1.0/README.md create mode 100644 capa/v25.1.0/announcement.md create mode 100644 capa/v25.1.0/kustomization.yaml create mode 100644 capa/v25.1.0/release.yaml diff --git a/capa/kustomization.yaml b/capa/kustomization.yaml index 94632e693..f55378cdd 100644 --- a/capa/kustomization.yaml +++ b/capa/kustomization.yaml @@ -5,5 +5,6 @@ resources: - v25.0.0-alpha.2 - v25.0.0-alpha.3 - v25.0.0 +- v25.1.0 transformers: - releaseNotesTransformer.yaml diff --git a/capa/v25.1.0/README.md b/capa/v25.1.0/README.md new file mode 100644 index 000000000..ed9941219 --- /dev/null +++ b/capa/v25.1.0/README.md @@ -0,0 +1,30 @@ +# :zap: Giant Swarm Release v25.1.0 for CAPA :zap: + +Introduces the new `giantswarm-cluster-suite` app and provides general improvements. + +## Change details + +### giantswarm-cluster-suite [0.1.1](https://github.com/giantswarm/giantswarm-cluster-suite/releases/tag/v0.1.17) + +#### Added +- Create `giantswarm` Namespace when it does not already exist. +- Create `giantswarm-critical` PriorityClass when it does not already exists. + +### security-bundle [1.7.1](https://github.com/giantswarm/security-bundle/releases/tag/v1.7.1) + +#### Changed + +- Bump `kyverno` app to the v0.17.14 version. +- Bump `starboard-exporter` app to the v0.7.11 version. + +### prometheus-blackbox-exporter [0.4.2](https://github.com/giantswarm/prometheus-blackbox-exporter-app/releases/tag/v0.4.2) + +#### Fix + +- Remove duplicated team label. + +### irsa-servicemonitors [0.1.0](https://github.com/giantswarm/irsa-servicemonitors-app/releases/tag/v0.1.0) + +#### Fix + +- Remove duplicated team label. diff --git a/capa/v25.1.0/announcement.md b/capa/v25.1.0/announcement.md new file mode 100644 index 000000000..a93cacde5 --- /dev/null +++ b/capa/v25.1.0/announcement.md @@ -0,0 +1,3 @@ +**Workload cluster release v25.1.0 for CAPA is available**. We are happy to announce our first `Cluster API for AWS` (CAPA) release v25. + +Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-aws/releases/capa-v25.1.0/). diff --git a/capa/v25.1.0/kustomization.yaml b/capa/v25.1.0/kustomization.yaml new file mode 100644 index 000000000..2c64a5163 --- /dev/null +++ b/capa/v25.1.0/kustomization.yaml @@ -0,0 +1,2 @@ +resources: +- release.yaml diff --git a/capa/v25.1.0/release.yaml b/capa/v25.1.0/release.yaml new file mode 100644 index 000000000..e6a3c4687 --- /dev/null +++ b/capa/v25.1.0/release.yaml @@ -0,0 +1,124 @@ +apiVersion: release.giantswarm.io/v1alpha1 +kind: Release +metadata: + name: aws-25.1.0 +spec: + apps: + - name: aws-ebs-csi-driver + version: 2.30.1 + dependsOn: + - cloud-provider-aws + - name: aws-ebs-csi-driver-servicemonitors + version: 0.1.0 + dependsOn: + - cert-manager + - name: aws-pod-identity-webhook + version: 1.16.0 + dependsOn: + - cert-manager + - name: capi-node-labeler + version: 0.5.0 + - name: cert-exporter + version: 2.9.0 + dependsOn: + - kyverno + - name: cert-manager + version: 3.7.6 + dependsOn: + - prometheus-operator-crd + - name: chart-operator-extensions + version: 1.1.2 + dependsOn: + - prometheus-operator-crd + - name: cilium + version: 0.24.0 + - name: cilium-crossplane-resources + version: 0.1.0 + - name: cilium-servicemonitors + version: 0.1.2 + dependsOn: + - prometheus-operator-crd + - name: cloud-provider-aws + version: 1.25.14-gs3 + dependsOn: + - vertical-pod-autoscaler-crd + - name: cluster-autoscaler + version: 1.27.3-gs9 + dependsOn: + - kyverno + - name: coredns + version: 1.21.0 + dependsOn: + - cilium + - name: etcd-k8s-res-count-exporter + version: 1.10.0 + dependsOn: + - kyverno + - name: external-dns + version: 3.1.0 + dependsOn: + - prometheus-operator-crd + - name: giantswarm-cluster-suite + version: 0.1.0 + - name: irsa-servicemonitors + version: 0.1.0 + dependsOn: + - cert-manager + - name: k8s-audit-metrics + version: 0.9.0 + dependsOn: + - kyverno + - name: k8s-dns-node-cache + version: 2.6.2 + dependsOn: + - kyverno + - name: metrics-server + version: 2.4.2 + dependsOn: + - kyverno + - name: net-exporter + version: 1.19.0 + dependsOn: + - prometheus-operator-crd + - name: network-policies + version: 0.1.1 + catalog: cluster + dependsOn: + - cilium + - name: node-exporter + version: 1.19.0 + dependsOn: + - kyverno + - name: observability-bundle + version: 1.3.4 + dependsOn: + - coredns + - name: prometheus-blackbox-exporter + version: 0.4.2 + dependsOn: + - prometheus-operator-crd + - name: security-bundle + version: 1.7.1 + catalog: giantswarm + dependsOn: + - prometheus-operator-crd + - name: teleport-kube-agent + version: 0.9.0 + - name: vertical-pod-autoscaler + version: 5.2.2 + dependsOn: + - prometheus-operator-crd + - name: vertical-pod-autoscaler-crd + version: 3.1.0 + components: + - name: cluster-aws + catalog: cluster + version: 1.1.0 + - name: flatcar + version: 3815.2.2 + - name: flatcar-variant + version: 1.0.0 + - name: kubernetes + version: 1.25.16 + date: "2024-07-03T18:00:00Z" + state: active From be700643dcfa2c42ba7983f932a25bc9882a58c4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C5=81ukasz=20Jakimczuk?= Date: Wed, 3 Jul 2024 14:08:04 +0200 Subject: [PATCH 02/13] Remove nonexisting paths --- capa/kustomization.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/capa/kustomization.yaml b/capa/kustomization.yaml index f55378cdd..d00784ed5 100644 --- a/capa/kustomization.yaml +++ b/capa/kustomization.yaml @@ -1,9 +1,6 @@ commonAnnotations: giantswarm.io/docs: https://docs.giantswarm.io/ui-api/management-api/crd/releases.release.giantswarm.io/ resources: -- v25.0.0-alpha.1 -- v25.0.0-alpha.2 -- v25.0.0-alpha.3 - v25.0.0 - v25.1.0 transformers: From bb699823585d4898b0be5a2a0bebae8c6365a082 Mon Sep 17 00:00:00 2001 From: Tobiasz Kukawka Date: Wed, 3 Jul 2024 14:48:59 +0200 Subject: [PATCH 03/13] Update release.yaml --- capa/v25.1.0/release.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/capa/v25.1.0/release.yaml b/capa/v25.1.0/release.yaml index e6a3c4687..86ba4ebe4 100644 --- a/capa/v25.1.0/release.yaml +++ b/capa/v25.1.0/release.yaml @@ -23,7 +23,7 @@ spec: dependsOn: - kyverno - name: cert-manager - version: 3.7.6 + version: 3.7.7 # aligning with Vintage, fixing bugs dependsOn: - prometheus-operator-crd - name: chart-operator-extensions @@ -31,7 +31,7 @@ spec: dependsOn: - prometheus-operator-crd - name: cilium - version: 0.24.0 + version: 0.25.1 # as per Cabbage request fixing bugs - name: cilium-crossplane-resources version: 0.1.0 - name: cilium-servicemonitors @@ -115,7 +115,7 @@ spec: catalog: cluster version: 1.1.0 - name: flatcar - version: 3815.2.2 + version: 3815.2.5 # CVEs OpenSSH fixed - name: flatcar-variant version: 1.0.0 - name: kubernetes From f5569891173c63f402e391e20d2fb22ef75c56ef Mon Sep 17 00:00:00 2001 From: Jose Armesto Date: Tue, 9 Jul 2024 08:56:34 +0200 Subject: [PATCH 04/13] Bump cert-manager version to fix bug --- capa/v25.1.0/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capa/v25.1.0/release.yaml b/capa/v25.1.0/release.yaml index 86ba4ebe4..143f1bb1e 100644 --- a/capa/v25.1.0/release.yaml +++ b/capa/v25.1.0/release.yaml @@ -23,7 +23,7 @@ spec: dependsOn: - kyverno - name: cert-manager - version: 3.7.7 # aligning with Vintage, fixing bugs + version: 3.7.9 # aligning with Vintage, fixing bugs dependsOn: - prometheus-operator-crd - name: chart-operator-extensions From d6b7f046aeb98d22da55f9bda1ac66ee27487f53 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C5=81ukasz=20Jakimczuk?= Date: Tue, 9 Jul 2024 10:32:56 +0200 Subject: [PATCH 05/13] Removing Honeybadger changes --- capa/v25.1.0/README.md | 29 ----------------------------- capa/v25.1.0/release.yaml | 8 +++----- 2 files changed, 3 insertions(+), 34 deletions(-) diff --git a/capa/v25.1.0/README.md b/capa/v25.1.0/README.md index ed9941219..e1323cbc2 100644 --- a/capa/v25.1.0/README.md +++ b/capa/v25.1.0/README.md @@ -1,30 +1 @@ # :zap: Giant Swarm Release v25.1.0 for CAPA :zap: - -Introduces the new `giantswarm-cluster-suite` app and provides general improvements. - -## Change details - -### giantswarm-cluster-suite [0.1.1](https://github.com/giantswarm/giantswarm-cluster-suite/releases/tag/v0.1.17) - -#### Added -- Create `giantswarm` Namespace when it does not already exist. -- Create `giantswarm-critical` PriorityClass when it does not already exists. - -### security-bundle [1.7.1](https://github.com/giantswarm/security-bundle/releases/tag/v1.7.1) - -#### Changed - -- Bump `kyverno` app to the v0.17.14 version. -- Bump `starboard-exporter` app to the v0.7.11 version. - -### prometheus-blackbox-exporter [0.4.2](https://github.com/giantswarm/prometheus-blackbox-exporter-app/releases/tag/v0.4.2) - -#### Fix - -- Remove duplicated team label. - -### irsa-servicemonitors [0.1.0](https://github.com/giantswarm/irsa-servicemonitors-app/releases/tag/v0.1.0) - -#### Fix - -- Remove duplicated team label. diff --git a/capa/v25.1.0/release.yaml b/capa/v25.1.0/release.yaml index 143f1bb1e..2b4b874eb 100644 --- a/capa/v25.1.0/release.yaml +++ b/capa/v25.1.0/release.yaml @@ -58,10 +58,8 @@ spec: version: 3.1.0 dependsOn: - prometheus-operator-crd - - name: giantswarm-cluster-suite - version: 0.1.0 - name: irsa-servicemonitors - version: 0.1.0 + version: 0.0.1 dependsOn: - cert-manager - name: k8s-audit-metrics @@ -94,11 +92,11 @@ spec: dependsOn: - coredns - name: prometheus-blackbox-exporter - version: 0.4.2 + version: 0.4.1 dependsOn: - prometheus-operator-crd - name: security-bundle - version: 1.7.1 + version: 1.7.0 catalog: giantswarm dependsOn: - prometheus-operator-crd From ae9c8d7fcbe5e17ab755eabf0872fe06866f1981 Mon Sep 17 00:00:00 2001 From: paurosello Date: Wed, 10 Jul 2024 10:21:06 +0200 Subject: [PATCH 06/13] Update release.yaml --- capa/v25.1.0/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capa/v25.1.0/release.yaml b/capa/v25.1.0/release.yaml index 2b4b874eb..f9a9c476b 100644 --- a/capa/v25.1.0/release.yaml +++ b/capa/v25.1.0/release.yaml @@ -111,7 +111,7 @@ spec: components: - name: cluster-aws catalog: cluster - version: 1.1.0 + version: 1.0.1 - name: flatcar version: 3815.2.5 # CVEs OpenSSH fixed - name: flatcar-variant From bacccc74931e1c14fd3d2b159728d44d019dd149 Mon Sep 17 00:00:00 2001 From: Tobiasz Kukawka Date: Wed, 10 Jul 2024 14:33:07 +0200 Subject: [PATCH 07/13] Update release.yaml --- capa/v25.0.0/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capa/v25.0.0/release.yaml b/capa/v25.0.0/release.yaml index 3c34f211c..94b5ad7fc 100644 --- a/capa/v25.0.0/release.yaml +++ b/capa/v25.0.0/release.yaml @@ -119,4 +119,4 @@ spec: - name: kubernetes version: 1.25.16 date: "2024-06-20T18:00:00Z" - state: active + state: deprecated From 1eb4b1ca223627dfe585eebae2655f8abecc5969 Mon Sep 17 00:00:00 2001 From: Tobiasz Kukawka Date: Wed, 10 Jul 2024 16:12:50 +0200 Subject: [PATCH 08/13] Update announcement.md --- capa/v25.1.0/announcement.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/capa/v25.1.0/announcement.md b/capa/v25.1.0/announcement.md index a93cacde5..cef2c7497 100644 --- a/capa/v25.1.0/announcement.md +++ b/capa/v25.1.0/announcement.md @@ -1,3 +1 @@ -**Workload cluster release v25.1.0 for CAPA is available**. We are happy to announce our first `Cluster API for AWS` (CAPA) release v25. - -Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-aws/releases/capa-v25.1.0/). +**Workload cluster release v25.1.0 for CAPA is available**. This release updates the components, keeping up to date with Vintage AWS v20.1.x series. Several improvements for Vintage to CAPA migration have also been included. Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-aws/releases/capa-v25.1.0/). From cbc27a0c3fc0ec249e5aadaf677801cb4cc2e091 Mon Sep 17 00:00:00 2001 From: Tobiasz Kukawka Date: Wed, 10 Jul 2024 16:13:59 +0200 Subject: [PATCH 09/13] Update announcement.md --- capa/v25.1.0/announcement.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capa/v25.1.0/announcement.md b/capa/v25.1.0/announcement.md index cef2c7497..f45587dbb 100644 --- a/capa/v25.1.0/announcement.md +++ b/capa/v25.1.0/announcement.md @@ -1 +1 @@ -**Workload cluster release v25.1.0 for CAPA is available**. This release updates the components, keeping up to date with Vintage AWS v20.1.x series. Several improvements for Vintage to CAPA migration have also been included. Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-aws/releases/capa-v25.1.0/). +**Workload cluster release v25.1.0 for CAPA is available**. This release updates the components, keeping them up to date with Vintage AWS v20.1.x series. Several improvements for Vintage to CAPA migration have also been included. Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-aws/releases/capa-v25.1.0/). From df109e7b320923115addeb8edc1d7a3f1842e61c Mon Sep 17 00:00:00 2001 From: Tobiasz Kukawka Date: Wed, 10 Jul 2024 16:19:58 +0200 Subject: [PATCH 10/13] Update README.md --- capa/v25.1.0/README.md | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/capa/v25.1.0/README.md b/capa/v25.1.0/README.md index e1323cbc2..744187cf1 100644 --- a/capa/v25.1.0/README.md +++ b/capa/v25.1.0/README.md @@ -1 +1,43 @@ # :zap: Giant Swarm Release v25.1.0 for CAPA :zap: + +This release updates the components, keeping them upto date with Vintage AWS v20.1.x series. Several improvements for Vintage to CAPA migration have also been included. + +## Change details compared to CAPA 25.0.0 + +### cluster-aws [1.0.1]() + +#### Added +- Add the Management Cluster name as a tag to the AWS resources created by CAPA. +- Add the node pool name as a tag to the AWS resources associated with the node pool. + +#### Changed +- Update cluster chart to 0.33.1 + + +### cert-manager [3.7.9](https://github.com/giantswarm/cert-manager-app/releases/tag/v3.7.9) + +#### Fix +- Remove quotes from acme-http01-solver-image argument. The quotes are used when looking up the image which causes an error. + +#### Update +- Improves container security by setting `runAsGroup` and `runAsUser` greater than zero for all deployments. + +### containerlinux [3815.2.5](https://www.flatcar-linux.org/releases/#release-3815.2.5) + + _Changes since **Stable 3815.2.4**_ + +#### Security fixes: + + - openssh ([CVE-2024-6387](https://nvd.nist.gov/vuln/detail/CVE-2024-6387)) + +#### Updates: + + - Linux ([6.1.96](https://lwn.net/Articles/979851)) + - openssh ([9.7_p1](https://www.openssh.com/txt/release-9.7)) + +### cilium [0.25.1](https://github.com/giantswarm/cilium-app/releases/tag/v0.25.1) + +#### Changed +- Fix regression setting Policy BPF Max map policyMapMax back to 65536 from 16384. +- Upgrade cilium to v1.15.6. + From 1d2de8c203e55e40ab63a4bae065d85635854b2b Mon Sep 17 00:00:00 2001 From: Pau Rosello Date: Mon, 15 Jul 2024 11:03:50 +0200 Subject: [PATCH 11/13] update cluster-aws --- capa/v25.1.0/README.md | 7 +++++-- capa/v25.1.0/release.yaml | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/capa/v25.1.0/README.md b/capa/v25.1.0/README.md index 744187cf1..ebfb290ea 100644 --- a/capa/v25.1.0/README.md +++ b/capa/v25.1.0/README.md @@ -4,14 +4,17 @@ This release updates the components, keeping them upto date with Vintage AWS v20 ## Change details compared to CAPA 25.0.0 -### cluster-aws [1.0.1]() +### cluster-aws [1.1.0](https://github.com/giantswarm/cluster-aws/releases/tag/v1.1.0) + +### Fixed +- Fixed China IRSA suffix #### Added - Add the Management Cluster name as a tag to the AWS resources created by CAPA. - Add the node pool name as a tag to the AWS resources associated with the node pool. #### Changed -- Update cluster chart to 0.33.1 +- Update cluster chart to 0.35.0 ### cert-manager [3.7.9](https://github.com/giantswarm/cert-manager-app/releases/tag/v3.7.9) diff --git a/capa/v25.1.0/release.yaml b/capa/v25.1.0/release.yaml index f9a9c476b..2b4b874eb 100644 --- a/capa/v25.1.0/release.yaml +++ b/capa/v25.1.0/release.yaml @@ -111,7 +111,7 @@ spec: components: - name: cluster-aws catalog: cluster - version: 1.0.1 + version: 1.1.0 - name: flatcar version: 3815.2.5 # CVEs OpenSSH fixed - name: flatcar-variant From 857fc790a94ae205c939e0d8f06dbc8ed0e60a11 Mon Sep 17 00:00:00 2001 From: Tobiasz Kukawka Date: Wed, 24 Jul 2024 15:38:37 +0200 Subject: [PATCH 12/13] Update announcement.md --- capa/v25.1.0/announcement.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capa/v25.1.0/announcement.md b/capa/v25.1.0/announcement.md index f45587dbb..6ea212f0d 100644 --- a/capa/v25.1.0/announcement.md +++ b/capa/v25.1.0/announcement.md @@ -1 +1 @@ -**Workload cluster release v25.1.0 for CAPA is available**. This release updates the components, keeping them up to date with Vintage AWS v20.1.x series. Several improvements for Vintage to CAPA migration have also been included. Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-aws/releases/capa-v25.1.0/). +**Workload cluster release v25.1.0 for CAPA is available**. This release updates the components, keeping them up to date with Vintage AWS v20.1.x series. Several improvements for Vintage to CAPA migration have also been included. Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-capa/releases/aws-25.1.0/). From a2b470582a1b945fcd4fe8186d31ea3b489850a6 Mon Sep 17 00:00:00 2001 From: Tobiasz Kukawka Date: Wed, 24 Jul 2024 15:40:40 +0200 Subject: [PATCH 13/13] Update README.md --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 22f757c53..673a33457 100644 --- a/README.md +++ b/README.md @@ -22,6 +22,8 @@ to all Giant Swarm installations. - v25 - v25.0 - [v25.0.0](https://github.com/giantswarm/releases/tree/master/capa/v25.0.0) + - v25.1.0 + - [v25.1.0](https://github.com/giantswarm/releases/tree/master/capa/v25.1.0) - v20 - v20.1 - [v20.1.4](https://github.com/giantswarm/releases/tree/master/aws/v20.1.4)