CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project's packages adheres to Semantic Versioning.

Unreleased

3.2.1 - 2024-03-05

Fixed

• Use separate rest configs for different Kubernetes clients.

3.2.0 - 2024-02-27

Added

• Added --service.controller.resyncperiod daemon flag that can be controller via .controller.resyncPeriod Helm value. Controls the duration after which a complete sync with all known runtime objects the controller watches is performed. Defaults to 5m.

3.1.3 - 2024-01-29

Fixed

• Move pss values under the global property

Changed

• Use base images from gsoci.azurecr.io

3.1.2 - 2023-12-20

Changed

• Configure gsoci.azurecr.io as the default container image registry.

3.1.1 - 2023-12-05

Changed

• Configure gsoci.azurecr.io as the registry to use by default

3.1.0 - 2023-10-19

Changed

• Force-disable PSP-related resources when global.podSecurityStandards.enforced value is true.

3.0.0 - 2023-10-04

Removed

• Removed giantswarm.io/monitoring: "true" label from the Service resource. To get metrics chart-operator should be from now on used in conjunction with chart-operator-extensions version v1.1.1 or later to deploy ServiceMonitor resource for it. It was split up as chart-operator is one of the first component to get into a cluster that will deploy most other things, for example Prometheus that will eventually actually deploy the CRD for ServiceMonitor.

2.35.2 - 2023-09-26

Fixed

• Fixed default values for .proxy and .cluster.proxy values and updated Helm values schema accordingly.

2.35.1 - 2023-09-21

Changed

• Changed pod taint toleration to only tolerate NotReady for CAPI.

2.35.0 - 2023-05-04

Changed

• Disable PSPs for k8s 1.25 and newer.

2.34.1 - 2023-05-02

Added

• Add Kyverno PolicyExceptions for necessary capabilities normally prohibited by PSS policies.

2.34.0 - 2023-02-14

Changed

• Selecting private Helm client on demand for some operations.

2.33.2 - 2022-12-16

2.33.1 - 2022-12-16

Added

• New error for values schema validation.

Changed

• Use transitional errors coming from running Helm in the Chart CR status.

2.33.0 - 2022-11-16

Added

• Add support to run in private cloud clusters, which cannot provide any working externalDNSIP.

2.32.0 - 2022-11-15

Added

• Support for running behind a proxy.
  • HTTP_PROXY,HTTPS_PROXY and NO_PROXY are set as environment variables in deployment/chart-operator if defined in values.yaml.
• Support for using cluster-apps-operator generated cluster.proxy values.

2.31.0 - 2022-10-07

Added

• Add internal upgrade step on installation for Helm charts marked by annotation.

2.30.0 - 2022-09-23

Added

• Add suport for timeouts fields in the Chart CR.

Changed

• Add support for new control-plane label in k8s 1.24.

2.29.0 - 2022-08-12

• Reconfigure VPA autoscaler to react correctly to pod resource ceilings

2.28.0 - 2022-08-09

Changed

• Add pre-upgrade helm annotation to giantswarm-critical PriorityClass in order to fix upgrade issues.

2.27.0 - 2022-07-29

Added

• Ensure the giantswarm-critical PriorityClass is created first on initial installation.

2.26.0 - 2022-07-20

Changed

• Use 127.0.0.1 as KUBERNETES_SERVICE_HOST when bootstrapMode is enabled.

2.25.0 - 2022-07-04

Changed

• Tighten pod and container security contexts for PSS restricted policies.
• Use downward API to set deployment env var KUBERNETES_SERVICE_HOST to status.hostIP.
• Change initialBootstrapMode configuration value to bootstrapMode.
• Use private Helm client for installing app-operators from control-plane-test-catalog

Added

• Allow to set api server pod port when enabling initialBootstrapMode.

2.24.1 - 2022-06-22

Changed

• Update helmclient to v4.10.1.

2.24.0 - 2022-06-09

Changed

• Add chart-pull-failed error to differentiate between issues when pulling chart tarball and other problems.

Fixed

• Fix missing PriorityClass issue.

2.23.0 - 2022-06-06

Changed

• Always create giantswarm-critical priority class if it does not exist.
• Add initialBootstrapMode flag to allow deploying CNI as managed apps.

2.22.0 - 2022-05-30

Added

• Split Helm client into private Helm client for giantswarm-namespaced apps and public Helm client for rest of the apps.

2.21.1 - 2022-05-19

Added

• Add Helm release failure reason when it is known, and if there is a currently successfully released version

2.21.0 - 2022-04-07

Changed

• Update helmclient to v4.10.0.

2.20.1 - 2022-03-15

Changed

• Use apptestctl to install CRDs in integration tests to avoid hitting GitHub rate limits.

Fixed

• Fix status resource to use Helm release status if it exists.

2.20.0 - 2021-12-15

Changed

• Update Helm to v3.6.3.
• Use controller-runtime client to remove CAPI dependency.

Removed

• Remove unused helm 2 release collector.

2.19.1 - 2021-10-20

Changed

• Deployment hostNetwork is enabled or not depending on chartOperator.cni.install value.

2.19.0 - 2021-08-13

Removed

• Remove tillermigration resource now Helm 3 migration is complete.

2.18.1 - 2021-08-05

Changed

• Increase memory limit for deploying large charts in workload clusters.

2.18.0 - 2021-06-21

Added

• Add releasemaxhistory resource which ensures we retry at a reduced rate when there are repeated failed upgrades.

Changed

• Upgrade Helm release when failed even if version or values have not changed to handle situations like failed webhooks where we should retry.

2.17.0 - 2021-06-09

Changed

• Prepare helm values to configuration management.
• Update architect-orb to v3.0.0.

Fixed

• Improve status message when helm release has failed max number of attempts.

2.16.0 - 2021-06-03

Changed

For CAPI clusters:

• Add tolerations to start on NotReady nodes for installing CNI.
• Create giantswarm-critical priority class.
• Use host network to allow installing CNI packaged as an app.

2.15.0 - 2021-05-20

Added

• Proxy support in helm template.

2.14.0 - 2021-04-30

Changed

• Cancel the release resource when the manifest object already exists.
• Cancel the release resource when helm returns an unknown error.

2.13.1 - 2021-04-06

Fixed

• Updated OperatorKit to v4.3.1 for Kubernetes 1.20 support.

2.13.0 - 2021-03-31

Changed

• giantswarm-critical PriorityClass only managed when E2E.

2.12.0 - 2021-03-26

Changed

• Set docker.io as the default registry
• Pass RESTMapper to helmclient to reduce the number of REST API calls.
• Updated Helm to v3.5.3.

2.11.0 - 2021-03-19

Added

• Updating namespace metadata using namespaceConfig in Chart CRs.

2.10.0 - 2021-03-17

Added

• Pause Chart CR reconciliation when it has chart-operator.giantswarm.io/paused=true annotation.

Changed

• Deploy giantswarm-critical PriorityClass when it's not found.

2.9.0 - 2021-02-03

Added

• Use diff key when logging differences between the current and desired release.

Fixed

• Stop updating Helm release if it has failed the previous 5 attempts.

2.8.0 - 2021-01-27

Added

• Add support for skip CRD flag when installing Helm releases.

2.7.1 - 2021-01-13

Fixed

• Only create VPA if autoscaling API group is present.

2.7.0 - 2021-01-07

Added

• Added last reconciled timestamp as metrics.

2.6.0 - 2020-12-21

Added

• Print difference between current release and desired release.

Changed

• Updated Helm to v3.4.2.

2.5.2 - 2020-12-07

Added

• Add Vertical Pod Autoscaler support.

2.5.1 - 2020-12-01

Fixed

• Fix comparison of last deployed and revision optional fields in status resource.
• Set memory limit and reduce requests.

2.5.0 - 2020-11-09

Added

• Validate the cache in helmclient to avoid state requests when pulling tarballs.
• Call status webhook with token values.

Fixed

• Update apiextensions to v3 and replace CAPI with Giant Swarm fork.

2.4.0 - 2020-10-29

Added

• Call status webhook when webhook annotation is present.

Removed

• Remove chartmigration resource as migration from chartconfig to chart CRs is complete.

2.3.5 - 2020-10-13

Fixed

• Stop repeating helm upgrade for the failed helm release.

2.3.4 - 2020-10-01

Added

• Added release name as a label into the event count metrics.

2.3.3 - 2020-09-29

Fixed

• Updated Helm to v3.3.4.
• Updated Kubernetes dependencies to v1.18.9.
• Update deployment annotation to use checksum instead of helm revision to reduce how often pods are rolled.
• Increase wait timeout for accessing Kubernetes API from 10s to 120s.

2.3.2 - 2020-09-22

Added

• Added event count metrics for delete, install, rollback and update of Helm releases.

Fixed

• Fix structs merging error in helmclient.

Security

• Updated Helm to v3.3.3.

2.3.1 - 2020-09-04

Added

• Add monitoring labels.

Changed

• Add namespace to logging message.

Fixed

• Remove memory limits from deployment.

2.3.0 - 2020-08-24

Changed

• Using default DNS policy for control planes.

2.2.1 - 2020-08-19

Changed

• Fixed the timeout value for the namespace resource.

2.2.0 - 2020-08-19

Changed

• Creating namespace before helm operations.

2.1.0 - 2020-08-18

Changed

• Updated Helm to v3.3.0.

2.0.0 - 2020-08-12

Changed

• Updated backward incompatible Kubernetes dependencies to v1.18.5.
• Updated Helm to v3.2.4.
• Fix the rollback in a loop problem.

1.0.7 - 2020-08-05

Changed

• Rollback the helm release in pending-install, pending-upgrade.

1.0.6 - 2020-07-24

Changed

• Disable force upgrades since recreating resources is not supported.
• Graduate Chart CRD to v1.
• Upgrade to operatorkit 1.2.0.

1.0.5 - 2020-07-15

Changed

• Enable force upgrades when chart CR annotation is present.

1.0.4 - 2020-07-08

Changed

• Update MD5 Hash only if chart-operator upgrade the release successfully.
• Make kubernetes wait timeout configurable when installing and updating releases.
• Set release revision in CR status.

v1.0.3 2020-06-16

Changed

• Fixed PodSecurityPolicy compatibility problem.

v1.0.2 2020-06-04

Changed

• Disabled force-upgrade from helmclient.
• Canceling the release resource when migration is done yet.

v1.0.1 2020-05-26

Changed

• Using helmclient v1.0.1 for security fix.
• Cancel the release resource when the manifest validation failed.

v1.0.0 2020-05-18

Changed

• Updated to support Helm 3; To keep using Helm 2, please use version 0.X.X.

v0.13.0 2020-04-21

Changed

• Deploy as a unique app in app collection in control plane clusters.

v0.12.4 2020-04-15

Changed

• Always set chart CR annotations so update state calculation is accurate.
• Only update failed Helm releases if the chart values or version has changed.

v0.12.3 2020-04-09

Changed

• Fix problem pushing chart to default app catalog.

Changed

v0.12.2 2020-04-09

Changed

• Fix update state calculation and status resource for long running deployments.
• Handle 503 responses when GitHub Pages is unavailable.
• Make HTTP client timeout configurable for pulling chart tarballs in AWS China.
• Switch from dep to go modules.

v0.12.1 2020-03-10

Removed

• Remove usage of legacy chartconfig CRs in Tiller metrics.

v0.12.0 2020-03-09

Added

• Add chartmigration resource to allow legacy chartconfig controller to be removed. (#358)

Changed

• Improve reason field in chart CR status when installing a chart fails. (#359)
• Use version from chart CR when calculating desired state to reduce number of HTTP requests to pull chart tarballs. (#351)
• Wait for deleted Helm release before removing finalizer. (#360)
• Do not wait when installing or updating a Helm release takes over 3 seconds. We check progress in the next reconciliation loop. (#362)

Removed

• Remove legacy chartconfig controller. (#365)

v0.8.0

Added

• Separate network policy.

v0.7.0

Added

• Separate podsecuritypolicy.
• Security context in deployment spec with non-root user.