v0.51.0
Release date: 19 Dec 2024
Update note 1: labels
and annotations
inheritance is deprecated and will be remove at upcoming v0.52.0
release. It's recommend to move all needed labels and annotations to the spec.managedMetadata
fields.
Operator will preserve annotations
, but any changes to it will be ignored. labels
inherited from CRD.metata.labels
will be removed after upgrade to v0.52.0
.
Update note 2: VMAuth.spec.unauthorizedAccessConfig
is deprecated in favour of VMAuth.spec.unauthorizedUserAccessSpec
. Operator still serves deprecated fields until v1.0
release.
Update note 3: The following fields: [default_url,tlsConfig,discover_backend_ips,headers,response_headers,retry_status_codes,max_concurrent_requests,load_balancing_policy,drop_src_path_prefix_parts]
are deprecated at VMAuth.spec.
in favour of VMAuth.spec.unauthorizedUserAccessSpec
. Operator still serves deprecated fields until v1.0
release.
- vmcluster: add
"app.kubernetes.io/part-of": "vmcluster"
label to the objects generated forVMCluster
components. It helps to use labels selectors to identify objects belong to the cluster. - vmauth: adds new
spec
settingunauthorizedUserAccessSpec
that replacesunauthorizedAccessConfig
and inlined fields fromVMUserConfigOptions
. See this issue for details. - vmuser: fix missing options
src_headers
,src_query_args
anddiscover_backend_ips
in the generate vmauth config when specified undervmuserSpec.targetRefs
. - vmuser: adds
dump_request_on_errors
tovmuser.spec
. See this PR for details. - vmoperator: add
annotations
to thePodDisruptionBudget
andHorizontalPodAutoscaler
objects generated. - vmoperator: fix the behaviors of
vmagentSpec.ScrapeConfigSelector
andvmagentSpec.scrapeConfigNamespaceSelector
whenvmagentSpec.selectAllByDefault=false
. Previously, the VMScrapeConfig could be ignored. - vmoperator: fix the behaviors of
xxxNamespaceSelector
whenvmagentSpec.selectAllByDefault=true
. See this doc for detailed rules. - vmoperator: add support of
license.forceOffile
andlicense.reloadInterval
options. See this doc for the details. - vmoperator: properly add
securityContext
to thecontainers
withuseStrictSecurity: false
. See this issue for details. - vmoperator: Add new default security option to
containers
with enableduseStrictSecurity: true
. It setsprivileged: false
. - vmoperator: Provided manifest without webhook
- vmoperator: change structured logging. Move irrelevant fields into the
msg
body, changelogger
field to properly displaycontroller.CRD
name. See this issue for details. - vmoperator: Updated default versions for VM apps to v1.108.1 version
- api: add new field
managedMetadata
toVMCluster.spec
,VMAgent.spec
,VMAlert.spec
,VMAuth.spec
,VMAlertmanager.Spec
,VMSingle.spec
andVLogs.spec
. It controlslabels
andannotations
added to the objects created operator (such asDeployment
). See this issue for details. - api: upgrade Kubernetes(v0.31.3) and controller-runtime(v1.19.3) dependencies. Remove versions pin with
replace
directive fromgo.mod
. - api: rework
status
sub-resource forVMUser
,VMAlertmanager
,VMRule
andVMScrape.*
objects. Add newconditions
field, that represents resources conditions. See this issue for details.