deckhouse/deckhouse v1.29.0-alpha.3

Deckhouse v1.29.0-alpha.3

on GitHub

Changelog v1.29.0-alpha.3 since v1.28.0

Components that will be restarted during the update

• Grafana
  
• bashible-api-server
  
• control-plane-manager
  
• cert-manager
  
• chrony
  
• upmeter
  

Significant Changes

Bump Grafana version to fix zero-day path

The certmanager.k8s.io/v1alpha1 API version is no longer supported

Other Changes

[bashible]

• fixes
  
  • fix incorrect auth value for containerd config only
    
    • Pull request
      
  • Cluster bootstrap on Azure works for Ubuntu 20.04
    
    • Pull request
      

[cert-manager]

• features
  
  • Upgrade cert-manager to v1.6.1
    
    • Pull request
      
    • NOTE! cert-manager controller will be restarted. Cert-manager's CRD with version v1/alphaX is no longer supported
      
  • Instructions for connection Vault with cert-manager
    
    • Pull request
      
    • NOTE! only docs change
      

[chrony]

• fixes
  
  • Fixed rollout restart time of chrony daemonset.
    
    • Pull request
      
    • NOTE! chrony module will be restarted.
      

[deckhouse]

• fixes
  
  • clear values cache when module disabled
    
    • Pull request
      
  • Move context generation into bashible-apiserver
    
    • Pull request
      
    • NOTE! bashible-apiserver will restart
      
  • Fix Deckhouse Manual update mode.
    
    • Pull request
      

[deckhouse-web]

• fixes
  
  • Added missing 'ca.crt' field to internal values schema
    
    • Pull request
      

[log-shipper]

• features
  
  • Support storing data in Elasticsearch datastreams
    
    • Pull request
      
• fixes
  
  • Fix default CRD values
    
    • Pull request
      
    • NOTE! ClusterLogDestination created in v1.29.0-alpha should be recreated
      

[monitoring-kubernetes]

• fixes
  
  • Fixed description for alert NTPDaemonOnNodeDoesNotSynchronizeTime.
    
    • Pull request
      
    • NOTE! We only use the Deckhouse chrony module, so a description about another NTP daemons is not needed.
      

[node-manager]

• features
  
  • Added delete pods from node that requests disruption update when pod eviction is failed.
    
    • Pull request
      

[prometheus]

• features
  
  • Improved Prometheus FAQ about Lens access.
    
    • Pull request
      
• fixes
  
  • Bump Grafana version to fix zero-day path traversal bug (CVE-2021-43798)
    
    • Pull request
      

[secret-copier]

• features
  
  • Implement create–or–update logic for proper reconcile.
    
    • Pull request
      
    • NOTE! Add support of namespace label-selector in secret-copier.deckhouse.io/target-namespace-selector annotation value.
      

[yandex-cloud-provider]

• fixes
  
  • Add additionalExternalNetworkIDs config in OpenAPI spec, because Deckhouse does not converge if this field exists in a cluster.
    
    • Pull request
      

[‎ingress-nginx‎]

• features
  
  • Add the ability to set a default certificate.
    
    • Pull request