Kuberhealthy 2.3.0
Upgrade Instructions:
- When upgrading to this release, you must be sure the
khjobcustom resource is applied in your cluster. Without this, the check reaper will crash. If you use the Helm chart, this will be done for you automatically.
Features:
- Breaking Change: ConfigMap support for Kuberhealthy with live-reloading. #252, #482 #557 @jdowni000
- Make sure the Kuberhealthy configMap is applied and the configMap volume added is added to the Kuberhealthy deployment
- Daemonset and Deployment checks now offer nodeSelector options. #546, #547, #549 @jonnydawg
- Daemonset check refactor #515 @joshulyne
- Add appropriate timeouts throughout the check run along with respective error messages
- Add node information in the error messages
- Add exponential backoff to all kube api calls during ds check run, addressing bug #527
- Helm chart features a priorityClassName option for the Kuberhealthy deployment. #517, #530 @joshulyne
- Python client available for Kuberhealthy - external contribution by @bbkgh 🎉 #523
- Detailed Kuberhealthy installation instructions available in order to capture K8s KPIs using Kuberhealthy. #381, #542 @joshulyne
- Node Check package added for khchecks to run initial node ready checks before the actual checks run #518, #544 @joshulyne
- WaitForKuberhealthy: waits for the Kuberhealthy endpoint to be ready
- WaitForKubeProxy: waits for kube-proxy to be running and ready on the same node
- WaitForNodeAge: waits for the node age to reach a minimumNodeAge before the check runs
- Refactored khchecks: http, http-content, and dns-resolution checks to add nodeChecks before check runs #572, #576, #575 @jdowni000 @joshulyne
- Refactor kuberhealthy to get an A+ on goReport #563 @2infinitee
- Manual trigger for khchecks added by creating kuberhealthy jobs crd #584 @joshulyne
- Added chart parameter for pod disruption budgets #633 @jmatias
- Add
startingDeadlineSecondsto check reaper cronjob template #635 @isaaguilar - Custom toleration support added to Helm chart #641 @yteraoka
- Added AWS AMI Exists check to External Checks Registry #643 @mtougeron
- Allow an optional priority class name to the Daemonset check #646 @mtougeron
- New Kuberhealthy releases now trigger an automated Kuberhealthy Helm repo update #647 @chadbitzer
- PodSecurityPolicy added to helm chart #664 @czunker
New Kuberhealthy Checks:
- Image pull check: tests the availability of external image repositories #221, #516 @zjhans
- SSL handshake check and [SSL expiry check]: tests the expiry and security of SSL certificates #477 @zjhans
Bug Fixes:
- Daemonset check now gracefully handles intermittent failures when making kube api calls using exponential backoff. This addresses a bug where daemonset check falsely reports an error when etcd leader changes during ds check run. #527, #515 @joshulyne
- Fix goroutine leak from kuberhealthy watch events and refactor concurrency on external checks #533, #548 @sbueringer @integrii
- Fixes a bug where the main kuberhealthy process is blocked if a checker pod gets stuck in "pending" or "container creating". Also ensures that pods that aren't in succeeded or failed phases are evicted properly during cleanup. #447, #540 @joshulyne
- Fix for misconfigured khchecks that block the main kuberhealthy process by fetching all khchecks using unstructured objects #554 #573 @joshulyne
- Fix scratch image for Kuberhealthy, no longer giving missing /bin/sh error. Also fixed a null pointer error. #632 @integrii
- Security Context added to check-reaper pods #607 @czunker
- Fix missing ‘CurrentMaster’ field on Kuberhealthy status page #584 @joshulyne