Merge Requests integrated in this release

81 merge requests were integrated in this repo between 1.5.0 and 1.5.1.
These notes don't account for the MRs merged in secondary repos.

OpenStack ~capo

• Update Sylva Helm chart capo-contrail-bgpaas to v1.2.2 !5871 ~"renovate"
  
• [backport-1.5] fix capo-contrail-bgpaas openstackmachine finalizer removal !5745
  
• [backport-1.5] Use capo-network-settings kustomization to create the ORC network object !5769 ~"backport" ~"type::bug" (issues: #2990)
  

Baremetal ~capm3

• Update dependency metal3-io/cluster-api-provider-metal3 to v1.10.2 !5667 ~"renovate"
  
• Update Helm chart metal3 to v0.12.9 !5918 ~"renovate"
  

Monitoring

• Update Sylva Helm chart sylva-thanos-rules to v0.2.4 !5970 ~"renovate"
  
• Create the grafanaeditor and grafanaviewer roles in case of upgrade !4913 ~"area:observability" ~"area:security" ~"security"
  

Logging

• [backport-1.5] Change loki unit timeout from 5m to 10m !6407 ~"area:observability" ~"backport" (issues: #3314)
  

Observability

• Create the grafanaeditor and grafanaviewer roles in case of upgrade !4913 ~"area:security" ~"monitoring" ~"security"
  
• [release-1.5] Change timeout for thanos unit to 10m !6225 (issues: #3203)
  
• [backport-1.5] Change loki unit timeout from 5m to 10m !6407 ~"backport" ~"logging" (issues: #3314)
  

Security

• Update Helm chart kyverno to v3.4.6 !6033 ~"renovate"
  
• [backport-1.5]: Increase default NeuVector enforcer pods CPU limit !6013 (issues: #3129)
  
• Create the grafanaeditor and grafanaviewer roles in case of upgrade !4913 ~"area:observability" ~"monitoring"
  

Bug Fixes

• [backport-1.5] Add missing substitution for Grafana certificate key !6279
  

Other

• Update dependency canonical/cluster-api-k8s to v0.5.0 !5996 (issues: #3097)
  
• [backport-1.5] Fix rancher-turtle deployment !5744 (issues: #2983)
  
• [backport-1.5] Assign the grafanaadmin role to the infra-users group instead of sylva-admin user !5762 (issues: #2951)
  
• [backport-1.5] Bump the k8s-gateway version !5781 (issues: #2995)
  
• [backport-1.5] CI: increase time for debug-on-exit, increase deployment job timeouts !5798
  
• [backport-1.5] keep kyverno-policy-rancher-webhook-ha after upgrades !5784 (issues: #3012)
  
• [backport 1.5] Use rke2 etcd backup configuration and specialize the backup-etcd unit to kubeadm !5795 (issues: #3001)
  
• [backport-1.5]:Adding wait for neuvector selector to avoid transient failure due to timing !5858 ~"area:CI" (issues: #3036)
  
• [backport-1.5] Increase cnpg archive_timeout !5923
  
• [backport-1.5] Fix rancher-webhook drain loop by removing unschedulable toleration !5636 (issues: #2939)
  
• [backport-1.5]: Fix intermittent playwright test failures in test_neuvector_sso caused by timing issues during page initialization !5926 ~"area:CI" ~"backport" (issues: #3058)
  
• [backport-1.5] Add HealthChecks on monitoring unit !5959 (issues: #3070)
  
• [backport-1.5] Set priorityClass on prometheus pods and change memory/retention period !5978
  
• [backport-1.5] workload-cluster: validating-admission-policies unit, remove depends_on cert-manager !6003 ~"area:misc" (issues: #3116)
  
• [backport-1.5] Add gateway validation unit for CAPO !6042 (issues: #3063)
  
• [backport-1.5]: Stabilize mgmt-Guis-test(test_ui_playwright.py) pipeline by adding waits and improving synchronization !6049 ~"area:CI" ~"backport" (issues: #3117)
  
• [backport-1.5] increase unit-timeout for keycloak-postgresql unit !6058
  
• [backport-1.5]: Stabilize mgmt_sso test pipeline by adding waits and improving synchronization !6113 ~"area:CI" ~"backport" (issues: #3078)
  
• [backport-1.5] Enable keycloak's cnpg cluster Podmonitoring to get metrics to raise alerts on high diskspace usage !6221 (issues: #3223)
  
• fix: 3192-kunai-frontend-crashloop in sylva release 1.5 !6276 ~"area:misc" ~"area:workload-cluster" ~"kunai"
  
• [backport-1.5] Bump sylva-units-release operator version !6262 ~"area:units-framework" ~"backport" ~"lifecycle-operators"
  
• [backport-1.5] Add an healthCheckExprs to ensure that loki-secrets contains at least a tenant definition. !6300 (issues: #3257)
  
• [backport-1.5] Add missing private key substitutions !6298 (issues: #3255)
  
• [backport-1.5] SR-IOV: add restart kyverno policy on operator-webhook certificate renewal !6302 ~"backport" (issues: #3093)
  
• [release-1.5] sylva-units/CLI: use branch+commit with GitRepository !6386 (issues: #3197)
  
• [backport-1.5] Allow workload cluster to send logs in loki !6396 (issues: #3307)
  

Other dependency upgrades

• Update dependency sylva-projects/sylva-elements/diskimage-builder to v0.5.13 !5755
  
• Update cluster-api & capd-manager to v1.10.6 !5664
  
• Update sylva-elements/ci-tooling/ci-deployment-values to v0.5.52 !5735 !5779 !5813 !5828 !5879 !5973 !6015 !6028 !6103 !6182 !6228 !6253 !6297 !6333
  
• Update Sylva Helm chart sylva-capi-cluster to v0.11.19 !5740 !5786 !5818 !5863
  
• Update sylva-units-operator to v1.0.3 ~"cluster-lifecycle" ~"area:units-framework" !5832 !6314 !6351
  
• Update ghcr.io/kube-vip/kube-vip container to v1.0.1 !5825
  
• Update pre-commit hook PyYAML to v6.0.3 !5674
  
• Update Helm chart cert-manager to v1.18.3 !5916
  
• Update Sylva Helm chart os-image-server to v2.5.1 !6172
  

CI

• Update dependency sylva-projects/sylva-elements/ci-tooling/ci-templates to v1.0.50 ~"renovate" ~"area:CI" !5808 !5894 !5954 !6106 !6173 !6265 !6393
  
• Update sylva-elements/ci-tooling/ci-deployment-values to v0.5.35 !5942 ~"renovate"
  
• [backport-1.5] CI: remove broken neuvector test (to reintroduce later) !5728 ~"security" ~"security::runtime-security" ~"type::bug" (issues: #2984)
  
• [backport-1.5] decrease unit timeout for calico-ready !5782
  
• [backport-1.5] CI: add tools/check-sylva-units-k8s-versions.py !5830
  
• [backport-1.5] - Add a new dynamic enabled unit option in CI framework !5887 ~"area:CI" ~"backport"
  
• [backport-1.5] - Fix parsing to support rich editing switching !5943 ~"area:CI" ~"backport"
  
• [backport-1.5]- Dynamic upgrade scenario !5966 ~"area:CI" ~"backport"
  
• [backport-1.5] libvirt-metal: use the q35 domain definition with iothreads and cache=unsafe !6069 ~"area:CI" ~"capm3"
  
• [backport-1.5]: Improve Hurl test reliability by adding global retry options !6133 ~"area:CI" ~"backport" (issues: #3167)
  

Contributors

17 people contributed.

Adrian Vladu, Akshay Yadav, Alain Thioliere, Andra-Simona Delicostea, Arnaud Bouts, Bogdan Antohe, Cristian Manda, Daniel Anton, Dragos Gerea, Francois Eleouet, Francois Klieber, François-Régis Menguy, Loic Nicolle, Manik Bindlish, Priya Goyal, Sakshi Choudhary, Thomas Morin