Releases: kyma-project/kyma
2.10.1
2.10.1 (2023-01-23)
Serverless
- #16562 Bump k8s-tools image in Kyma 2.10 (@halamix2)
- #16582 Upgrade serverless images (@pPrecel)
- #16580 [Cherry-Pick] Upgrade golang version for all otters components (@pPrecel)
Committers: 6
- Filip Strózik (@pPrecel)
- Natalia Sitko (@nataliasitko)
- Piotr Halama (@halamix2)
- Rakesh Garimella (@rakesh-garimella)
- Raymond Pinto (@raypinto)
- Wojciech Sołtys (@Sawthis)
2.10.0
The holiday season gave us a welcome break and an excellent opportunity to recharge our batteries. With this energy boost, we’ve set off into the new year, wishing you the best of luck and offering you the best of Kyma in its latest version, 2.10! Read on to find out what we have prepared for you.
Application Connectivity
From now Application Gateway will use the kyma-system Namespace instead of the kyma-integration Namespace. The Secrets related to the Namespace are not removed automatically in the process of upgrading Kyma to version 2.10. To remove them, you must run the migration script after successfully migrating from Kyma 2.9 to Kyma 2.10.
Eventing
NATS
We introduced a system account user to allow full leverage of the NATS CLI. For more information, read about Acquiring NATS server system account credentials.
Metrics
We exposed new metrics for backend latency.
We also introduced consistent naming for all metrics exposed by Eventing Publisher Proxy (EPP).
Read Kyma Eventing Metrics for more details.
Observability
Kiali
As announced in the blog post on Kiali deprecation, Kiali was deprecated with Kyma 2.8 and will be removed in Kyma 2.11.
Deprecation of Monitoring
We decided to deprecate the monitoring component based on Prometheus/Grafana. Please start the transition to alternative solutions now. The actual removal will happen in half a year or later, with Kyma 2.16 at the earliest. For more information, read this blog post.
Monitoring
Kyma 2.10 brings the update to the latest Prometheus images (version 2.40.7).
Telemetry
Logs
With this version of Kyma, we offer solutions to the following issues:
- Improved implementation so that unnecessary restarts of Fluent Bit DaemonSet are avoided on the LogPipeline changes
- Improved certificate handling of LogPipeline and LogParser webhook so that there are no webhook downtimes caused by improper certificates
- Dashboard support for defining LogPipelines and LogParser
Traces
The first version of the new configurable tracing feature is available. Under the umbrella of the telemetry module, a new CRD TracePipeline is available as well. That new API will manage an OpenTelemetry Collector which supports you in integrating the trace aspects within a runtime into OTLP-based backends. For now, Basic Authentication is supported, and further ways of authentication will be added soon.
The Serverless and tracing modules were adjusted to the new approach.
Also, Istio got switched to the new approach. Thus, the trace propagation protocol was changed to the W3C Trace Context. Furthermore, the new Istio Telemetry API got activated to configure tracing settings selectively.
Serverless
With Kyma 2.10, we stop supporting the configuration of the previous Jaeger endpoint (at port 14268) as an option for Serverless Functions to send trace data. This endpoint was deprecated with Kyma 2.8 and replaced with one (at port 4318) that is compliant with Open Telemetry Protocol (OTLP). Functions don’t receive the previous endpoint as a configuration variable. Thus, if not rebuilt, they cannot send proper trace data. Functions built before Kyma 2.8 need to be rebuilt so that their trace data can be properly collected at the new OTLP endpoint introduced with the 2.8 release.
Service Mesh
Istio upgraded to 1.16.1
With this release, we upgraded Istio from 1.15.3 to 1.16.1. For more details on the changes, read the official Istio 1.16 Upgrade Notes.
Istio sidecar injection annotation deprecated
As of version 1.16 of Istio, the sidecar.istio.io/inject annotation was deprecated in favor of the sidecar.istio.io/inject label. To learn how to configure your Pods so that the Istio sidecar injection remains fully supported, read this blog post.
Support for XFF header
With this version of Kyma, we introduced Istio custom resource (CR) supporting the configuration of numTrustedProxies. Read about the Support for XFF with Istio to learn how to configure Istio CR and secure your workload on a forwarded client IP.
Changelog
2.10.0-rc2 (2023-01-12)
Tracing
Committers: 5
- Christoph Kleineweber (@chrkl)
- Grzegorz Karaluch (@grego952)
- Mansur Uralov (@muralov)
- Muhammad Faizan (@mfaizanse)
- Wojciech Sołtys (@Sawthis)
2.10.0-rc1 (2023-01-10)
Api Gateway
- #16490 Bump API-Gateway image to release 1.2.0 (@barchw)
- #16128 Update Serverless & APIRules Kyma Dashboard guides (@Lyczeq)
Application Connector
- #16024 Change Application Connector secret namespace to kyma-system (@mvshao)
- #16414 Change status code for not found in Validators cache (@franpog859)
- #16143 Script copying secrets used by Application Connector to integration namespace (@mvshao)
- #16382 Bump the golang version in the AC (@franpog859)
- #16182 add tip about creating App from Busola (@grego952)
Serverless
- #16475 Fix Serverless registry-gc race condition (@moelsayed)
- #16471 Fix Serverless registry-gc failure on NotFound tags (@moelsayed)
- #16464 Fix No-Content response from nodejs16 runtime (@kwiatekus)
- #16425 Add registry cache garbage collection for serverless (@moelsayed)
- #16398 Use latest patch version for nodejs function runtimes (@kwiatekus)
- #16295 Remove simple fn cfg from integration tests (@dbadura)
- #16334 Serverless go.mod versions bump (@moelsayed)
- #16309 Bump Serverless runtimes (@moelsayed)
- #16266 Rename Serverless internal registry initContainer (@moelsayed)
- #16256 Fix issue with internal registry after waking up from hibernation (@moelsayed)
- #16128 Update Serverless & APIRules Kyma Dashboard guides (@Lyczeq)
- #16168 Bump k8s-tools image (@halamix2)
- #16172 Fix retry on conflict in Serverless integration tests (@moelsayed)
- #16108 add SecretMounts to function API (@anoipm)
- #16149 Delete unused customRuntimeConfiguration in function_types.go (@MichalKalke)
- #16138 Add Internal Registry Garbage Collection proposal (@moelsayed)
- #16116 Support structured json format of incoming CEs in nodejs runtimes (@kwiatekus)
- #16101 Bump k8s-tools image (@halamix2)
Eventing
- #16503 Image bumps for Eventing (@mfaizanse)
- #16502 Preset typeMatching standard as a default value in create subscriptions' form ([@VladislavPaskar](https://github.com/Vladis...
2.10.0-rc2
2.10.0-rc2 (2023-01-12)
Tracing
Committers: 5
- Christoph Kleineweber (@chrkl)
- Grzegorz Karaluch (@grego952)
- Mansur Uralov (@muralov)
- Muhammad Faizan (@mfaizanse)
- Wojciech Sołtys (@Sawthis)
2.10.0-rc1 (2023-01-10)
Api Gateway
- #16490 Bump API-Gateway image to release 1.2.0 (@barchw)
- #16128 Update Serverless & APIRules Kyma Dashboard guides (@Lyczeq)
Application Connector
- #16024 Change Application Connector secret namespace to kyma-system (@mvshao)
- #16414 Change status code for not found in Validators cache (@franpog859)
- #16143 Script copying secrets used by Application Connector to integration namespace (@mvshao)
- #16382 Bump the golang version in the AC (@franpog859)
- #16182 add tip about creating App from Busola (@grego952)
Serverless
- #16475 Fix Serverless registry-gc race condition (@moelsayed)
- #16471 Fix Serverless registry-gc failure on NotFound tags (@moelsayed)
- #16464 Fix No-Content response from nodejs16 runtime (@kwiatekus)
- #16425 Add registry cache garbage collection for serverless (@moelsayed)
- #16398 Use latest patch version for nodejs function runtimes (@kwiatekus)
- #16262 Implement Serverless internal registry image garbage collector (@moelsayed)
- #15901 Java runtime based on JVM as alpha function runtime (@dbadura)
- #16295 Remove simple fn cfg from integration tests (@dbadura)
- #16334 Serverless go.mod versions bump (@moelsayed)
- #16309 Bump Serverless runtimes (@moelsayed)
- #16266 Rename Serverless internal registry initContainer (@moelsayed)
- #16256 Fix issue with internal registry after waking up from hibernation (@moelsayed)
- #16128 Update Serverless & APIRules Kyma Dashboard guides (@Lyczeq)
- #16168 Bump k8s-tools image (@halamix2)
- #16172 Fix retry on conflict in Serverless integration tests (@moelsayed)
- #16108 add SecretMounts to function API (@anoipm)
- #16149 Delete unused customRuntimeConfiguration in function_types.go (@MichalKalke)
- #16138 Add Internal Registry Garbage Collection proposal (@moelsayed)
- #16116 Support structured json format of incoming CEs in nodejs runtimes (@kwiatekus)
- #16101 Bump k8s-tools image (@halamix2)
Eventing
- #16503 Image bumps for Eventing (@mfaizanse)
- #16502 Preset typeMatching standard as a default value in create subscriptions' form (@VladislavPaskar)
- #16476 Separate between unit and integration tests for jetstreamv2 package (@nachtmaar)
- #16474 Add NATS ConnectionBuilder (@nachtmaar)
- #16423 Change JetStream maxBytes to be 70% of the total file storage (@marcobebway)
- #16468 Reorganise nats config and nats backend import paths (@nachtmaar)
- #16459 Add KLogger interface (@nachtmaar)
- #16460 Add cloudevent client and factory (@nachtmaar)
- #16457 Add generic ArgumentError (@nachtmaar)
- #16451 Update api-gateway crd in eventing tests (@mfaizanse)
- #16436 use github team to configure ownership on eventing components (@k15r)
- #16434 fix nats resolv.conf (@k15r)
- #16422 Update eventing metrics docs (@raypinto)
- #16427 fix broken epp metrics tests (@k15r)
- #16396 Add system-account user to nats-server (@raypinto)
- #16400 add the doc for nats-server system_account credentials (#15381) (@raypinto)
- #16298 improve epp metrics (@k15r)
- #16407 Update outdated docs (@VladislavPaskar)
- #16352 Update cleanup logic for jetstream v1alpha2 to clean slashes (@raypinto)
- #16343 fix conversion bug for protocol settings (@raypinto)
- #16351 Print error when jetstream dispatch fails (@k15r)
- #16294 Add validation webhook reconciler tests for jetstream (@raypinto)
- #16260 Add validation webhook integration tests for eventmesh (@raypinto)
- #16176 add component name to nats connection (@k15r)
- #16245 bump epp image (@k15r)
- #16243 change loglevel from debug to error for invalid legacyEvent (@k15r)
- #16131 Add stream re-creation check in eventing FI tests (@raypinto)
- #16115 Change http response code based on backend error (@k15r)
Security
- #16398 Use latest patch version for nodejs function runtimes (@kwiatekus)
- #16334 Serverless go.mod versions bump (@moelsayed)
- #16309 Bump Serverless runtimes (@moelsayed)
Service Mesh
- #16371 Update Istio to 1.16.1 (@cnvergence)
- #16103 Introduces XFF configuration support for Istio via CRD (@videlov)
Monitoring
- #16277 update to latest prometheus images (@rakesh-garimella)
- #16215 updated node-exporter to patch version 1.4.1 (@a-thaler)
- #16224 updated kiwigrid sidecar to newest python version (@a-thaler)
- [#16223](https://github.com/kyma-project/kyma/...
2.10.0-rc1
2.10.0-rc1 (2023-01-10)
Api Gateway
- #16490 Bump API-Gateway image to release 1.2.0 (@barchw)
- #16128 Update Serverless & APIRules Kyma Dashboard guides (@Lyczeq)
Application Connector
- #16024 Change Application Connector secret namespace to kyma-system (@mvshao)
- #16414 Change status code for not found in Validators cache (@franpog859)
- #16143 Script copying secrets used by Application Connector to integration namespace (@mvshao)
- #16382 Bump the golang version in the AC (@franpog859)
- #16182 add tip about creating App from Busola (@grego952)
Serverless
- #16475 Fix Serverless registry-gc race condition (@moelsayed)
- #16471 Fix Serverless registry-gc failure on NotFound tags (@moelsayed)
- #16464 Fix No-Content response from nodejs16 runtime (@kwiatekus)
- #16425 Add registry cache garbage collection for serverless (@moelsayed)
- #16398 Use latest patch version for nodejs function runtimes (@kwiatekus)
- #16262 Implement Serverless internal registry image garbage collector (@moelsayed)
- #15901 Java runtime based on JVM as alpha function runtime (@dbadura)
- #16295 Remove simple fn cfg from integration tests (@dbadura)
- #16334 Serverless go.mod versions bump (@moelsayed)
- #16309 Bump Serverless runtimes (@moelsayed)
- #16266 Rename Serverless internal registry initContainer (@moelsayed)
- #16256 Fix issue with internal registry after waking up from hibernation (@moelsayed)
- #16128 Update Serverless & APIRules Kyma Dashboard guides (@Lyczeq)
- #16168 Bump k8s-tools image (@halamix2)
- #16172 Fix retry on conflict in Serverless integration tests (@moelsayed)
- #16108 add SecretMounts to function API (@anoipm)
- #16149 Delete unused customRuntimeConfiguration in function_types.go (@MichalKalke)
- #16138 Add Internal Registry Garbage Collection proposal (@moelsayed)
- #16116 Support structured json format of incoming CEs in nodejs runtimes (@kwiatekus)
- #16101 Bump k8s-tools image (@halamix2)
Eventing
- #16503 Image bumps for Eventing (@mfaizanse)
- #16502 Preset typeMatching standard as a default value in create subscriptions' form (@VladislavPaskar)
- #16476 Separate between unit and integration tests for jetstreamv2 package (@nachtmaar)
- #16474 Add NATS ConnectionBuilder (@nachtmaar)
- #16423 Change JetStream maxBytes to be 70% of the total file storage (@marcobebway)
- #16468 Reorganise nats config and nats backend import paths (@nachtmaar)
- #16459 Add KLogger interface (@nachtmaar)
- #16460 Add cloudevent client and factory (@nachtmaar)
- #16457 Add generic ArgumentError (@nachtmaar)
- #16451 Update api-gateway crd in eventing tests (@mfaizanse)
- #16436 use github team to configure ownership on eventing components (@k15r)
- #16434 fix nats resolv.conf (@k15r)
- #16422 Update eventing metrics docs (@raypinto)
- #16427 fix broken epp metrics tests (@k15r)
- #16396 Add system-account user to nats-server (@raypinto)
- #16400 add the doc for nats-server system_account credentials (#15381) (@raypinto)
- #16298 improve epp metrics (@k15r)
- #16407 Update outdated docs (@VladislavPaskar)
- #16352 Update cleanup logic for jetstream v1alpha2 to clean slashes (@raypinto)
- #16343 fix conversion bug for protocol settings (@raypinto)
- #16351 Print error when jetstream dispatch fails (@k15r)
- #16294 Add validation webhook reconciler tests for jetstream (@raypinto)
- #16260 Add validation webhook integration tests for eventmesh (@raypinto)
- #16176 add component name to nats connection (@k15r)
- #16245 bump epp image (@k15r)
- #16243 change loglevel from debug to error for invalid legacyEvent (@k15r)
- #16131 Add stream re-creation check in eventing FI tests (@raypinto)
- #16115 Change http response code based on backend error (@k15r)
Security
- #16398 Use latest patch version for nodejs function runtimes (@kwiatekus)
- #16334 Serverless go.mod versions bump (@moelsayed)
- #16309 Bump Serverless runtimes (@moelsayed)
Service Mesh
- #16371 Update Istio to 1.16.1 (@cnvergence)
- #16103 Introduces XFF configuration support for Istio via CRD (@videlov)
Monitoring
- #16277 update to latest prometheus images (@rakesh-garimella)
- #16215 updated node-exporter to patch version 1.4.1 (@a-thaler)
- #16224 updated kiwigrid sidecar to newest python version (@a-thaler)
- #16223 Duplicate definition of GF_PATHS_PROVISIONING env variable in grafana (@a-thaler)
Logging
Tracing
- #16353 Kyma OpenTelemetry Grafana Dashboard (@hisarbalik)
- [#16394](https://github.com/kyma-project/kyma...
2.9.3
2.9.3 (2022-12-27)
Application Connector
- #16384 Change Application Connector images versions to the commit ones (@mvshao)
- #16373 Bump Golang images in Application Connector components (@mvshao)
Serverless
- #16412 Bump express dependency to avoid CVE-2022-24999 (@dbadura)
- #16339 [release-2.9] Bump serverless images (@moelsayed)
- #16335 [relsease-2.9] Serverless go.mod versions bump (@moelsayed)
Security
- #16412 Bump express dependency to avoid CVE-2022-24999 (@dbadura)
- #16373 Bump Golang images in Application Connector components (@mvshao)
- #16339 [release-2.9] Bump serverless images (@moelsayed)
- #16335 [relsease-2.9] Serverless go.mod versions bump (@moelsayed)
Monitoring
- #16293 update to latest prometheus images (#16277) (@rakesh-garimella)
Committers: 6
- Damian Badura (@dbadura)
- Grzegorz Karaluch (@grego952)
- Mohamed Elsayed (@moelsayed)
- Rafal Foks (@mvshao)
- Rakesh Garimella (@rakesh-garimella)
- Wojciech Sołtys (@Sawthis)
2.9.2
Update VERSION to 2.9.2 (#16250)
2.9.1
2.9.0-rc2 (2022-11-18)
Eventing
Committers: 3
- Benjamin Lindner (@lindnerby)
- Korbinian Stoemmer (@k15r)
- Wojciech Sołtys (@Sawthis)
2.9.0-rc1 (2022-11-14)
Api Gateway
- #15877 Component test to expose workload with custom domain (@cnvergence)
- #15951 Remove PSP from ory charts (@barchw)
- #15979 Update postgres exporter image (@barchw)
Application Connector
- #15980 Remove PSP from CRA (@franpog859)
- #15566 Compass Runtime Agent tests - readme (@mvshao)
- #15924 Caching the OAuth tokens in Application Gateway (@mvshao)
- #15390 Prepare code initializing Compass Runtime Agent before Compass Runtime Agent runs (@akgalwas)
Serverless
- #16090 Replace serverless PR tags (@pPrecel)
- #16004 Migrate from RegisteredLoggers to the AtomicLevel (@pPrecel)
- #15999 Improve common logging to allow the use of AtomicLevel (@pPrecel)
- #15981 remove the
golangci.ymlfile (@pPrecel) - #15946 Remove serverless psp (@pPrecel)
- #15971 Remove documentation about PSP in context of serverless functions (@pPrecel)
- #15949 Remove the
nodejs12component (@pPrecel) - #15911 Fix health tests (@dbadura)
- #15876 Add missing timeout when notifying health channel (@pPrecel)
- #15868 Add one more useful debug log for the
function-controller(@pPrecel) - #15851 Removal of mentions of Nodejs12 (@Cortey)
- #15746 Dynamic logging for the serverless webhook (@pPrecel)
Eventing
- #16088 Update Eventing images (@marcobebway)
- #16066 Add sink validation to validating webhook (@raypinto)
- #16049 Add Validation and Defaulting webhook for v1alpha2 subscriptions (@raypinto)
- #16020 Bump Eventing NATS image to 2.9.6 (@mfaizanse)
- #15975 Manually delete a manually created NATS consumer (@VladislavPaskar)
- #15940 bump gomega version to 1.23 in Eventing (@mfaizanse)
- #15899 Add new troubleshooting guide for consumer with pending messages (@VladislavPaskar)
- #15928 fix epp latency metric labels (@k15r)
- #15906 remove v1 to v2 status conversion and pretty print cleaneventtypes (@raypinto)
- #15908 Update EPP dependencies. (@marcobebway)
- #15896 Automate patching subscription CRD when new version is enabled (@raypinto)
- #15722 setup jetstream reconciler for v1alpha2 subscription (@raypinto)
- #15643 Add exponential buckets for the Event publisher proxy latency histogram (@marcobebway)
- #15608 Use the configured NATS URL as the destination service value for the Eventing publisher proxy custom metrics (@marcobebway)
- #15734 bump build image in Dockerfile to golang1.19.2-alpine3.16 in event-publisher-proxy (@friedrichwilken)
- #15733 bump build image in Dockerfile to golang1.19.2-alpine3.16 in eventing-controller (@friedrichwilken)
Service Mesh
Monitoring
- #15950 upgrade to oauth2-proxy 7.4.0 (@a-thaler)
- #15744 Disable PSP and configure securityContext properly for observability pods (@a-thaler)
Logging
- #16004 Migrate from RegisteredLoggers to the AtomicLevel (@pPrecel)
- #16072 Improved loki deprecation notes (@a-thaler)
- #15999 Improve common logging to allow the use of AtomicLevel (@pPrecel)
- #15835 Remove logging Fluent Bit (@skhalash)
- #15744 Disable PSP and configure securityContext properly for observability pods (@a-thaler)
Tracing
- #15960 [Telemetry Operator] - TracePipeline Secret rotation handling (@lindnerby)
- #15744 Disable PSP and configure securityContext properly for observability pods (@a-thaler)
Documentation
- #16072 Improved loki deprecation notes (@a-thaler)
- #14975 Add API versioning and deprecation policy (@varbanv)
- #15971 Remove documentation about PSP in context of serverless functions (@pPrecel)
- #15899 Add new troubleshooting guide for consumer with pending messages (@VladislavPaskar)
- #15926 Add note about zero-downtime upgrades (@NHingerl)
- #15851 Removal of mentions of Nodejs12 (@Cortey)
CI
- #15963 Remove test inrepo config. (@dekiel)
- #15904 deprecation: remove github-actions-stale (@Ressetkk)
Committers: 37
- Aleksei Chernyshov (@Teneroy)
- Andreas Thaler (@a-thaler)
- Andrzej Pankowski (@Cortey)
- Arkadiusz Galwas (@akgalwas)
- Bartosz Chwila (@barchw)
- Benjamin Lindner (@lindnerby)
- Borja Clemente (@clebs)
- Christoph Kleineweber (@chrkl)
- Damian Badura (@dbadura)
- Filip Strózik (@pPrecel)
- Franciszek Pogodziński (@franpog859)
- Friedrich (@friedrichwilken)
- Jan Mędrek (@janmedrek)
- Jan Wozniak (@wozniakjan)
- Kamil Kasperski (@Ressetkk)
- Karol Szwaj (@cnvergence)
- Korbinian Stoemmer (@k15r)
- Krzysztof Kwiatosz (@kwiatekus)
- Mansur Uralov (@muralov)
- Marcin Dobrochowski (@anoipm)
- Marco Bebway (@marcobebway)
- Mohamed Elsayed (@moelsayed)
- Muhammad Faizan ([@mfaizanse](https://github.com/mfaizanse...
2.8.4
2.8.3 (2022-11-17)
Eventing
- #16097 Bump images for updated EPP and NATS (@k15r)
- #16095 remove explicit stream check from sending (@k15r)
Committers: 2
- Korbinian Stoemmer (@k15r)
- Mohamed Elsayed (@moelsayed)
2.8.2 (2022-11-07)
Application Connector
- #16010 Bump AC and CRA images (@franpog859)
- #16005 Update application-operator module dependency with latest version from branch release-2.8 (@koala7659)
- #15993 Application Connector and compass runtime agent cherry pick with update go dependencies for application connector and compass-runtime-agent (@koala7659)
Serverless
- #16017 Bump k8s-tools image in Kyma 2.8 (@Halamix2)
- #15989 Bump images (@dbadura)
- #15987 Update openssl (@dbadura)
- #15948 Serverless picks bump (@dbadura)
- #15947 Serverless picks (@dbadura)
Eventing
- #15961 Bump eventing images (@raypinto)
- #15954 bump build image in Dockerfile to golang1.19.2-alpine3.16 (@raypinto)
Security
Service Mesh
Committers: 6
- Bartosz Chwila (@barchw)
- Damian Badura (@dbadura)
- Franciszek Pogodziński (@franpog859)
- Piotr Halama (@Halamix2)
- Przemyslaw Golicz (@koala7659)
- Raymond Pinto (@raypinto)
2.8.1 (2022-10-25)
Eventing
- #15885 Restore jetstreamEnabled flag for 2.8.x releases to prevent eventing issues (@mfaizanse)
Committers: 1
- Muhammad Faizan (@mfaizanse)
2.8.0-rc2 (2022-10-19)
Eventing
- #15846 Update nats server (#15727) (@marcobebway)
Committers: 1
- Marco Bebway (@marcobebway)
2.9.0
Roses are red, violets are blue, and Kyma is ready with the new updates for you. This release comes with some interesting changes. For example, now we officially support Kubernetes in version 1.24. Read on to find out more about the 2.9 release!
General
With this Kyma release, Kubernetes gets officially supported in version 1.24. The default settings for the provision commands provided by Kyma CLI were also adjusted. For more details on this version, read the Kubernetes release notes.
While working on that, we've already taken major steps towards the next Kubernetes version 1.25 by cleaning all PodSecurityPolicies (PSP) and revising all SecurityContexts. Remember that you may need to replace your custom PSPs with the new security standards; click here for more information.
As we removed the generic Kyma PSP, your Pods may be prevented from being deployed now as the providers’ default policies are not fitting. During the upgrade to this Kyma version, you might need to introduce proper PSPs to compensate for the removal unless you've already disabled the PSP admission controller and switched to the new security admission model.
Follow this migration guide to learn how to clean up your Kyma resources from the PSP leftovers when you upgrade from Kyma 2.8 to 2.9.
Observability
Logging
As you've probably learned from this blog post, we decided to deprecate the Loki installation which is part of the Logging component. Please start the transition to alternative solutions. The actual removal will not happen sooner than in six months, with Kyma 2.15 at the earliest.
As announced in the release notes for Kyma 2.6, the Fluent Bit component got migrated from the Logging component to the Telemetry component. With this Kyma version, the old Fluent Bit setup finally got removed from the Logging component. Before you can upgrade to Kyma 2.9, you must follow this migration guide if you have not switched to the telemetry component yet.
Monitoring
In this release, we also updated Prometheus to version 2.39.1, Prometheus Operator to version 0.60.1, and OAuth2 Proxy to version 7.4.0.
For more details, see the release notes for Prometheus, Prometheus Operator, and OAuth2 Proxy.
Telemetry
Tracing preview
We are actively working on the possibility of integrating your trace backend based on OTLP. You can try out the first preview version by following this new trace demo. Give it a try and feel free to provide feedback on the related GitHub issue.
Serverless
Node.js 12 runtime deprecated
Node.js 12 has reached the end of its life. Therefore, followed by the depreciation of Node.js 12 Serverless runtime, we decided to finally remove it from the list of the available Function runtimes.
Your Node.js 12 Functions' workloads will continue to run, but you will not be able to edit them without changing the runtime field. Sooner or later, you must change the spec of your existing Node.js 12-based Functions and change the runtime field to either nodejs14 or nodejs16.
For more information about the Node.js 12 deprecation, see the Kyma 2.1 release notes.
CLI
Adjust Function commands to the new API version
Following the recent API changes in Serverless, the related Kyma CLI commands were adjusted to comply with the serverless.kyma.project.io/v1alpha2 API version.
Eventing
NATS server
NATS server was updated to version 2.9.6. For more information read the NATS server v2.9.6 release notes.
The stream setup was modified for the case of full message storages. This state will now lead to the rejection of new messages and the return of error code 507. These changes were introduced to prevent the deletion of old messages.
Changelog
2.9.0-rc2 (2022-11-18)
Eventing
Committers: 3
- Benjamin Lindner (@lindnerby)
- Korbinian Stoemmer (@k15r)
- Wojciech Sołtys (@Sawthis)
2.9.0-rc1 (2022-11-14)
Api Gateway
- #15877 Component test to expose workload with custom domain (@cnvergence)
- #15951 Remove PSP from ory charts (@barchw)
- #15979 Update postgres exporter image (@barchw)
Application Connector
- #15980 Remove PSP from CRA (@franpog859)
- #15566 Compass Runtime Agent tests - readme (@mvshao)
- #15924 Caching the OAuth tokens in Application Gateway (@mvshao)
- #15390 Prepare code initializing Compass Runtime Agent before Compass Runtime Agent runs (@akgalwas)
Serverless
- #16090 Replace serverless PR tags (@pPrecel)
- #16004 Migrate from RegisteredLoggers to the AtomicLevel (@pPrecel)
- #15999 Improve common logging to allow the use of AtomicLevel (@pPrecel)
- #15981 remove the
golangci.ymlfile (@pPrecel) - #15946 Remove serverless psp (@pPrecel)
- #15971 Remove documentation about PSP in context of serverless functions (@pPrecel)
- #15949 Remove the
nodejs12component (@pPrecel) - #15911 Fix health tests (@dbadura)
- #15876 Add missing timeout when notifying health channel (@pPrecel)
- #15868 Add one more useful debug log for the
function-controller(@pPrecel) - #15851 Removal of mentions of Nodejs12 (@Cortey)
- #15746 Dynamic logging for the serverless webhook (@pPrecel)
Eventing
- #16088 Update Eventing images (@marcobebway)
- #16066 Add sink validation to validating webhook (@raypinto)
- #16049 Add Validation and Defaulting webhook for v1alpha2 subscriptions (@raypinto)
- #16020 Bump Eventing NATS image to 2.9.6 (@mfaizanse)
- #15975 Manually delete a manually created NATS consumer (@VladislavPaskar)
- #15940 bump gomega version to 1.23 in Eventing (@mfaizanse)
- #15899 Add new troubleshooting guide for consumer with pending messages (@VladislavPaskar)
- #15928 fix epp latency metric labels (@k15r)
- #15906 remove v1 to v2 status conversion and pretty print cleaneventtypes (@raypinto)
- #15908 Update EPP dependencies. (@marcobebway)
- #15896 Automate patching subscription CRD when new version is enabled (@raypinto)
- #15722 setup jetstream reconciler for v1alpha2 subscription (@raypinto)
- #15643 Add exponential buckets f...
2.9.0-rc2
2.9.0-rc2 (2022-11-18)
Eventing
Committers: 3
- Benjamin Lindner (@lindnerby)
- Korbinian Stoemmer (@k15r)
- Wojciech Sołtys (@Sawthis)
2.9.0-rc1 (2022-11-14)
Api Gateway
- #15877 Component test to expose workload with custom domain (@cnvergence)
- #15951 Remove PSP from ory charts (@barchw)
- #15979 Update postgres exporter image (@barchw)
Application Connector
- #15980 Remove PSP from CRA (@franpog859)
- #15566 Compass Runtime Agent tests - readme (@mvshao)
- #15924 Caching the OAuth tokens in Application Gateway (@mvshao)
- #15390 Prepare code initializing Compass Runtime Agent before Compass Runtime Agent runs (@akgalwas)
Serverless
- #16090 Replace serverless PR tags (@pPrecel)
- #16004 Migrate from RegisteredLoggers to the AtomicLevel (@pPrecel)
- #15999 Improve common logging to allow the use of AtomicLevel (@pPrecel)
- #15981 remove the
golangci.ymlfile (@pPrecel) - #15946 Remove serverless psp (@pPrecel)
- #15971 Remove documentation about PSP in context of serverless functions (@pPrecel)
- #15949 Remove the
nodejs12component (@pPrecel) - #15911 Fix health tests (@dbadura)
- #15876 Add missing timeout when notifying health channel (@pPrecel)
- #15868 Add one more useful debug log for the
function-controller(@pPrecel) - #15851 Removal of mentions of Nodejs12 (@Cortey)
- #15746 Dynamic logging for the serverless webhook (@pPrecel)
Eventing
- #16088 Update Eventing images (@marcobebway)
- #16066 Add sink validation to validating webhook (@raypinto)
- #16049 Add Validation and Defaulting webhook for v1alpha2 subscriptions (@raypinto)
- #16020 Bump Eventing NATS image to 2.9.6 (@mfaizanse)
- #15975 Manually delete a manually created NATS consumer (@VladislavPaskar)
- #15940 bump gomega version to 1.23 in Eventing (@mfaizanse)
- #15899 Add new troubleshooting guide for consumer with pending messages (@VladislavPaskar)
- #15928 fix epp latency metric labels (@k15r)
- #15906 remove v1 to v2 status conversion and pretty print cleaneventtypes (@raypinto)
- #15908 Update EPP dependencies. (@marcobebway)
- #15896 Automate patching subscription CRD when new version is enabled (@raypinto)
- #15722 setup jetstream reconciler for v1alpha2 subscription (@raypinto)
- #15643 Add exponential buckets for the Event publisher proxy latency histogram (@marcobebway)
- #15608 Use the configured NATS URL as the destination service value for the Eventing publisher proxy custom metrics (@marcobebway)
- #15734 bump build image in Dockerfile to golang1.19.2-alpine3.16 in event-publisher-proxy (@friedrichwilken)
- #15733 bump build image in Dockerfile to golang1.19.2-alpine3.16 in eventing-controller (@friedrichwilken)
Service Mesh
Monitoring
- #15950 upgrade to oauth2-proxy 7.4.0 (@a-thaler)
- #15744 Disable PSP and configure securityContext properly for observability pods (@a-thaler)
Logging
- #16004 Migrate from RegisteredLoggers to the AtomicLevel (@pPrecel)
- #16072 Improved loki deprecation notes (@a-thaler)
- #15999 Improve common logging to allow the use of AtomicLevel (@pPrecel)
- #15835 Remove logging Fluent Bit (@skhalash)
- #15744 Disable PSP and configure securityContext properly for observability pods (@a-thaler)
Tracing
- #15960 [Telemetry Operator] - TracePipeline Secret rotation handling (@lindnerby)
- #15744 Disable PSP and configure securityContext properly for observability pods (@a-thaler)
Documentation
- #16072 Improved loki deprecation notes (@a-thaler)
- #14975 Add API versioning and deprecation policy (@varbanv)
- #15971 Remove documentation about PSP in context of serverless functions (@pPrecel)
- #15899 Add new troubleshooting guide for consumer with pending messages (@VladislavPaskar)
- #15926 Add note about zero-downtime upgrades (@NHingerl)
- #15851 Removal of mentions of Nodejs12 (@Cortey)
CI
- #15963 Remove test inrepo config. (@dekiel)
- #15904 deprecation: remove github-actions-stale (@Ressetkk)
Committers: 37
- Aleksei Chernyshov (@Teneroy)
- Andreas Thaler (@a-thaler)
- Andrzej Pankowski (@Cortey)
- Arkadiusz Galwas (@akgalwas)
- Bartosz Chwila (@barchw)
- Benjamin Lindner (@lindnerby)
- Borja Clemente (@clebs)
- Christoph Kleineweber (@chrkl)
- Damian Badura (@dbadura)
- Filip Strózik (@pPrecel)
- Franciszek Pogodziński (@franpog859)
- Friedrich (@friedrichwilken)
- Jan Mędrek (@janmedrek)
- Jan Wozniak (@wozniakjan)
- Kamil Kasperski (@Ressetkk)
- Karol Szwaj (@cnvergence)
- Korbinian Stoemmer (@k15r)
- Krzysztof Kwiatosz (@kwiatekus)
- Mansur Uralov (@muralov)
- Marcin Dobrochowski (@anoipm)
- Marco Bebway (@marcobebway)
- Mohamed Elsayed (@moelsayed)
- Muhammad Faizan ([@mfaizanse](https://github.com/mfaizanse...