Releases: elastic/cloud-on-k8s
Releases · elastic/cloud-on-k8s
v2.12.1
Elastic Cloud on Kubernetes 2.12.1
Bug fixes
v2.12.0
Elastic Cloud on Kubernetes 2.12.0
Enhancements
- Remove noisy stack config policy log line #7582 (issue: #7529)
- Increase the default PVC size for logstash #7540 (issue: #7538)
- Add eck-apm-server Helm Chart #7533 (issue: #7489)
- Add Health to Logstash Status #7528 (issue: #7527)
- Add resourceStatuses back into stack config policy status for backwards compatibility #7500
- Add support for updateStrategy in Logstash #7466
- Add TLS and basic authentication integration to Logstash API server #7408 (issue: #6971)
- Add support for securing the operator metrics endpoint with RBAC and TLS #7567
- Remove Enterprise license restriction from ECK stack Helm charts #7621
Bug fixes
- Fix having multiple
type
keys in eck-beats chart #7523 (issue: #7487) - Use eck-operator UBI image when ubiOnly=true. #7486 (issue: #7485)
- Fix Logstash crashes with env #7475 (issue: #7450)
Documentation improvements
- Fix Logstash quickstart docs using single-quote EOF to avoid expanding variables #7580 (issue: #7572)
- Fix typo in managing-compute-resources documentation #7563
- Update APM Server docs for use since 8.x requiring Kibana #7559 (issue: #7541)
- Remove initContainer section in Logstash plugin docs #7557
- Add caution concerning running differing versions of CRDs + operator #7503
- Fix small typo in uninstall docs #7436
Misc
- fix(deps): update module golang.org/x/crypto to v0.20.0 #7578
- fix(deps): update module go.uber.org/zap to v1.27.0 #7577
- fix(deps): update module github.com/prometheus/common to v0.48.0 #7570
- fix(deps): update k8s to v0.29.2 and controller-runtime to v0.17.2 #7568
- fix(deps): update module github.com/hashicorp/vault/api to v1.12.0 #7550
- chore(deps): update docker.io/library/golang docker tag to v1.22.0 #7549
- fix(deps): update module github.com/google/go-containerregistry to v0.19.0 #7517
- fix(deps): update k8s to v0.29.1 #7505
- chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.3-1552 #7501
- fix(deps): update module github.com/google/uuid to v1.6.0 #7496
- fix(deps): update module k8s.io/klog/v2 to v2.120.1 #7484
- fix(deps): update module go.elastic.co/apm/v2 to v2.4.8 #7472
- fix(deps): update module sigs.k8s.io/controller-tools to v0.14.0 #7461
- fix(deps): update module github.com/spf13/viper to v1.18.2 #7458
- fix(deps): update module github.com/prometheus/client_golang to v1.18.0 #7417
- fix(deps): update module github.com/go-logr/logr to v1.4.1 #7409
v2.11.1
Elastic Cloud on Kubernetes 2.11.1
Bug fixes
- Add
resourceStatuses
back into the status subresource section of the Stack Configuration Policy for backwards compatability #7500
v2.11.0
Elastic Cloud on Kubernetes 2.11.0
New features
- Introduce Kibana config field in stack config policy #7324
- Introduce Elasticsearch config and additional secret mounts to stack config policy #7233
- Add StatefulSet as a deployment option for Elastic Agent #7357
Enhancements
- Allow Agent and Elastic stack in different namespaces. #7382 (issue: #7352)
- Support -ubi suffix starting 8.12.0 and 7.17.16 #7368
- Update to ubi9 and use -ubi prefix for operator image #7321
- Allow setting additional operator flags via the Helm chart #7252 (issue: #6091)
- Support configuring "ca-dir" operator setting via helm #7243 (issues: #6091, #6435)
Bug fixes
- Update eck-elasticsearch default secureSettings values to be slice #7397
- Fix recipe name to run Fleet as non-root #7313 (issue: #7312)
Documentation improvements
- Document how to use stack config policies to manage authentication #7381
- Fix secure settings link on stack config policy page #7377
- Document known issue with Kibana 8.11.2 using secure settings #7373 (issue: #7371)
- Add details about rolling restart behavior #7372
- Update node configuration documentation to note reserved settings #7351
- Use
docker.io/bash
for sleep container of max-map-count-setter Daemonset #7332 - Update Beats stack monitoring recipe #7322
- Document basic snapshot repository setup for Azure #7308
- Documentation link replaced with markup in 2.10 release notes #7306
- Make plugin installation via initContainer more robust #7305
- Add additional details on CA requirements. #7271
- Document how to provide container registry credentials in air-gapped environments #7256)
Misc
- Bump golang.org/x/crypto from 0.16.0 to 0.17.0 #7394
- chore(deps): update docker.io/library/golang docker tag to v1.21.5 #7366
- fix(deps): update module github.com/google/go-containerregistry to v0.17.0 #7355
- fix(deps): update module go.elastic.co/apm/v2 to v2.4.7 #7337
- Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 #7329
- chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9 #7326
- fix(deps): update k8s to v0.28.4 #7319
- fix(deps): update module github.com/spf13/cobra to v1.8.0 #7288
- Update docker v24.0.7+incompatible #7282
- fix(deps): update module k8s.io/klog/v2 to v2.110.1 #7278
- fix(deps): update module github.com/go-logr/logr to v1.3.0 #7272
- fix(deps): update module github.com/google/uuid to v1.4.0 #7270
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.16.3 #7249
- fix(deps): update module github.com/prometheus/common to v0.45.0 #7246
v2.10.0
Elastic Cloud on Kubernetes 2.10.0
Enhancements
- Allow setting additional operator flags via the Helm chart #7252
- Support configuring "ca-dir" operator setting via Helm #7243
- Logstash Elastic Stack Helm Chart #7143
- Support for Logstash secure settings from Kubernetes Secrets using keystore #7024
- Support running Agent as a non-root #6700
Bug fixes
- Update ECK-Beats default values to not include ElasticsearchRef. #7228
- Updating scripts configMap no longer causes Elasticsearch restart #7114 (issue: #6963)
- Remove volumeClaimTemplates status sub-resource from Elasticsearch CRD #7097
- Fix indentation to specify affinity, nodeSelector and tolerations in operator Helm chart #7084
Documentation improvements
- Better sample command outputs in the Agent Fleet documentation #7213
- Improved documentation about how to reset the default user's password #7181 (issue: #7182)
- Removed trailing whitespaces from operator's values.yaml file. #7179 (issue: #7178)
- Update beat/agent doc with missing RBAC rules required from 8.9.0 #7161 (issue: #6946)
- Better documentation of podDisruptionBudget for Elasticsearch.spec #7155
- Kubernetes 1.28 added to supported versions #7147
- Fix incorrect Pod template spec in Logstash docs #7124
- SAML documentation examples no longer use a deprecated callback URL #7117 (issue:#7118)
- SAML documentation examples have a trailing slash in sp.entity_id #7115 (issue: #7116)
- Fix manifest example to update JVM options for Logstash #7113
- Stack monitoring documentation examples updated to use v1alpha1 as Logstash k8s api version #7111
- Update saml-authentication.asciidoc #7101
- Fix sed command to use FIPS compatible operator image in FIPS doc #7076
- Update docs concerning intermediate CAs #7066
- Stack config policies are no longer marked as experimental #7044
- Air-gapped documentation describes how to use a mirrored operator image #7019
- Update Fleet Server quickstart documentation to use emptyDir for agent-data volumes #6563
Misc
- Update module golang.org/x/net to 0.17.0 #7229
- fix(deps): update module go.elastic.co/apm/v2 to v2.4.5 #7218
- fix(deps): update module github.com/google/go-cmp to v0.6.0 #7216
- chore(deps): update docker.io/library/golang docker tag to v1.21.3 #7215
- fix(deps): update module google.golang.org/api to v0.146.0 #7211
- chore(deps): update registry.access.redhat.com/ubi8/ubi-minimal docker tag to v8.8-1072.1696517598 #7210
- fix(deps): update module github.com/spf13/viper to v1.17.0 #7209
- fix(deps): update module golang.org/x/crypto to v0.14.0 #7203
- fix(deps): update module github.com/hashicorp/golang-lru/v2 to v2.0.7 #7193
- fix(deps): update module github.com/prometheus/client_golang to v1.17.0 #7186
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.16.2 #7185
- fix(deps): update module go.uber.org/zap to v1.26.0 #7169
- fix(deps): update k8s to v0.28.2 #7165
- fix(deps): update module github.com/hashicorp/vault/api to v1.10.0 #7152
- Update module github.com/google/go-containerregistry to v0.16.1 #7073
- Update module go.uber.org/automaxprocs to v1.5.3 #7042
- Update module sigs.k8s.io/controller-tools to v0.12.1 #7011
v2.9.0
Elastic Cloud on Kubernetes 2.9.0
Breaking changes
- Add Support for volumeClaimTemplates for Logstash controller #6884
Enhancements
- Enable runAsNonRoot=true for Beats >= 8.8.x #6793
Bug fixes
- Validating policy ID only when running in Fleet mode for Elastic Agent #6938 (issue: #6903)
- Add Selector to Logstash status #6854
Documentation improvements
- Document Logstash connection to external Elasticsearch #6895
Misc
- Update module golang.org/x/text to v0.11.0 #6976
- Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.8-1014 #6962
- Disable test agent with fleet mode in 8.0.1 #6957 (issues: #6331, #6956)
- Update module go.elastic.co/apm/v2 to v2.4.3 #6942
- Update module github.com/hashicorp/golang-lru/v2 to v2.0.4 #6935
- Update module github.com/imdario/mergo to v1 #6925
- Update module github.com/prometheus/client_golang to v1.16.0 #6909
- Update k8s to v0.27.3 #6908
- Update module golang.org/x/crypto to v0.10.0 #6900
- Update docker.io/library/golang Docker tag to v1.20.5 #6887
- Update module github.com/spf13/viper to v1.16.0 #6867
- Update module github.com/stretchr/testify to v1.8.4 #6866
- Update module sigs.k8s.io/controller-runtime to v0.15.0 #6847
- Update module github.com/prometheus/common to v0.44.0 #6835
- Update module github.com/google/go-containerregistry to v0.15.2 #6817
- Update module golang.org/x/oauth2 to v0.8.0 #6771
- Update module golang.org/x/net to v0.10.0 #6770
2.8.0
Elastic Cloud on Kubernetes 2.8.0
Warning
This release includes a hardened default security context for Elasticsearch containers. It is highly recommended to test against a staging environment before deploying to production.
Breaking changes
- Use provided base path for stackconfigpolicy's snapshot repository #6689 (issue: #6692)
- APM Server: Fix secret token config for APM Server 8.0+ #6769 (issue: #6768)
New features
Enhancements
Elasticsearch
- Call _nodes/shutdown from pre-stop hook #6544 (issue: #6478)
- Create Elasticsearch client for observer only if needed #6407 (issue: #6090)
- Add the full CA certificate chain to trusted HTTP certs for Elasticsearch #6681 (issue: #6574)
- Allow custom certificates on the transport layer #6727 (issue: #6479)
- Hardened Security Context for Elasticsearch #6703 (issue: #6126)
Helm charts
- Enable hostNetwork support in eck-operator Helm chart #6636
- Add PodDisruptionBudget to eck-operator Helm chart #6671
ECK Operator
- Add operator flag to define webhook port #6691 (issue: #6655)
- Add operator flag to define global container repository #6737 (issue: #6643)
Fleet
Bug fixes
- Fix doc attributes in stack-helm-chart.asciidoc #6742
- Do not set FLEET_CA for well-known CAs #6733 (issue: #6673)
- Fix default
elasticsearch-data
volumeMount configuration #6725 (issue: #6186) - Conditionally set container-suffix in ECK config #6711 (issue: #6695)
- [helm-chart] Include webhook client configuration CA only when certificates are not managed by the operator or cert-manager #6642 (issue: #6641)
- Remove default for daemonset/deployment in eck-beats & eck-agent Helm Charts #6621 (issue: #6330)
Documentation improvements
- Documentation for running ECK, Elasticsearch, and Kibana on GKE Autopilot #6760
- Contributing page updated with Helm chart tests suite #6744
- Documentation for Logstash on ECK #6743
- Add 2.6 and 2.7 to the triggered restart list #6786 (issue: #6765)
Misc
- Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #6801
- Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 #6549
- Update docker.io/library/golang Docker tag to v1.20.4 #6752
- Update github.com/docker/docker #6654
- Update k8s to v0.26.3 #6546
- Update k8s.io/client-go to v0.26.5 #6849
- Update module cloud.google.com/go/storage to v1.30.0 #6531
- Update module github.com/go-git/go-git/v5 to v5.6.1 #6536
- Update module github.com/go-logr/logr to v1.2.4 #6625
- Update module github.com/google/go-containerregistry to v0.14.0 #6532
- Update module github.com/hashicorp/vault/api to v1.9.1 #6707
- Update module github.com/imdario/mergo to v0.3.15 #6581
- Update module github.com/operator-framework/operator-registry to v1.26.5 #6622
- Update module github.com/prometheus/client_golang to v1.15.0 #6686
- Update module github.com/spf13/cobra to v1.7.0 #6647
- Update module go.elastic.co/apm/module/apmelasticsearch/v2 to v2.3.0 #6631
- Update module go.elastic.co/apm/module/apmzap/v2 to v2.3.0 #6633
- Update module go.uber.org/automaxprocs to v1.5.2 #6547
- Update module golang.org/x/crypto to v0.8.0 #6669
- Update module golang.org/x/text to v0.9.0 #6666
- Update module google.golang.org/api to v0.115.0 #6651
- Update module sigs.k8s.io/controller-runtime to v0.14.6 #6614
- Update module sigs.k8s.io/controller-tools to v0.11.4 #6718
- Update modules go.elastic.co/apm/* to v2.4.1 #6739
- Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.7-1107 #6646
2.7.0
Elastic Cloud on Kubernetes 2.7.0
Enhancements
- Add a new role for APM Server 8.7.0+ #6605
- Remove deprecation note for APM Server standalone #6601 (#6207)
- Expose all fields below spec in eck-elasticsearch Helm chart #6492 (#6451)
- Allow optional SSL client authentication setting #6440 (#6369)
- Allow setting of volumeClaimDeletePolicy in eck-elasticsearch Helm chart #6409 (#6249)
- Update ECK OperatorHub capability level to L4 #6318
- Support auth for custom users and roles in eck-elasticsearch Helm chart #6306
- Do not overwrite deployment status when reconciling #6302
- Move to vX.X.X tags for easier go module imports #6298 (#6134)
Bug fixes
- Add missing maps webhook, fix inconsistencies #6489 (#6151, #6152)
- Fix handling of unmanaged esRef in Beats Stack Monitoring #6482 (#5880, #6230)
- Fix EnterpriseSearch upgrade with TLS disabled #6224 (#6185)
Documentation improvements
- Update OpenShift supported versions to 4.8-4.12 #6597
- Update Kubernetes supported versions to 1.22-1.26 #6593 (#6571)
- Document FIPS image and OpenShift default namespace limitation #6428 (#6332)
- Adding an exhaustive list of Helm chart values to eck-elasticsearch Helm chart #6336 (#6187)
- Update Logstash recipe #6333 (#6258, #6328)
- Fix yaml Kibana example in saml authentication doc #6301
- Fix minor typo in upgrading-eck doc #6198
Misc
- Update module github.com/prometheus/common to v0.42.0 #6500
- Update docker.io/library/golang Docker tag to v1.20.2 #6497
- Update module golang.org/x/crypto to v0.7.0 #6486
- Update module golang.org/x/text to v0.8.0 #6484
- Update module sigs.k8s.io/controller-runtime to v0.14.5 #6474
- Update module k8s.io/klog/v2 to v2.90.1 #6473
- Update k8s to v0.26.2 #6466
- Update module github.com/stretchr/testify to v1.8.2 #6456
- Update module github.com/gobuffalo/flect to v1.0.2 #6455
- Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.7-1085 #6438
- Update module github.com/hashicorp/vault/api to v1.9.0 #6403
- Update github.com/dgryski/go-lttb digest to f8fc36c #6387
- Update module sigs.k8s.io/controller-tools to v0.11.3 #6366
- Update module github.com/google/go-containerregistry to v0.13.0 #6353
- Update module github.com/spf13/viper to v1.15.0 #6343
- Update module gopkg.in/yaml.v2 to v3 #6252
- Update module github.com/hashicorp/golang-lru to v2 #6251
- Update module github.com/go-test/deep to v1.1.0 #6222
- Update module github.com/magiconair/properties to v1.8.7 #6217
- Update module go.uber.org/zap to v1.24.0 #6202
- Update module github.com/Masterminds/sprig/v3 to v3.2.3 #6197
2.6.1
Elastic Cloud on Kubernetes 2.6.1
Bug fixes
2.6.0
Elastic Cloud on Kubernetes v2.6.0
New features
- New CRD StackConfigPolicy to declaratively configure multiple Elasticsearch clusters. #6148
- ECK resources Helm Chart - Beats. #5899 (issue: #5505)
Enhancements
- Expose Kubernetes client QPS as a flag. #6157
- Extend existing reattach-pv tool to allow using existing PVs to create newly named cluster. #6118
- Add container-suffix operator flag to allow users to specify a container suffix to be applied across all Elastic stack container images. #6086 (issue: #6064)
- Elasticsearch observer improvements to avoid blocking between workers. #6084 (issue: #6078)
- Improve user password hash comparison performance by utilizing an LRU cache. #6080 (issue: #6076)
- Add default securityContext to the manager container in Operator Helm Chart. #6047
- Allow Fleet Server to be run without TLS. #6020 (issue: #6000)
Bug fixes
- Fix potential panic in Elasticsearch client equal function. #6128
- Increment ECK-stack Helm chart version to support addition of Agent/Fleet Server. #6179
- Try to reconcile license even in absence of known health status #6278 (issue: #6274)
Documentation improvements
- Add experimental label to the StackConfigPolicy doc. #6247
- Document Elastic Stack configuration policies. #6215
- Update eck-diagnostics documentation for filters. #6191
- Add additional Helm documentation for Fleet Server, and Agent. #6154
- Update the list of Kibana keys managed by the operator. #6119
- Document limitation on Minikube without CNI. #6075
- Add latest APM fleet package in Kibana examples when using standalone APM server. #6063 (issue: #5059)
Misc
- Update module github.com/hashicorp/golang-lru to v0.6.0 #6172
- Update module github.com/google/go-containerregistry to v0.12.1 #6168
- Update k8s to v0.25.4 #6167
- Update module helm.sh/helm/v3 to v3.10.2 #6166
- Update module golang.org/x/oauth2 to v0.2.0 #6159
- Update module golang.org/x/crypto to v0.2.0 #6158
- Update module golang.org/x/net to v0.2.0 #6155
- Update module github.com/prometheus/client_golang to v1.14.0 #6150
- Update module github.com/spf13/viper to v1.14.0 #6145
- Update module sigs.k8s.io/controller-runtime to v0.13.1 #6141
- Update module github.com/prometheus/client_golang to v1.13.1 #6136
- Update docker.io/library/golang Docker tag to v1.19.3 #6135
- Update module go.elastic.co/apm/module/apmzap/v2 to v2.2.0 #6131
- Update module go.elastic.co/apm/module/apmelasticsearch/v2 to v2.2.0 #6129
- Update module github.com/hashicorp/vault/api to v1.8.2 #6127
- Update module github.com/spf13/cobra to v1.6.1 #6110
- Update module golang.org/x/text to v0.4.0 #6100