v2.12.1

Elastic Cloud on Kubernetes 2.12.1

• Release highlights
• Quickstart guide

Bug fixes

• Move desired nodes version gate in the client #7663 (#7664)

v2.12.0

Elastic Cloud on Kubernetes 2.12.0

• Release highlights
• Quickstart guide

Enhancements

• Remove noisy stack config policy log line #7582 (issue: #7529)
• Increase the default PVC size for logstash #7540 (issue: #7538)
• Add eck-apm-server Helm Chart #7533 (issue: #7489)
• Add Health to Logstash Status #7528 (issue: #7527)
• Add resourceStatuses back into stack config policy status for backwards compatibility #7500
• Add support for updateStrategy in Logstash #7466
• Add TLS and basic authentication integration to Logstash API server #7408 (issue: #6971)
• Add support for securing the operator metrics endpoint with RBAC and TLS #7567
• Remove Enterprise license restriction from ECK stack Helm charts #7621

Bug fixes

• Fix having multiple type keys in eck-beats chart #7523 (issue: #7487)
• Use eck-operator UBI image when ubiOnly=true. #7486 (issue: #7485)
• Fix Logstash crashes with env #7475 (issue: #7450)

Documentation improvements

• Fix Logstash quickstart docs using single-quote EOF to avoid expanding variables #7580 (issue: #7572)
• Fix typo in managing-compute-resources documentation #7563
• Update APM Server docs for use since 8.x requiring Kibana #7559 (issue: #7541)
• Remove initContainer section in Logstash plugin docs #7557
• Add caution concerning running differing versions of CRDs + operator #7503
• Fix small typo in uninstall docs #7436

Misc

• fix(deps): update module golang.org/x/crypto to v0.20.0 #7578
• fix(deps): update module go.uber.org/zap to v1.27.0 #7577
• fix(deps): update module github.com/prometheus/common to v0.48.0 #7570
• fix(deps): update k8s to v0.29.2 and controller-runtime to v0.17.2 #7568
• fix(deps): update module github.com/hashicorp/vault/api to v1.12.0 #7550
• chore(deps): update docker.io/library/golang docker tag to v1.22.0 #7549
• fix(deps): update module github.com/google/go-containerregistry to v0.19.0 #7517
• fix(deps): update k8s to v0.29.1 #7505
• chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.3-1552 #7501
• fix(deps): update module github.com/google/uuid to v1.6.0 #7496
• fix(deps): update module k8s.io/klog/v2 to v2.120.1 #7484
• fix(deps): update module go.elastic.co/apm/v2 to v2.4.8 #7472
• fix(deps): update module sigs.k8s.io/controller-tools to v0.14.0 #7461
• fix(deps): update module github.com/spf13/viper to v1.18.2 #7458
• fix(deps): update module github.com/prometheus/client_golang to v1.18.0 #7417
• fix(deps): update module github.com/go-logr/logr to v1.4.1 #7409

v2.11.1

Elastic Cloud on Kubernetes 2.11.1

• Release highlights
• Quickstart guide

Bug fixes

• Add resourceStatuses back into the status subresource section of the Stack Configuration Policy for backwards compatability #7500

v2.11.0

Elastic Cloud on Kubernetes 2.11.0

• Release highlights
• Quickstart guide

New features

• Introduce Kibana config field in stack config policy #7324
• Introduce Elasticsearch config and additional secret mounts to stack config policy #7233
• Add StatefulSet as a deployment option for Elastic Agent #7357

Enhancements

• Allow Agent and Elastic stack in different namespaces. #7382 (issue: #7352)
• Support -ubi suffix starting 8.12.0 and 7.17.16 #7368
• Update to ubi9 and use -ubi prefix for operator image #7321
• Allow setting additional operator flags via the Helm chart #7252 (issue: #6091)
• Support configuring "ca-dir" operator setting via helm #7243 (issues: #6091, #6435)

Bug fixes

• Update eck-elasticsearch default secureSettings values to be slice #7397
• Fix recipe name to run Fleet as non-root #7313 (issue: #7312)

Documentation improvements

• Document how to use stack config policies to manage authentication #7381
• Fix secure settings link on stack config policy page #7377
• Document known issue with Kibana 8.11.2 using secure settings #7373 (issue: #7371)
• Add details about rolling restart behavior #7372
• Update node configuration documentation to note reserved settings #7351
• Use docker.io/bash for sleep container of max-map-count-setter Daemonset #7332
• Update Beats stack monitoring recipe #7322
• Document basic snapshot repository setup for Azure #7308
• Documentation link replaced with markup in 2.10 release notes #7306
• Make plugin installation via initContainer more robust #7305
• Add additional details on CA requirements. #7271
• Document how to provide container registry credentials in air-gapped environments #7256)

Misc

• Bump golang.org/x/crypto from 0.16.0 to 0.17.0 #7394
• chore(deps): update docker.io/library/golang docker tag to v1.21.5 #7366
• fix(deps): update module github.com/google/go-containerregistry to v0.17.0 #7355
• fix(deps): update module go.elastic.co/apm/v2 to v2.4.7 #7337
• Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 #7329
• chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9 #7326
• fix(deps): update k8s to v0.28.4 #7319
• fix(deps): update module github.com/spf13/cobra to v1.8.0 #7288
• Update docker v24.0.7+incompatible #7282
• fix(deps): update module k8s.io/klog/v2 to v2.110.1 #7278
• fix(deps): update module github.com/go-logr/logr to v1.3.0 #7272
• fix(deps): update module github.com/google/uuid to v1.4.0 #7270
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.16.3 #7249
• fix(deps): update module github.com/prometheus/common to v0.45.0 #7246

v2.10.0

Elastic Cloud on Kubernetes 2.10.0

• Release highlights
• Quickstart guide

Enhancements

• Allow setting additional operator flags via the Helm chart #7252
• Support configuring "ca-dir" operator setting via Helm #7243
• Logstash Elastic Stack Helm Chart #7143
• Support for Logstash secure settings from Kubernetes Secrets using keystore #7024
• Support running Agent as a non-root #6700

Bug fixes

• Update ECK-Beats default values to not include ElasticsearchRef. #7228
• Updating scripts configMap no longer causes Elasticsearch restart #7114 (issue: #6963)
• Remove volumeClaimTemplates status sub-resource from Elasticsearch CRD #7097
• Fix indentation to specify affinity, nodeSelector and tolerations in operator Helm chart #7084

Documentation improvements

• Better sample command outputs in the Agent Fleet documentation #7213
• Improved documentation about how to reset the default user's password #7181 (issue: #7182)
• Removed trailing whitespaces from operator's values.yaml file. #7179 (issue: #7178)
• Update beat/agent doc with missing RBAC rules required from 8.9.0 #7161 (issue: #6946)
• Better documentation of podDisruptionBudget for Elasticsearch.spec #7155
• Kubernetes 1.28 added to supported versions #7147
• Fix incorrect Pod template spec in Logstash docs #7124
• SAML documentation examples no longer use a deprecated callback URL #7117 (issue:#7118)
• SAML documentation examples have a trailing slash in sp.entity_id #7115 (issue: #7116)
• Fix manifest example to update JVM options for Logstash #7113
• Stack monitoring documentation examples updated to use v1alpha1 as Logstash k8s api version #7111
• Update saml-authentication.asciidoc #7101
• Fix sed command to use FIPS compatible operator image in FIPS doc #7076
• Update docs concerning intermediate CAs #7066
• Stack config policies are no longer marked as experimental #7044
• Air-gapped documentation describes how to use a mirrored operator image #7019
• Update Fleet Server quickstart documentation to use emptyDir for agent-data volumes #6563

Misc

• Update module golang.org/x/net to 0.17.0 #7229
• fix(deps): update module go.elastic.co/apm/v2 to v2.4.5 #7218
• fix(deps): update module github.com/google/go-cmp to v0.6.0 #7216
• chore(deps): update docker.io/library/golang docker tag to v1.21.3 #7215
• fix(deps): update module google.golang.org/api to v0.146.0 #7211
• chore(deps): update registry.access.redhat.com/ubi8/ubi-minimal docker tag to v8.8-1072.1696517598 #7210
• fix(deps): update module github.com/spf13/viper to v1.17.0 #7209
• fix(deps): update module golang.org/x/crypto to v0.14.0 #7203
• fix(deps): update module github.com/hashicorp/golang-lru/v2 to v2.0.7 #7193
• fix(deps): update module github.com/prometheus/client_golang to v1.17.0 #7186
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.16.2 #7185
• fix(deps): update module go.uber.org/zap to v1.26.0 #7169
• fix(deps): update k8s to v0.28.2 #7165
• fix(deps): update module github.com/hashicorp/vault/api to v1.10.0 #7152
• Update module github.com/google/go-containerregistry to v0.16.1 #7073
• Update module go.uber.org/automaxprocs to v1.5.3 #7042
• Update module sigs.k8s.io/controller-tools to v0.12.1 #7011

v2.9.0

Elastic Cloud on Kubernetes 2.9.0

• Release highlights
• Quickstart guide

Breaking changes

• Add Support for volumeClaimTemplates for Logstash controller #6884

Enhancements

• Enable runAsNonRoot=true for Beats >= 8.8.x #6793

Bug fixes

• Validating policy ID only when running in Fleet mode for Elastic Agent #6938 (issue: #6903)
• Add Selector to Logstash status #6854

Documentation improvements

• Document Logstash connection to external Elasticsearch #6895

Misc

• Update module golang.org/x/text to v0.11.0 #6976
• Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.8-1014 #6962
• Disable test agent with fleet mode in 8.0.1 #6957 (issues: #6331, #6956)
• Update module go.elastic.co/apm/v2 to v2.4.3 #6942
• Update module github.com/hashicorp/golang-lru/v2 to v2.0.4 #6935
• Update module github.com/imdario/mergo to v1 #6925
• Update module github.com/prometheus/client_golang to v1.16.0 #6909
• Update k8s to v0.27.3 #6908
• Update module golang.org/x/crypto to v0.10.0 #6900
• Update docker.io/library/golang Docker tag to v1.20.5 #6887
• Update module github.com/spf13/viper to v1.16.0 #6867
• Update module github.com/stretchr/testify to v1.8.4 #6866
• Update module sigs.k8s.io/controller-runtime to v0.15.0 #6847
• Update module github.com/prometheus/common to v0.44.0 #6835
• Update module github.com/google/go-containerregistry to v0.15.2 #6817
• Update module golang.org/x/oauth2 to v0.8.0 #6771
• Update module golang.org/x/net to v0.10.0 #6770

2.8.0

Elastic Cloud on Kubernetes 2.8.0

Warning This release includes a hardened default security context for Elasticsearch containers. It is highly recommended to test against a staging environment before deploying to production.

• Release highlights
• Quickstart guide

Breaking changes

• Use provided base path for stackconfigpolicy's snapshot repository #6689 (issue: #6692)
• APM Server: Fix secret token config for APM Server 8.0+ #6769 (issue: #6768)

New features

• Introduce the Logstash operator for ECK #6732 (issue: #1453)

Enhancements

Elasticsearch

• Call _nodes/shutdown from pre-stop hook #6544 (issue: #6478)
• Create Elasticsearch client for observer only if needed #6407 (issue: #6090)
• Add the full CA certificate chain to trusted HTTP certs for Elasticsearch #6681 (issue: #6574)
• Allow custom certificates on the transport layer #6727 (issue: #6479)
• Hardened Security Context for Elasticsearch #6703 (issue: #6126)

Helm charts

• Enable hostNetwork support in eck-operator Helm chart #6636
• Add PodDisruptionBudget to eck-operator Helm chart #6671

ECK Operator

• Add operator flag to define webhook port #6691 (issue: #6655)
• Add operator flag to define global container repository #6737 (issue: #6643)

Fleet

• Deprecate is_default and is_default_fleet_server flags #6724 (issue: #6678)

Bug fixes

• Fix doc attributes in stack-helm-chart.asciidoc #6742
• Do not set FLEET_CA for well-known CAs #6733 (issue: #6673)
• Fix default elasticsearch-data volumeMount configuration #6725 (issue: #6186)
• Conditionally set container-suffix in ECK config #6711 (issue: #6695)
• [helm-chart] Include webhook client configuration CA only when certificates are not managed by the operator or cert-manager #6642 (issue: #6641)
• Remove default for daemonset/deployment in eck-beats & eck-agent Helm Charts #6621 (issue: #6330)

Documentation improvements

• Documentation for running ECK, Elasticsearch, and Kibana on GKE Autopilot #6760
• Contributing page updated with Helm chart tests suite #6744
• Documentation for Logstash on ECK #6743
• Add 2.6 and 2.7 to the triggered restart list #6786 (issue: #6765)

Misc

• Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #6801
• Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 #6549
• Update docker.io/library/golang Docker tag to v1.20.4 #6752
• Update github.com/docker/docker #6654
• Update k8s to v0.26.3 #6546
• Update k8s.io/client-go to v0.26.5 #6849
• Update module cloud.google.com/go/storage to v1.30.0 #6531
• Update module github.com/go-git/go-git/v5 to v5.6.1 #6536
• Update module github.com/go-logr/logr to v1.2.4 #6625
• Update module github.com/google/go-containerregistry to v0.14.0 #6532
• Update module github.com/hashicorp/vault/api to v1.9.1 #6707
• Update module github.com/imdario/mergo to v0.3.15 #6581
• Update module github.com/operator-framework/operator-registry to v1.26.5 #6622
• Update module github.com/prometheus/client_golang to v1.15.0 #6686
• Update module github.com/spf13/cobra to v1.7.0 #6647
• Update module go.elastic.co/apm/module/apmelasticsearch/v2 to v2.3.0 #6631
• Update module go.elastic.co/apm/module/apmzap/v2 to v2.3.0 #6633
• Update module go.uber.org/automaxprocs to v1.5.2 #6547
• Update module golang.org/x/crypto to v0.8.0 #6669
• Update module golang.org/x/text to v0.9.0 #6666
• Update module google.golang.org/api to v0.115.0 #6651
• Update module sigs.k8s.io/controller-runtime to v0.14.6 #6614
• Update module sigs.k8s.io/controller-tools to v0.11.4 #6718
• Update modules go.elastic.co/apm/* to v2.4.1 #6739
• Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.7-1107 #6646

2.7.0

Elastic Cloud on Kubernetes 2.7.0

• Release highlights
• Quickstart guide

Enhancements

• Add a new role for APM Server 8.7.0+ #6605
• Remove deprecation note for APM Server standalone #6601 (#6207)
• Expose all fields below spec in eck-elasticsearch Helm chart #6492 (#6451)
• Allow optional SSL client authentication setting #6440 (#6369)
• Allow setting of volumeClaimDeletePolicy in eck-elasticsearch Helm chart #6409 (#6249)
• Update ECK OperatorHub capability level to L4 #6318
• Support auth for custom users and roles in eck-elasticsearch Helm chart #6306
• Do not overwrite deployment status when reconciling #6302
• Move to vX.X.X tags for easier go module imports #6298 (#6134)

Bug fixes

• Add missing maps webhook, fix inconsistencies #6489 (#6151, #6152)
• Fix handling of unmanaged esRef in Beats Stack Monitoring #6482 (#5880, #6230)
• Fix EnterpriseSearch upgrade with TLS disabled #6224 (#6185)

Documentation improvements

• Update OpenShift supported versions to 4.8-4.12 #6597
• Update Kubernetes supported versions to 1.22-1.26 #6593 (#6571)
• Document FIPS image and OpenShift default namespace limitation #6428 (#6332)
• Adding an exhaustive list of Helm chart values to eck-elasticsearch Helm chart #6336 (#6187)
• Update Logstash recipe #6333 (#6258, #6328)
• Fix yaml Kibana example in saml authentication doc #6301
• Fix minor typo in upgrading-eck doc #6198

Misc

• Update module github.com/prometheus/common to v0.42.0 #6500
• Update docker.io/library/golang Docker tag to v1.20.2 #6497
• Update module golang.org/x/crypto to v0.7.0 #6486
• Update module golang.org/x/text to v0.8.0 #6484
• Update module sigs.k8s.io/controller-runtime to v0.14.5 #6474
• Update module k8s.io/klog/v2 to v2.90.1 #6473
• Update k8s to v0.26.2 #6466
• Update module github.com/stretchr/testify to v1.8.2 #6456
• Update module github.com/gobuffalo/flect to v1.0.2 #6455
• Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.7-1085 #6438
• Update module github.com/hashicorp/vault/api to v1.9.0 #6403
• Update github.com/dgryski/go-lttb digest to f8fc36c #6387
• Update module sigs.k8s.io/controller-tools to v0.11.3 #6366
• Update module github.com/google/go-containerregistry to v0.13.0 #6353
• Update module github.com/spf13/viper to v1.15.0 #6343
• Update module gopkg.in/yaml.v2 to v3 #6252
• Update module github.com/hashicorp/golang-lru to v2 #6251
• Update module github.com/go-test/deep to v1.1.0 #6222
• Update module github.com/magiconair/properties to v1.8.7 #6217
• Update module go.uber.org/zap to v1.24.0 #6202
• Update module github.com/Masterminds/sprig/v3 to v3.2.3 #6197

2.6.1

Elastic Cloud on Kubernetes 2.6.1

• Release highlights
• Quickstart guide

Bug fixes

• Update minimum version to use Elasticsearch file-based settings feature #6305 (issue: #6303)

2.6.0

Elastic Cloud on Kubernetes v2.6.0

• Release highlights
• Quickstart guide

New features

• New CRD StackConfigPolicy to declaratively configure multiple Elasticsearch clusters. #6148
• ECK resources Helm Chart - Beats. #5899 (issue: #5505)

Enhancements

• Expose Kubernetes client QPS as a flag. #6157
• Extend existing reattach-pv tool to allow using existing PVs to create newly named cluster. #6118
• Add container-suffix operator flag to allow users to specify a container suffix to be applied across all Elastic stack container images. #6086 (issue: #6064)
• Elasticsearch observer improvements to avoid blocking between workers. #6084 (issue: #6078)
• Improve user password hash comparison performance by utilizing an LRU cache. #6080 (issue: #6076)
• Add default securityContext to the manager container in Operator Helm Chart. #6047
• Allow Fleet Server to be run without TLS. #6020 (issue: #6000)

Bug fixes

• Fix potential panic in Elasticsearch client equal function. #6128
• Increment ECK-stack Helm chart version to support addition of Agent/Fleet Server. #6179
• Try to reconcile license even in absence of known health status #6278 (issue: #6274)

Documentation improvements

• Add experimental label to the StackConfigPolicy doc. #6247
• Document Elastic Stack configuration policies. #6215
• Update eck-diagnostics documentation for filters. #6191
• Add additional Helm documentation for Fleet Server, and Agent. #6154
• Update the list of Kibana keys managed by the operator. #6119
• Document limitation on Minikube without CNI. #6075
• Add latest APM fleet package in Kibana examples when using standalone APM server. #6063 (issue: #5059)

Misc

• Update module github.com/hashicorp/golang-lru to v0.6.0 #6172
• Update module github.com/google/go-containerregistry to v0.12.1 #6168
• Update k8s to v0.25.4 #6167
• Update module helm.sh/helm/v3 to v3.10.2 #6166
• Update module golang.org/x/oauth2 to v0.2.0 #6159
• Update module golang.org/x/crypto to v0.2.0 #6158
• Update module golang.org/x/net to v0.2.0 #6155
• Update module github.com/prometheus/client_golang to v1.14.0 #6150
• Update module github.com/spf13/viper to v1.14.0 #6145
• Update module sigs.k8s.io/controller-runtime to v0.13.1 #6141
• Update module github.com/prometheus/client_golang to v1.13.1 #6136
• Update docker.io/library/golang Docker tag to v1.19.3 #6135
• Update module go.elastic.co/apm/module/apmzap/v2 to v2.2.0 #6131
• Update module go.elastic.co/apm/module/apmelasticsearch/v2 to v2.2.0 #6129
• Update module github.com/hashicorp/vault/api to v1.8.2 #6127
• Update module github.com/spf13/cobra to v1.6.1 #6110
• Update module golang.org/x/text to v0.4.0 #6100