v0.48.3

v0.48.3 - 29 Sep 2024

• vmcluster: properly apply global container registry from configuration. It was ignored for VMCluster since v0.48.0 release. See this issue for details.
• operator: updates default vlogs app version to v0.32.0
• operator: adds new flag --disableControllerForCRD. It allows to disable reconcile controller for the given comma-separated list of CRD names. See this issue for details.

v0.48.2

v0.48.2 - 27 Sep 2024

• operator: properly expose vm_app_version metric tag with version and short_version build info. It was broken since v0.46.0 release.
• operator: changes default value for controller.maxConcurrentReconciles from 1 to 5. It should improve reconcile performance for the most installations.
• operator: expose new runtime metrics rest_client_request_duration_seconds, sched_latencies_seconds. It allows to better debug operator reconcile latencies.

v0.48.1

v0.48.1 - 26 Sep 2024

• vmalertmanager: properly build service, previously port by number instead of name was used. It produced updating service log messages.
• vmcluster: properly add imagePullSecrets to the components. Due to bug at 0.48.0 operator ignored vmcluster.spec.imagePullSecrets See this issue for details.

v0.48.0

v0.48.0 - 25 Sep 2024

• api: adds new fields useVMConfigReloader, configReloaderImageTag, configReloaderResources to the VMagent, VMAlert, VMAuth, and VMAlertmanager.
• api/vmalertmanager: adds new field enforcedTopRouteMatchers. It adds given alert label matchers to the top route of any VMAlertmanagerConfig. See this issue for details.
• api: adds underscore version of host_aliases setting, which has priority over hostAliases.
• api: adds useDefaultResources setting to the all applications. It has priority over global operator setting.
• api: adds clusterDomainName to the VMCluster and VMAlertmanager. It defines optional suffix for in-cluster addresses.
• api: adds disableSelfServiceScrape setting to the all applications. It has priority over global operator setting.
• api: Extends applications securityContext and apply security configuration parameters to the containers.
• api: deletes unused env variables: VM_DEFAULTLABELS, VM_PODWAITREADYINITDELAY. Adds new variable VM_APPREADYTIMEOUT.
• vmalert: adds missing hostAliases fields to spec. See this issue for details.
• operator: updates default vm apps version to v1.103.0
• vmsingle/vlogs: makes better compatible with argo-cd by adding ownerReference to PersistentVolumeClaim. See this issue for details.
• operator: reduces reconcile latency. See this commit for details.
• operator: reduces load on kubernetes api-server. See this commits: commit-0, commit-1, commit-2.
• operator: enables client cache back for secrets and configmaps. Adds new flag -controller.disableCacheFor=seccret,configmap to disable it if needed.
• operator: made webhook port configurable. See this issue for details.
• operator: operator trims spaces from Secret and Configmap values by default. This behaviour could be changed with flag disableSecretKeySpaceTrim. Related issue.
• operator: expose again only command-line flags related to the operator. Release v0.45.0 added regression with incorrectly exposed flags.
• operator: bump vm version to 1.103.0 by @hagen1778 in #1088
• operator: respect the enabled status of PDB by @Dentrax in #1109

New Contributors

• @func25 made their first contribution in #1097
• @Dentrax made their first contribution in #1109

Full Changelog: v0.47.3...v0.48.0

v0.48.0-rc1

v0.48.0-rc1 - 25 Sep 2024

• api: adds new fields useVMConfigReloader, configReloaderImageTag, configReloaderResources to to the VMagent, VMAlert, VMAuth, and VMAlertmanager.
• api/vmalertmanager: adds new field enforcedTopRouteMatchers. It adds given alert label matchers to the top route of any VMAlertmanagerConfig. See this issue for details.
• api: adds underscore version of host_aliases setting, which has priority over hostAliases.
• api: adds useDefaultResources setting to the all applications. It has priority over global operator setting.
• api: adds clusterDomainName to the VMCluster and VMAlertmanager. It defines optional suffix for in-cluster addresses.
• api: adds disableSelfServiceScrape setting to the all applications. It has priority over global operator setting.
• api: Extends applications securityContext and apply security configuration parameters to the containers.
• api: deletes unused env variables: VM_DEFAULTLABELS, VM_PODWAITREADYINITDELAY. Adds new variable VM_APPREADYTIMEOUT.
• vmalert: adds missing hostAliases fields to spec. See this issue for details.
• operator: updates default vm apps version to v1.103.0
• vmsingle/vlogs: makes better compatible with argo-cd by adding ownerReference to PersistentVolumeClaim. See this issue for details.
• operator: reduces reconcile latency. See this commit for details.
• operator: reduces load on kubernetes api-server. See this commits: commit-0, commit-1, commit-2.
• operator: enables client cache back for secrets and configmaps. Adds new flag -controller.disableCacheFor=seccret,configmap to disable it if needed.
• operator: made webhook port configurable. See this issue for details.
• operator: operator trims spaces from Secret and Configmap values by default. This behaviour could be changed with flag disableSecretKeySpaceTrim. Related issue.

v0.47.3

v0.47.3 - 28 Aug 2024

• operator: fixes statefulset reconcile endless loop for kubernetes versions < 1.27. Bug introduced at v0.47.0 version with commit.

v0.47.2

v0.47.2 - 26 Aug 2024

• vmalertmanager: allow to change webserver listen port with spec.Port. See this PR for details.
• operator: updates default vm apps version to v1.102.1
• operator: fixes statefulset rollingUpdate strategyType readiness check.
• operator: fixes statefulset reconcile endless loop bug introduced at v0.47.1 version with commit.
• vmuser: fixes crd.kind enum param for VMAlertmanager, it now supports both VMAlertmanager and VMAlertManager. See this issue for details.
• operator: adds sorting for configReloaderExtraArgs.

v0.47.1

v0.47.1 - 23 Aug 2024

It is recommended upgrading to operator v0.47.2 because v0.47.1 contains a bug, which can lead to endless statefulset reconcile loop.

• operator: properly update statefulset on revisionHistoryLimitCount change. See this issue for details.
• vmalertmanagerconfig: properly construct tls_config for emails notifications. See this issue for details.
• operator: fixed Prometheus scrape config metricsPath conversion. See this issue
• config-reloader: Added reload prefix to all config-reloader tls* flags to avoid collision with flags from external package. See this issue

v0.47.0

v0.47.0 - 15 Aug 2024

Breaking changes

• Update note 1: operator now forbids cross VMAlertmanagerConfig or global receiver references. VMAlertmanagerConfig must include only local receivers .

• Update note 2: removed deprecated mute_time_intervals from VMAlertmanagerConfig.spec. Use VMAlertmanagerConfig.spec.time_intervals instead.

• Update note 3: operator adds blackhole as default route for VMalertmanager if root route receiver is empty. Previously it added a first VMAlertmanagerConfig receiver. Update global VMalertmanager configuration with proper route receiver if needed

• victoria-logs: added VLogs resource for VictoriaLogs management. Related issue.

• config-reloader: adds new flags tlsCaFile, tlsCertFile,tlsKeyFile,tlsServerName,tlsInsecureSkipVerify. It allows to configure tls for reload endpoint. Related issue.

• vmuser: adds status.lastSyncError field, adds server-side validation for spec.targetRefs.crd.kind. Adds small refactoring.

• vmuser: allows to skip VMUser from VMAuth config generation if it has misconfigured fields. Such as references to non-exist CRD objects or missing fields. It's highly recommended to enable Validation webhook for VMUsers, it should reduce surface of potential misconfiguration. See this issue for details.

• vmagent: adds status and lastSyncError status fields to all scrape objects - VMServiceScrape, VMPodScrape, VMNodeScrape,VMPodScrape, VMStaticScrape and VMScrapeConfig. It allows to track config generation for vmagent from scrape objects.

• operator: refactors config builder for VMAgent. It fixes minor bug with incorrect skip of scrape object with incorrect references for secrets and configmaps.

• operator: allows to secure metrics-bind-address webserver with TLS and mTLS protection via flags tls.enable,tls.certDir,tls.certName,tls.key``,mtls.enable,mtls.clietCA`. See this issue for details.

• operator: fixes bug with possible tlsConfig SecretOrConfigmap references clash. Operator adds configmap prefix to the configmap refrenced tls asset. See this issue for details.

• operator: properly release PodDisruptionBudget object finalizer. Previously it could be kept due to typo. See this issue for details.

• operator: refactors finalizers usage. Simplifies finalizer manipulation with helper functions

• operator: adds tls_config and authKey settings to auto-created VMServiceScrape for CRD objects from extraArgs. See this issue for details.

• vmalertmanagerconfig: Improves config validation. Now it properly tracks required fields and provides better feedback for misconfiguration. Adds new status fields - status and lastSyncError. Related issue.

• vmalertmanager: adds webConfig that simplifies tls configuration for alertmanager and allows to properly build probes and access urls for alertmanager. See this issue for details.

• vmalertmanager: adds gossipConfig to setup client and server TLS configuration for alertmanager.

• vmagent/vmsingle: sync stream aggregation options dropInputLabels, ignoreFirstIntervals, ignoreOldSamples from upstream, and support using configMap as the source of aggregation rules.

• operator: added -client.qps and -client.burst flags to override default QPS and burst K8S params. Related issue.

v0.46.4

v0.46.4 - 9 Jul 2024

Breaking changes

• Update note 1: for operatorhub based VMAgent deployment serviceAccount vmagent must be removed. It's no longer shipped with bundle. After deletion operator will create new account with needed permissions.

• [manifests]: properly add webhook.enable for operatorhub deployments. See this commit 7a460b0 for details.

• [manifests]: removes exact user from runAsUser setting. It must be defined at docker image or security profile level. See this commit 1cc4a0e for details. by @AndrewChubatiuk

• operator: switches from distroless to scratch base image. See this commit 768bf76 for details. by @AndrewChubatiuk

• config-reloader: do not specify command for container. command configured at docker image level. See this commit 2192115 for details. by @AndrewChubatiuk

• [build-scripts]: fixed replaced version extraction by @AndrewChubatiuk in #1026

Full Changelog: v0.46.3...v0.46.4