Release 2.4.0 (2023 Q4)

Infrastructure

  • Added support for Ubuntu 22.04.3 LTS and RED OS 7.3.3 (kernels 5.15 and 6.1).
  • Changed the permission list for configuring the VMWare vSphere provider. The updated list is available in the documentation in Platform Administration/Providers/vSphere.
  • Updated Kubernetes version from 1.26.5 to 1.27.6.
  • Updated Cilium version from 1.12.8 to v1.14.1. The change affected required fields for Egress configuration; the API has changed.
  • Updated Cert Manager. API contract version changed (issuer/clusterIssuer).

Platform

  • Extended regular expression for searching account data in Active Directory when integrating with LDAP.

Security

  • On the “Manifests” page in Cluster/Security, the violated policies report block now displays data on the number of policy triggers in namespace pods, as well as policy descriptions. Added sorting and filtering. Added the ability to download reports in CSV and PDF formats.
  • On the “Image Analysis” page in Cluster/Security, added the ability to download reports in CSV and PDF formats.
  • On the Scan Results page in Cluster/Security, added the ability to download reports in CSV and PDF formats.
  • Implemented automatic token revocation to interrupt sessions every 24 hours. Note that to access the cluster via kubeconfig, you will also need to download a new kubeconfig in a new session.
  • Added the ability to assign roles and clusterroles to Service Accounts.

Logs

  • Added the ability to go to OpenSearch from the cluster dashboard by clicking “View logs”. The transition uses the user token. Added instructions for enabling application software log collection and forwarding. Added instructions for log rotation and security event log configuration. Instructions are available in the documentation in Cluster Administration/Cluster logs.
  • Added FluentBit multiline parser with preconfigured languages go, java, python, ruby.

Clusters

  • Added the ability to create a cluster with the Shturval Manual provider without Worker nodes.
  • Implemented a ban on deleting provider templates on which clusters are deployed.
  • Implemented a ban on navigating to a cluster page in the deletion phase.

Node management

  • On the Node page, implemented node actions: Cordon, Uncordon, Drain. On the “Node Management” page, added Scheduling indicator with Enabled value when the node is available for new pods, and Disabled when unavailable.
  • Added the ability to exclude a node from autoscaling to protect it from deletion during scale-down. The “Exclude from autoscaling” button is available on the Worker node page when automatic scaling is selected in the Worker node group configuration. Nodes excluded from autoscaling are marked with “Autoscaling disabled” on the “Node Management” page.
  • Added Master suffix when creating ControlPlane machines on the vSphere provider.

Namespaces

  • Added the ability to create a new namespace on the system service installation form.
  • Added the ability to delete Job and Cronjob objects with re-creation. When selecting delete with re-creation, a new object creation screen opens, pre-filled with data from the deleted object.

Interface changes

Platform

  • Improved the “Providers” page. Added display of cluster names deployed on the provider template in the list.
  • Added the ability to connect Swagger to the platform. Instructions are available in the documentation in API Description/How to enable Swagger.

Clusters

  • Changed the cluster dashboard GUI; page blocks are organized into tabs. Added 2 dashboard display versions: before cluster deployment and after cluster deployment. The deployed cluster dashboard includes node status blocks and quantitative indicators of installed system services. Added display of the provider template used to deploy the cluster and advanced security settings. Added display of cluster conditions and status. Added the ability to view all cluster resource events.
  • In the “Update” block in Cluster and Platform sections, added “No updates available” text when no update versions are available.
  • Changed the “Node Configuration” GUI in Cluster Administration. API version changed; added sections: Selinux, Users, Kubelet. Section fields updated; sysctl parameter entry changed to key-value. Updated instructions are in Cluster Administration/Cluster node configuration.
  • Added the ability to configure Cert-Manager integration with Vault from the GUI. Configuration is available in Cluster/Administration/Certificate Manager and Namespace/Security/Issuers/Issuer. Integration uses Service Account.

Namespaces

  • Changed the namespace dashboard GUI. Added workload and storage quantitative indicator blocks. Added namespace resource events display.
  • On the Ingress/Egress tab of the Namespace page, changed the Egress configuration data set. Updated instructions are in the documentation in Namespace Administration/About the namespace.
  • Changed the Deployment page GUI. Added the ability to view all nested objects and events.
  • Changed the Pod page GUI. Added the ability to view all nested objects and events.
  • Changed the StatefulSet page GUI. Added the ability to view all nested objects and events.
  • Changed the ReplicaSet page GUI. Added the ability to view all nested objects and events.
  • Changed the DaemonSet page GUI. Added the ability to view all nested objects and events.
  • Changed the Job page GUI. Added the ability to view all nested objects and events. Labels and annotations are no longer available on creation and are created automatically. The object cannot be modified.
  • Changed the CronJob page GUI. Added the ability to view all nested objects and events. Labels and annotations are no longer available on creation and are created automatically. The object cannot be modified.
  • Improved the LimitRanges page. Instructions are available in the documentation in Namespace Administration/Quotas.

Fixed

  • Fixed hostname assignment to a node on reboot on RED OS 7.3.1.
  • Fixed user permission assignment error when deploying a cluster with the Shturval Manual provider.
  • Fixed cluster configuration detection error when deploying a cluster with the vSphere provider.
  • Fixed container list display error in the container log selection dropdown.
  • Fixed terminal output error in pods where the terminal cannot be invoked.
  • Fixed Trivy (Image Analysis) component operation.
  • Fixed permissions assignment on the ~/.ssh/ folder.

Added/updated instructions

  • Added instructions for enabling application software monitoring. Instructions are available in the documentation in Cluster Administration/System monitoring/Application monitoring.
  • Added instructions for enabling Cilium Hubble. Instructions are available in the documentation in Cluster Administration/System services/Cluster network management module.
  • Added instructions for installing a service with TLS. Instructions are available in the documentation in Namespace Administration/Network.
  • Added instructions for configuring authentication in a private registry. Instructions are in the documentation in Namespace Administration/Private registry.
  • LDAP integration setup instructions supplemented with examples. Instructions are in the documentation in Platform Administration/LDAP Integration.
  • Updated Shturval platform role instructions. Updated instructions are in Platform Administration/Role description.
← Release 2.4.1 (2024 Q1)
Release 2.3.3 (2023 Q4) →