Release 2.6.0 (2024 Q1)

Infrastructure

  • Implemented single sign-on in Argo CD. Navigation with preserved access rights assigned in the cluster is available.
  • Implemented a new version of the built-in infrastructure provider — Shturval v2, which enables deploying clusters on physical and virtual machines, configuring manual or automatic scaling.
  • Added support for operating systems: Alt Linux 8 SP10 and RED OS 7.3.4.
  • Updated OpenSearch logging component. With the new component, navigation with preserved role is available. Available roles: platform-admin, cluster-admin, cluster-admin-restricted, sec-platform-audit-full, sec-cluster-audit-full.
  • Changed Kyverno version. On update, a new component will be installed instead of the previous one. Custom policies will start working after the update completes.
  • Updated VictoriaMetrics version. Changes affected alerting configuration. The GUI has been updated; documentation updated. API is backward compatible; changes will not affect objects created in previous versions.
  • Updated Velero version. Changes affected backup and restore management. The GUI has been updated; documentation updated. API is backward compatible; changes will not affect objects created in previous versions.
  • Updated Cert-Manager version. No GUI changes. API unchanged.
  • Added the ability to select corporate and intermediate certificates via flags when installing a cluster. See Cluster installation section for details.
  • Added the ability to pause cluster infrastructure reconciliation. The control button is on the cluster dashboard.
  • Implemented continuous node health checking using automatically mounted MachineHealthCheck on created clusters. Node group management GUI will be implemented in the next release.
  • Implemented automatic LDAP integration. The system analyzes the directory and suggests recommended configuration values.
  • Implemented deferred platform and cluster update scheduling. See Platform Administration/Update and Cluster Administration/Lifecycle/Cluster update for details.

Security

  • Added the ability to restart CIS Benchmark compliance scanning. To start, click “Scan” on the Scan Results page.
  • Added the ability to change token lifetime.
  • Implemented security policy manager GUI for managing security policies (Kyverno).
  • Added the ability to download pod container logs.
  • Added the ability to view the access tree by user/group. The page is in Platform Access Management.

Interface changes

  • Changed platform header GUI: welcome block removed from the main screen. Theme selection and kubeconfig download moved to the user dropdown menu in the top right corner of the platform GUI.
  • Implemented custom resources view GUI. It is available in Cluster/Administration.
  • Implemented YAML manifest view and edit GUI for namespace and cluster objects. Manifest opens by clicking the “Manifest” button on the object page.
  • Added cluster node IP addresses to the Node Management page.
  • Implemented unidentified cluster nodes view GUI, allowing detection of nodes without machine association and their deletion.
  • Implemented storage class management GUI. Available provisioners: vSphere Provisioner, oVirt Provisioner, Ceph Provisioner, NFS Provisioner.
  • Improved PersistentVolumeClaims (PVC) GUI. Added forced VolumeName binding and StorageClassName selection from dropdown.
  • PersistentVolumeClaims and StorageClasses moved from “Administration” to “Storage” in cluster and platform.
  • Redesigned alert rule configuration and alert delivery configuration GUI.
  • Redesigned backup and restore management GUI in cluster and platform.
  • Implemented HPA GUI on the Deployment page. The resource enables automatic pod scaling in the deployment.
  • Implemented custom resources view GUI in Cluster/Administration.
  • Improved Ingress/Egress tab GUI on the namespace page. Added a warning notification about possible consequences.
  • Added platform Quotas, Limit Ranges, ServiceAccounts, PVC, Secrets, Issuers GUIs.
  • Added tabulation in the namespace list separating system namespaces (created during cluster deployment) and user namespaces (created by users). User namespaces open by default.
  • Added delete button to object pages.
  • Improved Services, Ingresses, Quotas, Limit Ranges view GUI.
  • Added search bar in installed services GUI. Search by service name and chart name.
  • Add/edit labels, annotations, matching labels and expressions GUI moved to modal window.
  • Improved Deployment GUI: added ServiceAccounts, Secrets (in environment variables) selection from list, and ServiceAccount name entry when list access is unavailable.
  • Added the ability to navigate to the provider template page from the cluster dashboard.
  • Added client cluster annotation management. On the cluster list page, added filtering by annotation value with key tag.

Fixed

  • Fixed container image analysis scanner behavior.
  • Fixed namespace role access errors.
  • Fixed container terminal connection access.
  • Fixed save button display error in service editing.
← Release 2.6.1 (2024 Q3)
Release 2.5.3 (2024 Q2) →