Release 2.6.1 (2024 Q3)

Infrastructure

  • Added Snapshot Controller to Ceph RBD and Ceph FS charts.
  • Added RED OS 8 support.
  • Updated kube-rbac-proxy to version 0.15.0.
  • Updated Cilium to version 1.14.13.
  • Updated AlertManager configuration validation for stable operation when invalid data is detected. AlertManager changes cannot be applied with invalid configuration.
  • Implemented automatic LoadBalancer configuration for the Basic Dynamix provider.
  • Changed namespace to kube-system for SRIOV interface operator (shturval-sriov) and additional networks (NetworkAttachmentDefinitions, SriovNetwork, SriovNetworkNodePolicy). Namespace selection is unavailable; additional networks and operator are automatically installed in the kube-system namespace.
  • Accelerated Shturval v2 provider host processing.

Fixed

  • Fixed update service update error found in version 2.6.0.
  • Fixed rule display in the network policy editor.
  • Fixed NTP configuration apply error using NCI resource.
  • Fixed Linux user creation error using NCI resource.
  • Fixed ControlPlane node data display for Shturval v2 provider.
  • Fixed Event retrieval for namespace and cluster resources.
  • Fixed client cluster creation error with Ubuntu 22.04 OS.
  • Fixed Shturval v2 host processing error after client cluster deletion.
  • Fixed connection settings and field detection in automatic LDAP integration configuration.
  • Fixed root trusted certificate generation.
  • Fixed node configuration apply error when recreating a node.
  • Restored CronJob and Job deletion method selection display.
  • Fixed alert rule type display.
  • Fixed authorization in the metrics visualization module (Grafana).
  • Fixed resource (Pods) counting and security policy (Kyverno) trigger report display in the GUI.
  • Fixed role assignment error in OpenSearch.
  • Fixed package installation error on Alt Linux OS.
  • Fixed ability to specify relative certificate path (using ~).
  • Fixed Kube Audit log delivery error to OpenSearch.
  • Fixed ConfigMaps edit mode switching error.
  • Fixed label/annotation addition error in Secret in “Non-editable” edit mode.
  • Fixed missing URL in metrics visualization module specification.
  • Fixed character input restrictions for usernames and groups when assigning roles.
  • Fixed logout in OpenSearch without logging out of the Shturval platform GUI.
  • Fixed pod count per security policy (Kyverno) error.
  • Fixed ability to assign access rights (Namespace-admin) to users in the ingress namespace.
  • Fixed Service modification error with empty IP address.
  • Fixed argocd-rbac-cm ConfigMaps update error when assigning/removing user access rights.
  • Fixed node cleanup handling in the node configuration management module (STD).
  • Fixed ArgoCD navigation availability display error when the service is absent.
  • Fixed cyclic shturvald (STD) restart error when manually creating a directory in /etc/containerd/certs.d/. In such cases, nodes in clusters no longer receive “SchedulindDisabled” (Unschedulable) status.
  • Fixed ability to create node configuration (NCI) from console without specifying file and file path.
  • Fixed inability to add hosts in Shturval v2 provider in the platform GUI.
  • Fixed OS handling by the node configuration management module (STD). Adding file/directory using NCI resource in cluster succeeds.
  • Fixed access errors for users/groups with roles sec-platform-admin, dev-debugger, ops-certificate-issuer, sec-security-report.
  • Fixed certificate path template in the platform GUI. Certificate addition using NCI resource is available with HTTPS protocol or without protocol.
  • Fixed self-signed certificate error on management cluster reinstallation.

Security

  • Fixed system service vulnerabilities found in version 2.6.0.
  • Added repository management in ArgoCD for users with namespace-admin role.
  • Implemented integrity check for the initial node configuration file (/etc/std/nci.json).
  • Fixed weak random number generator vulnerability in the initial deployment module (STC).

Interface changes

  • Improved ability to specify namespaces, namespace and cluster-scoped resources in backup.
  • Added additional validation for host IP addresses in Shturval v2 provider.
  • Set roles for Worker nodes in the management cluster.
  • Improved approach to defining infrastructure provider permissions.
  • Set restriction on cluster deletion request with paused infrastructure reconciliation.
  • Added default resource values for KubeadmControlPlane and MachineDeployment:
    • nodeDeletionTimeout: 10m0s
    • nodeDrainTimeout: 10m0s
    • nodeVolumeDetachTimeout: 5m0s
  • Added support for special characters and Cyrillic for groupname and username.
  • Updated service status display GUI for ClusterIP or LoadBalancer type services.
  • Added detailed Kubernetes/ETCD Cluster Health dashboard in Grafana.
  • Updated Kubelet NCI resource configuration GUI. Added “Not selected” value option; excluded default field values (values moved to hints).
  • Updated network policy editor GUI in client clusters. Added namespace selection from list; DNS proxy enabled by default when traffic to Kubernetes DNS is allowed.
  • Improved Egress tab GUI on the namespace page: added informational notification when a network interface name is specified.
  • Updated cluster GUI: added cluster deletion lock and informational message when infrastructure reconciliation is paused.
  • Updated Certificates block GUI in NCI: added hints and restrictions on certificate data entry method.
  • Updated installed services view page GUI: service labels and annotations moved to separate tabs.
  • Added provider availability management (vSphere, oVirt, Shturval V2, Basic Dynamix, OpenStack) in the platform GUI. When the provider service is installed and enabled, provider template management is available in the GUI.
← Release 2.7.0 (2024 Q3)
Release 2.6.0 (2024 Q1) →