Release 2.8.0 (2024 Q4)

Infrastructure

  • Updated component versions: Nginx, NodeLocalDNS, ArgoCD, ArgoRollouts, CNI, FluentBit, Grafana, Prometheus, VictoriaMetrics, Kyverno, KubeVIP, Containerd, CertManager, Ceph-csi, OpenSearch, SR-IOV, vSphere, OpenStack, Multus, Whereabouts.
  • Default namespace kube-system assigned for SR-IOV services.
  • Automatic eth0 network interface name assignment for providers: vSphere, oVirt, Basic Dynamix, OpenStack.
  • Implemented node certificate management for RHEL.
  • Added ACME server parameter configuration during management cluster installation.
  • OCI protocol support for connecting repositories to the cluster.
  • Automated update from mirror capability.
  • Improved interactive management cluster installation mode.
  • Management cluster can operate in stand-alone mode.
  • Added Astra Linux SE 1.8 support.
  • Released Shturval Community edition. The version has no platform functionality restrictions. Community edition use is permitted only in open environments.

Security

  • Kubebench component discontinued. Cluster configuration security standard scanning is now performed by Trivy.
  • Management cluster can be used as a client cluster.
  • Logical separation by Platform and cluster functionality. Clusters provide management cluster and client cluster management. Platform includes infrastructure provider management, LDAP integration, and access set management.
  • Updated management cluster naming rules: lowercase letters, digits, and hyphen allowed.
  • Implemented pod log viewing when installation is interrupted.
  • Changed cluster status detection approach. Prevented active cluster information when cluster is not yet initialized.
  • Improved user and group assignment deletion management.
  • Custom dashboard creation in Opensearch GUI. See “Add dashboard in Opensearch” page in “Step-by-step instructions”.

Interface changes

  • Updated “Scan Results” page GUI in Security section: cluster configuration scan results aligned with Trivy Compliance report data. See “Scan Results” page in “Security” section for details.
  • English language support for the platform GUI. Interface language selection available in user settings.
  • Updated provider configuration page GUI: InfraMachineTemplate parameter configuration available on a separate tab.
  • Updated node configuration (NCI) page GUI:
    • split section configuration:
      • trusted and system certificates;
      • kernel arguments and modules;
    • added ability to view and navigate to nodes where configuration (NodeConfig) is scheduled;
    • default Kubelet parameter values no longer applied automatically and moved to hints.
  • Updated namespace workload page GUIs: persistentVolumeClaim selection added to volumes list for mounting in pod containers.
  • Security Groups management selection added to OpenStack provider instance configuration page.
  • Updated node page GUI:
    • added tab with pods placed on the node;
    • added ability to track node configuration (NCI) application on each node. See “Node Management” page for details;
    • added cluster network policy management. See “Clusters/Administration/Network policies” page for details.
  • Extended access set assignment status model for users and groups at platform, cluster, and namespace levels.
  • Updated user access view page GUI: detailed access set assignment information for user/group at platform, cluster, and namespace levels.
  • Logically separated access assignment in management cluster and platform: platform access rights can now only be assigned in the “Platform” section.
  • Improved ClusterIssuer and Issuers GUI: added root and intermediate certificate (CA Bundle) of the corresponding certificate authority.
  • Updated chart installation and installed service page GUIs: update field renamed to management mode; toggle hint added for service enable/disable.
  • Documentation viewing from Shturval platform GUI pages.
  • Added node view navigation from pod pages.
  • Client cluster resource request report view GUI for all platform client clusters.
  • Navigation to alert view page from cluster dashboard.
  • Preconfigured access set editing blocked on access set view page.
  • Protection against accidental repeated cluster creation button clicks.
  • Updated Platform dashboard GUI. Added quantitative data on system and custom access sets, user directory connection information, IP address pools, and platform cluster quantitative characteristics and nodes.

Fixed

  • Corrected “Save” and “Edit” button display logic: buttons available when changes exist and all required fields are filled.
  • Fixed installation errors in semi-closed environment on Rocky Linux OS.
  • Namespace user access binding cleanup after namespace deletion.
  • ArgoCD role assignment cleanup for user after access set assignment deletion.
  • Field population during automatic LDAP integration.
  • Access rights management for cluster users.
  • Node group role display in group configuration GUI.
  • Stabilized terminal connection from Pod GUI.
  • nodeVolumeDetachTimeout value preservation when adding Worker node group.
  • Node drain launch from GUI.

Known limitations

  • Astra Linux SE 1.7.5 is not supported in release 2.8.0.
  • Client cluster creation is available only with Platform-admin access set.
← Release 2.8.1 (2024 Q4)
Release 2.7.2 (2024 Q4) →