Release 2.4.0 (2023 Q4)

• Kubernetes version: 1.27.6
• This release is no longer supported. See release policy.

Infrastructure #

• Added support for Ubuntu 22.04.3 LTS and RED OS 7.3.3 (kernel 5.15 and 6.1).
• The list of permissions for configuring the VMware vSphere provider has been changed. The modified list is available in the documentation in the Platform Administration/Providers/vSphere section.
• Updated version of Kubernetes from 1.26.5 to 1.27.6.
• Updated Cilium version from 1.12.8 to v1.14.1. The change affected the required fields for setting up Egress, and the API was changed.
• Updated Cert Manager. Changed version of API contracts (issuer/clusterIssuer).

Platform #

• The regular expression for searching for account data in the Active Directory directory when integrated with LDAP has been expanded.

Security #

• On the “Manifests” page in the Cluster/Security section in the report on broken policies block, added display of data on the number of policy activations in namespace pods, as well as a description of the policy. Added the ability to sort and filter data. Added the ability to download reports in CSV and PDF formats.
• On the “Image Analysis” page in the Cluster/Security section, the ability to download the report in CSV and PDF formats has been added.
• On the Scan Results page in the Cluster/Security section, the ability to download the report in CSV and PDF formats has been added.
• Added automatic revocation of the token to interrupt the session every 24 hours.

Logs #

• Added the ability to switch to OpenSearch from the cluster dashboard by clicking on the “View logs” button. The transition is uses the user token. Added - instructions for enabling the collection and forwarding of applications logs. Added instructions for setting up log rotation and setting up security event logs. Instructions are available in the documentation in the Cluster Administration/Cluster Logs section.
• Added FluentBit multiline parser with preinstalled languages ​​go, java, python, ruby.

Clusters #

• Added the ability to create a cluster with the Shturval Manual provider without Worker nodes.
• Added a ban on deleting provider templates that have a deployed clusters.
• Added a ban on going to the cluster page during the deletion phase.

Node management #

• On the Node page, functionality for actions with nodes is now available: Cordon, Uncordon, Drain. On the “Manage Nodes” page, the Scheduling attribute has been added with the value Enabled when the node is available for adding new pods, and Disabled when it is not available.
• Added the ability to exclude a node from autoscaling to protect against deletion when scaling negatively. The “Exclude from autoscaling” button is available on the Worker node page when you select a group of Autoscaling Worker nodes in the configuration. Nodes excluded from autoscaling will be marked as “Autoscaling prohibited” on the “Manage Nodes” page.
• Added the Master suffix when creating ControlPlane machines on the vSphere provider.

Namespaces #

• Added the ability to create a new namespace on the system service installation form.
• Added the ability to delete Job and Cronjob objects and recreate them. When you select deletion with re-creation, the screen for creating a new object will open, pre-filled with the data of the object to be deleted.

Changed interfaces #

Platform #

• Improved “Providers” page. Added display of a list of cluster names rolled out on the provider template in the list.
• Added the ability to connect to the Swagger platform. Instructions are available in the documentation in the API Description/How to Enable Swagger section.

Clusters #

• The interface of the cluster dashboard has been changed, the page blocks are divided into tabs. Added 2 versions of the dashboard display: the version before cluster deployment and the version of the deployed cluster. Blocks displaying the status of nodes and a block of quantitative indicators of installed system services have been added to the dashboard of the deployed cluster. Added display of the provider template with which the cluster is deployed, information about advanced security settings. Added display of cluster conditions and its status. Added the ability to view all cluster resource events.
• In the “Update” block in the Cluster and Platform sections, the text “No updates” has been added if there are no versions available for updating.
• The interface of the “Node Configuration” section in the Cluster Administration section has been changed. The API version has been changed, sections have been added: Selinux, Users, Kubelet. Section fields have been updated, the method of entering key-value sysctl parameters has been changed. The updated instructions are in the section Cluster administration/Configuration of cluster nodes.
• Added the ability to configure Cert-Manager integration with Vault from the GUI. The setting is available in the Cluster/Administration/Certificate Manager and Namespace/Security/Issuers/Issuer sections. Integration is implemented using Service Account.

Namespaces #

• Changed the interface of the namespace dashboard. Added blocks of quantitative indicators of workloads and storage. Added display of namespace resource events.
• On the Ingress/Egress tab of the Namespace page, the composition of the data for configuring Egress has been changed. The updated instructions are in the documentation, in the section Administration of namespace/About namespace.
• Changed the interface of the Deployment page. Added the ability to view all nested objects, as well as events.
• Changed the interface of the Pod page. Added the ability to view all nested objects, as well as events.
• Changed the interface of the StatefulSet page. Added the ability to view all nested objects, as well as events.
• Changed the interface of the ReplicaSet page. Added the ability to view all nested objects, as well as events.
• Changed the interface of the DaemonSet page. Added the ability to view all nested objects, as well as events.
• Changed the interface of the Job page. Added the ability to view all nested objects, as well as events. Labels and annotations are no longer available during creation and are created automatically. It is not possible to change the object.
• Changed the interface of the CronJob page. Added the ability to view all nested objects, as well as events. Labels and annotations are now not available during creation and are created automatically. It is not possible to change the object.
• Improved LimitRanges page. Instructions are available in the documentation in the Namespace Administration/Quotas section.

Bug fixes #

• Solved the error of substituting hostname for a node when rebooting a node on RED OS-7.3.1
• The error in assigning rights to users when deploying a cluster with the Shturval Manual provider has been resolved.
• Fixed an error in determining the cluster configuration when deploying a cluster with the vSphere provider.
• Fixed an error displaying a list of containers in the drop-down list for selecting container logs.
• Solved a terminal output error in pods that do not have the ability to call a terminal.
• Fixed the operation of the Trivy component (Image Analysis).
• Fixed assigning permissions to the ~/.ssh/ folder.

Added/modified instructions #

• Added instructions for enabling monitoring of applications. Instructions are available in the documentation in the Cluster Administration/System Monitoring/Application Monitoring section.
• Added instructions for enabling Cilium Hubble. The instructions are available in the documentation in the section Cluster Administration/System Services/Cluster Network Management Module.
• Added instructions for installing a service with TLS. The instructions are available in the documentation in the Namespace Administration/Network section.
• Added instructions for setting up authentication in a private registry. The instructions are located in the documentation in the Namespace Administration/Private registry section
• Instructions for setting up integration with LDAP are supplemented with examples. The instructions are in the documentation in the Platform Administration/LDAP Integration section.
• Updated instructions for roles in the Shturval platform. Updated instructions are available in the Platform Administration/Role Description section.