Release 2.6.0 (2024 Q1)

• Kubernetes version: 1.29.1
• This release is no longer supported. See release policy.

Available versions for transition #

Update notes #

When updating from version 2.6.0 to 2.7.0 and higher, perform the following steps.

For the management cluster #

1. Start the management cluster update.
2. Connect to the management cluster from the console.
3. Edit the ShturvalServiceConfig custom resources in the ops.shturval.tech group:
   • shturval-update;
   • shturval-update-crds.
4. In the spec.version block, set the value to 2.7.0.

For the client cluster #

1. Start the client cluster update.
2. Go to the Custom resources page in the Administration section.
3. In the ShturvalServiceConfig group, find:
   • shturval-update;
   • shturval-update-crds.
4. In the spec.version block, set the value to 2.7.0.

Infrastructure #

• Added end-to-end authorization in Argo CD. Transition is available while maintaining the access rights assigned in the cluster.
• A new version of the built-in infrastructure provider is now available - Shturval v2, which allows you to deploy clusters on physical and virtual machines, configure manual or automatic scaling.
• Added support for operating systems: Alt Linux 8 SP10 and RED OS 7.3.4.
• Updated OpenSearch logging component. With a new component, a transition while maintaining the role is possible. Available roles are platform-admin, cluster-admin, cluster-admin-restricted, sec-platform-audit-full, sec-cluster-audit-full.
• Changed version of Kyverno. When updating, a new component will be installed to replace the previous one. Custom policies will start working after the update is completed.
• Updated version of VictoriaMetrics. The changes affected the alerting settings. The interface has been given a new look, the documentation has been updated. The API is backwards compatible; changes will not affect objects created in previous versions.
• Updated Velero version. The changes affected backup and recovery management. The interface has been given a new look, the documentation has been updated. The API is backwards compatible; changes will not affect objects created in previous versions.
• Updated version of Cert-Manager. There are no changes to the interface. The API has not changed.
• Added the ability to select corporate and intermediate certificates using flags when installing a cluster. More details in the Cluster Installation section.
• Added the ability to pause cluster infrastructure reconciliation. The control button is located on the cluster dashboard.
• Added functionality for continuously checking the status of nodes using automatically mounted MachineHealthCheck on created clusters. The node group management GUI will be implemented in the next release.
• Added the ability to integrate with LDAP automatically. The system will analyze the directory and offer recommended values for the configuration.
• Added the ability to configure delayed platform and cluster updates. More information about this in the section Platform Administration/Update and Cluster Administration/Lifecycle/Cluster Upgrade.

Security #

• Added the ability to restart scanning for compliance with CIS Benchmark. To launch on pages of Scan results you must click the “Scan” button.
• Added the ability to change the lifetime of a token.
• Added a security policy manager interface for managing security policies (Kyverno).
• Added the ability to download pod container logs.
• Added the ability to view the access tree by user/group. The page is located in the Platform Access Control section

Interface changes #

• The platform header interface has been changed: the platform welcome block has been removed from the main screen. Selecting a theme and downloading the kubeconfig is placed in the user’s drop-down menu in the upper right corner of the platform GUI.
• Added an interface for viewing custom resources. It is available in the Cluster/Administration section.
• Added an interface for viewing and changing YAML manifests of namespace and cluster objects. The manifest is opened by clicking on the “Manifest” button on the object page.
• Added IP addresses of cluster nodes to the Node Management page.
• An interface for viewing unidentified cluster nodes is now available, allowing you to identify nodes without communication with machines and delete them.
• Added an interface for managing storage classes. Available for connection: vSphere Provisioner, oVirt Provisioner, Ceph Provisioner, NFS Provisioner.
• Improved PersistentVolumeClaims (PVC) interface. Added the ability to force bind VolumeName and select StorageClassName from the drop-down list.
• PersistentVolumeClaims and StorageClasses have been moved from the “Administration” section to the “Storage” section of the cluster and platform.
• The interface for setting up notification rules and configuration for sending notifications has been redesigned.
• The interface for managing backup and recovery in the cluster and platform has been redesigned.
• Added HPA interface on the Deployment page. The resource allows you to manage the automatic scaling of pods in deployment.
• Added an interface for viewing custom resources in the Cluster/Administration section.
• The interface of the Ingress/Egress tab on the namespace page has been improved. Added a notification warning about possible consequences.
• Added platform GUIs Quotas, Limit Ranges, ServiceAccounts, PVC, Secrets, Issuers.
• A tab has been added to the list of namespaces, dividing namespaces into system ones (all those that are created when deploying a cluster) and user ones (those created by the user). By default, custom namespaces are opened.
• Added delete button on object pages.
• Improved interface for viewing Services, Ingresses, Quotas, Limit Ranges.
• Added a search bar in the GUI of installed services. The search is implemented by the name of the service and the name of the chart.
• The interface for adding/changing labels, annotations, matching labels and expressions has been moved to a modal window.
• The Deployment interface has been improved: the ability to select ServiceAccounts, Secrets (in environment variables) from the list has been added, as well as entering the name ServiceAccount if you do not have access rights to the list of objects.
• Added the ability to go to the provider template page from the cluster dashboard.
• Added the ability to manage client cluster annotations. On the cluster list page, the ability to filter by annotation value with the tag key has been added.

Bug fixes #

• Fixed the behavior of container image analysis by the vulnerability scanner.
• Fixed access errors for namespace roles.
• Fixed access to connect to the container terminal.
• Fixed an error in displaying the save button when editing a service.