Release 2.2.0 (2023 Q1)

  • Kubernetes version: 1.25.9
  • This release is no longer supported. See release policy.

DEV

Rollouts:

  • Basic support for automatic deployment of Argo Rollouts

    • Allows you to automate the deployment of new software versions with control of application errors.

    supported: blue-green, canary, canary analysis, experimentation, and progressive delivery.

Cert-manager:

  • GUI for managing Cluster Issuer and Issuer
    • Implements the ability to configure Cluster Issuer for cluster administrators and Issuer for namespace administrators;
    • Allows you to reduce the likelihood of errors in setting up applications;
    • Allows expanded use of Transport Layer Encryption (TLS).

System Ingress:

  • Automatic DNS generation for Ingress/Kube API
    • A public name resolution service has been created based on a template to simplify the creation of correct wildcard DNS records for the system Ingress controller.

User Interface Extension:

  • Container logs
    • Added output of container logs without direct network access to application clusters.
  • Creation of Deployment, Replicaset, Statefulset, Daemonset, Pod, CronJob, Job
    • Added restriction of direct network access to application clusters while maintaining management capabilities.
  • Namespace creation
    • Allows you to build a complete life cycle for application services.
  • Container terminal (exec)
    • Allows you to debug functionality and resolve incidents in a controlled environment and without direct network access to application clusters.
  • Service Management
    • Allows you to create or modify Service objects without directly connecting to the cluster API.
  • Service Account Management
    • Allows you to create or modify Service Account objects without directly connecting to the cluster API.
  • Ingress Management
    • Allows you to create or modify Ingress objects without directly connecting to the cluster API.

SEC

Image Scan:

  • Scanning images based on RED OS and Astra Linux and displaying information in reports
    • Allows you to assemble applications based on domestic base images;
    • Allows you to obtain scanning results of collected images.

OPS

Expansion of the list of infrastructure providers:

  • Red Virtualization, Rosa Virtualization, HostVM, zVirt

System Ingress:

  • Ingress Virtual IP
    • An internal mechanism has been created to manage the VIP of the system Ingress controller based on KubeVIP.

End-to-end authentication:

  • Grafana and vmselect
    • A role model is now available that regulates access to metrics of the platform and all client clusters within platform instances.