Upgraded several cluster components

As part of our regular upgrade cycle, the following Kubernetes cluster components have been updated. We’ve already rolled these out to all non-prod clusters and production will follow in the coming days.

Click each link to go to the full upstream changelog.

EKS Core functionality

• aws-node-termination-handler 1.12.2 -> 1.13.0
• aws-vpc-cni 1.7.5 -> 1.7.10
• metrics-server 0.4.2 -> 0.4.4

Addons (AKS & EKS)

• cert-manager 1.2.0 -> 1.3.1
  • CertificateRequests are now immutable - the spec and metadata.annotations fields cannot be changed after creation. They were always designed to be immutable but this behavior is now enforced by the cert-manager webhook.
• external-dns 0.7.6 -> 0.8.0
• fluent-bit 1.7.3 -> 1.7.6
• grafana 7.4.5 -> 7.5.7
• ingress-nginx 0.44.0 -> 0.46.0
  • Update the Ingress Controller Image to correct OpenSSL CVEs
  • Add support for Jaeger Endpoint
  • Remove the possibility of using localhost in ExternalNames as endpoints
• oauth2-proxy 7.0.1 -> 7.1.3
• prometheus 2.25.2 -> 2.27.1
  • UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input
  • Promtool: Retroactive rule evaluation functionality
  • UI: Add a dark theme
• prometheus-blackbox-exporter 0.18.0 -> 0.19.0
• prometheus-operator 0.46.0 -> 0.47.1
• velero 1.5.4 -> 1.6.0
  • Progress reporting for restores
  • Restore API Groups by priority level
  • CLI usability improvements