Upgraded cluster add-ons

As part of our regular upgrade cycle, the following Kubernetes cluster components have been updated. We’ve already rolled these out to all clusters.

Most of the updates are patches with minor changes. The most relevant of them are:

• Loki with several new features and improvements.
• Velero now using distroless images, reducing the overall footprint and increasing security. Plus other new features and enhancments.
• cert-manager removed some deprecated APIVersions, plus added some new features and bug fixes.

Click each link to go to the full upstream changelog.

AKS-specific components

• aad-pod-identity 1.8.4 -> 1.8.5

EKS-specific components

• aws-node-termination-handler 1.13.3 -> 1.14.0
• aws-vpc-cni 1.9.1 -> 1.10.1
• cluster-autoscaler 1.21.0 -> 1.21.1
• metrics-server 0.5.0 -> 0.5.2
• cloudwatch-exporter 0.10.0 -> 0.11.0
• elasticsearch-exporter 1.2.1 -> 1.3.0

Shared Addons (AKS & EKS)

• cert-manager 1.5.3 -> 1.6.1
• fluent-bit 1.8.7 -> 1.8.10
• ingress-nginx 0.49.2 -> 0.49.3
• kube-prometheus-stack chart 18.0.12 -> 21.0.0
• loki 2.3.0 -> 2.4.1
• prometheus 2.30.0 -> 2.31.1
• prometheus-operator 0.50.0 -> 0.52.1
• velero 1.6.3 -> 1.7.0
• dex 2.30.0 -> 2.30.2
• external-dns 0.9.0 -> 0.10.1
• oauth2-proxy 7.1.3 -> 7.2.0
• prometheus-pushgateway 1.4.1 -> 1.4.2
• Vault 1.8.2 -> 1.9.0