Upgraded cluster add-ons

As part of our regular upgrade cycle, the following Kubernetes cluster components have been updated. And it’s a big one! We’ve already rolled these out to all non-production clusters. Production upgrades are scheduled to happen on Monday 16/05 during business hours. As usual, no workload interuptions are expected.

Highlights of this upgrade cycle are upgrades for KEDA, Fluent-Bit and Loki.

AKS

• aad-pod-identity 1.8.7 -> 1.8.8
  • Fix CVE-2022-23218

EKS

• aws-efs-csi-driver 1.3.6 -> 1.3.8
• aws-load-balancer-controller 2.3.1 -> 2.4.1
  • The controller will no longer require permissions for all Secret resources
  • Also required for our K8s 1.22 preparation
• aws-node-termination-handler 1.16.1 -> 1.16.3
• aws-vpc-cni 1.10.2 -> 1.11.0
• secrets-store-csi-driver 1.0.0 -> 1.1.2
  • Fix several CVEs

Shared Addons (AKS & EKS)

Click each link to go to the full upstream changelog.

• actions-runner-controller 0.20.3 -> 0.22.3
  • Many improvements focusing on scalability and reliablity of runners
• alertmanager 0.23.0 -> 0.24.0
• cert-manager 1.7.1 -> 1.8.0
  • Wider support for Kubernetes server-side-apply
  • Exponential backoff after a failed issuance
• dex 2.31.0 -> 2.31.1
• external-dns 0.10.2 -> 0.11.1
• fluent-bit 1.8.10 -> 1.9.3
  • Primary focus has been around scalability and performance, metrics and overall usability
• grafana 8.4.5 -> 8.5.2
  • Many new improvements and features. Make sure to check the linked upstream changelog
• keda 2.6.1 -> 2.7.1
  • Introduction of pausing autoscaling through annotations for ScaledObject
  • Introduction of AWS DynamoDB, Azure Data Explorer, GCP Stackdriver & GCP Storage scalers
  • Introduction of Azure Key Vault as trigger authentication provider
  • Deprecation of metadata.type in favor of the global metricType for CPU, Memory, Datadog scalers
• loki 2.4.2 -> 2.5.0
  • Greatly improves the performance of common regex uses cases in Loki
  • Binary operations are now significantly faster
  • A new schema which uses more path prefixes to avoid rate limits on S3 (we’re switching to this schema on 2022-06-01)
  • More parallelism by default
• prometheus 2.33.4 -> 2.35.0
• prometheus-blackbox-exporter 0.19.0 -> 0.20.0
• prometheus-operator 0.54.1 -> 0.56.2