Changelog
This changelog lists all updates, improvements and new features our Engineering team develops for our Skyscrapers Reference Developer Platform. These are rolled out automatically to all DevOps-as-a-Service customers.
2020 Q3
- 2020-07-31
Maintenance
Concourse upgraded to v6.4.0
We have upgraded our Concourse setups to the latest version 6.4.0 (from version 6.2.0). This upgrade mainly contains minor new features and some bug fixes and performance improvements. You can check the full changelog here.
- 2020-07-22
Maintenance
Vault upgraded to 1.5.0
We have updated our Kubernetes based Vault setups from 1.4.2 to the latest version 1.5.0. Important changes Resource Quotas: Vault now supports specifying a quota to rate limit requests. For full details and other changes, please refer to the upstream …
- 2020-07-22
Maintenance
Upgrade EKS to 1.17
With the major K8s 1.16 from last month just behind us, we now have updated our EKS control planes and nodes to the latest supported version: 1.17. This brings EKS on K8s v1.17.6. In the process of upgrading EKS the following components have also been …
- 2020-07-10
Maintenance
Support Loki log-based alerting and metrics in Grafana
It’s now possible to use Loki log metrics in standard Grafana panels (i.e. gauges, simple graphs, bar graphs, etc.). Additionally, you can also create alerts based on those graphs, with the built-in alerting system in Grafana. Head to our …
- 2020-07-03
Maintenance
Updated docker images
We have updated the docker images that we internally use. We have made the following changes: awscli image: we upgraded to the V2 of the awscli and Amazon provides an image for that. Therefore we dropped our internal version. We still maintain the image on …
2020 Q2
- 2020-06-25
Maintenance
Upgraded all ECS clusters
We’ve rolled out all our ECS worker nodes with updated OS and ECS agent. These updates mainly contained bug fixes, security patches and performance improvements. You can checkt the full changelog of the AWS ECS agent here: …
- 2020-06-25
Maintenance
Updated Teleport to version 4.2.10
We’ve updated all Teleport clusters and nodes to version 4.2.10. This update mainly contains bug fixes and performance improvements. You can find the full changelog on the teleport repository.
- 2020-06-18
Maintenance
Updates for authorization addons
We have updated our monitoring plugins on our Kubernetes clusters. Dex -> 2.24.0 oauth2-proxy chart -> 3.1.0 oauth2-proxy-redis -> 6.0.5 Besides the several minor improvements and bug-fixes, these updates also brings new features, for Dex the …
- 2020-06-17
Maintenance
Update of ingress-nginx
We have updated the ingress-nginx component to 0.33.0 and its chart to the latest version (2.6.0) Highlights of this update: NGINX 1.19.0 TLSv1.3 is enabled by default Experimental support for s390x Allow combination of NGINX variables in annotation …
- 2020-06-16
Maintenance
Upgraded monitoring plugins
We have updated our monitoring plugins on our Kubernetes clusters. Grafana -> 7.0.3 Loki -> 1.5.0 Prometheus-blackbox-exporter Important changes Grafana New UI Loki The Loki docker image has changed to no longer be root Upgraded backend to Cortex 1.0 …
- 2020-06-16
Maintenance
Update of Velero
We have updated the Velero cluster components to 1.4.0. Velero is responsible for taking cluster backups. Highlights of this update: Added beta-level CSI support! Added custom CA certificate support Backup progress reporting Changed backup tarball format …
- 2020-06-16
Maintenance
Migrating from kube2iam to IAM roles for Service Accounts (IRSA)
Since the beginnning when we started rolling out our K8s-based reference solution towards customers, we’ve been handling application access to AWS resources via kube2iam. Last year, AWS introduced IAM roles for Service Accounts as an alternative to …
- 2020-06-05
Maintenance
Vault upgraded to 1.4.2
We have updated our Kubernetes based Vault setups from 1.3.2 to the latest version 1.4.2. Important changes Addition of Secrets engines for MongoDB Atlas and Redshift (1.4.0) Kubernetes Service Discovery: A new Kubernetes service discovery feature where, …
- 2020-06-05
Maintenance
Upgrade EKS to 1.16
We have updated our EKS control planes and nodes to the latest supported version: 1.16. This brings EKS on K8s v1.16.8. In the process of upgrading EKS the following components have also been upgraded: KubeProxy from 1.15.11 to 1.16.8 Cluster Autoscaler …
- 2020-06-05
Maintenance
Cert-manger updated to 0.15.1
We have updated cert-manager from v0.13.1 to v0.15.1, bringing a number of new features and improvements. Cert-manager is the component responsible for providing you automatic certificates through for example LetsEncrypt. Some highlights that come with …
- 2020-06-05
Maintenance
Additional Concourse monitoring
We’ve enhanced the way we monitoring Concourse setups by adding new alerts for workers state along with endpoint monitoring for the Concourse web UI. Additionally, we will also enable monitoring for the Concourse database using the recently announced …
- 2020-06-04
Maintenance
Upgrade Concourse to version 6.2.0 and other improvements
We have upgraded our Concourse solution to the latest version V6.2.0. In the meanwhile we have changed the workers from Ubuntu 16.04 based AMIs to Amazon Linux AMIs so its more in line with our offering. Take a look at the important changes as this might …
- 2020-05-20
Maintenance
Resizable persistent volumes
We updated the defaults for our persistent volume storage classes to allow for volume expansion. This allows you to Modify the volume in your PersistentVolumeClaim without the need to replace the existing volume. This was already the default for our …
- 2020-05-19
Maintenance
Monitoring RDS instances through Prometheus
Up until now we’ve been monitoring our managed RDS instances through Icinga, which has been working great. But for Kubernetes customers, we’ve been relying on Prometheus more and more to monitor external services, as well as the cluster itself. …
- 2020-05-19
Maintenance
Automated OpenVPN deployments
In the past the OpenVPN deployment was done manually to each cluster. As of today we made it part of our Addons stack and deploy and update OpenVPN in an automated way. Information about the OpenVPN setup and how you can use it is documented in the …
- 2020-05-13
Maintenance
Upgrades to monitoring & logging components
We’ve rolled out some minor updates to the following monitoring and logging components: prometheus: 2.15.2 –> 2.18.1 Several enhancements and bug fixes, including performance improvements. prometheus-operator: 0.37.0 –> 0.38.1 …
- 2020-05-13
Maintenance
Fix Services without Endpoints timeout instead of reject
If a Kubernetes Service had no active Endpoints, for example when a deployment is scaled to 0, then requests to that Service were timing out. Instead it’s supposed to reject traffic with the appropriate ICMP response. The reason this was happening is …
- 2020-05-12
Maintenance
Option to configure custom routes and endpoints in Alertmanager
We now offer the option to configure custom endpoints and custom routes in Alertmanager. This is useful if you want to route your prometheus alerts to custom slack endpoints or use an escalation tool like PagerDuty or OpsGenie. Get in touch with your Lead …
- 2020-05-07
Maintenance
Option to add an internal-only Ingress controller
We now offer the option to enable and use an internal-only Nginx Ingress Controller, next to the public one we offer by default. This is useful if you want to expose services running in K8s only within the private AWS VPC network. With this change, …
- 2020-05-06
Maintenance
Oauth-proxy security fix following High Severity CVE-20200-11052
Today a notice for CVE-2020-11053 with a severity of High went out, impacting our oauth2-proxy that is used for authentication to our internal dashboards. As users can provide a redirect address for the proxy to send the authenticated user to at the end of …