Changelog
This changelog lists all updates, improvements and new features our Engineering team develops for our Skyscrapers Reference Developer Platform. These are rolled out automatically to all DevOps-as-a-Service customers.
2020 Q3
- 2020-08-27
Maintenance
Monitoring for External-DNS
We have enabled the ServiceMonitor for External-DNS and added new alerts for it. You can find these alerts here.
- 2020-08-14
Maintenance
Disable Nginx server token
As part of our ongoing security audits we noticed Nginx ingress’s server token of our Kubernetes clusters is enabled (which is the default configuration). This leads to exposing Nginx version in the HTTP headers. We have decided to disable it as …
- 2020-08-05
Maintenance
Updates for addons
We have updated the following components on our Kubernetes clusters: aws-node-termination-handler -> 1.6.1 cert-manager -> 0.16.0 ingress-nginx -> 0.34.1 oauth2-proxy -> 6.0.0 Velero -> 1.4.2 Grafana -> 7.1.1 Alertmanager -> 1.21.0 …
- 2020-07-31
Maintenance
Concourse upgraded to v6.4.0
We have upgraded our Concourse setups to the latest version 6.4.0 (from version 6.2.0). This upgrade mainly contains minor new features and some bug fixes and performance improvements. You can check the full changelog here.
- 2020-07-22
Maintenance
Vault upgraded to 1.5.0
We have updated our Kubernetes based Vault setups from 1.4.2 to the latest version 1.5.0. Important changes Resource Quotas: Vault now supports specifying a quota to rate limit requests. For full details and other changes, please refer to the upstream …
- 2020-07-22
Maintenance
Upgrade EKS to 1.17
With the major K8s 1.16 from last month just behind us, we now have updated our EKS control planes and nodes to the latest supported version: 1.17. This brings EKS on K8s v1.17.6. In the process of upgrading EKS the following components have also been …
- 2020-07-10
Maintenance
Support Loki log-based alerting and metrics in Grafana
It’s now possible to use Loki log metrics in standard Grafana panels (i.e. gauges, simple graphs, bar graphs, etc.). Additionally, you can also create alerts based on those graphs, with the built-in alerting system in Grafana. Head to our …
- 2020-07-03
Maintenance
Updated docker images
We have updated the docker images that we internally use. We have made the following changes: awscli image: we upgraded to the V2 of the awscli and Amazon provides an image for that. Therefore we dropped our internal version. We still maintain the image on …
2020 Q2
- 2020-06-25
Maintenance
Upgraded all ECS clusters
We’ve rolled out all our ECS worker nodes with updated OS and ECS agent. These updates mainly contained bug fixes, security patches and performance improvements. You can checkt the full changelog of the AWS ECS agent here: …
- 2020-06-25
Maintenance
Updated Teleport to version 4.2.10
We’ve updated all Teleport clusters and nodes to version 4.2.10. This update mainly contains bug fixes and performance improvements. You can find the full changelog on the teleport repository.
- 2020-06-18
Maintenance
Updates for authorization addons
We have updated our monitoring plugins on our Kubernetes clusters. Dex -> 2.24.0 oauth2-proxy chart -> 3.1.0 oauth2-proxy-redis -> 6.0.5 Besides the several minor improvements and bug-fixes, these updates also brings new features, for Dex the …
- 2020-06-17
Maintenance
Update of ingress-nginx
We have updated the ingress-nginx component to 0.33.0 and its chart to the latest version (2.6.0) Highlights of this update: NGINX 1.19.0 TLSv1.3 is enabled by default Experimental support for s390x Allow combination of NGINX variables in annotation …
- 2020-06-16
Maintenance
Upgraded monitoring plugins
We have updated our monitoring plugins on our Kubernetes clusters. Grafana -> 7.0.3 Loki -> 1.5.0 Prometheus-blackbox-exporter Important changes Grafana New UI Loki The Loki docker image has changed to no longer be root Upgraded backend to Cortex 1.0 …
- 2020-06-16
Maintenance
Update of Velero
We have updated the Velero cluster components to 1.4.0. Velero is responsible for taking cluster backups. Highlights of this update: Added beta-level CSI support! Added custom CA certificate support Backup progress reporting Changed backup tarball format …
- 2020-06-16
Maintenance
Migrating from kube2iam to IAM roles for Service Accounts (IRSA)
Since the beginnning when we started rolling out our K8s-based reference solution towards customers, we’ve been handling application access to AWS resources via kube2iam. Last year, AWS introduced IAM roles for Service Accounts as an alternative to …
- 2020-06-05
Maintenance
Vault upgraded to 1.4.2
We have updated our Kubernetes based Vault setups from 1.3.2 to the latest version 1.4.2. Important changes Addition of Secrets engines for MongoDB Atlas and Redshift (1.4.0) Kubernetes Service Discovery: A new Kubernetes service discovery feature where, …
- 2020-06-05
Maintenance
Upgrade EKS to 1.16
We have updated our EKS control planes and nodes to the latest supported version: 1.16. This brings EKS on K8s v1.16.8. In the process of upgrading EKS the following components have also been upgraded: KubeProxy from 1.15.11 to 1.16.8 Cluster Autoscaler …
- 2020-06-05
Maintenance
Cert-manger updated to 0.15.1
We have updated cert-manager from v0.13.1 to v0.15.1, bringing a number of new features and improvements. Cert-manager is the component responsible for providing you automatic certificates through for example LetsEncrypt. Some highlights that come with …
- 2020-06-05
Maintenance
Additional Concourse monitoring
We’ve enhanced the way we monitoring Concourse setups by adding new alerts for workers state along with endpoint monitoring for the Concourse web UI. Additionally, we will also enable monitoring for the Concourse database using the recently announced …
- 2020-06-04
Maintenance
Upgrade Concourse to version 6.2.0 and other improvements
We have upgraded our Concourse solution to the latest version V6.2.0. In the meanwhile we have changed the workers from Ubuntu 16.04 based AMIs to Amazon Linux AMIs so its more in line with our offering. Take a look at the important changes as this might …
- 2020-05-20
Maintenance
Resizable persistent volumes
We updated the defaults for our persistent volume storage classes to allow for volume expansion. This allows you to Modify the volume in your PersistentVolumeClaim without the need to replace the existing volume. This was already the default for our …
- 2020-05-19
Maintenance
Monitoring RDS instances through Prometheus
Up until now we’ve been monitoring our managed RDS instances through Icinga, which has been working great. But for Kubernetes customers, we’ve been relying on Prometheus more and more to monitor external services, as well as the cluster itself. …
- 2020-05-19
Maintenance
Automated OpenVPN deployments
In the past the OpenVPN deployment was done manually to each cluster. As of today we made it part of our Addons stack and deploy and update OpenVPN in an automated way. Information about the OpenVPN setup and how you can use it is documented in the …
- 2020-05-13
Maintenance
Upgrades to monitoring & logging components
We’ve rolled out some minor updates to the following monitoring and logging components: prometheus: 2.15.2 –> 2.18.1 Several enhancements and bug fixes, including performance improvements. prometheus-operator: 0.37.0 –> 0.38.1 …
- 2020-05-13
Maintenance
Fix Services without Endpoints timeout instead of reject
If a Kubernetes Service had no active Endpoints, for example when a deployment is scaled to 0, then requests to that Service were timing out. Instead it’s supposed to reject traffic with the appropriate ICMP response. The reason this was happening is …