Changelog
This changelog lists all updates, improvements and new features our Engineering team develops for our Skyscrapers Reference Developer Platform. These are rolled out automatically to all DevOps-as-a-Service customers.
2019 Q1
- 2019-02-18
Maintenance
CVE-2019-5736 - Rolling out patched runc
Update: Added other affected services next to Kubernetes. Last week a new vulnerability in Docker’s runc was announced: CVE-2019-5736. You can read more about this specific vulnerability and how it affects Kubernetes users in the Kubernetes blog: …
- 2019-01-21
Maintenance
Use encrypted EBS volumes for etcd storage and (optionally) encrypt k8s node root volumes
We’re rolling out a major update for our Kubernetes etcd clusters to now use encrypted EBS volumes for storing all of the Kubernetes state. As an optional feature, it’s also possible to have the Kubernetes nodes root volumes encrypted. If this …
- 2019-01-15
Maintenance
Move to CoreDNS dns server and add gp2-encrypted StorageClass
We’re updating our Kubernetes staging clusters with CoreDNS, the new dns server that replaces KubeDNS. After an in-depth analysis and tests we’ve verified that the performance and the stability between the two solutions are almost identical. …
- 2019-01-11
Maintenance
Upgrade Vault to 1.0.1
A Vault upgrade for our setups was long overdue. We’ve upgraded our Vault installation tools from version 0.9.3 to 1.0.1, which is the latest Vault version available at the moment. As Vault is set up as HA, the downtime of the upgrade will be …
- 2019-01-03
Maintenance
Upgrade to Kubernetes 1.11.6 [updated]
Update: Changed Kubernetes update from 1.10.12 to 1.11.6 We’ve upgraded our Kubernetes staging clusters to the latest stable version. Bumping from version 1.10.10 to 1.10.12 1.11.6. There are some nice additions to the 1.11 release, like Pod priority …
2018 Q4
- 2018-12-03
Maintenance
Upgrade to Kubernetes 1.10.11 [updated]
Update 2 (2018-12-03): Since our last update, the people at Kubernetes updated their documentation to add an important fix in the 1.10.11 changelog: CVE-2018-1002105: Fix critical security issue in kube-apiserver upgrade request proxy handler (#71411, …
- 2018-11-27
Maintenance
Set resource reservations for kubelet and other system processes
Following our efforts to improve the overall stability of our Kubernetes clusters, we’ve now set resource reservations for kubelet and other system processes. This will ensure that these critical processes always have enough CPU and memory available …
- 2018-11-27
Maintenance
Adding Prometheus monitoring for ECS
We’ve deployed on all our ECS managed staging clusters a prometheus monitoring system. This allows us to have a better monitoring for our ECS nodes and adds the opportunity to create custom metrics to monitor your applications. Thanks to alert …
- 2018-11-21
Maintenance
Updated Prometheus & Grafana monitoring stack - update
As announced in our previous update, we have migrated our cluster-monitoring stack by using the new stable/prometheus-operator as base chart. By now these updates have already been rolled out across staging clusters. Initially we planned to do a phased …
- 2018-11-19
Maintenance
Updated Prometheus & Grafana monitoring stack
Our cluster monitoring stack is based on the prometheus-operator developed by the people at CoreOS, more concretely we used kube-prometheus as a starting point for a complete setup. This project has seen numerous changes and improvements, like the …
- 2018-11-13
Maintenance
Set resource requests and limits for all infrastructure pods
We’ve recently adjusted resource requests and limits for all Pods running in the infrastructure namespace. Previously, some of them didn’t have requests nor limits, and some others had unnecessary high values. We’ve reviewed the CPU and …
- 2018-11-13
Maintenance
Moving from kube-lego to cert-manager for automatic TLS certificates
We’re moving the Letsencrypt service on our Kubernetes from the deprecated kube-lego to cert-manager. Cert-manager comes with a whole set of new features, mainly the ability to use the dns01 ACME challenge for certificate validation. This means you …
- 2018-11-05
Maintenance
Grafana Pods dashboard updated memory metrics
We’ve updated the Pods dashboard so it displays both the actual container memory usage (container_memory_working_set_bytes) next to the previous metric including caches (container_memory_usage_bytes). You can find this dashboard in your grafana …
- 2018-10-30
Maintenance
Releasing our user-level documentation repository
Today we’re releasing a new user-level knowledge base of our products and services. It’s aimed to help you be more confident and autonomous in managing your applications on our platforms. You can find it in the following GitHub repository: …
- 2018-10-23
Maintenance
K8S upgrade to stretch
We upgraded and tested our test cluster successfully to Debian stretch now that all open issues are resolved. This change makes the K8S stack more future proof because we are running on the current stable release of Debian called stretch. This also allows …
2018 Q3
- 2018-09-28
Maintenance
Vault data is now backed up
Our Vault setup is configured to store the data in a DynamoDB table, using Vault DynamoDB storage backend. DynamoDB already replicates all the data in a table across three availability zones, giving Vault high availability and data durability. From today, …
- 2018-09-28
Maintenance
Teleport upgrade to 2.7.5
Teleport has been upgraded to version 2.7.5 for all users. This upgrade includes various bugfixes and performance improvements, as well as additional functionality such as scp (secure copy) from the web interface. You can find the full changelog on the …
- 2018-09-28
Maintenance
Kubernetes cluster-autoscaler enabled
Today we release the addition of the Kubernetes Cluster AutoScaler to our clusters. Since we’ll be enabling the autoscaler by default, we’ll be initially deploying it on staging while production clusters will follow in a couple of days. Before …
- 2018-09-25
Maintenance
Reduced number of NAT gateways
We’ve reduced the number of NAT gateways per VPC. In the previous setup we created one NAT gateway per VPC where we routed all the non-k8s traffic, and we had three NAT gateways just for the k8s cluster (one for each Availability Zone). In total we …
- 2018-09-25
Maintenance
Kubernetes Infrastructure Tools Upgraded
We have updated our internals infrastructure tools to the latest version. These upgrades add bugfixes and several new features. The upgraded tools include: Dex (2.10.0) nginx-ingress (0.19.0) kube-lego (0.1.7) external-dns (0.5.6) kube2iam (0.10.4) Some …
- 2018-09-20
Maintenance
Upgrade logging to Kibana and Elasticsearch 6.3
We use Elasticsearch with Kibana to aggregate logs from Kubernetes and our customers’ applications. Today this stack got upgraded to 6.3, bringing several improvements and bug fixes. Elasticsearch On the Elasticsearch side this mainly fixes a bug …
- 2018-09-19
Maintenance
Concourse version 4.2.1 upgrade
We’ve upgraded all the Concourse setups to the latest available version, that’s 4.2.1. As you might have read in the previous post from concourse we were working on the upgrade to Concourse 4.1. During that process we ran into some bugs that we …
- 2018-09-13
Maintenance
Concourse version 4.1.0 upgrade
We’ve upgraded all the Concourse setups to the latest available version, that’s 4.1.0. We have upgraded our test concourse cluster from v3.14.1 to v4.1.0. Customer clusters will follow shortly after we have confirmed there are no issues with …
- 2018-09-12
Maintenance
Upgrade to Kubernetes 1.10
Update: Changed Kubernetes update from 1.10.7 to 1.10.8 We have upgraded our staging Kubernetes clusters from v1.9.8 to v1.10.8. Production clusters will follow in 1 to 2 weeks (to be announced) after we have confirmed there are no issues with our …
- 2018-08-29
Maintenance
Reduced logging verbosity for system components
Some of our infrastructure components were logging extensively to CloudWatch logs and Elasticsearch, filling up precious disk space for our customers. We have now reduced the logging verbosity of those components.