Skip to content

Releases: bottlerocket-os/bottlerocket-update-operator

1.8.0

20 Nov 20:12
v1.8.0
5b29eb5

Choose a tag to compare

General

Added

  • Add EBS CSI driver policy to nodegroup IAM role for integration tests (#791)

Misc

  • Replace ring cryptography library with aws-lc-rs (#795)
  • Upgrade bottlerocket-sdk from 0.62.0 to 0.65.0 (#792)
  • Updated Github Actions workflows (#776, #787)
  • Updated cargo dependencies (#786)

v1.7.0

16 Sep 21:39
dd7f5d4

Choose a tag to compare

General

Added

  • Allow for custom cluster domain for agent to api connection (#736 thanks @mikn)

Fixed

  • Fixed a bug where out-of-bounds exception can be returned when parsing error message (#781)

Misc

  • Upgrade dependencies and documentation fixes (#750, #756, #777)

v1.6.0

29 May 18:41
7bd7746

Choose a tag to compare

General

Added

  • Allow customization of service annotations in Helm values (#738 thanks @mbovo)
  • Allow arbitrary labels and annotations to be added to all or select workloads (#742 thanks @grumps)

Fixed

  • script: use --update=none for mv in publish-charts (#731)

Misc

v1.5.0

24 Feb 20:04
cbea803

Choose a tag to compare

General

Added

  • Support topologySpreadConstraints for the apiserver resource (#672 thanks @AviorSchreiber)
  • Update bottlerocket sdk version from 0.42.0 to 0.50.1 (#709)
  • Allow brupop-controller-deployment pods to be discovered by Splunk otel-collector (#677 thanks @AndreiBanaruTakeda)

Fixed

  • Fixed a bug in which the image pull secrets were not correctly rendered (#715)

Misc

v1.4.0

28 Jun 19:17
b34e98e

Choose a tag to compare

1.4.0

General

Added

  • Added an optional ServiceMonitor for prometheus to the Helm chart (#559 thanks @dani-CO-CN!)
  • Added the ability to overwrite resource limits and requests to the Helm chart (#560 thanks @dani-CO-CN!)
  • Added the ability to overwrite priorityClass to the Helm chart (#567 thanks @dani-CO-CN!)
  • Added the ability to apply additional pod labels to the Helm chart (#617 thanks @danielvincenzi!)

Fixed

  • Fixed a bug which could cause nodes to remain cordoned after an update (#631)
  • Fixed a bug that could cause the agent to require a few restarts before stabilizing (#568)

Misc

v1.3.0

17 Aug 23:27
6455a43

Choose a tag to compare

General

Added

  • Added the ability to configure log formatting and filtering options via Helm values (#503, #512, #516)
  • Added the ability to configure pod placement via Helm values (#513, #516)

Fixed

  • Improved rate-limiting and backoff between the agent and the local Bottlerocket update API (#496, #505)
  • Improved rate-limiting and backoff between the agent and Brupop's apiserver (#505)
  • Added backoff to requests to Kubernetes watch APIs (#506)
  • Fixed an issue that caused Prometheus metrics to include stale data (#511)
  • Fixed incorrect resource requests for the agent pod in the Helm chart (#504)
  • Removed unnecessary rbac permissions granted to the apiserver and controller (#507)

Misc

  • Numerous dependency upgrades and documentation fixes (#502, #498, #506)

v1.2.0

17 Jul 20:41
dfa4c96

Choose a tag to compare

General

Added

  • Refactored deployment and yaml generation to use Helm templating (#126)
  • Improved time window to become cron expression based scheduler (#343), (#428)

Fixed

  • Removed unnecessary dep on older "time" crate from chrono (#415)
  • Fixed metrics not working for ipv6 clusters (#406)
  • Makefile: refactors brupop-image target (#418)
  • Cargo: use env vars when calling cargo (#462)

Misc

  • Numerous dependency upgrades and documentation fixes (#446), (#463), (#476)

v1.1.0

09 Feb 00:19
32abe11

Choose a tag to compare

General

Added

  • Removed OpenSSL in favor of Rust-based TLS using rustls (#401)
  • Updated TLS configurations to use leaf certs generated from root CA for brupop API server and agent (#340)
  • Added resource request limits for all containers (#327)

Fixed

  • Exposed the failure output for the apiclient when error occurs (#342)
  • kube clients are now created using the in-cluster DNS configuration (#373)
  • Removed deprecated Rust library APIs (#403)
  • Integration tests now use IMDSv2 calls (#405)

Misc

  • Numerous dependency upgrades and documentation fixes
  • GitHub action workflows now use larger 16 core runners (#356)

v1.0.0

02 Nov 02:43
80e379b

Choose a tag to compare

General

Added

  • Mechanism to constrain updates to a certain update time window (#241)
  • Option to exclude node before draining (#231)
  • Port configuration (#315)
  • Support for concurrent updates (#238)
  • Automatic prometheus scraping annotations for controller's service (#269)
  • Use ca.crt in SSL (#260)
  • Reload certificates periodically to ensure no service loss (#280)
  • Replaced bunyan style logging in favor of human readable logs (#298)
  • Support webhook conversions from v2 to v1 (to support the Kubernetes pinwheel model) (#308)
  • Support integration tests in AWS China region (#317) (#318)

Fixed

  • Upgraded Bottlerocket SDK to consume fix for OpenSSL CVE-2022-3602 and CVE-2022-3786 (#331)
  • Gracefully exit Brupop agent when rebooting node (#218)
  • Clean up bottlerocketshadows when Brupop resources are removed from the cluster (#235)
  • Clarify crossbeam license (#250)
  • Made error handling module specific (#279) (#291)

Misc

  • Numerous dependency updates
  • Fixed clippy linting / warnings (#267)
  • Clear and remove GitHub actions cache (#268) (#286)
  • Added step to integration tests to automatically add and delete cert-manager (#320)
  • Added GitHub action step to catch changes to deployment manifest (#321)

v0.2.2

17 Oct 17:35
b4f1994

Choose a tag to compare

General

Added

  • Add support to protect controller from becoming unscheduleable (#14)
  • Apply common k8s labels to all created resources (#113)
  • Support SSL communication between brupop-agent and brupop-apiserver (#127)
  • Handle update-reboot failures/ "crash loops" (#161), (#123)
  • Update README for setting up SSL (#211)

Fixed

  • Remove empty categories in Custom Resource spec (#205)

Integration test

Added

  • Add README on integration test tool (#166)
  • Add integration testing subcommand Monitor which monitors new nodes for successful updates (#130)
  • Support integration test for IPv6 cluster (#186)
  • Improve integration testing subcommand Integration-test to creates the bottlerocket nodes via nodegroups (#162)

Fixed

  • Fixed integration test bugs (#208), (#216)