feat: prepare release 1.28.1 (#217)

* feat: prepare release 1.28.1 * fix: linting * fix: version in README
sighupio · May 9, 2024 · f37ab3c · f37ab3c
1 parent 8763525
commit f37ab3c
Show file tree

Hide file tree

Showing 24 changed files with 173 additions and 45 deletions.
diff --git a/.drone.yml b/.drone.yml
@@ -159,7 +159,7 @@ steps:
     environment:
       CLUSTER_NAME: ${DRONE_REPO_NAME}-${DRONE_BUILD_NUMBER}
       KUBECONFIG: /drone/src/kubeconfig
-      FURYCTL_VERSION: v0.28.0-rc.4
+      FURYCTL_VERSION: v0.29.2-rc.0
     depends_on: [create Kind cluster]
     commands:
       - export KUBECONFIG=/drone/src/kubeconfig
@@ -198,7 +198,7 @@ volumes:
     host:
       path: /var/run/docker.sock
 ---
-name: e2e-kubernetes-1.27.4-1.28.0
+name: e2e-kubernetes-1.28.0-1.28.1
 kind: pipeline
 type: docker
 
@@ -264,7 +264,7 @@ steps:
     environment:
       CLUSTER_NAME: ${DRONE_REPO_NAME}-${DRONE_BUILD_NUMBER}-upgrades
       KUBECONFIG: /drone/src/kubeconfig-upgrades
-      FURYCTL_VERSION: v0.28.0-rc.4
+      FURYCTL_VERSION: v0.29.2-rc.0
     depends_on: [create Kind cluster]
     commands:
       - export KUBECONFIG=/drone/src/kubeconfig-upgrades
@@ -309,7 +309,7 @@ type: docker
 
 depends_on:
   - e2e-kubernetes-1.28
-  - e2e-kubernetes-1.27.4-1.28.0
+  - e2e-kubernetes-1.28.0-1.28.1
 
 platform:
   os: linux

diff --git a/Furyfile.yaml b/Furyfile.yaml
@@ -11,7 +11,7 @@ versions:
   logging: v3.4.0
   monitoring: v3.1.0
   opa: v1.12.0
-  networking: v1.16.0
+  networking: v1.17.0
   tracing: v1.0.3
 
 bases:

diff --git a/README.md b/README.md
@@ -7,8 +7,8 @@
 <p align="center">Kubernetes Fury Distribution (KFD) is a certified battle-tested Kubernetes distribution based purely on upstream Kubernetes.</p>
 <!-- markdownlint-enable MD033 MD045 -->
 
-[![Build Status](http://ci.sighup.io/api/badges/sighupio/fury-distribution/status.svg?ref=refs/tags/v1.27.4)](http://ci.sighup.io/sighupio/fury-distribution)
-[![Release](https://img.shields.io/badge/release-v1.28.0-blue?label=FuryDistributionRelease)](https://github.com/sighupio/fury-distribution/releases/latest)
+[![Build Status](http://ci.sighup.io/api/badges/sighupio/fury-distribution/status.svg?ref=refs/tags/v1.28.1)](http://ci.sighup.io/sighupio/fury-distribution)
+[![Release](https://img.shields.io/badge/release-v1.28.1-blue?label=FuryDistributionRelease)](https://github.com/sighupio/fury-distribution/releases/latest)
 [![Slack](https://img.shields.io/badge/slack-@kubernetes/fury-yellow.svg?logo=slack)](https://kubernetes.slack.com/archives/C0154HYTAQH)
 [![License](https://img.shields.io/github/license/sighupio/fury-distribution)](https://github.com/sighupio/fury-distribution/blob/main/LICENSE)
 
@@ -100,13 +100,13 @@ Core modules provide essential functionality to the distribution for production-
 
 Add-on modules provide additional functionality to the distribution. Their release cycle is independent of KFD's.
 
-| Module                              | Latest Release                   | Description                                                                  |
-| ----------------------------------- | -------------------------------- | ---------------------------------------------------------------------------- |
-| [Kong][kong-module]                 | ![Version][kong-version]         | Add Kong API Gateway for Kubernetes applications via Kong Ingress Controller |
-| [Service Mesh][service-mesh-module] | ![Version][service-mesh-version] | Deploy a service mesh on top of KFD                                          |
-| [Registry][registry-module]         | ![Version][registry-version]     | Integrate a Container Registry solution                                      |
-| [Storage][storage-module]           | ![Version][storage-version]      | Rook (Ceph Operator) based Storage solution on Kubernetes                    |
-| [Kafka][kafka-module]               | ![Version][kafka-version]        | Apache Kafka event streaming for your Cluster                                |
+| Module                              | Description                                                                  |
+| ----------------------------------- | ---------------------------------------------------------------------------- |
+| [Kong][kong-module]                 | Add Kong API Gateway for Kubernetes applications via Kong Ingress Controller |
+| [Service Mesh][service-mesh-module] | Deploy a service mesh on top of KFD                                          |
+| [Registry][registry-module]         | Integrate a Container Registry solution                                      |
+| [Storage][storage-module]           | Rook (Ceph Operator) based Storage solution on Kubernetes                    |
+| [Kafka][kafka-module]               | Apache Kafka event streaming for your Cluster                                |
 
 ## Get started with KFD 🚀
 
@@ -128,7 +128,7 @@ Current supported versions of KFD are:
 
 |                                  KFD Version                                     | Kubernetes Version |
 | :------------------------------------------------------------------------------: | :----------------: |
-| [`1.28.0`](https://github.com/sighupio/fury-distribution/releases/tag/v1.28.0)   |      `1.28.x`      |
+| [`1.28.1`](https://github.com/sighupio/fury-distribution/releases/tag/v1.28.1)   |      `1.28.x`      |
 | [`1.27.5`](https://github.com/sighupio/fury-distribution/releases/tag/v1.27.5)   |      `1.27.x`      |
 | [`1.26.6`](https://github.com/sighupio/fury-distribution/releases/tag/v1.26.6)   |      `1.26.x`      |
 
@@ -172,14 +172,14 @@ KFD is open-source software and it's released under the following [LICENSE](LICE
 [opa-module]: https://github.com/sighupio/fury-kubernetes-opa
 [auth-module]: https://github.com/sighupio/fury-kubernetes-auth
 
-[networking-version]: https://img.shields.io/badge/release-v1.15.0-blue
-[ingress-version]: https://img.shields.io/badge/release-v2.2.0-blue
-[logging-version]: https://img.shields.io/badge/release-v3.3.1-blue
-[monitoring-version]: https://img.shields.io/badge/release-v3.0.1-blue
-[tracing-version]: https://img.shields.io/badge/release-v1.0.2-blue
-[dr-version]: https://img.shields.io/badge/release-v2.2.0-blue
-[opa-version]: https://img.shields.io/badge/release-v1.11.1-blue
-[auth-version]: https://img.shields.io/badge/release-v0.1.0-blue
+[networking-version]: https://img.shields.io/badge/release-v1.17.0-blue
+[ingress-version]: https://img.shields.io/badge/release-v2.3.0-blue
+[logging-version]: https://img.shields.io/badge/release-v3.4.0-blue
+[monitoring-version]: https://img.shields.io/badge/release-v3.1.0-blue
+[tracing-version]: https://img.shields.io/badge/release-v1.0.3-blue
+[dr-version]: https://img.shields.io/badge/release-v2.3.0-blue
+[opa-version]: https://img.shields.io/badge/release-v1.12.0-blue
+[auth-version]: https://img.shields.io/badge/release-v0.2.0-blue
 
 <!-- Addon Modules -->
 [kong-module]: https://github.com/sighupio/fury-kubernetes-kong

diff --git a/docs/COMPATIBILITY_MATRIX.md b/docs/COMPATIBILITY_MATRIX.md
@@ -10,7 +10,9 @@ For a complete list of all KFD releases and their compatibility with Kubernetes
 
 | KFD / Kubernetes Version                                                        | v1.28.X            | v1.27.X            | v1.26.X            | 1.25.X             | 1.24.X             |
 | ------------------------------------------------------------------------------- | ------------------ | ------------------ | ------------------ | ------------------ | ------------------ |
+| [v1.28.1](https://github.com/sighupio/fury-distribution/releases/tag/v1.28.1)   | :white_check_mark: |
 | [v1.28.0](https://github.com/sighupio/fury-distribution/releases/tag/v1.28.0)   | :white_check_mark: |                    |                    |                    |                    |
+| [v1.27.6](https://github.com/sighupio/fury-distribution/releases/tag/v1.27.6)   |                    | :white_check_mark: |
 | [v1.27.5](https://github.com/sighupio/fury-distribution/releases/tag/v1.27.5)   |                    | :white_check_mark: |                    |                    |                    |
 | [v1.27.4](https://github.com/sighupio/fury-distribution/releases/tag/v1.27.4)   |                    | :white_check_mark: |                    |                    |                    |
 | [v1.27.3](https://github.com/sighupio/fury-distribution/releases/tag/v1.27.3)   |                    | :white_check_mark: |                    |                    |                    |

diff --git a/docs/releases/v1.27.6.md b/docs/releases/v1.27.6.md
@@ -0,0 +1,63 @@
+# Kubernetes Fury Distribution Release v1.27.6
+
+Welcome to KFD release `v1.27.6`.
+
+The distribution is maintained with ❤️ by the team [SIGHUP](https://sighup.io/) it is battle tested in production environments.
+
+## New Features since `v1.27.5`
+
+### Core Module Updates
+
+- [networking](https://github.com/sighupio/fury-kubernetes-networking) 📦 core module: [**v1.17.0**](https://github.com/sighupio/fury-kubernetes-networking/releases/tag/v1.17.0)
+  - Updated calico to `3.27.3`.
+  - Updated tigera operator to `1.32.7`.
+
+### Installer Updates
+
+- [on-premises](https://github.com/sighupio/fury-kubernetes-on-premises) 📦 installer: [**v1.29.3-rev.1**](https://github.com/sighupio/fury-kubernetes-on-premises/releases/tag/v1.29.3-rev.1)
+  - Added support for airgap installations.
+
+## New features 🌟
+
+- **New Airgap support**: This version introduces a feature for the OnPremises provider that allows installing the distribution in air-gapped environments.
+    You can adjust the parameters using `.spec.kubernetes.advanced.airGap: <object>`. An example configuration is:
+
+```yaml
+spec:
+  kubernetes:
+    advanced:
+      airGap:
+        containerdDownloadUrl: **url-to-containerd**
+        runcDownloadUrl: **url-to-runc**
+        runcChecksum: sha256: **runc-checksum**
+        etcdDownloadUrl: **url-to-etcd**
+        dependenciesOverride:
+          apt:
+            name: k8s-1.27
+            repo: ** example deb https://pkgs.k8s.io/core:/stable:/v1.27/deb/ /**
+            gpg_key: **url-to-gpg-key**
+            gpg_key_id: **gpg-key-id**
+          yum:
+            name: k8s-1.27
+            repo: **yum-repo-url**
+            gpg_key: **url-to-gpg-key**
+            gpg_key_check: true
+            repo_gpg_check: true
+```
+
+- **New field to specify python interpreter**: This version introduces a new field to specify the python interpreter to be used by the ansible playbooks. You can adjust the parameter using `.spec.kubernetes.advancedAnsible.pythonInterpreter: <string>`:
+
+```yaml
+spec:
+  kubernetes:
+    advancedAnsible:
+      pythonInterpreter: python3
+```
+
+## Fixes 🐞
+
+- **Pomerium Logs**: set log level to `info` by default, instead of `debug`.
+
+## Upgrade procedure
+
+Check the [upgrade docs](https://github.com/sighupio/furyctl/tree/main/docs/upgrades/kfd) for the detailed procedure.
diff --git a/docs/releases/v1.28.1.md b/docs/releases/v1.28.1.md
@@ -0,0 +1,63 @@
+# Kubernetes Fury Distribution Release v1.28.1
+
+Welcome to KFD release `v1.28.1`.
+
+The distribution is maintained with ❤️ by the team [SIGHUP](https://sighup.io/) it is battle tested in production environments.
+
+## New Features since `v1.28.0`
+
+### Core Module Updates
+
+- [networking](https://github.com/sighupio/fury-kubernetes-networking) 📦 core module: [**v1.17.0**](https://github.com/sighupio/fury-kubernetes-networking/releases/tag/v1.17.0)
+  - Updated calico to `3.27.3`.
+  - Updated tigera operator to `1.32.7`.
+
+### Installer Updates
+
+- [on-premises](https://github.com/sighupio/fury-kubernetes-on-premises) 📦 installer: [**v1.29.3-rev.1**](https://github.com/sighupio/fury-kubernetes-on-premises/releases/tag/v1.29.3-rev.1)
+  - Added support for airgap installations.
+
+## New features 🌟
+
+- **New Airgap support**: This version introduces a feature for the OnPremises provider that allows installing the distribution in air-gapped environments.
+    You can adjust the parameters using `.spec.kubernetes.advanced.airGap: <object>`. An example configuration is:
+
+```yaml
+spec:
+  kubernetes:
+    advanced:
+      airGap:
+        containerdDownloadUrl: **url-to-containerd**
+        runcDownloadUrl: **url-to-runc**
+        runcChecksum: sha256: **runc-checksum**
+        etcdDownloadUrl: **url-to-etcd**
+        dependenciesOverride:
+          apt:
+            name: k8s-1.27
+            repo: ** example deb https://pkgs.k8s.io/core:/stable:/v1.27/deb/ /**
+            gpg_key: **url-to-gpg-key**
+            gpg_key_id: **gpg-key-id**
+          yum:
+            name: k8s-1.27
+            repo: **yum-repo-url**
+            gpg_key: **url-to-gpg-key**
+            gpg_key_check: true
+            repo_gpg_check: true
+```
+
+- **New field to specify python interpreter**: This version introduces a new field to specify the python interpreter to be used by the ansible playbooks. You can adjust the parameter using `.spec.kubernetes.advancedAnsible.pythonInterpreter: <string>`:
+
+```yaml
+spec:
+  kubernetes:
+    advancedAnsible:
+      pythonInterpreter: python3
+```
+
+## Fixes 🐞
+
+- **Pomerium Logs**: set log level to `info` by default, instead of `debug`.
+
+## Upgrade procedure
+
+Check the [upgrade docs](https://github.com/sighupio/furyctl/tree/main/docs/upgrades/kfd) for the detailed procedure.
diff --git a/kfd.yaml b/kfd.yaml
@@ -2,7 +2,7 @@
 # Use of this source code is governed by a BSD-style
 # license that can be found in the LICENSE file.
 
-version: v1.28.0
+version: v1.28.1
 modules:
   auth: v0.2.0
   aws: v4.2.0
@@ -11,15 +11,15 @@ modules:
   logging: v3.4.0
   monitoring: v3.1.0
   opa: v1.12.0
-  networking: v1.16.0
+  networking: v1.17.0
   tracing: v1.0.3
 kubernetes:
   eks:
     version: 1.28
     installer: v3.1.1
   onpremises:
     version: 1.28.7
-    installer: v1.29.3-rev.1-rc.0
+    installer: v1.29.3-rev.1
 furyctlSchemas:
   eks:
     - apiVersion: kfd.sighup.io/v1alpha2

diff --git a/templates/distribution/manifests/auth/resources/pomerium-config.env.tpl b/templates/distribution/manifests/auth/resources/pomerium-config.env.tpl
@@ -22,8 +22,8 @@ AUTHENTICATE_SERVICE_HOST={{ template "pomeriumHost" . }}
 FORWARD_AUTH_URL=https://$(FORWARD_AUTH_HOST)
 AUTHENTICATE_SERVICE_URL=https://$(AUTHENTICATE_SERVICE_HOST)
 AUTOCERT=false
-POMERIUM_DEBUG=true
-LOG_LEVEL=debug
+POMERIUM_DEBUG=false
+LOG_LEVEL=info
 
 # DEX settings
 IDP_CLIENT_ID=pomerium

diff --git a/tests/e2e-kfddistribution-upgrades.sh b/tests/e2e-kfddistribution-upgrades.sh
@@ -7,8 +7,8 @@ set -e
 
 echo "----------------------------------------------------------------------------"
 echo "Executing furyctl for the initial setup"
-/tmp/furyctl apply --config tests/e2e/kfddistribution-upgrades/furyctl-init-cluster-1.27.4.yaml --outdir "$PWD" --disable-analytics
+/tmp/furyctl apply --config tests/e2e/kfddistribution-upgrades/furyctl-init-cluster-1.28.0.yaml --outdir "$PWD" --disable-analytics
 
 echo "----------------------------------------------------------------------------"
 echo "Executing upgrade to the next version"
-/tmp/furyctl apply --upgrade --config tests/e2e/kfddistribution-upgrades/furyctl-init-cluster-1.28.0.yaml --outdir "$PWD" --distro-location ./ --force upgrades --disable-analytics
+/tmp/furyctl apply --upgrade --config tests/e2e/kfddistribution-upgrades/furyctl-init-cluster-1.28.1.yaml --outdir "$PWD" --distro-location ./ --force upgrades --disable-analytics
diff --git a/...upgrades/furyctl-init-cluster-1.27.4.yaml → ...upgrades/furyctl-init-cluster-1.28.1.yaml b/...upgrades/furyctl-init-cluster-1.27.4.yaml → ...upgrades/furyctl-init-cluster-1.28.1.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.27.4
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-10-migrate-from-none-to-safe-values.yaml b/tests/e2e/kfddistribution/furyctl-10-migrate-from-none-to-safe-values.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-11-migrate-from-kyverno-default-policies-to-disabled.yaml b/tests/e2e/kfddistribution/furyctl-11-migrate-from-kyverno-default-policies-to-disabled.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-12-migrate-from-alertmanagerconfigs-to-disabled.yaml b/tests/e2e/kfddistribution/furyctl-12-migrate-from-alertmanagerconfigs-to-disabled.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-2-migrate-from-tempo-to-none.yaml b/tests/e2e/kfddistribution/furyctl-2-migrate-from-tempo-to-none.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-3-migrate-from-kyverno-to-none.yaml b/tests/e2e/kfddistribution/furyctl-3-migrate-from-kyverno-to-none.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-4-migrate-from-velero-to-none.yaml b/tests/e2e/kfddistribution/furyctl-4-migrate-from-velero-to-none.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-5-migrate-from-loki-to-none.yaml b/tests/e2e/kfddistribution/furyctl-5-migrate-from-loki-to-none.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-6-migrate-from-mimir-to-none.yaml b/tests/e2e/kfddistribution/furyctl-6-migrate-from-mimir-to-none.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-7-migrate-from-basicAuth-to-sso.yaml b/tests/e2e/kfddistribution/furyctl-7-migrate-from-basicAuth-to-sso.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"

diff --git a/tests/e2e/kfddistribution/furyctl-8-migrate-from-sso-to-none.yaml b/tests/e2e/kfddistribution/furyctl-8-migrate-from-sso-to-none.yaml
@@ -8,7 +8,7 @@ kind: KFDDistribution
 metadata:
   name: sighup
 spec:
-  distributionVersion: v1.28.0
+  distributionVersion: v1.28.1
   # This section describes how the KFD distribution will be installed
   distribution:
     kubeconfig: "{env://KUBECONFIG}"