github.com/VictoriaMetrics/operator

Release date: 22 Nov 2024

• vmoperator: add missing container labels to the metrics discovered with VMServiceScrape for endpointslices discovery role.
• vmoperator: add new variable VM_VMSERVICESCRAPEDEFAULT_ENFORCEENDPOINTSLICES to use endpointslices instead of endpoints as discovery role for VMServiceScrape when generate scrape config for VMAgent.
• vmoperator: adds new flag loggerJSONFields to the operator logger configuration. It allows to change json encoder fields. See this issue for details.
• api: adds new status field observedGeneration. See this issue for details.
• api: unify updateStatus field for CRD objects. It replaces status, clusterStatus and singleStatus for VLogs, VMCluster and VMSingle with generic updateStatus.

Release date: 11 Nov 2024

• vmrule: properly validate rules for vlogs group type.
• operator: properly apply changes to the converted VMScrapeConfig during operator start-up.
• operator: properly set operational update status for CRDs. Previously, operational status could be set before rollout finishes at Kubernetes due to bug at Kubernetes controller-manager.

Release date: 15 Oct 2024

• operator: properly apply useStrictSecurity: true to the initContainers for VMAuth, VMAgent and VMAlertmanager. See this issue for details.
• vmauth: Moved spec.configSecret to spec.externalConfig.secretRef.name and added spec.externalConfig.localPath to be able to provide custom configs via sidecar.
• vmcluster: adds requestsLoadBalancer configuration to the VMCluster.spec. See this issue for details.
• vmcluster: properly configure monitoring for VMCluster with enabled backup.
• vmalertmanager: properly trigger reload when ConfigMap provided via .spec.configMap are changed.
• operator: fixed operator reconcile on storage size change
• operator: fixed converting AlertmanagerConfig to VMAlertmanagerConfig

Release date: 15 Oct 2024

• api: adds new fields maxDiskUsagePerUrl andforceVMProto to the VMagent remoteWriteSpec
• vmuser: fixes the protocol of generated CRD target access url for vminsert and vmstorage when TLS is enabled.
• vmagent: properly make transition to statefulMode. See this issue for details.
• vmagent: properly assign OwnerRefrence for Role and RoleBinding at single-namespace operator mode.
• operator: fixes pod scheduling with useStrictSecurity enabled by removing default values for AppArmorProfile and SeccompProfile. See this issue for details.

Release date: 29 Sep 2024

• vmcluster: properly apply global container registry from configuration. It was ignored for VMCluster since v0.48.0 release. See this issue for details.
• operator: adds new flag --disableControllerForCRD. It allows to disable reconcile controller for the given comma-separated list of CRD names. See this issue for details.

Release date: 27 Sep 2024

• operator: properly expose vm_app_version metric tag with version and short_version build info. It was broken since v0.46.0 release.
• operator: changes default value for controller.maxConcurrentReconciles from 1 to 5. It should improve reconcile performance for the most installations.
• operator: expose new runtime metrics rest_client_request_duration_seconds, sched_latencies_seconds. It allows to better debug operator reconcile latencies.

Release date: 26 Sep 2024

• vmalertmanager: properly build service, previously port by number instead of name was used. It produced updating service log messages.
• vmcluster: properly add imagePullSecrets to the components. Due to bug at 0.48.0 operator ignored vmcluster.spec.imagePullSecrets See this issue for details.

Release date: 25 Sep 2024

• api: adds new fields useVMConfigReloader, configReloaderImageTag, configReloaderResources to to the VMagent, VMAlert, VMAuth, and VMAlertmanager.
• api/vmalertmanager: adds new field enforcedTopRouteMatchers. It adds given alert label matchers to the top route of any VMAlertmanagerConfig. See this issue for details.
• api: adds underscore version of host_aliases setting, which has priority over hostAliases.
• api: adds useDefaultResources setting to the all applications. It has priority over global operator setting.
• api: adds clusterDomainName to the VMCluster and VMAlertmanager. It defines optional suffix for in-cluster addresses.
• api: adds disableSelfServiceScrape setting to the all applications. It has priority over global operator setting.
• api: Extends applications securityContext and apply security configuration parameters to the containers.
• api: deletes unused env variables: VM_DEFAULTLABELS, VM_PODWAITREADYINITDELAY. Adds new variable VM_APPREADYTIMEOUT.
• vmalert: adds missing hostAliases fields to spec. See this issue for details.
• vmsingle/vlogs: makes better compatible with argo-cd by adding ownerReference to PersistentVolumeClaim. See this issue for details.
• operator: reduces reconcile latency. See this commit for details.
• operator: reduces load on kubernetes api-server. See this commits: commit-0, commit-1, commit-2.
• operator: enables client cache back for secrets and configmaps. Adds new flag -controller.disableCacheFor=secret,configmap to disable it if needed.
• operator: made webhook port configurable. See this issue for details.
• operator: operator trims spaces from Secret and Configmap values by default. This behaviour could be changed with flag disableSecretKeySpaceTrim. Related issue.
• operator: expose again only command-line flags related to the operator. Release v0.45.0 added regression with incorrectly exposed flags.

Release date: 28 Aug 2024

• operator: fixes statefulset reconcile endless loop bug introduced at v0.47.0 version with commit.

Release date: 26 Aug 2024

• vmalertmanager: allow to change webserver listen port with spec.Port. See this PR for details.
• operator: fixes statefulset rollingUpdate strategyType readiness check.
• operator: fixes statefulset reconcile endless loop bug introduced at v0.47.1 version with commit.
• vmuser: fixes crd.kind enum param for VMAlertmanager, it now supports both VMAlertmanager and VMAlertManager. See this issue for details.
• operator: adds sorting for configReloaderExtraArgs.

Release date: 23 Aug 2024

It is recommended upgrading to operator v0.47.2 because v0.47.1 contains a bug, which can lead to endless statefulset reconcile loop.

• operator: properly update statefulset on revisionHistoryLimitCount change. See this issue for details.
• vmalertmanagerconfig: properly construct tls_config for emails notifications. See this issue for details.
• operator: fixed Prometheus scrape config metricsPath conversion. See this issue
• config-reloader: Added reload prefix to all config-reloader tls* flags to avoid collision with flags from external package. See this issue

Release date: 15 Aug 2024

Breaking changes

• Update note 1: operator now forbids cross VMAlertmanagerConfig or global receiver references. VMAlertmanagerConfig must include only local receivers .

• Update note 2: removed deprecated mute_time_intervals from VMAlertmanagerConfig.spec. Use VMAlertmanagerConfig.spec.time_intervals instead.

• Update note 3: operator adds blackhole as default route for VMalertmanager if root route receiver is empty. Previously it added a first VMAlertmanagerConfig receiver. Update global VMalertmanager configuration with proper route receiver if needed

• config-reloader: adds new flags tlsCaFile, tlsCertFile,tlsKeyFile,tlsServerName,tlsInsecureSkipVerify. It allows to configure tls for reload endpoint. Related issue.

• vmuser: adds status.lastSyncError field, adds server-side validation for spec.targetRefs.crd.kind. Adds small refactoring.

• vmuser: allows to skip VMUser from VMAuth config generation if it has misconfigured fields. Such as references to non-exist CRD objects or missing fields. It's highly recommended to enable Validation webhook for VMUsers, it should reduce surface of potential misconfiguration. See this issue for details.

• vmagent: adds status and lastSyncError status fields to all scrape objects - VMServiceScrape, VMPodScrape, VMNodeScrape,VMPodScrape, VMStaticScrape and VMScrapeConfig. It allows to track config generation for vmagent from scrape objects.

• operator: refactors config builder for VMAgent. It fixes minor bug with incorrect skip of scrape object with incorrect references for secrets and configmaps.

• operator: allows to secure metrics-bind-address webserver with TLS and mTLS protection via flags tls.enable,tls.certDir,tls.certName,tls.key``,mtls.enable,mtls.clientCA`. See this issue for details.

• operator: fixes bug with possible tlsConfig SecretOrConfigmap references clash. Operator adds configmap prefix to the configmap referenced tls asset. See this issue for details.

• operator: properly release PodDisruptionBudget object finalizer. Previously it could be kept due to typo. See this issue for details.

• operator: refactors finalizers usage. Simplifies finalizer manipulation with helper functions

• operator: adds tls_config and authKey settings to auto-created VMServiceScrape for CRD objects from extraArgs. See this issue for details.

• vmalertmanagerconfig: Improves config validation. Now it properly tracks required fields and provides better feedback for misconfiguration. Adds new status fields - status and lastSyncError. Related issue.

• vmalertmanager: adds webConfig that simplifies tls configuration for alertmanager and allows to properly build probes and access urls for alertmanager. See this issue for details.

• vmalertmanager: adds gossipConfig to setup client and server TLS configuration for alertmanager.

• vmagent/vmsingle: sync stream aggregation options dropInputLabels, ignoreFirstIntervals, ignoreOldSamples from upstream, and support using configMap as the source of aggregation rules.

• operator: added -client.qps and -client.burst flags to override default QPS and burst K8S params. Related issue.

Release date: 9 Jul 2024

Breaking changes

• Update note 1: for operatorhub based VMAgent deployment serviceAccount vmagent must be removed. It's no longer shipped with bundle. After deletion operator will create new account with needed permissions.

• [manifests]: properly add webhook.enable for operatorhub deployments. See this commit 7a460b090dec018ea23ab8d9de414e2f7da1c513 for details.

• [manifests]: removes exact user from runAsUser setting. It must be defined at docker image or security profile level. See this commit 1cc4a0e5334f254a771fa06e9c07dfa93fbb734a for details.

• operator: switches from distroless to scratch base image. See this commit 768bf76bdd1ce2080c214cf164f95711d836b960 for details.

• config-reloader: do not specify command for container. command configured at docker image level. See this commit 2192115488e6f2be16bde7ddd71426e305a16144 for details.

Release date: 5 Jul 2024

• operator: fixes config-reloader image tag name after 0.46.0 release. See this issue for details.
• prometheus-converter: fixes panic at PodMonitor conversion with configured tlsConfig. See this issue for details.
• api: return back targetPort for VMPodScrape definition. See this issue for details.