-
Notifications
You must be signed in to change notification settings - Fork 20
/
changelog.yaml
1811 lines (1562 loc) · 62.7 KB
/
changelog.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
## -------------------------------------------------------------------------------
## Changelog Entry Documentation
## -------------------------------------------------------------------------------
# type The type of this change.
# Possible values:
# - 'bug' Bug has been fixed
# - 'documentation' Documentation change
# - 'enhancement' Feature has been implemented or some general improvements
# - 'internal' Internal change which does not affect consumers directly (e.g. refactorings)
# - 'security' A security relevant fix
# - 'hotfix' Emergency bug fix which needs to be rolled out immediately via hotfix process
# impact The impact this change has regarding consumption. The impact also affects the semantic version.
# Possible values:
# - 'incompatible' An incompatible change requires more information in the warning
# and updateNotes sections. Affects major or minor SemVer digit.
# - 'minor' A compatible change which introduces a new feature or enhancement.
# - 'patch' A compatible change without new features.
# title The title of the change
# description The description of the change (markdown syntax possible)
# warning [optional] A warning for consumers if appropriate
# upgradeNotes [optional] Everything a consumer needs to know and adapt in order to consume this change.
# deprecations [optional] If this change deprecates something we need to inform consumers to adapt early,
# before we remove it completely in the next months.
# pullRequestNumber The number of this pull request.
# A list is also possible in case more than one pull requests are involved in this change, e.g. [123, 456].
# jiraIssueNumber The number of the Jira issue.
# A list is also possible in case more than one Jira issues are affected by this change, e.g. [123, 456].
## --------------------------------------------------------------------------------------------------
## For new change entries copy the template below to 'changes:' of the 'version: NEXT' array element.
## --------------------------------------------------------------------------------------------------
# - type: [bug, enhancement, security, internal, hotfix, documentation]
# impact: [incompatible, minor, patch]
# title: <title>
# description: |-
# <description (markdown syntax)>
# warning: |-
# <optional warning message (markdown syntax)>
# upgradeNotes: |-
# <optional upgrade guidelines (markdown syntax)>
# deprecations: |-
# <optional deprecation notes (markdown syntax)>
# pullRequestNumber: <pull request number(s)>
# jiraIssueNumber: <Jira issue number(s)>
# Paste new changelog entries below 'changes:' of the 'version: NEXT' array element.
# ! Do NOT add change entries to already released versions! Only add to version 'NEXT'.
# ! Do NOT change any 'version' or 'date' values manually! The pipeline will take care.
# ! Do NOT change the order of version blocks! 'NEXT' needs to stay the first version block.
- version: NEXT
date: TBD
changes:
- version: "0.40.0"
date: 2023-11-29
changes:
- type: enhancement
impact: minor
title: "Helm chart: Ensure atomic override of complex values"
description: |-
The following complex values can no longer be overridden partially:
- `runController.resources`
- `runController.podSecurityContext`
- `runController.securityContext`
- `runController.nodeSelector` (default was empty)
- `runController.affinity` (default was empty)
- `runController.tolerations` (default was empty)
- `pipelineRuns.resources`
Partial overrides should be avoided because they imply the
risk of inconsistent or unintented results in case the default
values change with newer Helm chart releases.
upgradeNotes: |-
Ensure that overrides of the above-mentioned values are
complete, i.e. they override _all_ fields which where also set
in the respective chart default in v0.39.1.
If this is not the case, add the missing fields.
pullRequestNumber: 398
- type: enhancement
impact: minor
title: "Helm chart: Configure pods to run with Pod Security profile 'restricted'"
description: |-
Default security settings for the run controller and Helm hooks
have been changed to be accepted by Kubernetes Pod Security profile
`restricted`.
The following additional parameters for CRD update hooks are now
available:
- `hooks.crdUpdate.podSecurityContext`
- `hooks.crdUpdate.securityContext`
pullRequestNumber: 398
jiraIssueNumber: 725
- type: enhancement
impact: minor
title: "Helm chart: Add parameters for crd-update hook pods"
description: |-
The following additional parameters for CRD update hooks are now
available:
- `hooks.crdUpdate.resources`
- `hooks.crdUpdate.nodeSelector`
- `hooks.crdUpdate.affinity`
- `hooks.crdUpdate.tolerations`
pullRequestNumber: 398
- version: "0.39.1"
date: 2023-11-29
changes:
- type: enhancement
impact: patch
title: Update JFR image to tag 231120_3aac49d
description: |-
Noteworthy changes:
- The JFR launcher script now allows to specify _any_ commit-ish
as pipeline revision that exists in the remote repository.
In case the given revision is not a commit-ish, a proper error
message is provided and the scripts exits with `error_config`
instead of `error_infra`.
pullRequestNumber: 425
jiraIssueNumber: 1675
- type: internal
impact: patch
title: Upgrade Go SDK to v1.21.4
description: |-
Use Go SDK v1.21.4.
pullRequestNumber: 426
- type: internal
impact: patch
title: Update Go dependencies
description: |-
Updated all dependencies. Most important:
- Kybernetes to v1.27.6
- Tekton to v0.53.2
pullRequestNumber: 426
- type: bug
impact: patch
title: Recreate JFR TaskRun if pod creation failed
description: |-
The creation of the JFR pod may temporarily fail, e.g. due
to a timeout calling a mandatory admission webhook.
Steward now detects this and recreates the Tekton taskrun
to retry.
pullRequestNumber: 424
- type: bug
impact: patch
title: Stop waiting for finished non-restartable JFR TaskRun
description: |-
If a JFR TaskRun was never started, is finished and is not
restartable, Steward now fails the PipelineRun instead of
waiting until timeout.
pullRequestNumber: 424
- type: bug
impact: patch
title: Fix error detected by checkmarx tool
description: |-
Remove redundant error from logFinalState function
pullRequestNumber: 423
- version: "0.39.0"
date: 2023-11-03
changes:
- type: enhancement
impact: minor
title: Add custom logging details
description: |-
Allow to configure additional log attributes to be set from pipeline
run labels and annotations.
See the chart README for details.
pullRequestNumber: 412
- type: enhancement
impact: minor
title: Add logging of pipeline run final state
description: |-
Log result, namespace, run id etc. for completed pipeline runs.
pullRequestNumber: 415
jiraIssueNumber: 1576
- type: bug
impact: patch
title: Use result 'error_config' instead of 'error_content'
description: |-
... in case
- secrets referenced by pipeline runs don't exist
- multiple secrets map to the same name
- the configured Jenkinsfile repo server URL is invalid
pullRequestNumber: 418
- type: internal
impact: patch
title: Upgrade Go SDK to v1.21.3
description: |-
Use Go SDK v1.21.3.
pullRequestNumber: 420
- type: internal
impact: patch
title: Update Go dependencies
description: |-
Updated all dependencies. Most important:
- Kybernetes to v1.26.10
- Tekton to v0.50.2
- knative.dev/pkg to release 1.12
pullRequestNumber: 420
- type: internal
impact: patch
title: Tweak container build
description: |-
Small improvements to container build files.
pullRequestNumber: 421
- version: "0.38.1"
date: 2023-10-18
changes:
- type: enhancement
impact: patch
title: Update JFR image to tag 231018_94c7e9a
description: |-
Noteworthy changes:
- Updated Jenkins Core v2.414.2
- Updated all Jenkins Plug-ins
- Updated base image
pullRequestNumber: 416
jiraIssueNumber: 972
- version: "0.38.0"
date: 2023-10-06
changes:
- type: enhancement
impact: incompatible
title: Update Jenkinsfile Runner image to tag 231006_5085985
description: |-
The new image contains elasticsearch-logs-plugin [v0.13.1](https://github.com/SAP/elasticsearch-logs-plugin/releases/tag/0.13.1).
warning: |-
Helm chart parameters changed incompatibly. See the upgrade notes for instructions.
upgradeNotes: |-
Adapt Helm chart parameters:
- Remove `pipelineRuns.logging.forwarding.emitMaxRetriesIfBufferFull` (use `emitTimeoutMillis` instead; see below)
- If needed, set `pipelineRuns.logging.forwarder.emitTimeoutMillis` (`emitMaxRetriesIfBufferFull` was removed)
See the chart README for details on chart parameters.
pullRequestNumber: 409
jiraIssueNumber: 1258
- type: enhancement
impact: incompatible
title: Change Helm chart parameters
description: |-
See the upgrade notes for necessary adaptations.
warning: |-
Helm chart parameters changed incompatibly. See the upgrade notes for instructions.
upgradeNotes: |-
Adapt Helm chart parameters:
- Rename `pipelineRuns.sidecars` to `pipelineRuns.jenkinsfileRunner.sidecars`
- Rename `pipelineRuns.logging.forwarding.*` to `pipelineRuns.logging.forwarder.*`
- If needed, set `pipelineRuns.logging.forwarder.useSidecar` to `true` (default value changed to `false`)
- If needed, set `pipelineRuns.logging.forwarder.tag` (default value changed to `logs`)
See the chart README for details on chart parameters.
pullRequestNumber: 409
jiraIssueNumber: 1258
- version: "0.37.0"
date: 2023-09-01
recall:
message: |-
elasticsearch-logs-plugin in this version contained some bugs which are fixed in the next patch version. Please use version 0.37.1 instead.
changes:
- type: enhancement
impact: minor
title: Update stewardci-jenkinsfile-runner image to version '230825_1c09345'
description: |-
The new image contains new version "0.12.0" of elasticsearch-logs-plugin
which enables configuring more parameters.
See release note for [version 230825_1c09345](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/230825_1c09345)
pullRequestNumber: 406
- version: "0.36.0"
date: 2023-08-22
changes:
- type: enhancement
impact: minor
title: Update stewardci-jenkinsfile-runner image to version 230822_3c378b2
description: |-
The new image contains updates for Jenkins core (to 2.387.3) and all plugins.
See release note for [version 230822_3c378b2](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/230822_3c378b2)
pullRequestNumber: 404
- version: "0.35.0"
date: 2023-08-10
changes:
- type: enhancement
impact: minor
title: Update stewardci-jenkinsfile-runner image to version 230810_ab62215
description: |-
The new image contains updates for Jenkins core (to 2.375.4), all plugins and the base image.
See release note for [version 230810_ab62215](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/230810_ab62215)
pullRequestNumber: 402
jiraIssueNumber: 848
- version: "0.34.0"
date: 2023-08-07
changes:
- type: enhancement
impact: patch
title: Migrate to structural and contextual logging
description: |-
Convert existing logging to structural and contextual logging as per
[Kubernetes guidelines](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/migration-to-structured-logging.md).
pullRequestNumber: 387
jiraIssueNumber: 1157
- version: "0.33.0"
date: 2023-07-13
changes:
- type: internal
impact: patch
title: Upgrade Go dependencies
description: |-
- "google.golang.org/protobuf" (v1.29.1)
pullRequestNumber: 394
jiraIssueNumber: 1313
- type: enhancement
impact: minor
title: Upgrade Go modules and dependencies
description: |-
- "k8s.io/*" (v0.25.7)
- "knative.dev/pkg" release-1.9 (v0.0.0-20230221145627-8efb3485adcf)
- "github.com/benbjohnson/clock" (v1.3.5)
- "github.com/tektoncd/pipeline" (v0.46.0)
pullRequestNumber: 393
jiraIssueNumber: 1313
- version: "0.32.0"
date: 2023-06-27
changes:
- title: Update Jenkinsfile Runner image
type: enhancement
impact: minor
description: |-
Noteworthy changes:
- Build logs are no longer written to the container output if
log forwarding to Elasticsearch is enabled via PipelineRun spec.
For the details see stewardci-jenkinsfilerunner-image [PR #106](https://github.com/SAP/stewardci-jenkinsfilerunner-image/pull/106) and [PR #108](https://github.com/SAP/stewardci-jenkinsfilerunner-image/pull/108).
pullRequestNumber: 391
jiraIssueNumber: 1169
- version: "0.31.0"
date: 2023-06-19
changes:
- title: Make OpenSearch/Elasticsearch index URL in pipeline runs usable
type: enhancement
impact: minor
description: >-
The OpenSearch/Elasticsearch index URL introduced with version 0.6.2 was not
considered so far.
With this change it is used to define log destinations per
pipeline run.
pullRequestNumber: 389
jiraIssueNumber: 990
- version: "0.30.0"
date: 2023-06-12
changes:
- type: enhancement
impact: incompatible
title: Remove the tenants concept
description: |-
The tenants concept was neither really used nor is it a core competency
of Steward to manage namespaces. It has therefore been removed completely.
Users of Steward are now required to set up the namespaces to manage
`PipelineRun` objects on their own.
upgradeNotes: |-
Replace the usage of client namespaces and tenants by plain K8s namespaces.
The Helm upgrade does _not_ remove the tenant CRD. This must be done manually:
- For all client namespaces where all tenants can be deleted together with all their
data in the respective tenant namespaces:
- ___Before___ the upgrade of Steward, delete the respective client namespaces.
This implicitly deletes the contained tenant object, which in turn lets
Steward delete the corresponding tenant namespaces with all their contents,
especially PipelineRun objects.
- ___After___ the upgrade of Steward:
- Remove finalizers from all Tenant objects:
```
for item in $(kubectl get tenants.steward.sap.com -A -o name); do
kubectl patch "$item" --type='json' -p='[{"op": "remove", "path": "/metadata/finalizers"}]'
done
```
- Remove tenant CRD:
```
kubectl delete crd tenants.steward.sap.com
```
This implicitly deletes all Tenant objects. But as the Tenant controller of Steward
has been removed, the corresponding tenant namespaces are kept.
pullRequestNumber: 383
jiraIssueNumber: 1126
- version: "0.29.1"
date: 2023-05-16
changes:
- type: internal
impact: patch
title: Update JFR image (patch)
description: |-
The elasticsearch plugin of the JFR had an internal bug that is now fixed with
https://github.com/SAP/stewardci-jenkinsfilerunner-image/pull/105
pullRequestNumber: 385
jiraIssueNumber: CPCCICD-1125
- version: "0.29.0"
date: 2023-05-02
changes:
- type: enhancement
impact: minor
title: Introduce switch for usage of tenants and clients
description: |-
Steward is providing a client/tenant concept which can be used.
It is also possible to use Steward without client namespaces and tenants and use plain k8s namespaces instead.
This change provides a possibility to disable the usage of tenants and client namespaces in the helm chart.
This results in less resource consumption on the k8s cluster by saving one controller.
pullRequestNumber: 381
jiraIssueNumber: 1126
- version: "0.28.0"
date: 2023-04-27
changes:
- type: enhancement
impact: minor
title: Enable log forwarding
description: |-
We want to add support for log-forwarders (i.e. fluentd) instead of sending logs directly to OpenSearch/Elasticsearch.
For this purpose, two configuration extension are prepared:
* Set environment variables to configure the elasticsearch-log-plugin to forward data to fluentd
* Enable the use of tekton sidecars. This can be used to run the forwarder as a sidecar container in the JFR pod
upgradeNotes: |-
The change does not affect the current behavior as long as the new configuration options are not used.
In order to use log forwarding, a version of the JFR image later than "230426_ed390b3" is required.
pullRequestNumber: 379
jiraIssueNumber: CPCCICD-1045
- version: "0.27.2"
date: 2023-04-20
changes:
- type: internal
impact: patch
title: Refactorings
description: |-
This change only contains refactorings:
- Reduce complexity of functions
pullRequestNumber: 376
jiraIssueNumber: 975
- version: "0.27.1"
date: 2023-03-28
changes:
- type: internal
impact: patch
title: Refactorings
description: |-
This change only contains refactorings:
- Introduce constants where strings are used multiple times
- Remove unnecessary boolean literals
- Use opposite operator in favour of negation
- Reduce complexity of functions
- Change function names to better reflect their semantics
pullRequestNumber: 371
- type: internal
impact: patch
title: Upgrade Go SDK to v1.18.10
description: |-
Use Go SDK to v1.18.10.
pullRequestNumber: 371
- version: "0.27.0"
date: 2023-03-06
changes:
- type: enhancement
impact: minor
title: Use Tekton cluster resolver
description: |-
Tekton ClusterTasks are deprecated since Tekton v0.41.0.
Therefore, Tekton's cluster resolver is used instead.
pullRequestNumber: 363
- version: "0.26.0"
date: 2023-02-15
changes:
- type: enhancement
impact: minor
title: Use K8s auto-mount of service account token
description: |-
Instead of configuring a volume for the service account token,
Steward now just sets `automountServiceAccountToken` to true
so that Kubernetes takes care for the token injection.
During the prepare phase of pipeline runs Steward no longer waits
for service account token secrets to be created by Kubernetes.
pullRequestNumber: 361
jiraIssueNumber: 726
- type: enhancement
impact: minor
title: Allow running on K8s v1.24+
description: |-
As a consequence of using K8s auto-mount of service account
tokens, Steward should now work on K8s v1.24+.
pullRequestNumber: 361
jiraIssueNumber: 726
- type: enhancement
impact: patch
title: Improve message
description: |-
Improve readability of message in pipeline runs.
pullRequestNumber: 364
- version: "0.25.2"
date: 2023-02-09
changes:
- type: enhancement
impact: patch
title: Use JFR image with updated plugins
description: |-
Use Jenkins 2.346.3 with [updated plugins](https://github.com/SAP/stewardci-jenkinsfilerunner-image/pull/98).
Including the use of the [compatible kubernetes related plugins](https://github.com/SAP/stewardci-jenkinsfilerunner-image/pull/100).
In addition, the base images was updated to include updating some alpine packages updates.
pullRequestNumber: 360
- version: "0.25.1"
date: 2023-01-30
changes:
- type: bug
impact: patch
title: Rollback updated plugins
description: |-
Rollback `stewardci/stewardci-jenkinsfile-runner` image to `230126_b29a3f0` version
pullRequestNumber: 358
- version: "0.25.0"
date: 2023-01-26
recall:
message: |-
This version contains a non working JFR image. Use version 0.25.1 instead.
changes:
- type: enhancement
impact: minor
title: Use JFR image with updated plugins
description: |-
Use Jenkins 2.346.3 with [updated plugins](https://github.com/SAP/stewardci-jenkinsfilerunner-image/pull/98).
pullRequestNumber: 356
- type: internal
impact: minor
title: Use JFR image with improved error handling
description: |-
Steward can now handle different error codes provided by the improved JFR image.
pullRequestNumber: 354
jiraIssueNumber: 715
- version: "0.24.1"
date: 2023-01-12
changes:
- type: bug
impact: minor
title: Fix not working imagePullPolicy parameter in backend-api
description: |-
Before the parameter `imagePullPolicy` in the PipelineRun was not handled correctly.
This is fixed with this change.
pullRequestNumber: 351
- type: internal
impact: patch
title: Fix start time of phase "running"
description: |-
The start time of phase "running" was set to the start time of the
Tekton TaskRun for JFR, which is when the pod has been _created_.
But phase "waiting" now covers the time until successful start-up
of the containers in the pod, which can be significantly after pod
creation, e.g. due to image pull time.
Therefore, the start time of phase "running" is now the start time
of the the JRF container.
pullRequestNumber: 350
jiraIssueNumber: 1974
- version: "0.24.0"
date: 2022-12-23
changes:
- type: internal
impact: minor
title: Retry on ImagePullBackOff
description: |-
Since Tekton v0.41.0 TaskRuns fail if the corresponding pod is subject to
image pull back-off ([#4921](https://github.com/tektoncd/pipeline/pull/4921).
In case of transient image pull failures this can fail Steward PipelineRun
processing (`error_infra`).
Steward now detects aborted TaskRuns due to ImagePullBackOff and retries with
a new TaskRun for a configurable period (`waitTimeout`).
This happens in the 'waiting' phase of Steward PipelineRun processing.
pullRequestNumber: 345
jiraIssueNumber: 1974
- version: "0.23.1-hotfix1"
date: 2023-01-13
changes:
- type: hotfix
impact: patch
title: Fix not working imagePullPolicy parameter in backend-api
description: |-
Before the parameter `imagePullPolicy` in the PipelineRun was not handled correctly.
This is fixed with this change.
pullRequestNumber: 351
- version: "0.23.1"
date: 2022-12-09
changes:
- type: security
impact: patch
title: Update JFR to 221118_24e6615
description: |-
Update to latest JFR [221118_24e6615](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/221118_24e6615)
upgradeNotes: |-
If you use an image cache you might want to update the image there as well.
pullRequestNumber: 346
- version: "0.23.0"
date: 2022-11-17
changes:
- type: security
impact: patch
title: Upgrade go version to 1.18.8
description: Upgrade go version to 1.18.8
pullRequestNumber: 341
- type: enhancement
impact: minor
title: Add aggregated cluster roles for crds
description: |-
Add aggregated cluster roles for the generic view, edit and admin roles
for the custom resources tenants and pipelineruns.
pullRequestNumber: 340
- version: "0.22.1"
date: 2022-10-19
changes:
- type: enhancement
impact: patch
title: Upgrade Go dependencies
description: |-
Upgrade to highest possible versions.
pullRequestNumber: 338
- version: "0.22.0"
date: 2022-10-17
changes:
- type: enhancement
impact: incompatible
title: Upgrade Go dependencies
description: |-
- Tekton: v0.40.2
- Kubernetes: v1.23.9
- knative.dev/pkg: release-1.7 (v0.0.0-20220818004048-4a03844c0b15)
- others
warning: |-
Requires Tekton v0.40.0+ and Kubernetes v1.22+ at runtime.
upgradeNotes: |-
Ensure that runtime dependency requirements are met (see warning above).
pullRequestNumber: 336
jiraIssueNumber: 1832
- type: enhancement
impact: patch
title: Upgrade Go SDK to v1.18.7
description: |-
Use Go SDK to v1.18.7.
pullRequestNumber: 336
- version: "0.21.2"
date: 2022-07-19
changes:
- type: enhancement
impact: patch
title: Increase memory limit of Steward tenant controller
description: |-
Increase the memory limit of Steward tenant controller to avoid OOMKilled.
pullRequestNumber: 332
- version: "0.21.1"
date: 2022-07-04
changes:
- type: security
impact: patch
title: Update JFR to 220701_94864a5
description: |-
Update to latest JFR [220701_94864a5](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/220701_94864a5)
upgradeNotes: |-
If you use an image cache you might want to update the image there as well.
pullRequestNumber: 330
- version: "0.21.0"
date: 2022-06-15
changes:
- type: security
impact: patch
title: Update JFR to 220615_7db71b2
description: |-
Update to latest JFR [220615_7db71b2](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/220615_7db71b2)
upgradeNotes: |-
If you use an image cache you might want to update the image there as well.
pullRequestNumber: 326
jiraIssueNumber: 1640
- type: enhancement
impact: incompatible
title: "Network policy: Remove rule for cluster-internal API Server access"
description: |-
We cannot provide a rule allowing access to service `kubernetes.default`
that works in general.
It always depends on the particular K8s setup.
Therefore, remove the rule.
upgradeNotes: |-
If you use the network policy for pipeline runs provided with the Helm
chart, check whether a rule for API Server access is required.
If so, define your own network policy (see the chart README).
pullRequestNumber: 328
jiraIssueNumber: 1604
- version: "0.20.0"
date: 2022-05-25
changes:
- type: enhancement
impact: minor
title: Extend permissions of default service account in run namespaces
description: |-
The permissions of the default service account in run namespaces are extended
by full CRUD permissions on:
- configmaps
- secrets
pullRequestNumber: 324
jiraIssueNumber: 1609
- version: "0.19.1"
date: 2022-05-04
changes:
- type: bug
impact: patch
title: Fix metric steward_pipelineruns_ongoing_state_duration_periodic_observations_seconds
description: |-
No observations were made for phases `preparing` and `waiting`.
For observations of phases `cleaning` and `finished` the duration
was including the duration of phase `running`.
pullRequestNumber: 322
- version: "0.19.0"
date: 2022-04-19
changes:
- type: enhancement
impact: minor
title: Provide a timeout setting for each pipeline run
description: |-
With this change it is now possible to define timeout for each pipeline run.
pullRequestNumber: 316
jiraIssueNumber: CLOUDCI-1286
- type: security
impact: patch
title: Update go version
description: |-
Update go version to 1.16.15
pullRequestNumber: 317
- type: security
impact: patch
title: Update go version
description: |-
- Update go version to 1.17.9
- Update build tags. See https://go.dev/design/draft-gobuild
pullRequestNumber: 318
- type: security
impact: patch
title: Update k8s version
description: |-
- Update k8s version to 1.23.5
- Update other dependencies to latest versions. See go.mod
pullRequestNumber: [319, 320]
- version: "0.18.4"
date: 2022-03-23
changes:
- type: security
impact: patch
title: Updated `tektoncd/pipeline` and `prometheus/client_golang` package versions
description: |-
- Updated "github.com/tektoncd/pipeline" version to `v0.34.0` due to [CVE-2021-44716](https://github.com/advisories/GHSA-vc3p-29h2-gpcp).
- Updated "github.com/prometheus/client_golang" version to `v1.12.1` due to [CVE-2022-21698](https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-21698)
pullRequestNumber: 314
jiraIssueNumber: CLOUDCI-1198
- version: "0.18.3"
date: 2022-02-16
changes:
- type: security
impact: patch
title: Updated JFR image to 220215_5d89c43
description: |-
Updated JFR image to [220215_5d89c43](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/220215_5d89c43).
pullRequestNumber: 312
jiraIssueNumber: CLOUDCI-1417
- version: "0.18.2"
date: 2022-01-24
changes:
- type: security
impact: patch
title: new JFR image with everything updated and fixed vulnerabilities
description: |-
Jenkins core, plugins and adoptopenjdk base image on latest versions.
See [changes](https://github.com/SAP/stewardci-jenkinsfilerunner-image/compare/211220_cf0ea4a...220124_2022975).
upgradeNotes: |-
If you use an image cache make sure to add the new image `stewardci/stewardci-jenkinsfile-runner:220124_2022975`.
pullRequestNumber: 310
jiraIssueNumber: [1337, 1338, 1339, 1340]
- version: "0.18.1"
date: 2022-01-17
changes:
- type: bug
impact: patch
title: Adapt configuration for K8s API request timeouts
description: |-
- Do not set default timeout values in the Helm chart.
If no value is set, use the default value built into
the controller (15 minutes).
- Renamed the Helm chart parameters. See the upgrade
notes for details.
upgradeNotes: |-
- Rename Helm chart parameters:
- `runController.args.serverRequestTimeout` to `runController.args.k8sAPIRequestTimeout`
- `tenantController.args.serverRequestTimeout` to `tenantController.args.k8sAPIRequestTimeout`
pullRequestNumber: 307
- type: bug
impact: patch
title: "Fix: Helm hooks do not use configured image pull secrets"
description: |-
The Helm chart uses hooks to install/update the CRDs.
These hooks are K8s jobs, which also need a container image.
The configured image pull secrets should be used for Helm hooks, too.
pullRequestNumber: 302
- type: enhancement
impact: patch
title: Add ignore label
description: |-
For tests it is required to create/update Steward CROs, but avoid that
Steward controllers act on them.
A new label `steward.sap.com/ignore` (without value) instructs Steward
controllers to ignore this API object.
The label should never be added to an existing API object.
pullRequestNumber: 300
- type: internal
impact: patch
title: Fix and overhaul CRD schema tests
description: |-
CRD schema tests where broken, incomplete and fragile.
pullRequestNumber: 301
- type: internal
impact: patch
title: Update Go SDK to v1.16.12
description: |-
Build with Go SDK [v1.16.12](https://golang.org/doc/go1.16).
pullRequestNumber: 308
- version: "0.18.0"
date: 2022-01-12
changes:
- type: enhancement
impact: minor
title: Make K8s API request timeout configurable
description: |-
The request timeout of K8s API calls can be configured now
via additional Helm chart parameters.
pullRequestNumber: 303
- version: "0.17.1"
date: 2021-12-20
changes:
- type: security
impact: patch
title: Updated Jenkinsfile Runner image to 211220_cf0ea4a
description: |-
Updated Jenkinsfile Runner image to [211220_cf0ea4a](https://github.com/SAP/stewardci-jenkinsfilerunner-image/releases/tag/211220_cf0ea4a)
with latest Jenkins Core and plugins.
pullRequestNumber: 303
- version: "0.17.0"
date: 2021-12-13
changes:
- type: enhancement
impact: incompatible
title: Remove use of deprecated K8s APIs
description: |-
Steward used some Kubernetes API versions that are deprecated in newer
Kubernetes releases.
The following replacements have been applied:
- `apiextensions.k8s.io/v1beta1` → `apiextensions.k8s.io/v1`
- `rbac.authorization.k8s.io/v1beta1` → `rbac.authorization.k8s.io/v1`
warning: |-
- Steward does no longer run on Kubernetes v1.15 or below.
- Rolling back to an earlier version of Steward might fail.
All Steward releases up to v0.16.0 have a bug in the CRD update
hook of the Helm chart.
Using `helm rollback` or `helm upgrade` with such target version
will fail.
The problem has been fixed in Steward v0.16.1 and higher.
Rolling back to an earlier version can be achieved by first rolling
back to v0.16.1 and then to the desired target version.
upgradeNotes: |-
See the warnings section.
pullRequestNumber: 296
- version: "0.16.1"
date: 2021-12-13
changes:
- type: bug
impact: patch