16 Dec 13:39

75cb4d4

Enhancements

Add log4j2.formatMsgNoLookups logging property to ES < 7.2 #5157

This change will mitigate the Log4Shell vulnerability (CVE-2021-44228) in susceptible Elasticsearch clusters (below version 7.2). ECK will prepend the -Dlog4j2.formatMsgNoLookups=true JVM parameter to the environment variable ES_JAVA_OPTS if it is not yet defined by the user. This triggers a rolling restart of all Pods of the affected Elasticsearch clusters to apply these changes.

Add internal product header to requests #5129

Bug fixes

Resource aggregator should handle missing memory settings #5158

Misc

Update golang Docker tag to v1.17.5 #5149

Assets 2

07 Dec 17:29

david-kow

1.9.0

ab86a2b

Elastic Cloud On Kubernetes 1.9.0

Elastic Cloud on Kubernetes 1.9.0

Breaking changes

IMPORTANT

For Operator Lifecycle Manager (OLM) and OpenShift OperatorHub users that run with automatic upgrades enabled, it is advised to set set-default-security-context operator flag explicitly before next ECK release. Next version of ECK will introduce a change that could result in setting an invalid Pod Security Context to Elasticsearch Pods.

Inherit resource requirements in init containers #4963

All init containers will inherit resource requirements from the main containers by default.

Move to env vars based Fleet mode configuration #4889

ECK operator will configure Elastic Agent in Fleet mode using environment variables instead of a configuration file. This method allows you to easily override the default settings. If the override is configured with any other method, an additional step is required before the operator upgrade.

Update your Agent resources such that environment variables are set for settings you'd like to override, for example:

...
spec:
  deployment:
    podTemplate:
      spec:
        containers:
        - name: agent
          env:
          - name: KIBANA_FLEET_HOST
            value: "https://kibana.example.com:443"
...

Upgrade ECK to version 1.9.x.
Remove any modification and references to fleet-setup.yml. As ECK 1.9.x uses environment variables to set the default config, the environment variables you've set in step 1. override the default values.

New features

Allow users to suspend Elasticsearch Pods for debugging purposes #4946 (issue: #4546)

Enhancements

Add logging for call to ES #4958 (issue: #4935)
Shorten the reconciliation loop duration if Elasticsearch is down #4938 (issues: #2939, #3496)
Ignore ClusterIPs, and IPFamilyPolicy in services, and timestamp in license during reconciliation #4929
Add operator license key check #4925
Skip remote clusters reconciliation earlier if remote clusters are not configured #4924
Refactor Elasticsearch HTTP error handling #4922 (issue: #4918)
Verify supported Elasticsearch distribution during license reconciliation #4920
Remove permissions not used by the operator #4823

Bug fixes

Avoid updating the association status when no association #4986 (issue: #4985)
Forcibly recreate Beat keystore #4942 (issues: #4527, #4926)
Init. fs container: make cp more resilient #4888 (issue: #4877)
Allow the upgrade of a single node cluster with yellow status #4787 (issue: #4625)

Misc

Update module github.com/go-test/deep to v1.0.8 #4948
Update golang Docker tag to v1.17.2 #4934
Update module github.com/spf13/viper to v1.9.0 #4847

Assets 2

21 Sep 07:00

sebgl

1.8.0

4f367c3

Elastic Cloud On Kubernetes 1.8.0

Elastic Cloud on Kubernetes 1.8.0

Breaking changes

Remove non-functional pre-stop hook parts {pull}4801[#4801] (issue: {issue}4698[#4698])

The operator does not rely on the $PRE_STOP_MAX_WAIT_SECONDS environment variable to control <<{p}-prestop,Elasticsearch Pods PreStop hook>> anymore. Use $PRE_STOP_ADDITIONAL_WAIT_SECONDS instead (defaults to 50 seconds).

Note ECK will drop support for Openshift 3.11 starting ECK version 2.0.

Enhancements

Drop "properties: {}" from empty-v1alpha1-patch {pull}4813[#4813]
Remove beta label from Helm documentation {pull}4802[#4802] (issue: {issue}4796[#4796])

Bug fixes

Fix Agent volumes when an association has no CA {pull}4833[#4833] (issue: {issue}4832[#4832]
Fix handling CAs in Agent controller {pull}4807[#4807] (issue: {issue}4790[#4790])
Improve Elasticsearch cluster health API timeout handling {pull}4803[#4803] (issue: {issue}4507[#4507])
Agent: fix Elasticsearch association error message {pull}4792[#4792]

Misc

Update module gopkg.in/yaml.v1 to v2 {pull}4788[#4788]
Update module github.com/fsnotify/fsnotify to v1.5.0 {pull}4778[#4778]
Update golang Docker tag to v1.17.0 {pull}4766[#4766]
Update module sigs.k8s.io/controller-runtime to v0.9.6 {pull}4747[#4747]
Update module go.uber.org/zap to v1.19.0 {pull}4742[#4742]
Update module sigs.k8s.io/controller-tools to v0.6.2 {pull}4697[#4697]

Assets 2

23 Aug 07:23

barkbay

1.7.1

2687676

Elastic Cloud on Kubernetes 1.7.1

Bug fixes

Remove x-kubernetes-preserve-unknown-fields from volumeClaimTemplates #4768 (issue: #4737)

Assets 2

03 Aug 07:48

barkbay

1.7.0

a186ea7

Elastic Cloud on Kubernetes 1.7.0

Breaking changes

Split manifest generation to produce both v1/v1beta1 CRDs #4489

New features

[Stack Monitoring] Kibana monitoring with Metricbeat and Filebeat as sidecars #4183
[Stack Monitoring] Elasticsearch monitoring with Metricbeat and Filebeat as sidecars #4528
[Agent] Fleet mode and Fleet Server support in Elastic Agent CRD #4429
[Autoscaling] Enable scale subresource on eligible resources #4547
Simplify setup of Enterprise Search access through Kibana UI #4598
Support custom CA on HTTP layer #4522

Enhancements

Add support for Elliptic Curve Digital Signature Algorithm (ECDSA) signed certificates #4581
Allow users to configure SANs on transport certificates #4600
Add validation for declared volume claim templates #4526]
[Autoscaling] Introduce resource recommenders #4493

Bug fixes

Beats: allow unprivileged Pods to read configuration file #4562
Fix heap memory parsing with trailing white spaces #4564
Detect admission registration API version #4555

Assets 2

25 May 11:03

idanmo

1.6.0

8326ca8

1.6.0

Elastic Cloud on Kubernetes 1.6.0

New features

[EMS] Add Elastic Maps Server controller #4443
[EMS] Add Elastic Maps Server CRD #4439

Enhancements

[Agent] Increase default memory resources for Elastic Agent #4453
[Helm] Add optional podLabels to operator pod and Expose Metrics ports #4424
Allow users to spec a serviceName in associations #4404
Add data tier labels to Elasticsearch nodes #4312

Bug fixes

[EnterpriseSearch] Update EnterpriseSearch config 8.x version test #4466
[Autoscaling] Add support for tier only requests #4445
[Agent] Add missing rules for agents to the operator roles #4418
Remove labels from operator namespace #4400

Assets 2

23 Mar 10:16

thbkrkr

1.5.0

8091c0d

1.5.0

Elastic Cloud on Kubernetes 1.5.0

Breaking changes

Promote EnterpriseSearch Custom Resource Definition to v1 #4284 (issue: #4257)

New features

[Autoscaling] Report overlapping policies #4265
[Autoscaling] Add setting to customize autoscaling API polling frequency #4264
[Autoscaling] Add scale down stabilization #4250
[Autoscaling] Add support for request/limit ratio #4239 (issue: #4006)
[Autoscaling] Add Elasticsearch autoscaling controller #4173
[Autoscaling] Add Elasticsearch API client #4158
[Autoscaling] Add autoscaling resource definition #4148 (issue: #4006)

Enhancements

Add support for VolumeClaimDeletePolicies for Elasticsearch clusters #4050 (issue: #2328)

Bug fixes

Fix OpenShift monitoring recipe #4344

Deprecation

OpenShift 3.11 support is deprecated in ECK 2.0. ECK 1.8 is the last version that supports OpenShift 3.11

Assets 2

10 Mar 06:44

pebrc

1.4.1

512d543

1.4.1

Elastic Cloud on Kubernetes 1.4.1

Bug fixes

Set webhook matchPolicy to Exact #4271 (issue: #4270)
[Helm] Unify role bindings #4262

Assets 2

10 Feb 08:14

pebrc

1.4.0

4aff0b9

1.4.0

Elastic Cloud on Kubernetes 1.4.0

New features

Add Elastic Agent CRD (standalone mode) #4010
Add support for multi-arch container images #3897 (issue: #3504)

Enhancements

Add support for a user-defined transport CA certificate and key #4053 (issue: #2812)
Add support for DaemonSetUpdateStrategy #4049 (issue: #3839)
[Helm] Use ValidatingWebhookConfiguration v1 on supported Kubernetes versions #3963 (issues: #3886, #3958)
Include Beats daemonsets in the diagnostic bundle #3908
Add support for webhook constraints #3876 (issue: #3431)
Remove unnecessary metrics from _nodes ES API request #3860 (issue: #3249)
Allow automatic Elasticsearch nodes discovery #3837 (issues: #3182, #3723)
Enable webhook dry run on supported Kubernetes versions #3834 (issue: #1233)
Create one transport certificates Secret per StatefulSet #3828 (issue: #3734)

Bug fixes

Update client-go to 0.18.14 #4097 (issue: #4087)
Don't duplicate user-provided Enterprise Search encryption keys when reusing them #4052 (issue: #4051)
Add a replacement mechanism to work around nil handling in ucfg #4041 (issue: #3718)
Avoid touching root filesystem in Kibana init script #4023 (issue: #4022)
Don't allow downscales if some shards are unassigned #3883 (issue: #3867)
Include secret token in APM Server config checksum #3858 (issue: #523)
Do not set the default elasticsearch-data volume if claims are provided in the Elasticsearch manifest #3806 (issue: #2574)

Assets 2

10 Feb 10:22

pebrc

1.3.2

cd7cb18

1.3.2

Elastic Cloud on Kubernetes 1.3.2

Enhancements

Adjust init container script for Elastic License 2.0 #4191

Assets 2

Releases: elastic/cloud-on-k8s

Elastic Cloud on Kubernetes 1.9.1

Elastic Cloud on Kubernetes 1.9.1

Enhancements

Bug fixes

Misc