Release Notes | Deckhouse modules

v1.40.3

New Features

In the selection of K8s versions, values up to 1.34 have been added.

Bug Fixes

Fixed the localization of the word ‘Sunday’ in update settings.
Fixed display of measurement units for PVC size.
Fixed the label on nodes’ graphs showing data transfer rates.
Fixed the automatic appearance of the save dialog in ‘Global Settings’ and ‘Kubernetes’ despite no changes being made.
Fixed the display of type when creating a new image.
Virtualization: Fixed the ability to upload a disk image from the computer.
Virtualization: Removed the option to select Kubernetes storage when creating an image.
Virtualization: Fixed the issue where the storage class was not selected when creating a disk.
Virtualization: CPU and memory settings for virtual machine classes are now displayed correctly.
Virtualization: Removed erroneous resizing of the disk during its creation from an image.
Virtualization: Added measurement units for disk size.
Virtualization: Corrected name and storage class setup when adding a second disk to a virtual machine.

Chore

Updated the axios library version.
Added Common Name to the TLS certificate.

v1.40.2

Bug Fixes

Fixed the error occurring when cloning a virtual machine with an already existing disk snapshot specified in it
Fixed the issue encountered when attempting to edit virtual machine resources: inability to save changes and self-altering values for resources

v1.40.1

Bug Fixes

When creating a new resource based on an existing one, we no longer borrow its ownership labels
Fixed the count of vulnerable containers on the main screen: it now only considers critical vulnerability reports
Removed errors occurring when updating tabs in the virtual machine form
Made release installation buttons inactive in Deckhouse Community Edition
Resolved the 403 error occurring when opening the Virtual Machine Classes section

v1.40.0

New Features

In new and existing clusters, the console module will be enabled by default. It can be turned off in the usual way via ModuleConfig/console
Replaced Deckhouse Kubernetes Platform logo with the Deckhouse ecosystem logo
Added a banner message informing the user that the version of the application they are using is outdated
Added instructions for configuring the d8 utility for Windows
In the dockerconfig setup form, the auth field is now masked as a password
In projects, when clicking on the status, the user can see its details, state, and project resources
Fixed links to module documentation
Updated menu: now the user switches between system, and projects by clicking on the menu to the left of the logo. The API Browser tab has been removed from the menu.
Added the ability to work with Persistent Volume (section storage)
Optimized pod log loading
Introduced additional capabilities for working with pod logs: ability to download log, filters, search, connection status, ability to enable and disable auto-scrolling
Added network interface management in virtual machines
In virtual machines, placement management has been updated. It is possible to manage placement on nodes as well as mutual placement with other VMs
Redesign of cluster setup form for Yandex Cloud, the list and form Access on nodes, the list and form Access rights, the list and form Local volumes in the Storage section

Bug Fixes

Fixed an error when changing the Kubernetes version in cluster settings
Deleted namespaces no longer appear in the menu visitation history
Eliminated menu item flickering in navigation by improving module status handling
Fixed transition to virtual machine snapshots from the VM form

v1.39.5

Bug Fixes

Fixed access to pod logs in the UI by fixing the permission check logic
Improved module state handling to prevent UI elements from jumping
Fixed the display of the button for CLI tools in the lower-left corner, making d8 and kubeconfig available again

v1.39.4

New Features

In the authentication settings (OIDC), the claimMappingOverride parameter is supported
A new unified widget for HTTPS settings has been implemented

Bug Fixes

Fixed the generation of kubeconfig for service account
Fixed the storage class settings form, the parameters field is now optional
Disabled editing of the storage class for virtual disks not connected to a running virtual machine
In the Log Forwarding form, shutdown settings and the number of entries per minute are now correctly saved
Fixed the calculation of necessary user permissions for deleting a pod
Fixed the display of pods on the node card
Translation fixes to English

v1.39.3

New Features

The web interface now displays a warning message to the user in case they are using an outdated or unsupported browser, to prevent potential display errors and incorrect UI operation

Bug Fixes

Critical CVE vulnerabilities have been fixed
Virtualization resources in the interface are now unavailable if the virtualization module is disabled
Fixed a 404 error when attempting to create a disk in a virtual machine
Fixed an error that occurred when attempting to create a new ClusterAuthorizationRule

v1.39.2

New Features

Added data columns in lists of new standard sections
In the details of new standard sections, automatically generated forms have been added, now not only YAML manifests are available
Monitoring: added the ability to import dashboards from JSON

Bug Fixes

Fixed the functionality of Deckhouse update settings
Added and corrected English translation in many parts of the interface
Node: fixed the list of VMs on the node
Virtualization: fixed functionality of configuration in the system
Virtualization: fixed disk list freezing in projects
Virtualization: fixed disk screen opening
Virtualization: fixed core range validation in VM classes
Virtualization: VM disk management headers have been standardized to a common terminology
Virtualization: fixed update of the YAML manifest in VMs when saving VM configuration
Deployment: fixed the naming of the pod update strategy to “Recreate”
Removed automatic namespace insertion into manifests in the +YAML dialog (both cluster-scoped and namespace-scoped)
Fixed spontaneous reloading of the pod list in projects

v1.39.1

New Features

New items have been added to the menu and CRDs used within Deckhouse have been removed. In particular, you can create and delete a namespace in the System/Projects section.
The module now specifies a requirement for Deckhouse version >= 1.69.

Bug Fixes

It was previously impossible to attach a disk image to a virtual machine if it was already attached to another VM. Now it is possible.
The terminal on the cluster node has become operational. It currently uses the deckhouse-controller image.
The terminal on the node does not reset until the user leaves the node screen.
The frequently appearing message “Something went wrong” has been fixed.
The functionality of the start/stop job buttons has been fixed.
The display of content for cluster alerts has been fixed.
The performance of the pod list in the project has been optimized.

v1.39.0

New Features

Localization: Users can now select a language (EN/RU)
Added the ability to work with the terminal on a node (similar to the already existing pod terminal in the UI)
New menu structure: removed the previously added “API browser” section. In the “System” section, all available resources with Cluster-scope are shown. In the “Projects” section, all resources with Namespaced-scope are displayed. Resources not fitting into any category are placed in the “Other CRD” section at the bottom of the menu.
Added menu search feature to help easily find the resource type you need
Support for CRI containerd v2 in node groups and cluster parameters for DKP>=1.71
Enhanced “Generation of kubeconfig” description with instructions for merging config to minimize manual work in the “Local host” scenario
Made fields mandatory in the certificate upload form
Consistent VM snapshots (with filesystem freeze)
Module settings (modulesettings) are now automatically generated as a web form directly from the OpenAPI schema, thereby minimizing the user path for module configuration. The user can switch between two views: Configuration (UI) – interactive fields, checkboxes, selectors. And YAML – text editor with syntax highlighting.
Modules: added a “Version” column to the ModuleSource table
Added the ability to navigate to a module by name from the status on the ModuleSource view screen
Made the display of available versions more explicit in the “Updates” of modules
Added the ability to view information from ModuleRelease.spec.changelog through the interface
Monitoring: redesigned notifications

Bug Fixes

Fixed an error when creating a project based on an existing one
Fixed font rendering in the container terminal
Optimized the loading and display of container logs
Edit mode is not shown in monitoring. The new dashboard becomes editable upon first opening.

v1.38.5

Bug Fixes

Restored log display for pods in the Completed status.
Fixed and now display the correct status of modules for all possible Conditions variants.
In the configuration and creation form of ClusterAuthorizationRule, we now disable the spec.allowAccessToSystemNamespaces field if the user-authz module either has the value enableMultiTenancy: false or lacks this field.
Fixed an error that occurred when navigating from the “Overview” page to the “Nodes of All Groups” page by clicking the “Pending Update” button.
Fixed a non-functional settings button in the user menu.
In the static cluster configuration form, fixed the missing apiVersion error when attempting to save changes.
In the ClusterAuthorizationRule configuration form, accounted for all possible states when working with the namespaceSelector.

v1.38.4

Bug Fixes

In nodes, the virtual machines tab stopped being displayed if virtualization is turned off.
The StatefulSet and DaemonSet dashboards were swapped, and they have been returned to their correct places.

v1.38.3

Bug Fixes

Fixed the dashboard in the Monitoring tab: it contained data from other resources besides the current one

v1.38.2

Bug Fixes

Fixed the operation of monitoring with the observability module disabled

v1.38.1

Bug Fixes

In Deckhouse updates, fixed the display of configuration in YAML
In CronJob, hid the Monitoring tab to improve the dashboard for this section
In observability, fixed minor issues

v1.38.0

New Features

System

Support for SCSIStorageClass storage (module csi-scsi-generic)
In ephemeral node groups, you can now change the machine class
In module details, the “resources” tab has been returned, showing resources created by the module in the Kubernetes API

Projects

The terminal in the pod launches the first available shell: zsh, bash, dash, sh
Added CronJob section in the project

Virtualization

Added a section with virtualization configuration in the “System” section
VM class settings are available in the form of a form, where you can immediately see how this class affects VM parameters
Improved the form for creating disk images both in the project and in the system
Added a “migration” action to VM, currently only eviction without a designated target node is supported, the functionality of node selection will be improved later

Observability

Upgraded Grafana to version 10.4.19+security-01
Removed the requirement for a prefix in the dashboard UID

Bug Fixes

System

Fixed taints settings in nodes
In node groups, fixed inconsistent button behavior depending on the selected tab
Fixed the link to the project creation documentation in the project template
Fixed errors when editing the “Proxy settings” block
In node access (NodeUser), the passwordHash field is now optional
Added validation for email in local users; it is now not allowed to be used by two users

Projects

Switching between sections inside the pod no longer resets the terminal connection

Observability

Added a button for dashboard creation on the data overview page
In monitoring: fixed the error in forming the dashboard name

Chore

Numerous visual fixes and improvements in working with the API

v1.37.4

Bug Fixes

In the Deckhouse Kubernetes Platform (DKP) created in Commander, Kubernetes settings are now read-only. A notification about this is now displayed on the screens of these settings.
Fixed errors in token (and kubeconfig) generation for ServiceAccount
Fixed backend startup issue when HPA and VPA resources are not present.
Fixed creation in the +YAML dialog for non-namespaced resources (cluster-scoped).
Minor errors in the “active alerts” section have been fixed, which caused pop-up banners to appear.

v1.37.3

Bug Fixes

Main page

Fixed a bug in the chart: in rare cases, the chart showed that more resources were being consumed than were available.
Cosmetic fix: removed the indentation of the main content on the page.

Nodes

Aligned the machine selector operation in static node groups with the API: the selector cannot be changed after it has been set.

Observability

The data source for the dashboard will always be up-to-date. Fixed an error with setting the dashboard’s default data source.
Users only see the menu items they have access to. Redesigned navigation based on the role model.
Navigation has become more intuitive. Visually separated menu items on the data monitoring page.
Added alphabetical sorting of categories and dashboards.

v1.37.2

Bug Fixes

Minor bugs in the +YAML dialogue have been fixed
Fixed loading of all dashboard categories in the select list on the create/edit form
Local volumes (LVM): fixed 404 error when navigating from the ReplicatedStoragePool or VolumeGroup form to the list
Fixed manual module update

v1.37.1

New Features

Browser API: input is preserved when closing and reopening the editor for each type of resource.
Browser API: the resource creation editor offers a pre-filled YAML skeleton with a description for custom resources. For built-in Kubernetes resources, it only offers the basic fields (apiGroup, kind, metadata).

Bug Fixes

Fixed an error that occurred when attempting to save certain types of resources.
Modules: fixed a false warning that claimed ModuleConfig did not exist.
Virtualization: fixed issues with disk operations. Previously, disks could not be deleted or ejected from VMs, and disk names were generated incorrectly.
Storage: fixed an error in the creation form for storage pools (ReplicatedStoragePool); now the selection of volume groups (VG) is presented correctly.
Fixed the namespace name validation dialog when creating new namespaces (from the project switcher).
Jobs: added a confirmation dialog when deleting.
Pod: removed buttons for moving containers to avoid confusion when managing containers.
Pod Security: fixed incorrect operation of the seccomp switch.
ConfigMaps: fixed name validation (now an object named with a single letter can be created and edited).

v1.37.0

New Features

Deckhouse

Platform updates now show confirmation dialog

Modules

Added support for the NoResourceReconciliation flag, useful for debugging and module development.

Virtualization

Added the ability to clone a VM using its snapshot. Currently, it requires manual matching of old and newly created resources, but cloning will be more convenient in the future.
~~During the creation of a VM, resources created alongside it are assigned the metadata.ownerReference field. This will allow resources to be cleaned up when the machine is deleted.~~

Observability

Added protection against loss of unsaved changes when editing a dashboard. If a user attempts to navigate away without saving changes, a corresponding warning will appear.
Added a new section with information about Prometheus status. It displays data similar to the Status section in the Prometheus interface, including information on targets, configuration, and current system state.
Replaced links to Grafana and Prometheus on the main page with corresponding sections within the Observability module

Network

Added a settings form for egress gateway policies

API Browser

Resources can now be created using YAML manifests

Module

In limited functionality mode, creating namespaces and projects is allowed (relevant for Community Edition, Basic Edition)
Removed obviously unnecessary rights from the RBAC backend

Bug Fixes

Fixed the hook for copying the custom TLS certificate
Increased the allowable header size to prevent 429 errors due to tokens with a large number of groups
Fixed module status calculation. This resolves the “Enabling” status when Deckhouse recalculates the module states, yet the module has long been enabled.
Fixed handling of module configuration when ModuleConfig does not yet exist

v1.36.2

Bug Fixes

Fixed disk handling in virtualization
Fixed display of release requirements in modules

v1.36.1

Bug Fixes

Fixed the securityContext in the web application pod (frontend)
Storage: Corrected display error in volume groups
Monitoring: Fixed code block formatting error in active alerts
Improved the logic for displaying the limitation banner in the interface (for Community Edition and Basic Edition)
Network: Fixed the logic for displaying the Egress gateways section
Network: In Ingress controller configuration, we added the ‘Load Balancer Class’ field (spec.LoadBalancerClass)

v1.36.0

New Features

Deckhouse

Support for integration settings with VMWare vSphere

Storage

Support for YADRO TATLIN.UNIFIED CSI
Support for HuaweiCloud CSI
Support for NFS CSI

Network

An interface has appeared in egress gateways, yaml editing is also available
Egress gateway policies are introduced in minimal read-only variant

Observability

Notification channels and policies
Added button to create a dashboard in monitoring mode
Removed title, description, and tags in the dashboard edit form

Modules

Display of module statuses and their settings in tooltips
Added settings interface for the deckhouse module
Resolved module source conflict issue at first start when the source is not selected
Added support for Deckhouse Commander labels for module resources
Support for the rollback flag for ModulePullOverride

Virtualization

Cross-links in tables
VM snapshots. View list and create on the VM page
Create a VM snapshot from the general list of snapshots
Improved CVI disk image upload scenario

General

Restrictions on managing global objects (cluster scoped) and objects in system namespaces introduced for the Community Edition and Basic Edition. A banner about the restrictions added in the UI for these editions.
The manifest dialog (Button +YAML) is available only if there are rights to create or edit resources. This behavior applies to the system and each namespace separately.
Charts on the main page are hidden when monitoring is off
Experimental support for dark theme. The switch is located in the user dialog.
API Browser section, where you can work with raw data from the API accessible to the user. Currently, only deletion and editing are supported.

v1.35.3

New Features

A new option has been added to the module configuration to set an external port for the web socket (parameter externalWebsocketPort). This can be useful when using specific proxies.

Bug Fixes

Fixed an error when creating a secret with the type “Registry Access (dockerconfigjson)”
Fixed the display of a custom logo
Fixed incorrect display of the update channel and update mode in the module list
Fixed a problem with detaching the container terminal for large output volumes

v1.35.2

New Features

Improved support for the partial readonly mode. This mode programmatically prohibits the creation, deletion, and editing of cluster-scoped objects and objects in system namespaces (d8-*, kube-system). This mode is set at the build stage and is intended for the publication of the module in Community Edition and Basic Edition (CE and BE).

Bug Fixes

General

Numerous fixes have been added for read-only access.
Fixed terminal functionality in pods, with vim and mc now operational.
Fixed layout extension on the YAML tab and other pages.

System

Fixed resourceNames validation in cluster roles.
Fixed role creation based on an aggregated role in cluster roles.
Fixed calculation of active roles in aggregation in cluster roles; the list of active roles is calculated recursively.
Block Devices with references to non-existent nodes are hidden.
Removed the ellipsis on the Kubernetes tab for Yandex next to the availability zones.

Projects

Observability

Made the trigger threshold mandatory for completion.
Derived metrics are better adapted to read-only rights.

General

Only pods selected by the label selector are now shown in the service, whereas previously all pods in the namespace were shown.
Fixed name validation in the namespace creation dialog (located in the project switcher).

Module

Fixed pathType in ingress rules for Grafana.

v1.35.1

New Features

Separate links to Commander and Stronghold have appeared on the main page if the corresponding module is enabled in the cluster

Bug Fixes

Deckhouse/modules

Fixed module status calculation
Added Commander source support in module overrides (ModulePullOverride)

Virtualization

Fixed tooltip for cores and memory in the VM table
VM snapshot breadcrumbs lead to snapshots, not disks

Projects

Kubeconfig secrets are now displayed again in the ServiceAccount cards list

Observability

Removed title, description, and tags from the dashboard editing form

Module

Fixed PodDisruptionBudget parameters for frontend and grafana pods

Other

Fixed connection hanging with clusters for Commander

v1.35.0

New Features

General

Partial readonly mode support for Community Edition and Basic Edition.

Storage

HPE Storage support (CSI)
Ceph Storage support (CSI)
Basic Kubernetes storage classes (StorageClass)

Virtualization

VMs are displayed on cluster nodes in a separate tab
A Monitoring tab has been added to VMs
Machine classes — section is now in the system and in the project next to the machines themselves
Added object source to VMs (werf, helm, etc.)
Added a “migrate to another node” button (Evict) to VMs
Disks can now be restored from snapshots (on the disk creation screen)
Machine snapshots (only list and view YAML)
Improved VM display in the general list

Deckhouse

“Update” button on the main screen leads to the updates section
Added placement configuration in OpenStack (currently read-only)

Observability

Renamed “Overview” menu item to “Status”
Trigger (alerts) and derived metrics sections added to projects
Hide GrafanaDashboardDefinitions if the module is enabled
The state of open and closed folders is stored in the browser
Changes to the default data source

Modules

Module releases are listed in the module window

Network

Basic view of EgressGateway (list and YAML) from the cni-cilium module
Network policies. Labels are now shown on pods/VMs to make it easier to fill in the label selector. The column with ports has been removed

Bug Fixes

General

Fix token update (setInterval by WebWorker)
Completed parts of the UI elements that were accessible to the user without appropriate permissions

Deckhouse

YandexCloud settings. If the provider configuration doesn’t specify zones, all availability zones should be selected by default
If the “operator-trivy” module is not enabled, a suggestion to enable the CVE scanner has replaced the counter on the main

Virtualization

Improved disk

v1.34.4

Bug Fixes

Web Application

General

Hidden user kubeconfig retrieval in Commander, will return after end-to-end rights management in Commander
Added support for project templates (heritage=multitenancy-manager) to resource sources (checkbox)

Cluster

Modules: Fixed documentation links for modules. Some are hidden, some lead to external sites. In the future, links will be more straightforward, but for now, they should work correctly.

Projects

Fixed issue icons in the controller tabs “Pod:Scheduling” and “Pod:Volumes”

Observability Dashboards

Fixed dashboard deletion

v1.34.3

Bug Fixes

Web Application

Fixed cluster switching for Commander, now the data will be from the selected cluster

Module

Fixed secret generation for basic-auth if HTTP mode is enabled
Removed ingress resource with redirect from the very old name deckhouse-admin

v1.34.2

Bug Fixes

Cluster

Deckhouse

No longer shows an empty placeholder in the update settings when MC/deckhouse is not automatically created

Observability

Added “Data Overview” to the menu
“Dashboards for Grafana” section is hidden if the Observability module is enabled
When deleting a dashboard in monitoring mode, the message “Select a dashboard” is shown
Default mode Mixed and default_metrics as the data source for the first panel are enabled in Data Overview
When creating a new visualization, the default data source is set to the variable ${ds_prometheus} if it exists
Dashboard category state (opened/closed) is saved in localStorage for each project
GET parameters for grafana and host are synchronized in Data Overview
Unnecessary modal windows and buttons have been removed
Vulnerabilities have been fixed

Storage

Sections renamed to avoid confusion with the word “volumes” in the storage class sections

General

Web application loading now occurs on a light background, more consistent with the overall style
Vulnerabilities have been fixed

v1.34.1

Bug Fixes

Cluster

Deckhouse

Metrics were sometimes not shown on the main page, and the commander did not display an Overview at all
Deckhouse update settings are not editable if the cluster is from Commander (or if there are signs of automation in MC/deckhouse at all)
Static cluster settings are now working (Kubernetes menu item)
In modules, the outgoing settings screen no longer knocks down the filter and sorting of lists

Virtualization

Moved VM classes from projects to the cluster
Images and cluster images are now created with clearer formulations.

Observability

In grafana, when selecting a datasource, grafanaadditionaldatasources are displayed
grafana-kube-storage has a default timeInterval (also known as the default $__rate_interval) of 30 seconds, with the ability to reconfigure the environment variable STORAGE_DEFAULT_METRICS_DATASOURCE_TIME_INTERVAL
When selecting the menu in /explore: Add to dashboard / Existing dashboard / Select dashboard, dashboards display folder names instead of the default General
Fixed the Not Found error that occurs periodically on open dashboards
For filing with grafana + grafana-kube-storage, rights to read and track grafanaadditionaldatasources have been added to rbac
The STORAGE_DEFAULT_METRICS_DATASOURCE_TIME_INTERVAL setting is set to {{ .Values.global.discovery.prometheusScrapeInterval }}

General

Some items have been reduced and moved in the left navigation bar
Fixed new sections in Commander: pages “500” and “something went wrong” won’t show up

v1.34.0

New Features

Web Application

Cluster

The Dekhouse editorial office was added to the launch review.
Deckhouse: Added support for the configuration of the VMware Cloud Director (VCD) provider
Deckhouse: Added support for the configuration of the Yandex Cloud provider
Deckhouse: Updated the deckhouse update section
Deckhouse: Updated the global settings view, added the “Default StorageClass” field (defaultClusterStorageClass)
Deckhouse: Upgraded the modules section! Added update policies (MUP), Module sources (MS) and Overrides (MPO)
Repositories — new section, will be updated further
Storages: StorageClass classes — so far only a table and a view in YAML
Storages: LVM-based storage management based on sds-local-volume, sds-replicated-volume, sds-node-configurator modules
Unified the buttons
User sessions: Instead of abstract clients, we show links to related ingresses, where possible

Projects

In ServiceAccount, you can create kubeconfig with one click

Virtualization

Virtual machine classes (VirtualMachineClass) — so far only a table and view in YAML
Added the ability to place nodes in the form of a VM
Made it easier to create images based on other images and disks
Cluster images — a new section in administration
A new version of badges (visual) is in the status of virtual machines - Disks and images have acquired a new modern look

Observability

When the namespace is changed, the user remains in the same dashboard
Fixed scroll appearance inside Grafana
Added the “Data Overview” button in monitoring mode
Case-insensitive search operation
Removed PrometheusRule from projects

Server

The API response to /cani began to include the resource that was requested. It has become more convenient to reset your license

Bug Fixes

Web Application

Cluster

Updated links in authentication providers for OIDC and LDAP (now they are not broken, they lead to the Dex website)
In user sessions, filtering no longer resets the selection of checkboxes

Virtualization

Fixed bugs with access verification
During the creation of the machine, it is clearly highlighted that a static disk is not set, so that it is obvious before saving