Edgelesssys Constellation Versions Save

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.

v2.16.3

2 weeks ago

This release patches the following security vulnerability in Constellation:

Pods exposed to peers in VPC (severity: high)

Whats changed

🐛 Bug fixes

helm: firewall pods by @burgerdev in 550798279a8bb625e3b0b34f2b3eefa1a76b4c32

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.16.2...v2.16.3

v2.16.2

3 weeks ago

This release fixes an issue which could prevent Constellation cluster creation with Azure SEV-SNP.

Whats changed

🐛 Bug fixes

increase TLS maxHandshake size to fix deployments on Azure SEV-SNP by @malt3 in #3009
helm: manually retry uninstalling a failed release during constellation apply by @burgerdev in #2984

🔧 Other changes

terraform: update terraform provider STACKIT to v0.15.1 by @burgerdev in #3007

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.16.1...v2.16.2

v2.16.1

1 month ago

This release improves the user experience on STACKIT. Users on other platforms can safely skip this version.

What's Changed

🎁 New features

terraform-provider-constellation: support STACKIT by @malt3 in https://github.com/edgelesssys/constellation/pull/2974

🐛 Bug fixes

fix default config generated for STACKIT by @malt3 in https://github.com/edgelesssys/constellation/pull/2965

🔧 Other changes

simplify configuration by reading STACKIT related credentials from canonical locations
improve STACKIT related documentation

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.16.0...v2.16.1

v2.16.0

2 months ago

What's Changed

🛠 Breaking changes

terraform: remove cloud loggers by @msanft in https://github.com/edgelesssys/constellation/pull/2892

🎁 New features

terraform: support AWS marketplace images by @msanft in https://github.com/edgelesssys/constellation/pull/2888
Support STACKIT as cloud provider by @malt3 in https://github.com/edgelesssys/constellation/pull/2899
STACKIT Kubernetes API load balancing by @3u13r in https://github.com/edgelesssys/constellation/pull/2925

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.15.1...v2.16.0

v2.15.1

2 months ago

What's Changed

🛠 Breaking changes

Prepare for EOL of classic Azure Application insights by removing cloud loggers, by @msanft in https://github.com/edgelesssys/constellation/pull/2892

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.15.0...v2.15.1

v2.15.0

3 months ago

What's Changed

🛠 Breaking changes

terraform-provider: require kubernetes and microservice version by @elchead in https://github.com/edgelesssys/constellation/pull/2791

[!IMPORTANT] An upgrade from v2.14.0 to v2.15.0 will require you to explicitly specify the microservice version in your Terraform configuration and re-apply the changed configuration while still on provider version v2.14.0 before upgrading to the provider version v2.15.0.

🎁 New features

Add pod disruption budgets so the cluster-autoscaler is able to move kube-admin namespaced resources by @3u13r in https://github.com/edgelesssys/constellation/pull/2781
cli: support for GCP marketplace images by @msanft in https://github.com/edgelesssys/constellation/pull/2792
attestation: enable Constellation for Azure TDX by @daniel-weisse in https://github.com/edgelesssys/constellation/pull/2827

🐛 Bug fixes

terraform-provider: fix parsing api_server_cert_sans by @3u13r in https://github.com/edgelesssys/constellation/pull/2758
helm: masq traffic to the mini-qemu-metadata container so that the join-service can retrieve its metadata by @3u13r in https://github.com/edgelesssys/constellation/pull/2782
cli: fix AWS SEV-SNP latest version resolution in cluster by @elchead in https://github.com/edgelesssys/constellation/pull/2810
terraform-provider: validate microservice and image version during plan by @elchead in https://github.com/edgelesssys/constellation/pull/2814
operator: fix node upgrades when using Azure marketplace images by @msanft in https://github.com/edgelesssys/constellation/pull/2846
cilium: performance fixes and reproducible images by @burgerdev @3u13r in https://github.com/edgelesssys/constellation/pull/2855

🔧 Other changes

Add Azure region Germany West Central by @m1ghtym0 in https://github.com/edgelesssys/constellation/pull/2858

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.14.3...v2.15.0

v2.14.3

4 months ago

What's Changed

🐛 Bug fixes

helm: masq traffic to the mini-qemu-metadata container so that the join-service can retrieve it's metadata by @3u13r in https://github.com/edgelesssys/constellation/pull/2782
node-operator: allow the upgrade process to succeed by correctly setting the communityGallery VM image in Azure by @elchead in https://github.com/edgelesssys/constellation/pull/2788

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.14.2...v2.14.3

v2.14.2

4 months ago

⚠️ Please use v2.14.3.

What's Changed

🐛 Bug fixes

terraform-provider: give execution permission to the provider binaries by @elchead in https://github.com/edgelesssys/constellation/pull/2779

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.14.1...v2.14.2

v2.14.1

4 months ago

⚠️ Please use v2.14.2.

What's Changed

🐛 Bug fixes

terraform-provider: fix the broken provider release in the Terraform registry by @elchead in https://github.com/edgelesssys/constellation/pull/2778
terraform-provider: fix parsing api_server_cert_sans by @3u13r in https://github.com/edgelesssys/constellation/pull/2758

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.14.0...v2.14.1

v2.14.0

4 months ago

What's Changed

🎁 New features

terraform-provider: first release of the Terraform provider for full lifecycle cluster management in Terraform by @daniel-weisse, @elchead and @msanft
Enable Cilium node-to-node strict encryption by @3u13r in https://github.com/edgelesssys/constellation/pull/2462
cli: enable constellation apply to create new clusters by @daniel-weisse in https://github.com/edgelesssys/constellation/pull/2549
docs: add Helm chart for VPN connectivity by @burgerdev in https://github.com/edgelesssys/constellation/pull/2577
aws: reintroduce SNP-based attestation by @derpsteb in https://github.com/edgelesssys/constellation/pull/2601
Make Kubernetes serviceCIDR configurable in config by @3u13r in https://github.com/edgelesssys/constellation/pull/2660
terraform: Azure Marketplace image support by @msanft in https://github.com/edgelesssys/constellation/pull/2651
image: reproducible builds test by @malt3 in https://github.com/edgelesssys/constellation/pull/2707
deps: update cert manager to 1.12.6 by @3u13r in https://github.com/edgelesssys/constellation/pull/2700
deps: pin cert-manager image to sha256 checksum by @elchead in https://github.com/edgelesssys/constellation/pull/2721
deps: pin Kubernetes container image hashes by @burgerdev in https://github.com/edgelesssys/constellation/pull/2719

🐛 Bug fixes

cli: fix panic in status cmd without conf file by @elchead in https://github.com/edgelesssys/constellation/pull/2625
api: respect HTTP(S)_PROXY environment variable by @msanft in https://github.com/edgelesssys/constellation/pull/2635

New Contributors

@burgerdev made their first contribution in https://github.com/edgelesssys/constellation/pull/2576

Full Changelog: https://github.com/edgelesssys/constellation/compare/v2.13.0...v2.14.0