Elastic Cloud on Kubernetes version 2.16.0

edit

Elastic Cloud on Kubernetes version 2.16.0

edit

Breaking changes

edit
  • The initContainer for Kibana was renamed from elastic-internal-init-config to elastic-internal-init which could cause issues when a user has overridden the podtemplate.spec.initContainers with custom values. The recommendation is to exclude the Kibana resource from reconciliation temporarily during upgrade of ECK and adjust the Kibana manifest to match the new initContainer name. After the ECK upgrade is complete remove the managed annotation from the Kibana manifest. #8426

New features

edit

Enhancements

edit
  • Make Helm chart consistent in respect to handling of spec. (eck-fleet-server) #8285
  • Make Helm chart consistent in respect to handling of spec. (eck-beats) #8248
  • Make Helm chart consistent in respect to handling of spec. (eck-agent) #8246
  • Make Helm chart consistent in respect to handling of spec. (eck-kibana) #8192
  • Set default hardened security context for Kibana. #8086 (issue: #7787)
  • Add a setting in the Helm chart to deploy FIPS compliant ECK image. #8272 (issue: #8204)
  • Remove kube-rbac-proxy and adjust default approach to securing the metrics endpoint. #8302 (issue: #8279)

Bug fixes

edit
  • Allow Beats stack monitoring without elasticseachRef. #8273 (issue: #8194)
  • Add recommened roles for Elastic Agent on Kubernetes. #8188 (issue: #8168)
  • Set basePath in Metricbeat when using stack monitoring #8311 (issue: #8310)

Documentation improvements

edit
  • Optimization of the quickstart sections. #8128
  • Optimization of overview and support help. #8130
  • Remove node.remote_cluster_client from examples. #8274
  • Update the guidance for the stack config policy/role mapping issue. #8247
  • Update stack monitoring documentation. #8198
  • Document remote clusters using API keys. #8181 (issue: #8167)
  • Add Kibana to the Enterprise search sample. #8166 (issue: #5090)
  • Add explanation line for es ingress 9300 port. #8164 (issue: #7833)
  • Clarify high availability recommendations in Elasticsearch orchestration docs. #8151
  • Add note on how to access generated Kibana encryption keys. #8150 (issue: #8129)
  • Move Troubleshooting section to top level of table of contents. #8145 (issue: #8131)
  • Add is_managed: true to Agent policies. #8125 (issue: #7290)
  • Adds a secure settings link to K8s docs and note the need to be base64 encoded. #8113

Misc

edit
  • Enterprise Search transition to Elasticsearch #8323 (issue: #8308)
  • fix(deps): update module golang.org/x/crypto to v0.29.0 #8240
  • chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.5-1731604394 #8237
  • chore(deps): update go to v1.23.3 #8190
  • fix(deps): update module github.com/prometheus/common to v0.60.1 #8178
  • fix(deps): update k8s versions #8163
  • chore(deps): update wolfi (versioned) #8162
  • fix(deps): update module github.com/prometheus/client_golang to v1.20.5 #8133
  • fix(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 #8341