Elastic Cloud on Kubernetes version 2.16.0
editElastic Cloud on Kubernetes version 2.16.0
editBreaking changes
edit-
The initContainer for Kibana was renamed from
elastic-internal-init-config
toelastic-internal-init
which could cause issues when a user has overridden thepodtemplate.spec.initContainers
with custom values. The recommendation is to exclude the Kibana resource from reconciliation temporarily during upgrade of ECK and adjust the Kibana manifest to match the new initContainer name. After the ECK upgrade is complete remove the managed annotation from the Kibana manifest. #8426
New features
editEnhancements
edit- Make Helm chart consistent in respect to handling of spec. (eck-fleet-server) #8285
- Make Helm chart consistent in respect to handling of spec. (eck-beats) #8248
- Make Helm chart consistent in respect to handling of spec. (eck-agent) #8246
- Make Helm chart consistent in respect to handling of spec. (eck-kibana) #8192
- Set default hardened security context for Kibana. #8086 (issue: #7787)
- Add a setting in the Helm chart to deploy FIPS compliant ECK image. #8272 (issue: #8204)
- Remove kube-rbac-proxy and adjust default approach to securing the metrics endpoint. #8302 (issue: #8279)
Bug fixes
editDocumentation improvements
edit- Optimization of the quickstart sections. #8128
- Optimization of overview and support help. #8130
- Remove node.remote_cluster_client from examples. #8274
- Update the guidance for the stack config policy/role mapping issue. #8247
- Update stack monitoring documentation. #8198
- Document remote clusters using API keys. #8181 (issue: #8167)
- Add Kibana to the Enterprise search sample. #8166 (issue: #5090)
- Add explanation line for es ingress 9300 port. #8164 (issue: #7833)
- Clarify high availability recommendations in Elasticsearch orchestration docs. #8151
- Add note on how to access generated Kibana encryption keys. #8150 (issue: #8129)
- Move Troubleshooting section to top level of table of contents. #8145 (issue: #8131)
- Add is_managed: true to Agent policies. #8125 (issue: #7290)
- Adds a secure settings link to K8s docs and note the need to be base64 encoded. #8113
Misc
edit- Enterprise Search transition to Elasticsearch #8323 (issue: #8308)
- fix(deps): update module golang.org/x/crypto to v0.29.0 #8240
- chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.5-1731604394 #8237
- chore(deps): update go to v1.23.3 #8190
- fix(deps): update module github.com/prometheus/common to v0.60.1 #8178
- fix(deps): update k8s versions #8163
- chore(deps): update wolfi (versioned) #8162
- fix(deps): update module github.com/prometheus/client_golang to v1.20.5 #8133
- fix(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 #8341