diff --git a/content/en/blog/2024-02-20-cozystack-v0-1.md b/content/en/blog/2024-02-20-cozystack-v0-1.md new file mode 100644 index 00000000..21cf51e6 --- /dev/null +++ b/content/en/blog/2024-02-20-cozystack-v0-1.md @@ -0,0 +1,40 @@ +--- +title: "Cozystack v0.1: ZFS Support, Leader Election, and Documentation Move" +slug: cozystack-v0-1 +date: 2024-02-20 +author: "Timur Tukaev" +description: "The first feature release of Cozystack introduces ZFS storage support, leader election for the controller, and moves documentation to cozystack.io." +--- + +### Cozystack v0.1: ZFS Support, Leader Election, and Documentation Move + +The first feature release of Cozystack lays the groundwork for a production-grade platform. + +### Major Features and Improvements + +#### ZFS Support + +Cozystack now supports **ZFS** as a storage backend, giving operators a choice of battle-tested storage for their infrastructure. + +#### Leader Election + +Leader election is enabled for the Cozystack controller, ensuring that only one instance is active at a time — a prerequisite for high-availability deployments. + +#### Documentation + +Project documentation has been moved to [cozystack.io](https://cozystack.io), along with new Adopters, Code of Conduct, Contributing, and Maintainers guides. + +#### Other Improvements + +- Declarative Redis flush for the dashboard. +- Support for remote Docker builds with `--tar-to-stdout`. +- Installer image renamed from `talos-installer` to `cozystack` to avoid confusion. + +All changes: [v0.1.0](https://github.com/cozystack/cozystack/releases/tag/v0.1.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-04-05-cozystack-v0-2.md b/content/en/blog/2024-04-05-cozystack-v0-2.md new file mode 100644 index 00000000..e0854de5 --- /dev/null +++ b/content/en/blog/2024-04-05-cozystack-v0-2.md @@ -0,0 +1,48 @@ +--- +title: "Cozystack v0.2: Bundles, Schema Versioning, FluxCD as Core Package, and Component Updates" +slug: cozystack-v0-2 +date: 2024-04-05 +author: "Timur Tukaev" +description: "Cozystack v0.2 introduces bundle-based installation, schema versioning for charts, moves FluxCD to the core, and updates Cilium, LINSTOR, CNPG, and MariaDB Operator." +--- + +### Cozystack v0.2: Bundles, Schema Versioning, FluxCD as Core Package, and Component Updates + +Version 0.2 positions Cozystack as a **framework for building clouds** and introduces several foundational changes to the platform architecture. + +### Major Features and Improvements + +#### Bundle-Based Installation + +A new `bundle-name` configuration option (e.g. `paas-full`) allows operators to choose which set of platform components to deploy. This makes Cozystack modular and customizable from the very first installation. + +#### Schema Versioning + +All `cozy-*` charts now carry explicit version metadata, enabling safe and predictable upgrades across releases. + +#### FluxCD Moves to Core + +Flux is now installed as a core package, removing the dependency on Helm-based bootstrap and simplifying the installation flow. + +#### Component Updates + +- Piraeus Operator and LINSTOR v2.4.1 +- CNPG v1.22.2 +- Cilium v1.14.5 +- MariaDB Operator v0.27.0 +- Kubeapps updated + +#### Breaking Changes + +This release introduces schema versioning. To upgrade from v0.1.0: +- Create the version configmap: `kubectl create configmap -n cozy-system cozystack-version --from-literal=version=1` +- Add `bundle-name: paas-full` to the Cozystack config. + +All changes: [v0.2.0](https://github.com/cozystack/cozystack/releases/tag/v0.2.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-04-18-cozystack-v0-3.md b/content/en/blog/2024-04-18-cozystack-v0-3.md new file mode 100644 index 00000000..f4317820 --- /dev/null +++ b/content/en/blog/2024-04-18-cozystack-v0-3.md @@ -0,0 +1,40 @@ +--- +title: "Cozystack v0.3: Kafka, ClickHouse, and Hetzner Bare-Metal Support" +slug: cozystack-v0-3 +date: 2024-04-18 +author: "Timur Tukaev" +description: "Cozystack v0.3 adds Kafka and ClickHouse as managed applications and introduces NoCloud assets for Hetzner bare-metal installation." +--- + +### Cozystack v0.3: Kafka, ClickHouse, and Hetzner Bare-Metal Support + +Version 0.3 significantly expands the managed application catalog with two major data infrastructure components. + +### Major Features and Improvements + +#### Kafka + +The **Strimzi Kafka Operator** is now included, bringing managed Apache Kafka to the platform. Users can deploy Kafka clusters and manage topics directly from the Cozystack dashboard. + +#### ClickHouse + +The **ClickHouse Operator** enables deploying managed ClickHouse instances for analytics workloads, with automatic namespace-scoped watching. + +#### Hetzner Bare-Metal Support + +A new **NoCloud asset** simplifies Cozystack installation on Hetzner dedicated servers, expanding the range of supported infrastructure providers. + +#### Other Improvements + +- Refactored Makefiles for cleaner build process. +- Fixed Grafana ingress class configuration. +- Fixed kamaji-etcd image tag handling. + +All changes: [v0.3.0](https://github.com/cozystack/cozystack/releases/tag/v0.3.0), [v0.3.1](https://github.com/cozystack/cozystack/releases/tag/v0.3.1) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-05-06-cozystack-v0-4.md b/content/en/blog/2024-05-06-cozystack-v0-4.md new file mode 100644 index 00000000..560cf8ab --- /dev/null +++ b/content/en/blog/2024-05-06-cozystack-v0-4.md @@ -0,0 +1,43 @@ +--- +title: "Cozystack v0.4: etcd Operator, Replica Options, Kamaji v0.5, and Dark Mode Fix" +slug: cozystack-v0-4 +date: 2024-05-06 +author: "Timur Tukaev" +description: "Cozystack v0.4 replaces kamaji-etcd with the new aenix-io/etcd-operator, adds replica configuration for applications, and updates Kamaji, LINSTOR, and Kubeapps." +--- + +### Cozystack v0.4: etcd Operator, Replica Options, Kamaji v0.5, and Dark Mode Fix + +Version 0.4 introduces a dedicated etcd operator and brings important flexibility for application deployment. + +### Major Features and Improvements + +#### New etcd Operator + +The `kamaji-etcd` component is replaced with the new **aenix-io/etcd-operator**, providing better lifecycle management for etcd clusters that back tenant Kubernetes control planes. + +#### Replica Configuration + +Users can now configure the **number of replicas** for managed applications, giving more control over availability and resource usage. + +#### Component Updates + +- **LINSTOR** updated to v1.27.1. +- **Kubeapps** updated to v15.0.2. +- **Kamaji** updated to v0.5.0. + +#### Fixes + +- Automatic tag and version calculation for builds. +- Fixed Flux not tolerating kubectl edits. +- Fixed dashboard colors for dark mode. +- Fixed Kubernetes chart tolerations, datastore creation ordering, and topology spread constraints. + +All changes: [v0.4.0](https://github.com/cozystack/cozystack/releases/tag/v0.4.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-05-10-cozystack-v0-5.md b/content/en/blog/2024-05-10-cozystack-v0-5.md new file mode 100644 index 00000000..bafb1429 --- /dev/null +++ b/content/en/blog/2024-05-10-cozystack-v0-5.md @@ -0,0 +1,36 @@ +--- +title: "Cozystack v0.5: Automatic Schema Generation, Cilium v1.14.10, and MariaDB Operator Update" +slug: cozystack-v0-5 +date: 2024-05-10 +author: "Timur Tukaev" +description: "Cozystack v0.5 adds automatic Helm schema generation, removes hardcoded defaults, and updates Cilium and MariaDB Operator." +--- + +### Cozystack v0.5: Automatic Schema Generation, Cilium v1.14.10, and MariaDB Operator Update + +Version 0.5 improves the developer experience with automatic schema generation and brings component updates. + +### Major Features and Improvements + +#### Automatic Schema Generation + +Helm chart schemas are now **generated automatically** with removal of hardcoded default values. This makes dashboard forms more accurate and simplifies chart maintenance. + +#### Component Updates + +- **Cilium** updated to v1.14.10 with security and stability improvements. +- **MariaDB Operator** updated to v0.28.1. + +#### Fixes + +- Fixed assets building process. +- Installer rollout strategy tuned to allow downtime during upgrades. + +All changes: [v0.5.0](https://github.com/cozystack/cozystack/releases/tag/v0.5.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-05-16-cozystack-v0-6.md b/content/en/blog/2024-05-16-cozystack-v0-6.md new file mode 100644 index 00000000..9e8230ba --- /dev/null +++ b/content/en/blog/2024-05-16-cozystack-v0-6.md @@ -0,0 +1,34 @@ +--- +title: "Cozystack v0.6: VM Serial Console, Ephemeral Storage for Containers, and etcd Auto-Quota" +slug: cozystack-v0-6 +date: 2024-05-16 +author: "Timur Tukaev" +description: "Cozystack v0.6 adds serial console access for virtual machines, ephemeral storage volumes for containerd and kubelet, and automatic etcd quota configuration." +--- + +### Cozystack v0.6: VM Serial Console, Ephemeral Storage for Containers, and etcd Auto-Quota + +Version 0.6 focuses on improving the virtual machine experience and storage management in tenant Kubernetes clusters. + +### Major Features and Improvements + +#### VM Serial Console + +Virtual machines now support **serial console access** via `virtctl` from the KubeVirt toolkit. The root user no longer requires a password, making VM debugging straightforward. + +#### Ephemeral Storage for Containers + +VMs now launch with **two ephemeral disks** mounted at `/var/lib/containerd` and `/var/lib/kubelet`. This prevents container storage from filling up the root disk — a common issue in long-running clusters. + +#### etcd Auto-Quota + +The `quota-backend-bytes` for etcd is now **automatically set to 95%** of the space requested by the user, preventing etcd from running out of storage unexpectedly. + +All changes: [v0.6.0](https://github.com/cozystack/cozystack/releases/tag/v0.6.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-05-29-cozystack-v0-7.md b/content/en/blog/2024-05-29-cozystack-v0-7.md new file mode 100644 index 00000000..c0752277 --- /dev/null +++ b/content/en/blog/2024-05-29-cozystack-v0-7.md @@ -0,0 +1,40 @@ +--- +title: "Cozystack v0.7: Network Stabilization, DNS Fixes, etcd Autocompaction, and cozy.local Domain" +slug: cozystack-v0-7 +date: 2024-05-29 +author: "Timur Tukaev" +description: "Cozystack v0.7 stabilizes tenant cluster networking with Kube-OVN and Cilium updates, fixes DNS propagation, enables etcd defragmentation, and introduces the cozy.local domain." +--- + +### Cozystack v0.7: Network Stabilization, DNS Fixes, etcd Autocompaction, and cozy.local Domain + +Version 0.7 is a stability release that resolves critical networking issues in tenant Kubernetes clusters. + +### Major Features and Improvements + +#### Network Stabilization + +- Updated **Kube-OVN** to v1.13.0 and **Cilium** to v1.15.5. +- Resolved pod communication issues in tenant Kubernetes clusters by enabling BPF masquerade and tunnel-based routing. +- Fixed **`externalTrafficPolicy: Cluster`** not working correctly. + +#### DNS Fixes + +Tenant clusters now receive the **correct DNS servers**. The `cluster.local` domain is no longer hardcoded in Kamaji, and a new `cozy.local` domain for the parent cluster enables services to be reached from tenant clusters via a single FQDN. + +#### etcd Autocompaction and Defragmentation + +Autocompaction and **periodic defragmentation** are now enabled for etcd, keeping storage usage under control and preventing performance degradation over time. + +#### PostgreSQL Fix + +Fixed incorrect handling of users and roles in the PostgreSQL application configuration. + +All changes: [v0.7.0](https://github.com/cozystack/cozystack/releases/tag/v0.7.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-07-04-cozystack-v0-8.md b/content/en/blog/2024-07-04-cozystack-v0-8.md new file mode 100644 index 00000000..6f4969a8 --- /dev/null +++ b/content/en/blog/2024-07-04-cozystack-v0-8.md @@ -0,0 +1,46 @@ +--- +title: "Cozystack v0.8: FluxCD Operator, E2E Tests, ARM Support, and Managed Cluster Extensions" +slug: cozystack-v0-8 +date: 2024-07-04 +author: "Timur Tukaev" +description: "A major release bringing the official FluxCD Operator, end-to-end testing, ARM architecture support, managed tenant extensions, and PostgreSQL quorum replication." +--- + +### Cozystack v0.8: FluxCD Operator, E2E Tests, ARM Support, and Managed Cluster Extensions + +Cozystack v0.8 is a significant release that overhauls the Flux installation, adds comprehensive testing, and expands platform reach to ARM hardware. + +### Major Features and Improvements + +#### FluxCD Operator + +The installation logic for FluxCD has been completely revamped. The community Helm chart is replaced with the **official FluxCD Operator** (Flux 2.3), providing better lifecycle management and a cleaner upgrade path. + +#### E2E Testing + +End-to-end tests have been added for robust validation of the platform. This marks the beginning of automated quality assurance for Cozystack releases. + +#### ARM Architecture Support + +Basic support for **ARM architecture** has been introduced in the `distro-hosted` bundle, broadening the range of hardware Cozystack can run on. + +#### Managed Extensions for Tenant Clusters + +Users can now install **ingress-nginx**, **cert-manager**, and **FluxCD** in their tenant Kubernetes clusters with a single click in the dashboard. Traffic can also be routed to custom Kubernetes clusters via the primary ingress controller. + +#### PostgreSQL Quorum Replication + +Synchronous replication based on quorum is now available for the PostgreSQL application, improving data safety for production databases. + +#### ETCD Operator v0.3.0 + +The etcd operator receives a major update with ARM support, an architectural overhaul with detailed flow charts, autocompaction enabled by default, and automatic `quota-backend-bytes` calculation at 95% of PVC size. + +All changes: [v0.8.0](https://github.com/cozystack/cozystack/releases/tag/v0.8.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-07-10-cozystack-v0-9.md b/content/en/blog/2024-07-10-cozystack-v0-9.md new file mode 100644 index 00000000..74bbb838 --- /dev/null +++ b/content/en/blog/2024-07-10-cozystack-v0-9.md @@ -0,0 +1,42 @@ +--- +title: "Cozystack v0.9: KubeVirt v1.2.2, Kamaji v1.0, Tenant K8s v1.30, and Node Group Upgrades" +slug: cozystack-v0-9 +date: 2024-07-10 +author: "Timur Tukaev" +description: "Cozystack v0.9 updates KubeVirt, Kamaji, Piraeus, and Cluster API, upgrades tenant Kubernetes to v1.30.1, and adds support for upgrading existing node groups." +--- + +### Cozystack v0.9: KubeVirt v1.2.2, Kamaji v1.0, Tenant K8s v1.30, and Node Group Upgrades + +Version 0.9 brings major component updates and improves the tenant Kubernetes lifecycle. + +### Major Features and Improvements + +#### Component Updates + +- **KubeVirt** updated to v1.2.2 with stability improvements. +- **Kamaji** reaches v1.0.0 — a significant milestone for the tenant control plane manager. +- **Piraeus** updated to v2.5.1. +- **Cluster API** updated with hardcoded version pinning for reproducibility. + +#### Tenant Kubernetes v1.30.1 + +Tenant Kubernetes clusters are upgraded to **v1.30.1**, the latest stable release at the time. + +#### Node Group Upgrades + +Operators can now **upgrade existing node groups** in tenant clusters, enabling rolling updates without recreation. + +#### Fixes (v0.9.1) + +- Fixed KubeVirt CAPI provider version mismatch. +- Fixed scraping of ingress-nginx metrics. + +All changes: [v0.9.0](https://github.com/cozystack/cozystack/releases/tag/v0.9.0), [v0.9.1](https://github.com/cozystack/cozystack/releases/tag/v0.9.1) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-07-23-cozystack-v0-10.md b/content/en/blog/2024-07-23-cozystack-v0-10.md new file mode 100644 index 00000000..23c69f49 --- /dev/null +++ b/content/en/blog/2024-07-23-cozystack-v0-10.md @@ -0,0 +1,47 @@ +--- +title: "Cozystack v0.10: FerretDB, NATS, Network Policies for Tenant Isolation, and etcd Operator v0.4" +slug: cozystack-v0-10 +date: 2024-07-23 +author: "Timur Tukaev" +description: "Cozystack v0.10 adds FerretDB and NATS as managed applications, introduces network policies for tenant isolation, and updates the etcd operator to v0.4." +--- + +### Cozystack v0.10: FerretDB, NATS, Network Policies for Tenant Isolation, and etcd Operator v0.4 + +Version 0.10 expands the managed application catalog and adds critical multi-tenant security. + +### Major Features and Improvements + +#### FerretDB + +**FerretDB** — a MongoDB-compatible database backed by PostgreSQL — joins the application catalog. It includes automatic schema permissions and password generation. + +#### NATS + +**NATS**, a lightweight messaging system for cloud-native applications, is now available as a managed service. + +#### Network Policies for Tenant Isolation + +Network policies are now enforced to **isolate tenants** from each other at the network level. This is a critical security improvement for multi-tenant deployments. + +#### Dashboard and Ingress Improvements + +- Ingress-nginx dashboard can be optionally enabled. +- Cloudflare proxy support and IP whitelisting added for ingress. +- All application logos are now shipped with Cozystack. +- Updated **etcd-operator** to v0.4. +- PostgreSQL automatic schema permissions. +- Fixed Kafka topics creation. + +#### Breaking Change + +System HelmReleases are renamed with a `-system` suffix. Users upgrading from v0.9 need to reinstall ingress controllers by removing the old ingress application, toggling the `ingress` trigger off in tenant configuration, and re-enabling it. + +All changes: [v0.10.0](https://github.com/cozystack/cozystack/releases/tag/v0.10.0), [v0.10.1](https://github.com/cozystack/cozystack/releases/tag/v0.10.1), [v0.10.2](https://github.com/cozystack/cozystack/releases/tag/v0.10.2), [v0.10.3](https://github.com/cozystack/cozystack/releases/tag/v0.10.3), [v0.10.4](https://github.com/cozystack/cozystack/releases/tag/v0.10.4) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-08-21-cozystack-v0-12.md b/content/en/blog/2024-08-21-cozystack-v0-12.md new file mode 100644 index 00000000..794e239e --- /dev/null +++ b/content/en/blog/2024-08-21-cozystack-v0-12.md @@ -0,0 +1,46 @@ +--- +title: "Cozystack v0.12: StorageClass for All Apps, Cilium v1.16, VM Configuration, and E2E Sandbox" +slug: cozystack-v0-12 +date: 2024-08-21 +author: "Timur Tukaev" +description: "Cozystack v0.12 introduces storageClass configuration for all applications, updates Cilium to v1.16.1, adds tenant Kubernetes value overrides, and provides an E2E testing sandbox." +--- + +### Cozystack v0.12: StorageClass for All Apps, Cilium v1.16, VM Configuration, and E2E Sandbox + +Version 0.12 brings storage flexibility, updated networking, and better testing infrastructure. + +### Major Features and Improvements + +#### StorageClass for All Applications + +All applications now support a **`storageClass` option**, allowing operators to choose which storage class to use per application. This is especially important for clusters with multiple storage backends. + +#### Cilium v1.16.1 + +Cilium is updated to **v1.16.1**, bringing performance improvements and new networking features. + +#### Tenant Kubernetes Value Overrides + +Operators can now **override values** for tenant Kubernetes clusters, providing fine-grained control over cluster configuration. + +#### VM Configuration Updates + +Virtual machine chart configuration and documentation have been improved with better defaults and clearer options. + +#### E2E Testing Sandbox + +A new **E2E testing sandbox** makes it easier for contributors to run and develop integration tests. + +#### Important Upgrade Note + +After upgrading the platform, update Kubernetes applications as soon as possible. This release includes a CSI driver label fix. If the CSI driver stops working for new volumes, run the migration scripts from `scripts/migrations/4`. + +All changes: [v0.12.0](https://github.com/cozystack/cozystack/releases/tag/v0.12.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-08-31-cozystack-v0-13.md b/content/en/blog/2024-08-31-cozystack-v0-13.md new file mode 100644 index 00000000..16bf6c0e --- /dev/null +++ b/content/en/blog/2024-08-31-cozystack-v0-13.md @@ -0,0 +1,44 @@ +--- +title: "Cozystack v0.13: VictoriaLogs, VM Live Migration, KubeVirt v1.3, and Bridge Networking" +slug: cozystack-v0-13 +date: 2024-08-31 +author: "Timur Tukaev" +description: "Cozystack v0.13 adds VictoriaLogs with Fluent-bit for log collection, reworks the VM application with cloud-init and SSH keys, enables live migration with block volumes, and updates KubeVirt to v1.3.1." +--- + +### Cozystack v0.13: VictoriaLogs, VM Live Migration, KubeVirt v1.3, and Bridge Networking + +Version 0.13 is a major release that introduces centralized logging, a completely reworked virtual machine experience, and updated virtualization components. + +### Major Features and Improvements + +#### VictoriaLogs and Fluent-bit + +Cozystack gains a **centralized log collection system** with VictoriaLogs as the storage backend and Fluent-bit as the log shipper. This gives operators full visibility into platform and application logs. + +#### VM Rework: Cloud-Init, SSH Keys, and Live Migration + +The virtual machine application is completely reworked: + +- **Cloud-init support** with configurable user data. +- **SSH key injection** for secure VM access. +- **Bridge binding** for Kubernetes VMs, improving network performance. +- **Block volumes** for VM disks, enabling **live migration** between nodes. +- Disk expansion support via the KubeVirt expand-disks feature. +- New VM images: **Alpine** and **Talos Linux**. + +#### Component Updates + +- **KubeVirt** updated to v1.3.1. +- **CDI** updated to v1.60.2. +- **Cilium**: SCTP and NodePort features enabled. +- **FerretDB** updated to v1.24.0. + +All changes: [v0.13.0](https://github.com/cozystack/cozystack/releases/tag/v0.13.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-09-04-cozystack-v0-14.md b/content/en/blog/2024-09-04-cozystack-v0-14.md new file mode 100644 index 00000000..b55c7d0d --- /dev/null +++ b/content/en/blog/2024-09-04-cozystack-v0-14.md @@ -0,0 +1,47 @@ +--- +title: "Cozystack v0.14: Auto-Generated Passwords, RabbitMQ Users and VHosts, and CNPG v1.24" +slug: cozystack-v0-14 +date: 2024-09-04 +author: "Timur Tukaev" +description: "Cozystack v0.14 adds automatic password generation for PostgreSQL, ClickHouse, and FerretDB, introduces user and vhost management for RabbitMQ, and updates CNPG to v1.24." +--- + +### Cozystack v0.14: Auto-Generated Passwords, RabbitMQ Users and VHosts, and CNPG v1.24 + +Version 0.14 focuses on improving the security and usability of managed database and messaging applications. + +### Major Features and Improvements + +#### Auto-Generated Passwords + +Managed applications now generate **secure passwords automatically** during deployment: + +- **PostgreSQL** — automatic credential generation. +- **ClickHouse** — automatic credential generation. +- **FerretDB** — automatic credential generation. + +This removes the need for users to manually create and manage database passwords. + +#### RabbitMQ Users and VHosts + +The RabbitMQ application now supports configurable **users and virtual hosts**, giving operators proper multi-tenant message broker management. + +#### Component Updates + +- **CNPG** (CloudNativePG) updated to v1.24.0. +- **MariaDB Operator** and MySQL chart updated. +- **SeaweedFS** configuration improvements. + +#### Fixes (v0.14.1) + +- Fixed RabbitMQ accessing the Kubernetes API when network policies are enabled. +- Fixed Cilium kubeProxyReplacement configuration. + +All changes: [v0.14.0](https://github.com/cozystack/cozystack/releases/tag/v0.14.0), [v0.14.1](https://github.com/cozystack/cozystack/releases/tag/v0.14.1) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-09-16-cozystack-v0-15.md b/content/en/blog/2024-09-16-cozystack-v0-15.md new file mode 100644 index 00000000..3367914e --- /dev/null +++ b/content/en/blog/2024-09-16-cozystack-v0-15.md @@ -0,0 +1,43 @@ +--- +title: "Cozystack v0.15: OpenCost, Talos Metal Image, Backup Fixes, and Kamaji OOM Fix" +slug: cozystack-v0-15 +date: 2024-09-16 +author: "Timur Tukaev" +description: "Cozystack v0.15 introduces OpenCost for resource cost tracking, adds Talos metal image and firmware updates, fixes the backup system, and resolves Kamaji OOM issues." +--- + +### Cozystack v0.15: OpenCost, Talos Metal Image, Backup Fixes, and Kamaji OOM Fix + +Version 0.15 adds cost visibility, improves bare-metal provisioning, and fixes critical stability issues. + +### Major Features and Improvements + +#### OpenCost + +**OpenCost** is now integrated into Cozystack, providing **resource cost tracking** across the platform. Operators can see how much compute, storage, and network resources each tenant or application consumes. + +#### Talos Linux Metal Image and Firmware Updates + +The Talos Linux integration receives updated firmwares and a new **metal image** asset, simplifying bare-metal installations and supporting a wider range of hardware. + +#### Backup Fixes + +The backup system receives important fixes, improving reliability of scheduled and on-demand backups for managed applications. + +#### Kamaji OOM Fix + +A critical **out-of-memory issue** in Kamaji (the tenant control plane manager) has been resolved, improving stability for clusters with many tenants. + +#### Other Improvements + +- Fixed Strimzi Kafka operator cluster DNS resolution. +- Updated Kafka operator with disabled network policy generation. + +All changes: [v0.15.0](https://github.com/cozystack/cozystack/releases/tag/v0.15.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2024-12-04-cozystack-v0-19.md b/content/en/blog/2024-12-04-cozystack-v0-19.md new file mode 100644 index 00000000..a9e6aff1 --- /dev/null +++ b/content/en/blog/2024-12-04-cozystack-v0-19.md @@ -0,0 +1,52 @@ +--- +title: "Cozystack v0.19: Keycloak SSO, Dashboard Services View, KubeVirt v1.4, and MetalLB Update" +slug: cozystack-v0-19 +date: 2024-12-04 +author: "Timur Tukaev" +description: "Cozystack v0.19 integrates Keycloak for SSO authentication, adds services to the dashboard, updates KubeVirt to v1.4.0, and brings new versions of Cilium, LINSTOR, and MetalLB." +--- + +### Cozystack v0.19: Keycloak SSO, Dashboard Services View, KubeVirt v1.4, and MetalLB Update + +Version 0.19 introduces identity management with Keycloak and significantly improves the dashboard experience. + +### Major Features and Improvements + +#### Keycloak SSO Integration + +**Keycloak** is now available as an optional platform component, providing: + +- **Single Sign-On (SSO)** for the Cozystack dashboard and Kubeapps. +- **Role-based access** with configurable SSO roles. +- Keycloak is optional and can be enabled per distro bundle. +- Network policies included for secure Keycloak operation. + +#### Dashboard Services View + +Services are now visible in the dashboard, giving users a clear overview of their deployed managed services and their endpoints. + +#### NATS Password Authentication + +NATS now supports **password authentication**, improving security for messaging workloads. + +#### MTU Configuration for Kube-OVN + +Operators can now **specify MTU** for Kube-OVN daemonsets, enabling proper configuration for networks with non-standard MTU sizes. + +#### Component Updates + +- **KubeVirt** updated to v1.4.0. +- **Cilium** updated to v1.16.4. +- **LINSTOR** updated to v1.29.2. +- **CDI** updated to v1.61.0. +- **MetalLB** updated to v0.14.8 with FRR enabled by default. +- **Talos Linux** updated to v1.8.3. + +All changes: [v0.19.0](https://github.com/cozystack/cozystack/releases/tag/v0.19.0) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2025-01-17-cozystack-v0-23.md b/content/en/blog/2025-01-17-cozystack-v0-23.md new file mode 100644 index 00000000..786c4423 --- /dev/null +++ b/content/en/blog/2025-01-17-cozystack-v0-23.md @@ -0,0 +1,44 @@ +--- +title: "Cozystack v0.23: Talos Linux v1.9.2, Telegram Alert Severity, VM Instance Hooks, and Flux Operator Update" +slug: cozystack-v0-23 +date: 2025-01-17 +author: "Timur Tukaev" +description: "Cozystack v0.23 updates Talos Linux to v1.9.2, adds Telegram severity filtering for alerts, introduces hooks for VM instance type updates, and updates the FluxCD Operator." +--- + +### Cozystack v0.23: Talos Linux v1.9.2, Telegram Alert Severity, VM Instance Hooks, and Flux Operator Update + +Version 0.23 improves alerting, VM lifecycle management, and updates core infrastructure components. + +### Major Features and Improvements + +#### Talos Linux v1.9.2 + +Talos Linux is updated to **v1.9.2**, bringing security patches and stability improvements for the host OS. + +#### Telegram Alert Severity Filtering + +Operators can now configure **severity filtering** for Telegram alert notifications, reducing noise by only forwarding alerts of a specified severity level or higher. + +#### VM Instance Hooks + +New hooks enable updating **instanceType**, **instanceProfile**, and **storage** on virtual machines, making VM lifecycle management more flexible and scriptable. + +#### FluxCD Operator v0.13.0 + +The FluxCD Operator is updated to **v0.13.0** with improved reconciliation. + +#### Fixes + +- Fixed monitoring nil checker for edge cases. +- Fixed Keycloak configure reconciliation. +- v0.23.1: Fixed dashboard error "Unable to get installed package". + +All changes: [v0.23.0](https://github.com/cozystack/cozystack/releases/tag/v0.23.0), [v0.23.1](https://github.com/cozystack/cozystack/releases/tag/v0.23.1) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2025-04-10-cozystack-v0-30.md b/content/en/blog/2025-04-10-cozystack-v0-30.md new file mode 100644 index 00000000..2dbd212e --- /dev/null +++ b/content/en/blog/2025-04-10-cozystack-v0-30.md @@ -0,0 +1,64 @@ +--- +title: "Cozystack v0.30: GPU Passthrough, WorkloadMonitor for PVCs and IPs, CPUManager, and Automated Testing in CI" +slug: cozystack-v0-30 +date: 2025-04-10 +author: "Timur Tukaev" +description: "Cozystack v0.30 introduces GPU support for virtual machines, WorkloadMonitor tracking for PVCs and public IPs, CPUManager for dedicated CPU instances, and automated release testing." +--- + +### Cozystack v0.30: GPU Passthrough, WorkloadMonitor for PVCs and IPs, CPUManager, and Automated Testing in CI + +Version 0.30 brings GPU capabilities to the platform and improves resource tracking and testing infrastructure. + +### Major Features and Improvements + +#### GPU Passthrough for Virtual Machines + +Cozystack now includes the **GPU Operator** and supports **GPU passthrough** for virtual machines. Users can assign GPUs to VMs directly from the dashboard, enabling AI/ML workloads, rendering, and other GPU-accelerated tasks. + +#### WorkloadMonitor for PVCs and Public IPs + +The WorkloadMonitor system now tracks **PersistentVolumeClaims** and **public IP usage** per tenant. This gives operators visibility into storage and network resource consumption across the platform. + +#### CPUManager for Dedicated Instances + +KubeVirt can now run **CX and RT instance types** with the CPUManager enabled, providing dedicated CPU cores for performance-sensitive workloads. + +#### Cloud-Init Reconfiguration Trigger + +Users can now **trigger cloud-init reconfiguration** on running VMs with a new configuration setting, without needing to recreate the virtual machine. + +#### VPA for VMAgent + +VerticalPodAutoscaler is now configured for VMAgent, ensuring monitoring agents scale their resource usage automatically. + +#### Automated Release Testing + +Tests now run automatically as part of the release pipeline, with support for parallel test execution. + +### Component Updates + +- VictoriaMetrics Operator v0.55.0 +- Cluster API Operator v0.18.1 +- Keycloak Operator v1.25.0 +- Kamaji edge-25.3.2 +- Kube-OVN v1.13.8 +- Cilium v1.17.2 + +### Fixes (v0.30.1–v0.30.6) + +- VPA fixes for VMAgent. +- Fixed tenant access to own external IPs. +- GPU names added to VM specifications. +- Fixed MetalLB with upstream patch. +- Kube-OVN updated to v1.13.11. +- Various CI and monitoring improvements. + +All changes: [v0.30.0](https://github.com/cozystack/cozystack/releases/tag/v0.30.0), [v0.30.1](https://github.com/cozystack/cozystack/releases/tag/v0.30.1), [v0.30.2](https://github.com/cozystack/cozystack/releases/tag/v0.30.2), [v0.30.3](https://github.com/cozystack/cozystack/releases/tag/v0.30.3), [v0.30.4](https://github.com/cozystack/cozystack/releases/tag/v0.30.4), [v0.30.5](https://github.com/cozystack/cozystack/releases/tag/v0.30.5), [v0.30.6](https://github.com/cozystack/cozystack/releases/tag/v0.30.6) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2025-10-10-cozystack-v0-37.md b/content/en/blog/2025-10-10-cozystack-v0-37.md new file mode 100644 index 00000000..b8a6a1ed --- /dev/null +++ b/content/en/blog/2025-10-10-cozystack-v0-37.md @@ -0,0 +1,62 @@ +--- +title: "Cozystack v0.37: OpenAPI Dashboard, Lineage Webhook, PVC Expansion in Tenants, and SeaweedFS S3 Discovery" +slug: cozystack-v0-37 +date: 2025-10-10 +author: "Timur Tukaev" +description: "Cozystack v0.37 replaces the old UI with a new OpenAPI-based Dashboard, introduces the Lineage Webhook for resource tracking, enables PVC expansion in tenant clusters, and makes SeaweedFS S3 buckets discoverable." +--- + +### Cozystack v0.37: OpenAPI Dashboard, Lineage Webhook, PVC Expansion in Tenants, and SeaweedFS S3 Discovery + +Version 0.37 is a major release that overhauls the platform UI and introduces powerful new infrastructure capabilities. + +### Major Features and Improvements + +#### New OpenAPI-Based Dashboard + +The old Kubeapps-based UI is replaced with a **brand-new OpenAPI-based Dashboard**. The new dashboard features module-aware navigation, dynamic branding, richer Kubernetes resource views, and is built directly on the Cozystack API schema — making it automatically aware of all available applications and their configuration options. + +#### Lineage Webhook + +A new **Lineage Webhook** automatically tags Pods, PVCs, Services, Ingresses, and Secrets with labels referencing their managing Cozystack application. This creates a clear ownership chain across all platform resources, enabling better visibility and cleanup. + +#### PVC Expansion in Tenant Clusters + +Tenant Kubernetes clusters now support **PVC expansion** via the KubeVirt CSI resizer, allowing users to grow their persistent volumes without recreation. + +#### SeaweedFS as Stacked Service with S3 Discovery + +SeaweedFS is updated to **v3.99** and restructured as a stacked service. Users can now **discover their S3 buckets** directly from the dashboard, and the service load balancer IP is visible in the UI. + +#### Smoother Upgrades + +Installer and migration handling has been hardened with decoupled CRDs from the API server and better rollout logic. Migration from v0.36.2+ is now smoother. + +### Component Updates + +- Velero v1.17.0 +- Cilium v1.17.8 +- Flux Operator v0.29.0 +- LINSTOR v1.32.3 +- Kube-OVN: disabled enableLb + +### Fixes (v0.37.1–v0.37.10) + +Key fixes across 10 patch releases include: +- Efficient listing of TenantNamespaces via group-based rolebinding checks. +- Separated lineage-controller-webhook into a dedicated daemonset. +- Slack integration for Alerta alerts. +- API server shared informer cache for reduced load. +- Dashboard synced with upstream enhancements. +- SeaweedFS CA certificate duration extended. +- VM PVC resize guard (only expand, never shrink). +- Various RBAC, migration, and dashboard form fixes. + +All changes: [v0.37.0](https://github.com/cozystack/cozystack/releases/tag/v0.37.0), [v0.37.1](https://github.com/cozystack/cozystack/releases/tag/v0.37.1), [v0.37.2](https://github.com/cozystack/cozystack/releases/tag/v0.37.2), [v0.37.3](https://github.com/cozystack/cozystack/releases/tag/v0.37.3), [v0.37.4](https://github.com/cozystack/cozystack/releases/tag/v0.37.4), [v0.37.5](https://github.com/cozystack/cozystack/releases/tag/v0.37.5), [v0.37.6](https://github.com/cozystack/cozystack/releases/tag/v0.37.6), [v0.37.7](https://github.com/cozystack/cozystack/releases/tag/v0.37.7), [v0.37.8](https://github.com/cozystack/cozystack/releases/tag/v0.37.8), [v0.37.9](https://github.com/cozystack/cozystack/releases/tag/v0.37.9), [v0.37.10](https://github.com/cozystack/cozystack/releases/tag/v0.37.10) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2025-11-25-cozystack-v0-38.md b/content/en/blog/2025-11-25-cozystack-v0-38.md new file mode 100644 index 00000000..1fd33b54 --- /dev/null +++ b/content/en/blog/2025-11-25-cozystack-v0-38.md @@ -0,0 +1,62 @@ +--- +title: "Cozystack v0.38: Virtual Private Cloud, VNC Console, Configurable Worker K8s Versions, and HTTPS Enforcement" +slug: cozystack-v0-38 +date: 2025-11-25 +author: "Timur Tukaev" +description: "Cozystack v0.38 introduces Virtual Private Cloud with Multus CNI, VNC console for VMs in the dashboard, configurable Kubernetes worker versions, and HTTPS-only enforcement for the API." +--- + +### Cozystack v0.38: Virtual Private Cloud, VNC Console, Configurable Worker K8s Versions, and HTTPS Enforcement + +Version 0.38 brings network isolation capabilities, improved VM access, and security hardening across the platform. + +### Major Features and Improvements + +#### Virtual Private Cloud (VPC) + +The headline feature of v0.38 is **VPC support** with Multus CNI integration. Operators can now create isolated virtual networks with: + +- **Subnet management** for fine-grained network layout. +- **Network isolation** between tenants at the network level. +- Full integration with the Cozystack dashboard for VPC lifecycle management. + +#### VNC Console for VMs + +Virtual machines now have a **VNC console** accessible directly from the dashboard, enabling graphical access to VMs without external tools. + +#### Configurable Kubernetes Worker Versions + +Operators can now independently configure **Kubernetes versions for worker nodes** in tenant clusters, enabling gradual rollouts and version pinning. + +#### Security Hardening + +- **HTTPS-only enforcement** for the Cozystack API. +- Closed Flux Operator ports to external access. +- Redis security image updates. + +### Component Updates + +- LINSTOR v1.32.3 +- Talos Linux v1.11.3 +- Kube-OVN v1.14.11 +- Piraeus Operator v2.10.1 +- MariaDB Operator updated + +### Fixes (v0.38.1–v0.38.8) + +Key fixes across 8 patch releases include: +- Extended SeaweedFS CA certificate duration. +- Aligned CoreDNS app labels with Talos defaults. +- Updated piraeus-operator v2.10.2 for reliable fsck checks. +- Windows VM nodeAffinity scheduling support. +- SeaweedFS updated to v4.02. +- Removed Multus memory limit due to unpredictable startup memory spikes. + +All changes: [v0.38.0](https://github.com/cozystack/cozystack/releases/tag/v0.38.0), [v0.38.1](https://github.com/cozystack/cozystack/releases/tag/v0.38.1), [v0.38.2](https://github.com/cozystack/cozystack/releases/tag/v0.38.2), [v0.38.3](https://github.com/cozystack/cozystack/releases/tag/v0.38.3), [v0.38.4](https://github.com/cozystack/cozystack/releases/tag/v0.38.4), [v0.38.5](https://github.com/cozystack/cozystack/releases/tag/v0.38.5), [v0.38.6](https://github.com/cozystack/cozystack/releases/tag/v0.38.6), [v0.38.7](https://github.com/cozystack/cozystack/releases/tag/v0.38.7), [v0.38.8](https://github.com/cozystack/cozystack/releases/tag/v0.38.8) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2025-12-23-cozystack-v0-39.md b/content/en/blog/2025-12-23-cozystack-v0-39.md new file mode 100644 index 00000000..9d6d78c2 --- /dev/null +++ b/content/en/blog/2025-12-23-cozystack-v0-39.md @@ -0,0 +1,59 @@ +--- +title: "Cozystack v0.39: Topology-Aware Routing, Windows VM Scheduling, Talm Overhaul, and VMAgent for Tenants" +slug: cozystack-v0-39 +date: 2025-12-23 +author: "Timur Tukaev" +description: "Cozystack v0.39 adds Cilium topology-aware routing, Windows VM scheduling with nodeAffinity, a major Talm tool overhaul with encryption support, and VMAgent for tenant namespace metrics." +--- + +### Cozystack v0.39: Topology-Aware Routing, Windows VM Scheduling, Talm Overhaul, and VMAgent for Tenants + +Version 0.39 enhances networking, scheduling, and the tooling around Cozystack infrastructure management. + +### Major Features and Improvements + +#### Topology-Aware Routing for Cilium + +Cilium services now support **topology-aware routing**, keeping traffic local to the same zone or region when possible. This reduces latency and cross-zone network costs. + +#### Automatic Cilium Pod Rollouts + +Cilium pods now **automatically roll out** when their configuration changes, eliminating the need for manual restarts after config updates. + +#### Windows VM Scheduling + +Virtual machines running **Windows** can now be scheduled using **nodeAffinity** via the cozystack-scheduling ConfigMap, ensuring Windows VMs land on appropriate nodes. + +#### Major Talm Tool Overhaul + +The `talm` configuration management tool for Talos Linux receives a significant update: + +- Mandatory `--name` flag for explicit cluster targeting. +- Preserved YAML documents during processing. +- Directory expansion and automatic root detection. +- `kubeconfig --login` command for easy authentication. +- **Encryption support** for secrets. +- Wrapper on `talosctl` for unified CLI experience. + +#### VMAgent for Tenant Namespaces + +**VMAgent** is now deployed for tenant namespace metrics scraping, providing per-tenant monitoring visibility. + +### Fixes (v0.39.1–v0.39.5) + +- Slack severity filter for Alerta. +- VMs always exposed with at least a ClusterIP service for in-cluster DNS. +- Tenant egress allowed to parent ingress pods. +- SeaweedFS upgraded to v4.05 with traffic locality and Grafana dashboards. +- Kube-OVN updated to v1.14.25. +- Critical piraeus-server patches for DRBD stability. +- Fixed DRBD race condition in updateDiscGran. + +All changes: [v0.39.0](https://github.com/cozystack/cozystack/releases/tag/v0.39.0), [v0.39.1](https://github.com/cozystack/cozystack/releases/tag/v0.39.1), [v0.39.2](https://github.com/cozystack/cozystack/releases/tag/v0.39.2), [v0.39.3](https://github.com/cozystack/cozystack/releases/tag/v0.39.3), [v0.39.4](https://github.com/cozystack/cozystack/releases/tag/v0.39.4), [v0.39.5](https://github.com/cozystack/cozystack/releases/tag/v0.39.5) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2026-01-10-cozystack-v0-40.md b/content/en/blog/2026-01-10-cozystack-v0-40.md new file mode 100644 index 00000000..96021988 --- /dev/null +++ b/content/en/blog/2026-01-10-cozystack-v0-40.md @@ -0,0 +1,63 @@ +--- +title: "Cozystack v0.40: LINSTOR Scheduler, SeaweedFS Traffic Locality, ValuesFrom Configuration, and Platform Decomposition" +slug: cozystack-v0-40 +date: 2026-01-10 +author: "Timur Tukaev" +description: "Cozystack v0.40 introduces the LINSTOR scheduler for optimal pod placement near storage replicas, SeaweedFS traffic locality, a new ValuesFrom configuration mechanism, and major platform architecture refactoring." +--- + +### Cozystack v0.40: LINSTOR Scheduler, SeaweedFS Traffic Locality, ValuesFrom Configuration, and Platform Decomposition + +Version 0.40 is a substantial release that optimizes storage performance, introduces a new configuration mechanism, and refactors the platform architecture for modularity. + +### Major Features and Improvements + +#### LINSTOR Scheduler + +A new **LINSTOR scheduler** places pods on nodes that have **local storage replicas**, minimizing network I/O for storage-heavy workloads. An admission webhook automatically routes pods to the optimal node. Combined with **auto-diskful** (converting diskless to diskful after 30 minutes of Primary state), this creates a self-optimizing storage topology. + +#### SeaweedFS Traffic Locality + +SeaweedFS is updated to **v4.05** with **traffic locality** support, keeping read/write operations local to the same zone when possible — reducing latency and cross-zone bandwidth. + +#### ValuesFrom Configuration Mechanism + +A new **ValuesFrom** mechanism replaces Helm lookup functions with FluxCD's `valuesFrom`, providing cleaner and more predictable configuration injection for managed applications. + +#### Platform Decomposition + +The platform architecture is significantly refactored: + +- `cozystack-resource-definitions` split into **separate packages**. +- A dedicated **assets server** extracted from the installer. +- **Talos package** extracted from the installer. +- FluxCD migrated to an **all-in-one module** with migration support. + +#### Automated Version Management + +PostgreSQL, Kubernetes, MariaDB, and Redis versions are now **managed automatically**, reducing manual maintenance burden. + +### Component Updates + +- Cilium v1.18.5 +- Kube-OVN v1.14.25 +- Keycloak client made public +- Renamed `cozypkg` to `cozyhr` + +### Fixes (v0.40.1–v0.40.7) + +- Critical piraeus-server patches for storage stability. +- Refactored LINSTOR RWX validation to CSI driver level. +- Fixed Watch API resourceVersion and bookmark handling. +- Cilium updated to v1.18.6, Talos Linux to v1.11.6. +- JWT token verification added to dashboard (security fix). +- Fixed Kubernetes deployment manifests. + +All changes: [v0.40.0](https://github.com/cozystack/cozystack/releases/tag/v0.40.0), [v0.40.1](https://github.com/cozystack/cozystack/releases/tag/v0.40.1), [v0.40.2](https://github.com/cozystack/cozystack/releases/tag/v0.40.2), [v0.40.3](https://github.com/cozystack/cozystack/releases/tag/v0.40.3), [v0.40.4](https://github.com/cozystack/cozystack/releases/tag/v0.40.4), [v0.40.5](https://github.com/cozystack/cozystack/releases/tag/v0.40.5), [v0.40.6](https://github.com/cozystack/cozystack/releases/tag/v0.40.6), [v0.40.7](https://github.com/cozystack/cozystack/releases/tag/v0.40.7) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack) diff --git a/content/en/blog/2026-01-20-cozystack-v0-41.md b/content/en/blog/2026-01-20-cozystack-v0-41.md new file mode 100644 index 00000000..9b4a64bf --- /dev/null +++ b/content/en/blog/2026-01-20-cozystack-v0-41.md @@ -0,0 +1,64 @@ +--- +title: "Cozystack v0.41: MongoDB, Dashboard Edit Button, Resource Quota UI, JWT Security, and cert-manager Gateway API" +slug: cozystack-v0-41 +date: 2026-01-20 +author: "Timur Tukaev" +description: "Cozystack v0.41 adds MongoDB as a managed application, introduces the Edit button and resource quota usage in the dashboard, adds JWT token verification, and enables cert-manager Gateway API support." +--- + +### Cozystack v0.41: MongoDB, Dashboard Edit Button, Resource Quota UI, JWT Security, and cert-manager Gateway API + +Version 0.41 expands the database catalog with MongoDB and significantly improves the dashboard and security posture. + +### Major Features and Improvements + +#### MongoDB as a Managed Application + +**MongoDB** joins the Cozystack application catalog as a fully managed service with: + +- Replica set deployment with configurable replicas. +- Persistent storage with configurable size. +- Resource management (CPU and memory requests/limits). +- Built-in monitoring integration. + +#### Dashboard Edit Button + +All resources in the dashboard now have an **Edit button**, enabling users to modify any deployed application directly from the UI without switching to the CLI. + +#### Resource Quota Usage in Dashboard + +The tenant details page now displays **resource quota usage**, giving tenants and operators a clear picture of how much of their allocated resources are consumed. + +#### JWT Token Verification + +The dashboard now performs **JWT token verification**, closing a security gap and ensuring that only authenticated users can interact with the platform API. + +#### cert-manager Gateway API Support + +cert-manager now **auto-enables Gateway API support** when the Gateway API addon is active, simplifying TLS certificate management for gateway-based ingress. + +#### VM Flexibility Improvements + +- VMs can now **change the `external` field** after creation. +- VMs can **switch between instancetype and custom resources** after creation. + +### Fixes (v0.41.1–v0.41.11) + +Key fixes across 11 patch releases include: +- Enum validation for IngressNginx exposeMethod. +- VPA minReplicas set to 1 for VMAgent. +- Show Service and Ingress resources for Kubernetes app in dashboard. +- Separated Keycloak branding values. +- Fixed CoreDNS serviceaccount to match Kubernetes bootstrap RBAC. +- Dashboard startupProbe to prevent restarts on slow hardware. +- Denied resourcequotas deletion for tenant admin. +- Kube-OVN updated to v1.15.3. + +All changes: [v0.41.0](https://github.com/cozystack/cozystack/releases/tag/v0.41.0), [v0.41.1](https://github.com/cozystack/cozystack/releases/tag/v0.41.1), [v0.41.2](https://github.com/cozystack/cozystack/releases/tag/v0.41.2), [v0.41.3](https://github.com/cozystack/cozystack/releases/tag/v0.41.3), [v0.41.4](https://github.com/cozystack/cozystack/releases/tag/v0.41.4), [v0.41.5](https://github.com/cozystack/cozystack/releases/tag/v0.41.5), [v0.41.6](https://github.com/cozystack/cozystack/releases/tag/v0.41.6), [v0.41.7](https://github.com/cozystack/cozystack/releases/tag/v0.41.7), [v0.41.8](https://github.com/cozystack/cozystack/releases/tag/v0.41.8), [v0.41.9](https://github.com/cozystack/cozystack/releases/tag/v0.41.9), [v0.41.10](https://github.com/cozystack/cozystack/releases/tag/v0.41.10), [v0.41.11](https://github.com/cozystack/cozystack/releases/tag/v0.41.11) + +### Join the community + +- Telegram [group](https://t.me/cozystack) +- Slack [group](https://kubernetes.slack.com/archives/C06L3CPRVN1) (Get invite at [https://slack.kubernetes.io](https://slack.kubernetes.io)) +- [Community Meeting Calendar](https://calendar.google.com/calendar?cid=ZTQzZDIxZTVjOWI0NWE5NWYyOGM1ZDY0OWMyY2IxZTFmNDMzZTJlNjUzYjU2ZGJiZGE3NGNhMzA2ZjBkMGY2OEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) +- [YouTube](https://www.youtube.com/@cozystack)