You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/ROOT/pages/release-notes.adoc
+25-11Lines changed: 25 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -58,12 +58,14 @@ In this release we introduced several authentication mechanisms in different pro
58
58
59
59
Improved Authorization::
60
60
61
-
* The performance of the https://docs.stackable.tech/home/stable/hdfs/usage-guide/security.html#\_authorization[OPA Authorizer] has been greatly improved. This _can_ be a breaking change so please make sure to read the hdfs-utils https://github.com/stackabletech/hdfs-utils/releases/tag/v0.4.0[release notes] for details.
61
+
* The performance of the https://docs.stackable.tech/home/stable/hdfs/usage-guide/security.html#\_authorization[OPA Authorizer] has been greatly improved.
62
+
This _can_ be a breaking change so please make sure to read the hdfs-utils https://github.com/stackabletech/hdfs-utils/releases/tag/v0.4.0[release notes] for details.
62
63
* The User Info Fetcher HTTP API has been replaced with a Rego library. Please see https://docs.stackable.tech/home/nightly/opa/usage-guide/user-info-fetcher#_user_info_fetcher_api[user-info-fetcher API] for more information.
63
64
64
65
Logging::
65
66
66
-
* Apache NiFi: The ephemeral EmptyDir Volumes used to store log files before being aggregated have their size increased from a default of 33 MiB to 500 MiB. Additionally the interval in which Logback checks if the maximum log file size has been reached was lowered from 60 seconds to 5 seconds.
67
+
* Apache NiFi: The ephemeral EmptyDir Volumes used to store log files before being aggregated have their size increased from a default of 33 MiB to 500 MiB.
68
+
Additionally the interval in which Logback checks if the maximum log file size has been reached was lowered from 60 seconds to 5 seconds.
67
69
68
70
Monitoring::
69
71
@@ -91,11 +93,14 @@ Listener::
91
93
92
94
Dependencies::
93
95
94
-
* Apache HBase: The hadoop-azure module was added to the image and is contained in the classpath. This makes it possible to use the Azure Data Lake Storage Gen2 (ADLS) instead of HDFS. See the xref:hbase:usage-guide/adls.adoc[usage guide] for detailed information.
96
+
* Apache HBase: The hadoop-azure module was added to the image and is contained in the classpath.
97
+
This makes it possible to use the Azure Data Lake Storage Gen2 (ADLS) instead of HDFS.
98
+
See the xref:hbase:usage-guide/adls.adoc[usage guide] for detailed information.
95
99
96
100
Operations::
97
101
98
-
* The Stackable Operator for HDFS now supports upgrading existing HDFS installations. However, this process requires some manual intervention as described https://docs.stackable.tech/home/nightly/hdfs/usage-guide/upgrading/[here].
102
+
* The Stackable Operator for HDFS now supports upgrading existing HDFS installations.
103
+
However, this process requires some manual intervention as described https://docs.stackable.tech/home/nightly/hdfs/usage-guide/upgrading/[here].
99
104
100
105
Misc::
101
106
@@ -109,15 +114,21 @@ Misc::
109
114
Images::
110
115
111
116
* Our Docker images now exclusively make use of numeric user IDs in `USER` statements allowing the use of `securityContext.runAsNonRoot`
112
-
* The group id of all files relevant to our products is now set to `0`. This allows the images to be used with any arbitrary user as every container user will always belong to the root group (`0`). This is especially useful on OpenShift when trying to move to the `restricted-v2` SecurityContextConstraint (SCC), Stackable currently defaults to the `nonroot-v2` SCC but we plan on migrating to `restricted-v2` in the future
117
+
* The group id of all files relevant to our products is now set to `0`.
118
+
This allows the images to be run with an arbitrary user as every container user will always belong to the root group (`0`).
119
+
This is required on OpenShift when migrating to the `restricted-v2` SecurityContextConstraint (SCC).
120
+
Stackable currently defaults to the `nonroot-v2` SCC but we plan on migrating to the `restricted-v2` SCC in the future.
113
121
114
122
Bug fixes::
115
123
116
-
* Apache Spark Operator: Ensure Spark applications are submitted only once. Reconciling applications after the corresponding Job objects have been recycled doesn't lead to the creation of new Job objects. This behavior was triggered by different situations, such as when the operator was restarted.
124
+
* Apache Spark Operator: Ensure Spark applications are submitted only once.
125
+
Reconciling applications after the corresponding Job objects have been recycled doesn't lead to the creation of new Job objects.
126
+
This behavior was triggered by different situations, such as when the operator was restarted.
117
127
* Apache Spark Operator: Environment variables can now be overridden with the role group’s envOverrides property.
118
128
* Trino, Spark, HBase, Airflow: These used to have https://github.com/stackabletech/issues/issues/548[issues] where config and environment variable overrides would not always work as expected, this has now been fixed
119
-
* The cluster domain (default `cluster.local`) which caused problems in non-default cluster setups can now be configured in all operators using the ENV variable `KUBERNETES_CLUSTER_DOMAIN` or setting the helm value `kubernetesClusterDomain` during installation as described https://docs.stackable.tech/home/nightly/guides/kubernetes-cluster-domain[here].
120
-
* Apache Airflow: In release 24.7 Airflow did not propagate git credentials correctly to the gitsync containers. This has now been corrected and works for both celery- and kubernetes workers.
129
+
* The cluster domain (default `cluster.local`) which caused problems in non-default cluster setups can now be configured in all operators using the ENV variable `KUBERNETES_CLUSTER_DOMAIN` or setting the helm value `kubernetesClusterDomain` during installation as described in https://docs.stackable.tech/home/nightly/guides/kubernetes-cluster-domain[Configuring the Kubernetes cluster domain].
130
+
* Apache Airflow: In release 24.7 Airflow did not propagate git credentials correctly to the gitsync containers.
131
+
This has now been corrected and works for both celery- and kubernetes workers.
121
132
* Operators now do not stop reconciling existing clusters if one of the https://github.com/stackabletech/issues/issues/211[cluster objects cannot be deserialized].
122
133
* Apache HBase: The operator now does not https://github.com/stackabletech/hbase-operator/pull/584[ignore the `hbaseRootdir` config property at role level].
123
134
* Apache Kakfa: The bootstrap Kafka service is now included in https://github.com/stackabletech/kafka-operator/pull/741[certificate SANs].
@@ -180,7 +191,8 @@ This release supports the following Kubernetes versions:
180
191
These Kubernetes versions are no longer supported:
181
192
182
193
* `1.26`
183
-
* `1.25` as we removed internal forks required to support Kubernetes `1.25` and below. This includes OpenShift `4.12`, which is using Kubernetes `1.25`.
194
+
* `1.25` as we removed internal forks required to support Kubernetes `1.25` and below.
195
+
This includes OpenShift `4.12`, which is using Kubernetes `1.25`.
184
196
185
197
=== Supported OpenShift versions
186
198
@@ -198,7 +210,8 @@ These OpenShift versions are no longer supported:
198
210
199
211
==== Listener operator
200
212
201
-
* BREAKING: All ListenerClasses now default to using DNS hostnames, previously NodePort ListenerClasses (such as external-unstable) would use IP addresses. Hence, all Nodes must now have resolvable hostnames, or the NodePort ListenerClasses must be configured to set .spec.preferredAddressType: IP.
213
+
* BREAKING: All ListenerClasses now default to using DNS hostnames, previously NodePort ListenerClasses (such as external-unstable) would use IP addresses.
214
+
Hence, all Nodes must now have resolvable hostnames, or the NodePort ListenerClasses must be configured to set `.spec.preferredAddressType: IP`.
202
215
203
216
=== Upgrade from 24.7
204
217
@@ -217,7 +230,8 @@ Use "stackablectl release list" to list available releases.
217
230
----
218
231
219
232
Afterwards you will need to upgrade the CustomResourceDefinitions (CRDs) installed by the Stackable Platform.
220
-
The reason for this is that helm will uninstall the operators but not the CRDs. This can be done using `kubectl replace`.
233
+
The reason for this is that helm will uninstall the operators but not the CRDs.
0 commit comments