alpha to beta

cluster/config-defaults.yaml

@@ -606,7 +606,7 @@ cpu_manager_policy: "none"
 allowed_unsafe_sysctls: "net.ipv4.tcp_keepalive_time,net.ipv4.tcp_keepalive_intvl,net.ipv4.tcp_keepalive_probes,net.ipv4.tcp_syn_retries,net.ipv4.tcp_retries2"
 
 # enable CSI Driver feature flag
-enable_csi: "false"
+enable_csi: "true"
 # enable CSIMigration and CSIMigrationAWS feature flags (make sure to set `enable_csi: true` for this to work)
 enable_csi_migration: "false"
 # the maximum amount of memory for EBS CSI controller's sidecars
@@ -804,6 +804,10 @@ observability_collector_scheme: "https"
 observability_metrics_endpoint: "ingest.lightstep.com"
 observability_metrics_port: "443"
 
+# labels whitelisted to kube-state-metrics
+observability_metrics_pods_labels: "application,component"
+observability_metrics_ingresses_labels: ""
+
 # opentelemetry collector
 observability_otel_collector_enabled: "false"
 

cluster/manifests/deployment-service/controller-statefulset.yaml

@@ -29,7 +29,7 @@ spec:
       terminationGracePeriodSeconds: 300
       containers:
         - name: "deployment-service-controller"
-          image: "container-registry.zalando.net/teapot/deployment-controller:master-115"
+          image: "container-registry.zalando.net/teapot/deployment-controller:master-118"
           args:
             - "--config-namespace=kube-system"
           env:

cluster/manifests/deployment-service/status-service-deployment.yaml

@@ -1,5 +1,5 @@
 {{ $image   := "container-registry.zalando.net/teapot/deployment-status-service" }}
-{{ $version := "master-115" }}
+{{ $version := "master-118" }}
 
 apiVersion: apps/v1
 kind: Deployment

cluster/manifests/kube-state-metrics/deployment.yaml

@@ -32,7 +32,7 @@ spec:
         image: container-registry.zalando.net/teapot/kube-state-metrics:v2.2.1-master-21
         args:
         - --resources=certificatesigningrequests,configmaps,cronjobs,daemonsets,deployments,endpoints,horizontalpodautoscalers,ingresses,jobs,limitranges,mutatingwebhookconfigurations,namespaces,networkpolicies,nodes,persistentvolumeclaims,persistentvolumes,poddisruptionbudgets,pods,replicasets,replicationcontrollers,resourcequotas,secrets,services,statefulsets,storageclasses,validatingwebhookconfigurations,volumeattachments,verticalpodautoscalers
-        - --metric-labels-allowlist=pods=[application,component],nodes=[topology.kubernetes.io/zone,node.kubernetes.io/instance-type,node.kubernetes.io/node-pool,node.kubernetes.io/role,dedicated]
+        - --metric-labels-allowlist=pods=[{{.Cluster.ConfigItems.observability_metrics_pods_labels}}],ingresses=[{{.Cluster.ConfigItems.observability_metrics_ingresses_labels}}],nodes=[topology.kubernetes.io/zone,node.kubernetes.io/instance-type,node.kubernetes.io/node-pool,node.kubernetes.io/role,dedicated]
         ports:
         - containerPort: 8080
           name: http-metrics

cluster/node-pools/master-default/userdata.yaml

@@ -345,7 +345,7 @@ write_files:
           - mountPath: /etc/kubernetes/config
             name: kubernetes-configs
             readOnly: true
-        - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/foundation/platform-iam-tokeninfo:master-19
+        - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/foundation/platform-iam-tokeninfo:master-55
           name: tokeninfo
           ports:
             - containerPort: 9021
@@ -376,7 +376,7 @@ write_files:
               value: {{ .Cluster.ConfigItems.apiserver_business_partner_ids }}
 {{ if ne .Cluster.Environment "production" }}
         - name: tokeninfo-sandbox
-          image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/foundation/platform-iam-tokeninfo:master-19
+          image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/foundation/platform-iam-tokeninfo:master-55
           ports:
           - containerPort: 9022
           lifecycle: