4.2.0 release notes (#1318)

ADDONS.md

@@ -1,12 +1,12 @@
 |Namespace|Name|Version|App Version|Kind|
 |---------|----|-------|-----------|----|
-| |ambassador|1.13.3-1|1.13.3|ClusterAddon|
+| |ambassador|1.13.10-1|1.13.10|ClusterAddon|
 | |awsebscsiprovisioner|0.8.0-1|0.8.0|ClusterAddon|
 | |awsebsprovisioner|1.0.0-1|1.0|ClusterAddon|
-| |azuredisk-csi-driver|0.7.2-3|0.7.2|ClusterAddon|
+| |azuredisk-csi-driver|1.1.1-1|1.1.1|ClusterAddon|
 | |azurediskprovisioner|1.0.0-2|1.0|ClusterAddon|
-| |cert-manager|1.0.3-7|1.0.3|ClusterAddon|
-| |dashboard|3.0.2-0|3.0.2|ClusterAddon|
+| |cert-manager|1.0.3-8|1.0.3|ClusterAddon|
+| |dashboard|3.1.0-1|2.3.1|ClusterAddon|
 | |defaultstorageclass-protection|1.1.0-0|0.0.6|ClusterAddon|
 | |external-dns|0.7.0-4|0.7.0|ClusterAddon|
 | |gcpdisk-csi-driver|0.7.1-2|0.7.1|ClusterAddon|
@@ -16,23 +16,23 @@
 | |kiali|v1.29.1-4|1.29.0|ClusterAddon|
 | |localvolumeprovisioner|1.0.0-1|1.0|ClusterAddon|
 | |metallb|0.9.3-5|0.9.3|ClusterAddon|
-| |traefik|1.7.30-0|1.7.30+d2iq.0|ClusterAddon|
-| |velero|1.5.2-2|null|ClusterAddon|
+| |traefik|1.7.30-1|1.7.30+d2iq.0|ClusterAddon|
+| |velero|1.6.0-1|null|ClusterAddon|
 | |vsphere-csi-driver|1.3.0-1|2.2.0|ClusterAddon|
-|kubeaddons|dex|2.27.0-3|2.27.0|Addon|
-|kubeaddons|dex-k8s-authenticator|1.2.2-6|v1.2.2|Addon|
+|kubeaddons|dex|2.27.0-5|2.27.0|Addon|
+|kubeaddons|dex-k8s-authenticator|1.2.2-7|v1.2.2|Addon|
 |kubeaddons|elasticsearch|7.10.1-1|7.10.1|Addon|
 |kubeaddons|elasticsearch-curator|5.8.1-4|5.8.1|Addon|
-|kubeaddons|elasticsearchexporter|1.1.0-5|1.1.0|Addon|
+|kubeaddons|elasticsearchexporter|1.2.1-1|1.2.1|Addon|
 |kubeaddons|fluentbit|1.6.8-5|1.6.8|Addon|
-|kubeaddons|gatekeeper|3.4.0-2|3.4.0|Addon|
+|kubeaddons|gatekeeper|3.4.0-3|3.4.0|Addon|
 |kubeaddons|kibana|7.9.3-2|7.9.3|Addon|
 |kubeaddons|konvoyconfig|0.0.4-4|0.0.4|Addon|
-|kubeaddons|kube-oidc-proxy|0.2.0-2|v0.2.0|Addon|
-|kubeaddons|nvidia|0.2.0-8|0.2.0|ClusterAddon|
-|kubeaddons|opsportal|1.5.0-17|1.5.0|Addon|
-|kubeaddons|prometheus|0.47.0-3|2.26.0|Addon|
+|kubeaddons|kube-oidc-proxy|0.2.0-4|v0.2.0|Addon|
+|kubeaddons|nvidia|0.2.2-1|0.2.0|ClusterAddon|
+|kubeaddons|opsportal|1.6.0-2|1.5.0|Addon|
+|kubeaddons|prometheus|0.47.0-5|2.29.2|Addon|
 |kubeaddons|prometheusadapter|v0.8.3-4|v0.8.3|Addon|
-|kubeaddons|reloader|v0.0.85-1|v0.0.85|Addon|
-|kubeaddons|traefik-forward-auth|2.0.0-1|null|Addon|
+|kubeaddons|reloader|v0.0.99-1|v0.0.99|Addon|
+|kubeaddons|traefik-forward-auth|3.3.0-1|null|Addon|
 |kubeaddons-flagger|flagger|0.19.0-6|0.19.0|ClusterAddon|

RELEASE_NOTES.md

@@ -1,5 +1,134 @@
 # Release Notes
 
+## stable-1.20-4.2.0, v4.2.0
+
+### ambassador
+  - [1.13.10]
+  - Bugfix: Fixed a regression when specifying a comma separated string for `cors.origins` on the
+  - `Mapping` resource. ([#3609])
+  - Change: Envoy-configuration snapshots get saved (as `ambex-#.json`) in `/ambassador/snapshots`.
+  - The number of snapshots is controlled by the `AMBASSADOR_AMBEX_SNAPSHOT_COUNT` environment
+  - variable; set it to 0 to disable. The default is 30.
+  - Change: Set `AMBASSADOR_AMBEX_NO_RATELIMIT` to `true` to completely disable ratelimiting Envoy
+  - reconfiguration under memory pressure. This can help performance with the endpoint or Consul
+  - resolvers, but could make OOMkills more likely with large configurations. The default is `false`,
+  - meaning that the rate limiter is active.
+  - Bugfix: The `Mapping` resource can now specify `docs.timeout_ms` to set the timeout when the
+  - Dev Portal is fetching API specifications.
+  - Bugfix: The Dev Portal will now strip HTML tags when displaying search results, showing just
+  - the actual content of the search result.
+  - Change: Consul certificate-rotation logging now includes the fingerprints and validity
+  - timestamps of certificates being rotated.
+  - [1.13.8]
+  - Bugfix: Ambassador Agent now accurately reports up-to-date Endpoint information to Ambassador Cloud
+  - Feature: Ambassador Agent reports ConfigMaps and Deployments to Ambassador Cloud to provide a better Argo Rollouts experience. See [Argo+Ambassador documentation](https://www.getambassador.io/docs/argo) for more info.
+  - [1.13.7]
+  - Feature: Add AMBASSADOR_JSON_LOGGING to enable JSON for most of the Ambassador control plane. Some (but few) logs from gunicorn and the Kubernetes client-go package still log text.
+  - Bugfix: Fixed a bug where the Consul resolver would not actually use Consul endpoints with TCPMappings.
+  - Change: Ambassador now calculates its own memory usage in a way that is more similar to how the kernel OOMKiller tracks memory.
+  - [1.13.6]
+  - Bugfix: Fixed a regression where Ambassador snapshot data was logged at the INFO label when using AMBASSADOR_LEGACY_MODE=true
+  - [1.13.5]
+  - Bugfix: Fix a regression from 1.8.0 that prevented Ambassador module config keys `proper_case` and `preserve_external_request_id` from working correctly.
+  - Bugfix: Fixed a regression in detecting the Ambassador Kubernetes service that could cause the wrong IP or hostname to be used in Ingress statuses (thanks, [Noah Fontes](https://github.com/impl)!
+  - [1.13.4]
+  - Bugfix: Incorporate the Envoy 1.15.5 security update by adding the `reject_requests_with_escaped_slashes` option to the Ambassador module.
+  #1271 (@mesosphere-mergebot)
+
+### azuredisk-csi-driver
+  - Features
+  - support force detach
+  - support incremental snapshot
+  - support tags in snapshot
+  - create snapshot on external resource group
+  - add dangling error support
+  - support Azure disk batch attach/detach (#650)
+  - Windows beta support (switch to csi-proxy v0.2.2 API)
+  - support multi OS versions for Windows images
+  - Azure stack support
+  - ListVolumes support
+  - add LogicalSectorSize support for UltraSSD
+  - remove unmanaged disk support
+  - add full Azure Stack support
+  - add more controller metrics
+  - support disable AzureStack
+  - disable AzureStack by DisableAzureStackCloud config
+  - Bug Fixes
+  - fix disk API 10s latency issue
+  - fix initial delay(1s) when mount azure disk
+  - fix incorrect max azure disk max count
+  - fix resize error in migration scenario
+  - fix azure disk resize error if source does not exist
+  - fix: not schedule driver pod on virtual node
+  - fix: cache data loss issue on Windows when unmount disk
+  - fix: resize filesystem if cloned volume capacity is larger than source volume
+  - fix: volume expansion failure on node
+  - fix: helm chart installation issue
+  #1272 (@mesosphere-mergebot)
+
+### dashboard
+  - Hide pagination controls if there is only a single page of items to display (#5827)
+  - Use .log extension instead of .txt for downloaded log files
+  - Extend pod view with more information including:
+  - related Service Account (#5815)
+  - liveness/readiness probe (#6145)
+  - Major refactoring and improvements of the log viewer (#5868)
+  - Change resource status icons to colored dots (#5867)
+  - Add hover effects for clickable elements (#5930)
+  - Add deployment rollout restart option (#5917)
+  - Improve env variable display for containers and fix ingress view (#5975)
+  - Add labels to workload status charts (#5994)
+  - Restore serialized reference component (#6090)
+  - Reorganize resource list columns and add more columns, i.e. images (#6014)
+  - Replace all overview redirects with workloads (#6092)
+  - Improve chart metrics calculation to support wider time windows (#6126)
+  - Use stable networking.k8s.io/v1 API for Ingress resource
+  #1273 (@mesosphere-mergebot)
+
+### elasticsearchexporter
+  - [FEATURE] Added elasticsearch_clustersettings_stats_max_shards_per_node metric. #277
+  - [FEATURE] Added elasticsearch_indices_shards_store_size_in_bytes metric. #292
+  - [FEATURE] Added --es.indices_mappings flag to scrape elasticsearch index mapping stats and elasticsearch_indices_mappings_stats collector. #411
+  - [FEATURE] Added elasticsearch_snapshot_stats_latest_snapshot_timestamp_seconds metric. #318
+  - [ENHANCEMENT] Added support for reloading the tls client certificate in case it changes on disk. #414
+  - [BUGFIX] Fixed the elasticsearch_indices_shards_docs metric name. #291
+  - [BUGFIX] Fixed elasticsearch 7.13 node stats metrics #439
+  - [BUGFIX] Fixed snapshot stats metrics for some snapshot repository types #442
+  #1277 (@mesosphere-mergebot)
+
+### nvidia
+  - Updated Nvidia addon to support driver v460
+  #1206 (@mesosphere-mergebot)
+
+### opsportal
+  - Fix cluster details page for AKS clusters (COPS-6997)
+  #1274 (@mesosphere-mergebot)
+
+  - fix: UI load addon dashboard links even when custom domain ConfigMap does not exist.
+  #1282 (@mesosphere-mergebot)
+
+### prometheus
+  - prometheus: possible to enable elasticsearch rules
+  #1224 (@mesosphere-mergebot)
+
+  - fix: Bump Prometheus to v2.29.2 which fixes head GC and pending readers race condition that caused issues with rule evaluations.
+  #1303 (@mesosphere-mergebot)
+
+  - prometheus: possible to enable elasticsearch rules
+  #1223 (@mesosphere-mergebot)
+
+### reloader
+  - Reload resource if secret/configmap is re-created
+  #1278 (@mesosphere-mergebot)
+
+### traefik-forward-auth
+  - traefik-forward-auth: shorten hook names to be within 63 character length.
+  #1316 (@mesosphere-mergebot)
+
+  - [traefik-forward-auth] TFA now sanitizes incoming Connection headers
+  #1286 (@mesosphere-mergebot)
+
+
 ## stable-1.20-4.1.0, v4.1.0
 
 ### prometheus