v2.30.1 Armory Continuous Deployment Release (Spinnaker™ v1.30.3)

2023/08/24 Release Notes

Note: If you’re experiencing production issues after upgrading Spinnaker, rollback to a previous working version and please report issues to http://go.armory.io/support.

Required Armory Operator version

To install, upgrade, or configure Armory 2.30.1, use Armory Operator 1.70 or later.

Security

Armory scans the codebase as we develop and release software. Contact your Armory account representative for information about CVE scans for this release.

Breaking changes

Breaking changes are kept in this list for 3 minor versions from when the change is introduced. For example, a breaking change introduced in 2.21.0 appears in the list up to and including the 2.24.x releases. It would not appear on 2.25.x release notes.

Orca requires RDBMS configured for UTF-8 encoding

Impact

• 2.28.6 migrates to the AWS MySQL driver from the OSS MySQL drivers. This change is mostly seamless, but we’ve identified one breaking change. If your database was created without utf8mb4 you will see failures after this upgrade. utf8mb4 is the recommended DB format for any Spinnaker database, and we don’t anticipate most users who’ve followed setup instructions to encounter this failure. However, we’re calling out this change as a safeguard.

Update kubectl to 1.20

Impact

With 2.28 of Spinnaker, we’ve updated the kubectl binary to a 1.20 release. You may have potential caching issues as a result due to certain resources in Kubernetes being removed and/or no longer supported. Look for failures in your log files and exclude resources that don’t match your target cluster. For example, adding “PodPreset” to the “omitKinds” on your Kubernetes account configs would cause Spinnaker to skip trying to cache resources that no longer be able to be cached in newer kubernetes releases.

Introduced in: Armory CD 2.28.0

Plugin compatibility

Due to changes in the underlying services, older versions of some plugins may not work with Armory CD 2.30.x or later.

The following table lists the plugins and their required minimum version:

Introduced in: Armory CD 2.28.6

Known issues

Artifact Binding

Customers who utilize parent pipelines to provide artifacts to child pipelines may encounter unexpected errors or results in 2.30+ as child pipelines may not resolve those artifacts correctly.

Affected versions: Armory CD 2.30.0 and later

Using Custom Resource Status Plugin and Scale Agent generates an error

Armory customers that may be using the Custom Resource Status Plugin (2.0.3) may encounter an error “An attempt was made to call a method that does not exist." That error will prevent Armory CDSH from starting.

Affected versions: Armory CD 2.30.0 and later

Workaround: Customers encountering this issue can downgrade to Custom Resource Status Plugin (2.0.2) as an option until Armory CDSH versions 2.30.3+ or 2.28.7+ are available.

1.30+ “required artifacts to bind” breaks pipelines

Expected artifacts can be used in automated triggers and stages, and OSS 1.30 changed the way artifact constraints work on triggers. Unfortunately those changes broke the previous behavior when triggering a pipeline from a stage, and this fix restores the previous behavior.

Affected versions: Armory CD 2.30.0

Clouddriver and Spring Cloud

The Spring Boot version has been upgraded, introducing a backwards incompatible change to the way configuration is loaded in Spinnaker. Users will need to set the spring.cloud.config.enabled property to true in the service settings of Clouddriver to preserve existing behavior. All of the other configuration blocks remain the same.

Affected versions: Armory CD 2.30.0

SpEL expressions and artifact binding

There is an issue where it appears that SpEL expressions are not being evaluated properly in artifact declarations (such as container images) for events such as the Deploy Manifest stage. What is actually happening is that an artifact binding is overriding the image value.

Workaround:

2.27.x or later: Disable artifact binding by adding the following parameter to the stage JSON: enableArtifactBinding: false. This setting only binds the version when the tag is missing, such as image: nginx without a version number.

Affected versions: Armory CD 2.27.x and later

Deprecations

Reference Feature Deprecations and end of support

Early access features enabled by default

Automatically cancel Jenkins jobs

You now have the ability to cancel triggered Jenkins jobs when a Spinnaker pipeline is canceled, giving you more control over your full Jenkins workflow. Learn more about Jenkins + Spinnaker in this Spinnaker changelog.

Enhanced BitBucket Server pull request handling

Trigger Spinnaker pipelines natively when pull requests are opened in BitBucket with newly added events including PR opened, deleted, and declined. See Triggering pipelines with Bitbucket Server in the Spinnaker docs for details

Early access features enabled manually

Dynamic Rollback Timeout

To make the dynamic timeout available, you need to enable the feature flag in Orca and Deck. You need to add this block to orca.yml file if you want to enable the dynamic rollback timeout feature:

rollback:
  timeout:
    enabled: true

On the Orca side, the feature flag overrides the default value rollback timeout - 5 min - with a UI input from the user.

On the Deck side, the feature flag enhances the Rollback Cluster stage UI with timeout input.

window.spinnakerSettings.feature.dynamicRollbackTimeout = true;

The default is used if there is no value set in the UI.

Pipelines-as-Code PR checks

This feature, when enabled, verifies if the author of a commit that changed app parameters has sufficient WRITE permission for that app. You can specify a list of authors whose permissions are not valid. This option’s purpose is to skip permissions checks for bots and tools.

See Permissions check for a commit for details.

Pipelines-as-Code multi-branch enhancement

Now you can configure Pipeline-as-Code to pull Pipelines-as-Code files from multiple branches on the same repo. Cut out the tedious task of managing multiple repos; have a single repo for Spinnaker application pipelines. See Multiple branches for how to enable and configure this feature.

Terraform template fix

Armory fixed an issue with SpEL expression failures appearing while using Terraformer to serialize data from a Terraform Plan execution. With this feature flag fix enabled, you are able to use the Terraform template file provider. Open a support ticket if you need this fix.

Highlighted updates

Clouddriver

• Addressed an issue related to AWS CLI pip installation where users were unable to install aws-cli via pip because a package dependency broke
• Add the possibility to update the default handler for the Global Resource Property Registry. Due to the fact it is not possible to override the default handler behavior from a Spinnaker plugin code, we introduced a new setter function specifically designed to update the default handler for the Global Resource.

Orca

• Waiting executions didn’t follow FIFO. The fix makes changes to push StartWaitingExecutions to the queue only when execution status is not running and disabled concurrent executions, in all other cases no need to push StartWaitingExecutions to the queue.

Terraformer

• Session duration support on AWS roles

Kayenta

• Addressed an issue related to verbose error messages in Kayenta logs

Spinnaker community contributions

There have also been numerous enhancements, fixes, and features across all of Spinnaker’s other services. See the Spinnaker v1.30.3 changelog for details.

Detailed updates

Bill Of Materials (BOM)

Here’s the BOM for this version.

artifactSources:
  dockerRegistry: docker.io/armory
dependencies:
  redis:
    commit: null
    version: 2:2.8.4-2
services:
  clouddriver:
    commit: e83f27627c37921732db249ca823b2e6485a6f97
    version: 2.30.1
  deck:
    commit: 7737669d9a68843f448cc4c93ac2a6ea3485f95e
    version: 2.30.1
  dinghy:
    commit: 5250de80948732c8caac6ffc5293a8af80a63a0f
    version: 2.30.1
  echo:
    commit: 56844c654cd1b3981686933a9d5bc68011ee2bae
    version: 2.30.1
  fiat:
    commit: 30319b57d40a7e9fd61067b7e0d9fb73bf9a6c46
    version: 2.30.1
  front50:
    commit: ec0919166ced870668d787708c249945e9291a01
    version: 2.30.1
  gate:
    commit: 2dc9b4b767ab502faaa1b99c131eb7263cf519da
    version: 2.30.1
  igor:
    commit: 67b4c66f33b8b97b89e6b052654bebfea460a41f
    version: 2.30.1
  kayenta:
    commit: 4d82ef4a72129a715749005235ce0d6ba4778603
    version: 2.30.1
  monitoring-daemon:
    commit: null
    version: 2.26.0
  monitoring-third-party:
    commit: null
    version: 2.26.0
  orca:
    commit: 638d81c8d3186b6deb8829574c6ac5b65c88c94a
    version: 2.30.1
  rosco:
    commit: e74de6eaccbed6301505d9f3d2f6745b410211a7
    version: 2.30.1
  terraformer:
    commit: 650746ae3f596f9c6458987487c81840c85dd2a0
    version: 2.30.1
timestamp: "2023-08-23 17:49:50"
version: 2.30.1

Armory

Armory Clouddriver - 2.30.0…2.30.1

• chore(cd): update base service version to clouddriver:2023.07.19.19.07.34.release-1.30.x (#902)
• chore(cd): update base service version to clouddriver:2023.07.21.18.23.46.release-1.30.x (#905)
• chore(kubectl): upgrade kubectl version from 1.20.6 to 1.22.17 (backport #878) (#917)
• chore(cd): update base service version to clouddriver:2023.08.17.03.37.47.release-1.30.x (#920)
• chore(cd): update base service version to clouddriver:2023.08.17.06.57.33.release-1.30.x (#922)
• chore(cd): update base service version to clouddriver:2023.08.18.20.50.29.release-1.30.x (#923)
• fix: AWS CLI pip installation (#918) (#925)
• chore(cd): update base service version to clouddriver:2023.08.18.23.44.54.release-1.30.x (#926)

Armory Igor - 2.30.0…2.30.1

• chore(cd): update base service version to igor:2023.08.17.02.51.58.release-1.30.x (#480)
• chore(cd): update base service version to igor:2023.08.17.04.46.32.release-1.30.x (#481)
• chore(cd): update base service version to igor:2023.08.18.20.06.35.release-1.30.x (#483)
• chore(cd): update base service version to igor:2023.08.18.23.01.56.release-1.30.x (#484)

Terraformer™ - 2.30.0…2.30.1

• Session duration support on AWS roles (#500) (#503)
• fix: One more session timeout place (#501) (#505)

Armory Rosco - 2.30.0…2.30.1

• chore(cd): update base service version to rosco:2023.08.17.02.48.33.release-1.30.x (#558)
• chore(cd): update base service version to rosco:2023.08.18.20.06.48.release-1.30.x (#559)

Armory Front50 - 2.30.0…2.30.1

• chore(cd): update base service version to front50:2023.08.18.20.06.26.release-1.30.x (#576)
• chore(cd): update base service version to front50:2023.08.18.23.02.05.release-1.30.x (#577)

Armory Deck - 2.30.0…2.30.1

Armory Kayenta - 2.30.0…2.30.1

• chore(cd): update base service version to kayenta:2023.08.17.05.53.17.release-1.30.x (#458)
• chore(cd): update base service version to kayenta:2023.08.19.00.43.42.release-1.30.x (#461)
• chore(cd): update base service version to kayenta:2023.08.22.17.00.47.release-1.30.x (#463)

Dinghy™ - 2.30.0…2.30.1

Armory Fiat - 2.30.0…2.30.1

• chore(cd): update base service version to fiat:2023.08.17.02.48.22.release-1.30.x (#511)
• chore(cd): update base service version to fiat:2023.08.18.20.06.20.release-1.30.x (#512)
• chore(cd): update base service version to fiat:2023.08.22.18.06.01.release-1.30.x (#515)

Armory Orca - 2.30.0…2.30.1

• chore(cd): update base orca version to 2023.08.15.19.18.48.release-1.30.x (#677)
• chore(cd): update base orca version to 2023.08.17.02.56.00.release-1.30.x (#679)
• chore(cd): update base orca version to 2023.08.17.04.55.06.release-1.30.x (#681)
• chore(cd): update base orca version to 2023.08.18.20.16.18.release-1.30.x (#683)
• chore(cd): update base orca version to 2023.08.18.23.14.04.release-1.30.x (#684)

Armory Echo - 2.30.0…2.30.1

• chore(cd): update base service version to echo:2023.08.17.02.52.47.release-1.30.x (#604)
• chore(cd): update base service version to echo:2023.08.17.04.48.12.release-1.30.x (#606)
• chore(cd): update base service version to echo:2023.08.18.20.06.15.release-1.30.x (#607)
• chore(cd): update base service version to echo:2023.08.18.23.04.19.release-1.30.x (#608)

Armory Gate - 2.30.0…2.30.1

• chore(cd): update base service version to gate:2023.08.17.02.52.18.release-1.30.x (#592)
• chore(cd): update base service version to gate:2023.08.17.04.50.02.release-1.30.x (#593)
• chore(cd): update base service version to gate:2023.08.18.20.06.31.release-1.30.x (#595)
• chore(cd): update base service version to gate:2023.08.18.23.02.38.release-1.30.x (#596)

Spinnaker

Spinnaker Clouddriver - 1.30.3

• feat: Add the possibility to update the default handler for the Global Resource Property Registry. (#5963) (#5973)
• fix(gce): remove the duplicate cache attribute “subnet” and update the test (#5977) (#5986)
• chore(dependencies): Autobump korkVersion (#5998)
• chore(dependencies): Autobump fiatVersion (#5999)
• chore(dependencies): Autobump korkVersion (#6001)
• chore(dependencies): Autobump fiatVersion (#6002)

Spinnaker Igor - 1.30.3

• chore(dependencies): Autobump korkVersion (#1155)
• chore(dependencies): Autobump fiatVersion (#1156)
• chore(dependencies): Autobump korkVersion (#1158)
• chore(dependencies): Autobump fiatVersion (#1159)

Spinnaker Rosco - 1.30.3

• chore(dependencies): Autobump korkVersion (#1010)
• chore(dependencies): Autobump korkVersion (#1011)

Spinnaker Front50 - 1.30.3

• chore(dependencies): Autobump korkVersion (#1292)
• chore(dependencies): Autobump fiatVersion (#1293)
• chore(dependencies): Autobump korkVersion (#1295)
• chore(dependencies): Autobump fiatVersion (#1296)

Spinnaker Deck - 1.30.3

Spinnaker Kayenta - 1.30.3

• chore(dependencies): Autobump orcaVersion (#978)
• chore(dependencies): Autobump orcaVersion (#982)
• fix(orca): Fix orca contributors status. (backport #977) (#981)

Spinnaker Fiat - 1.30.3

• chore(dependencies): Autobump korkVersion (#1088)
• chore(dependencies): Autobump korkVersion (#1089)
• fix(ssl): Removed unused deprecated okHttpClientConfig from retrofitConfig. (#1082) (#1091)

Spinnaker Orca - 1.30.3

• fix(waiting-executions) : concurrent waiting executions doesn’t follow FIFO (backport #4415) (#4503)
• chore(dependencies): Autobump korkVersion (#4505)
• chore(dependencies): Autobump fiatVersion (#4506)
• chore(dependencies): Autobump korkVersion (#4509)
• chore(dependencies): Autobump fiatVersion (#4510)

Spinnaker Echo - 1.30.3

• fix(gha): Fix github status log and add tests (#1316) (#1317)
• chore(dependencies): Autobump korkVersion (#1326)
• chore(dependencies): Autobump fiatVersion (#1327)
• chore(dependencies): Autobump korkVersion (#1329)
• chore(dependencies): Autobump fiatVersion (#1330)

Spinnaker Gate - 1.30.3

• chore(dependencies): Autobump korkVersion (#1687)
• chore(dependencies): Autobump fiatVersion (#1688)
• chore(dependencies): Autobump korkVersion (#1690)
• chore(dependencies): Autobump fiatVersion (#1691)