v2.32.1 Armory Continuous Deployment Release (Spinnaker™ v1.32.4)

Release notes for Armory Continuous Deployment v2.32.1.

2024/03/14 release notes

Note: If you experience production issues after upgrading Armory Continuous Deployment, roll back to a previous working version and report issues to http://go.armory.io/support.

Required Armory Operator version

To install, upgrade, or configure Armory CD 2.32.1, use Armory Operator 1.8.6 or later.

Security

Armory scans the codebase as we develop and release software. Contact your Armory account representative for information about CVE scans for this release.

Breaking changes

Breaking changes are kept in this list for 3 minor versions from when the change is introduced. For example, a breaking change introduced in 2.21.0 appears in the list up to and including the 2.24.x releases. It would not appear on 2.25.x release notes.

RetrofitError thrown on login

In versions 2.32.0 and 2.32.1 of Spinnaker, there is an issue with x509 authentication that affects certificates without roles. Certificates lacking roles will fail to authenticate in these versions. However, certificates with roles are not affected and will continue to function properly. Users relying on x509 authentication are advised to exercise caution when upgrading to versions 2.32.0 and 2.32.1. It’s recommended to wait for version 2.32.2 or a later release, which includes a fix for this issue. Testing the upgrade in a non-production environment is advisable to ensure smooth operation.

AWS Lambda plugin migrated to OSS

Starting from Armory version 2.32.0 (OSS version 1.32.0), the AWS Lambda plugin has been migrated to OSS codebase. If you are using the AWS Lambda plugin, you will need to disable/remove it when upgrading to Armory version 2.32.0+ to avoid compatibility issues.

Additionally, the AWS Lambda stages are now enabled using the Deck feature flag feature.lambdaAdditionalStages = true; as shown in the configuration block below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

apiVersion: spinnaker.armory.io/v1alpha2
kind: SpinnakerService
metadata:
  name: spinnaker
spec:
  spinnakerConfig:
    profiles:
      deck:
        settings-local.js: |
          ...
          window.spinnakerSettings.feature.functions = true;
          // Enable the AWS Lambda pipeline stages in Deck using the feature flag
          window.spinnakerSettings.feature.lambdaAdditionalStages = true; 
          ...          
      clouddriver:
        aws:
          enabled: true
          features:
            lambda:
              enabled: true
      ## Remove the AWS Lambda plugin from the Armory CD configuration.
      #gate:
      #  spinnaker:
      #    extensibility:
      #      deck-proxy:
      #        enabled: true
      #        plugins:
      #          Aws.LambdaDeploymentPlugin:
      #            enabled: true
      #            version: <version>
      #      repositories:
      #        awsLambdaDeploymentPluginRepo:
      #          url: https://raw.githubusercontent.com/spinnaker-plugins/aws-lambda-deployment-plugin-spinnaker/master/plugins.json  
      #orca:
      #  spinnaker:
      #    extensibility:
      #      plugins:
      #        Aws.LambdaDeploymentPlugin:
      #          enabled: true
      #          version: <version>
      #          extensions:
      #            Aws.LambdaDeploymentStage:
      #              enabled: true
      #      repositories:
      #        awsLambdaDeploymentPluginRepo:
      #          id: awsLambdaDeploymentPluginRepo
      #          url: https://raw.githubusercontent.com/spinnaker-plugins/aws-lambda-deployment-plugin-spinnaker/master/plugins.json

Related OSS PRs:

Known issues

RetrofitError thrown on login

In versions 2.32.0 and 2.32.1 of Spinnaker, there is an issue with x509 authentication that affects certificates without roles. Certificates lacking roles will fail to authenticate in these versions. However, certificates with roles are not affected and will continue to function properly. Users relying on x509 authentication are advised to exercise caution when upgrading to versions 2.32.0 and 2.32.1. It’s recommended to update on version 2.32.2 or a later release, which includes a fix for this issue. Testing the upgrade in a non-production environment is advisable to ensure smooth operation.

Terraform Show stage failures

In Armory version 2.32.0 and 2.32.1, the Terraform Show stage fails with Buffer errors during execution. It’s recommended to update on version 2.32.2 or a later release, which includes a fix for this issue.

AWS Lambda Stages are not visible in the UI

In Armory version 2.32.0 and 2.32.1, the AWS Lambda stages are not visible in the UI due to an issue with the Deck feature flag. It’s recommended to update on version 2.32.2 or a later release, which includes a fix for this issue.

Highlighted updates

Terraformer support for AWS S3 Artifact Store

OSS Spinnaker 1.32.0 introduced support for artifact storage with AWS S3. This feature compresses embdedded/base64 artifacts to remote/base64 and uploads them to an AWS S3 bucket significantly reducing the artifact size in the execution context.

Armory version 2.32.0 adds support for the same feature for the Terraform Integration stage.

Note: The artifact-store feature is disabled by default. To enable the artifact-store feature the following configuration is required:

apiVersion: spinnaker.armory.io/v1alpha2
kind: SpinnakerService
metadata:
  name: spinnaker
spec:
  spinnakerConfig:
    profiles:
      spinnaker:
        artifact-store:
        enabled: true
        s3:
          enabled: true
          region: <S3Bucket Region>
          bucket: <S3Bucket Name>

When enabling the artifact-store feature it is recommended to deploy the services in this order:

  1. Clouddriver service
  2. Terraformer service
  3. Orca service
  4. Rosco service

Enable Jenkins job triggers for jobs located sub-folders

When defining a Jenkins job in a sub-folder, the path contains forward slashes. By enabling this feature, Armory CD will be able to trigger Jenkins jobs located in sub-folders, correctly matching the job path.

apiVersion: spinnaker.armory.io/v1alpha2
kind: SpinnakerService
metadata:
  name: spinnaker
spec:
  spinnakerConfig:
    profiles:
      echo:
        feature:
          igor:
            jobNameAsQueryParameter: true
      orca:
        feature:
          igor:
            jobNameAsQueryParameter: true
      igor:
        feature:
          igor:
            jobNameAsQueryParameter: true

Pipeline As Code: Bitbucket fallback support for default branch

By default, Dinghy uses the master branch in your repository and fallbacks to main if master doesn’t exist. If you wish to use a different branch in your repository, you can configure that using the repoConfig tag in your YAML configuration.

apiVersion: spinnaker.armory.io/v1alpha2
kind: SpinnakerService
metadata:
  name: spinnaker
spec:
  spinnakerConfig:
    profiles:
      dinghy:
        repoConfig:
        - branch: some_branch
          provider: bitbucket-server
          repo: my-bitbucket-repository

Spinnaker community contributions

There have also been numerous enhancements, fixes, and features across all of Spinnaker’s other services. See the Spinnaker v1.32.4 changelog for details.

Detailed updates

Bill Of Materials (BOM)

Expand to see the BOM
artifactSources:
  dockerRegistry: docker.io/armory
dependencies:
  redis:
    commit: null
    version: 2:2.8.4-2
services:
  clouddriver:
    commit: b29acea67a40b4145431137ba96454c1d1bf0d73
    version: 2.32.1
  deck:
    commit: e7c8c0982afe9a49ab6c3d230f3aaa38e874eb30
    version: 2.32.1
  dinghy:
    commit: f5b14ffba75721322ada662f2325e80ec86347de
    version: 2.32.1
  echo:
    commit: 9d2abeeea4341e5ba94654925ba6488a9038af3f
    version: 2.32.1
  fiat:
    commit: 3f3fe6bf09708847a0f853bc74f6755920a4312b
    version: 2.32.1
  front50:
    commit: ba318cd2c445f14e5d6c3db87fa1658549385403
    version: 2.32.1
  gate:
    commit: dd64887668a2e2212667ca942e0bfd303aa34c60
    version: 2.32.1
  igor:
    commit: 9339ab63ab3d85ebcb00131033d19f26ad436f05
    version: 2.32.1
  kayenta:
    commit: bccd150fcc8a7cb7df537ec6269bce5d2843c703
    version: 2.32.1
  monitoring-daemon:
    commit: null
    version: 2.26.0
  monitoring-third-party:
    commit: null
    version: 2.26.0
  orca:
    commit: 9d45d87956abd9aad29ef8f9858e602e72d78c3c
    version: 2.32.1
  rosco:
    commit: dfe611ffdd2cf9ae7c524fb9970af47350ca5e96
    version: 2.32.1
  terraformer:
    commit: 6dbdb8b4c277cca4285b4d29d10f6cf3765f7590
    version: 2.32.1
timestamp: "2024-03-12 14:53:28"
version: 2.32.1

Armory

Armory Front50 - 2.32.0…2.32.1

  • chore(cd): update armory-commons version to 3.15.3 (#659)
  • chore(cd): update armory-commons version to 3.15.4 (#660)
  • Fixing gcs dependencies (#662)
  • chore(armory-commons): Update armory-commons to 3.15.4 (#665)
  • chore(cd): update base service version to front50:2024.03.08.16.52.13.release-1.32.x (#666)
  • chore(cd): update base service version to front50:2024.03.08.19.18.53.release-1.32.x (#667)

Armory Clouddriver - 2.32.0…2.32.1

  • chore(cd): update base service version to clouddriver:2024.02.27.14.37.13.release-1.32.x (#1083)
  • chore(cd): update armory-commons version to 3.15.3 (#1086)
  • chore(cd): update armory-commons version to 3.15.4 (#1088)
  • chore(cd): update base service version to clouddriver:2024.03.08.19.52.28.release-1.32.x (#1091)

Armory Deck - 2.32.0…2.32.1

Armory Orca - 2.32.0…2.32.1

  • chore(cd): update base orca version to 2024.02.27.15.33.36.release-1.32.x (#833)
  • chore(cd): update armory-commons version to 3.15.3 (#836)
  • chore(cd): update armory-commons version to 3.15.4 (#837)
  • chore(cd): update base orca version to 2024.03.08.16.54.30.release-1.32.x (#840)
  • chore(cd): update base orca version to 2024.03.08.19.21.42.release-1.32.x (#841)

Dinghy™ - 2.32.0…2.32.1

Armory Gate - 2.32.0…2.32.1

  • fix: esapi CVE scan report (#602) (#700)
  • chore(cd): update armory-commons version to 3.15.4 (#704)
  • chore(cd): update base service version to gate:2024.03.08.19.17.43.release-1.32.x (#707)

Armory Rosco - 2.32.0…2.32.1

  • chore(cd): update armory-commons version to 3.15.3 (#647)
  • chore(cd): update armory-commons version to 3.15.4 (#648)
  • chore(cd): update base service version to rosco:2024.03.08.16.49.31.release-1.32.x (#650)

Armory Echo - 2.32.0…2.32.1

  • chore(cd): update base service version to echo:2024.02.27.15.33.43.release-1.32.x (#692)
  • chore(cd): update armory-commons version to 3.15.3 (#694)
  • chore(cd): update armory-commons version to 3.15.4 (#695)
  • chore(cd): update base service version to echo:2024.03.08.16.50.19.release-1.32.x (#697)
  • chore(cd): update base service version to echo:2024.03.08.19.17.18.release-1.32.x (#698)

Terraformer™ - 2.32.0…2.32.1

  • fix(remote/artifacts): Passing user to clouddriver when using remote store (#548) (#549)

Armory Fiat - 2.32.0…2.32.1

  • chore(cd): update armory-commons version to 3.15.4 (#587)
  • chore(cd): update base service version to fiat:2024.03.08.16.48.59.release-1.32.x (#590)

Armory Kayenta - 2.32.0…2.32.1

  • chore(cd): update armory-commons version to 3.15.4 (#524)
  • chore(cd): update base service version to kayenta:2024.03.08.20.48.11.release-1.32.x (#525)

Armory Igor - 2.32.0…2.32.1

  • chore(cd): update base service version to igor:2024.02.27.15.32.19.release-1.32.x (#579)
  • chore(cd): update armory-commons version to 3.15.3 (#581)
  • chore(cd): update armory-commons version to 3.15.4 (#582)
  • chore(cd): update base service version to igor:2024.03.08.16.52.17.release-1.32.x (#584)
  • chore(cd): update base service version to igor:2024.03.08.19.18.39.release-1.32.x (#585)

Spinnaker

Spinnaker Front50 - 1.32.4

  • chore(dependencies): Autobump korkVersion (#1439)
  • chore(dependencies): Autobump fiatVersion (#1440)

Spinnaker Clouddriver - 1.32.4

  • fix: Change the agent type name to not include the account name since this would generate LOTS of tables and cause problems long term (#6158) (#6165)
  • chore(dependencies): Autobump korkVersion (#6169)
  • chore(dependencies): Autobump fiatVersion (#6170)

Spinnaker Deck - 1.32.4

Spinnaker Orca - 1.32.4

  • fix(jenkins): Enable properties and artifacts with job name as query parameter (#4661) (#4664)
  • chore(dependencies): Autobump korkVersion (#4667)
  • chore(dependencies): Autobump fiatVersion (#4668)

Spinnaker Gate - 1.32.4

  • chore(dependencies): Autobump korkVersion (#1773)
  • chore(dependencies): Autobump fiatVersion (#1774)

Spinnaker Rosco - 1.32.4

  • chore(dependencies): Autobump korkVersion (#1077)

Spinnaker Echo - 1.32.4

  • fix(jenkins): Enable properties and artifacts with job name as query parameter (#1393) (#1396)
  • chore(dependencies): Autobump korkVersion (#1398)
  • chore(dependencies): Autobump fiatVersion (#1399)

Spinnaker Fiat - 1.32.4

  • chore(dependencies): Autobump korkVersion (#1145)

Spinnaker Kayenta - 1.32.4

  • chore(dependencies): Autobump orcaVersion (#1023)

Spinnaker Igor - 1.32.4

  • fix(jenkins): Enable properties and artifacts with job name as query parameter (#1230) (#1233)
  • chore(dependencies): Autobump korkVersion (#1235)
  • chore(dependencies): Autobump fiatVersion (#1236)

Last modified April 30, 2024: (fa6cb0c5)