v3.2.0

TKS - Release v3.2

TKS는 SK텔레콤에서 개발한 GitOps, Declarative 방식의 Kubernetes 관리 및 다양한 앱현대화 서비스를 제공하는 플랫폼입니다. SKT에서는 TKS 소프트웨어를 기반으로 1) TKS 클라우드서비스 (SaaS)와 2) TKS 엔터프라이즈솔루션 (구축형상품)을 출시하여 제공하고 있습니다.

본 v3.2.0 릴리즈에는 Kustomize, Helm, Argo Workflow등을 활용하여 복잡한 소프트웨어들을 논리적으로 그룹핑하여 단순화시키고 이를 선언적으로 관리하기 위한 기술인 Decapod를 기반으로 하여, 인프라, Kubernetes플랫폼, 그리고 플랫폼 운영 및 앱현대화를 위해 필요한 소프트웨어 세트들 (LMA, MSA)을 일괄 자동 배포/관리하는 "스택" 기능이 추가되었습니다. 또한, 모든 기능들은 API로 제공됩니다.

이번 릴리즈에서 추가된 신규 기능들은 다음과 같습니다.

1. TKS UI/UX 가 보다 직관적으로 리뉴얼 되었습니다.
2. kubernetes 보안 관리를 위한 정책 기능이 추가되었습니다.
3. 사용자별 kubernetes 접근 권한 관리가 가능하도록 Authrization/Authentication 기능을 강화하였습니다.
4. 이 외에 많은 버그 수정과 안정화 작업을 진행하였습니다.

감사합니다.

What's Changed

• 20231108 release to deveop by @ktkfree in #314
• 231113 main to develop back merge ( v3.1.2 ) by @ktkfree in #324
• 231117 main to develop back merge by @ktkfree in #331
• 231120 main to develop back merge ( v3.1.2 ) by @ktkfree in #334
• Policy serving by @intelliguy in #256
• 20240115 main to develop by @ktkfree in #343
• add missing oidc provider deletion by @zugwan in #344
• feature. change harbor url to harbor.taco-cat.xyz by @ktkfree in #345
• app-serving: add missing param 'project_id' by @robertchoi80 in #349
• policy-serving: add cluster cr and tks info on label of the namespace by @intelliguy in #346
• feature. add policy for creating stack by @ktkfree in #347
• add keycloak setting during importing k8s cluster by @cho4036 in #348
• bugfix. use grafana ep retrieved from loadbalancer by @cho4036 in #350
• bugfix. fix grammar error by @cho4036 in #351
• bugfix. fix wrong parameter by @cho4036 in #352
• policy: bugfix to find the policy namespace with the organization by @intelliguy in #353
• policy: bugfix on cluster cr by @intelliguy in #354
• policy: bugfix to find policy namespace by @intelliguy in #355
• trivial. fix syntax error by @ktkfree in #356
• Fix policy by @ktkfree in #357
• feature. add applying policy step when creating stack by @ktkfree in #358
• trivial. bugfix for creating stack by @ktkfree in #359
• feature. remove policies argo apps when stack deleting by @ktkfree in #360
• tirivial. add policy_ids to createCluster workflow by @ktkfree in #361
• trivial. fix typo by @ktkfree in #362
• trivial. fix typo by @ktkfree in #363
• trivial. fix typo by @ktkfree in #366
• feature. fix typo by @ktkfree in #367
• 20240517 develop to release ( v4.0.0 ) by @ktkfree in #368
• trivial. remove test code by @ktkfree in #370
• eks multi-tenancy 오류 수정 by @cho4036 in #371
• Cluster Admin 권한 추가에 따른 wf 수정 by @cho4036 in #369
• Create secret including account information for opa gatekeeper by @cho4036 in #364
• Fix typo by @ktkfree in #372
• 240521 develop to release by @ktkfree in #373
• feature. add step for unsetting policy crs by @ktkfree in #375

Full Changelog: v3.1.3...v3.2.0

v3.1.3

TKS - Release v3.1

TKS는 SK텔레콤에서 개발한 GitOps, Declarative 방식의 Kubernetes 관리 및 다양한 앱현대화 서비스를 제공하는 플랫폼입니다. SKT에서는 TKS 소프트웨어를 기반으로 1) TKS 클라우드서비스 (SaaS)와 2) TKS 엔터프라이즈솔루션 (구축형상품)을 출시하여 제공하고 있습니다.

본 v3.1 릴리즈에는 Kustomize, Helm, Argo Workflow등을 활용하여 복잡한 소프트웨어들을 논리적으로 그룹핑하여 단순화시키고 이를 선언적으로 관리하기 위한 기술인 Decapod를 기반으로 하여, 인프라, Kubernetes플랫폼, 그리고 플랫폼 운영 및 앱현대화를 위해 필요한 소프트웨어 세트들 (LMA, MSA)을 일괄 자동 배포/관리하는 "스택" 기능이 추가되었습니다. 또한, 모든 기능들은 API로 제공됩니다.

이번 릴리즈에서 추가된 신규 기능들은 다음과 같습니다.

1. control-plane 까지 TKS 가 직접 관리하는 provider 타입이 추가되었으며, AWS provider에 EKS 와 함께 제공됩니다.
2. On-prem/Private Cloud 지원을 위한 BYOH (Bring Your Own Kubernetes) 프로바이더 기능이 추가되었습니다.
3. 스택 UI/UX 를 보다 직관적으로 리뉴얼 하였습니다.
4. 이 외에 많은 버그 수정과 안정화 작업을 진행하였습니다.

감사합니다.

What's Changed

• deploy_apps: lma: fix thanos storegateway permissions for S3 by @zugwan in #303
• bugfix. change static keycloak domain render directory to dynamic by @cho4036 in #304
• bugfix. not supported in docker image. change yq -> sed by @cho4036 in #306
• fix condition for removing cluster-autoscaler by @zugwan in #310
• bugfix. fix typo by @ktkfree in #311
• render: update render to v3.3.0 by @zugwan in #312
• LMA: Decapod 렌더링 대기 워크플로우 템플릿 추가 및 사용 by @zugwan in #313
• 20231107 develop to release by @ktkfree in #308
• 20231107 release to main by @ktkfree in #309
• bugfix. change variable "postgresql-password" to "postgre-password" by @ktkfree in #315
• 20231109 release to main by @ktkfree in #316
• fix kubeconfig generation for cluster-autoscaler by @zugwan in #317
• 20231109 release to main by @ktkfree in #318
• Fix cluster autoscaler serviceaccount token by @zugwan in #319
• 20231109 release to main - minor fix by @ktkfree in #320
• tks-cluster: fix an admin cluster type check error by @zugwan in #321
• feture. remove creating tks-endpoint-secret by @ktkfree in #322
• 20231113 release to main ( v.3.1.2 ) by @ktkfree in #323

Full Changelog: v3.0.0...v3.1.3

v3.0.0

TKS - Release v3.0.0

TKS는 SK텔레콤에서 개발한 GitOps, Declarative 방식의 Kubernetes 관리 및 다양한 앱현대화 서비스를 제공하는 플랫폼입니다. SKT에서는 TKS 소프트웨어를 기반으로 1) TKS 클라우드서비스 (SaaS)와 2) TKS 엔터프라이즈솔루션 (구축형상품)을 출시하여 제공하고 있습니다.

본 v3.0.0 릴리즈에는 Kustomize, Helm, Argo Workflow등을 활용하여 복잡한 소프트웨어들을 논리적으로 그룹핑하여 단순화시키고 이를 선언적으로 관리하기 위한 기술인 Decapod를 기반으로 하여, 인프라, Kubernetes플랫폼, 그리고 플랫폼 운영 및 앱현대화를 위해 필요한 소프트웨어 세트들 (LMA, MSA)을 일괄 자동 배포/관리하는 "스택" 기능이 추가되었습니다. 또한, 모든 기능들은 API로 제공됩니다.

이번 릴리즈에서 추가된 신규 기능들은 다음과 같습니다.

1. AWS의 EKS연동 및 On-prem/Private Cloud 지원을 위한 BYOH (Bring Your Own Kubernetes) 프로바이더 지원기능이 추가되었습니다.
2. LMA (Logging, Monitoring, Alerting) 세트에서 Elastic Search와 Kibana가 Deprecated되고, Grafana Loki와 Thanos가 신규로 도입되었습니다. 또한, Thanos, Loki를 기반으로 한 멀티클러스터 통합 모니터링 체계를 Reference Archiecture로 제공합니다.
3. Service Mesh에서 Tracing Log 저장을 위한 Elastic Search가 Deprecated 되고, Cassandra가 신규 도입되었습니다.
4. GitOps를 위해 Gitea와 Harbor가 기본 저장소로 제공됩니다.
5. 멀티테넌시를 위한 Organization이 최초로 적용되었고, Organization별 사용자 등록, 관리가 가능합니다.
6. SaaS형 서비스인 TKS 클라우드서비스를 위한 Admin, 사용자 포탈 UI가 신규로 제공됩니다.
7. 이 외에 많은 버그수정과 안정화 작업을 진행하였습니다.

감사합니다.

What's Changed

• Add kubeconfig for linting workflow template by @Jaesang in #84
• Add sonobuoy test by @robertchoi80 in #85
• add Dockerfiles for workflows by @robertchoi80 in #86
• Get thanos sidecar LB endpoint by @robertchoi80 in #82
• use decapod-site when creating contract repo by @robertchoi80 in #87
• create-cluster-repo: extend deadline to prevent unnecessary failure by @zugwan in #88
• Merge Release-v2 to main by @robertchoi80 in #91
• create-tks-usercluster: change cluster autoscaler rbac installation order by @zugwan in #90
• Add TKS End-to-end test workflow template by @zugwan in #89
• feature. add service validation workflow to e2e test by @ktkfree in #95
• add slack notification to E2E test workflow by @robertchoi80 in #97
• bugfix. move servicemesh validation by @ktkfree in #98
• create new workflow to render manifests by @seungkyua in #94
• support multi cluster api infra providers by @zugwan in #96
• show duration in human-readable manner by @robertchoi80 in #99
• add timeout to busy-wait loops by @robertchoi80 in #101
• Add app-serving workflow by @robertchoi80 in #92
• Supports template configuration with different infrastructure providers by @zugwan in #100
• bugfix. validation error fix. by @ktkfree in #103
• Revert "use the first group of the cluster UUID as the cluster name" by @zugwan in #104
• bugfix. rename render directory (.github to _github) by @ktkfree in #107
• app-serving: build와 deploy 단계 분리 by @robertchoi80 in #106
• using structured kustomize document on infra-selection by @intelliguy in #105
• bugfix. remove substr function for cluster id by @ktkfree in #108
• remove usercluster: fix getting infra provider of the cluster by @zugwan in #109
• install local-path-provioner for a byoh cluster by @intelliguy in #102
• bugfix. change argocd app name by @ktkfree in #110
• Use helm chart for deployment by @robertchoi80 in #112
• Cluster template 지원 및 contract/cluster Git 저장소에 META 정보 추가 by @zugwan in #114
• tests: seperate e2e test sites into aws and aws-msa by @zugwan in #115
• tks stack 워크플로우 템플릿 추가 by @zugwan in #116
• feature. add contractId to workflow template for creating stack by @ktkfree in #117
• App-serving: update 및 delete 로직 구현 by @robertchoi80 in #113
• Add param to stack by @ktkfree in #118
• remove unnecessary quote characters from image definitions by @zugwan in #119
• bugfix. fixes unittests by @ktkfree in #120
• feature. add workflow for import cluster by @ktkfree in #122
• bugfix. disable ssl for sso by @ktkfree in #123
• bugfix. change credential port to 443 from 0 by @ktkfree in #124
• Appserving: add PV support by @robertchoi80 in #121
• rename task_type to type by @robertchoi80 in #125
• serivcemesh portal nodeSelector by @seungkyua in #126
• manifests 리뷰용 PR 생성 / 클러스터 import 후 자동 manifests 생성 by @zugwan in #127
• support legacy spring app by @robertchoi80 in #128
• feature. update docker image from v1 to v2 by @ktkfree in #129
• temporary fix. remove kubed from "create-usercluster-wftpl" by @ktkfree in #130
• feature. add variable for control plane replicas by @ktkfree in #131
• AppServing: handle configmap and secrets by @robertchoi80 in #132
• add step to tests by @ktkfree in #133
• git 관련 자원들을 중립적인 용어로 사용 by @zugwan in #134
• tks-cluster: fix wrong machinepool name by @zugwan in #136
• add gitea sync mirror workflow by @zugwan in #135
• EKS 클러스터 설치 지원 by @zugwan in #138
• app_serving: implement blue-green deployment by @robertchoi80 in #137
• bugfix. minor fixes by @ktkfree in #140
• change original images url to harbor image url by @seungkyua in #142
• Gitea 렌더링 (site 저장소 -> manifests 저장소) 자동 반영 by @zugwan in #141
• Gitea를 기본 Git 저장소로 사용 by @zugwan in #143
• fix missing image url by @seungkyua in #144
• Gitea 클러스터 저장소 삭제 수정 by @zugwan in #145
• use tigera-operator for calico installation by @zugwan in #146
• tks-cluster: fix calico uninstall by @zugwan in #147
• trivial. update render docker image by @ktkfree in #148
• update decapod-render to v3.1.2 by @zugwan in #149
• Primary cluster 생성을 위한 workflow template 추가 by @intelliguy in #151
• install ack and their aws resources by @intelliguy in #150
• Tks api migration by @ktkfree in #152
• Update tks-primary-cluster.yaml by @ktkfree in #153
• Primay_cluster: 부족한 부분들 추가... by @intelliguy in #154
• using aws controller kubernetes for s3 by @intelliguy in #155
• Integration tks api by @ktkfree in #156
• Test tks api by @ktkfree in #157
• Rename cloud account by @ktkfree in #158
• add workflow templates for multi-tenancy and cloud account by @zugwan in #160
• E2etest auto creating organization by @ktkfree in #159
• add support for multi-tenancy aws clusters by @zugwan in #162
• feature. add site-value for creating stack by @ktkfree in #163
• TKS 내부 사용 Cluster kubeconfig 시크릿 일원화 by @zugwan in #164
• tks-cluster: use sts assume-role to access multitenancy AWS resources by @zugwan in #165
• cloud-accouts: add a policy for multi-tenancy by @zugwan in #166
• cloud-accounts: use a secret for tks AWS account and user by @zugwan in #167
• git-repo: remove a unused decapod global variable by @zugwan in #169
• change to u...

v2.0.0

SKT Container Platform - Release v2.0.0

SK텔레콤에서 GitOps, Declarative 방식의 Kubernetes 서비스 플랫폼이 릴리즈 되었습니다. 이번 릴리즈를 통해서 사용자들은 Production level의 Kubernetes와 다양한 Add-on 서비스들을 GitOps 기반으로 배포관리 할 수 있습니다. 또한, 해당 기능들은 API로도 제공되어 CaaS (Container as a Service)로 활용 할 수 있습니다.

본 릴리즈에는 Kustomize, Helm, Argo Workflow등을 활용하여 복잡한 소프트웨어들을 논리적으로 그룹핑하여 단순화시키고 이를 선언적으로 관리하기 위한 Everything on Kubernetes 기술인 Decapod를 기반으로 LMA (logging, monitoring, alerting) 과 Service Mesh를 배포, 사용할 수 있으며, Kubernetes Cluster-API와 Argo CD를 활용하여 Multi/Hybrid 클라우드 환경에서 손쉽게 Kubernetes Cluster 대한 라이프사이클을 관리할 수 있는 Kubernetes Anywhere 기술이 포함되어 있습니다.

자세한 릴리즈 내용은 릴리즈 문서를 참고하시기 바랍니다.

What's Changed

• add workflows for manipulating github contract repos by @zugwan in #2
• TACODEV-909: create user cluster and other by @intelliguy in #4
• github_repo: fix repo change by @zugwan in #6
• add new workflow templates by @robertchoi80 in #5
• change tks-info port to 9110 by @zugwan in #7
• add tks servicemesh workflow template by @seungkyua in #8
• add taco-tls-enabled label to istio-system namespace by @seungkyua in #10
• create-usercluster: use cluster.local domain for new cluster by @zugwan in #12
• Add deploying ingress for temporary by @seungkyua in #13
• Add LMA namespace before deploy lma apps by @Jaesang in #14
• add sealed-secrets setup workflow by @robertchoi80 in #11
• fix cluster name substitution by @zugwan in #16
• create-usercluster: use echo command instead of xargs by @zugwan in #17
• specify namespaces when deploying secrets by @robertchoi80 in #15
• tks-lma-federation: use cluster id instead name by @zugwan in #19
• add workflow to generate and setup ElasticLoadBalancer by @intelliguy in #18
• add workflow to remove lma group by @robertchoi80 in #21
• 사용자 클러스터 생성 시간 단축 by @zugwan in #23
• Add update cluster status wftpl by @zugwan in #22
• Aws infra by @intelliguy in #24
• change tks site repo structures by @zugwan in #25
• Fix crossplane operation by @zugwan in #26
• fix elb conf: use tcp only by @zugwan in #27
• Refactor createapp by @robertchoi80 in #28
• Reflect recent change of decapod-flow by @robertchoi80 in #29
• Use hanu-reference template as standard user site template by @robertchoi80 in #30
• trivial: apply recently changed app_group name by @robertchoi80 in #31
• dynamically merge hanu-reference and template-std by @robertchoi80 in #32
• Add lint test for WorkflowTemplate by @Jaesang in #33
• update workflows: sealed-secrets & others by @robertchoi80 in #34
• 20220210. bugbash fixes by @ktkfree in #35
• Add wf template for deleting cluster git repo by @Jaesang in #38
• deploy crd-only app for sealed-secrets by @robertchoi80 in #37
• use new argocd-cli image by @robertchoi80 in #39
• Bug / Workaround. remove normal(user) node from ELB attachment list. by @ktkfree in #40
• add aws-ebs-csi-driver installation by @zugwan in #42
• call remove-lma-fed WF to delete LMA group by @robertchoi80 in #41
• Refactoring Service-Mesh workflow for tks and decapod by @seungkyua in #36
• Add WF to remove-user-cluster by @robertchoi80 in #43
• bugfix: update logic to get cluster kubeconfig by @robertchoi80 in #44
• delete SERVICE_MESH endpoint by @seungkyua in #45
• add metricserver by @intelliguy in #46
• Replace site-values with user-provided params by @robertchoi80 in #47
• servicemesh dashboard workflow by @seungkyua in #49
• update workflow to use github-user and github-token by @intelliguy in #50
• create-tks-usercluster: enable cluster-autoscaler by @zugwan in #51
• add internal communication for gathering metrics by @intelliguy in #48
• tks-cluster: create-tks-usercluster: fix kubeconfig secret key name by @zugwan in #53
• feature. add tks-portal flow. by @ktkfree in #52
• change name for configmap (config -> kubeconfig-adm) by @intelliguy in #56
• add workflow to initilize the aws-cli config by @intelliguy in #54
• Tks cluster fix prepare cluster autoscaler by @zugwan in #55
• only pass contract_id to GetClusters RPC call by @robertchoi80 in #57
• add wf for deleting inter-connection by @intelliguy in #58
• remove apps before cluster removal by @robertchoi80 in #60
• add realm name to keycloak cr by @seungkyua in #59
• feature. remove servicemesh-portal from depod. by @ktkfree in #61
• bugfix: delete a security gorup itself. by @intelliguy in #62
• install grafana by @seungkyua in #64
• Bugfix keycloak account by @ktkfree in #65
• install snapshot crds before ebs-csi-driver by @robertchoi80 in #63
• deploy kubed while installing usercluster by @robertchoi80 in #66
• bugfix: read kubeconfig from cluster namespace by @robertchoi80 in #67
• bugfix: update-decapod-manifest 호출시 param 수정 by @robertchoi80 in #69
• use admin cluster name in the default namespace by @zugwan in #70
• Fix get tks admin cluster name by @zugwan in #71
• feature. add revision for creating contract repository by @ktkfree in #72
• fix install grafana by @seungkyua in #74
• bugfix. resolve error of push by @ktkfree in #75
• multi keycloak client id by @seungkyua in #76
• disable autosync of all argocd apps by @robertchoi80 in #77
• feature. remove tks-appgroup-status I/F by @ktkfree in #73
• change site name to decapod-reference by @zugwan in #79
• handle all corner cases when updating thanos-sc endpoints by @robertchoi80 in #78
• bugfix. fix client id by @ktkfree in #80
• bugfix. change privilege to public by @ktkfree in #81

New Contributors

• @intelliguy made their first contribution in #4

Full Changelog: https://github.com/openinfradev/tks-flow/commits/v2.0.0