Release Notes

6.0.1 (2024-10-22)

Patch notes

• Patches GitLab to 17.2.9 to address critical CVE: https://about.gitlab.com/releases/2024/10/09/patch-release-gitlab-17-4-2-released/
• Fixed a bug that prevented upgrading from prior versions of the SmoothGlue package

The following are the v6.0.0 release notes for convenience:

🚨 Upgrade Notices

• With the 6.0.0 release, Structsure Enterprise is now SmoothGlue Enterprise!
  • Structsure Enterprise Developer Collaboration Environment is now known as SmoothGlue Build Enterprise.
  • Structsure Enterprise Deploy Target is now known as SmoothGlue Run Enterprise.
• On new installations making use of automatic Keycloak configuration, the default realm will now be named smoothglue instead of structsure. Keycloak should use redirect to this realm automatically, but any URL references to the structsure realm should be updated to point to the smoothglue realm on new installs.

  • For existing Structsure Enterprise installations making use of the automatic Keycloak realm configuration feature, you should add the following configuration to your bigbang-values.yaml in order to continue using your existing Keycloak realm:

    addons:
      keycloak:
        values:
          realms:
            - realmName: structsure

📦 SmoothGlue Enterprise Features

• The following applications have updated SmoothGlue branding/theming:
  • SmoothGlue Console
  • Keycloak
  • ArgoCD
• External Secrets Operator: Now officially bundled and supported as a SmoothGlue Enterprise component.
  • External Secrets Operator (ESO) is not installed by default on either Build or Run installations and must be enabled explicitly.

    • ESO can be enabled by setting EXTERNAL_SECRETS_ENABLED to true in your Zarf config, or by adding the following settings to your bigbang-values.yaml:

      addons:
        externalSecrets:
          enabled: true
  • If you have previously manually installed External Secrets Operator, you may need to manually update Helm annotations to allow existing resources to be adopted.
• IaC: The SmoothGlue Enterprise IaC now includes an optional Terragrunt module to create a public or private Route 53 zone associated with the cluster. Please see the documentation for more information on how to enable and configure this module.
• IaC: SmoothGlue Enterprise now has provides an optional Terragrunt module to create an RDS database for Nexus IQ. Please see the documentation for more information on how to enable and configure this module.

⏩ Upgraded Packages

• Upgraded console to v5.57.x
• This release includes Big Bang Version 2.37.0. For more details on the features and updates included in Big Bang Version 2.37.0, please refer to the Big Bang release notes.
• Upgraded cert-manager to v1.15.3

🪲 Bug Fixes

• When migrating an existing Structsure Enterprise install to SmoothGlue Enterprise v6.0.0, a new Zarf Helm chart is deployed within the default namespace with an updated Crossplane Configuration for structsure-enterprise. The Helm chart fails to automatically patch the Configuration resource properly, even though it adopts the existing resource as expected. To work around this, a Zarf command will override the Configuration using a kubectl patch this release. This will not affect future releases.
• Fixed an issue preventing user-provided TLS certificates using ZARF_VAR_CERT and ZARF_VAR_KEY from being consumed during the Zarf package deploy. If a user-provided certificate is provided, it will take precedence; otherwise, the full order of precedence is as follows, from highest to lowest:
  • certs/keys provided using ZARF_VAR_CERT or ZARF_VAR_KEY,
  • values provided to Istio using bigbang-secrets.yaml,
  • existing Istio secrets on the cluster, and finally
  • an automatically generated TLS certificate.
• IaC: In VPCs with multiple CIDR ranges, the default security group rules for EKS clusters will now allow access from all CIDR ranges associated with the VPC, rather than just the primary CIDR block.

❗ Known Issues

• Although many visible references to Structsure Enterprise have been updated to SmoothGlue Enterprise, some resources will continue to use the older Structsure naming, largely for compatibility reasons. If any of the below listed resources still refer to Structsure, this is expected. These resources may be migrated to use the updated SmoothGlue branding in future releases.
  • When creating the smoothglue Keycloak realm, the default Keycloak configuration will continue to create groups for _structsureAdmins and _structsureAudit for use with Console.
  • Kubernetes objects which were previously deployed to the structsure-system namespace will continue to be deployed there, such as -overrides ConfigMaps and Secrets, as well as Crossplane and Flux resources.

🌐 Compatibility

• The packages for this release were built using Zarf v0.32.6.
• The packages were tested across the following Kubernetes distributions:
  • RKE2: v1.29.9-rke2r1
  • K3S: v1.30.5+k3s1
  • EKS: v1.29.8
• The following AMI versions were used for testing:
  • RKE2 AMI: structsure-rke2-v1.29.9-rke2r1-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-40Z
  • EKS AMI: structsure-eks-1.29.8-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-55Z
  • Base AMI: Rocky-8-EC2-LVM-8.10-20240528.0.x86_64

🔗 Helpful Links

• Refer to the SmoothGlue Enterprise documentation for additional guidance.
• For details on the Big Bang release, see the Big Bang Release Notes.

6.0.0 (2024-10-16)

🚨 Upgrade Notices

• With the 6.0.0 release, Structsure Enterprise is now SmoothGlue Enterprise!
  • Structsure Enterprise Developer Collaboration Environment is now known as SmoothGlue Build Enterprise.
  • Structsure Enterprise Deploy Target is now known as SmoothGlue Run Enterprise.
• On new installations making use of automatic Keycloak configuration, the default realm will now be named smoothglue instead of structsure. Keycloak should use redirect to this realm automatically, but any URL references to the structsure realm should be updated to point to the smoothglue realm on new installs.
  • For existing Structsure Enterprise installations making use of the automatic Keycloak realm configuration feature, you should add the following configuration to your bigbang-values.yaml in order to continue using your existing Keycloak realm:

    addons:
      keycloak:
        values:
          realms:
            - realmName: structsure

📦 SmoothGlue Enterprise Features

• The following applications have updated SmoothGlue branding/theming:
  • SmoothGlue Console
  • Keycloak
  • ArgoCD
• External Secrets Operator: Now officially bundled and supported as a SmoothGlue Enterprise component.
  • External Secrets Operator (ESO) is not installed by default on either Build or Run installations and must be enabled explicitly.
    • ESO can be enabled by setting EXTERNAL_SECRETS_ENABLED to true in your Zarf config, or by adding the following settings to your bigbang-values.yaml:

      addons:
        externalSecrets:
          enabled: true
  • If you have previously manually installed External Secrets Operator, you may need to manually update Helm annotations to allow existing resources to be adopted.
• IaC: The SmoothGlue Enterprise IaC now includes an optional Terragrunt module to create a public or private Route 53 zone associated with the cluster. Please see the documentation for more information on how to enable and configure this module.
• IaC: SmoothGlue Enterprise now has provides an optional Terragrunt module to create an RDS database for Nexus IQ. Please see the documentation for more information on how to enable and configure this module.

⏩ Upgraded Packages

• Upgraded console to v5.57.x
• This release includes Big Bang Version 2.37.0. For more details on the features and updates included in Big Bang Version 2.37.0, please refer to the Big Bang release notes.
• Upgraded cert-manager to v1.15.3

🪲 Bug Fixes

• When migrating an existing Structsure Enterprise install to SmoothGlue Enterprise v6.0.0, a new Zarf Helm chart is deployed within the default namespace with an updated Crossplane Configuration for structsure-enterprise. The Helm chart fails to automatically patch the Configuration resource properly, even though it adopts the existing resource as expected. To work around this, a Zarf command will override the Configuration using a kubectl patch this release. This will not affect future releases.
• Fixed an issue preventing user-provided TLS certificates using ZARF_VAR_CERT and ZARF_VAR_KEY from being consumed during the Zarf package deploy. If a user-provided certificate is provided, it will take precedence; otherwise, the full order of precedence is as follows, from highest to lowest:
  • certs/keys provided using ZARF_VAR_CERT or ZARF_VAR_KEY,
  • values provided to Istio using bigbang-secrets.yaml,
  • existing Istio secrets on the cluster, and finally
  • an automatically generated TLS certificate.
• IaC: In VPCs with multiple CIDR ranges, the default security group rules for EKS clusters will now allow access from all CIDR ranges associated with the VPC, rather than just the primary CIDR block.

❗️ Known Issues

• Although many visible references to Structsure Enterprise have been updated to SmoothGlue Enterprise, some resources will continue to use the older Structsure naming, largely for compatibility reasons. If any of the below listed resources still refer to Structsure, this is expected. These resources may be migrated to use the updated SmoothGlue branding in future releases.
  • When creating the smoothglue Keycloak realm, the default Keycloak configuration will continue to create groups for _structsureAdmins and _structsureAudit for use with Console.
  • Kubernetes objects which were previously deployed to the structsure-system namespace will continue to be deployed there, such as -overrides ConfigMaps and Secrets, as well as Crossplane and Flux resources.

🌐 Compatibility

• The packages for this release were built using Zarf v0.32.6.
• The packages were tested across the following Kubernetes distributions:
  • RKE2: v1.29.9-rke2r1
  • K3S: v1.30.5+k3s1
  • EKS: v1.29.8
• The following AMI versions were used for testing:
  • RKE2 AMI: structsure-rke2-v1.29.9-rke2r1-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-40Z
  • EKS AMI: structsure-eks-1.29.8-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-55Z
  • Base AMI: Rocky-8-EC2-LVM-8.10-20240528.0.x86_64

🔗 Helpful Links

• Refer to the SmoothGlue Enterprise documentation for additional guidance.
• For details on the Big Bang release, see the Big Bang Release Notes.