Release Notes

6.1.0 (2024-10-30)

The following are the v6.1.0 release notes for convenience:

🚨 Upgrade Notices

This is a major update to SonarQube. During upgrade, you may get a SonarQube is under maintenance error message on the SonarQube UI.

• To resolve this, once the HelmRelease upgrades, you will be prompted to visit your SonarQube instance at a <sonarqube_url>/setup URL. This is intended to launch a Database migration/update for SonarQube internally. The app will be available once it completes.

⏩ Upgraded Packages

• Console has been upgraded from v5.58 to v6.0.x and now offers the following capabilities:
  • Enhanced deployment wizard for deploying apps via Kustomize manifest (platform admins only).
  • Adds support for multiple ingress routes when using deployment wizard.
  • Adds ENABLE_SELF_SERVE_DEPLOYMENTS feature flag.
  • Fixes failure to load projects page if an expected deployment has no metadata in Argo CD.
  • Includes SonarQube, when it's deployed, on tools pages.
  • Removes non-functional rename project action.
  • Restores ability for platform admins to send credentials reset to users.
• Big Bang has been upgraded from 2.37.0 to 2.38.0. For more details on the features and updates included in Big Bang Version 2.38.0, please refer to the Big Bang release notes.

🪲 Bug Fixes

• Fixes an issue with load balancer stickiness.
  • When compatibility_mode is set, the object that is returned contains false. Additionally, started deprecation for IaC variable name for EKS; the old variable will remain for the time being so please only set one:
    • var.sso_nlb_stickiness_enabled => var.sso_nlb_stickiness_settings
    • var.application_nlb_stickiness_enabled => var.application_nlb_stickiness_settings
• Updates to the RKE2 Terraform to handle multiple VPC CIDRs.

🌐 Compatibility

• The packages for this release were built using Zarf v0.32.6.
• The packages were tested across the following Kubernetes distributions:
  • RKE2: v1.29.8+rke2r1
  • K3s: v1.30.5+k3s1
  • EKS: v1.29.6
• The following AMI versions were used for testing:
  • RKE2 AMI: structsure-rke2-v1.29.8-rke2r1-rocky-8-base-v1.1.1-stig-2024-09-23T08-14-20Z
  • EKS AMI: structsure-eks-1.29.6-rocky-8-base-v1.1.1-stig-2024-09-30T08-10-58Z
  • Base AMI: Rocky-8-EC2-LVM-8.10-20240528.0.x86_64

🔗 Helpful Links

• Refer to the SmoothGlue documentation for additional guidance.
• For details on the Big Bang release, see the Big Bang Release Notes.

6.0.1 (2024-10-22)

Patch notes

• Patches GitLab to 17.2.9 to address critical CVE: https://about.gitlab.com/releases/2024/10/09/patch-release-gitlab-17-4-2-released/
• Fixed a bug that prevented upgrading from prior versions of the SmoothGlue package

The following are the v6.0.0 release notes for convenience:

🚨 Upgrade Notices

• With the 6.0.0 release, Structsure Enterprise is now SmoothGlue Enterprise!
  • Structsure Enterprise Developer Collaboration Environment is now known as SmoothGlue Build Enterprise.
  • Structsure Enterprise Deploy Target is now known as SmoothGlue Run Enterprise.
• On new installations making use of automatic Keycloak configuration, the default realm will now be named smoothglue instead of structsure. Keycloak should use redirect to this realm automatically, but any URL references to the structsure realm should be updated to point to the smoothglue realm on new installs.

  • For existing Structsure Enterprise installations making use of the automatic Keycloak realm configuration feature, you should add the following configuration to your bigbang-values.yaml in order to continue using your existing Keycloak realm:

    addons:
      keycloak:
        values:
          realms:
            - realmName: structsure

📦 SmoothGlue Enterprise Features

• The following applications have updated SmoothGlue branding/theming:
  • SmoothGlue Console
  • Keycloak
  • ArgoCD
• External Secrets Operator: Now officially bundled and supported as a SmoothGlue Enterprise component.
  • External Secrets Operator (ESO) is not installed by default on either Build or Run installations and must be enabled explicitly.

    • ESO can be enabled by setting EXTERNAL_SECRETS_ENABLED to true in your Zarf config, or by adding the following settings to your bigbang-values.yaml:

      addons:
        externalSecrets:
          enabled: true
  • If you have previously manually installed External Secrets Operator, you may need to manually update Helm annotations to allow existing resources to be adopted.
• IaC: The SmoothGlue Enterprise IaC now includes an optional Terragrunt module to create a public or private Route 53 zone associated with the cluster. Please see the documentation for more information on how to enable and configure this module.
• IaC: SmoothGlue Enterprise now has provides an optional Terragrunt module to create an RDS database for Nexus IQ. Please see the documentation for more information on how to enable and configure this module.

⏩ Upgraded Packages

• Upgraded console to v5.57.x
• This release includes Big Bang Version 2.37.0. For more details on the features and updates included in Big Bang Version 2.37.0, please refer to the Big Bang release notes.
• Upgraded cert-manager to v1.15.3

🪲 Bug Fixes

• When migrating an existing Structsure Enterprise install to SmoothGlue Enterprise v6.0.0, a new Zarf Helm chart is deployed within the default namespace with an updated Crossplane Configuration for structsure-enterprise. The Helm chart fails to automatically patch the Configuration resource properly, even though it adopts the existing resource as expected. To work around this, a Zarf command will override the Configuration using a kubectl patch this release. This will not affect future releases.
• Fixed an issue preventing user-provided TLS certificates using ZARF_VAR_CERT and ZARF_VAR_KEY from being consumed during the Zarf package deploy. If a user-provided certificate is provided, it will take precedence; otherwise, the full order of precedence is as follows, from highest to lowest:
  • certs/keys provided using ZARF_VAR_CERT or ZARF_VAR_KEY,
  • values provided to Istio using bigbang-secrets.yaml,
  • existing Istio secrets on the cluster, and finally
  • an automatically generated TLS certificate.
• IaC: In VPCs with multiple CIDR ranges, the default security group rules for EKS clusters will now allow access from all CIDR ranges associated with the VPC, rather than just the primary CIDR block.

❗ Known Issues

• Although many visible references to Structsure Enterprise have been updated to SmoothGlue Enterprise, some resources will continue to use the older Structsure naming, largely for compatibility reasons. If any of the below listed resources still refer to Structsure, this is expected. These resources may be migrated to use the updated SmoothGlue branding in future releases.
  • When creating the smoothglue Keycloak realm, the default Keycloak configuration will continue to create groups for _structsureAdmins and _structsureAudit for use with Console.
  • Kubernetes objects which were previously deployed to the structsure-system namespace will continue to be deployed there, such as -overrides ConfigMaps and Secrets, as well as Crossplane and Flux resources.

🌐 Compatibility

• The packages for this release were built using Zarf v0.32.6.
• The packages were tested across the following Kubernetes distributions:
  • RKE2: v1.29.9-rke2r1
  • K3S: v1.30.5+k3s1
  • EKS: v1.29.8
• The following AMI versions were used for testing:
  • RKE2 AMI: structsure-rke2-v1.29.9-rke2r1-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-40Z
  • EKS AMI: structsure-eks-1.29.8-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-55Z
  • Base AMI: Rocky-8-EC2-LVM-8.10-20240528.0.x86_64

🔗 Helpful Links

• Refer to the SmoothGlue Enterprise documentation for additional guidance.
• For details on the Big Bang release, see the Big Bang Release Notes.

6.0.0 (2024-10-16)

🚨 Upgrade Notices

• With the 6.0.0 release, Structsure Enterprise is now SmoothGlue Enterprise!
  • Structsure Enterprise Developer Collaboration Environment is now known as SmoothGlue Build Enterprise.
  • Structsure Enterprise Deploy Target is now known as SmoothGlue Run Enterprise.
• On new installations making use of automatic Keycloak configuration, the default realm will now be named smoothglue instead of structsure. Keycloak should use redirect to this realm automatically, but any URL references to the structsure realm should be updated to point to the smoothglue realm on new installs.
  • For existing Structsure Enterprise installations making use of the automatic Keycloak realm configuration feature, you should add the following configuration to your bigbang-values.yaml in order to continue using your existing Keycloak realm:

    addons:
      keycloak:
        values:
          realms:
            - realmName: structsure

📦 SmoothGlue Enterprise Features

• The following applications have updated SmoothGlue branding/theming:
  • SmoothGlue Console
  • Keycloak
  • ArgoCD
• External Secrets Operator: Now officially bundled and supported as a SmoothGlue Enterprise component.
  • External Secrets Operator (ESO) is not installed by default on either Build or Run installations and must be enabled explicitly.
    • ESO can be enabled by setting EXTERNAL_SECRETS_ENABLED to true in your Zarf config, or by adding the following settings to your bigbang-values.yaml:

      addons:
        externalSecrets:
          enabled: true
  • If you have previously manually installed External Secrets Operator, you may need to manually update Helm annotations to allow existing resources to be adopted.
• IaC: The SmoothGlue Enterprise IaC now includes an optional Terragrunt module to create a public or private Route 53 zone associated with the cluster. Please see the documentation for more information on how to enable and configure this module.
• IaC: SmoothGlue Enterprise now has provides an optional Terragrunt module to create an RDS database for Nexus IQ. Please see the documentation for more information on how to enable and configure this module.

⏩ Upgraded Packages

• Upgraded console to v5.57.x
• This release includes Big Bang Version 2.37.0. For more details on the features and updates included in Big Bang Version 2.37.0, please refer to the Big Bang release notes.
• Upgraded cert-manager to v1.15.3

🪲 Bug Fixes

• When migrating an existing Structsure Enterprise install to SmoothGlue Enterprise v6.0.0, a new Zarf Helm chart is deployed within the default namespace with an updated Crossplane Configuration for structsure-enterprise. The Helm chart fails to automatically patch the Configuration resource properly, even though it adopts the existing resource as expected. To work around this, a Zarf command will override the Configuration using a kubectl patch this release. This will not affect future releases.
• Fixed an issue preventing user-provided TLS certificates using ZARF_VAR_CERT and ZARF_VAR_KEY from being consumed during the Zarf package deploy. If a user-provided certificate is provided, it will take precedence; otherwise, the full order of precedence is as follows, from highest to lowest:
  • certs/keys provided using ZARF_VAR_CERT or ZARF_VAR_KEY,
  • values provided to Istio using bigbang-secrets.yaml,
  • existing Istio secrets on the cluster, and finally
  • an automatically generated TLS certificate.
• IaC: In VPCs with multiple CIDR ranges, the default security group rules for EKS clusters will now allow access from all CIDR ranges associated with the VPC, rather than just the primary CIDR block.

❗️ Known Issues

• Although many visible references to Structsure Enterprise have been updated to SmoothGlue Enterprise, some resources will continue to use the older Structsure naming, largely for compatibility reasons. If any of the below listed resources still refer to Structsure, this is expected. These resources may be migrated to use the updated SmoothGlue branding in future releases.
  • When creating the smoothglue Keycloak realm, the default Keycloak configuration will continue to create groups for _structsureAdmins and _structsureAudit for use with Console.
  • Kubernetes objects which were previously deployed to the structsure-system namespace will continue to be deployed there, such as -overrides ConfigMaps and Secrets, as well as Crossplane and Flux resources.

🌐 Compatibility

• The packages for this release were built using Zarf v0.32.6.
• The packages were tested across the following Kubernetes distributions:
  • RKE2: v1.29.9-rke2r1
  • K3S: v1.30.5+k3s1
  • EKS: v1.29.8
• The following AMI versions were used for testing:
  • RKE2 AMI: structsure-rke2-v1.29.9-rke2r1-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-40Z
  • EKS AMI: structsure-eks-1.29.8-rocky-8-base-v1.1.1-stig-2024-10-14T08-10-55Z
  • Base AMI: Rocky-8-EC2-LVM-8.10-20240528.0.x86_64

🔗 Helpful Links

• Refer to the SmoothGlue Enterprise documentation for additional guidance.
• For details on the Big Bang release, see the Big Bang Release Notes.