Weekly highlights update

src/content/changes/highlights/2025-04-17.md

@@ -0,0 +1,76 @@
+---
+date: 2025-04-17T14:00:00
+title: Highlights for the week ending 2025-04-17
+changes_categories:
+  - Highlights
+owner:
+  - https://github.com/orgs/giantswarm/teams/sig-product
+---
+
+## General
+
+<!-- This where BREAKING CHANGES ARE HIGHLIGHTED -->
+
+## Apps
+
+- [observability-operator](https://github.com/giantswarm/observability-operator) 
+  - [0.24.0](https://github.com/giantswarm/observability-
+operator/compare/v0.23.2...v0.24.0) 
+      * Update Silence link in notification-template to point to the new GitOps approach.
+      * Add `helm.sh/resource-policy: keep` annotation on the grafana organization CRD to prevent it's deletion.
+- [backstage](https://github.com/giantswarm/backstage) 
+  - [0.64.2](https://github.com/giantswarm/backstage/compare/v0.64.1...v0.64.2) 
+In this release, cluster details page component was refactored to simplify the
+rendering flow.
+See
+[./docs/releases/v0.64.2-changelog.md](./docs/releases/v0.64.2-changelog.md)
+for more information.
+  - [0.64.1](https://github.com/giantswarm/backstage/compare/v0.64.0...v0.64.1) 
+In this release:
+      * custom scaffolder actions were replaced with the `@devangelista/backstage-scaffolder-kubernetes` plugin;
+      * the bug where the cluster details page may be displayed as blank was fixed.
+See
+[./docs/releases/v0.64.1-changelog.md](./docs/releases/v0.64.1-changelog.md)
+for more information. 
+
+
+  - [0.64.0](https://github.com/giantswarm/backstage/compare/v0.63.1...v0.64.0) 
+In this release:
+      * Dex sign-in resolver was changed to use username from an email as user reference;
+      * `gitopsRepositories` configuration was changed to support GitHub repositories by default.
+See
+[./docs/releases/v0.64.0-changelog.md](./docs/releases/v0.64.0-changelog.md)
+for more information. 
+
+
+- [konfigure-operator](https://github.com/giantswarm/konfigure-operator) 
+  - [0.3.0](https://github.com/giantswarm/konfigure-
+operator/compare/v0.2.0...v0.3.0) 
+      * Use a single `CiliumNetworkPolicy` to access Kubernetes API and allow traffic within the cluster.
+      * Remove `NetworkPolicy` that only allowed access to the Flux `source-controller`. Replaced with above `CiliumNetworkPolicy`.
+  - [0.2.0](https://github.com/giantswarm/konfigure-
+operator/compare/v0.1.2...v0.2.0) 
+      * Support `.spec.reconciliation.suspend` on `ManagementClusterConfiguration` CRD.
+      * Support Helm chart value `.image.pullPolicy`, defaults to: `IfNotPresent`. 
+
+
+- [kyverno-policies-ux](https://github.com/giantswarm/kyverno-policies-ux) 
+  - [0.10.0](https://github.com/giantswarm/kyverno-policies-
+ux/compare/v0.9.0...v0.10.0) 
+      * Add `clusterRole` to support Kyverno `v0.19.0`.
+  - [0.9.0](https://github.com/giantswarm/kyverno-policies-
+ux/compare/v0.8.0...v0.9.0) 
+      * Prevent active releases from being deleted.
+      * Cluster names can start with a number. Remove restriction that prevented that. 
+
+
+- [cert-manager-app](https://github.com/giantswarm/cert-manager-app) 
+  - [3.9.1](https://github.com/giantswarm/cert-manager-
+app/compare/v3.9.0...v3.9.1) 
+      * Added Vertical Pod Autoscaler support for `controller` pods.
+      * Added renovate configutarion
+      * Removed dependabot configuration
+
+## Docs
+
+<!-- FER is filling this one -->

src/content/changes/highlights/2025-04-24.md

@@ -0,0 +1,86 @@
+---
+date: 2025-04-24T14:00:00
+title: Highlights for the week ending 2025-04-24
+changes_categories:
+  - Highlights
+owner:
+  - https://github.com/orgs/giantswarm/teams/sig-product
+---
+
+## General
+
+<!-- This where BREAKING CHANGES ARE HIGHLIGHTED -->
+
+## Apps
+
+- [logging-operator](https://github.com/giantswarm/logging-operator) 
+  - [0.28.0](https://github.com/giantswarm/logging-
+operator/compare/v0.27.0...v0.28.0) 
+      * Fix network policy to support loading Prometheus Rules for logs (clustering and loki-backend direct access on MCs).
+  - [0.27.0](https://github.com/giantswarm/logging-
+operator/compare/v0.26.1...v0.27.0) 
+      * Add support for loading log-based Prometheus Rules in the Loki Ruler from management and workload clusters. 
+
+
+- [object-storage-operator](https://github.com/giantswarm/object-storage-operator) 
+  - [0.10.4](https://github.com/giantswarm/object-storage-
+operator/compare/v0.10.3...v0.10.4) 
+      * Fix golangci-lint v2 problems.
+- [observability-operator](https://github.com/giantswarm/observability-operator) 
+  - [0.26.0](https://github.com/giantswarm/observability-
+operator/compare/v0.25.0...v0.26.0) 
+      * Add validation webhook to validate the alertmanager config before it is send to the alertmanager.
+      * Ensure support for loading Prometheus Rules in the Mimir Ruler from workload clusters is only enabled for observability-bundle version 1.9.0 and above (extra query matchers have been added in alloy 1.5.0).
+  - [0.25.0](https://github.com/giantswarm/observability-
+operator/compare/v0.24.0...v0.25.0) 
+      * Add support for loading Prometheus Rules in the Mimir Ruler from workload clusters.
+      * Load Prometheus Rules in the Mimir Ruler via Alloy Metrics instead of Alloy Rules on management clusters.
+      * Remove loading of Prometheus Rules for logs into the Loki Ruler via Alloy Rules as it is now managed by Alloy Logs. 
+
+
+- [prometheus-rules](https://github.com/giantswarm/prometheus-rules) 
+  - [4.55.0](https://github.com/giantswarm/prometheus-
+rules/compare/v4.54.1...v4.55.0) 
+      * Improve ClusterCrossplaneResourcesNotReady with new metrics where available
+      * Improve alert for Karpenter machines not being Ready
+      * Use `exported_namespace` for certificate expiration alerts.
+      * Remove alerts related to `alloy-rules`.
+- [kyverno-policies-ux](https://github.com/giantswarm/kyverno-policies-ux) 
+  - [0.11.0](https://github.com/giantswarm/kyverno-policies-
+ux/compare/v0.10.0...v0.11.0) 
+      * Add `clusterRole` for `admission-controller` on `cloud-director` clusters to support Kyverno `v0.19.0`.
+- [aws-load-balancer-controller-app](https://github.com/giantswarm/aws-load-balancer-controller-app) 
+  - [2.2.0](https://github.com/giantswarm/aws-load-balancer-controller-
+app/compare/v2.1.0...v2.2.0) 
+      * Get rid of legacy in-house slo framework.
+      * Set home URL in chart metadata.
+- [azure-workload-identity-webhook-app](https://github.com/giantswarm/azure-workload-identity-webhook-app) 
+  - [0.2.0](https://github.com/giantswarm/azure-workload-identity-webhook-
+app/compare/v0.1.1...v0.2.0) 
+      * Chart: Update to upstream v1.5.0. ([#11](https://github.com/giantswarm/azure-workload-identity-webhook-app/pull/11))
+  - [0.1.1](https://github.com/giantswarm/azure-workload-identity-webhook-
+app/compare/v0.1.0...v0.1.1) 
+      * Chart: Further increase memory limit. ([#9](https://github.com/giantswarm/azure-workload-identity-webhook-app/pull/9)) 
+
+
+  - [0.1.0](https://github.com/giantswarm/azure-workload-identity-webhook-
+app/releases/tag/v0.1.0) 
+      * Repository: Some chores. ([#6](https://github.com/giantswarm/azure-workload-identity-webhook-app/pull/6))
+      * CircleCI: Fix app collection namespace. ([#7](https://github.com/giantswarm/azure-workload-identity-webhook-app/pull/7)) 
+
+
+- [nos-app](https://github.com/giantswarm/nos-app) 
+  - [0.1.2](https://github.com/giantswarm/nos-app/compare/v0.1.1...v0.1.2) 
+      * Actual fix for values
+  - [0.1.1](https://github.com/giantswarm/nos-app/compare/v0.1.0...v0.1.1) 
+      * try to fix broken webhook 
+
+
+- [teleport-kube-agent-app](https://github.com/giantswarm/teleport-kube-agent-app) 
+  - [0.10.5](https://github.com/giantswarm/teleport-kube-agent-
+app/compare/v0.10.4...v0.10.5) 
+      * Set Home URL in chart metadata.
+
+## Docs
+
+<!-- FER is filling this one -->

src/content/changes/highlights/2025-05-01.md

@@ -0,0 +1,122 @@
+---
+date: 2025-05-01T14:00:00
+title: Highlights for the week ending 2025-05-01
+changes_categories:
+  - Highlights
+owner:
+  - https://github.com/orgs/giantswarm/teams/sig-product
+---
+
+## General
+
+<!-- This where BREAKING CHANGES ARE HIGHLIGHTED -->
+
+## Apps
+
+- [dashboards](https://github.com/giantswarm/dashboards) 
+  - [4.4.3](https://github.com/giantswarm/dashboards/compare/v4.4.2...v4.4.3) 
+      * dns dashboard: fixed logs row
+  - [4.4.2](https://github.com/giantswarm/dashboards/compare/v4.4.1...v4.4.2) 
+### Chunged
+      * Cluster Overview dashboard: improve alerts links 
+
+
+  - [4.4.1](https://github.com/giantswarm/dashboards/compare/v4.4.0...v4.4.1) 
+      * alerts timeline dashboard:
+        * fix silences count
+        * add links to silences, alerts, notifications
+        * fix consistency between alerts timeline and alerts list
+        * update title
+      * alertmanager overview update to mimir alertmanager 
+
+
+- [grafana-app](https://github.com/giantswarm/grafana-app) 
+  - [2.21.0](https://github.com/giantswarm/grafana-app/compare/v2.20.0...v2.21.0)
+      * Fix CNP apiversion and fix changelog and app version.
+      * upgrade grafana chart: 8.11.3 => 8.14.0
+      * upgrade grafana : 11.5.1 => 11.6.1
+- [observability-operator](https://github.com/giantswarm/observability-operator) 
+  - [0.28.0](https://github.com/giantswarm/observability-
+operator/compare/v0.27.0...v0.28.0) 
+      * Fix alertmanager configuration to not drop alerts when stable-testing management cluster's default apps are failing.
+      * Remove alloy-rules deletion code which is no longer needed since the last release.
+      * Remove PodSecurityPolicy.
+- [prometheus-rules](https://github.com/giantswarm/prometheus-rules) 
+  - [4.57.0](https://github.com/giantswarm/prometheus-
+rules/compare/v4.56.1...v4.57.0) 
+      * PromtailRequestsErrors does not fire anymore when alloy-logs is running
+      * Added PromtailConflictsWithAlloy alert
+  - [4.56.1](https://github.com/giantswarm/prometheus-
+rules/compare/v4.56.0...v4.56.1) 
+      * Reenabled storage alerts LogVolumeSpaceTooLow and RootVolumeSpaceTooLow as paging during working hours until we have node problem detector deployed.
+      * Fix SLOs recording rules sent to Grafana Cloud that sometimes trigger PrometheusRulesFailure due to the origin metric pod changing. 
+
+
+- [cilium-app](https://github.com/giantswarm/cilium-app) 
+  - [1.1.0](https://github.com/giantswarm/cilium-app/compare/v1.0.0...v1.1.0) 
+      * Upgrade Cilium to [v1.17.3](https://github.com/cilium/cilium/releases/tag/v1.17.3).
+  - [0.31.3](https://github.com/giantswarm/cilium-app/compare/v0.31.2...v0.31.3)
+      * Upgrade Cilium to [v1.16.9](https://github.com/cilium/cilium/releases/tag/v1.16.9). 
+
+
+- [backstage](https://github.com/giantswarm/backstage) 
+  - [0.71.0](https://github.com/giantswarm/backstage/compare/v0.70.0...v0.71.0) 
+In this release:
+      * Cloud Director support was added;
+      * GS auth backend module was changed to use `fetch` method from `node-fetch` package.
+See
+[./docs/releases/v0.71.0-changelog.md](./docs/releases/v0.71.0-changelog.md)
+for more information.
+  - [0.70.0](https://github.com/giantswarm/backstage/compare/v0.69.0...v0.70.0) 
+In this release, custom Kubernetes client was improved. Now it delegates
+unimplemented methods to the standard Kubernetes backend client.
+See
+[./docs/releases/v0.70.0-changelog.md](./docs/releases/v0.70.0-changelog.md)
+for more information. 
+
+
+  - [0.69.0](https://github.com/giantswarm/backstage/compare/v0.68.0...v0.69.0) 
+In this release, custom GitHub auth provider was removed.
+See
+[./docs/releases/v0.69.0-changelog.md](./docs/releases/v0.69.0-changelog.md)
+for more information. 
+
+
+- [konfigure-operator](https://github.com/giantswarm/konfigure-operator) 
+  - [0.5.0](https://github.com/giantswarm/konfigure-
+operator/compare/v0.4.0...v0.5.0) 
+      * Add push releases to CAPx root collection repositories.
+  - [0.4.0](https://github.com/giantswarm/konfigure-
+operator/compare/v0.3.1...v0.4.0) 
+      * Push to `control-plane-catalog` instead of `giantswarm`. 
+
+
+- [azure-ad-pod-identity-app](https://github.com/giantswarm/azure-ad-pod-identity-app) 
+  - [0.16.0](https://github.com/giantswarm/azure-ad-pod-identity-
+app/compare/v0.15.4...v0.16.0) 
+      * Bump `apiVersion` for Kyverno PolicyExceptions from `v2alpha1` to `v2beta1`.
+      * Fixed liveness probe configuration by explicitly exposing probe ports in NMI daemonset and MIC deployment.
+- [nos-app](https://github.com/giantswarm/nos-app) 
+  - [0.2.0](https://github.com/giantswarm/nos-app/compare/v0.1.2...v0.2.0) 
+      * Make cilium network policies optional.
+      * Make cluster issuer work in non GS clusters.
+- [cluster-vsphere](https://github.com/giantswarm/cluster-vsphere) 
+  - [1.2.0](https://github.com/giantswarm/cluster-vsphere/compare/v1.1.0...v1.2.0)
+      * Update `kube-vip` to `0.9.0`.
+      * Update `kube-vip` to `0.9.1`.
+- [auth-bundle](https://github.com/giantswarm/auth-bundle) 
+  - [0.2.3](https://github.com/giantswarm/auth-bundle/compare/v0.1.2...v0.2.3) 
+- [kyverno-crds](https://github.com/giantswarm/kyverno-crds) 
+  - [1.13.1](https://github.com/giantswarm/kyverno-crds/compare/v1.13.0...v1.13.1)
+      * Bring back `PolicyExceptions v2alpha1` API version.
+- [organization-operator](https://github.com/giantswarm/organization-operator) 
+  - [2.1.0](https://github.com/giantswarm/organization-
+operator/compare/v2.0.2...v2.1.0) 
+      * Enable TLS and authentication for metrics endpoint.
+      * `golang` version updated to `1.24`
+      * Update go dependencies.
+      * Remove unused code left over from migration to kubebuilder.
+
+## Docs
+
+<!-- FER is filling this one -->

src/content/changes/highlights/2025-05-08.md

@@ -0,0 +1,62 @@
+---
+date: 2025-05-08T14:00:00
+title: Highlights for the week ending 2025-05-08
+changes_categories:
+  - Highlights
+owner:
+  - https://github.com/orgs/giantswarm/teams/sig-product
+---
+
+## General
+
+<!-- This where BREAKING CHANGES ARE HIGHLIGHTED -->
+
+## Apps
+
+- [dashboards](https://github.com/giantswarm/dashboards) 
+  - [4.5.0](https://github.com/giantswarm/dashboards/compare/v4.4.3...v4.5.0) 
+      * Add Konfigure Operator dashboard
+- [observability-operator](https://github.com/giantswarm/observability-operator) 
+  - [0.29.0](https://github.com/giantswarm/observability-
+operator/compare/v0.28.0...v0.29.0) 
+      * Switch alloy-metrics secret from env variables to alloy `remote.kubernetes.secret` component to support secret changes without having to terminate pods.
+- [prometheus-rules](https://github.com/giantswarm/prometheus-rules) 
+  - [4.58.0](https://github.com/giantswarm/prometheus-
+rules/compare/v4.57.0...v4.58.0) 
+      * DeploymentNotSatisfiedAtlas: lower sensitivity and page only during business hours
+      * Add new alert `ClusterUpgradeStuck` to detect if the cluster app cannot be upgraded.
+- [flux-app](https://github.com/giantswarm/flux-app) 
+  - [1.6.0](https://github.com/giantswarm/flux-app/compare/v1.5.0...v1.6.0) 
+      * Updgrade Flux to 2.3.0 version.
+- [cloudnative-pg-app](https://github.com/giantswarm/cloudnative-pg-app) 
+  - [0.0.8](https://github.com/giantswarm/cloudnative-pg-
+app/compare/v0.0.7...v0.0.8) 
+      * Update to cloudnative-pg v1.25.1 (chart v0.23.2).
+      * Update <https://github.com/cloudnative-pg/grafana-dashboards> from v0.0.2 to v0.0.4.
+- [dex-app](https://github.com/giantswarm/dex-app) 
+  - [1.42.14](https://github.com/giantswarm/dex-app/compare/v1.42.13...v1.42.14)
+      * Added renovate configuration
+      * Make Ingress annotations configurable via values (`.Values.ingress.annotations`)
+      * Increased request header size limit in NGINX ingress controller annotations
+      * Removed dependabot configuration
+- [etcd-backup-operator](https://github.com/giantswarm/etcd-backup-operator) 
+  - [4.13.0](https://github.com/giantswarm/etcd-backup-
+operator/compare/v4.12.0...v4.13.0) 
+      * Add option to use IAM Roles for Service Accounts (IRSA) for `etcd-backup-operator`.
+      * Fix linting issues.
+- [event-exporter-app](https://github.com/giantswarm/event-exporter-app) 
+  - [2.2.0](https://github.com/giantswarm/event-exporter-
+app/compare/v2.1.0...v2.2.0) 
+      * Include source.component from the CAPI events (cluster-api-events-controller).
+- [vertical-pod-autoscaler-app](https://github.com/giantswarm/vertical-pod-autoscaler-app) 
+  - [5.4.1](https://github.com/giantswarm/vertical-pod-autoscaler-
+app/compare/v5.4.0...v5.4.1) 
+      * Chart: Update Helm release vertical-pod-autoscaler to v10.0.1. ([#346](https://github.com/giantswarm/vertical-pod-autoscaler-app/pull/346))
+- [vertical-pod-autoscaler-crd](https://github.com/giantswarm/vertical-pod-autoscaler-crd) 
+  - [3.2.1](https://github.com/giantswarm/vertical-pod-autoscaler-
+crd/compare/v3.2.0...v3.2.1) 
+      * Chart: Sync to upstream. ([#136](https://github.com/giantswarm/vertical-pod-autoscaler-crd/pull/136))
+
+## Docs
+
+<!-- FER is filling this one -->