79 Commits (bbbd82bc73322d662ba81efeda3884efcdc09708)

Author	SHA1	Message	Date
renovate[bot]	da63ca7ab3	chore(deps): update module golang.org/x/net to v0.23.0 [security] (main) (#13763) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Paul Rogers <129207811+paul1r@users.noreply.github.com>	1 year ago
Jatin Suri	d451e23225	feat(operator): Add support for the volume API (#13369) ... Co-authored-by: Periklis Tsirakidis <periklis@nefeli.eu>	2 years ago
Aleksei	6148c3760d	fix(operator): add alertmanager client config to ruler template (#13182)	2 years ago
Robert Jacob	3a9f50f509	fix(operator): Improve API documentation for schema version (#13122)	2 years ago
Joao Marcal	3eee541b1a	feat(operator): Change attribute value used for CCO-based credential mode (#12165)	2 years ago
Robert Jacob	5b145ab2d7	feat(operator): Allow setting explicit CredentialMode in LokiStack storage spec (#12106)	2 years ago
Robert Jacob	e39515ee45	fix(operator): Extend status to show difference between running and ready (#11968)	2 years ago
Robert Jacob	6c5c347270	operator: Refactor handling of credentials in managed-auth mode (#11920)	2 years ago
Robert Jacob	6b46e373fb	operator: Integrate support for OpenShift-managed credentials in Azure (#11868)	2 years ago
Joao Marcal	fe4ba0c3ba	operator: Add OpenShift CloudCredentials support for AWS STS (#11524) ... Co-authored-by: Periklis Tsirakidis <periklis@redhat.com>	2 years ago
Periklis Tsirakidis	71d3ab8c54	operator: Upgrade k8s.io, sigs.k8s.io and openshift deps (#11718)	2 years ago
Periklis Tsirakidis	28a413539e	operator: Replace deprecated ctrl-runtime cfg with custom package (#11678) ... Co-authored-by: Robert Jacob <rojacob@redhat.com> Co-authored-by: Robert Jacob <xperimental@solidproject.de>	2 years ago
Bayan Taani	8931f4a978	operator: Add warning for old schema configuration (#11158) ... Co-authored-by: Robert Jacob <rojacob@redhat.com> Co-authored-by: Periklis Tsirakidis <periklis@nefeli.eu>	2 years ago
Robert Jacob	cd3a04d6d7	operator: Run unit tests of API module as well (#11328)	2 years ago
Periklis Tsirakidis	21a7f96b63	operator: Add support for blocking queries per tenant (#11094) ... Co-authored-by: Robert Jacob <xperimental@solidproject.de>	2 years ago
Periklis Tsirakidis	21a07773ba	operator: Add automatic stream sharding support (#11091) ... Co-authored-by: Robert Jacob <xperimental@solidproject.de>	2 years ago
Joao Marcal	0c10f28a46	operator: Adds new value v13 to schema (#10932) ... Co-authored-by: Periklis Tsirakidis <periklis@redhat.com>	2 years ago
Periklis Tsirakidis	8d0fc171cc	operator: Update dependencies and dev tools (#11232)	2 years ago
renovate[bot]	ab94c70c4c	chore(deps): update module golang.org/x/net to v0.17.0 [security] (main) (#10831) ... [](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | golang.org/x/net | indirect | minor | `v0.7.0` -> `v0.17.0` | | golang.org/x/net | indirect | minor | `v0.8.0` -> `v0.17.0` | ### GitHub Vulnerability Alerts #### [CVE-2023-3978](https://nvd.nist.gov/vuln/detail/CVE-2023-3978) Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack. #### [CVE-2023-39325](https://togithub.com/golang/go/issues/63417) A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function. #### [CVE-2023-44487](https://togithub.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3) swift-nio-http2 is vulnerable to a denial-of-service vulnerability in which a malicious client can create and then reset a large number of HTTP/2 streams in a short period of time. This causes swift-nio-http2 to commit to a large amount of expensive work which it then throws away, including creating entirely new `Channel`s to serve the traffic. This can easily overwhelm an `EventLoop` and prevent it from making forward progress. swift-nio-http2 1.28 contains a remediation for this issue that applies reset counter using a sliding window. This constrains the number of stream resets that may occur in a given window of time. Clients violating this limit will have their connections torn down. This allows clients to continue to cancel streams for legitimate reasons, while constraining malicious actors. --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/grafana/loki). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy4xOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2 years ago
Robert Jacob	e2ed1c01d4	operator: Update tools and dependencies (#10795)	2 years ago
Periklis Tsirakidis	41eb82bc50	operator: Add memberlist IPv6 support (#10562) ... Co-authored-by: Joao Marcal <joao.marcal12@gmail.com> Co-authored-by: Robert Jacob <xperimental@solidproject.de>	2 years ago
Robert Jacob	835d0452d4	operator: Update example configurations to use demo size (#10606)	2 years ago
Bayan Taani	53c2b2c22a	operator: Use a condition to warn when labels for zone-awareness are empty (#10418)	2 years ago
Periklis Tsirakidis	38556c1d37	operator: Add support for reconciling loki-mixin dashboards on OpenShift Console (#9468) ... Co-authored-by: Robert Jacob <xperimental@solidproject.de>	2 years ago
Bayan Taani	7d818099a0	operator: Use a condition to warn when there are no nodes with matching labels for zone-awareness (#9942) ... Co-authored-by: Robert Jacob <rojacob@redhat.com>	3 years ago
Joao Marcal	0fd9331044	operator: Fix OIDC.IssuerCAPath by updating it to type CASpec (#9972) ... Co-authored-by: Periklis Tsirakidis <periklis@redhat.com>	3 years ago
Mohamed-Amine Bouqsimi	9b62fe7d93	operator: Custom configuration for LokiStack admin groups (#9931)	3 years ago
Mohamed-Amine Bouqsimi	d4f364b4e1	operator: Add namespace and tenantId labels to RecordingRules (#9971) ... Co-authored-by: Periklis Tsirakidis <periklis@redhat.com>	3 years ago
Joao Marcal	50c4216d00	operator: add mTLS authentication to tenants (#9906)	3 years ago
Shweta Padubidri	5bd8c7dd57	operator: Add Pod annotations with node topology labels to support zone aware scheduling (#9503) ... Signed-off-by: Shweta Padubidri <spadubid@redhat.com> Co-authored-by: Robert Jacob <rojacob@redhat.com> Co-authored-by: Periklis Tsirakidis <periklis@redhat.com>	3 years ago
cui fliter	4b53909ccf	all: remove repetitive the (#9823) ... **What this PR does / why we need it**: **Which issue(s) this PR fixes**: Fixes #<issue number> **Special notes for your reviewer**: **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [x] Documentation added - [x] Tests updated - [x] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [x] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` - [x] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec) Signed-off-by: cui fliter <imcusg@gmail.com>	3 years ago
Periklis Tsirakidis	bcdc807dd3	operator: Expose limits config setting cardinality_limit (#9830)	3 years ago
Robert Jacob	74b16fb71d	operator: Fix availability of demo LokiStack size (#9689)	3 years ago
Kaviraj Kanagaraj	57f9452231	Revert 9217 chaudum/tsdb chunkrefs pool (#9685) ... Revert #9217 (potential bug in query result) --------- Signed-off-by: Kaviraj <kavirajkanagaraj@gmail.com>	3 years ago
Julien Pinsonneau	e6802394da	operator: Expose per_stream_rate_limit & burst (#9630) ... Co-authored-by: Periklis Tsirakidis <periklis@redhat.com>	3 years ago
Gerard Vanloo	7b706eea8c	operator: Set seccomp profile to runtime default for all variants (#9457)	3 years ago
Periklis Tsirakidis	1b87aeab4e	operator: Add support for configuring HTTP server timeouts (#9405) ... Co-authored-by: Robert Jacob <rojacob@redhat.com>	3 years ago
Mohamed-Amine Bouqsimi	df77bf6024	operator: add zone aware API spec validation (#9378)	3 years ago
Joao Marcal	3fa46c5500	operator: Add PodAntiAffinity overwrites per component (#9408) ... Signed-off-by: Joao Marcal <jmarcal@redhat.com>	3 years ago
Periklis Tsirakidis	f7e13ccc77	operator: Enable Route by default on OpenShift clusters (#9346)	3 years ago
Periklis Tsirakidis	7d01d998e4	operator: Add support for custom tenant topology in rules (#9366)	3 years ago
Mohamed-Amine Bouqsimi	a41176abb6	operator: Add zone awareness spec to LokiStack (#9315)	3 years ago
Alan Conway	ac1c1fdf03	operator: Revert 1x.extra-small changes, add 1x.tiny-test (#9049)	3 years ago
宣云辉	b915652498	operator: Add a new Object Storage Type for AlibabaCloud OSS (#8661) ... Co-authored-by: Periklis Tsirakidis <periklis@nefeli.eu>	3 years ago
Gerard Vanloo	5f50e0f04c	operator: Update Loki dependency to v2.8.0 (#9040)	3 years ago
Alan Conway	6532f5d668	operator: Restore minimum PVC sizes for 1x.extra-small (#9005)	3 years ago
Alan Conway	75ec3f3386	Redefine 1x.extra-small to have 0 requirements. (#8977) ... Remove resource requirements so lokistack can run on laptop-sized SNO or CRC clusters. Originally I thought to add an even smaller size, but I see that 1x.extra-small is already documented as not-for-production, so it seems appropriate. Doc comment: // SizeOneXExtraSmall defines the size of a single Loki deployment // with NO resource requirements and without HA support. // // This is ONLY for development, testing, or demos // on limited single-node clusters. // There are NO performance guarantees. // LokiStack will use whatever resources are available, // and WILL NOT FUNCTION CORRECTLY if there is not enough memory or CPU. // // DO NOT USE THIS IN PRODUCTION!	3 years ago
Periklis Tsirakidis	93a1c21da5	operator: Break the API types out into their own module (#8863)	3 years ago
Periklis Tsirakidis	a2370e3af3	operator: Refactor all type validations into own package (#8878)	3 years ago
Periklis Tsirakidis	9b1a427c5b	operator: Add support for memberlist bind network configuration (#8672) ... Co-authored-by: Robert Jacob <xperimental@solidproject.de>	3 years ago