Skip to content

Release v1.20.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Nov 20:00
v1.20.0
27ed159
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Stage Manager now runs Chronicle for a Production: TLS, an external or managed database, an optional Neo4j graph, the named sinks of its applications and a connection Secret that Performances use.

Added

  • A Production is reconciled into Chronicle: a StatefulSet of the cratis/chronicle production image behind a headless Service whose port is named chronicle for chronicle+srv:// discovery, a certificate from a cert-manager certificate authority, generated administrator and client credentials, and a connection Secret reported in status.connectionSecretName (part of #15)
  • Replicas above one form one Orleans cluster through the database, and changing version rolls the StatefulSet (part of #15)
  • database.mode: Managed runs MongoDB through the Percona operator, with pinned images, automatic upgrades off, TLS disabled, an 8Gi memory limit and settings for members, size, storage class and node placement (part of #16)
  • graph.mode (None, Managed or External) and graph.edition (Community or Enterprise) give a Production a Neo4j for graph projections, with its password mounted from a Secret and a GraphReady condition (part of #98)
  • SQL storage and named sinks are applied to the kernel from mounted Secrets, and a duplicate, unknown or unconfigured sink blocks the Production with a condition naming it (part of #99)
  • An application on a Production reads its named MongoDB sinks: each sink's connection is mounted as a file and Cratis__MongoDB__Sinks__<name>__ServerFile names it, for the Cratis Arc release with Cratis/Arc#3770; SQL sinks, which Arc cannot read, are named by the warning condition SinksReadable (#99)
  • application.graph binds the graph of the Production to Cratis.Arc.Neo4j through Cratis__Neo4j__…, with the password from a secretKeyRef, and a GraphBound condition (part of #98)

Changed

  • A Production whose spec is invalid, whose Secrets or required operators are missing, that asks to change its database or graph mode, or that asks for a Vault mode other than None is Blocked with a condition, and nothing is applied
  • The operator's chart grants it what reconciling a Production needs; cert-manager, and the Percona operator for managed databases, are prerequisites to install in the cluster
  • Neo4j servers are read through the ServerFile settings, which need a Chronicle release that contains Cratis/Chronicle#5771
Assets 2
Loading