v4.11.0

What's Changed

• chore: bump default vcluster to 0.35.0-rc.5 by @roehrijn in loft-sh/loft-enterprise#7120
• feat: Add separate power status tracking for BMHs by @PRTTMPRPHT in loft-sh/loft-enterprise#7056
• feat: Add contextual docs links to breadcrumb by @PRTTMPRPHT in loft-sh/loft-enterprise#7075
• feat: Add validation against missing node pools when creating auto no… by @PRTTMPRPHT in loft-sh/loft-enterprise#7053
• chore: Sync features.yaml by @PRTTMPRPHT in loft-sh/loft-enterprise#7111
• fix: Ignore gateway class condition in status badge by @PRTTMPRPHT in loft-sh/loft-enterprise#7113
• chore: fix flaky snapshot and project members tests by @adriankabala in loft-sh/loft-enterprise#7119
• ci(prerelease): replace inline setup with prerelease-setup@v1 composite by @sowmyav27 in loft-sh/loft-enterprise#7077
• test(argocd): e2e coverage for ArgoCD v2 connector integration by @flomedja in loft-sh/loft-enterprise#7041
• feat(ui) - gateway api inspect resources tab by @andyluak in loft-sh/loft-enterprise#7124
• chore: Update distro version maps by @PRTTMPRPHT in loft-sh/loft-enterprise#7129
• fix: preserve resource owner when deleting an unrelated user or team by @roehrijn in loft-sh/loft-enterprise#7136
• fix(e2e): harden flaky platform-external-db 3-replica spec by @roehrijn in loft-sh/loft-enterprise#7126
• Engnode 498/fix snyk cves by @neogopher in loft-sh/loft-enterprise#6933
• feat(ui) - gateway api fixes by @andyluak in loft-sh/loft-enterprise#7139
• Fix/allowed controllers curl wake by @zerbitx in loft-sh/loft-enterprise#7137
• fix(e2e): harden ArgoCD v2 BeforeAll and fix lost cleanup contexts by @flomedja in loft-sh/loft-enterprise#7141
• test(argocd_v2): deactivate RG-03 test. It restarts shared platform by @roehrijn in loft-sh/loft-enterprise#7147
• fix(e2e): harden auto-nodes aws scale spec against ec2 provisioning latency by @roehrijn in loft-sh/loft-enterprise#7125
• test(e2e): wait for VCI ready before sleeping in network-peer cleanup spec by @roehrijn in loft-sh/loft-enterprise#7148
• test(e2e): poll for SSO user provisioning instead of one-shot Get by @roehrijn in loft-sh/loft-enterprise#7156
• test(e2e): recreate login access key on each login retry by @roehrijn in loft-sh/loft-enterprise#7158
• chore(deps): bump e2e-framework to fix cross-spec context leak by @roehrijn in loft-sh/loft-enterprise#7160
• test(e2e): dump argocd-v2 container logs when server is not ready by @roehrijn in loft-sh/loft-enterprise#7157
• test(e2e): capture CSR, kubelet journal, node and events on prerelease vCluster failure by @sowmyav27 in loft-sh/loft-enterprise#7166
• feat(accesskeys): add metrics scope roles and consolidate scope authorization by @johannesfrey in loft-sh/loft-enterprise#7108
• fix: Fix hover state for user row in sidebar by @PRTTMPRPHT in loft-sh/loft-enterprise#7164
• fix: Fix capitalization of VPN table headers by @PRTTMPRPHT in loft-sh/loft-enterprise#7163
• fix: Rename SimpleTable component to KVTable by @PRTTMPRPHT in loft-sh/loft-enterprise#7162
• feat: Make template names wrap in template marketplace by @PRTTMPRPHT in loft-sh/loft-enterprise#7159
• fix: Fix kubevirt cluster selection states by @PRTTMPRPHT in loft-sh/loft-enterprise#7050
• feat: Apply new header style across all main pages by @PRTTMPRPHT in loft-sh/loft-enterprise#7110
• feat(ui): show join node command on nodes empty state by @andyluak in loft-sh/loft-enterprise#7083
• feat: Revamp tenant cluster status page by @PRTTMPRPHT in loft-sh/loft-enterprise#7040
• bump vCluster version by @mfranczy in loft-sh/loft-enterprise#7170
• chore(prerelease): bump VCI K8s upgrade matrix to v1.35.0 -> v1.36.0 by @sowmyav27 in loft-sh/loft-enterprise#7168
• Always use real node data by @rmweir in loft-sh/loft-enterprise#7174
• feat(ui) - vcluster logs from the platform by @andyluak in loft-sh/loft-enterprise#7045
• feat(ui) - updated profile page by @andyluak in loft-sh/loft-enterprise#7035
• feat(ui) - smart page size for data table by @andyluak in loft-sh/loft-enterprise#7179
• fix(ui/be) - custom audit logging by @andyluak in loft-sh/loft-enterprise#6587
• fix: Fix some layout issues and remove broken sidebar link by @PRTTMPRPHT in loft-sh/loft-enterprise#7181
• feat(ui) - UI settings section by @andyluak in loft-sh/loft-enterprise#7178
• refactor(api): move Authentication types from management/v1 to storag… by @lizardruss in loft-sh/loft-enterprise#7177
• feat: Add sso connectors editor component and rename ExpansionsList t… by @PRTTMPRPHT in loft-sh/loft-enterprise#7176
• fix(ui): render template parameters in a single full-width column by @andyluak in loft-sh/loft-enterprise#7186
• fix: Fix control plane status mouse interactivity on revamped status … by @PRTTMPRPHT in loft-sh/loft-enterprise#7185
• fix: Fix spacing on revamped status page by @PRTTMPRPHT in loft-sh/loft-enterprise#7182
• fix: Fix icons for expansion state of control plane pods status by @PRTTMPRPHT in loft-sh/loft-enterprise#7183
• fix: Remove template entry from tenant cluster header by @PRTTMPRPHT in loft-sh/loft-enterprise#7184
• fix(audit): only mark audit logging as used when license permits it by @neogopher in loft-sh/loft-enterprise#7012
• fix(prerelease): correct vcluster upgrade-version resolver for SemVer & same-default case by @sowmyav27 in loft-sh/loft-enterprise#7192
• fix(ci): drop stale kind cluster queries from debug-cluster action by @roehrijn in loft-sh/loft-enterprise#7193
• feat(ui) - merge nodes page by @andyluak in loft-sh/loft-enterprise#7190
• test(e2e): scheduled S3 pod-identity auto-snapshot spec (ENGQA-1139) by @roehrijn in loft-sh/loft-enterprise#7194
• feat(ui) - merge nodes fix by @andyluak in loft-sh/loft-enterprise#7200
• refactor(e2e/standalone): migrate host + in-pod standalone to the unified substrate provider by @roehrijn in loft-sh/loft-enterprise#7189
• test(e2e): delete migrated db-as-datasource tests by @roehrijn in loft-sh/loft-enterprise#7208
• chore(ui): remove volume snapshot ui code by @andyluak in loft-sh/loft-enterprise#7207
• [main] bump vCluster version to 0.35.1 (#7206) by @loft-bot in loft-sh/loft-enterprise#7209
• test(e2e): gate pre-release chart upgrade on real rollout + teardown diagnostics by @anvesh-loft in loft-sh/loft-enterprise#7112
• fix(e2e): provide server.secretkey for argocd v3 helm install by @roehrijn in loft-sh/loft-enterprise#7210
• feat: Add virtual machine graph view by @PRTTMPRPHT in loft-sh/loft-enterprise#7196
• UI for platform config by @andyluak in loft-sh/loft-enterprise#7197
• feat(ui) - platform config line fix by @andyluak in loft-sh/loft-enterprise#7216
• fix: Fix link to nodes page on status page for private nodes clusters by @PRTTMPRPHT in loft-sh/loft-enterprise#7217
• chore(prerelease): Add post-upgrade VCI stability and restart checks by @adriankabala in loft-sh/loft-enterprise#7215
• Check VCI control-plane pods do not restart after platform upgrade by @anvesh-loft in loft-sh/loft-enterprise#7198
• fix: Fix blank page on tenant cluster links and private nodes node routing by @andyluak in loft-sh/loft-enterprise#7219
• Feat/eng platform config visual inspection by @andyluak in loft-sh/loft-enterprise#7221
• fix(e2e): standalone snapshot diagnostics for Flannel/konnectivity-down failures by @roehrijn in loft-sh/loft-enterprise#7220
• test(e2e): standalone platform-connected snapshot/restore (A11/A12) by @roehrijn in loft-sh/loft-enterprise#7218
• feat: Fix some issues for small screens on improved tenant cluster st… by @PRTTMPRPHT in loft-sh/loft-enterprise#7201
• fix(ui): correct Helm-expression coachmark positioning and dismissal by @andyluak in loft-sh/loft-enterprise#7222
• feat(ui) - create resources from all projects view by @andyluak in loft-sh/loft-enterprise#7180
• test(e2e/auto-nodes): dump vCluster control-plane pod logs on node-join failure by @sowmyav27 in loft-sh/loft-enterprise#7231
• feat(ci): report runner-tier cost and fix included-minute accounting by @Piotr1215 in loft-sh/loft-enterprise#7249
• Change pprof endpoint to only be exposed locally by @rmweir in loft-sh/loft-enterprise#7232
• fix: Fix disabled state of create node provider buttons by @PRTTMPRPHT in loft-sh/loft-enterprise#7051
• fix: Fix header of "get started" subsection on status page by @PRTTMPRPHT in loft-sh/loft-enterprise#7226
• feat: Add "no actions" context menu for empty items in VM graph by @PRTTMPRPHT in loft-sh/loft-enterprise#7242
• chore: Generate all APIs by @nprokopic in loft-sh/loft-enterprise#7255
• fix: Fix detection of error state for KubeVirt data volumes by @PRTTMPRPHT in loft-sh/loft-enterprise#7235
• fix: Fix actions availability for virtual machines by @PRTTMPRPHT in loft-sh/loft-enterprise#7234
• fix: Add loading spinner to VM graph by @PRTTMPRPHT in loft-sh/loft-enterprise#7228
• feat: Add redirect to virtual machines list if vm is deleted on detai… by @PRTTMPRPHT in loft-sh/loft-enterprise#7229
• fix: Fix name truncation of control plane pods on status page by @PRTTMPRPHT in loft-sh/loft-enterprise#7227
• feat: Refactor host cluster drilldown to match established drilldown … by @PRTTMPRPHT in loft-sh/loft-enterprise#7225
• feat(ui) - vpn diagnostistics tab by @andyluak in loft-sh/loft-enterprise#7247
• feat(ui): add template summary card to tenant cluster creation wizard by @andyluak in loft-sh/loft-enterprise#7248
• fix(ui): remove duplicate Template Parameters headline in tenant cluster creation by @andyluak in loft-sh/loft-enterprise#7240
• feat: add forward-token passthrough mode for tenant clusters by @lizardruss in loft-sh/loft-enterprise#7191
• feat(ui) - template usage sidebar entry by @andyluak in loft-sh/loft-enterprise#7239
• refactor: remove runner by @FabianKramm in loft-sh/loft-enterprise#7250
• fix(ui): fade separator color change on hover in split pane by @andyluak in loft-sh/loft-enterprise#7245
• fix: retry loft sleep vcluster on transient conflict in network peer cleanup e2e by @sowmyav27 in loft-sh/loft-enterprise#7260
• fix(ui): conditional sidebar action buttons + link icon for nav buttons by @andyluak in loft-sh/loft-enterprise#7243
• feat(ui): replace add-user-to-team dialog with inline popover by @andyluak in loft-sh/loft-enterprise#7246
• test(management): retry kubectl shell get on default serviceaccount race by @anvesh-loft in loft-sh/loft-enterprise#7263
• feat(ui) - simplify upgrade dialog by @andyluak in loft-sh/loft-enterprise#7244
• feat(ui) - custom links section by @andyluak in loft-sh/loft-enterprise#7241
• feat(ui) - render template parameters in vcluster config by @andyluak in loft-sh/loft-enterprise#7057
• fix(ci): wait for 2 network peers after runner removal by @Piotr1215 in loft-sh/loft-enterprise#7267
• test(ui): run platform ui tests on browserstack safari by @Piotr1215 in loft-sh/loft-enterprise#7238
• chore: removes volume snapshot by @jjaferson in loft-sh/loft-enterprise#7068
• test(e2e): capture agent/mesh diagnostics on NoOnlinePeers (do not self-heal) by @sowmyav27 in loft-sh/loft-enterprise#7261
• test(e2e): move argocd v2 suite to a dedicated ephemeral platform; reactivate RG-03 by @roehrijn in loft-sh/loft-enterprise#7258
• fix(url): allow oci artifact as repoURL in argoCD application by @flomedja in loft-sh/loft-enterprise#7283
• chore(go.mod): remove unused import by @seanschneeweiss in loft-sh/loft-enterprise#7266
• chore: bump kine to v0.14.16.vcluster.2 by @rlmcpherson in loft-sh/loft-enterprise#7288
• chore(deps): update dependency @babel/core to v7.29.6 [security] by @renovate[bot] in loft-sh/loft-enterprise#7173
• chore(deps): update alpine docker tag to v3.24 by @renovate[bot] in loft-sh/loft-enterprise#7008
• fix(prerelease): tolerate Gateway-API pending Unknown in VCI conditions (AI Cloud) + konnectivity diagnostics (vCluster) by @sowmyav27 in loft-sh/loft-enterprise#7287
• fix(ui): stabilize platform config boolean toggles and validate host by @andyluak in loft-sh/loft-enterprise#7265
• feat(ui): add namespace selector to tenant cluster Inspect Resources by @andyluak in loft-sh/loft-enterprise#7254
• test(ui): fix mockReturnValue is not a function by @seanschneeweiss in loft-sh/loft-enterprise#7306
• feat(ui) - synthetic deprecated volume snapshot condition by @andyluak in loft-sh/loft-enterprise#7286
• chore(renovate): bump default vcluster version on release branches by @Piotr1215 in loft-sh/loft-enterprise#7187
• feat(oidc): support adfs access_token_issuer for access token exchange by @matskiv in loft-sh/loft-enterprise#7299
• chore(deps): bump loft-sh/apiserver to enable ValidatingAdmissionPolicy in management.loft.sh by @matskiv in loft-sh/loft-enterprise#7300
• chore: bump kine to v0.14.16.vcluster.3 by @rlmcpherson in loft-sh/loft-enterprise#7329
• refactor: increase bootstrap token timeout to 24 hours by @FabianKramm in loft-sh/loft-enterprise#7310
• feat(ui) - small fixes across ui by @andyluak in loft-sh/loft-enterprise#7315
• ci(e2e-nightly): default manual-dispatch notifications to off by @roehrijn in loft-sh/loft-enterprise#7308
• Update sidebar nav Argo icons by @vaidaslamanauskas in loft-sh/loft-enterprise#7281
• fix: Fix extra resources options for clusters to not include duplicates by @PRTTMPRPHT in loft-sh/loft-enterprise#7271
• fix(ui): small maintenance fixes for ENGUI-100, ENGUI-206, ENGUI-594 by @andyluak in loft-sh/loft-enterprise#7109
• feat(ui) - fix wrong margin set on template drilldown header by @andyluak in loft-sh/loft-enterprise#7371
• feat(ui) - project secrets table column customization by @andyluak in loft-sh/loft-enterprise#7373
• ci(CODEOWNERS): fix typo in control plane team by @seanschneeweiss in loft-sh/loft-enterprise#7374
• feat(ui) - reposition status by @andyluak in loft-sh/loft-enterprise#7372
• fix: Fix KubeVirt namespace placeholder by @PRTTMPRPHT in loft-sh/loft-enterprise#7272
• fix: Fix some minor UX issues in virtual machines by @PRTTMPRPHT in loft-sh/loft-enterprise#7302
• fix: Fix worker nodes count not reflecting NotReady nodes by @PRTTMPRPHT in loft-sh/loft-enterprise#7314
• feat: Add template upgrade action to status page by @PRTTMPRPHT in loft-sh/loft-enterprise#7316
• ci: overlap docker setup with the ui build in head images by @Piotr1215 in loft-sh/loft-enterprise#7253
• fix(autoscaling): fix deletion of non existing workspace by @seanschneeweiss in loft-sh/loft-enterprise#7304
• refactor(e2e): use shared parse-label-filter action by @Piotr1215 in loft-sh/loft-enterprise#7301
• test(e2e): add negative NodeClaim-scheduling case to auto_nodes by @adriankabala in loft-sh/loft-enterprise#7298
• chore: regen with gen-go to dissolve dirty git state by @seanschneeweiss in loft-sh/loft-enterprise#7381
• feat(e2e): prioritize long-running specs using historical durations by @roehrijn in loft-sh/loft-enterprise#7052
• fix: don't claim powered on nodes by @FabianKramm in loft-sh/loft-enterprise#7383
• fix: say volume snapshots are "removed" not "deprecated" by @andyluak in loft-sh/loft-enterprise#7384
• fix: show status label text in Apps table by @andyluak in loft-sh/loft-enterprise#7385
• chore(ui): run all ui:ci checks instead of killing on first failure by @andyluak in loft-sh/loft-enterprise#7390
• fix: reject removed volume-snapshot config keys on 0.36+ tenant clusters by @andyluak in loft-sh/loft-enterprise#7386
• feat(rbac): let metrics-writer keys read their own vci and create selves by @johannesfrey in loft-sh/loft-enterprise#7382
• chore(api): deprecate migrating virtual cluster instances between projects by @seanschneeweiss in loft-sh/loft-enterprise#7276
• fix(e2e): cap specpriority spread below the smallest raw LPT priority by @roehrijn in loft-sh/loft-enterprise#7394
• fix: Fix application of default tooltips to status badges to correct … by @PRTTMPRPHT in loft-sh/loft-enterprise#7392
• chore(e2e): remove dead GetPlatformHostPort function by @roehrijn in loft-sh/loft-enterprise#7430
• [main] fix(audit): Never drop audit events for non-JSON request/response bodies (#7305) by @loft-bot in loft-sh/loft-enterprise#7437
• feat(ui) - template sync by @andyluak in loft-sh/loft-enterprise#7425
• [main] test(audit): Add e2e tests for audit (#7379) by @loft-bot in loft-sh/loft-enterprise#7438
• fix(security): remediate high-severity CVEs in vCluster Platform images by @zerbitx in loft-sh/loft-enterprise#7273
• feat(ui): move VPN and KubeVirt under sidebar "More" by default by @andyluak in loft-sh/loft-enterprise#7418
• feat(ui) - fix argo cd parameters by @andyluak in loft-sh/loft-enterprise#7434
• ci(code-freeze): freeze release-* branches on cut, unfreeze on stable tag by @Piotr1215 in loft-sh/loft-enterprise#7378
• chore(renovate): backport only to active release branches by @Piotr1215 in loft-sh/loft-enterprise#7375
• CTO-152 Improve Metal3 UX by @squ94wk in loft-sh/loft-enterprise#7445
• feat(argocd): ship built-in application templates for GPU Apps by @flomedja in loft-sh/loft-enterprise#7296
• feat: node profiles by @neogopher in loft-sh/loft-enterprise#7214
• feat(observability): OTEL collector for tenant cluster as Argo App by @seanschneeweiss in loft-sh/loft-enterprise#7295
• feat(observability): UI and apigateway for the fleet observability by @seanschneeweiss in loft-sh/loft-enterprise#7291
• feat(observability): Connector and reconciler for metrics read/write proxy by @seanschneeweiss in loft-sh/loft-enterprise#7293
• feat(observability): Argo App for Prometheus, Grafana, and Dashboards by @seanschneeweiss in loft-sh/loft-enterprise#7294
• fix: update default metrics write gateway and query proxy images by @lizardruss in loft-sh/loft-enterprise#7454
• feat(ui) - node profiles by @andyluak in loft-sh/loft-enterprise#7451
• [release-4.11] feat(ui) - node profile table actions | feat(ui) - pr review by @loft-bot in loft-sh/loft-enterprise#7463
• [release-4.11] fix(observability): parameterize the fleet app deploy namespace (#7456) by @loft-bot in loft-sh/loft-enterprise#7465
• [release-4.11] fix(ui): update default observability connector namespace to vcluster-platform (#7477) by @loft-bot in loft-sh/loft-enterprise#7479
• [release-4.11] fix(observability): synthesize grafana sso email fallback for emaille… by @johannesfrey in loft-sh/loft-enterprise#7482
• [release-4.11] fix(observability): show not configured instead of not found for missing connector (#7481) by @johannesfrey in loft-sh/loft-enterprise#7487
• [release-4.11] fix(observability): stop setting empty MANAGEMENT_SERVER_NAME on gateway (#7493) by @loft-bot in loft-sh/loft-enterprise#7497
• [release-4.11] fix(e2e): limit bundled template check to presence (#7464) by @loft-bot in loft-sh/loft-enterprise#7471
• [release-4.11] fix(observability): disable prometheus config-reload sidecar incompatible with mtls (#7489) by @loft-bot in loft-sh/loft-enterprise#7501
• [release-4.11] fix(observability): make FIA listen address scrapable by OTEL (#7498) by @loft-bot in loft-sh/loft-enterprise#7503
• [release-4.11] fix(templates): handle float64 number parameter values in FillParameters by @loft-bot in loft-sh/loft-enterprise#7504
• [release-4.11] fix(ui): correct node profiles navigation and allow-all selection by @loft-bot in loft-sh/loft-enterprise#7509
• [release-4.11] fix(observability): fall back to 0 for empty quarantined nodes stat (#7476) by @loft-bot in loft-sh/loft-enterprise#7513
• [release-4.11] fix(ui): private node profiles use 0.36 types and correct placement by @loft-bot in loft-sh/loft-enterprise#7515
• [release-4.11] fix(observability): consistent filtering for GPU dashboard (#7478) by @loft-bot in loft-sh/loft-enterprise#7517
• [release-4.11] fix: Fix observability tab visibility to check for available connector by @loft-bot in loft-sh/loft-enterprise#7519
• [release-4.11] build(deps): drop redundant k8s.io/client-go fork replace by @loft-bot in loft-sh/loft-enterprise#7528
• [release-4.11] fix(observability): normalize trailing slash in grafana platformHost (#7524) by @loft-bot in loft-sh/loft-enterprise#7530
• [release-4.11] fix(argocd): avoid name collisions when multiples platforms share an ArgoCD backend and have identically (#7152) by @loft-bot in loft-sh/loft-enterprise#7525
• [release-4.11] fix(argocd): fix nvsentinel default image version (#7499) by @loft-bot in loft-sh/loft-enterprise#7534
• [release-4.11] fix(argocd): Persist argoCD connection to avoid creating new connection at each request (#7523) by @loft-bot in loft-sh/loft-enterprise#7538
• [release-4.11] fix(observability): otlp endpoint param required, improve description (#7526) by @loft-bot in loft-sh/loft-enterprise#7536
• [release-4.11] chore(observability): remove unused node-exporter, kube-state-metrics (#7532) by @loft-bot in loft-sh/loft-enterprise#7542
• [release-4.11] fix: Add clear button for certificate secret names in observability form by @loft-bot in loft-sh/loft-enterprise#7531
• [release-4.11] chore(cve-fixes): bump vulnerable deps in otel, opentofu, kube, opencost, prometheus, and kine (#7512) by @loft-bot in loft-sh/loft-enterprise#7547
• [release-4.11] fix(observability): exclude control plane cluster from fleet tenant panels (#7533) by @loft-bot in loft-sh/loft-enterprise#7548
• [release-4.11] fix(argocd): enable DCGM XID and NVLink error metrics (#7552) by @loft-bot in loft-sh/loft-enterprise#7553
• [release-4.11] fix(sleepmode): let onboarded tenant clusters auto-sleep despite argocd polling (#7539) by @loft-bot in loft-sh/loft-enterprise#7558
• [4.11] Update DefaultVClusterVersion to 0.36.0-rc.3 by @deniseschannon in loft-sh/loft-enterprise#7559
• [release-4.11] Update DefaultVClusterVersion to 0.36.0 by @mfranczy in loft-sh/loft-enterprise#7563

Full Changelog: loft-sh/loft-enterprise@v4.10.5...v4.11.0