Release Notes - Chao
Updates to the Gremlin Chao service for Kubernetes.
-
Info Updated dependencies for security patches.
-
Info The gremlin/chao container image is no longer based on
alpine. Several packages have been removed as a result in an effort to maintain a minimal image.
-
Info Updated dependencies for security patches.
- Info Updated dependencies for security patches.
-
Info Updated dependencies for security patches.
- Fix: Disable experimental post-quantum key exchange mechanism X25519Kyber768Draft00 for outgoing TLS connections to the control plane. This was introduced in 0.8.2 with the upgrade to Go 1.23, but was found to have issues with AWS Network Firewall.
- Fix: Log more context around failed updates, such as batch and namespace information.
- Fix: Reduce log noise around Kubernetes API rate limiting
- New: Memory optimizations for reading Kubernetes objects.
- Fix: Trim whitespace around namespaces.
- Info: Updated dependencies.
-
New: Performance enhancements for ingesting objects across large clusters.
-
Info: Updated dependencies for security patches.
-
Info: Added support for arm64 systems.
-
Info: Added support for Argo Rollouts
-
Info: Upgraded to golang 1.23.0 which contains some OS security patches.
-
Info: Upgraded to alpine-3.20.2 which contains some OS security patches.
-
Fix: Fix bug in backoff calculations that would make Chao wait longer than it should after encountering API errors. This would lead to registered clusters disappearing and re-appearing in the Gremlin UI.
-
Info: Change maximum allowed
max_backoff_duration from 10m to 4m. This is also the new default. Users specifying a longer backoff will see Chao agents fail to start as a result.
-
Info: Improved logging around API errors, removing large error outputs and other noise.
- New: Added exponential backoff for updates when encountering 5xx errors
