From 93b1adb3f379a373ee2482cd4c1d303e4cbd5d9c Mon Sep 17 00:00:00 2001 From: armory-astrolabe Date: Mon, 27 Jul 2026 14:19:44 +0000 Subject: [PATCH 1/3] chore(release): add release notes for 2.40.2 --- .../armoryspinnaker_v2-40-2.md | 193 ++++++++++++++++++ payload.json | 150 +++++++------- 2 files changed, 268 insertions(+), 75 deletions(-) create mode 100644 content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md diff --git a/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md b/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md new file mode 100644 index 0000000000..01ab547564 --- /dev/null +++ b/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md @@ -0,0 +1,193 @@ +--- +title: v2.40.2 Armory Continuous Deployment Release (Spinnaker™ v1.40.0) +toc_hide: true +version: +date: 2026-07-27 +description: > + Release notes for Armory Continuous Deployment v2.40.2. +--- + + + +## 2026/07/27 release notes + +>Note: If you experience production issues after upgrading Armory Continuous Deployment, roll back to a previous working version and report issues to [http://go.armory.io/support](http://go.armory.io/support). + +## Required Armory Operator version +{{% alert color="warning" title="Important" %}} +[Armory Operator]({{< ref "armory-operator" >}}) has been deprecated and will is considered EOL. Please migrate to the [Kustomize]({{< ref "armory-operator-to-kustomize-migration" >}}) method of deployment. +{{% /alert %}} + +To install, upgrade, or configure Armory CD 2.40.2, use Armory Operator 1.8.6 or later. + +## Security + +Armory scans the codebase as we develop and release software. Contact your Armory account representative for information about CVE scans for this release. + +## Breaking changes + + +> Breaking changes are kept in this list for 3 minor versions from when the change is introduced. For example, a breaking change introduced in 2.21.0 appears in the list up to and including the 2.24.x releases. It would not appear on 2.25.x release notes. + +## Known issues + + +## Highlighted updates + + + + + + +### Spinnaker community contributions + +There have also been numerous enhancements, fixes, and features across all of Spinnaker's other services. See the +[Spinnaker v1.40.0](https://www.spinnaker.io/changelogs/1.40.0-changelog/) changelog for details. + +## Detailed updates + +### Bill Of Materials (BOM) + +
Expand to see the BOM +
+artifactSources:
+  dockerRegistry: docker.io/armory
+dependencies:
+  redis:
+    commit: null
+    version: 2:2.8.4-2
+services:
+  clouddriver:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  deck:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  dinghy:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  echo:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  fiat:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  front50:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  gate:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  igor:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  kayenta:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  monitoring-daemon:
+    commit: null
+    version: 2.26.0
+  monitoring-third-party:
+    commit: null
+    version: 2.26.0
+  orca:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  rosco:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+  terraformer:
+    commit: 6e605c0756d2286bed4b85326b084af6e8ab8c20
+    version: 2.40.2
+timestamp: "2026-07-27 12:59:34"
+version: 2.40.2
+
+
+
+ +### Armory + + +#### Armory Igor - 2.40.1...2.40.2 + + +#### Armory Fiat - 2.40.1...2.40.2 + + +#### Armory Orca - 2.40.1...2.40.2 + + +#### Armory Rosco - 2.40.1...2.40.2 + + +#### Armory Front50 - 2.40.1...2.40.2 + + +#### Armory Echo - 2.40.1...2.40.2 + + +#### Armory Clouddriver - 2.40.1...2.40.2 + + +#### Armory Gate - 2.40.1...2.40.2 + + +#### Armory Dinghy - 2.40.1...2.40.2 + + +#### Armory Deck - 2.40.1...2.40.2 + + +#### Armory Kayenta - 2.40.1...2.40.2 + + +#### Armory Terraformer - 2.40.1...2.40.2 + + + +### Spinnaker + + +#### Spinnaker Igor - 1.40.0 + + +#### Spinnaker Fiat - 1.40.0 + + +#### Spinnaker Orca - 1.40.0 + + +#### Spinnaker Rosco - 1.40.0 + + +#### Spinnaker Front50 - 1.40.0 + + +#### Spinnaker Echo - 1.40.0 + + +#### Spinnaker Clouddriver - 1.40.0 + + +#### Spinnaker Gate - 1.40.0 + + +#### Spinnaker Dinghy - 1.40.0 + + +#### Spinnaker Deck - 1.40.0 + + +#### Spinnaker Kayenta - 1.40.0 + + +#### Spinnaker Terraformer - 1.40.0 + + diff --git a/payload.json b/payload.json index 2679e9f07a..5677e43235 100644 --- a/payload.json +++ b/payload.json @@ -2,149 +2,149 @@ "armoryServices": [ { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Clouddriver", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Igor", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Terraformer", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Fiat", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Igor", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Orca", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Echo", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Rosco", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Rosco", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Front50", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Dinghy", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Echo", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Deck", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Clouddriver", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Front50", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Gate", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Orca", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Dinghy", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Fiat", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Deck", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Gate", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Kayenta", + "previousVersion": "2.40.1" }, { "commitMessages": [], - "currentVersion": "2.40.1", - "name": "Armory Kayenta", - "previousVersion": "2.40.0" + "currentVersion": "2.40.2", + "name": "Armory Terraformer", + "previousVersion": "2.40.1" } ], - "armoryVersion": "2.40.1", + "armoryVersion": "2.40.2", "ossServices": [ { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Clouddriver", + "name": "Spinnaker Igor", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Terraformer", + "name": "Spinnaker Fiat", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Igor", + "name": "Spinnaker Orca", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Echo", + "name": "Spinnaker Rosco", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Rosco", + "name": "Spinnaker Front50", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Dinghy", + "name": "Spinnaker Echo", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Deck", + "name": "Spinnaker Clouddriver", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Front50", + "name": "Spinnaker Gate", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Orca", + "name": "Spinnaker Dinghy", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Fiat", + "name": "Spinnaker Deck", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Gate", + "name": "Spinnaker Kayenta", "previousVersion": "1.40.0" }, { "commitMessages": [], "currentVersion": "1.40.0", - "name": "Spinnaker Kayenta", + "name": "Spinnaker Terraformer", "previousVersion": "1.40.0" } ], @@ -162,40 +162,40 @@ }, "services": { "clouddriver": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "deck": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "dinghy": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "echo": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "fiat": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "front50": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "gate": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "igor": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "kayenta": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "monitoring-daemon": { "commit": null, @@ -206,19 +206,19 @@ "version": "2.26.0" }, "orca": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "rosco": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" }, "terraformer": { - "commit": "e099cb401ee08c956cd23ff1871e2d403263f479", - "version": "2.40.1" + "commit": "6e605c0756d2286bed4b85326b084af6e8ab8c20", + "version": "2.40.2" } }, - "timestamp": "2026-07-15 12:34:36", - "version": "2.40.1" + "timestamp": "2026-07-27 12:59:34", + "version": "2.40.2" } } \ No newline at end of file From 00725c004bb9ae5a08f35727d7b3251aa4f6796c Mon Sep 17 00:00:00 2001 From: christosarvanitis Date: Tue, 28 Jul 2026 16:53:04 +0300 Subject: [PATCH 2/3] Updating 2.40.2 release notes --- .../armoryspinnaker_v2-40-2.md | 335 ++++++++++++++++-- 1 file changed, 314 insertions(+), 21 deletions(-) diff --git a/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md b/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md index 01ab547564..742a81db82 100644 --- a/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md +++ b/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md @@ -1,5 +1,5 @@ --- -title: v2.40.2 Armory Continuous Deployment Release (Spinnaker™ v1.40.0) +title: v2.40.2 Armory Continuous Deployment Release (Spinnaker™ 2026.2.2) toc_hide: true version: date: 2026-07-27 @@ -28,28 +28,321 @@ To install, upgrade, or configure Armory CD 2.40.2, use Armory Operator 1.8.6 or Armory scans the codebase as we develop and release software. Contact your Armory account representative for information about CVE scans for this release. ## Breaking changes - > Breaking changes are kept in this list for 3 minor versions from when the change is introduced. For example, a breaking change introduced in 2.21.0 appears in the list up to and including the 2.24.x releases. It would not appear on 2.25.x release notes. +### Gate: Spring Security 5 Oauth2 Migration +Armory CD 2.38.0 removes deprecate Oauth2 annotations and uses Spring Security 5 DSL. In order to configure oauth2 in `gate-local.yml` have changed to: + +## Google Oauth configuration +```yaml +spring: + security: + oauth2: + client: + registration: + google: + client-id: + client-secret: + authorization-grant-type: authorization_code + redirect-uri: "https:///login/oauth2/code/google" + scope: profile,email,openid + client-name: google + provider: + google: + authorization-uri: https://accounts.google.com/o/oauth2/auth + token-uri: https://oauth2.googleapis.com/token + user-info-uri: https://www.googleapis.com/oauth2/v3/userinfo + user-name-attribute: sub +``` +## Github Oauth2 configuration +```yaml +spring: + security: + oauth2: + client: + registration: + userInfoMapping: + email: email + firstName: '' + lastName: name + username: login + github: + client-id: + client-secret: + authorization-grant-type: authorization_code + redirect-uri: "https:///login/oauth2/code/github" + scope: user,email + client-name: github + provider: + github: + authorization-uri: https://github.com/login/oauth/authorize + token-uri: https://github.com/login/oauth/access_token + user-info-uri: https://api.github.com/user + user-name-attribute: login +``` + +### Orca: Tasks configuration changes +The following configuration properties have been restructured in `orca-local.yml`: + +Previous Configuration: + +```yaml +tasks: + days-of-execution-history: + number-of-old-pipeline-executions-to-include: +``` + +New configuration format + +```yaml +tasks: + controller: + days-of-execution-history: + number-of-old-pipeline-executions-to-include: + optimize-execution-retrieval: + max-execution-retrieval-threads: + max-number-of-pipeline-executions-to-process: + execution-retrieval-timeout-seconds: +``` + +These changes improve query performance and execution retrieval efficiency, particularly for large-scale pipeline applications. + +### Policy Engine (OPA) is now built into Armory CD + +The Policy Engine is now built into the Armory CD distribution. The `Armory.PolicyEngine` plugin and the `armory.opa` configuration block are replaced by a native `armory.policy-engine` block. Remove the `Armory.PolicyEngine` plugin from `spinnaker.extensibility.plugins` in every service that had it configured and update the configuration block in `clouddriver-local.yml`, `front50-local.yml`, and any other service profile that references OPA: + +Previous: +```yaml +armory: + opa: + enabled: true + url: http://opa-server.opa:8181/v1 +``` + +New: +```yaml +armory: + policy-engine: + enabled: true + baseurl: http://opa-server.opa:8181/v1 +``` + +The OPA server deployment and policies are unchanged. + +### Kubernetes Agent (Kubesvc) is now built into Armory CD + +The Scale Agent plugin (`Armory.Kubesvc`) is now built into the Armory CD Clouddriver image. The plugin, its repository, and the top-level `kubesvc:` configuration block must be replaced by the native `armory.kubesvc:` block in `clouddriver-local.yml`: + +Previous: +```yaml +kubesvc: + cluster: kubernetes + +spinnaker: + extensibility: + plugins: + Armory.Kubesvc: + enabled: true + version: 0.16.2 + extensions: + armory.kubesvc: + enabled: true + repositories: + armory-agent: + url: https://raw.githubusercontent.com/armory-io/agent-k8s-spinplug-releases/master/repositories.json +``` + +New: +```yaml +armory: + kubesvc: + enabled: true + cluster: kubernetes +``` + +All sub-properties (grpc, cache, heartbeat, operations, credentials) stay the same — only the parent key changes. Remove `Armory.Kubesvc` from `spinnaker.extensibility.plugins` and `armory-agent` from `spinnaker.extensibility.repositories`. The Armory Agent **service** deployed in target clusters is unchanged. + +### Spring Boot 3.5 upgrade + +Armory CD 2.40.2 upgrades to Spring Boot 3.5, the latest supported release. This is a major upgrade from Spring Boot 3.0 introduced in Armory CD 2.39.0. Plugins built against earlier Spring Boot versions will need to be updated to be compatible with this release. + +**Actuator metrics export property changes** (introduced in 2.39.0) + +If upgrading from a version prior to 2.39.0, note that the metrics export properties have moved: + +| Old Property Prefix | New Property Prefix | +|---------------------|---------------------| +| `management.metrics.export.` | `management..metrics.export` | + +**Gate session data cleanup** (introduced in 2.39.0) + +If upgrading from a version prior to 2.39.0, flush Gate's Redis session cache before upgrading: + +```bash +redis-cli keys "spring:session*" | xargs redis-cli del +``` + +### YAML parsing limits now configurable + +Starting with SnakeYAML 1.33, strict safety limits are enforced by default (`maxAliasesForCollections = 50`, `codePointLimit = 3145728`). These can cause large or alias-heavy YAML files such as Kubernetes manifests to fail. Two new properties allow operators to override these limits: + +```yaml +snakeyaml: + max-aliases-for-collections: 500 # default: 50 + code-point-limit: 10485760 # default: 3145728 +``` + +### AWS JDBC Driver Update + +The AWS JDBC driver has been updated from the deprecated aws-mysql-jdbc driver (version 1.0.0) to the [AWS Advanced JDBC Wrapper](https://github.com/aws/aws-advanced-jdbc-wrapper). + +This update adds support for IAM authentication with AWS Aurora Global Database endpoints. The previous driver did not support global database endpoint format (`*.global.rds.amazonaws.com`) when using IAM authentication, resulting in the error: + +``` +java.sql.SQLException: Unsupported AWS hostname '.global.rds.amazonaws.com'. +Amazon domain name in format *.AWS-Region.rds.amazonaws.com is expected +``` + +**Note:** Standard database connections (without IAM authentication) continue to work as before and do not require any configuration changes. + +**Affected services:** Front50, Orca, Clouddriver, Fiat + +#### Configuration for IAM Authentication with Aurora Global Database + +If you are using IAM authentication and want to connect to Aurora Global Database endpoints, update your JDBC connection string: + +**New JDBC URL format:** + +``` +jdbc:aws-wrapper:mysql://:/?wrapperPlugins=iam&globalClusterInstanceHostPatterns=?...rds.amazonaws.com,?...rds.amazonaws.com&iamRegion= +``` + +**Example:** If your Aurora Global Database has: +- Global endpoint: `mydb-global.global-xxxxx.global.rds.amazonaws.com` +- Primary (us-west-2): `mydb.cluster-abc123.us-west-2.rds.amazonaws.com` +- Secondary (us-east-1): `mydb.cluster-abc123.us-east-1.rds.amazonaws.com` + +Configure the JDBC URL as: +``` +jdbc:aws-wrapper:mysql://mydb-global.global-xxxxx.global.rds.amazonaws.com:3306/front50?wrapperPlugins=iam&globalClusterInstanceHostPatterns=?.cluster-abc123.us-west-2.rds.amazonaws.com,?.cluster-abc123.us-east-1.rds.amazonaws.com&iamRegion=us-west-2 +``` + + +### OSS Spinnaker images moved to GHCR + +OSS Spinnaker images are no longer published to Google Artifact Registry (GAR) and now pull from GitHub Container Registry (GHCR) at `ghcr.io/spinnaker/`. **Armory CD images continue to be published to Docker Hub** (`docker.io/armory`) and are unaffected. If you consume any OSS Spinnaker images directly alongside your Armory CD deployment, update those image references to point to GHCR before upgrading. + +### Halyard fully deprecated + +Halyard is no longer supported and will not receive patches or updates. Migrate to [spinnaker-kustomize](https://github.com/spinnaker/spinnaker-kustomize-patches) or a similar implementation. + +### MySQL 8+ now required + +Due to recent SQL library upgrades, MySQL 5.7 is no longer supported and will fail on startup. You must be running MySQL 8.0+ or an equivalent MariaDB version before upgrading to Armory CD 2.40.2. + +### Redis/Valkey 7+ now required + +Redis or Valkey 7.0+ is required for Armory CD 2.40.2. Older versions are not supported and may cause failures. Armory already deploys Redis 7+ by default — verify your Redis version before upgrading if you manage your own Redis instance. + +### AWS SDK v1 deprecated + +AWS SDK v2 support has been introduced across Spinnaker services. AWS SDK v1 is expected to be removed in an upcoming release. If you have custom implementations using SDK v1, begin migrating to the v2 integrations now. + +### EDDA support removed + +EDDA is no longer supported and will be removed once the AWS SDK v2 migration is complete. If you rely on EDDA, contact the Spinnaker Slack community before upgrading. + +### Armory Scale Agent (Kubesvc) deprecation notice + +The Armory Scale Agent (Kubesvc) is planned for deprecation in the next major release of Armory CD. + +### URL trailing-slash handling changed + +Due to Spring Boot changes, a new filter has been added that restores lenient handling of trailing slashes. If you have controllers (in plugins or custom code) that only register a trailing-slash route, those controllers may break. You can adjust or disable this filter per service: + +```yaml +url-handler: + trailing-slash: + enabled: true # set false to opt out + path-patterns: + - "/**" # narrow if desired +``` + +It is recommended to update any affected controllers to handle both paths with and without a trailing slash. + ## Known issues - + +No known issues at this time. ## Highlighted updates - +### Gate: API token authentication + +Spinnaker now supports first-class, revocable API tokens for authenticating programmatic requests against Gate. Tokens are minted, listed, and revoked through a new self-service UI in Deck, persisted in Redis by Gate, and resolved on every inbound request by a dedicated Spring Security chain. + +The feature is **off by default**. To enable, add the following to your `gate-local.yml`: + +```yaml +api-tokens: + enabled: true +``` + +Key capabilities: +- **Per-credential revocation** — revoking one token does not affect other tokens for the same user or service account +- **Bounded lifetime** — user tokens always expire; admin-tunable max lifetimes (90 days for users, 365 days for service accounts by default) +- **IAP-compatible** — tokens use the `X-Spinnaker-Token: spk_…` header, which flows cleanly through GCP IAP +- **Operator observability** — a new `gate.requests` counter tagged with `authType`, `principalKind`, `method`, `statusCode`, and `status` + +### ECS: Major performance improvements + +ECS caching agents have been migrated to AWS SDK v2 and significantly optimized. Previously, several agents loaded all data for all accounts into memory before filtering. These agents now load only the data relevant to the requested account, significantly reducing memory footprint and database throughput for deployments with large numbers of ECS accounts. + +### Microsoft Teams: Jinja template support + +The Microsoft Teams notification integration now uses configurable Jinja templates to determine notification payloads, replacing the previously hardcoded message format. Two templates are provided out of the box and can be overridden: + +- `event-notification.jinja` +- `pipeline-notification.jinja` + +To override with custom templates, set the template path in your `echo-local.yml`: + +```yaml +microsoftteams: + enabled: true + templatePath: /opt/spinnaker/config/teams-templates +``` + +**Note:** `status` is now a required field on pipeline notification templates. Users on legacy Outlook webhook endpoints will receive deprecation warnings in logs — see the [migration guide](https://github.com/jasonmcintosh/spinnaker/blob/179e86695004fc8ec6c41ccc5b848a59a2154af1/echo/echo-notifications/src/main/resources/templates/microsoftteams/MIGRATION_GUIDE.md) for details. + +### Igor: Jenkins job cancellation + +When a Spinnaker pipeline is cancelled, any associated Jenkins job triggered by that pipeline is now also cancelled automatically. + +### Webhooks: Stage timeout support +Webhook stages now respect the overridden `stageTimeoutMs` value set on the stage configuration. Previously this value was ignored, causing webhook stages to run until the global timeout elapsed. +### AWS SDK v2: Credentials bridge for non-AWS environments +The AWS SDK v2 credential path now bridges v1 credentials to v2, fixing credential discovery in non-AWS environments such as GKE pods using STS assume-role. Previously the v2 path used `DefaultCredentialsProvider` which could not discover credentials in these environments. All configured v1 `AWSCredentialsProvider` instances (including STS assume-role with token refresh) are now adapted for use by the v2 SDK. ### Spinnaker community contributions There have also been numerous enhancements, fixes, and features across all of Spinnaker's other services. See the -[Spinnaker v1.40.0](https://www.spinnaker.io/changelogs/1.40.0-changelog/) changelog for details. +[Spinnaker 2026.2.2](https://www.spinnaker.io/changelogs/2026.2.2-changelog/) changelog for details. + +Notable upstream changes included in this release span OSS versions 2026.2.0 through 2026.2.2: +- Spring Boot upgraded to 3.5 (latest supported release) +- Gradle 8 upgrade +- UI build system migrated from yarn/npm to pnpm +- ECS caching agents migrated to AWS SDK v2 +- API token authentication support added to Gate +- Microsoft Teams Jinja template notifications +- Jenkins job cancellation on pipeline cancel +- Webhook stage timeout now respected +- CVE dependency upgrades (2026.2.2) +- Kayenta stage UI formatting fix (2026.2.2) ## Detailed updates @@ -115,40 +408,40 @@ version: 2.40.2 ### Armory -#### Armory Igor - 2.40.1...2.40.2 +#### Armory Igor - 2.40.2...2.40.2 -#### Armory Fiat - 2.40.1...2.40.2 +#### Armory Fiat - 2.40.2...2.40.2 -#### Armory Orca - 2.40.1...2.40.2 +#### Armory Orca - 2.40.2...2.40.2 -#### Armory Rosco - 2.40.1...2.40.2 +#### Armory Rosco - 2.40.2...2.40.2 -#### Armory Front50 - 2.40.1...2.40.2 +#### Armory Front50 - 2.40.2...2.40.2 -#### Armory Echo - 2.40.1...2.40.2 +#### Armory Echo - 2.40.2...2.40.2 -#### Armory Clouddriver - 2.40.1...2.40.2 +#### Armory Clouddriver - 2.40.2...2.40.2 -#### Armory Gate - 2.40.1...2.40.2 +#### Armory Gate - 2.40.2...2.40.2 -#### Armory Dinghy - 2.40.1...2.40.2 +#### Armory Dinghy - 2.40.2...2.40.2 -#### Armory Deck - 2.40.1...2.40.2 +#### Armory Deck - 2.40.2...2.40.2 -#### Armory Kayenta - 2.40.1...2.40.2 +#### Armory Kayenta - 2.40.2...2.40.2 -#### Armory Terraformer - 2.40.1...2.40.2 +#### Armory Terraformer - 2.40.2...2.40.2 From ab020c0e4a677cb8a17105bb948847af2cf16848 Mon Sep 17 00:00:00 2001 From: christosarvanitis Date: Tue, 28 Jul 2026 16:55:16 +0300 Subject: [PATCH 3/3] Updating 2.40.2 release notes --- .../rn-armory-spinnaker/armoryspinnaker_v2-40-2.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md b/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md index 742a81db82..41f1dc45d5 100644 --- a/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md +++ b/content/en/continuous-deployment/release-notes/rn-armory-spinnaker/armoryspinnaker_v2-40-2.md @@ -1,7 +1,7 @@ --- title: v2.40.2 Armory Continuous Deployment Release (Spinnaker™ 2026.2.2) toc_hide: true -version: +version: 2.40.2 date: 2026-07-27 description: > Release notes for Armory Continuous Deployment v2.40.2.