This release includes several enhancements, as well as general improvements across resource management, security, and reliability. You can now configure platform components to run on specific LKE node pools and internal secrets are now generated with ESO Password generator. In addition to other core application updates, both ArgoCD and kube-prometheus-stack received major version updates.

📘

For a full list of changes, review the release notes on GitHub: Release v6.4.0.

New

• Node Pool Targeting — Platform components can now be configured to run on specific node pools using Kubernetes node selectors. This allows you to dedicate nodes for platform workloads and better control resource allocation across your cluster. Note: the OpenTelemetry log collector and Prometheus node exporter continue to deploy cluster-wide regardless of this setting.

Changed

• In-Cluster Secret Generation — Platform secrets are now generated directly within the cluster using External Secrets Operator, eliminating the need for externally managed secret values. This reduces the attack surface and simplifies secret lifecycle management.
• Updated core applications
  • Both ArgoCD and kube-prometheus-stack received major version updates.
  • See the Core application changes table below for additional details.

Core application changes