Release notes for Instana AutoTrace webhook

The following features and fixes are added in this release:

• Enhanced image pull credentials handling in the Autotrace mutating webhook to display clear warnings instead of failing when credentials are missing as secrets could be configured to come from internal registries.

The following features and fixes are added in this release:

• Removed the BatchJob that previously deleted the old secret instana-autotrace-webhook-certs. The secret is now replaced with instana-autotrace-webhook-serving-tls and instana-autotrace-webhook-ca. The BatchJob required pulling a new image, which caused issues in air-gapped environments. Instead, the manual cleanup steps are documented in Cleaning up unused secret.

The following features and fixes are added in this release:

• By default, the Instana AutoTrace webhook only mutates pods. The higher-level resources can still be mutated by setting a flag --set autotrace.enableHigherLevelResourceMutation=true.

The following features and fixes are added in this release:

• Fix: use the new serving-cert-secret-name annotation to match the secret used by the deployment in OpenShift.
• Improved BatchJob to use images from registries without strict rate limits.

The following features and fixes are added in this release:

• Removed duplicate label from the Deployment spec.

The following features and fixes are added in this release:

• Switched to RollingUpdate instead of Replace strategy.
• Added startup validation to ensure the webhook is fully initialized before accepting requests.
• Ensure readiness and liveness probes are always set.
• Increased replicas to 2 for HA. Deprecated the use of Helm hooks for generating the instana-autotrace-webhook-certs secret on every installation or upgrade. Instead, run a batch job to clean up the old secret and generate two new persistent secrets (TLS and CA). New certificates are generated only during the initial install or if SANs have changed.

The following features and fixes are added in this release:

• Added a note to the Helm installation that resources must be redeployed after installing the webhook.

The following features and fixes are added in this release:

• You can now use the new Helm chart flag webhook.priorityClass.name to set a priority class for the webhook deployment, enabling pod priority and preemption

  

  .

The following features and fixes are added in this release:

• The containers-instana-io imagePullSecret is now set only when containers.instana.io image is in use.
• An issue is fixed where the webhook removed the opt-in label, which caused inconsistent behavior during reinvocation. The label is now preserved.
• Kubernetes client lifecycle management is improved by properly closing the client when context is destroyed, preventing potential resource leaks.
• Connection request timeouts are added to the Kubernetes client for better stability.
• The webhook timeout is increased from 5 seconds to 30 seconds to allow more time to process requests, which improves reliability in busy clusters.

The following features and fixes are added in this release:

• Webhook operation scope fix: The mutating webhook is now modified to only react to CREATE operations for Kubernetes resources, preventing errors such as pod updates may not add or remove containers when attempting to add initContainers during pod updates.
• Image registry URL parsing fix: The regex logic for image URL handling in Helm templates is improved to correctly append version tags to the full image path instead of the registry domain, ensuring proper image references when using custom registries.

The following features and fixes are added in this release:

• Introduced the global.version flag to control both webhook and instrumentation image versions. This flag is enabled by default and overrides individual image settings. If not set, SHA pinned versions are used. For more information, see Pinning AutoTrace webhook version.

The following features and fixes are added in this release:

• Deprecated support for Ruby 3.0.

The following features and fixes are added in this release:

• Resolved AutoTrace issues with Python 3.12 and later.

The following features and fixes are added in this release:

• Increased the default memory requests and limits for the initContainer.

The following features and fixes are added in this release:

• Introduced a separate debug flag for Netty logs.

The following features and fixes are added in this release:

• Bug fix: Always use the initContainer memory and CPU settings that are configured through flags.

The following features and fixes are added in this release:

• The @instana/collector dependency is updated to version 4.
• The external dependency io.fabric8:kubernetes-server-mock is updated to version 7.

The following features and fixes are added in this release:

• The external dependency puma is updated to version 6.6.0.
• The external dependency rackup is updated to version 2.2.1.
• The external dependency de.dentrassi.crypto:pem-keystore is updated to version 3.

The following features and fixes are added in this release:

• The external dependency org.yaml:snakeyaml is updated to version 2.3.

The following features and fixes are added in this release:

• The external dependency org.assertj:assertj-core is updated to version 3.27.3.

The following features and fixes are added in this release:

• The external dependency org.apache.maven.plugins:maven-surefire-plugin is updated.

The following features and fixes are added in this release:

• The external dependency io.fabric8:kubernetes-server-mock is updated to version 6.13.5.

The following features and fixes are added in this release:

• The external dependency rack is updated to version 3.1.9.
• The external dependency fabric8.kubernetes-client.version is updated to version 6.13.5.

The following features and fixes are added in this release:

• The external dependency org.springframework.boot:spring-boot-starter-parent is updated to version 3.4.2.

The following features and fixes are added in this release:

• The external dependency org.springframework:spring-web is updated to version 6.2.2.

The following features and fixes are added in this release:

• The .NET Core dependency is updated to version 1.289.2.

The following features and fixes are added in this release:

• The code in instana/autotrace-ruby repository, which is used to automatically instrument Ruby code within a pod, is moved to instana/autotrace-mutating-webhook/tree/main/instrumentation/src/ruby repository.

The following features and fixes are added in this release:

• The @instana/collector Node.js package is updated to 4.6.1.

The following features and fixes are added in this release:

• Support for Ruby 3.4 is added.
• The external dependency rack is updated to version 3.1.8.
• The external dependency express is updated to version 4.21.2.
• The external dependency flask is updated to version 3.1.0.
• The external dependency gevent is updated to version 24.11.1.