Dash0 Operator

Fixed a collector crash caused by disableReplicasetInformer.

The operator is now compatible with OpenShift. Added support for the TSA CRD, k8s.node.uid to self-monitoring telemetry, az-awareness for edge-proxy, and opt-out capability for agent0-connector via operator configuration. Fixed a memory leak in DelegatingZapCore and wired metric_recorder into dash0sampling so Signal Control counters populate correctly.

The agent0-connector now enforces custom RBAC restrictions, redacts environment variables from workload resources, and blocks kubectl describe on secrets. OTel collector OTLP host ports are now configurable, and delivery=auto resolution uses kubelet versions.

SCE components now run in a separate collector, and metering components were added. Instrumentation image builds strip unused esm/esnext bundles, and agent0-connector secrets are redacted from Dash0 resources.

Release 0.152.0 is not compatible with GKE Autopilot — continue using 0.146.0 there. Adds an allowInsecureAuthSecrets flag for the target allocator, extracts k8s.node.uid via k8sattributes for collectors, and supports tolerations and node affinity in the agent0 connector.

Added Ruby auto-instrumentation. The operator is not compatible with GKE AutoPilot — users on that platform should continue using release 0.146.0.

Adds the Dash0Team custom resource definition and reconciler, and switches Python instrumentation to the Dash0 OpenTelemetry distribution. Also makes kubeletstats receiver endpoint configurable via Helm, fixes kubeletstat endpoint probe, and re-patches PersesDashboard CRD caBundle after CA rotation.

The operator no longer logs Dash0 auth tokens when writing config and resources. Python 3.9 auto-instrumentation is no longer supported; Python 3.10 is the minimum. High-churn labels and annotations are excluded from collector collection, and a spam filter now supports a values field.

Pipelines are restructured to support namespaced and multiple datasets. Also adds metric recorder components, spam filter and span-to-metrics for k8s events, and uses a namespaced API client for sampling rules sync.

Added support for metrics spam filters in the deployment collector and the ability to use secrets for headers in gRPC and HTTP exports. Also added a resource detector to the deployment collector and exposed additional settings via CRD with an improved default reservoir type.

Added a collectNodeLabelsAndAnnotations option, and the Intelligent Edge component was renamed to Signal Control (Barker to Edge Proxy). The Helm chart now waits until the webhook endpoint is ready before proceeding.

What's Changed

• ci: fix condition for sync_docs_to_website by @basti1302 in https://github.com/dash0hq/dash0-operator/pull/1111
• ci: ignore lastUpdated timestamp when synchronizing docs by @basti1302 in https://github.com/dash0hq/dash0-operator/pull/1112
• ci: update Go…

What's Changed

• feat(iac): retry failed synchronization attempts by @basti1302 in https://github.com/dash0hq/dash0-operator/pull/1097
• fix(chart): add delete policy before-hook-creation to allowlist-synchronizer-ready-check job by @p-d0 in…

What's Changed

• feat(ie): make barker resources, affinities and tolerations configurable by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1081
• fix(workloads): update exporter endpoint w. switching forceUseServiceUrl by @basti1302 in…

What's Changed

• feat(ie): add dash0filter (aka spam filter) to IE collector pipeline by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1046
• chore(deps): bump otel/opentelemetry-collector-ebpf-profiler from 0.152.0 to 0.152.1 in…

What's Changed

• feat(instrumentation): add captureSqlQueryParameters flag by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1048
• feat(operator): identify outbound API traffic with a User-Agent header by @mmanciop in…

What's Changed

• feat: add sync for signal-to-metrics rules by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1039
• feat(ie): add s2m component to ie collector pipeline by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1042
• feat(workloads): use image…

What's Changed

• fix(crd): make most status attributes optional by @basti1302 in https://github.com/dash0hq/dash0-operator/pull/1034
• chore(ta): auto-mount serviceaccount token by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1033
• chore(chart): add setting for…

What's Changed

• fix: panic when verifying resource uniqueness by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1022

Full Changelog: https://github.com/dash0hq/dash0-operator/compare/0.138.0...0.138.1

What's Changed

• test(iac): fix flaky tests by @basti1302 in https://github.com/dash0hq/dash0-operator/pull/1005
• chore(target-allocator): make SecurityContext consistent with other operator resources by @p-d0 in https://github.com/dash0hq/dash0-operator/pull/1010 *…