← Back to all sparks
R

Robusta

INFRA · APIS
Velocity5.0

Kubernetes observability and automation platform

Robusta's 0.54.0 alpha returns to features: Prometheus tenants by namespace and Holmes fixes.

kubernetesalertingprometheusholmescontainer-security
◆Current state
After a month of image patching and CI changes, Robusta's 0.54.0-alpha.1 carries product work again. It derives the Prometheus tenant from a namespace label in the UI and alert graphs, adds dnsConfig to the forwarder Helm deployment, stops the Holmes Slack bot check from blocking or dropping Slack messages, and retires the grafana-renderer. It also patches another set of Python dependency CVEs and stops self-hosted stores from fetching a Supabase key from SaaS.
◆Where it's heading
The release mixes multi-tenant Prometheus support, Holmes AI assistant reliability and fewer SaaS dependencies for self-hosted installs. CVE patching remains a constant in every tag.
◆Prediction
Further Holmes integration work and multi-tenant monitoring changes are the likeliest next items, alongside the usual CVE bumps.

◆Recent moves

  1. 5d ago

    Prometheus tenant from namespace label; Holmes Slack fix

    The first feature-bearing tag since August: namespace-derived Prometheus tenants, forwarder dnsConfig, a Holmes Slack bot fix and the grafana-renderer's removal, plus another CVE sweep.

    View source ↗
  2. 20d ago

    0.54.0-alpha: helm golden-render tests removed from CI

    The only change listed is the removal of helm golden-file render tests that failed CI on any template change. Test infrastructure, with no effect on what users deploy.

    View source ↗
  3. 26d ago

    Runner image backports OpenSSH, curl and systemd from forky

    Backports OpenSSH, curl, expat, util-linux, ncurses and systemd from Debian forky into the image. A follow-up to the previous day's CVE pass rather than a new change.

    View source ↗
  4. 27d ago

    Runner image patched for high and critical CVEs

    Patches high and critical CVEs in the runner image and removes Perl packages orphaned by a Debian upgrade. It starts the October run of image-hardening releases.

    View source ↗
  5. 2mo ago

    Signing-key leak fixed, CVEs patched, PDF stack replaced

    A security-weighted release: signing keys no longer leak through email communications, pull configs and Supabase login gain hardening, and cryptography plus libssh2/attr/acl CVEs are patched. PDF generation is rebuilt on resvg-py and reportlab, and Holmes and KRR are bumped in step with the runner.

    View source ↗
  6. 3mo ago

    Workflow trigger action lets workflows fire other workflows

    Adds a workflow trigger action so Robusta platform workflows can fire other workflows, plus F5 Distributed Cloud in the Send Events docs and a fix for the Alerts Summary table corrupting on long digests. The workflow chaining is the piece that compounds.

    View source ↗