This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Releases

ESB3027 AgileTV CDN Manager releases

1 - Release esb3027-1.8.0

Build date

TBD

Release status

Type: production

Included components

  • ACD Configuration GUI 4.0.4

Compatibility

This release has been tested with the following product versions:

  • AgileTV CDN Director, ESB3024-1.24.0

Breaking changes from 1.6.x release

Version 1.8 cannot be installed over 1.6 or any earlier release. The platform’s Helm charts were rearranged, and the cluster is now built and managed by deploy, so an earlier cluster cannot be upgraded in place. Install 1.8 on a new cluster and move to it: see the Upgrade Guide.

The manual installation procedure has been removed. deploy, on the installation ISO, is the only supported way to install, upgrade and change the cluster.

Change log

  • NEW: deploy installs, upgrades and reconfigures the whole cluster from one configuration folder, including each machine’s network and firewall
  • NEW: Single installation ISO with everything the installation needs, container images included
  • NEW: acd-admin command for day-to-day operations by admin target: status, logs, restart, shell, exec, cordon, uncordon and drain
  • NEW: acd-support-dump writes a redacted diagnostic tarball for AgileTV support
  • NEW: Command line reference for deploy, acd-admin and acd-support-dump
  • NEW: Kafka metrics are attributed to individual brokers
  • NEW: MaxMind GeoIP databases are loaded into a volume the platform owns

Deprecated functionality

None

System requirements

Red Hat Enterprise Linux 9.4 or later 9.x, or a compatible rebuild, is required. See the System Requirements Guide for more information.

Known limitations

This release requires a clean install. Upgrade from version 1.6 or earlier is not possible. Installation of the software is only supported using a self-hosted configuration.

Security

  • The Kafka ports open to clients outside the cluster have no authentication or encryption. Restrict them to your CDN Directors on your network firewall.
  • Zitadel and Grafana are installed with published default administrator passwords. Create your own Zitadel administrator and disable the default one, as Next Steps describes, and change the password of Grafana’s break-glass administrator, as Grafana Authentication describes.
  • Redis, PostgreSQL, the internal Kafka listener and VictoriaMetrics accept connections from any machine of the cluster without authentication. Keep the backplane network limited to the cluster’s machines.
  • Plain HTTP on port 80 serves the GUI without redirecting to HTTPS. Use the HTTPS address.
  • acd-admin copies each command line, arguments included, into the spec of its session pod and into a Kubernetes Event, and support dumps include these Events. Never pass a password or other secret as an argument.
  • acd-admin shell and exec reach more than day-to-day work needs: on node-exporter they can read the machine’s files and see its processes, on vector and geoip-loader they run as root, and on postgresql they open a database superuser session. acd-admin logs records no Event. Give acd-admin only to people you would trust with root on the servers.
  • The two ingress NodePorts, which Kubernetes picks at installation, are not filtered by the host firewall. Block them on your network firewall, as Ingress NodePorts in the Networking Guide describes.

Installation

  • There is no backup and restore procedure for the PostgreSQL databases.
  • There is no tested procedure for carrying on after losing the first server, the only machine that holds the deploy configuration. Keep a copy of the latest backup folder, which holds /etc/acd/deploy except its certs/ and maxmind/ folders, somewhere other than the cluster. It holds every Kubernetes Secret: protect it as Backups in Running deploy describes.
  • deploy rewrites /etc/sysctl.conf on every machine instead of adding a file under /etc/sysctl.d. It also sets fs.inotify.max_user_instances and fs.inotify.max_user_watches.
  • On an agent, acd-support-dump fails with an error about localhost:8080. Run it on a server.
  • The production preset installs an unused example TLS secret, manager-example-com-tls-20260101, next to the certificate deploy sets up. It can be ignored.
  • In Zitadel, a user’s username must match the local part of their email address, the part before the @. Otherwise Zitadel can block sign-in with the full email address.

acd-admin

  • acd-admin status does not show storage health. After returning a drained node to service, check that every storage volume is healthy before draining another node, as the acd-admin reference describes.
  • Run one cordon or drain at a time. Two started together can both pass the check that keeps a node schedulable, and two drains can both pass the check that keeps a CDN Director running.
  • A temporary Kubernetes API error, such as during a server restart, can stop a drain. Run drain again to carry on.
  • restart --node and drain on a node that is not Ready do not say so: restart --node reports the pods as being recreated, and drain keeps waiting for pods that stay until the node comes back. The check that keeps a node schedulable also ignores Ready, so a node that is not Ready but not yet tainted can count as the node that stays schedulable. Check READY in acd-admin status before a cordon or drain.
  • When an acd-admin session cannot start, such as when no node can run it, it fails after about a minute with timed out waiting for the condition and no reason.
  • acd-admin --help and --version need a working cluster, so they too run only on a server or with KUBECONFIG set.
  • Some errors are followed by extra lines, such as pod acd-system/acd-admin-... terminated (Error), which are not a second failure.
  • Output a command writes to standard error can arrive on standard output when the command ends quickly.

2 - Release esb3027-1.6.2

Build date

2026-10-02

Release status

Type: production

Included components

  • ACD Configuration GUI 5.0.3

Compatibility

This release has been tested with the following product versions:

  • AgileTV CDN Director, ESB3024-1.24.0

Breaking changes from 1.4.x release

Support for RHEL 8 has been removed from this release due to upstream requirements with the version of K3s included in this release. RHEL 9 or it’s derivatives are required to run this release.

Change log

  • NEW: New GUI version [ESB3027-638]

Deprecated functionality

System requirements

Support for RHEL 8 has been removed from this release due to upstream requirements with the version of K3s included in this release. RHEL 9 or it’s derivatives are required to run this release. See the System Requirements Guide for more information.

Known limitations

This release requires a clean install. Upgrade from version 1.4.1 is not possible. Installation of the software is only supported using a self-hosted configuration.

3 - Release esb3027-1.6.1

Build date

2026-07-02

Release status

Type: production

Included components

  • ACD Configuration GUI 4.0.4

Compatibility

This release has been tested with the following product versions:

  • AgileTV CDN Director, ESB3024-1.24.0

Breaking changes from 1.4.x release

Support for RHEL 8 has been removed from this release due to upstream requirements with the version of K3s included in this release. RHEL 9 or it’s derivatives are required to run this release.

Change log

  • NEW: Bugfix in GUI version 4.0.4[ESB3027-595]

Deprecated functionality

System requirements

Support for RHEL 8 has been removed from this release due to upstream requirements with the version of K3s included in this release. RHEL 9 or it’s derivatives are required to run this release. See the System Requirements Guide for more information.

Known limitations

This release requires a clean install. Upgrade from version 1.4.1 is not possible. Installation of the software is only supported using a self-hosted configuration.

4 - Release esb3027-1.6.0

Build date

2026-05-21

Release status

Type: production

Included components

  • ACD Configuration GUI 4.0.3

Compatibility

This release has been tested with the following product versions:

  • AgileTV CDN Director, ESB3024-1.24.0

Breaking changes from previous release

Support for RHEL 8 has been removed from this release due to upstream requirements with the version of K3s included in this release. RHEL 9 or it’s derivatives are required to run this release.

Change log

  • NEW: Port Subnet API to Manager [ESB3027-291]
  • NEW: Replace Prometheus stack with VictoriaMetrics [ESB3027-275]
  • NEW: New Grafana dashboards for monitoring “CDN Manager API” [ESB3027-424]
  • NEW: Update streaming dashboards from CDN Director [ESB3027-360]
  • NEW: Make cache-control headers configurable for Validation API [ESB3027-408]
  • NEW: Add preflight requirements checks to installer [ESB3027-322]
  • NEW: New V2 Selection Input API [ESB3027-297]
  • NEW: Add confcli command to all server nodes [ESB3027-352]
  • NEW: Support E-Tag response headers from Manager APIs [ESB3027-387]
  • NEW: API Performance Improvements [ESB3027-518]
  • NEW: Additional Grafana dashboards for monitoring cluster health [ESB3027-359]
  • NEW: Support for Zitadel OIDC authentication in Grafana [ESB3027-144]
  • FIXED: Redis experiences connection errors when under load [ESB3027-454]
  • FIXED: PostgreSQL experiences pod restarts when under load [ESB3027-507]
  • FIXED: Manager liveness probes can time out when under load [ESB3027-505]
  • FIXED: Grafana dashboard folders are not respected [ESB3027-377]
  • FIXED: Missing or incorrect CORS ehaders cause GUI to fail to authenticate [ESB3027-392]
  • FIXED: Valid confd configuration fails to parse [ESB3027-367]
  • FIXED: Confd client stops reacting to configuration change events [ESB3027-368]
  • FIXED: Grafana dashboards refresh too quickly [ESB3027-371]
  • FIXED: Hostnames are not resolved in route validation endpoint [ESB3027-534]
  • FIXED: Installer completes before K3s is fully ready [ESB3027-541]
  • FIXED: If confd monitoring thread dies, stale configuration may be used [ESB3027-491]
  • FIXED: Path splitting logic may lead to fatal crash [ESB3027-493]

Deprecated functionality

System requirements

Support for RHEL 8 has been removed from this release due to upstream requirements with the version of K3s included in this release. RHEL 9 or it’s derivatives are required to run this release. See the System Requirements Guide for more information.

Known limitations

This release requires a clean install. Upgrade from version 1.4.1 is not possible. Installation of the software is only supported using a self-hosted configuration.

5 - Release esb3027-1.4.1

Build date

2025-11-25

Release status

Type: production

Included components

  • ACD Configuration GUI 3.2.10

Compatibility

This release has been tested with the following product versions:

  • AgileTV CDN Director, ESB3024-1.22.0
  • AgileTV CDN Director, ESB3024-1.20.1 (without GUI)

Breaking changes from previous release

None

Change log

  • NEW: Enable the horizontal pod autoscaler by default [ESB3027-354]
  • FIXED: Authentication failure when using local DNS records [ESB3027-299]
  • FIXED: PostgreSQL container image missing from installer [ESB3027-312]
  • FIXED: Kafka messages are retained longer than configured [ESB3027-315]
  • FIXED: Busybox container image missing from installer [ESB3027-317]
  • FIXED: Prometheus scrape configuration uses wrong target URLs [ESB3027-324]
  • FIXED: Grafana datasource connection invalid [ESB3027-325]
  • FIXED: Incorrect Grafana dashboard used as Home [ESB3027-346]
  • FIXED: Grafana exposes user credentials over plain HTTP [ESB3027-347]
  • FIXED: Grafana pods crash and restart after a few minutes [ESB3027-353]
  • FIXED: Default kafka volume is too small [ESB3027-357]

Deprecated functionality

None

System requirements

Known limitations

This release requires a clean install. Upgrade from version 1.4.0 is not possible. Installation of the software is only supported using a self-hosted configuration.

6 - Release esb3027-1.4.0

Build date

2025-10-23

Release status

Type: production

Included components

  • ACD Configuration GUI 2.3.9

Compatibility

This release has been tested with the following product versions:

  • AgileTV CDN Director, ESB3024-1.22.0

Breaking changes from previous release

  • A full installation is required for this version

  • If the field confd.confd.image.tag is set in the present configuration file it must be removed or updated before upgrading

Change log

  • NEW: Monitoring and Metrics support [ESB3027-17]
  • NEW: Support for horizontal scaling [ESB3027-63]
  • NEW: Deploy GUI container with Manager [ESB3027-67]
  • NEW: Support Kafka redundancy [ESB3027-125]
  • NEW: Support for Redis high availability [ESB3027-126]
  • NEW: Add Prometheus Container [ESB3027-130]
  • NEW: Add Grafana Container [ESB3027-131]
  • NEW: External DNS Name configuration should be global [ESB3027-180]
  • NEW: Deploy hardware metrics services acd-metrics-aggregator and acd-telegraf-metrics-database in k8s cluster [ESB3027-189]
  • NEW: REST API Performance Improvements [ESB3027-208]
  • NEW: “Star”/Make a Grafana dashboard the home page [ESB3027-243]
  • NEW: Support for remote TCP connections for confd subscribers [ESB3027-244]
  • NEW: Persist long term usage data [ESB3027-248]
  • NEW: New billing dashboard [ESB3027-249]
  • NEW: [ANSSI-BP-028] System Settings - Network Configuration and Firewalls [ESB3027-258]
  • NEW: [ANSSI-BP-028] System Settings - SELinux [ESB3027-260]
  • NEW: Support deploying GUI independently from manager [ESB3027-278]
  • NEW: Automatically generate Zitadel secret [ESB3027-280]
  • NEW: Deprecate the generate-ssl-secret command [ESB3027-281]
  • NEW: Deprecate the generate-zitadel-mastekey command [ESB3027-285]
  • FIXED: Access to services restricted with SELinux in Enforcing mode [ESB3027-32]
  • FIXED: Authentication token payload contains invalid user details [ESB3027-47]
  • FIXED: Unexpected 200 OK response to non-existent confd endpoint [ESB3027-154]
  • FIXED: Multiple restarts encountered for selection-input service on startup [ESB3027-155]
  • FIXED: Installer script requires case-sensitive hostnames [ESB3027-158]
  • FIXED: Installer script does not support configuring additional options [ESB3027-214]
  • FIXED: Selection input API accepts keys containing non-urlsafe characters [ESB3027-216]
  • FIXED: Installation fails on minimal RHEL installation [ESB3027-287]
  • FIXED: Kafka consumer configuration warning logged on startup [ESB3027-294]

Deprecated functionality

None

System requirements

Known limitations

Installation of the software is only supported using a self-hosted configuration.

7 - Release esb3027-1.2.1

Build date

2025-05-22

Release status

Type: production

Compatibility

This release is compatible with the following product versions:

  • AgileTV CDN Director, ESB3024-1.20.1

Breaking changes from previous release

None

Change log

  • FIXED: Installer changes ownership of /var, /etc/ and /usr [ESB3027-146]
  • FIXED: K3s installer should not be left on root filesystem [ESB3027-149]

Deprecated functionality

None

System requirements

Known limitations

Installation of the software is only supported using a self-hosted configuration.

8 - Release esb3027-1.2.0

Build date

2025-05-14

Release status

Type: production

Compatibility

This release is compatible with the following product versions:

  • AgileTV CDN Director, ESB3024-1.20.1

Breaking changes from previous release

None

Change log

  • NEW: Remove .sh extension from all scripts on the ISO [ESB3027-102]
  • NEW: The script load-certificates.sh should be called generate-ssl-secret [ESB3027-104]
  • NEW: Add support for High Availability [ESB3027-108]
  • NEW: Enable the K3s Registry Mirror [ESB3027-110]
  • NEW: Support for Air-Gapped installations [ESB3027-111]
  • NEW: Basic hardware monitoring support for nodes in K8s Cluster [ESB3027-122]
  • NEW: Separate docker containers from ISO [ESB3027-124]
  • FIXED: GUI is unable to make DELETE request on api/v1/selection_input/modules/blocked_referrers [ESB3027-112]

Deprecated functionality

None

System requirements

Known limitations

Installation of the software is only supported using a self-hosted configuration.

9 - Release esb3027-1.0.0

Build date

2025-04-17

Release status

Type: production

Compatibility

This release is compatible with the following product versions:

  • AgileTV CDN Director, ESB3024-1.20.0

Breaking changes from previous release

None

Change log

This is the first production release

Deprecations from previous release

None

System requirements

Known limitations

Installation of the software is only supported using a self-hosted, single-node configuration.