LoginSign Up
← Back to all sparks
R

Robusta

INFRA · APIS
Velocity5.0

Kubernetes observability and automation platform

home.robusta.dev ↗

Robusta spends a full release on security hardening and swaps out its PDF rendering stack.

kubernetesalertingsecurity-hardeningobservabilitycve-remediation
◆Current state
Robusta ships from an alpha channel — every recent tag carries the -alpha suffix, so alpha is the release line rather than a pre-release step. The latest cut is dominated by security work: preventing signing-key leakage in email, hardening pull configs and Supabase login, a cryptography bump for CVE-2026-69247, and backported libssh2/attr/acl fixes. Alongside it, PDF generation moves off CairoSVG to resvg-py and reportlab.
◆Where it's heading
The product is consolidating its Kubernetes alerting platform rather than extending it. Recent releases added the connective tissue — workflow triggers that fire other platform workflows, JSON log output, JSM and F5 alert ingestion — and this one turns to the supply chain and secret-handling underneath. Holmes and KRR version bumps riding along in the same tag suggest the AI-investigation and right-sizing components are being kept in step with the runner.
◆Prediction
With ingestion sources and workflow chaining in place, the next visible move is likely deeper Holmes integration in the alerting path rather than another connector.

◆Recent moves

  1. 21d ago

    Signing-key leak fixed, CVEs patched, PDF stack moved to resvg-py and reportlab

    A security-weighted release: signing keys no longer leak through email communications, pull configs and Supabase login gain hardening, and cryptography plus libssh2/attr/acl CVEs are patched. PDF generation is rebuilt on resvg-py and reportlab, and Holmes and KRR are bumped in step with the runner.

    View source ↗
  2. 1mo ago

    Workflow trigger action lets workflows fire other workflows

    Adds a workflow trigger action so Robusta platform workflows can fire other workflows, plus F5 Distributed Cloud in the Send Events docs and a fix for the Alerts Summary table corrupting on long digests. The workflow chaining is the piece that compounds.

    View source ↗
  3. 1mo ago

    JSON log format support and JSM alert ingestion docs

    JSON log format lands with environment-variable control and is carried through to the KRR image, making Robusta's output parseable by log pipelines. Jira Service Management alert ingestion is documented, continuing the widening of inbound alert sources.

    View source ↗
  4. 2mo ago

    Namespace-scoped RBAC guide and a test-toolchain CVE bump

    A documentation restore for the namespace-scoped RBAC guide and a pytest bump to clear a test-toolchain CVE. Nothing here changes runtime behavior.

    View source ↗
  5. 2mo ago

    Global imagePullSecret for the Helm chart

    A global imagePullSecret for the Helm chart removes per-image secret wiring for private-registry installs, and braced template placeholders accept slashes and hyphens. Small deployment-ergonomics fixes for self-hosted clusters.

    View source ↗