CuraDevOps

tag: Prometheus · 7 items

Plan Managed Prometheus collectors add MSK consumer-group lag metrics
2026-10-31 · AWS What's New · source ↗ #observability#amazon-msk#prometheus
  • Platform/SRE — Plan: If you run Amazon MSK, this GA feature lets managed Prometheus collectors scrape consumer-group lag metrics without self-operated agents; evaluate adopting it this quarter to replace any self-managed Kafka exporters in your observability pipeline.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: GA announcement
Plan Prometheus 3.13.4: gRPC security fix and federation histogram corruption
2026-10-05 · Releases: prometheus · source ↗ #prometheus#security#observability
  • Platform/SRE — Plan: Prometheus 3.13.4 patches a gRPC HTTP/2 memory-exhaustion vulnerability (GO-2026-6348) and fixes federation corruption of float native histograms — schedule an upgrade to 3.13.4 this sprint for any federated Prometheus deployment.
  • CI/CD — Skip
  • Leader — Skip
Plan archived Prometheus 3.13.3: security patches + TSDB data-integrity bugfixes
2026-09-14 · Releases: prometheus · source ↗ #prometheus#observability#tsdb
  • Platform/SRE — Plan: Two Go library security fixes (compress, x/crypto) plus serious TSDB bugs — deleted series causing missing samples after restart and out-of-order queries blocking compaction for hours causing memory growth — make this a priority upgrade for any team on Prometheus 3.13.x; no KEV listing or hard deadline, but schedule 3.13.3 upgrade this sprint.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: deprecation mentioned (no explicit date found)
Learn archived Kubernetes v1.37: Native Histograms Graduates to Beta
2026-09-12 · Kubernetes Blog · source ↗ #kubernetes#observability#prometheus
  • Platform/SRE — Learn: Beta (pre-GA) native histograms are now enabled by default in Kubernetes 1.37, changing how latency/duration metrics are exposed by core components like the API server; worth evaluating Prometheus and Grafana compatibility before upgrading clusters to 1.37.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: Kubernetes 1.37 EOL 2027-10-28 · Kubernetes 1.36 EOL 2027-06-28 · pre-GA (alpha/beta/RC/preview)
Plan archived Prometheus 3.14.0: API deprecations and PromQL behavioral changes
2026-08-24 · Releases: prometheus · source ↗ #prometheus#observability#breaking-change
  • Platform/SRE — Plan: Three behavioral changes affect running Prometheus deployments: the stats query-parameter deprecation (other values still work but will be rejected in the next major), the __meta_hetzner_datacenter label drop for hcloud targets, and PromQL duration expressions now enabled by default. Review your relabeling configs, any Hetzner service-discovery rules, and PromQL queries before upgrading; no hard deadline yet since rejection is deferred to the next major release.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: deprecation/EOL deadline mentioned: 2026-08-17
Plan archived Prometheus 3.13.2: security deps bump and PromQL SIGBUS bugfix
2026-08-03 · Releases: prometheus · source ↗ #prometheus#security#bugfix
  • Platform/SRE — Plan: Patch includes dependency updates for CVE-2026-56852 and GHSA-hrxh-6v49-42gf (neither KEV-listed nor actively exploited) plus a PromQL SIGBUS crash fix on full disks; schedule an upgrade to 3.13.2 this maintenance cycle.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: CVE-2026-56852 — CISA KEV: not listed, EPSS 0.00
Plan archived Prometheus 3.5.5 patches CVE-2026-53606 in UI sanitize-html dep
2026-07-13 · Releases: prometheus · source ↗ #prometheus#security#observability
  • Platform/SRE — Plan: Prometheus is core observability infrastructure; upgrade to v3.5.5 to patch CVE-2026-53606 in the UI’s sanitize-html dependency. Exploitation risk is low (EPSS 0.00, not KEV-listed), so this is routine patching rather than an emergency.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: CVE-2026-53606 — CISA KEV: not listed, EPSS 0.00