Update docker.io/grafana/mimir Docker tag to v2.17.4 #246
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.12.0→2.17.4Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
grafana/mimir (docker.io/grafana/mimir)
v2.17.4Grafana Mimir
v2.17.3Grafana Mimir
v2.17.2Grafana Mimir
alpine:3.22.1toalpine:3.22.2to address CVE-2025-9230, CVE-2025-9231, CVE-2025-2025-9232. #12993dnssrv+ordnssrvnoa+service discovery prefixes. #13206Tools
mimirtool,metaconvert,copyblocks, andquery-teeimages ondistroless/static-debian12. #13014v2.17.1Grafana Mimir
v2.17.0Grafana Mimir
-ruler-storage.cache.rule-group-enabledto enable or disable caching the contents of rule groups. Caching rule group contents is now always enabled when a cache is configured for the ruler. #10949-ingester.ooo-native-histograms-ingestion-enabledCLI flag and correspondingooo_native_histograms_ingestion_enabledruntime configuration option have been removed. #10956cortex_distributor_label_values_with_newlines_totalmetric. #10977max_cost_attribution_cardinality_per_userconfig tomax_cost_attribution_cardinality. #11092-query-frontend.subquery-spin-off-enabled=trueinstead of-query-frontend.instant-queries-with-subquery-spin-off=.*#11153cortex_client_request_invalid_cluster_validation_labels_totaltocortex_client_invalid_cluster_validation_label_requests_total. #11237-querier.query-engine=prometheusto continue using Prometheus' engine. #11501-ingester.stream-chunks-when-using-blocksCLI flag andingester_stream_chunks_when_using_blocksruntime configuration option have been deprecated and will be removed in a future release. #11711cortex_ingest_storage_writer_latency_secondsmetric for failed writes too. Addedoutcomelabel to distinguish betweensuccessandfailure. #11770cortex_ingest_storage_writer_produce_requests_totaltocortex_ingest_storage_writer_produce_records_enqueued_totalcortex_ingest_storage_writer_produce_failures_totaltocortex_ingest_storage_writer_produce_records_failed_totaldistributor.ha_tracker.ha_tracker_update_timeouttolimits.ha_tracker_update_timeout.distributor.ha_tracker.ha_tracker_update_timeout_jitter_maxtolimits.ha_tracker_update_timeout_jitter_max.distributor.ha_tracker.ha_tracker_failover_timeouttolimits.ha_tracker_failover_timeout.Memberlistmarked as stable as an option for backend storage for the HA tracker. #11861etcddeprecated as an option for backend storage for the HA tracker. #12047memberlist.packet-dial-timeout:500msmemberlist.packet-write-timeout:500msmemberlist.max-concurrent-writes:5memberlist.acquire-writer-timeout:1sThese defaults perform better but may cause long-running packets to be dropped in high-latency networks.
versionis added to the metriccortex_distributor_requests_in_totalwith a value of either1.0or2.0depending on the detected Remote-Write protocol. #11100 #11101 #11192 #11143query-frontend.cache-errorsandquery-frontend.results-cache-ttl-for-errorsconfiguration options to cache non-transient response failures for instant queries. #11120-query-frontend.query-engineor-query-frontend.enable-query-engine-fallbackor corresponding YAML. #11417 #11775OTEL_environment variables. #11618otel_scope_. Enable via the-distributor.otel-promote-scope-metadataflag. #11795-distributor.otel-native-delta-ingestionoption to allow primitive delta metrics ingestion via the OTLP endpoint. #11631sort_by_labelandsort_by_label_descPromQL functions. #11930MimirHighVolumeLevel1BlocksQueriedalert that fires when level 1 blocks are queried for more than 6 hours, indicating potential compactor performance issues. #11803cardinality_analysis_max_resultsoption. #11456--querier.max-concurrent-remote-read-queriesflag. Defaults to 2. Set to 0 for unlimited concurrency. #11892cortex_ingester_attributed_active_native_histogram_seriesandcortex_ingester_attributed_active_native_histogram_buckets) with labels specified by customers to a custom Prometheus registry. #10892cortex_distributor_received_native_histogram_samples_totalandcortex_distributor_received_native_histogram_buckets_totalto track native histogram samples and bucket counts separately for billing calculations. Updatedcortex_distributor_received_samples_totaldescription to clarify it includes native histogram samples. #11728-compactor.upload-sparse-index-headers=trueoption. #10879 #11072.-compactor.max-per-block-upload-concurrency. #10947cortex_ingester_tsdb_wal_replay_unknown_refs_totalandcortex_ingester_tsdb_wbl_replay_unknown_refs_totalmetrics to track unknown series references during WAL/WBL replay. #10981-ingest-storage.kafka.fetch-max-waitconfiguration option to configure the maximum amount of time a Kafka broker waits for some records before a Fetch response is returned. #11012cortex_ingester_tsdb_forced_compactions_in_progressmetric reporting a value of 1 when there's a forced TSDB head compaction in progress. #11006cortex_ingest_storage_reader_records_batch_fetch_max_bytesmetric reporting the distribution ofMaxBytesspecified in the Fetch requests sent to Kafka. #11014-server.cluster-validation.label-server.cluster-validation.http.enabled-server.cluster-validation.http.soft-validation-server.cluster-validation.http.exclude-paths-query-frontend.client-cluster-validation.label, you configure the query-frontend's client cluster validation label.-common.client-cluster-validation.label, if set, provides the default for-query-frontend.client-cluster-validation.label.ignore_ingest_storage_errorsandingest_storage_max_wait_timeflags to control error handling and timeout behavior during ingest storage migration. #11291-ingest-storage.migration.ignore-ingest-storage-errors-ingest-storage.migration.ingest-storage-max-wait-time-memberlist.abort-if-fast-join-failssupport and retries on DNS resolution. #11067result_series_countas part ofquery statslog lines. #11081query statslog lines. #11083max_cost_attribution_labels_per_userlimit. #11090cortex_query_samples_processed_totalmetric. #11110cortex_query_samples_processed_cache_adjusted_totalmetric. #11164cortex_cost_attribution_*metrics to observe the state of the cost-attribution trackers. #11112cortex_server_invalid_cluster_validation_label_requests_totalmetric, that is increased for every request with an invalid cluster validation label. #11241 #11277distributor.otel-convert-histograms-to-nhcbflag. #11077limited_queries, which you can only run at or less than an allowed frequency. #11097ingest-storage.kafka.producer-record-versionto allow control Kafka record versioning. #11244<prometheus-http-prefix>/api/v1/rulesand<prometheus-http-prefix>/api/v1/alertsto reply with HTTP error 422 if rule evaluation is completely disabled for the tenant. If only recording rule or alerting rule evaluation is disabled for the tenant, the response now includes a corresponding warning. #11321 #11495 #11511ruler_alertmanager_client_configwhich allows the Ruler's Alertmanager client options to be specified on a per-tenant basis. #10816--selectorflags in remote read commands to send multiple queries in a single protobuf request, leveraging the remote read protocol's native batching capabilities. #11733--use-chunksflag to remote read commands to control response type preference (chunked streaming vs sampled). #11733-server.trace-request-headersis enabled. You can configure which headers to exclude using the-server.trace-request-headers-exclude-listflag. #11655cortex_ingest_storage_writer_produce_remaining_deadline_seconds: measures the remaining deadline (in seconds) when records are requested to be produced.cortex_ingest_storage_writer_produce_records_enqueue_duration_seconds: measures how long it takes to enqueue produced Kafka records in the client.cortex_ingest_storage_writer_kafka_write_wait_seconds: measures the time spent waiting to write to Kafka backend.cortex_ingest_storage_writer_kafka_write_time_seconds: measures the time spent writing to Kafka backend.cortex_ingest_storage_writer_kafka_read_wait_seconds: measures the time spent waiting to read from Kafka backend.cortex_ingest_storage_writer_kafka_read_time_seconds: measures the time spent reading from Kafka backend.cortex_ingest_storage_writer_kafka_request_duration_e2e_seconds: measures the time from the start of when a Kafka request is written to the end of when the response for that request was fully read from the Kafka backend.cortex_ingest_storage_writer_kafka_request_throttled_seconds: measures how long Kafka requests have been throttled by the Kafka client.cortex_distributor_sample_delay_secondsto track delay of ingested samples with regard to wall clock. #11573-<component-ring-config>.auto-forget-unhealthy-periodsconfigurable for each component. Deprecates the-store-gateway.sharding-ring.auto-forget-enabledflag. #11923/ingester/tenantsendpoint. #11961kafkatool: addconsumer-group delete-offsetcommand as a way to delete the committed offset for a consumer group. #11988versionis added to the metriccortex_distributor_requests_in_totalwith a value of either1.0or2.0, depending on the detected remote-write protocol. #11977__name__!=""matchers from label names and label values queries, improving query performance. You can enable the optimizer per-tenant with thelabels_query_optimizer_enabledruntime configuration flag. #12054 #12066 #12076 #12080-compactor.update-blocks-concurrencyflag to control concurrency for updating block metadata during bucket index updates, separate from deletion marker concurrency. #12117query-frontend.extra-propagated-headersflag to specify the extra headers allowed to pass through to the rest of the query path. #12174irate()if the second-last sample in the range is NaN and Prometheus' query engine is in use. #10956cortex_prometheus_notifications_dropped_totalif they are dropped due to alert relabelling. #10956-query-frontend.query-sharding-max-sharded-queriesenforcement for instant queries with binary operators. #11086-memberlist.notify-intervalis configured. #11098cortex_client_invalid_cluster_validation_label_requests_totalmetric definition. #11455MimirBucketIndexNotUpdatedcan fire even though the index has been updated within the alert threshold. #11303topkandquantilecould return incorrect results if the scalar parameter is not a constant and Prometheus' query engine is in use. #11548-compactor.max-compaction-timeafter the initial compaction planning phase, to avoid rare cases where planning takes longer than-compactor.max-compaction-timeand so actual compaction never runs for a tenant. #11834max_inflight_push_requests_bytesbefore decompressing incoming requests. #11967Mixin
MimirBucketIndexNotUpdatedto usemax_over_timeto prevent alert firing when pods rotate. #11311, #11426DistributorGcUsesTooMuchCpuconfigurable. #11508MimirRolloutStucka critical alert if it has been firing for 6h. #10890Mimir / TenantsandMimir / Top Tenantsdashboards showing the rate of gateway requests. #10978MimirIngesterFailsToProcessRecordsFromKafkato not fire during forced TSDB head compaction. #11006max(10, 10%)of ingesters instead of a fixed 10 replicas. #11581MimirGoThreadsTooHighalert. #11836 #11845Mimir / Remote ruler readsdashboard. #11838cluster_namespace_deployment:actual_replicas:countrecording rule when there's a mix on single-zone and multi-zone deployments. #11287MimirRolloutStuckalert, so it checks whether rollout groups as a whole (and not spread across instances) are changing or stuck. #11288Jsonnet
500msfor theruler-storagecache instead of the default200ms. #11231JAEGER_REPORTER_MAX_QUEUE_SIZEis no longer set. Components will use OTel's default value of2048unless explicitly configured. You can still configureJAEGER_REPORTER_MAX_QUEUE_SIZEif you configure tracing using Jaeger env vars, and you can always setOTEL_BSP_MAX_QUEUE_SIZEOTel configuration. #11700_config.jaeger_agent_hostconfiguration. You can configure tracing using an OTLP endpoint through_config.otlp_traces_endpoint, seetracing.libsonnetfor more configuration options. #11773ingester_stream_chunks_when_using_blocksoption. #11711memberlist.abort-if-fast-join-failsfor ingesters using memberlist #11931 #11950store_gateway_grpc_max_query_response_size_bytesconfig option to set the max store-gateway gRCP query response send size (and corresponsing querier receive size), and set to 200MB by default. #11968_config.ingest_storage_ingester_hpa_behavior. #11168_config.trace_request_headers. You can exclude certain headers from being traced using_config.trace_request_exclude_headers_list. #11655 #11714$._config.otlp_traces_endpoint. When configured, the$.jaeger_mixinis no longer available for use. #11773 #11981 #12074OTEL_environment variables for tracing. #11787query_frontend_only_argsoption to specify CLI flags that apply only to query-frontends but not ruler-query-frontends. #11799$_config.autoscaling_querier_scaleup_percent_cap) and scale down rates ($_config.autoscaling_querier_scaledown_percent_cap) configurable. #11862ingest_storage_migration_ignore_ingest_storage_errorsandingest_storage_migration_ingest_storage_max_wait_timeconfigs to control error handling of the partition ingesters during ingest storage migrations. #12105weightargument when building memory HPA query for resource scaled objects. #11935Mimirtool
fatallog level is no longer supported; useerrorinstead. #14059--enable-experimental-functionsflag to commands that parse PromQL to allow parsing experimental functions such assort_by_label().--block-sizeCLI flag toremote-read exportthat allows setting the output block size. #12025remote-readdoesn't behave like other mimirtool commands for authentication. #11402remote-read exportcould omit some samples if the query time range spans multiple blocks. #12025remote-read exportcould omit some output blocks in the list printed to the console or fail withread/write on closed pipe. #12025Mimir Continuous Test
-tests.client.cluster-validation.labelflag to send theX-Clusterheader with queries. #11418Query-tee
Documentation
__tenant_id__label. #11584MimirIngestedDataTooFarInTheFuturerunbook with a note about false positives and the endpoint to flush TSDB blocks by user. #11961Tools
kafkatool: Addoffsetscommand for querying various partition offsets. #11115listblocks: Output can now also be JSON or YAML for easier parsing. #11184mark-blocks: Allow specifying blocks from multiple tenants. #11343undelete-blocks: Support removing S3 delete markers to avoid copying data when recovering blocks. #11256screenshots: Update to tar-fs v3.1.0 to address CVE-2025-48387. #12030v2.16.2Grafana Mimir
alpine:3.21.3toalpine:3.21.5to address CVE-2025-9230, CVE-2025-9231, CVE-2025-2025-9232. #12990v2.16.1Grafana Mimir
golang.org/x/netto v0.38.0 to address CVE-2025-22872. #11281cortex_client_invalid_cluster_validation_label_requests_totalmetric definition. #11455v2.16.0Grafana Mimir
IsApplicablehook. #10451\uFFFDin error messages before propagating them. #10236IsApplicablehook. #10256topiclabel tocortex_ingest_storage_strong_consistency_requests_total,cortex_ingest_storage_strong_consistency_failures_total, andcortex_ingest_storage_strong_consistency_wait_duration_secondsmetrics. #10220-ruler.query-frontend.max-retries-rate. #10375 #10403topiclabel tocortex_ingest_storage_reader_last_produced_offset_requests_total,cortex_ingest_storage_reader_last_produced_offset_failures_total,cortex_ingest_storage_reader_last_produced_offset_request_duration_seconds,cortex_ingest_storage_reader_partition_start_offset_requests_total,cortex_ingest_storage_reader_partition_start_offset_failures_total,cortex_ingest_storage_reader_partition_start_offset_request_duration_secondsmetrics. #10462-ingester.ooo-native-histograms-ingestion-enabledto true by default. #10483userandreasonlabels tocortex_ruler_write_requests_failed_totalandcortex_ruler_queries_failed_total; addusertocortex_ruler_write_requests_totalandcortex_ruler_queries_totalmetrics. #10536-querier.promql-experimental-functions-enabledand-query-frontend.block-promql-experimental-functionsCLI flags and respective YAML configuration options to enable experimental PromQL functions. Instead access to experimental PromQL functions is always blocked. You can enable them using the per-tenant settingenabled_promql_experimental_functions. #10660 #10712blocks-storage.bucket-store.posting-offsets-in-mem-samplingvalue. If the sparse header's sampling rate is set but doesn't match the configured rate, store gateway either rebuilds the sparse header or downsamples to the configured sampling rate. #10684 #10878ingester.native-histograms-ingestion-enableddefaults to true. #10867Server-Timingheader when theX-Mimir-Response-Query-Stats: trueheader is present in the request. #10192-distributor.otel-keep-identifying-resource-attributesoption to allow keepingservice.instance.id,service.nameandservice.namespaceintarget_infoon top of converting them to theinstanceandjoblabels. #10216cortex_ingester_attributed_active_series,cortex_distributor_received_attributed_samples_total, andcortex_discarded_attributed_samples_total) with labels specified by customers to a custom Prometheus registry. This feature enables more flexible billing data tracking. #10269 #10702/ruler/tenantsendpoints to list the discovered tenants with rule groups. #10738query-frontend.cache-errorsandquery-frontend.results-cache-ttl-for-errorsfor caching non-transient error responses are no longer experimental. #10927memberlistKV store for ha_tracker. You can enable it using the-distributor.ha-tracker.kvstore.storeflag. You can configure Memberlist parameters via the-memberlist-*flags. #10054cortex_bucket_index_last_successful_update_timestamp_secondsfor all tenants assigned to the compactor before starting the block cleanup job. #10569samples_processedstatistics. #10103cortex_discarded_samples_totalmetrics with the reasonsample_duplicate_timestamp. #10145 #10430Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.