The latest Spinnaker release, 2025.3.0 is here. While it may not be the flashiest update, it delivers something far more valuable: security hardening, cloud expansion, and deeper modernization across core services.
For teams running large-scale, multi-cloud delivery pipelines, this release brings meaningful improvements that simplify operations, reduce risk, and increase reliability.
Strengthened Artifact Security
- Define domain allowlists for HTTP-based artifacts.
- Pipelines now fetch only from trusted sources.
- Improves supply-chain integrity and compliance posture.
Why it matters: One more layer of protection against malicious dependencies, critical for enterprises with strict security requirements.
Expanded Multi-Cloud Account API Support
- API-based account management now extends beyond Kubernetes to AWS ECS, Azure, and GCP.
- Enables full automation for account creation, updates, and configuration.
Why it matters: Less manual work, fewer drifts, and cleaner onboarding for enterprise-scale Spinnaker setups.
Reliable Long-Running Lambda Operations
- TCP keep-alive added for Lambda clients.
- Supports operations beyond the traditional five-minute idle timeout.
Why it matters: More stability for large package deployments, complex orchestration, and serverless-heavy pipelines.
GCP Load Balancer Enhancements
- Native support for gRPC and HTTP/2 protocols.
- Optimized for modern microservices architectures.
Why it matters: Teams deploying high-performance services on GCP can now configure load balancers directly in Spinnaker without workarounds.
Under-the-Hood Modernization
- AWS SDK v2 migration across key microservices (clouddriver-artifacts, Lambda, ECS, Echo, Front50, Igor, etc.).
- Performance improvements, consistent interfaces, and long-term maintainability.
- ⚠️ Note: Custom S3ArtifactValidator implementations must be updated due to signature changes.
Stability & Performance Fixes (Grouped)
- API behavior: CloudFormation improvements, OAuth2 configuration defaults, Retrofit error handling.
- SQL optimizations: Query tuning for faster pipeline execution and reduced database load.
- Pipeline performance: Better request logging formats, improved listing/filtering with pipelineName and limit parameters.
Migration Checklist
- Secure: Configure artifact domain allowlists.
- Automate: Update workflows to leverage expanded multi-cloud account APIs.
- Validate: Test Lambda pipelines for long-running operations.
- Modernize: Update custom S3ArtifactValidator code for AWS SDK v2.
- Optimize: Review GCP load balancer configs for gRPC/HTTP2 support.
Final Word
Spinnaker 2025.3.0 is a release focused on maturity, reliability, and modernization. From artifact security to multi-cloud automation to protocol-level load balancer enhancements, it delivers capabilities that matter for real-world enterprise use cases.
Spinnaker 2025.3.0 isn’t about flash, it’s about building the resilient foundation multi-cloud delivery demands.
Learn how OpsMx enhances Spinnaker Contact our Spinnaker experts
0 Comments