Repository navigation
chore: update Sentry self-hosted to 26.10.0 - #14
Draft
github-actions[bot] wants to merge 1 commit into
Draft
github-actions[bot] wants to merge 1 commit into
github-actions[bot] wants to merge 1 commit into
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Sentry self-hosted 26.10.0
Updates the chart app version from
26.7.2to26.10.0.Manual compatibility review
Explicit upgrade-risk signals
26.8.0: migration, removed26.9.0: breaking, migration, removed26.10.0: breaking, migrationSensitive upstream files changed
.envdocker-compose.ymlinstall.shinstall/bootstrap-s3-profiles.shinstall/ensure-correct-permissions-profiles-dir.shinstall/ensure-sentry-data-ownership.shinstall/error-handling.shinstall/geoip.shinstall/migrate-seaweedfs-kek.shinstall/set-up-and-migrate-database.shinstall/setup-custom-ca-certificate.shinstall/setup-js-sdk-assets.shinstall/upgrade-clickhouse.shinstall/upgrade-postgres.shsentry/Dockerfilesentry/entrypoint.shsentry/sentry.conf.example.pysnuba/api_healthcheck.pytaskbroker/config.ymlUpstream release notes
26.8.0
Removed 7 containers related to generic metrics
We stripped out 7 containers tied to generic metrics — the stuff that used to power web frontend metrics like LCP and TTFB. This data already made the move to span metrics a while back and has been living in the
eap_itemstable on ClickHouse ever since, so these containers were just dead weight. No functional change on your end, just fewer things running and less to worry about. A happy day for self-hosters.As noted above,
ingest-replay-recordingsfalls into this same cleanup — it's now handled as part oftaskworkerrather than as its own container. Same job, different home. Again: if you've got adocker-compose.override.yml, double check it against this removal before you upgrade.Switched Redis to Valkey
Worth restating our general policy here since it comes up: we only touch database dependencies when SaaS does. This time, that means migrating from Redis to Valkey. The main draw is Valkey's multithreading support — in practice that should translate to faster Redis-protocol queries without you having to do anything differently on your end.
Lessened Kafka log retention hours
We dropped
KAFKA_LOG_RETENTION_HOURSfrom 24 down to 3. Honestly, we're not entirely sure why it was set to 24 in the first place, that value really only earns its keep if your processing pipeline is slow. Most setups process fast enough that 24 hours of retention was just burning disk space for no benefit. Three hours should be plenty of buffer while giving you back a meaningful chunk of storage.One thing that snuck in late (honestly, last minute): we added
--auto-offset-reset=earliest --no-strict-offset-resetflags to the Sentry consumers. This was necessary to stop consumers from hitting constant Kafka Offset Out Of Range errors now that retention is so much shorter —without it, a consumer that falls behind could find its offset has already aged out.Notable updates
weed servertoweed mini, some of you have reported SSE-S3 Key Manager failed to initialize errors. We now run a migration from the legacy KEK before weed mini starts up, which should resolve it. This ships alongside a version bump to a newer SeaweedFS release (PR #4461).Full diff: getsentry/self-hosted@26.7.2...26.8.0
As always, if you hit snags upgrading or just want to talk through your setup, swing by our Discord — we're always happy to help and chat.
New Features ✨
Tasks
Other
Bug Fixes 🐛
Internal Changes 🔧
Deps
Other
Full changelog: https://github.com/getsentry/self-hosted/releases/tag/26.8.0
26.9.0
A solid maintenance release with some nice infrastructure cleanup and a few flags worth exploring.
Planned Postgres 18 Upgrade!
Heads up on Postgres: We're on the clock with Postgres 14—it hits EOL on November 12. We're planning the jump to Postgres 18 in 26.10.0 (October 15), so if you're running self-hosted, mark your calendar. The current release bumps us to
postgres:14-trixieto handle some glibc changes; no action needed on your end, the migration script handles it.Generic Metrics Infra Removal
We've removed the generic-metrics infrastructure that was feeding into the old Explore dashboard. This was doing the work of pulling "metrics" from span/trace attributes and computing them—solid cleanup that eliminates 3 Docker containers and reduces operational overhead. No user-facing impact here, just cleaner deployments.
We also removed
process-segmentsDocker container, and merge it into Taskbroker. That's 4 Docker containers down total!Regular dependencies bumps
The usual rounds of bumps. Most notable: ClickHouse to 25.8. It's a straightforward bump with no breaking schema changes or migrations required.
Experimental Features to Try
A few feature flags worth flipping if you want to poke around:
organizations:investigations— Organization investigation notebooks. Curious what this is about right?organizations:authv2-enable-toggle&organizations:authv2-rollout— New auth page from Evan Purkhiser. Still finding its footing, but feedback's welcome if you try it.organizations:ourlogs-regex-searches— Search Logs with regex patterns. Handy if you're doing complex filtering.As always, we're in the Discord if you hit snags, have questions about the Postgres timeline, or just want to chat through your setup. We're always happy to help.
New Features ✨
Bug Fixes 🐛
Documentation 📚
Internal Changes 🔧
Deps
Other
Full changelog: https://github.com/getsentry/self-hosted/releases/tag/26.9.0
26.10.0
Postgres 18 Upgrade
We've finally moved off our very old Postgres 14 and onto Postgres 18. This upgrade includes a breaking change in how Postgres data is stored. See docker-library/postgres#1259 for the details.
If you ever encountered a problem, come to Discord for direct help.
Going Distroless
Distroless images are even more minimal (in terms of image size and included packages) than
debian:slim, and in some cases than Alpine. They contain only the application and its runtime dependencies, with no OS shell or package manager. That leaves far less to flag when you scan with Trivy or similar tools. They’re also smaller, which means faster image downloads and less disk space used on your host.Sentry's RFC process is how this work got started. Alex, our security engineer, submitted an RFC for distroless, and the changes below follow from it:
sentryuser directly. Containers no longer start as root and drop privileges throughgosu. This removes a moving part, and there's no root process to worry about (self-hosted#4535).-distrolessimage variant (sentry#126030). For a comparison against the standard Debian 13 image, see this comment.We ran a quick test of the distroless variant from a throwaway branch. That branch sidestepped a few minor bash entrypoint issues we haven’t settled on yet, and the run itself had no problems. The distroless sentry image isn’t the default yet, so you’ll need to opt in via
:nightly-distrolessto use it.Here’s where each service stands:
Experimental Features to Try
organizations:attribute-managementenables the Settings > Attributes browser and editor page.organizations:relay-automatic-json-expansionandorganizations:explore-automatic-json-expansion-uicontrol the expansion config. The flag names don't say much, but they let you expand JSON logs, which is worth a look.Other Notable Things
jqimage ourselves. We use the official one now (self-hosted#4547).SENTRY_BUCKET_PROFILEShas changed. If you use external storage (S3-compatible or GCS), update your configuration before upgrading.We're always happy to chat about setups, upgrades, or whatever's giving you trouble. Come find us on Discord.
New Features ✨
Bug Fixes 🐛
Vroom
Other
Documentation 📚
Internal Changes 🔧
Deps
Sentry
Other
Other
Full changelog: https://github.com/getsentry/self-hosted/releases/tag/26.10.0