1.0.5

[gardener-extensions]

Improvements

• [USER] An issue where calico typha was not working with SuSE nodes has been fixed. Now SuSE based cluster can enable calico typha again and benefit from it. (#504, @vpnachev)
• [OPERATOR] SuSE nodes are now using mtu of 1460 on all infrastructures. (#504, @vpnachev)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:1.0.5

1.0.4

[gardener-extensions]

Improvements

• [OPERATOR] VPA for provider extension controllers is now configurable via ControllerRegistration. (c6a7f8b)

[cert-management]

Improvements

• [OPERATOR] improved behaviour if same certificate is requested multiple times simultaneously (gardener/cert-management#12, @MartinWeindel)
• [OPERATOR] The release tags from now are prefixed with v. (gardener/cert-management#10, @MartinWeindel)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:1.0.4

1.0.3

[gardener-extensions]

Improvements

• [OPERATOR] Extension-shoot-cert-service can now use imagevector overwrite. A bug that causes deployment resources configuration of extension-shoot-cert-service to not work has been fixed. (#484, @EmoinLanyu)
• [OPERATOR] Fix the backupEntry deletion error in case of more than 1000 backups accumulated for provider-aws. (2cf5132)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:1.0.3

1.0.2

[gardener-extensions]

Improvements

• [OPERATOR] An issue preventing extension-shoot-dns-service to be properly installed is now fixed. (#470, @ialidzhikov)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:1.0.2

1.0.1

[gardener-extensions]

Most notable changes

• [USER] The minimum number of ports allocated to a VM in the CloudNAT resource can be defined in the gcp.provider.extensions.gardener.cloud/v1alpha1.InfrastructureConfig.networks.cloudNAT.minPortsPerVM (#458, @vpnachev)

Improvements

• [OPERATOR] An issue with dropped packets by CloudNAT for GCP clusters has been fixed. (#458, @vpnachev)
• [OPERATOR] An issue preventing calico-typha-vertical-autoscaler to patch (scale) calico-typha-deploy is now fixed. (#457, @ialidzhikov)

[cert-management]

Improvements

• [OPERATOR] Existing certificate secrets with type kubernetes.io/tls can be updated (gardener/cert-management#9, @MartinWeindel)
  • to simplify migration from cert-broker/cert-manager.
• [OPERATOR] fix for "Panic if ingress spec.tls.hosts not specified" (issue #6) (gardener/cert-management#7, @MartinWeindel)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:1.0.1

1.0.0

[gardener-extensions]

Action Required

• [USER] If a VPC is to be re-used for shoot clusters, a (manually pre-provisioned) GCP Cloud Router name needs to be specified as well, this is to avoid hitting quota limits (5 Cloud routers / VPC) and allowing all the Cloud NATs to share that Cloud Router. If no Cloud Router name is specified, all the nodes will be assigned a public IP. (#417, @zanetworker)
• [USER] After two months, no public IPs will be allowed and specifying a Cloud Router name will be enforced. Please adapt your shoot deployments into a existing VPCs as soon as possible. (#417, @zanetworker)
• [OPERATOR] Since version 0.13.0 the fields publisher, offer, sku and version in the AzureMachineClass are deprecated and now support for them has been removed. Please switch your Azure provider extension to use URN as OS image reference, which is the replacement of the deprecated fields. (#421, @vpnachev)
• [OPERATOR] All extensions controller do no longer understand the deprecated garden.sapcloud.io/v1beta1 API group. Please use at least Gardener 0.31.0. (#392, @rfranzke)
• [OPERATOR] If you want to keep using cloud-init for SuSE-JeOS nodes bootstrapping, use osConfig.format and osConfig.bootCmd values to switch to cloud-init. Sample values can be found here. (#297, @pablochacin)
• [DEVELOPER] pkg/terraformer package has renamed and deleted funcs. If you are vendoring this package in your project, make sure to adapt to these changes when adopting the new version of gardener/gardener-extensions. (#426, @ialidzhikov)

Most notable changes

• [USER] The AWS infrastructure controller no longer creates the security group for bastions. Also, for existing clusters, it removes this rule now. (#431, @ThormaehlenFred)
• [DEVELOPER] The terraformer package was moved from gardener/gardener to gardener/gardener-extensions/pkg/terraformer. (#418, @tim-ebert)

Improvements

• [USER] Calico Typha can be disabled for shoot clusters via Shoot.spec.networking.providerConfig.typha.enabled=false. Please read the docs before to consider to disable typha. (#432, @vpnachev)
• [USER] An issue that prevented the control plane deployment for AWS shoots that don't specify a controlPlaneConfig in the Shoot specification has been resolved. (#403, @rfranzke)
• [USER] The os volume type configuration for worker machines of Azure Shoot cluster will be now passed correctly, but only if the selected volume type is a valid Azure volume type. (#401, @dkistner)
  • This will trigger a rolling update of all machines in the cluster during the maintenance window, if configured.
• [USER] An issue that prevented GCP shoot worker nodes from getting external IP addresses has been fixed. (#398, @zanetworker)
• [USER] The recent changes for the GCP controller regarding usage of cloud NAT have been reverted due to instabilities. (09e8023)
• [OPERATOR] pkg/terraformer package does now use a Pod for terraform apply/destroy operations. The motivation for this changes is to prevent multiple Pods to execute apply/destroy commands simultaneously in some cases. (#426, @ialidzhikov)
• [OPERATOR] pkg/terraformer package does no longer deploy a Terraformer validation pod. It executes directly terraform apply/destroy. (#426, @ialidzhikov)
• [OPERATOR] terraformer does now delete job and pods only in its namespace. This fixes an issue that prevents simultaneous creation of Shoots with the same name (but different projects) on the same Seed. (#425, @ialidzhikov)
• [OPERATOR] Make the env vars OS_CONFIG_FORMAT and BOOT_COMMAND optional to allow the hyper binary to run without them. (#423, @vpnachev)
• [OPERATOR] MCM has new role for create, delete and list secrets in shoot's kube-system namespace (#422, @vlvasilev)
• [OPERATOR] OpenStack: rename the default storage class from "default-class" to "default" (#415, @kayrus)
• [OPERATOR] Ensure required packages are installed in JeOS (#400, @kayrus)
• [OPERATOR] Allows deployment of JeOS-based worker nodes on cloud providers on which cloud-init is not supported. By default bash script bootstrapping is used. (#297, @pablochacin)
• [DEVELOPER] The default storage class annotations are now overwritten to the desired values using the forceOverwriteAnnotation parameter in the extension-controlplane-storageclasses managed resource. (#436, @zanetworker)
• [DEVELOPER] Developers who write and register actuators with Gardener-Extension means must now pass the extension type they want to act upon. This makes sure that reconciliation is only triggered for desired types. (#414, @timuthy)
• [DEVELOPER] sigs.k8s.io/controller-runtime is updated to v0.2.0-beta.5. (#413, @ialidzhikov)

[cert-management]

Improvements

• [USER] fix multiple DNS challenges for same domain name. (gardener/cert-management#5, @MartinWeindel)
• [USER] wait for readiness of DNSEntries before starting DNS challenge validation. (gardener/cert-management#5, @MartinWeindel)
• [USER] bug fix: create secret copy if two managed ingress with same TLS hosts and same secret name are defined in two namespaces (issue #2) (gardener/cert-management#3, @MartinWeindel)
• [OPERATOR] helm charts: splitting value createCRDs into two separate values (gardener/cert-management@5fa6f75)
  • createCRDs.issuers and createCRDs.certificates

[external-dns-management]

Improvements

• [USER] For openstack designate it is possible now to (gardener/external-dns-management#43, @mandelsoft)
  • specify a CA certificate in the credentails. The key is CACERT.
  • Additionally a dedicated client certificate and key can used
  • for the https requests (CLIENTCERT/CLIENTKEY)

[machine-controller-manager]

Action Required

• [USER] Since version 0.22.0 the fields Spec.Properties.StorageProfile.ImageReference.[Publisher|Offer|Sku|Version] in the AzureMachineClass have been deprecated and now they are completely removed. Please switch to Spec.Properties.StorageProfile.ImageReference.URN` before upgrading to this version or higher. (gardener/machine-controller-manager#353, @vpnachev)

Improvements

• [OPERATOR] Node-conditions are configurable via flag. Users can provide the list of node-conditions based on which machines are replaced if set to true for health-timeout period. (gardener/machine-controller-manager#348, @hardikdr)
• [OPERATOR] Deletes any Azure infra resources before returning error on machine create (gardener/machine-controller-manager#347, @prashanth26)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:1.0.0

0.14.4

[gardener-extensions]

Most notable changes

• [USER] The AWS infrastructure controller no longer creates the security group for bastions. Also, for existing clusters, it removes this rule now. (d7a34a1)

Improvements

• [OPERATOR] terraformer does now delete job and pods only in its namespace. This fixes an issue that prevents simultaneous creation of Shoots with the same name (but different projects) on the same Seed. (#435, @ialidzhikov)
• [OPERATOR] The resources for the aws-lb-readvertiser are now updated to avoid OOMKilled (428bc9e)
• [OPERATOR] Ensure secrets finalizers are accessible otherwise operatingsystemconfigs can use secrets as owner (894755b)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:0.14.4

0.14.3

[gardener-extensions]

Improvements

• [USER] The recent changes for the GCP controller regarding usage of cloud NAT have been reverted due to instabilities. (d75603f)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:0.14.3

0.14.2

[gardener-extensions]

Improvements

• [USER] An issue that prevented the control plane deployment for AWS shoots that don't specify a controlPlaneConfig in the Shoot specification has been resolved. (#402, @rfranzke)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:0.14.2

0.14.1

[gardener-extensions]

Improvements

• [USER] An issue that prevented GCP shoot worker nodes from getting external IP addresses has been fixed. (b1d5d3f)

[cert-management]

Improvements

• [USER] fix multiple DNS challenges for same domain name. (gardener/cert-management#5, @MartinWeindel)
• [USER] wait for readiness of DNSEntries before starting DNS challenge validation. (gardener/cert-management#5, @MartinWeindel)
• [USER] bug fix: create secret copy if two managed ingress with same TLS hosts and same secret name are defined in two namespaces (issue #2) (gardener/cert-management#3, @MartinWeindel)

Docker Images

gardener-extension-hyper: eu.gcr.io/gardener-project/gardener/gardener-extension-hyper:0.14.1