provider-azure-1.45.0

[gardener/machine-controller-manager-provider-azure]

📰 Noteworthy

• [USER] The cloud instance to connect to can now be configured via the provider spec by @AndreasBurger [gardener/machine-controller-manager-provider-azure#148]

🏃 Others

• [USER] Machine-Controller-Manager Provider-Azure now supports enabling of vm boot diagnostics. by @hebelsan [gardener/machine-controller-manager-provider-azure#136]
• [USER] Add support for ConfidentialVM types in Azure. by @kon-angelo [gardener/machine-controller-manager-provider-azure#146]
• [USER] Error Code is now extracted from azcore.ResponseError.ErrorCode by @rishabh-11 [gardener/machine-controller-manager-provider-azure#153]
• [USER] Fix passing data disk caching method by @hebelsan [gardener/machine-controller-manager-provider-azure#149]
• [DEVELOPER] Removed vendor directory by @rishabh-11 [gardener/machine-controller-manager-provider-azure#140]
• [DEVELOPER] Switch AzureDataDisk.Lun from pointer to value by @hebelsan [gardener/machine-controller-manager-provider-azure#150]

[gardener/gardener-extension-provider-azure]

✨ New Features

• [USER] Extension-Provider-Azure now supports enabling of vm boot diagnostics in the worker providerConfig. by @hebelsan [#808]

🏃 Others

• [OPERATOR] Add support for confidential VMs by @kon-angelo [#835]
• [OPERATOR] The CIDR blocks used for shoot egress will now be provided via the status of the shoot's infrastructure-resource by @AndreasBurger [#852]
• [OPERATOR] OverconstrainedZonalAllocationRequest is now classified as ERR_RETRYABLE_CONFIGURATION_PROBLEM by @Kostov6 [#881]
• [OPERATOR] Improve flow shoot deletion with custom vnet by @hebelsan [#896]
• [OPERATOR] A problem with deploying MachineClasses that reference an operating system image whose version contains a + character was fixed. by @AndreasBurger [#898]

[gardener/machine-controller-manager]

⚠️ Breaking Changes

• [DEVELOPER] New provider method Driver.InitializeMachine added for Post-Creation VM Instance Initialization steps. by @elankath [gardener/machine-controller-manager#898]

🏃 Others

• [OPERATOR] Updated k8s dependencies to v0.29.3 by @rishabh-11 [gardener/machine-controller-manager#907]
• [OPERATOR] Removed vendor directory by @rishabh-11 [gardener/machine-controller-manager#903]

Docker Images

• gardener-extension-admission-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.45.0
• gardener-extension-provider-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.45.0

provider-azure-1.44.1

[gardener/gardener-extension-provider-azure]

🐛 Bug Fixes

• [OPERATOR] Fixes a monitoring configuration issue that caused false CCM-down alerts to fire. by @AndreasBurger [#884]
• [USER] Fix panic that could occur when using zoned cluster and providing external vnet config by @AndreasBurger [#885]

Docker Images

• gardener-extension-admission-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.44.1
• gardener-extension-provider-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.44.1

provider-aws-1.59.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [USER] Use ipv6 CIDR in ID string only for IPv6 only subnets. by @AndreasBurger [#1163]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.59.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.59.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.59.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.59.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.59.1

provider-aws-1.59.0

[gardener/gardener-extension-provider-aws]

⚠️ Breaking Changes

• [OPERATOR] The Helm charts for the application and runtime parts of the gardener-extension-admission-aws admission controller have been separated into standalone charts. These charts now assume a Garden setup with a virtual garden. Both charts must be deployed individually: the runtime chart on the Garden runtime cluster, and the application chart on the virtual garden. Additionally, the intermediate global level in the Helm values has been removed, so you may need to adjust your provided values accordingly. by @MartinWeindel [#1100]

📰 Noteworthy

• [DEVELOPER] Updated AWS SDK from v1 to v2 by @AndreasBurger [#1060]

✨ New Features

• [OPERATOR] Adjustments for additional deployment of extension and admission controller on Garden runtime cluster by gardener-operator. by @MartinWeindel [#1100]
• [OPERATOR] Support specification of extended resources in provider config node template without re-specifying core resources. by @elankath [#1010]

🏃 Others

• [OPERATOR] Fixed terraform deploy and integration tests for IPv6. by @axel7born [#1112]
• [OPERATOR] update images of pause and alpine container by @hebelsan [#1101]
• [OPERATOR] Add IPv4 ranges from Spec.Networking to Status.Networking. by @axel7born [#1094]
• [OPERATOR] Filter pod ranges for IPv4 CIDRs to configure Custom-Route-Controller. by @axel7born [#1138]
• [OPERATOR] Create bastion vm from the info provided in the cloud profile bastion section by @hebelsan [#1040]
• [OPERATOR] Added validation to allow only IPv6-only shoot clusters, but not dual-stack as it is not supported, yet. by @ScheererJ [#1095]
• [OPERATOR] Fixed an issue preventing the deployment of internal load balancers in IPv6-only shoots. by @axel7born [#1108]
• [OPERATOR] Add NamespacedCloudProfile admission mutation and validation to support custom machine images and types. by @LucaBernstein [#1136]
• [OPERATOR] Remove the duplicate provider type check from the admission webhooks. by @LucaBernstein [#1117]
• [OPERATOR] Fix an issue where the "0.0.0.0/0" route creation would fail if the nat-gateway was previously deleted. by @kon-angelo [#1111]
• [OPERATOR] Update gardener to v1.106.1 by @hebelsan [#1110]
• [OPERATOR] Dual-stack networking, i.e. networks with IPv4 and IPv6, are allowed now. by @ScheererJ [#1139]
• [OPERATOR] AWS load balancers controller is always enabled for IPv6-only and dual-stack shoot clusters. by @ScheererJ [#1099]
• [OPERATOR] Harmonize logging output from controller-runtime logger and kubernetes logger. by @DockToFuture [#1105]
• [OPERATOR] gosec was introduced for Static Application Security Testing (SAST). by @DockToFuture [#1105]
• [DEPENDENCY] Update go to version 1.23.3 by @hebelsan [#1121]
• [DEVELOPER] Add gosec as sast makefile target by @hebelsan [#1123]

📖 Documentation

• [USER] Add overview documentation for IPv6 by @ScheererJ [#1143]

[gardener/aws-custom-route-controller]

✨ New Features

• [USER] gosec was introduced for Static Application Security Testing (SAST). by @ScheererJ [gardener/aws-custom-route-controller#34]
• [USER] Update sdk version to v2 by @kon-angelo [gardener/aws-custom-route-controller#48]
• [USER] The aws-custom-route-controller only adds node routes for IPv4 pod CIDR ranges and does not interfere with IPv6 routes. by @DockToFuture [gardener/aws-custom-route-controller#43]

🏃 Others

• [OPERATOR] Bumps golang from 1.23.2 to 1.23.3. by @dependabot[bot] [gardener/aws-custom-route-controller#44]
• [OPERATOR] Bumps golang from 1.23.1 to 1.23.2. by @dependabot[bot] [gardener/aws-custom-route-controller#33]

provider-aws-1.58.3

[gardener/gardener-extension-provider-aws]

🏃 Others

• [OPERATOR] Ignore alreadyDetached errors when detaching instead of erroring out by @kon-angelo [#1118]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.3
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.3
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.3

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.3
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.3

provider-aws-1.58.2

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix missing nil check after getting route table by @hebelsan [#1107]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.2
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.2
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.2

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.2
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.2

provider-aws-1.58.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix flow: Ignore subnet not found in infra state while deleting routing table associations by @hebelsan [#1098]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.1

provider-aws-1.58.0

[gardener/gardener-extension-provider-aws]

✨ New Features

• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#1047]
• [USER] Enable support for the field shoot.Spec.CloudProfile alongside cloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#1000]
• [USER] The provider-aws extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#1055]

🐛 Bug Fixes

• [OPERATOR] An issue causing Shoot force deletion to fail because the control plane webhook failing to get the Infrastructure object from the Seed cluster is now fixed. The control plane webhook now reads the infrastructureConfig from the Shoot spec in the Cluster resource. Previously, it was fetching the Infrastructure object from the Seed cluster and was reading the infrastructureConfig from there. by @Kostov6 [#1068]
• [USER] Fix cleanup of routing table associations by @hebelsan [#1083]

🏃 Others

• [OPERATOR] Create IPv6 ServiceCIDR and write IPv6 ranges to Infra.Status.Networking by @axel7born [#1081]
• [OPERATOR] The shoot-webhook that mutates the addons-nginx-ingress-controller ConfigMap does now specify object selector. The webhook will now intercept only requests for the addons-nginx-ingress-controller ConfigMap. by @ialidzhikov [#988]
• [OPERATOR] The aws-ipam-controller is enabled for IPv6 and dual stack shoot clusters. It replaces the IPAM of the cloud-controller-manager and kube-controller-manager and supports additionally prefix delegation in case of IPv6 or dual stack. by @DockToFuture [#984]
• [OPERATOR] Add ipv6 support to deploy IPv6 shoots. by @axel7born [#1024]
• [OPERATOR] Enable nat64 and dns64 for IPv6 shoot clusters. by @DockToFuture [#1082]
• [OPERATOR] Fix error classification when deleting DNS record sets by @hebelsan [#1033]
• [OPERATOR] The provider-aws extension no longer configures min/maxAllowed in any managed VPA resource. by @hebelsan [#1070]
• [OPERATOR] The following images are updated:
  registry.k8s.io/provider-aws/aws-ebs-csi-driver: v1.29.0 -> v1.35.0 by @scs-gardener-team-gitlab [#1080]
• [OPERATOR] aws-custom-route-controller is disabled for IPv6. by @DockToFuture [#1088]
• [OPERATOR] Update cloud-provider images including CSI driver images by @hebelsan [#1072]
• [OPERATOR] Add flow migration integration test by @kon-angelo [#1046]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#1049]

[gardener/machine-controller-manager-provider-aws]

🏃 Others

• [OPERATOR] InitializeMachine returns Uninitialized error code if VM is not found. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Set PrimaryIpv6 flag for instances with IPv6 addresses. by @axel7born [gardener/machine-controller-manager-provider-aws#174]
• [OPERATOR] Use ProviderID as a fallback for fetching the VM. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Golang version used upgraded to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-aws#166]
• [OPERATOR] Golangci-lint will now be used as the linter instead of the older golint. by @aaronfern [gardener/machine-controller-manager-provider-aws#168]

[gardener/machine-controller-manager]

✨ New Features

• [DEVELOPER] MCM adds the name of the machine to node.gardener.cloud/machine-name label of the corresponding node. by @oliver-goetz [gardener/machine-controller-manager#919]
• [DEVELOPER] MCM replaces the magic string <<MACHINE_NAME>> in user data with the name of the machine when it is bootstrapped. by @oliver-goetz [gardener/machine-controller-manager#919]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where failure of machine initialization caused label updates to not happen. by @thiyyakat [gardener/machine-controller-manager#940]
• [DEVELOPER] Fixed bug that removed the shoot-- prefix from control cluster namespace for integration tests using the gardener local setup case by @thiyyakat [gardener/machine-controller-manager#935]

🏃 Others

• [OPERATOR] getVMStatus always redirects to InitiateDrain. It also populates the node label on the machine object by checking node.gardener.cloud/machine-name label on the nodes. by @thiyyakat [gardener/machine-controller-manager#940]
• [OPERATOR] Drain timeout is now correctly honored for Pod eviction during Machine Drain by @sssash18 [gardener/machine-controller-manager#920]
• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] Golang version used is now upgraded to 1.22.5 by @aaronfern [gardener/machine-controller-manager#929]
• [DEVELOPER] The following dependencies are updated:
  • k8s.io/* : v0.29.3 -> v0.31.0 by @ary1992 [gardener/machine-controller-manager#938]

📖 Documentation

• [OPERATOR] Broken API doc links are now fixed by @rishabh-11 [gardener/machine-controller-manager#927]

provider-aws-1.57.1

[gardener/gardener-extension-provider-aws]

🏃 Others

• [OPERATOR] Fix an issue where the infrastructure state was not properly transformed to the provider status. by @kon-angelo [#1042]
• [OPERATOR] Fix an issue where terraformer artifacts would not be deleted during the control-plane-migration migrate phase. by @kon-angelo [#1043]
• [OPERATOR] Correctly register infrastructure webhook with the controllerruntime manager by @kon-angelo [#1042]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.57.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.57.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.57.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.57.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.57.1

provider-aws-1.57.0

[gardener/gardener-extension-provider-aws]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#1012]

🐛 Bug Fixes

• [OPERATOR] Removed unnecessary preStop hook from node-driver-registrar in csi-driver-node, as socket removal is now handled internally by node-driver-registrar, resolving distroless image error. by @AndreasBurger [#992]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the gardener-extension-admission-aws Helm chart. by @timuthy [#994]
• [OPERATOR] Starting with gardenlet >= v1.98.0, use controlplane webhook object selector to limit mutator calls. by @LucaBernstein [#989]
• [OPERATOR] Update the VPA CRD used for testing locally by @kon-angelo [#1019]
• [OPERATOR] Inserts architecture from worker to the machine class by @sssash18 [#853]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.57.0
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.57.0
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.57.0

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.57.0
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.57.0