v1.7.0

[gardener-extension-provider-openstack]

Improvements

• [OPERATOR] ClusterRoles for the machine-controller-manager that might be orphaned now as they created with an earlier, buggy version of this controller are now cleaned up during startup. (#82, @rfranzke)
• [OPERATOR] added optional domain field to floatingpools in the cloud profile constraints (#76, @MartinWeindel)
• [OPERATOR] If a floating pool in the cloud profile defines no load balancer class named "default", the first one is used as default. (#74, @MartinWeindel)
• [OPERATOR] The pre-defined ValidatingWebhookConfiguration assets now set sideEffects=None. This enables dry-run related operations, like kubectl diff, for core.gardener.cloud resources. (#70, @timuthy)

[gardener]

Improvements

• [USER] The generic Worker actuator does now exit its reconciliation flows early if it detects an error during the machine reconciliation. This allows to faster propagate problems to the end-user. (gardener/gardener#2348, @rfranzke)
• [USER] The extension health check library does now allow individual health checks to return the Progressing status. This allows to provide more accurate status information and less false negative health reports. (gardener/gardener#2289, @rfranzke)
• [OPERATOR] The Gardenlet sets an additional annotation to Extension CRDs during reconciliation to guarantee an update event for the watching clients. (gardener/gardener#2290, @danielfoehrKn)
• [OPERATOR] Fixes a bug in the extension libraries that could lead to duplicate reconciliation of extension resources. When respecting the operation annotation set by the Gardenlet during reconciliation, extension controllers now only watch the Extension CRD. (gardener/gardener#2290, @danielfoehrKn)
• [OPERATOR] Fixes a bug in the extension library of all extension resources that lead to not stopping the reconciliation of extension resources when the Shoot is in 'failed' state (Shoot.Status.lastOperation.state = Failed). (gardener/gardener#2279, @danielfoehrKn)
• [OPERATOR] Fixed a bug in the health check library that leads to too many health checks being executed when the Extension.Status changes. (gardener/gardener#2307, @danielfoehrKn)
• [OPERATOR] Fixed the health check condition.lastTransitionTime in the health check library. (gardener/gardener#2307, @danielfoehrKn)

[machine-controller-manager]

Improvements

• [USER] Azure: Add support for custom image plans for VMs (gardener/machine-controller-manager#463, @MSSedusch)
• [USER] Provide a way to specify "auth-extra-groups" field in created bootstrap tokens. (gardener/machine-controller-manager#442, @zuzzas)
• [USER] Support multiple network interfaces in the AWS driver (gardener/machine-controller-manager#441, @zuzzas)
• [OPERATOR] The mcm stopped adopting Nodes with empty ProviderID field (gardener/machine-controller-manager#451, @zuzzas)
• [OPERATOR] Bugfix: Continue with VM deletion when data disk doesn't exist for AWS. (gardener/machine-controller-manager#447, @prashanth26)
• [OPERATOR] Add GCP local ssd disk support (gardener/machine-controller-manager#414, @tennix)
• [DEVELOPER] Added support for multiple Data Disks in Azure and AliCloud. (gardener/machine-controller-manager#397, @guydaichs)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.7.0
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.7.0

v1.6.1

[gardener]

Improvements

• [OPERATOR] Fixed a bug in the health check library that leads to too many health checks being executed when the Extension.Status changes. (gardener/gardener#2307, @danielfoehrKn)
• [OPERATOR] Fixed the health check condition.lastTransitionTime in the health check library. (gardener/gardener#2307, @danielfoehrKn)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.6.1
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.6.1

v1.6.0

[gardener-extension-provider-openstack]

Improvements

• [OPERATOR] Fixed a bug in the healthcheck library that prevents checks after a Shoot has been woken up from hibernation. Gardener extensions require a minor change during the healthcheck registration. (#68, @ialidzhikov)
• [OPERATOR] The useOctavia setting of the cloud-controller-manager is now explicitly set to false. You can set it to true using the ControlPlaneConfig. (#66, @rfranzke)
• [OPERATOR] implement Migrate and Restore functionality (#53, @vlvasilev)

[gardener]

Improvements

• [DEVELOPER] The ShootNotFailed predicate in the extensions library does now work as expected. (gardener/gardener#2265, @rfranzke)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.6.0
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.6.0

v1.5.1

[gardener-extension-provider-openstack]

Improvements

• [OPERATOR] The useOctavia setting of the cloud-controller-manager is now explicitly set to false. You can set it to true using the ControlPlaneConfig. (1a1683f)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.5.1
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.5.1

v1.5.0

[gardener-extension-provider-openstack]

Most notable changes

• [USER] The OpenStack extension does now support shoot clusters with Kubernetes version 1.18. You should consider the Kubernetes release notes before upgrading to 1.18. (#59, @rfranzke)

Improvements

• [OPERATOR] kube-controller-manageer no longer has access to blocked CIDRs. (#64, @mvladev)
• [OPERATOR] It is now possible to use simple wildcard expressions when configuring floatingPools[].name in the CloudProfileConfig. As a consequence, the FloatingPoolName in a shoot cluster is matched against this wildcard expression instead of only allowing a strict match. Please consult the documentation https://github.com/gardener/gardener-extension-provider-openstack/blob/c0588dd370006b9f9fca910037e05387c752654b/docs/usage-as-operator.md for more details. (#63, @timuthy)
• [OPERATOR] The OpenStack validator now allows zones to be specified multiple times for a worker group. (#58, @timuthy)
• [OPERATOR] g/gardener-extensions does now require the g/[email protected]. (#48, @ialidzhikov)

[gardener-extensions]

Improvements

• [OPERATOR] Add Separate sidecar controller to save worker state under Worker.Status.State (gardener-attic/gardener-extensions#600, @vlvasilev)
  • Add Worker.Status.State restoration functionality
  • Add migration functionality
• [OPERATOR] The machine.sapcloud.io CRDs applied by the ./pkg/controller/worker package do now get a protection label for accidental deletion. See also: gardener/gardener#2066 (gardener-attic/gardener-extensions#625, @rfranzke)

[terraformer]

Action Required

• [OPERATOR] The Terraformer does now lookup the relevant data stored in ConfigMaps or Secrets live from the system instead of relying on mounted volumes. This is a breaking change as the volume mount approach does no longer work, please adapt your manifests according to the examples. The rationale behind it is to not rely on potentially stale kubelet cache while it mounts the volume which may, in rare cases, cause state loss. (gardener/terraformer#37, @rfranzke)

Improvements

• [OPERATOR] nsxt and random providers are now removed from the terraform bundle. (gardener/terraformer#38, @ialidzhikov)
• [OPERATOR] terraformer does no longer ignore the termination signals sent to PID 1. It does now send a termination signal to the terraform process itself and waits for its completion. This should prevent rare cases in which the terraformer was not storing the state of created infrastructure resources. (gardener/terraformer#36, @ialidzhikov)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.5.0
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.5.0

v1.4.0

[gardener-extension-provider-openstack]

Action Required

• [OPERATOR] ⚠️ This version is not compatible with Gardener < v1.2. (#37, @georgekuruvillak)
  • The controlplanebackup webhook is removed as of gardener/gardener#1762. The controlplaneexposure webhook that was previously targeting StatefulSets is now targeting Etcd resources of the druid.

Most notable changes

• [USER] The OpenStack extension does now support shoot clusters with Kubernetes version 1.18. You should consider the Kubernetes release notes before upgrading to 1.18. (#54, @timuthy)
• [OPERATOR] It is now possible to configure useOctavia=true in the CloudProfileConfig in case the underlying OpenStack system uses Octavia for network load balancing. (#38, @rfranzke)
• [OPERATOR] The gardener-extension-provider-openstack now offers a validating webhook which checks shoot resources of type openstack in the core.gardener.cloud group. Operators should register this webhook in the Garden cluster to further prevent invalid modifications on openstack shoots. (#36, @timuthy)

Improvements

• [USER] The Infrastructure deletion does now succeed in case it never created anything but the cloud provider secret does not contain the correct credentials. (#42, @rfranzke)
• [USER] The Worker deletion does now succeed in case the cloud provider credentials were changed. (#42, @rfranzke)
• [USER] Do not mutate kube-apiserver exposure resources which Gardener marks as managed by it with core.gardener.cloud/apiserver-exposure: gardener-managed label. (#33, @mvladev)
• [OPERATOR] The OpenStack provider now allows Gardener to restart the Cloud-Controller-Manager and the Machine-Controller-Manager (see gardener/gardener#2098 for more information). (#54, @timuthy)
• [OPERATOR] Use validationContext consistently during validation (#47, @zanetworker)
• [OPERATOR] The OpenStack shoot validator now checks that workers[].minimum != 0 if workers[].maximum >0 since autoscaling does not support this setup yet. (#44, @timuthy)
• [OPERATOR] The OpenStack extension does now by default mount the host certificates from /etc/ssl and /usr/share/ca-certificates into the pods that are running in the seed and need to interact with the OpenStack API (kube-apiserver, kube-controller-manager (only until #1 is fixed), and cloud-controller-manager). (#39, @rfranzke)
  • This is to accommodate OpenStack environments that are serving certificates signed by CAs not commonly known/trusted.
• [DEVELOPER] Fix nil pointer when applying machine class chart (#43, @mvladev)

[gardener-extensions]

Improvements

• [USER] An issue in the machine reconciliation has been fixed that caused the reconciliation being stuck in some cases where a previously broken worker configuration (e.g., due to the specification of machine types that are not available in certain availability zones) has been corrected. (gardener-attic/gardener-extensions#626, @rfranzke)
• [USER] Allow force deletion of machines incase of cluster hibernation (gardener-attic/gardener-extensions#609, @prashanth26)
• [OPERATOR] An issue causing running terraformer container to leak on the Node without associated Pod resource is now fixed. This will prevent multiple containers to execute apply/destroy commands simultaneously in some cases (especially for long running terraformer Pods). (gardener-attic/gardener-extensions#605, @ialidzhikov)
• [OPERATOR] Credentials used by machine-controller-manager are now updated during worker deletion. (gardener-attic/gardener-extensions#606, @EmoinLanyu)

[machine-controller-manager]

Most notable changes

• [OPERATOR] Prepend mcm to all work queue metrics (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Subsystems and Namespaces to MCM metrics (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Renamed mcm_machine_deployment_items_total & mcm_machine_set_items_total metrics (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Bugfix: Set deleteOnTermination to true by default for volumes. Disks that are created with the instance are deleted with instance termination. (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Bugfix: Set deleteOnTermination to true by default for volumes. Disks that are created with the instance are deleted with instance termination. (gardener/machine-controller-manager#408, @hardikdr)

Improvements

• [USER] Azure: Support for accelerated networking enabled VMs (gardener/machine-controller-manager#438, @dkistner)
• [OPERATOR] Azure: VMs now can be created with image ID. (gardener/machine-controller-manager#436, @vpnachev)
• [OPERATOR] Improves the machine-creation and machine-deletion flow by listing and verifying the state of the machines before actual creation and deletion. (gardener/machine-controller-manager#432, @hardikdr)
• [OPERATOR] MCM now dynamically maps the node-objects with machines if Status.Node is not set. (gardener/machine-controller-manager#432, @hardikdr)
• [OPERATOR] Sort active machines by creation timestamp (gardener/machine-controller-manager#429, @prashanth26)
• [OPERATOR] Openstack: When a Server creation ERRORs, provide formatted Fault information (gardener/machine-controller-manager#427, @zuzzas)
• [OPERATOR] Set deleteOnTermination flag to true while deleting the VMs in AWS. (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Skip eviction during drain if ForceDeletePods is enabled. (gardener/machine-controller-manager#416, @amshuman-kr)
• [OPERATOR] Openstack: Print API request/response debug when verbosity is set to 6 (gardener/machine-controller-manager#412, @kayrus)
• [OPERATOR] Azure: VM deletion checks any orphan dependant resources and tries to delete them if exists. (gardener/machine-controller-manager#406, @dkistner)
• [OPERATOR] Set deleteOnTermination flag to true while deleting the VMs in AWS. (gardener/machine-controller-manager#409, @prashanth26)
• [DEVELOPER] Azure: Update of the Azure SDK to use more recent version (gardener/machine-controller-manager#406, @dkistner)

[terraformer]

Improvements

• [OPERATOR] Update Terraform azurerm provider to support Azure NatGateway. (gardener/terraformer#35, @dkistner)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.4.0
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.4.0

v1.3.0

[gardener-extension-provider-openstack]

Improvements

• [OPERATOR] Aligning MCM metrics scraper for MCM 0.26.1 version (#29, @prashanth26)
• [OPERATOR] Added support for custom root disk size (originally contributed by @afritzler via gardener/gardener-extensions#567). (14b7fd5)
• [OPERATOR] added integration tests for health checks for all extensions (originally contributed by @danielfoehrKn via gardener/gardener-extensions#563). (14b7fd5)

[machine-controller-manager]

Most notable changes

• [USER] Updated dependecies to refer k8s 1.16.0 (gardener/machine-controller-manager#401, @prashanth26)
• [OPERATOR] Prepend mcm to all work queue metrics (gardener/machine-controller-manager#405, @prashanth26)
• [OPERATOR] Subsystems and Namespaces to MCM metrics (gardener/machine-controller-manager#405, @prashanth26)
• [OPERATOR] Renamed mcm_machine_deployment_items_total & mcm_machine_set_items_total metrics (gardener/machine-controller-manager#405, @prashanth26)
• [OPERATOR] Promethus worker metrics have aligned with k8s version 1.16 (gardener/machine-controller-manager#401, @prashanth26)
• [OPERATOR] Healthz endpoint is immediately initialized with a healty (200) response (gardener/machine-controller-manager#375, @zuzzas)

Improvements

• [USER] Azure machines can now be deployed with an attached user assigned managed identity. (gardener/machine-controller-manager#395, @dkistner)
• [USER] Allows specifying multiple networks for a VM via the new OpenstackMachineClassSpec "networks" field (gardener/machine-controller-manager#376, @zuzzas)
• [OPERATOR] Stops reconciling machine objects that no longer exists (gardener/machine-controller-manager#403, @ggaurav10)
• [OPERATOR] Bugfix: Fixes race between machine & machineSet creation/deletion operations (gardener/machine-controller-manager#391, @prashanth26)
• [OPERATOR] Added Cinder based root disk support with customisable disk size (gardener/machine-controller-manager#388, @afritzler)
• [OPERATOR] Allow status to be defined when replicas is not defined or equal to 0. (gardener/machine-controller-manager#387, @rewiko)
  • category: improvement
  • target_group: user
• [OPERATOR] Added support for OpenStack machine image id. (gardener/machine-controller-manager#374, @afritzler)
• [OPERATOR] Avoided force-deleting the machine if previous drain has failed. (gardener/machine-controller-manager#373, @hardikdr)
• [OPERATOR] Drain logic now attempts to evict the pod till drain-timeout has occurred. The interval between consecutive attempts to evict the pod has been increased to 20s. (gardener/machine-controller-manager#370, @hardikdr)
• [OPERATOR] github.com/Azure/azure-sdk-for-go is updated to v32.6.0. (gardener/machine-controller-manager#369, @ialidzhikov)
• [OPERATOR] bootstrap token generation is handled at MCM (gardener/machine-controller-manager#351, @vlvasilev)
• [DEVELOPER] Fixed license header (gardener/machine-controller-manager#385, @afritzler)

[terraformer]

Most notable changes

• [DEVELOPER] The Google provider plugins have been upgraded to v3.4.0. (gardener/terraformer#33, @DockToFuture)

Improvements

• [DEVELOPER] add random provider (gardener/terraformer#34, @MartinWeindel)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.3.0