v1.28.0

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] The following dependencies are updated: (gardener/gardener-extension-provider-openstack#482, @dkistner)
  • github.com/gardener/gardener: v1.48.0 -> v1.50.1

v1.27.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] This version of provider-openstack requires Gardener v1.50.0. (gardener/gardener-extension-provider-openstack#463, @ialidzhikov)
• [OPERATOR] This version of provider-openstack requires Gardener v1.50+. (gardener/gardener-extension-provider-openstack#468, @kris94)

🐛 Bug Fixes

• [USER] An issue preventing ControlPlane resource to be successfully reconciled for K8s 1.24 Shoots is now fixed. (gardener/gardener-extension-provider-openstack#459, @ialidzhikov)
• [USER] The following image is updated: (gardener/gardener-extension-provider-openstack#462, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.24.1 -> v1.24.2
• [USER] The following image is updated: (gardener/gardener-extension-provider-openstack#466, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.23.1 -> v1.23.2
• [OPERATOR] provider-openstack now mutates the cluster-autoscaler Deployment by implementing the EnsureClusterAutoscalerDeployment function. This is required in the context of kubernetes/autoscaler#4517 - cluster-autoscaler supports --feature-gates flag and provider extensions have to mutate the cluster-autoscaler Deployment to add the CSI related feature gates to it. (gardener/gardener-extension-provider-openstack#463, @ialidzhikov)
• [OPERATOR] Use openstack cloud-controller-manager v1.22.0 for Shoots with target k8s version v1.23.x. ref (gardener/gardener-extension-provider-openstack#469, @dkistner)

🏃 Others

• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#480, @ialidzhikov)
  • docker.io/k8scloudprovider/cinder-csi-plugin: v1.23.0 -> v1.23.4 (for Kubernetes 1.23 Shoots)
• [OPERATOR] Handle extensionsv1alpha1.Bastion resources for SSH access to worker instances (gardener/gardener-extension-provider-openstack#365, @tedteng)
• [OPERATOR] The extension now uses distroless instead of alpine as a base image. (gardener/gardener-extension-provider-openstack#465, @dimityrmirchev)
• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#471, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.22.0 -> v1.23.3 (for Kubernetes 1.23 Shoots)
• [OPERATOR] Update Go version used to v1.18 (gardener/gardener-extension-provider-openstack#473, @kon-angelo)
• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#476, @ialidzhikov)
  • docker.io/k8scloudprovider/cinder-csi-plugin: v1.20.0 -> v1.20.3 (for Kubernetes 1.20 Shoots)
  • docker.io/k8scloudprovider/cinder-csi-plugin: v1.24.0 -> v1.24.2 (for Kubernetes 1.24 Shoots)

[machine-controller-manager]

⚠️ Breaking Changes

• [OPERATOR] The default leader election resource lock of machine-controller-manager has been changed from endpointsleases to leases. (gardener/machine-controller-manager#711, @acumino)
  • Please make sure, that you had at least [email protected] running before upgrading to v0.46.0, so that it has successfully acquired leadership with the hybrid resource lock (endpointsleases) at least once.

🐛 Bug Fixes

• [USER] Rollout freeze won't happen due to Unknown machines now. (gardener/machine-controller-manager#733, @himanshu-kun)

🏃 Others

• [OPERATOR] Published docker images for Machine-Controller-Manager are now multi-arch ready. They support linux/amd64 and linux/arm64. (gardener/machine-controller-manager#732, @timuthy)
• [OPERATOR] The machine-controller-manager container now uses distroless instead of alpine as a base image. (gardener/machine-controller-manager#734, @dimityrmirchev)

[machine-controller-manager-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Fixed missing volume status VolumeStatusDownloading when creating volume (gardener/machine-controller-manager-provider-openstack#61, @namsral)

🏃 Others

• [USER] Update Go version to v1.18 (gardener/machine-controller-manager-provider-openstack#66, @kon-angelo)
• [USER] Fix an issue where automatic revendoring did not assign correct permissions to CI scripts. (gardener/machine-controller-manager-provider-openstack#69, @kon-angelo)
• [USER] Use distroless base image (gardener/machine-controller-manager-provider-openstack#62, @kon-angelo)
• [DEVELOPER] probeResources() now doesn't try to delete orphan resources but only lists them. (gardener/machine-controller-manager-provider-openstack#65, @kon-angelo)
  • The beforeSuite for IT test now calls for cleanup of orphan resources separately.
  • The Integration Test, which looks for orphan resources, now doesn't try to delete the orphan resources and just waits for them to be done automatically.

[terraformer]

🏃 Others

• [OPERATOR] Terraform google provider is updated to v4.19.0 (gardener/terraformer#119, @bd3lage)

v1.26.3

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#472, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.22.0 -> v1.23.3 (for Kubernetes 1.23 Shoots)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.24.1 -> v1.24.2 (for Kubernetes 1.24 Shoots)

v1.26.2

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Use openstack cloud-controller-manager v1.22.0 for Shoots with target k8s version v1.23.x. ref (gardener/gardener-extension-provider-openstack#470, @dkistner)

v1.26.1

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [USER] An issue preventing ControlPlane resource to be successfully reconciled for K8s 1.24 Shoots is now fixed. (gardener/gardener-extension-provider-openstack#460, @ialidzhikov)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.26.1
gardener-extension-admission-openstack: eu.gcr.io/gardener-project/gardener/extensions/admission-openstack:v1.26.1

v1.26.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] This version of admission-openstack requires the SecretBinding provider controller to be enabled - enabled by default for gardener-controller-manager >= 1.42 or can be enabled via the gardener-controller-manager component config. (gardener/gardener-extension-provider-openstack#452, @ialidzhikov)
• [OPERATOR] This extension is only compatible with Gardener versions >= v1.37. (gardener/gardener-extension-provider-openstack#443, @rfranzke)

✨ New Features

• [USER] The OpenStack extension does now support shoot clusters with Kubernetes version 1.24. You should consider the Kubernetes release notes before upgrading to 1.24. (gardener/gardener-extension-provider-openstack#453, @acumino)
• [OPERATOR] The extension does now automatically rotate its webhook CA and server certificates each 30d. (gardener/gardener-extension-provider-openstack#451, @rfranzke)
• [OPERATOR] This extension is prepared to support the Shoot ServiceAccount signing key rotation feature (see documentation). (gardener/gardener-extension-provider-openstack#451, @rfranzke)
• [OPERATOR] This extension is prepared to support the Shoot CA rotation feature (GEP-18). (gardener/gardener-extension-provider-openstack#443, @rfranzke)

🐛 Bug Fixes

• [OPERATOR] Fixes missing quotes in the generated cloud-provider-config file (gardener/gardener-extension-provider-openstack#440, @breuerfelix)

📖 Documentation

• [USER] add link to K8s v1.23 conformance tests (gardener/gardener-extension-provider-openstack#436, @hendrikKahl)
• [DEPENDENCY] Paths transformations in .docforge/manifest.yaml for simplification (gardener/gardener-extension-provider-openstack#412, @Kostov6)

🏃 Others

• [USER] The dashboards: Cloud Controller Manager and CSI Driver are removed from Grafana (gardener/gardener-extension-provider-openstack#434, @Kristian-ZH)
• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#453, @acumino)
  • k8scloudprovider/openstack-cloud-controller-manager: 1.23.1 -> 1.24.0(For shoots using Kubernetes version 1.24)
  • docker.io/k8scloudprovider/cinder-csi-plugin: 1.23.0 -> 1.24.0(For shoots using Kubernetes version 1.24)
• [OPERATOR] The Secrets webhook of admission-openstack: (gardener/gardener-extension-provider-openstack#452, @ialidzhikov)
  • no longer intercepts every Secret UPDATE request but only requests for Secrets that are associated with a SecretBinding with provider.type=openstack.
  • no longer needs to list Shoots (hence, no cache for Shoots)
• [OPERATOR] The admission-openstack component introduces a new SecretBinding validator. It validates requests for SecretBindings and checks whether the SecretBinding refers to a valid OpenStack Secret. (gardener/gardener-extension-provider-openstack#452, @ialidzhikov)
• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#446, @kon-angelo)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.23.0 -> v1.23.1
• [OPERATOR] The resource requests and limits for components (seed and shoot) managed by the provider-openstack extension has been adapted based on a production environment analysis. This is done to avoid OOMKills and cpu throttling situations. Furthermore the vpa minAllowed settings are now aligned with the cpu and memory request of the respective component` (gardener/gardener-extension-provider-openstack#442, @kon-angelo)

[machine-controller-manager]

📖 Documentation

• [USER] upgraded k8s dependecy to v1.22.9 (revendor in providers required to see effects) (gardener/machine-controller-manager#721, @Mkmittal)
• [DEPENDENCY] Paths transformations in .docforge/manifest.yaml for simplification (gardener/machine-controller-manager#689, @Kostov6)

🏃 Others

• [OPERATOR] Base image updated to alpine v3.15.4 and build image to golang 1.17.9. (gardener/machine-controller-manager#713, @himanshu-kun)
• [DEPENDENCY] K8s dependency upgraded to 1.21.12 (gardener/machine-controller-manager#719, @Mkmittal)

[machine-controller-manager-provider-openstack]

🏃 Others

• [USER] Update golang image to v1.17.9 (gardener/machine-controller-manager-provider-openstack#57, @kon-angelo)
  • Update alpine image to v3.15.4
• [DEPENDENCY] Updated machine-controller-manager dependency to v0.45.0 (gardener/machine-controller-manager-provider-openstack#59, @kon-angelo)

[terraformer]

🏃 Others

• [OPERATOR] Update alpine to 3.15.4 (gardener/terraformer#117, @rfranzke)

v1.25.1

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#448, @kon-angelo)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.23.0 -> v1.23.1

v1.25.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] A failing Kubernetes conformance test when ManagedIstio and APIServerSNI feature gates are disabled is now fixed. (gardener/gardener-extension-provider-openstack#425, @dergeberl)

✨ New Features

• [USER] The provider-openstack extension now installs the external-snapshotter's validating webhook server for VolumeSnapshot and VolumeSnapshotContent objects. For more details check the corresponding KEP. (gardener/gardener-extension-provider-openstack#427, @acumino)
• [USER] The following images are updated (see CHANGELOG for more details): (gardener/gardener-extension-provider-openstack#405, @ialidzhikov)
  • k8s.gcr.io/sig-storage/csi-snapshotter: v2.1.5 -> v3.0.3
  • k8s.gcr.io/sig-storage/snapshot-controller: v2.1.5 -> v3.0.3
• [DEVELOPER] provider-openstack and admission-openstack components now support --version flag that prints the component version information and useful metadata. (gardener/gardener-extension-provider-openstack#426, @ialidzhikov)

🐛 Bug Fixes

• [USER] An issue preventing load balancers from being functional for K8s 1.23 clusters has been fixed. (gardener/gardener-extension-provider-openstack#415, @rfranzke)

🏃 Others

• [OPERATOR] The cloudprovider webhook will now use objectSelector to filter secrets when gardener-version >=1.42. (gardener/gardener-extension-provider-openstack#424, @kon-angelo)
• [OPERATOR] Parameters of the etcd StorageClass can now be set (gardener/gardener-extension-provider-openstack#423, @Kumm-Kai)
• [OPERATOR] Vendor gardener/gardener v1.42.3. (gardener/gardener-extension-provider-openstack#419, @kon-angelo)
• [OPERATOR] The monitoring dashboards provided by this extension: (gardener/gardener-extension-provider-openstack#409, @ialidzhikov)
  • are now using UTC by default (instead of the browser time)
  • do no longer auto refresh by default
• [OPERATOR] The gardener-extension-admission-openstack webhook now contains an object selector for provider type label. Please make sure you are running [email protected] or later before enabling this. (gardener/gardener-extension-provider-openstack#407, @shafeeqes)
• [OPERATOR] The terraformer pod deployed as part of shoot control planes is now using auto-rotated ServiceAccount tokens when communicating with the seed cluster. (gardener/gardener-extension-provider-openstack#406, @rfranzke)

[machine-controller-manager]

🐛 Bug Fixes

• [USER] The value for key cluster-autoscaler.kubernetes.io/scale-down-disabled placed by MCM is now true and not True. This typo stopped MCM from disabling CA from scaling down during rolling update. (gardener/machine-controller-manager#685, @himanshu-kun)
• [USER] MCM now marks 1 machine per machineDeployment as Failed at a time in case of healthTimeout. This is introduced to deal with meltdown scenario (gardener/machine-controller-manager#683, @himanshu-kun)
• [USER] typo stopping scaleDown disabling during cluster rollout is fixed (gardener/machine-controller-manager#687, @himanshu-kun)

🏃 Others

• [OPERATOR] machine-controller-manager does now log the Node conditions when it considers Machine as unhealthy (and changes its state to Unknown). (gardener/machine-controller-manager#676, @ialidzhikov)

[machine-controller-manager-provider-openstack]

🐛 Bug Fixes

• [USER] A regression in Machine creation from imageName is now fixed. (gardener/machine-controller-manager-provider-openstack#49, @ialidzhikov)
• [OPERATOR] An issue causing klog's --v flag to be not respected is now fixed. (gardener/machine-controller-manager-provider-openstack#47, @ialidzhikov)

🏃 Others

• [USER] Revendor MCM dependency to v0.44.1 (gardener/machine-controller-manager-provider-openstack#55, @kon-angelo)

[terraformer]

🏃 Others

• [OPERATOR] terraform has been upgraded to 0.15.5 (gardener/terraformer#107, @stoyanr)

v1.24.2

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [USER] An issue preventing load balancers from being functional for K8s 1.23 clusters has been fixed. (gardener/gardener-extension-provider-openstack#417, @ialidzhikov)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.24.2
gardener-extension-admission-openstack: eu.gcr.io/gardener-project/gardener/extensions/admission-openstack:v1.24.2

v1.24.1

[machine-controller-manager]

🐛 Bug Fixes

• [USER] typo stopping scaleDown disabling during cluster rollout is fixed (gardener/machine-controller-manager#687, @himanshu-kun)