v1.38.2

[gardener/gardener-extension-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Fix a crash, when a shoot that is updated has an empty overlay config. by @axel7born [#695]

Docker Images

gardener-extension-admission-openstack: eu.gcr.io/gardener-project/gardener/extensions/admission-openstack:v1.38.2
gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.38.2

v1.38.1

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Removes node.machine.sapcloud.io/not-managed-by-mcm annotation from nodes managed by the MCM. by @himanshu-kun [gardener/machine-controller-manager#866]

🏃 Others

• [OPERATOR] The default machine-safety-orphan-vms-period has been reduced from 30m to 15m. by @himanshu-kun [gardener/machine-controller-manager#866]

Docker Images

gardener-extension-admission-openstack: eu.gcr.io/gardener-project/gardener/extensions/admission-openstack:v1.38.1
gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.38.1

v1.38.0

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [USER] The zonal manila storage classes are now deprecated and will be removed in a future version. by @kon-angelo [#689]

📰 Noteworthy

• [DEVELOPER] Remove dependency to specific calico and cilium versions. by @axel7born [#677]

✨ New Features

• [USER] provider-openstack extension now supports Shoot Force Deletion. by @ary1992 [#681]
• [USER] Add manila auto-topology storage class by @kon-angelo [#689]
• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.28. You should consider the Kubernetes release notes before upgrading to 1.28. by @oliver-goetz [#679]

🏃 Others

• [OPERATOR] The following golang dependencies have been upgraded :
  • gardener/gardener to v1.80.3
  • k8s.io/* to v0.27.5
  • sigs.k8s.io/controller-runtime to v0.16.2 by @ary1992 [#667]
• [OPERATOR] Use NFS version v4.1 as mount options for manila storage classes by @kon-angelo [#688]
• [OPERATOR] Update external-snapshotter to v6.3.1 by @bd3lage [#682]
• [OPERATOR] Add tcp healthcheck to csi-snapshot-validation-webhook by @kon-angelo [#686]
• [USER] Allow configuration of etcd storage class reclaimPolicy by @elenz97 [#678]

Docker Images

gardener-extension-admission-openstack: eu.gcr.io/gardener-project/gardener/extensions/admission-openstack:v1.38.0
gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.38.0

v1.37.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Update external-snapshotter to v6.3.1 by @kon-angelo [#683]

Docker Images

gardener-extension-admission-openstack: eu.gcr.io/gardener-project/gardener/extensions/admission-openstack:v1.37.1
gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.37.1

v1.37.0

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Included UnavailableReplicas in determining if a machine deployment status update is needed by @rishabh-11 [gardener/machine-controller-manager#833]
• [OPERATOR] Force drain and delete volume attachments for nodes un-healthy due to ReadOnlyFileSystem and NotReady for too long by @elankath [gardener/machine-controller-manager#839]
• [OPERATOR] An issue causing nil pointer panic on scaleup of the machinedeployment along with trigger of rolling update, is fixed by @acumino [gardener/machine-controller-manager#814]
• [USER] An edge case where outdated DesiredReplicas annotation blocked a rolling update is fixed. by @rishabh-11 [gardener/machine-controller-manager#821]

🏃 Others

• [DEVELOPER] status.Status now captures underline cause, allowing consumers to introspect the error returned by the provider. WrapError() function could be used to wrap the provider error by @unmarshall [gardener/machine-controller-manager#842]
• [DEVELOPER] Removed dead metrics code and refactored the remaining metrics code by @himanshu-kun [gardener/machine-controller-manager#823]
• [DEVELOPER] A new make target is introduced to add license headers. by @unmarshall [gardener/machine-controller-manager#845]
• [DEVELOPER] Bump k8s.io/* deps to v0.27.2 by @afritzler [gardener/machine-controller-manager#820]
• [OPERATOR] Added a new metric that will allow to get the number of stale (due to unhealthiness) machines that are getting terminated by @jguipi [gardener/machine-controller-manager#808]
• [OPERATOR] Updated to go v1.20.5 by @rishabh-11 [gardener/machine-controller-manager#827]
• [OPERATOR] Makefile targets have changed: Introduced gardener-setup, gardener-restore, gardener-local-mcm-up, non-gardener-setup, non-gardener-restore, non-gardener-local-mcm-up. Users can also directly use the scripts which are used by these makefile targets. by @unmarshall [gardener/machine-controller-manager#852]
• [OPERATOR] Added errorCode field in the LastOperation struct. This should be implemented only for the CreateMachine call in the triggerCreationFlow. This field will be utilized by Cluster autoscaler to do early backoff by @rishabh-11 [gardener/machine-controller-manager#851]
• [OPERATOR] New metrics introduced:
  • api_request_duration_seconds -> tracks time taken for successful invocation of provider APIs. This metric can be filtered by provider and service.
  • driver_request_duration_seconds -> tracks total time taken to successfully complete driver method invocation. This metric can be filtered by provider and operation.
  • driver_requests_failed_total -> records total number of failed driver API requests. This metric can be filtered by provider, operations and error_code. by @unmarshall [gardener/machine-controller-manager#842]

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] provider-openstack no longer supports Shoots or Seeds with Кubernetes version < 1.24. by @shafeeqes [#670]

🏃 Others

• [OPERATOR] Enable propagating pod routes to nodes without overlay network by @ScheererJ [#654]
• [OPERATOR] updated image csi-attacher -> v4.4.0 by @kon-angelo [#675]
• [OPERATOR] updated image manila-csi-plugin v1.27.1-> v1.27.2 by @kon-angelo [#675]
• [OPERATOR] updated image snapshot-controller -> v6.3.0 by @kon-angelo [#675]
• [OPERATOR] updated image livenessprobe -> v2.11.0 by @kon-angelo [#675]
• [OPERATOR] Add manila topology labels to machines. This enables scaling from 0 for pods depending on manila volumes. by @kon-angelo [#674]
• [OPERATOR] updated image cinder-csi-plugin v1.27.1-> v1.27.2 by @kon-angelo [#675]
• [OPERATOR] updated image cloud-provider-openstack v1.27.1-> v1.27.2 by @kon-angelo [#675]
• [OPERATOR] updated image csi-provisioner -> v3.6.0 by @kon-angelo [#675]
• [OPERATOR] updated image csi-resizer -> v1.9.0 by @kon-angelo [#675]
• [DEVELOPER] Added description to openstack security group rules. by @nschad [#666]

[gardener/machine-controller-manager-provider-openstack]

🏃 Others

• [USER] Vendor gardener v1.79.0 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#100]
• [USER] ResourceExhausted error code is returned when no valid host is found in the zone by @rishabh-11 [gardener/machine-controller-manager-provider-openstack#97]
• [DEPENDENCY] The following dependency is updated:-
  github.com/gardener/machine-controller-manager v0.49.1 -> v0.50.0 by @rishabh-11 [gardener/machine-controller-manager-provider-openstack#98]

v1.36.0

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Included UnavailableReplicas in determining if a machine deployment status update is needed by @ialidzhikov [gardener/machine-controller-manager#834]

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] provider-openstack no longer supports Seeds or Shoots with Кubernetes version < 1.22. by @shafeeqes [#648]
• [OPERATOR] The security.gardener.cloud/pod-security-enforce annotation in the ControllerRegistration is set to baseline. With this, the pods running in the extension namespace should comply with baseline pod-security standard. by @shafeeqes [#653]

✨ New Features

• [OPERATOR] Flow-based infrastructure reconciliation without Terraformer by @MartinWeindel [#528]
• [OPERATOR] The gardener-extension-admission-openstack chart allows to optionally configure a projected volume based kubeconfig. by @timuthy [#660]
• [DEVELOPER] This extension is now compatible with the MachineControllerManagerDeployment feature gate of gardenlet. by @rfranzke [#645]

🐛 Bug Fixes

• [OPERATOR] Fix rendering of CSI manila storageclass if creating infrastructure fails. by @MartinWeindel [#652]

🏃 Others

• [OPERATOR] Provider-extension will attempt to delete all kubernetes loadbalancers that were not cleaned up by the CCM on infrastructure deletion. by @kon-angelo [#656]
• [OPERATOR] machineDeployment will have the label topology.cinder.csi.openstack.org/zone when created. by @elankath [#659]
• [OPERATOR] Remove limits from critical control plane components. by @kon-angelo [#657]
• [DEVELOPER] All code related to the removed APIServerSNI feature gate of gardenlet has been removed from this extension. by @rfranzke [#644]

[gardener/terraformer]

🏃 Others

• [OPERATOR] Golang has been updated to v1.20.5 by @kon-angelo [gardener/terraformer#138]
• [OPERATOR] Alpine has been updated to v1.18.2 by @kon-angelo [gardener/terraformer#138]

v1.35.1

[machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Included UnavailableReplicas in determining if a machine deployment status update is needed (gardener/machine-controller-manager#834, @ialidzhikov)

v1.35.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] With #297 provider-openstack migrated the volumesnapshot CRDs to a new dedicated ManagedResources. provider-openstack does now remove the ignored CRDs. (gardener/gardener-extension-provider-openstack#635, @ialidzhikov)
  • Before updating to this version of provider-openstack, make sure that the migration of the volumesnapshot CRDs from the extension-controlplane-shoot to the extension-controlplane-shoot-crds ManagedResource completed. If the migration did not complete yet, GRM will interpret the removal of the CRDs as deletion and will delete the CRDs.

✨ New Features

• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.27. You should consider the Kubernetes release notes before upgrading to 1.27. (gardener/gardener-extension-provider-openstack#632, @ary1992)

🏃 Others

• [OPERATOR] Update cloud-provider-openstack images v1.25.5 -> v1.25.6 (gardener/gardener-extension-provider-openstack#642, @kon-angelo)
• [OPERATOR] Update cloud-provider-openstack images v1.26.2 -> v1.26.3 (gardener/gardener-extension-provider-openstack#642, @kon-angelo)
• [OPERATOR] Old and obsolete logging configurations are removed. (gardener/gardener-extension-provider-openstack#639, @vlvasilev)
• [DEPENDENCY] The following dependencies were updated: (gardener/gardener-extension-provider-openstack#640, @dimityrmirchev)
  • registry.k8s.io/sig-storage/csi-provisioner v3.4.0 -> v3.4.1

v1.34.0

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [USER] Allow changing share network section in InfrastructureConfig for existing cluster. (gardener/gardener-extension-provider-openstack#633, @MartinWeindel)
• [OPERATOR] Add missing network policy labels to extension controller pod template (gardener/gardener-extension-provider-openstack#607, @afritzler)

📖 Documentation

• [DEPENDENCY] The flags which went out-of-support in MCM v0.49.0 have been cleaned up from MCM deployment yaml. (gardener/gardener-extension-provider-openstack#610, @himanshu-kun)

🏃 Others

• [OPERATOR] Add topology awareness support for Manila (gardener/gardener-extension-provider-openstack#613, @kon-angelo)
• [OPERATOR] Add observability configuration for Manila CSI Driver. (gardener/gardener-extension-provider-openstack#614, @kon-angelo)
• [OPERATOR] The admission/validation component is now adapted such that it works well in garden cluster with enabled NetworkPolicy protection (default since gardener/[email protected] when garden cluster is managed by gardener-operator). (gardener/gardener-extension-provider-openstack#620, @rfranzke)
• [OPERATOR] Restrict security group ingress port-range to kubernetes node-port range (gardener/gardener-extension-provider-openstack#621, @tedteng)
• [OPERATOR] add a bastion ingress rule in the worker node security group to establish the ssh connection to fit different networks. (gardener/gardener-extension-provider-openstack#621, @tedteng)
• [OPERATOR] The bastion with try to reserve Floating IPs from the router's external subnet (gardener/gardener-extension-provider-openstack#623, @kon-angelo)
• [OPERATOR] Update golang to v1.20.4 (gardener/gardener-extension-provider-openstack#627, @kon-angelo)
• [DEPENDENCY] The following dependency is updated: (gardener/gardener-extension-provider-openstack#624, @shafeeqes)
  • github.com/gardener/gardener: v1.67.1 -> v1.71.0
  • k8s.io/* : v0.26.2 -> v0.26.3
  • sigs.k8s.io/controller-runtime: v0.14.5-> v0.14.6

[machine-controller-manager]

⚠️ Breaking Changes

• [USER] node field is removed from machine status. controller will now depend on the node label which already was present in the machine object's metadata. If you(or your controller) are dependent on the status.node field of the machine object, then kindly use node label under .metadata.labels (gardener/machine-controller-manager#745, @rishabh-11)
• [OPERATOR] Removal of the following flags (and corresponding fields in associated structs): 'machine-creation-timeout' 'machine-drain-timeout', 'machine-pv-detach-timeout', 'machine-health-timeout=10m', 'machine-safety-apiserver-statuscheck-timeout', 'machine-safety-apiserver-statuscheck-period', 'machine-safety-orphan-vms-period', 'machine-max-evict-retries', 'node-conditions', 'bootstrap-token-auth-extra-groups', 'delete-migrated-machine-class'. The MCM no longer accepts these flags since these are options handled by the Machine Controller invoked by platform specific provider launchers. (gardener/machine-controller-manager#769, @elankath)
• [DEVELOPER] Deletion of 'Driver.GenerateMachineClassForMigration'. Providers need to adapt to this. (gardener/machine-controller-manager#769, @elankath)

✨ New Features

• [USER] Machine object won't turn from Pending to Running state if node.gardener.cloud/critical-components-not-ready taint is there on the corresponding node. (gardener/machine-controller-manager#778, @SimonKienzler)
• [USER] MachineDeployment would now have Progressing condition even when no progress Deadline is specified. This condition would never go to the reason ProgressDeadlineExceeded in that case. (gardener/machine-controller-manager#762, @himanshu-kun)
• [OPERATOR] Using kubectl get machines will display Node of the corresponding machine as a column. If -owide flag is used then the corresponding ProviderID will also be displayed. (gardener/machine-controller-manager#746, @rishabh-11)
• [OPERATOR] Added new short names for machine(mc), machineClass(mcc), machineDeployment(mcd), and machineSet(mcs) resources. (gardener/machine-controller-manager#749, @rishabh-11)

🐛 Bug Fixes

• [USER] An edge case where all the machineSets were scaled down to zero has been dealt with. (gardener/machine-controller-manager#803, @himanshu-kun)
• [USER] Fix a bug in the bootstrap token creation that caused node to not be able to join the cluster due to an expired bootstrap token. (gardener/machine-controller-manager#773, @schrodit)
• [USER] Fix a bug in the bootstrap token creation that caused node to not be able to join the cluster due to an expired bootstrap token. (gardener/machine-controller-manager#777, @himanshu-kun)
• [USER] An edge case where all the machineSets were scaled down to zero has been dealt with. (gardener/machine-controller-manager#804, @himanshu-kun)
• [USER] An edge case where outdated DesiredReplicas annotation blocked a rolling update is fixed. (gardener/machine-controller-manager#822, @rishabh-11)
• [OPERATOR] An issue causing nil pointer panic on scaleup of the machinedeployment along with trigger of rolling update, is fixed (gardener/machine-controller-manager#817, @himanshu-kun)

📖 Documentation

• [DEVELOPER] Added proposal for hot-update of resources (instance/Nic/Disk) (gardener/machine-controller-manager#761, @himanshu-kun)

🏃 Others

• [USER] Updated golang version to v1.19.2 (gardener/machine-controller-manager#753, @rishabh-11)
• [USER] If during a rolling update scale-up is done, MCM scales up only the new machineSet, while in case of scale-down the scale-down amount is split among old machineSets, in proportion to their sizes. (gardener/machine-controller-manager#765, @himanshu-kun)
• [OPERATOR] CrashloopBackoff machines will turn to Running quicker (gardener/machine-controller-manager#806, @rishabh-11)
• [OPERATOR] CVE categorization for MCM has been added. (gardener/machine-controller-manager#791, @dkistner)
• [DEVELOPER] The API generation now works again. Previously the API docs was generated to a location that was ignored by git and other API docs file was maintained. (gardener/machine-controller-manager#800, @ialidzhikov)
• [DEVELOPER] Bump k8s.io/* dependencies to v1.26.2 (gardener/machine-controller-manager#792, @afritzler)
• [DEVELOPER] go version updated to 1.19.4 in pipeline and Dockerfile (gardener/machine-controller-manager#766, @himanshu-kun)

[machine-controller-manager-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] Support for migration of machineClass is dropped by the mcm-provider ([gardener/machine-controller-manage...

v1.33.3

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Remove the error code check from NodesChecker to prevent nil pointer panic. (gardener/gardener-extension-provider-openstack#622, @acumino)