v1.33.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [USER] Adapt worker node hash calculation. Shoots that are currently using the server group feature will be rolled out. You can prevent the rollout if the shoot is annotated with openstack.provider.extensions.gardener.cloud/worker-preserve-hash. (gardener/gardener-extension-provider-openstack#602, @kon-angelo)

✨ New Features

• [USER] Optional CSI Manila driver deployment to support NFS persistent volumes out-of-the-box. (gardener/gardener-extension-provider-openstack#572, @MartinWeindel)
• [OPERATOR] csi-driver-node is annotated with the wait-for-csi-node annotation. Gardener uses this to only schedule workload pods to a Node once the driver has been successfully registered with the CSINode object. (gardener/gardener-extension-provider-openstack#583, @SimonKienzler)
• [OPERATOR] The csi-snapshot-validation Service deployed by the provider-openstack extension can now be topology-aware (depending on the Seed setting and the Shoot HA failure tolerance type). For more details, see the Topology-aware Traffic Routing documentation. (gardener/gardener-extension-provider-openstack#589, @ialidzhikov)

🐛 Bug Fixes

• [OPERATOR] The stale healthcheck conditions from the extension are now properly cleaned up. (gardener/gardener-extension-provider-openstack#590, @acumino)
• [OPERATOR] An issue has been fixed which caused undesired PATCH requests when updating the state in the Worker or ShootState resources. (gardener/gardener-extension-provider-openstack#597, @oliver-goetz)
• [OPERATOR] An issue causing provider-openstack to wrongly delete the extensions.gardener.cloud:provider-openstack:csi-snapshot-validation ClusterRole and ClusterRoleBinding from the Seed cluster on every Shoot deletion is now fixed. (gardener/gardener-extension-provider-openstack#603, @ialidzhikov)

🏃 Others

• [OPERATOR] Adapted extension components to support the FullNetworkPoliciesInRuntimeCluster feature gate introduced by gardener/gardener v1.66, see here and #7352 for more information. (gardener/gardener-extension-provider-openstack#578, @timuthy)
• [OPERATOR] Add machine labels to the ProviderConfig of a worker pool to support rolling of its machines on label changes. (gardener/gardener-extension-provider-openstack#579, @MartinWeindel)
• [OPERATOR] Add support for user-provided NodeTemplates (gardener/gardener-extension-provider-openstack#581, @kon-angelo)
• [OPERATOR] Switched images from DockerHub to copies in Gardener GCR (gardener/gardener-extension-provider-openstack#592, @robinschneider)
• [OPERATOR] provider-openstack does no longer use Gardener GCR copies for openstack-cloud-controller-manager and cinder-csi-plugin in versions 1.24, 1.25 and 1.26. Instead, the upstream GCR container images are used (registry.k8s.io/provider-os/openstack-cloud-controller-manager and registry.k8s.io/provider-os/cinder-csi-plugin). (gardener/gardener-extension-provider-openstack#593, @ialidzhikov)
• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#593, @ialidzhikov)
  • registry.k8s.io/provider-os/cinder-csi-plugin: v1.24.5 -> v1.24.6 (for Kubernetes 1.24 Shoots)
  • registry.k8s.io/provider-os/cinder-csi-plugin: v1.25.3 -> v1.25.5 (for Kubernetes 1.25 Shoots)
  • registry.k8s.io/provider-os/cinder-csi-plugin: v1.26.0 -> v1.26.2 (for Kubernetes 1.26 Shoots)
• [OPERATOR] Cloud-controller-manager Loadbalancer configuration has been updated: monitorDelay: 60s -> 20s, monitorMaxRetries: 5 -> 2 (gardener/gardener-extension-provider-openstack#594, @kon-angelo)
• [OPERATOR] The gardener-extension-admission-openstack Service in the gardener-extension-admission-openstack chart can now be configured to be topology-aware. (gardener/gardener-extension-provider-openstack#599, @ialidzhikov)

[machine-controller-manager]

🐛 Bug Fixes

• [USER] An edge case where all the machineSets were scaled down to zero has been dealt with. (gardener/machine-controller-manager#804, @himanshu-kun)

[terraformer]

🏃 Others

• [OPERATOR] Update TF_VERSION 0.15.5 -> 1.3.9 and update how the local providers are fetched and stored to be compatible with the latest TF specification. (gardener/terraformer#133, @kon-angelo)

v1.32.2

[machine-controller-manager]

🐛 Bug Fixes

• [USER] An edge case where all the machineSets were scaled down to zero has been dealt with. (gardener/machine-controller-manager#804, @himanshu-kun)

v1.32.1

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] The stale healthcheck conditions from the extension are now properly cleaned up. (gardener/gardener-extension-provider-openstack#591, @acumino)

v1.32.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] provider-openstack no longer supports Shoots with Кubernetes version < 1.20. (gardener/gardener-extension-provider-openstack#541, @dimitar-kostadinov)
• [OPERATOR] The provider extension will not skip certificate verification by default. You can enable the old behavior by setting KeyStoneForceInsecure to true (per CloudProfile). (gardener/gardener-extension-provider-openstack#563, @kon-angelo)

✨ New Features

• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.26. You should consider the Kubernetes release notes before upgrading to 1.26. (gardener/gardener-extension-provider-openstack#551, @ialidzhikov)
• [USER] csi-driver-node is marked as a node-critical component. With this, workload pods are only scheduled to a Node if it runs a ready csi-driver-node pod. (gardener/gardener-extension-provider-openstack#562, @dergeberl)
• [OPERATOR] Allow specifying CA certificates for KeyStone api in Cloudprofile. (gardener/gardener-extension-provider-openstack#563, @kon-angelo)

🐛 Bug Fixes

• [USER] A bug has been fixed that caused the snapshot.storage.k8s.io CRDs in shoot clusters to flap between two different versions. (gardener/gardener-extension-provider-openstack#566, @timebertt)

🏃 Others

• [OPERATOR] The overlay network is now globally enabled for all calico and cilium shoot clusters on openstack. (gardener/gardener-extension-provider-openstack#517, @DockToFuture)
  • In case the overlay network is disabled all network traffic to the upstream dns server is now masqueraded for calico and cilium shoot clusters without overlay.
• [OPERATOR] Provider-specific error codes are now detected/parsed on provider-extension side. (gardener/gardener-extension-provider-openstack#534, @acumino)
• [OPERATOR] Update golang to 1.19.5 (gardener/gardener-extension-provider-openstack#545, @dkistner)
• [OPERATOR] The following dependencies ares updated: (gardener/gardener-extension-provider-openstack#548, @ialidzhikov)
  • github.com/gardener/gardener: v1.59.0 -> v1.62.0
  • github.com/gophercloud/gophercloud: v0.7.0 -> v1.1.1
• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#551, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.24.3 ->v1.24.5 (for Kubernetes 1.24)
• [OPERATOR] New fluent operator resources are introduced: ClusterFilter (gardener/gardener-extension-provider-openstack#552, @Kristian-ZH)
• [OPERATOR] Update CSI dependencies to latest releases (gardener/gardener-extension-provider-openstack#557, @MartinWeindel)
• [OPERATOR] Removed minAllowed.cpu from all VPA objects (gardener/gardener-extension-provider-openstack#576, @voelzmo)
• [OPERATOR] Update cloud-controller-image v1.24.5 -> v1.24.6 (gardener/gardener-extension-provider-openstack#582, @kon-angelo)
• [OPERATOR] Update cloud-controller-image v1.25.3 -> v1.25.5 (gardener/gardener-extension-provider-openstack#582, @kon-angelo)
• [OPERATOR] Update cloud-controller-image v1.26.0 -> v1.26.2 (gardener/gardener-extension-provider-openstack#582, @kon-angelo)
• [DEPENDENCY] The following dependency is updated: (gardener/gardener-extension-provider-openstack#564, @shafeeqes)
  • github.com/gardener/gardener: v1.62.0 -> v1.65.0
  • k8s.io/* : v0.25.2 -> v0.26.1
  • sigs.k8s.io/controller-runtime: v0.13.0-> v0.14.4

[machine-controller-manager]

⚠️ Breaking Changes

• [USER] node field is removed from machine status. controller will now depend on the node label which already was present in the machine object's metadata. If you(or your controller) are dependent on the status.node field of the machine object, then kindly use node label under .metadata.labels (gardener/machine-controller-manager#745, @rishabh-11)

✨ New Features

• [USER] MachineDeployment would now have Progressing condition even when no progress Deadline is specified. This condition would never go to the reason ProgressDeadlineExceeded in that case. (gardener/machine-controller-manager#762, @himanshu-kun)
• [OPERATOR] Added new short names for machine(mc), machineClass(mcc), machineDeployment(mcd), and machineSet(mcs) resources. (gardener/machine-controller-manager#749, @rishabh-11)
• [OPERATOR] Using kubectl get machines will display Node of the corresponding machine as a column. If -owide flag is used then the corresponding ProviderID will also be displayed. (gardener/machine-controller-manager#746, @rishabh-11)

🐛 Bug Fixes

• [USER] Fix a bug in the bootstrap token creation that caused node to not be able to join the cluster due to an expired bootstrap token. (gardener/machine-controller-manager#777, @himanshu-kun)

🏃 Others

• [USER] Updated golang version to v1.19.2 (gardener/machine-controller-manager#753, @rishabh-11)
• [USER] If during a rolling update scale-up is done, MCM scales up only the new machineSet, while in case of scale-down the scale-down amount is split among old machineSets, in proportion to their sizes. (gardener/machine-controller-manager#765, @himanshu-kun)
• [DEVELOPER] go version updated to 1.19.4 in pipeline and Dockerfile (gardener/machine-controller-manager#766, @himanshu-kun)

[terraformer]

🏃 Others

• [OPERATOR] Terrafomer base image has been updated to alpine:3.17.2 (gardener/terraformer#131, @dkistner)
• [OPERATOR] CVE categorization for Terraformer oci images has been added. (gardener/terraformer#134, @dkistner)
• [OPERATOR] The golang base image is now updated to 1.16.15. The alpine base image is updated to 3.16.2. (gardener/terraformer#124, @kon-angelo)

v1.31.4

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Disable overlay webhook to prevent issues with overloading Neutron API with route requests. (gardener/gardener-extension-provider-openstack#571, @kon-angelo)

v1.31.3

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] The openstack validator will switch back to not using overlay as a default for shoots that do not specify any networking configuration. (gardener/gardener-extension-provider-openstack#568, @kon-angelo)

v1.31.2

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [USER] A bug has been fixed that caused the snapshot.storage.k8s.io CRDs in shoot clusters to flap between two different versions. (gardener/gardener-extension-provider-openstack#567, @kon-angelo)

v1.31.1

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] The overlay network is now globally enabled for all calico and cilium shoot clusters on openstack. (gardener/gardener-extension-provider-openstack#558, @DockToFuture)
  • In case the overlay network is disabled all network traffic to the upstream dns server is now masqueraded for calico and cilium shoot clusters without overlay.

v1.31.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [USER] Update external-snapshotter to v6.1.0. VolumeSnapshot v1beta1 APIs are no longer served. Please update to VolumeSnapshot v1 APIs as soon as possible. (gardener/gardener-extension-provider-openstack#531, @MartinWeindel)

✨ New Features

• [USER] This release adds HA support for OpenStack's control-plane components when extension is deployed along with Gardener >= v1.60. Please see this document for more information about HA settings in shoot clusters. (gardener/gardener-extension-provider-openstack#515, @timuthy)
• [OPERATOR] Extension and control-plane components have been adjusted to the high availability configuration supported by Gardener as of release v1.60. See this document for more information about HA in gardener. (gardener/gardener-extension-provider-openstack#515, @timuthy)
• [OPERATOR] StorageClasses can now be set via cloudprofile to support e.g. multiple volume-types. (gardener/gardener-extension-provider-openstack#408, @rgroemmer)
• [DEVELOPER] Expose Router IP address to RouterStatus.IP (gardener/gardener-extension-provider-openstack#520, @breuerfelix)

🐛 Bug Fixes

• [USER] An issue causing admission-openstack to fail CREATE/UPDATE requests for Shoots from the core.gardener.cloud/v1alpha1 API is now fixed. (gardener/gardener-extension-provider-openstack#518, @ialidzhikov)
• [OPERATOR] An incorrect container name in the machine-controller-manager Deployment caused the container not beeing controlled by the vpa. (gardener/gardener-extension-provider-openstack#550, @nschad)

🏃 Others

• [OPERATOR] All infrastructure routes within the workers node range are deleted during the deletion process. This lets the deletion still succeed when the cloud controller manager is not there anymore. (gardener/gardener-extension-provider-openstack#514, @DockToFuture)
• [OPERATOR] Remove deprecated images (gardener/gardener-extension-provider-openstack#519, @kon-angelo)
• [OPERATOR] Disable configuring cloud routes when overlay network is used. (gardener/gardener-extension-provider-openstack#521, @kon-angelo)
• [OPERATOR] Mutating webhook respects shoot deletion, restore and migration. Before those operations failed under certain conditions. (gardener/gardener-extension-provider-openstack#524, @DockToFuture)
• [OPERATOR] Update calico version to v1.27.1. (gardener/gardener-extension-provider-openstack#529, @DockToFuture)
• [OPERATOR] Image for csi-attacher has been updated from v3.5.0 to v4.0.0. (gardener/gardener-extension-provider-openstack#531, @MartinWeindel)
  • Minor updates of images for csi-driver-cinder, cloud-controller-manager, csi-resizer, csi-liveness-probe, csi-node-driver-registrar.
• [OPERATOR] Fix a nil pointer exception in the route deletion method when shoots are using the deprecated Worker field. (gardener/gardener-extension-provider-openstack#532, @kon-angelo)
• [OPERATOR] Skip router update requests to remove routes if no change is necessary. (gardener/gardener-extension-provider-openstack#536, @kon-angelo)
• [OPERATOR] Reduce noise in csi-driver-node logs (gardener/gardener-extension-provider-openstack#538, @MartinWeindel)
• [OPERATOR] Skip network mutation when shoot specs are equal. (gardener/gardener-extension-provider-openstack#543, @DockToFuture)

v1.30.3

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix a nil pointer exception in the route deletion method when shoots are using the deprecated Worker field. (gardener/gardener-extension-provider-openstack#533, @kon-angelo)