v1.30.2

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [USER] An issue causing admission-openstack to fail CREATE/UPDATE requests for Shoots from the core.gardener.cloud/v1alpha1 API is now fixed. (gardener/gardener-extension-provider-openstack#525, @kon-angelo)

🏃 Others

• [OPERATOR] Mutating webhook respects shoot deletion, restore and migration. Before those operations failed under certain conditions. (gardener/gardener-extension-provider-openstack#526, @DockToFuture)
• [OPERATOR] All infrastructure routes within the workers node range are deleted during the deletion process. This lets the deletion still succeed when the cloud controller manager is not there anymore. (gardener/gardener-extension-provider-openstack#527, @DockToFuture)

v1.30.1

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Disable configuring cloud routes when overlay network is used. (gardener/gardener-extension-provider-openstack#522, @kon-angelo)

v1.30.0

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Adds a heartbeat controller that creates and renews a Lease resource named gardener-extension-heartbeat in the namespace where the extension controller is deployed. This Lease resource can be used by other controllers to check if the provider-openstack extension controller is running. (gardener/gardener-extension-provider-openstack#512, @AleksandarSavchev)
• [OPERATOR] Overlay networks for newly created calico shoot clusters are dropped now by default. To keep the overlay network networking.providerConfig.overlay.enabled: true needs to be set explicitly in the shoot spec. (gardener/gardener-extension-provider-openstack#504, @DockToFuture)
• [OPERATOR] scheduler.alpha.kubernetes.io/critical-pod annotation is removed as pod priority (spec.priorityClassName) is used instead to mark pods as critical (gardener/gardener-extension-provider-openstack#510, @dimitar-kostadinov)
• [OPERATOR] Allow adding the Labels of a worker pool to the corresponding OpenStack Instance. (gardener/gardener-extension-provider-openstack#511, @kon-angelo)
• [DEPENDENCY] Dependency github.com/gardener/gardener is updated v1.56.0 -> v1.59.0. (gardener/gardener-extension-provider-openstack#512, @AleksandarSavchev)

[machine-controller-manager-provider-openstack]

🏃 Others

• [USER] Updated golang version to 1.19 (gardener/machine-controller-manager-provider-openstack#73, @rishabh-11)

v1.29.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] This version of provider-openstack requires Gardener v1.51+. (gardener/gardener-extension-provider-openstack#467, @istvanballok)
• [OPERATOR] Please make sure you're running [email protected] or above before upgrading to this version. (gardener/gardener-extension-provider-openstack#485, @shafeeqes)
• [OPERATOR] provider-openstack no longer supports Shoots with Кubernetes version < 1.17. (gardener/gardener-extension-provider-openstack#496, @dimitar-kostadinov)

✨ New Features

• [USER] The openstack extension does now support shoot clusters with Kubernetes version 1.25. You should consider the Kubernetes release notes before upgrading to 1.25. (gardener/gardener-extension-provider-openstack#502, @shafeeqes)

🐛 Bug Fixes

• [USER] The automatic enablement of no-overlay network configuration for new Shoots is now reverted. For more details about the motivation, see gardener/gardener-extension-provider-aws#621. (gardener/gardener-extension-provider-openstack#498, @ialidzhikov)

🏃 Others

• [OPERATOR] Adjust metric name due to upgrading the kube-state-metrics component (gardener/gardener-extension-provider-openstack#467, @istvanballok)
• [OPERATOR] All new calico openstack shoot clusters will be created without an overlay if not explicitly specified in the shoot spec. (gardener/gardener-extension-provider-openstack#481, @DockToFuture)
  • Vendor to gardener v1.50.1.
  • Make metrics bind address configurable
• [OPERATOR] The following dependency is updated: (gardener/gardener-extension-provider-openstack#484, @ary1992)
  • github.com/gardener/gardener: v1.50.1 -> v1.53.0
  • k8s.io/* : v0.24.2 -> v0.24.3
• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#487, @MartinWeindel)
  • k8s.gcr.io/sig-storage/csi-provisioner: v2.0.4 -> v3.2.1 (for kubernetes >= 1.20)
  • k8s.gcr.io/sig-storage/csi-attacher: v3.3.0 -> v3.5.0
  • k8s.gcr.io/sig-storage/csi-resizer: v0.5.0 -> v1.5.0
  • k8s.gcr.io/sig-storage/csi-snapshotter: v3.0.3 -> v4.2.1 (for kubernetes >= 1.20)
  • k8s.gcr.io/sig-storage/snapshot-validation-webhook: v3.0.3 -> v4.2.1 (for kubernetes >= 1.20)
  • k8s.gcr.io/sig-storage/snapshot-controller: v3.0.3 -> v4.2.1 (for kubernetes >= 1.20)
  • k8s.gcr.io/sig-storage/csi-node-driver-registrar: v2.0.1 -> v2.5.1
  • k8s.gcr.io/sig-storage/livenessprobe: v2.3.0 -> v2.7.0
• [OPERATOR] The gardener.cloud-fast storage class is now deployed with volumeBindingMode: WaitForFirstConsumer. This change is required if stateful pods with volumes have a topology related podAffinity or podAntiAffinity defined, e.g. when Gardener creates control-planes for HA shoot clusters. (gardener/gardener-extension-provider-openstack#490, @timuthy)
• [OPERATOR] The csi-driver-node daemonset now has its seccomp profile set to "RuntimeDefault". (gardener/gardener-extension-provider-openstack#493, @AleksandarSavchev)
• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#501, @dimitar-kostadinov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.24.2 -> v1.24.3
• [OPERATOR] Update go version v1.18.3 -> v1.19.2 (gardener/gardener-extension-provider-openstack#503, @kon-angelo)
• [DEPENDENCY] The following dependency is updated: (gardener/gardener-extension-provider-openstack#495, @shafeeqes)
  • github.com/gardener/gardener: v1.53.0 -> v1.56.0
  • k8s.io/* : v0.24.3 -> v0.25.0
  • sigs.k8s.io/controller-runtime: v0.12.1 -> v0.13.0

[machine-controller-manager]

✨ New Features

• [USER] Bootstrap token replacement by MCM is now supported for Ignition userData format (gardener/machine-controller-manager#743, @Gerrit91)

🐛 Bug Fixes

• [OPERATOR] resourceName machine-controller added for leases in clusterrole. Updated version of Clusterroles and Clusterrolebindings to v1. (gardener/machine-controller-manager#739, @rishabh-11)
• [OPERATOR] resourceName machine-controller added for leases in clusterrole. Updated version of Clusterroles and Clusterrolebindings to v1. (gardener/machine-controller-manager#738, @rishabh-11)

🏃 Others

• [OPERATOR] Migrated clients to use policy/v1 PodDisruptionBudget for kubernetes versions >= 1.21. policy/v1beta1 PDB is also supported but for k8s < 1.21 (gardener/machine-controller-manager#744, @shafeeqes)

[terraformer]

🏃 Others

• [OPERATOR] The golang base image is now updated to 1.16.15. The alpine base image is updated to 3.16.2. (gardener/terraformer#125, @kon-angelo)

v1.28.0

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] The following dependencies are updated: (gardener/gardener-extension-provider-openstack#482, @dkistner)
  • github.com/gardener/gardener: v1.48.0 -> v1.50.1

v1.27.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] This version of provider-openstack requires Gardener v1.50.0. (gardener/gardener-extension-provider-openstack#463, @ialidzhikov)
• [OPERATOR] This version of provider-openstack requires Gardener v1.50+. (gardener/gardener-extension-provider-openstack#468, @kris94)

🐛 Bug Fixes

• [USER] An issue preventing ControlPlane resource to be successfully reconciled for K8s 1.24 Shoots is now fixed. (gardener/gardener-extension-provider-openstack#459, @ialidzhikov)
• [USER] The following image is updated: (gardener/gardener-extension-provider-openstack#462, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.24.1 -> v1.24.2
• [USER] The following image is updated: (gardener/gardener-extension-provider-openstack#466, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.23.1 -> v1.23.2
• [OPERATOR] provider-openstack now mutates the cluster-autoscaler Deployment by implementing the EnsureClusterAutoscalerDeployment function. This is required in the context of kubernetes/autoscaler#4517 - cluster-autoscaler supports --feature-gates flag and provider extensions have to mutate the cluster-autoscaler Deployment to add the CSI related feature gates to it. (gardener/gardener-extension-provider-openstack#463, @ialidzhikov)
• [OPERATOR] Use openstack cloud-controller-manager v1.22.0 for Shoots with target k8s version v1.23.x. ref (gardener/gardener-extension-provider-openstack#469, @dkistner)

🏃 Others

• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#480, @ialidzhikov)
  • docker.io/k8scloudprovider/cinder-csi-plugin: v1.23.0 -> v1.23.4 (for Kubernetes 1.23 Shoots)
• [OPERATOR] Handle extensionsv1alpha1.Bastion resources for SSH access to worker instances (gardener/gardener-extension-provider-openstack#365, @tedteng)
• [OPERATOR] The extension now uses distroless instead of alpine as a base image. (gardener/gardener-extension-provider-openstack#465, @dimityrmirchev)
• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#471, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.22.0 -> v1.23.3 (for Kubernetes 1.23 Shoots)
• [OPERATOR] Update Go version used to v1.18 (gardener/gardener-extension-provider-openstack#473, @kon-angelo)
• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#476, @ialidzhikov)
  • docker.io/k8scloudprovider/cinder-csi-plugin: v1.20.0 -> v1.20.3 (for Kubernetes 1.20 Shoots)
  • docker.io/k8scloudprovider/cinder-csi-plugin: v1.24.0 -> v1.24.2 (for Kubernetes 1.24 Shoots)

[machine-controller-manager]

⚠️ Breaking Changes

• [OPERATOR] The default leader election resource lock of machine-controller-manager has been changed from endpointsleases to leases. (gardener/machine-controller-manager#711, @acumino)
  • Please make sure, that you had at least [email protected] running before upgrading to v0.46.0, so that it has successfully acquired leadership with the hybrid resource lock (endpointsleases) at least once.

🐛 Bug Fixes

• [USER] Rollout freeze won't happen due to Unknown machines now. (gardener/machine-controller-manager#733, @himanshu-kun)

🏃 Others

• [OPERATOR] Published docker images for Machine-Controller-Manager are now multi-arch ready. They support linux/amd64 and linux/arm64. (gardener/machine-controller-manager#732, @timuthy)
• [OPERATOR] The machine-controller-manager container now uses distroless instead of alpine as a base image. (gardener/machine-controller-manager#734, @dimityrmirchev)

[machine-controller-manager-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Fixed missing volume status VolumeStatusDownloading when creating volume (gardener/machine-controller-manager-provider-openstack#61, @namsral)

🏃 Others

• [USER] Update Go version to v1.18 (gardener/machine-controller-manager-provider-openstack#66, @kon-angelo)
• [USER] Fix an issue where automatic revendoring did not assign correct permissions to CI scripts. (gardener/machine-controller-manager-provider-openstack#69, @kon-angelo)
• [USER] Use distroless base image (gardener/machine-controller-manager-provider-openstack#62, @kon-angelo)
• [DEVELOPER] probeResources() now doesn't try to delete orphan resources but only lists them. (gardener/machine-controller-manager-provider-openstack#65, @kon-angelo)
  • The beforeSuite for IT test now calls for cleanup of orphan resources separately.
  • The Integration Test, which looks for orphan resources, now doesn't try to delete the orphan resources and just waits for them to be done automatically.

[terraformer]

🏃 Others

• [OPERATOR] Terraform google provider is updated to v4.19.0 (gardener/terraformer#119, @bd3lage)

v1.26.3

[gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#472, @ialidzhikov)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.22.0 -> v1.23.3 (for Kubernetes 1.23 Shoots)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.24.1 -> v1.24.2 (for Kubernetes 1.24 Shoots)

v1.26.2

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Use openstack cloud-controller-manager v1.22.0 for Shoots with target k8s version v1.23.x. ref (gardener/gardener-extension-provider-openstack#470, @dkistner)

v1.26.1

[gardener-extension-provider-openstack]

🐛 Bug Fixes

• [USER] An issue preventing ControlPlane resource to be successfully reconciled for K8s 1.24 Shoots is now fixed. (gardener/gardener-extension-provider-openstack#460, @ialidzhikov)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.26.1
gardener-extension-admission-openstack: eu.gcr.io/gardener-project/gardener/extensions/admission-openstack:v1.26.1

v1.26.0

[gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] This version of admission-openstack requires the SecretBinding provider controller to be enabled - enabled by default for gardener-controller-manager >= 1.42 or can be enabled via the gardener-controller-manager component config. (gardener/gardener-extension-provider-openstack#452, @ialidzhikov)
• [OPERATOR] This extension is only compatible with Gardener versions >= v1.37. (gardener/gardener-extension-provider-openstack#443, @rfranzke)

✨ New Features

• [USER] The OpenStack extension does now support shoot clusters with Kubernetes version 1.24. You should consider the Kubernetes release notes before upgrading to 1.24. (gardener/gardener-extension-provider-openstack#453, @acumino)
• [OPERATOR] The extension does now automatically rotate its webhook CA and server certificates each 30d. (gardener/gardener-extension-provider-openstack#451, @rfranzke)
• [OPERATOR] This extension is prepared to support the Shoot ServiceAccount signing key rotation feature (see documentation). (gardener/gardener-extension-provider-openstack#451, @rfranzke)
• [OPERATOR] This extension is prepared to support the Shoot CA rotation feature (GEP-18). (gardener/gardener-extension-provider-openstack#443, @rfranzke)

🐛 Bug Fixes

• [OPERATOR] Fixes missing quotes in the generated cloud-provider-config file (gardener/gardener-extension-provider-openstack#440, @breuerfelix)

📖 Documentation

• [USER] add link to K8s v1.23 conformance tests (gardener/gardener-extension-provider-openstack#436, @hendrikKahl)
• [DEPENDENCY] Paths transformations in .docforge/manifest.yaml for simplification (gardener/gardener-extension-provider-openstack#412, @Kostov6)

🏃 Others

• [USER] The dashboards: Cloud Controller Manager and CSI Driver are removed from Grafana (gardener/gardener-extension-provider-openstack#434, @Kristian-ZH)
• [OPERATOR] The following images are updated: (gardener/gardener-extension-provider-openstack#453, @acumino)
  • k8scloudprovider/openstack-cloud-controller-manager: 1.23.1 -> 1.24.0(For shoots using Kubernetes version 1.24)
  • docker.io/k8scloudprovider/cinder-csi-plugin: 1.23.0 -> 1.24.0(For shoots using Kubernetes version 1.24)
• [OPERATOR] The Secrets webhook of admission-openstack: (gardener/gardener-extension-provider-openstack#452, @ialidzhikov)
  • no longer intercepts every Secret UPDATE request but only requests for Secrets that are associated with a SecretBinding with provider.type=openstack.
  • no longer needs to list Shoots (hence, no cache for Shoots)
• [OPERATOR] The admission-openstack component introduces a new SecretBinding validator. It validates requests for SecretBindings and checks whether the SecretBinding refers to a valid OpenStack Secret. (gardener/gardener-extension-provider-openstack#452, @ialidzhikov)
• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-openstack#446, @kon-angelo)
  • k8scloudprovider/openstack-cloud-controller-manager: v1.23.0 -> v1.23.1
• [OPERATOR] The resource requests and limits for components (seed and shoot) managed by the provider-openstack extension has been adapted based on a production environment analysis. This is done to avoid OOMKills and cpu throttling situations. Furthermore the vpa minAllowed settings are now aligned with the cpu and memory request of the respective component` (gardener/gardener-extension-provider-openstack#442, @kon-angelo)

[machine-controller-manager]

📖 Documentation

• [USER] upgraded k8s dependecy to v1.22.9 (revendor in providers required to see effects) (gardener/machine-controller-manager#721, @Mkmittal)
• [DEPENDENCY] Paths transformations in .docforge/manifest.yaml for simplification (gardener/machine-controller-manager#689, @Kostov6)

🏃 Others

• [OPERATOR] Base image updated to alpine v3.15.4 and build image to golang 1.17.9. (gardener/machine-controller-manager#713, @himanshu-kun)
• [DEPENDENCY] K8s dependency upgraded to 1.21.12 (gardener/machine-controller-manager#719, @Mkmittal)

[machine-controller-manager-provider-openstack]

🏃 Others

• [USER] Update golang image to v1.17.9 (gardener/machine-controller-manager-provider-openstack#57, @kon-angelo)
  • Update alpine image to v3.15.4
• [DEPENDENCY] Updated machine-controller-manager dependency to v0.45.0 (gardener/machine-controller-manager-provider-openstack#59, @kon-angelo)

[terraformer]

🏃 Others

• [OPERATOR] Update alpine to 3.15.4 (gardener/terraformer#117, @rfranzke)