0.21.0

[vpn]

📰 Noteworthy

• [OPERATOR] Updated base container image of old vpn seed and vpn shoot to alpine 3.16.2 (gardener/vpn#60, @ScheererJ)

0.20.0

no release notes available

0.19.0

no release notes available

0.17.0

[vpn]

Most notable changes

• [OPERATOR] It is now possible to omit the NODE_NETWORK environment variable for both vpn-seed and vpn-shoot in case it is not required to tunnel traffic from the seed to the shoot node network via the VPN. (#49, @rfranzke)
• [OPERATOR] ipv6 route and gateway entries from shoot cluster are blocked (#48, @DockToFuture)

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.17.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.17.0

0.16.0

[vpn]

Most notable changes

• [OPERATOR] Prometheus checks to the VPN tun interface should now work as expected. (#46, @DockToFuture)
• [OPERATOR] The vpn-seed container now allows authentication against the kube-apiserver with a client certificate. The new environment variables APISERVER_AUTH_MODE can be either basic-auth or client-cert. (02eb33c)
  • In case of basic-auth the APISERVER_AUTH_MODE_BASIC_AUTH_CSV environment variable tells the path to the basic auth CSV file, and APISERVER_AUTH_MODE_BASIC_AUTH_USERNAME tells the user name (only the password will be read out of the CSV).
  • In case of client-cert the APISERVER_AUTH_MODE_CLIENT_CERT_CA, APISERVER_AUTH_MODE_CLIENT_CERT_CRT, APISERVER_AUTH_MODE_CLIENT_CERT_KEY variables tell the paths to the CA, client cert, and client key.

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.16.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.16.0

0.15.0

[vpn]

Most notable changes

• [OPERATOR] Add pull-filter to vpn-seed (#45, @DockToFuture)

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.15.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.15.0

0.14.0

[vpn]

Most notable changes

• [OPERATOR] The alpine base image version has been updated to 3.8. (#38, @marwinski)

Improvements

• [OPERATOR] The vpn-shoot is now able to load its CIDR configuration dynamically at run-time or at build-time. (#39, @deitch)

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.14.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.14.0

0.13.0

[vpn]

Improvements

• [USER] An issue causing vpn-shoot to fail starting on CoreOS machines provisioned by Alicloud has been resolved. (#32, @jia-jerry)

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.13.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.13.0

0.12.0

No functional changes; release created due to changes in the CI system.

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.12.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.12.0

0.11.0

Most notable changes

• The VPN Seed component uses the kube-apiserver's service DNS name to talk to it (instead of the service ip/port).

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.11.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.11.0