Skip to content
This repository has been archived by the owner on Feb 2, 2024. It is now read-only.

0.16.0

Compare
Choose a tag to compare
@gardener-robot-ci-1 gardener-robot-ci-1 released this 16 Aug 06:25

[vpn]

Most notable changes

  • [OPERATOR] Prometheus checks to the VPN tun interface should now work as expected. (#46, @DockToFuture)
  • [OPERATOR] The vpn-seed container now allows authentication against the kube-apiserver with a client certificate. The new environment variables APISERVER_AUTH_MODE can be either basic-auth or client-cert. (02eb33c)
    • In case of basic-auth the APISERVER_AUTH_MODE_BASIC_AUTH_CSV environment variable tells the path to the basic auth CSV file, and APISERVER_AUTH_MODE_BASIC_AUTH_USERNAME tells the user name (only the password will be read out of the CSV).
    • In case of client-cert the APISERVER_AUTH_MODE_CLIENT_CERT_CA, APISERVER_AUTH_MODE_CLIENT_CERT_CRT, APISERVER_AUTH_MODE_CLIENT_CERT_KEY variables tell the paths to the CA, client cert, and client key.

Docker Images

vpn-seed: eu.gcr.io/gardener-project/gardener/vpn-seed:0.16.0
vpn-shoot: eu.gcr.io/gardener-project/gardener/vpn-shoot:0.16.0