shoot-cert-service-1.44.2

[gardener/gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] The memory limit from the cert-controller-manager Deployment is now removed. by @ialidzhikov [#287]

Docker Images

• gardener-extension-shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service:v1.44.2

shoot-cert-service-1.44.1

[gardener/gardener-extension-shoot-cert-service]

🐛 Bug Fixes

• [OPERATOR] An issue causing the controlledValues: RequestsOnly field not to be set for the shoot-cert-management-seed-vpa VPA is now fixed. by @ialidzhikov [#285]

Docker Images

• gardener-extension-shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service:v1.44.1

runtime-gvisor-0.15.0

[gardener/gardener-extension-runtime-gvisor]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#138]

🏃 Others

• [OPERATOR] This extension now deploys gVisor 20240930 to Shoot clusters. by @MrBatschner [#146]
• [USER] gVisor was updated to 20240603.0. by @MrBatschner [#127]
• [USER] Alpine in the gVisor installation container was updated to 3.18.6 to provide a fix for CVE-2024-0727. by @MrBatschner [#127]
• [DEPENDENCY] Update go version to v1.22.0 by @LucaBernstein [#126]
• [DEPENDENCY] Update gardener/gardener version to v1.96.1 by @LucaBernstein [#126]
• [DEVELOPER] The vendor directory was removed in favor of the go mod cache. by @LucaBernstein [#126]

Helm Charts

• runtime-gvisor: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/runtime-gvisor:v0.15.0

Docker Images

• gardener-extension-runtime-gvisor-installation: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/runtime-gvisor-installation:v0.15.0
• gardener-extension-runtime-gvisor: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/runtime-gvisor:v0.15.0

registry-cache-0.9.0

[gardener/gardener-extension-registry-cache]

⚠️ Breaking Changes

• [USER] The registry.extensions.gardener.cloud/v1alpha2 API version is removed. Use registry.extensions.gardener.cloud/v1alpha3 instead. by @ialidzhikov [#165]
• [OPERATOR] The registry.extensions.gardener.cloud/v1alpha2 API version is removed. Before upgrading to this version, make sure that there are no usages of the registry.extensions.gardener.cloud/v1alpha2 API version in the landscape. by @ialidzhikov [#165]

📰 Noteworthy

• [USER] The registry cache StatefulSets for registries with upstream host with more than 43 chars will be recreated. Only the StatefulSet will be recreated, the underlying PVC remains the same. by @dimitar-kostadinov [#186]

🏃 Others

• [OPERATOR] This extension is now using the new way of providing monitoring configuration (ref GEP-19) in case a shoot cluster's Prometheus has been migrated to management via prometheus-operator. by @ialidzhikov [#187]
• [OPERATOR] The upstream fields in the registry-mirror and registry-cache APIs now support optional port (e.g. example.io:5000). by @dimitar-kostadinov [#183]
• [OPERATOR] A new optional remoteURL field in the registry-cache API allows specifying the URL of the upstream registry (e.g. http://example.io:5000). by @dimitar-kostadinov [#183]
• [OPERATOR] The registry-cache extension does now support the Deploying Gardener Locally and Enabling Provider-Extensions local setup. by @dimitar-kostadinov [#193]

Docker Images

• gardener-extension-registry-cache-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/registry-cache-admission:v0.9.0
• gardener-extension-registry-cache: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/registry-cache:v0.9.0

registry-cache-0.11.0

[gardener/gardener-extension-registry-cache]

⚠️ Breaking Changes

• [OPERATOR] The specification of the image in gardener-extension-registry-cache Helm chart has been changed. by @oliver-goetz [#229]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#229]
• [OPERATOR] All container images are built for linux/amd64 and linux/arm64 now. by @oliver-goetz [#229]

🐛 Bug Fixes

• [OPERATOR] The monitoring resources (dashboards ConfigMap, PrometheusRule, ScrapeConfig) are now deleted when the Extension is deleted. by @ialidzhikov [#268]

🏃 Others

• [DEVELOPER] e2e tests are no longer using test images from public ECR as the Distribution project cannot pull blobs from it. by @dimitar-kostadinov [#254]
• [DEVELOPER] The verification in the e2e test is enhanced to check that all image layers of an image are present in the registry cache storage. by @dimitar-kostadinov [#255]
• [DEVELOPER] A new e2e test that covers upstream registries with credentials is now added. by @dimitar-kostadinov [#184]
• [DEVELOPER] The golang version is updated to 1.23.0. by @dependabot[bot] [#239]

Helm Charts

• admission-registry-cache-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-registry-cache-application:v0.11.0
• admission-registry-cache-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-registry-cache-runtime:v0.11.0
• registry-cache: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/registry-cache:v0.11.0

Docker Images

• gardener-extension-registry-cache-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/registry-cache-admission:v0.11.0
• gardener-extension-registry-cache: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/registry-cache:v0.11.0

registry-cache-0.10.0

[gardener/gardener-extension-registry-cache]

⚠️ Breaking Changes

• [OPERATOR] The legacy method of providing monitoring configuration via ConfigMaps labeled with extensions.gardener.cloud/configuration=monitoring has been removed. The extension does now only uses the new contract for providing monitoring configuration. Before upgrading to this version of the extension, make sure that the deployed Gardener version supports the new monitoring contract. by @dimitar-kostadinov [#237]

📰 Noteworthy

• [DEVELOPER] The containerd registry configuration hosts.toml files are now created using the OpetingSystemConfig CRI API. by @dimitar-kostadinov [#227]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the admission Helm chart. by @timuthy [#222]
• [OPERATOR] The registry-cache admission validation is skipped when no semantic change in providerConfig is detected. by @dimitar-kostadinov [#210]
• [OPERATOR] The following image is updated:
  • europe-docker.pkg.dev/gardener-project/releases/3rd/registry: 3.0.0-alpha.1 -> 3.0.0-beta.1 by @ialidzhikov [#224]

Docker Images

• gardener-extension-registry-cache-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/registry-cache-admission:v0.10.0
• gardener-extension-registry-cache: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/registry-cache:v0.10.0

provider-openstack-1.42.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix a bug that prevented the Cinder CSI from working on shoots with kubernetes version less than v1.28. by @kon-angelo [#876]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.42.1
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.42.1
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.42.1

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.42.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.42.1

provider-openstack-1.42.0

[gardener/gardener-extension-provider-openstack]

✨ New Features

• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#856]
• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#845]
• [OPERATOR] Allows the operator to configure whether he wants to deploy the standard ClusterFilters and/or StorageClass by @nschad [#830]
• [OPERATOR] Enable support for the field shoot.Spec.CloudProfile alongside shoot.Spec.CloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#834]
• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#811]

🐛 Bug Fixes

• [OPERATOR] Removed unnecessary preStop hook from node-driver-registrar in csi-driver-node, as socket removal is now handled internally by node-driver-registrar, resolving distroless image error. by @AndreasBurger [#802]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the gardener-extension-admission-openstack Helm chart. by @timuthy [#806]
• [OPERATOR] Starting with gardenlet >= v1.98.0, use controlplane webhook object selector to limit mutator calls. by @LucaBernstein [#797]
• [OPERATOR] Update cloud-provider-openstack images and remove credential use from nodeserver by @kon-angelo [#864]
• [OPERATOR] Update the VPA CRD used for testing locally by @hebelsan [#822]
• [OPERATOR] Update CSI sidecar containers to latest version. by @kon-angelo [#865]
• [OPERATOR] Adapt new WorkerPoolHash function in Gardener v1.98. by @Duciwuci [#816]
• [OPERATOR] Inserts architecture from worker to the machine class by @sssash18 [#820]
• [OPERATOR] The provider-openstack extension no longer configures min/maxAllowed in any managed VPA resource. by @kon-angelo [#863]
• [OPERATOR] Allow multiple loadBalancerProviders as the default and for a region by @lotharbach [#841]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#850]

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where the Unitialised error code was blocking machine deletion by @rishabh-11 [gardener/machine-controller-manager#928]

[gardener/machine-controller-manager-provider-openstack]

🏃 Others

• [DEVELOPER] Set repository PR template /platform from aws to openstack by @hebelsan [gardener/machine-controller-manager-provider-openstack#165]
• [DEVELOPER] Update golang to v1.23.1 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#175]
• [DEVELOPER] Update gardener to v1.103.0 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#175]
• [DEPENDENCY] Golang version updated to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-openstack#152]
• [OPERATOR] Allow input of pod CIDRs as slice. by @kon-angelo [gardener/machine-controller-manager-provider-openstack#177]
• [OPERATOR] Update machine-controller-manager to v0.54.0 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#181]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.42.0
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.42.0
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.42.0

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.42.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.42.0

provider-openstack-1.41.2

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix an issue with share network reconciliation not calculating number of existing share networks correctly. by @AndreasBurger [#827]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.2
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.2

provider-openstack-1.41.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix a bug that would migrate shoots away from terraform during control-plane migration. This would occur only if the seed was marked to use the flow reconciler for new shoots. by @AndreasBurger [#825]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.1