v1.59.0

[gardener/gardener-extension-provider-aws]

⚠️ Breaking Changes

• [OPERATOR] The Helm charts for the application and runtime parts of the gardener-extension-admission-aws admission controller have been separated into standalone charts. These charts now assume a Garden setup with a virtual garden. Both charts must be deployed individually: the runtime chart on the Garden runtime cluster, and the application chart on the virtual garden. Additionally, the intermediate global level in the Helm values has been removed, so you may need to adjust your provided values accordingly. by @MartinWeindel [#1100]

📰 Noteworthy

• [DEVELOPER] Updated AWS SDK from v1 to v2 by @AndreasBurger [#1060]

✨ New Features

• [OPERATOR] Adjustments for additional deployment of extension and admission controller on Garden runtime cluster by gardener-operator. by @MartinWeindel [#1100]
• [OPERATOR] Support specification of extended resources in provider config node template without re-specifying core resources. by @elankath [#1010]

🏃 Others

• [OPERATOR] Fixed terraform deploy and integration tests for IPv6. by @axel7born [#1112]
• [OPERATOR] update images of pause and alpine container by @hebelsan [#1101]
• [OPERATOR] Add IPv4 ranges from Spec.Networking to Status.Networking. by @axel7born [#1094]
• [OPERATOR] Filter pod ranges for IPv4 CIDRs to configure Custom-Route-Controller. by @axel7born [#1138]
• [OPERATOR] Create bastion vm from the info provided in the cloud profile bastion section by @hebelsan [#1040]
• [OPERATOR] Added validation to allow only IPv6-only shoot clusters, but not dual-stack as it is not supported, yet. by @ScheererJ [#1095]
• [OPERATOR] Fixed an issue preventing the deployment of internal load balancers in IPv6-only shoots. by @axel7born [#1108]
• [OPERATOR] Add NamespacedCloudProfile admission mutation and validation to support custom machine images and types. by @LucaBernstein [#1136]
• [OPERATOR] Remove the duplicate provider type check from the admission webhooks. by @LucaBernstein [#1117]
• [OPERATOR] Fix an issue where the "0.0.0.0/0" route creation would fail if the nat-gateway was previously deleted. by @kon-angelo [#1111]
• [OPERATOR] Update gardener to v1.106.1 by @hebelsan [#1110]
• [OPERATOR] Dual-stack networking, i.e. networks with IPv4 and IPv6, are allowed now. by @ScheererJ [#1139]
• [OPERATOR] AWS load balancers controller is always enabled for IPv6-only and dual-stack shoot clusters. by @ScheererJ [#1099]
• [OPERATOR] Harmonize logging output from controller-runtime logger and kubernetes logger. by @DockToFuture [#1105]
• [OPERATOR] gosec was introduced for Static Application Security Testing (SAST). by @DockToFuture [#1105]
• [DEPENDENCY] Update go to version 1.23.3 by @hebelsan [#1121]
• [DEVELOPER] Add gosec as sast makefile target by @hebelsan [#1123]

📖 Documentation

• [USER] Add overview documentation for IPv6 by @ScheererJ [#1143]

[gardener/aws-custom-route-controller]

✨ New Features

• [USER] gosec was introduced for Static Application Security Testing (SAST). by @ScheererJ [gardener/aws-custom-route-controller#34]
• [USER] Update sdk version to v2 by @kon-angelo [gardener/aws-custom-route-controller#48]
• [USER] The aws-custom-route-controller only adds node routes for IPv4 pod CIDR ranges and does not interfere with IPv6 routes. by @DockToFuture [gardener/aws-custom-route-controller#43]

🏃 Others

• [OPERATOR] Bumps golang from 1.23.2 to 1.23.3. by @dependabot[bot] [gardener/aws-custom-route-controller#44]
• [OPERATOR] Bumps golang from 1.23.1 to 1.23.2. by @dependabot[bot] [gardener/aws-custom-route-controller#33]

v1.58.3

[gardener/gardener-extension-provider-aws]

🏃 Others

• [OPERATOR] Ignore alreadyDetached errors when detaching instead of erroring out by @kon-angelo [#1118]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.3
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.3
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.3

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.3
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.3

v1.58.2

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix missing nil check after getting route table by @hebelsan [#1107]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.2
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.2
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.2

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.2
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.2

v1.58.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix flow: Ignore subnet not found in infra state while deleting routing table associations by @hebelsan [#1098]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.1

v1.58.0

[gardener/machine-controller-manager]

✨ New Features

• [DEVELOPER] MCM adds the name of the machine to node.gardener.cloud/machine-name label of the corresponding node. by @oliver-goetz [gardener/machine-controller-manager#919]
• [DEVELOPER] MCM replaces the magic string <<MACHINE_NAME>> in user data with the name of the machine when it is bootstrapped. by @oliver-goetz [gardener/machine-controller-manager#919]

🐛 Bug Fixes

• [DEVELOPER] Fixed bug that removed the shoot-- prefix from control cluster namespace for integration tests using the gardener local setup case by @thiyyakat [gardener/machine-controller-manager#935]
• [OPERATOR] Fixed a bug where failure of machine initialization caused label updates to not happen. by @thiyyakat [gardener/machine-controller-manager#940]

🏃 Others

• [DEVELOPER] The following dependencies are updated:
  • k8s.io/* : v0.29.3 -> v0.31.0 by @ary1992 [gardener/machine-controller-manager#938]
• [OPERATOR] Drain timeout is now correctly honored for Pod eviction during Machine Drain by @sssash18 [gardener/machine-controller-manager#920]
• [OPERATOR] getVMStatus always redirects to InitiateDrain. It also populates the node label on the machine object by checking node.gardener.cloud/machine-name label on the nodes. by @thiyyakat [gardener/machine-controller-manager#940]
• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] Golang version used is now upgraded to 1.22.5 by @aaronfern [gardener/machine-controller-manager#929]

📖 Documentation

• [OPERATOR] Broken API doc links are now fixed by @rishabh-11 [gardener/machine-controller-manager#927]

[gardener/machine-controller-manager-provider-aws]

🏃 Others

• [OPERATOR] Use ProviderID as a fallback for fetching the VM. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Golangci-lint will now be used as the linter instead of the older golint. by @aaronfern [gardener/machine-controller-manager-provider-aws#168]
• [OPERATOR] InitializeMachine returns Uninitialized error code if VM is not found. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Golang version used upgraded to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-aws#166]
• [OPERATOR] Set PrimaryIpv6 flag for instances with IPv6 addresses. by @axel7born [gardener/machine-controller-manager-provider-aws#174]

[gardener/gardener-extension-provider-aws]

✨ New Features

• [USER] Enable support for the field shoot.Spec.CloudProfile alongside cloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#1000]
• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#1047]
• [USER] The provider-aws extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#1055]

🐛 Bug Fixes

• [OPERATOR] An issue causing Shoot force deletion to fail because the control plane webhook failing to get the Infrastructure object from the Seed cluster is now fixed. The control plane webhook now reads the infrastructureConfig from the Shoot spec in the Cluster resource. Previously, it was fetching the Infrastructure object from the Seed cluster and was reading the infrastructureConfig from there. by @Kostov6 [#1068]
• [USER] Fix cleanup of routing table associations by @hebelsan [#1083]

🏃 Others

• [OPERATOR] The following images are updated:
  registry.k8s.io/provider-aws/aws-ebs-csi-driver: v1.29.0 -> v1.35.0 by @scs-gardener-team-gitlab [#1080]
• [OPERATOR] Add flow migration integration test by @kon-angelo [#1046]
• [OPERATOR] Create IPv6 ServiceCIDR and write IPv6 ranges to Infra.Status.Networking by @axel7born [#1081]
• [OPERATOR] Enable nat64 and dns64 for IPv6 shoot clusters. by @DockToFuture [#1082]
• [OPERATOR] The provider-aws extension no longer configures min/maxAllowed in any managed VPA resource. by @hebelsan [#1070]
• [OPERATOR] Fix error classification when deleting DNS record sets by @hebelsan [#1033]
• [OPERATOR] Update cloud-provider images including CSI driver images by @hebelsan [#1072]
• [OPERATOR] The shoot-webhook that mutates the addons-nginx-ingress-controller ConfigMap does now specify object selector. The webhook will now intercept only requests for the addons-nginx-ingress-controller ConfigMap. by @ialidzhikov [#988]
• [OPERATOR] aws-custom-route-controller is disabled for IPv6. by @DockToFuture [#1088]
• [OPERATOR] Add ipv6 support to deploy IPv6 shoots. by @axel7born [#1024]
• [OPERATOR] The aws-ipam-controller is enabled for IPv6 and dual stack shoot clusters. It replaces the IPAM of the cloud-controller-manager and kube-controller-manager and supports additionally prefix delegation in case of IPv6 or dual stack. by @DockToFuture [#984]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#1049]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.0
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.0
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.0

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.0
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.0

v1.57.1

[gardener/gardener-extension-provider-aws]

🏃 Others

• [OPERATOR] Fix an issue where the infrastructure state was not properly transformed to the provider status. by @kon-angelo [#1042]
• [OPERATOR] Fix an issue where terraformer artifacts would not be deleted during the control-plane-migration migrate phase. by @kon-angelo [#1043]
• [OPERATOR] Correctly register infrastructure webhook with the controllerruntime manager by @kon-angelo [#1042]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.57.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.57.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.57.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.57.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.57.1

v1.57.0

[gardener/gardener-extension-provider-aws]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#1012]

🐛 Bug Fixes

• [OPERATOR] Removed unnecessary preStop hook from node-driver-registrar in csi-driver-node, as socket removal is now handled internally by node-driver-registrar, resolving distroless image error. by @AndreasBurger [#992]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the gardener-extension-admission-aws Helm chart. by @timuthy [#994]
• [OPERATOR] Starting with gardenlet >= v1.98.0, use controlplane webhook object selector to limit mutator calls. by @LucaBernstein [#989]
• [OPERATOR] Update the VPA CRD used for testing locally by @kon-angelo [#1019]
• [OPERATOR] Inserts architecture from worker to the machine class by @sssash18 [#853]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.57.0
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.57.0
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.57.0

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.57.0
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.57.0

v1.56.1

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where the Unitialised error code was blocking machine deletion by @rishabh-11 [gardener/machine-controller-manager#928]

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.56.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.56.1

v1.56.0

[gardener/machine-controller-manager]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references. by @ccwienk [gardener/machine-controller-manager#878]
• [DEVELOPER] New provider method Driver.InitializeMachine added for Post-Creation VM Instance Initialization steps. by @elankath [gardener/machine-controller-manager#898]

🐛 Bug Fixes

• [OPERATOR] Fix for edge case of Node object deletion missed during machine termination. by @elankath [gardener/machine-controller-manager#887]
• [DEVELOPER] A bug in UpdateNodeToMachine which cause the IT to fail is fixed. by @elankath [gardener/machine-controller-manager#893]
• [DEVELOPER] MCM restart happens properly in integration tests now. This fix will get activated, once this version is vendored in your mcm-provider by @sssash18 [gardener/machine-controller-manager#879]

🏃 Others

• [OPERATOR] Removed vendor directory by @rishabh-11 [gardener/machine-controller-manager#903]
• [OPERATOR] Updated k8s dependencies to v0.29.3 by @rishabh-11 [gardener/machine-controller-manager#907]
• [OPERATOR] fixed IT for seed with k8s >= 1.27 as control cluster by @piyuagr [gardener/machine-controller-manager#869]
• [OPERATOR] machine controller won't reconcile machine on non-spec update events by @himanshu-kun [gardener/machine-controller-manager#877]
• [OPERATOR] Architecture field added in the nodetemplate. This will allow CA to pickup architecture from machine class and schedule pods on relevant arch nodes. by @sssash18 [gardener/machine-controller-manager#894]
• [DEVELOPER] go-git now removed from dependencies due to CVE's. by @elankath [gardener/machine-controller-manager#896]
• [DEVELOPER] Bump k8s.io/* deps to v0.28.2 by @afritzler [gardener/machine-controller-manager#858]

📖 Documentation

• [DEVELOPER] Phase transition diagram for a machine object is added to FAQs by @himanshu-kun [gardener/machine-controller-manager#886]

[gardener/machine-controller-manager-provider-aws]

✨ New Features

• [OPERATOR] Add Ipv6AddressCount and Ipv6PrefixCount to enable the assignment of an ipv6 address and an ipv6 prefix to instances. by @gardener-robot-ci-2 [gardener/machine-controller-manager-provider-aws#162]
• [USER] It is now possible to specify CPU options for AWS instances. by @AndreasBurger [gardener/machine-controller-manager-provider-aws#161]
• [USER] Implements the driver metrics added to MCM in version 0.50.0 such that duration of calls to AWS and any failed requests are recorded:
  • driver_request_duration_seconds
  • driver_requests_failed_total by @saley89 [gardener/machine-controller-manager-provider-aws#153]

🏃 Others

• [OPERATOR] Vendor directory removed by @rishabh-11 [gardener/machine-controller-manager-provider-aws#160]

[gardener/gardener-extension-provider-aws]

📰 Noteworthy

• [OPERATOR] Aws error code NoSuchHostedZone is now ignored on DNSRecord deletion by @Kostov6 [#971]

✨ New Features

• [USER] CPU Options for AWS instances can now be set in the worker config. by @AndreasBurger [#924]

🏃 Others

• [OPERATOR] A problem with deploying MachineClasses that reference an operating system image whose version contains a + character was fixed. by @MrBatschner [#983]
• [OPERATOR] Validation of shoots now takes the CloudProfile into account to make sure that the configured images are defined. by @AndreasBurger [#979]

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.56.0
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.56.0

v1.55.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fixes a monitoring configuration issue that caused false CCM-down alerts to fire. by @AndreasBurger [#975]

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.55.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.55.1