v1.43.0

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] Deprecated configuring bastion via helm chart config map by @hebelsan [#838]

📰 Noteworthy

• [OPERATOR] Added support for configuring bastion vm from CloudProfile's bastion section by @hebelsan [#838]

🏃 Others

• [DEPENDENCY] Add gosec as sast makefile target by @hebelsan [#902]
• [DEPENDENCY] Update go to version 1.23.3 by @hebelsan [#900]
• [OPERATOR] Fix an issue where provider-openstack required permissions for share network operations even when not required by the InfrastructureConfig. by @kon-angelo [#885]
• [OPERATOR] Update gardener/gardener to v1.107.0 by @hebelsan [#896]
• [OPERATOR] Fix an issue where the deletion with the flow reconciler would fail if the network was already deleted. by @kon-angelo [#898]
• [OPERATOR] Added validation to prevent IPv6-only/dual-stack clusters as they are not supported, yet. by @ScheererJ [#886]
• [OPERATOR] Remove the duplicate provider type check from the admission webhooks. by @LucaBernstein [#895]
• [OPERATOR] Fix possible nil-pointer deref when looking for networks. during reconciliation by @AndreasBurger [#879]
• [OPERATOR] subnet overlapping, missing expected router and Policy doesn't allow .* to be performed errors are now non-retryable user errors. by @RadaBDimitrova [#894]
• [OPERATOR] Updating CSI driver provisioner ClusterRole rules by @hebelsan [#880]
• [DEVELOPER] Update gardener/gardener to v1.105.0 by @hebelsan [#881]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.43.0
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.43.0
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.43.0

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.43.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.43.0

v1.42.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix a bug that prevented the Cinder CSI from working on shoots with kubernetes version less than v1.28. by @kon-angelo [#876]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.42.1
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.42.1
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.42.1

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.42.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.42.1

v1.42.0

[gardener/gardener-extension-provider-openstack]

✨ New Features

• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#856]
• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#845]
• [OPERATOR] Allows the operator to configure whether he wants to deploy the standard ClusterFilters and/or StorageClass by @nschad [#830]
• [OPERATOR] Enable support for the field shoot.Spec.CloudProfile alongside shoot.Spec.CloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#834]
• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#811]

🐛 Bug Fixes

• [OPERATOR] Removed unnecessary preStop hook from node-driver-registrar in csi-driver-node, as socket removal is now handled internally by node-driver-registrar, resolving distroless image error. by @AndreasBurger [#802]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the gardener-extension-admission-openstack Helm chart. by @timuthy [#806]
• [OPERATOR] Starting with gardenlet >= v1.98.0, use controlplane webhook object selector to limit mutator calls. by @LucaBernstein [#797]
• [OPERATOR] Update cloud-provider-openstack images and remove credential use from nodeserver by @kon-angelo [#864]
• [OPERATOR] Update the VPA CRD used for testing locally by @hebelsan [#822]
• [OPERATOR] Update CSI sidecar containers to latest version. by @kon-angelo [#865]
• [OPERATOR] Adapt new WorkerPoolHash function in Gardener v1.98. by @Duciwuci [#816]
• [OPERATOR] Inserts architecture from worker to the machine class by @sssash18 [#820]
• [OPERATOR] The provider-openstack extension no longer configures min/maxAllowed in any managed VPA resource. by @kon-angelo [#863]
• [OPERATOR] Allow multiple loadBalancerProviders as the default and for a region by @lotharbach [#841]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#850]

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where the Unitialised error code was blocking machine deletion by @rishabh-11 [gardener/machine-controller-manager#928]

[gardener/machine-controller-manager-provider-openstack]

🏃 Others

• [DEVELOPER] Set repository PR template /platform from aws to openstack by @hebelsan [gardener/machine-controller-manager-provider-openstack#165]
• [DEVELOPER] Update golang to v1.23.1 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#175]
• [DEVELOPER] Update gardener to v1.103.0 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#175]
• [DEPENDENCY] Golang version updated to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-openstack#152]
• [OPERATOR] Allow input of pod CIDRs as slice. by @kon-angelo [gardener/machine-controller-manager-provider-openstack#177]
• [OPERATOR] Update machine-controller-manager to v0.54.0 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#181]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.42.0
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.42.0
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.42.0

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.42.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.42.0

v1.41.2

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix an issue with share network reconciliation not calculating number of existing share networks correctly. by @AndreasBurger [#827]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.2
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.2

v1.41.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix a bug that would migrate shoots away from terraform during control-plane migration. This would occur only if the seed was marked to use the flow reconciler for new shoots. by @AndreasBurger [#825]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.1

v1.41.0

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Add migration test for the infrastructure reconciler by @kon-angelo [#779]
• [OPERATOR] QoL improvements to the infrastructure reconciler by @kon-angelo [#779]
• [OPERATOR] A problem with deploying MachineClasses that reference an operating system image whose version contains a + character was fixed. by @AndreasBurger [#795]
• [USER] When a missing router is being encountered during reconciliation/deletion it will now be classified as ERR_INFRA_DEPENDENCIES, enabling force deletion of the shoot via annotation. by @AndreasBurger [#794]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.0

v1.40.1

[gardener/gardener-extension-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Fixes a monitoring configuration issue that caused false CCM-down alerts to fire. by @kon-angelo [#789]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.40.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.40.1

v1.40.0

[gardener/machine-controller-manager]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references. by @ccwienk [gardener/machine-controller-manager#878]

🐛 Bug Fixes

• [DEVELOPER] MCM restart happens properly in integration tests now. This fix will get activated, once this version is vendored in your mcm-provider by @sssash18 [gardener/machine-controller-manager#879]
• [OPERATOR] Fix for edge case of Node object deletion missed during machine termination. by @elankath [gardener/machine-controller-manager#887]

🏃 Others

• [OPERATOR] machine controller won't reconcile machine on non-spec update events by @himanshu-kun [gardener/machine-controller-manager#877]
• [OPERATOR] fixed IT for seed with k8s >= 1.27 as control cluster by @piyuagr [gardener/machine-controller-manager#869]
• [OPERATOR] Architecture field added in the nodetemplate. This will allow CA to pickup architecture from machine class and schedule pods on relevant arch nodes. by @sssash18 [gardener/machine-controller-manager#894]
• [DEVELOPER] go-git now removed from dependencies due to CVE's. by @elankath [gardener/machine-controller-manager#896]
• [DEVELOPER] Bump k8s.io/* deps to v0.28.2 by @afritzler [gardener/machine-controller-manager#858]

📖 Documentation

• [DEVELOPER] Phase transition diagram for a machine object is added to FAQs by @himanshu-kun [gardener/machine-controller-manager#886]

[gardener/terraformer]

🏃 Others

• [OPERATOR] Update go -> v1.21.5 by @kon-angelo [gardener/terraformer#146]
• [OPERATOR] Update alpine -> v1.29.0 by @kon-angelo [gardener/terraformer#146]

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] provider-openstack no longer supports Shoots with Кubernetes version == 1.24. by @shafeeqes [#702]
• [USER] [csi-snapshotter] Enable prevent-volume-mode-conversion feature flag by default. Volume mode change can still be triggered with the respective annotations. You can read more in the KEP by @kon-angelo [#732]

✨ New Features

• [OPERATOR] This extension now makes use of the new .spec.pools[].userDataSecretRef field to get to the worker pool user data. by @rfranzke [#776]
• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.30. You should consider the Kubernetes release notes before upgrading to 1.30. by @shafeeqes [#770]

🐛 Bug Fixes

• [DEVELOPER] source- prefix of BackupEntry name is being ignored when performing entry deletion by @Kostov6 [#726]

🏃 Others

• [DEPENDENCY] The following golang dependencies have been upgraded :
  • go: 1.21.1 to 1.22.1
  • gardener/gardener: v1.86.0->v1.91.2
  • k8s.io/* : v0.28.3 -> v0.29.3
  • sigs.k8s.io/controller-runtime: v0.16.3-> v0.17.2
  • sigs.k8s.io/controller-tools v0.13.0-> v0.14.0 by @hebelsan [#745]
• [OPERATOR] Add support for share networks in the flow reconciler. by @kon-angelo [#715]
• [OPERATOR] add os information as labels in machine class objects. by @tedteng [#735]
• [OPERATOR] This extension is now using the new way of providing monitoring configuration (ref GEP-19) in case a shoot cluster's Prometheus has been migrated to management via prometheus-operator. by @rfranzke [#766]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.92.0 to 1.93.0. by @dependabot[bot] [#755]
• [OPERATOR] NodeGroupAutoscalingOptions can now be specified per worker group via the worker through the field worker.spec.pools.clusterAutoscaler by @aaronfern [#752]
• [OPERATOR] Allows bastion to use images by ID instead of just by name. by @kon-angelo [#741]
• [OPERATOR] The controlplaneexposure.openstack.extensions.gardener.cloud webhook does no longer mutate Services/Deployments. Previously the webhook was called for Services/Deployments mutations and was not mutating anything. by @ialidzhikov [#772]
• [OPERATOR] provider-openstack will calculate a shoot's Egress CIDRs on infrastructure reconciliation. by @hebelsan [#763]
• [DEVELOPER] Infrastructure tests now support application credentials by @hebelsan [#742]

[gardener/machine-controller-manager-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Set DeleteOnTermination for in BlockDeviceMappings to false in case of volumes with RootDiskType. by @dergeberl [gardener/machine-controller-manager-provider-openstack#114]

🏃 Others

• [OPERATOR] Increase openstack poll interval to reduce the number of openstack API calls. by @dergeberl [gardener/machine-controller-manager-provider-openstack#115]
• [USER] upgraded mcm to v0.50.1 by @himanshu-kun [gardener/machine-controller-manager-provider-openstack#104]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.40.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.40.0

v1.39.2

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Update terraformer to v2.25.0 by @AndreasBurger [#724]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.39.2
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.39.2

v1.39.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Admission controller will be deployed with the LEADER_ELECTION_NAMESPACE set to the pod namespace by @AndreasBurger [#719]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.39.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.39.1