v1.5.0

[gardener-extension-provider-openstack]

Most notable changes

• [USER] The OpenStack extension does now support shoot clusters with Kubernetes version 1.18. You should consider the Kubernetes release notes before upgrading to 1.18. (#59, @rfranzke)

Improvements

• [OPERATOR] kube-controller-manageer no longer has access to blocked CIDRs. (#64, @mvladev)
• [OPERATOR] It is now possible to use simple wildcard expressions when configuring floatingPools[].name in the CloudProfileConfig. As a consequence, the FloatingPoolName in a shoot cluster is matched against this wildcard expression instead of only allowing a strict match. Please consult the documentation https://github.com/gardener/gardener-extension-provider-openstack/blob/c0588dd370006b9f9fca910037e05387c752654b/docs/usage-as-operator.md for more details. (#63, @timuthy)
• [OPERATOR] The OpenStack validator now allows zones to be specified multiple times for a worker group. (#58, @timuthy)
• [OPERATOR] g/gardener-extensions does now require the g/terraformer@v1.0.0. (#48, @ialidzhikov)

[gardener-extensions]

Improvements

• [OPERATOR] Add Separate sidecar controller to save worker state under Worker.Status.State (gardener-attic/gardener-extensions#600, @vlvasilev)
  • Add Worker.Status.State restoration functionality
  • Add migration functionality
• [OPERATOR] The machine.sapcloud.io CRDs applied by the ./pkg/controller/worker package do now get a protection label for accidental deletion. See also: gardener/gardener#2066 (gardener-attic/gardener-extensions#625, @rfranzke)

[terraformer]

Action Required

• [OPERATOR] The Terraformer does now lookup the relevant data stored in ConfigMaps or Secrets live from the system instead of relying on mounted volumes. This is a breaking change as the volume mount approach does no longer work, please adapt your manifests according to the examples. The rationale behind it is to not rely on potentially stale kubelet cache while it mounts the volume which may, in rare cases, cause state loss. (gardener/terraformer#37, @rfranzke)

Improvements

• [OPERATOR] nsxt and random providers are now removed from the terraform bundle. (gardener/terraformer#38, @ialidzhikov)
• [OPERATOR] terraformer does no longer ignore the termination signals sent to PID 1. It does now send a termination signal to the terraform process itself and waits for its completion. This should prevent rare cases in which the terraformer was not storing the state of created infrastructure resources. (gardener/terraformer#36, @ialidzhikov)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.5.0
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.5.0

v1.4.0

[gardener-extension-provider-openstack]

Action Required

• [OPERATOR] ⚠️ This version is not compatible with Gardener < v1.2. (#37, @georgekuruvillak)
  • The controlplanebackup webhook is removed as of gardener/gardener#1762. The controlplaneexposure webhook that was previously targeting StatefulSets is now targeting Etcd resources of the druid.

Most notable changes

• [USER] The OpenStack extension does now support shoot clusters with Kubernetes version 1.18. You should consider the Kubernetes release notes before upgrading to 1.18. (#54, @timuthy)
• [OPERATOR] It is now possible to configure useOctavia=true in the CloudProfileConfig in case the underlying OpenStack system uses Octavia for network load balancing. (#38, @rfranzke)
• [OPERATOR] The gardener-extension-provider-openstack now offers a validating webhook which checks shoot resources of type openstack in the core.gardener.cloud group. Operators should register this webhook in the Garden cluster to further prevent invalid modifications on openstack shoots. (#36, @timuthy)

Improvements

• [USER] The Infrastructure deletion does now succeed in case it never created anything but the cloud provider secret does not contain the correct credentials. (#42, @rfranzke)
• [USER] The Worker deletion does now succeed in case the cloud provider credentials were changed. (#42, @rfranzke)
• [USER] Do not mutate kube-apiserver exposure resources which Gardener marks as managed by it with core.gardener.cloud/apiserver-exposure: gardener-managed label. (#33, @mvladev)
• [OPERATOR] The OpenStack provider now allows Gardener to restart the Cloud-Controller-Manager and the Machine-Controller-Manager (see gardener/gardener#2098 for more information). (#54, @timuthy)
• [OPERATOR] Use validationContext consistently during validation (#47, @zanetworker)
• [OPERATOR] The OpenStack shoot validator now checks that workers[].minimum != 0 if workers[].maximum >0 since autoscaling does not support this setup yet. (#44, @timuthy)
• [OPERATOR] The OpenStack extension does now by default mount the host certificates from /etc/ssl and /usr/share/ca-certificates into the pods that are running in the seed and need to interact with the OpenStack API (kube-apiserver, kube-controller-manager (only until #1 is fixed), and cloud-controller-manager). (#39, @rfranzke)
  • This is to accommodate OpenStack environments that are serving certificates signed by CAs not commonly known/trusted.
• [DEVELOPER] Fix nil pointer when applying machine class chart (#43, @mvladev)

[gardener-extensions]

Improvements

• [USER] An issue in the machine reconciliation has been fixed that caused the reconciliation being stuck in some cases where a previously broken worker configuration (e.g., due to the specification of machine types that are not available in certain availability zones) has been corrected. (gardener-attic/gardener-extensions#626, @rfranzke)
• [USER] Allow force deletion of machines incase of cluster hibernation (gardener-attic/gardener-extensions#609, @prashanth26)
• [OPERATOR] An issue causing running terraformer container to leak on the Node without associated Pod resource is now fixed. This will prevent multiple containers to execute apply/destroy commands simultaneously in some cases (especially for long running terraformer Pods). (gardener-attic/gardener-extensions#605, @ialidzhikov)
• [OPERATOR] Credentials used by machine-controller-manager are now updated during worker deletion. (gardener-attic/gardener-extensions#606, @EmoinLanyu)

[machine-controller-manager]

Most notable changes

• [OPERATOR] Prepend mcm to all work queue metrics (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Subsystems and Namespaces to MCM metrics (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Renamed mcm_machine_deployment_items_total & mcm_machine_set_items_total metrics (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Bugfix: Set deleteOnTermination to true by default for volumes. Disks that are created with the instance are deleted with instance termination. (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Bugfix: Set deleteOnTermination to true by default for volumes. Disks that are created with the instance are deleted with instance termination. (gardener/machine-controller-manager#408, @hardikdr)

Improvements

• [USER] Azure: Support for accelerated networking enabled VMs (gardener/machine-controller-manager#438, @dkistner)
• [OPERATOR] Azure: VMs now can be created with image ID. (gardener/machine-controller-manager#436, @vpnachev)
• [OPERATOR] Improves the machine-creation and machine-deletion flow by listing and verifying the state of the machines before actual creation and deletion. (gardener/machine-controller-manager#432, @hardikdr)
• [OPERATOR] MCM now dynamically maps the node-objects with machines if Status.Node is not set. (gardener/machine-controller-manager#432, @hardikdr)
• [OPERATOR] Sort active machines by creation timestamp (gardener/machine-controller-manager#429, @prashanth26)
• [OPERATOR] Openstack: When a Server creation ERRORs, provide formatted Fault information (gardener/machine-controller-manager#427, @zuzzas)
• [OPERATOR] Set deleteOnTermination flag to true while deleting the VMs in AWS. (gardener/machine-controller-manager#420, @prashanth26)
• [OPERATOR] Skip eviction during drain if ForceDeletePods is enabled. (gardener/machine-controller-manager#416, @amshuman-kr)
• [OPERATOR] Openstack: Print API request/response debug when verbosity is set to 6 (gardener/machine-controller-manager#412, @kayrus)
• [OPERATOR] Azure: VM deletion checks any orphan dependant resources and tries to delete them if exists. (gardener/machine-controller-manager#406, @dkistner)
• [OPERATOR] Set deleteOnTermination flag to true while deleting the VMs in AWS. (gardener/machine-controller-manager#409, @prashanth26)
• [DEVELOPER] Azure: Update of the Azure SDK to use more recent version (gardener/machine-controller-manager#406, @dkistner)

[terraformer]

Improvements

• [OPERATOR] Update Terraform azurerm provider to support Azure NatGateway. (gardener/terraformer#35, @dkistner)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.4.0
gardener-extension-validator-openstack: eu.gcr.io/gardener-project/gardener/extensions/validator-openstack:v1.4.0

v1.3.0

[gardener-extension-provider-openstack]

Improvements

• [OPERATOR] Aligning MCM metrics scraper for MCM 0.26.1 version (#29, @prashanth26)
• [OPERATOR] Added support for custom root disk size (originally contributed by @afritzler via gardener/gardener-extensions#567). (14b7fd5)
• [OPERATOR] added integration tests for health checks for all extensions (originally contributed by @danielfoehrKn via gardener/gardener-extensions#563). (14b7fd5)

[machine-controller-manager]

Most notable changes

• [USER] Updated dependecies to refer k8s 1.16.0 (gardener/machine-controller-manager#401, @prashanth26)
• [OPERATOR] Prepend mcm to all work queue metrics (gardener/machine-controller-manager#405, @prashanth26)
• [OPERATOR] Subsystems and Namespaces to MCM metrics (gardener/machine-controller-manager#405, @prashanth26)
• [OPERATOR] Renamed mcm_machine_deployment_items_total & mcm_machine_set_items_total metrics (gardener/machine-controller-manager#405, @prashanth26)
• [OPERATOR] Promethus worker metrics have aligned with k8s version 1.16 (gardener/machine-controller-manager#401, @prashanth26)
• [OPERATOR] Healthz endpoint is immediately initialized with a healty (200) response (gardener/machine-controller-manager#375, @zuzzas)

Improvements

• [USER] Azure machines can now be deployed with an attached user assigned managed identity. (gardener/machine-controller-manager#395, @dkistner)
• [USER] Allows specifying multiple networks for a VM via the new OpenstackMachineClassSpec "networks" field (gardener/machine-controller-manager#376, @zuzzas)
• [OPERATOR] Stops reconciling machine objects that no longer exists (gardener/machine-controller-manager#403, @ggaurav10)
• [OPERATOR] Bugfix: Fixes race between machine & machineSet creation/deletion operations (gardener/machine-controller-manager#391, @prashanth26)
• [OPERATOR] Added Cinder based root disk support with customisable disk size (gardener/machine-controller-manager#388, @afritzler)
• [OPERATOR] Allow status to be defined when replicas is not defined or equal to 0. (gardener/machine-controller-manager#387, @rewiko)
  • category: improvement
  • target_group: user
• [OPERATOR] Added support for OpenStack machine image id. (gardener/machine-controller-manager#374, @afritzler)
• [OPERATOR] Avoided force-deleting the machine if previous drain has failed. (gardener/machine-controller-manager#373, @hardikdr)
• [OPERATOR] Drain logic now attempts to evict the pod till drain-timeout has occurred. The interval between consecutive attempts to evict the pod has been increased to 20s. (gardener/machine-controller-manager#370, @hardikdr)
• [OPERATOR] github.com/Azure/azure-sdk-for-go is updated to v32.6.0. (gardener/machine-controller-manager#369, @ialidzhikov)
• [OPERATOR] bootstrap token generation is handled at MCM (gardener/machine-controller-manager#351, @vlvasilev)
• [DEVELOPER] Fixed license header (gardener/machine-controller-manager#385, @afritzler)

[terraformer]

Most notable changes

• [DEVELOPER] The Google provider plugins have been upgraded to v3.4.0. (gardener/terraformer#33, @DockToFuture)

Improvements

• [DEVELOPER] add random provider (gardener/terraformer#34, @MartinWeindel)

Docker Images

gardener-extension-provider-openstack: eu.gcr.io/gardener-project/gardener/extensions/provider-openstack:v1.3.0