v1.44.0

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] The Helm charts for the application and runtime parts of the gardener-extension-admission-openstack admission controller have been separated into standalone charts. These charts now assume a Garden setup with a virtual garden. Both charts must be deployed individually: the runtime chart on the Garden runtime cluster, and the application chart on the virtual garden. Additionally, the intermediate global level in the Helm values has been removed, so you may need to adjust your provided values accordingly. by @MartinWeindel [#901]

✨ New Features

• [OPERATOR] Adjustments for additional deployment of extension and admission controller on Garden runtime cluster by gardener-operator. by @MartinWeindel [#901]

🐛 Bug Fixes

• [OPERATOR] management of the router interface missed some of openstack's owner labels assigned to the routers network interface causing the infrastructure conciliation to fail due to dublicated router network interfaces by @crigertg [#917]

🏃 Others

• [OPERATOR] Update Cinder CSI v1.30.1 -> v1.31.2 for shoots on v1.31.x by @kon-angelo [#915]
• [OPERATOR] Add NamespacedCloudProfile admission mutation and validation to support custom machine images and types. by @LucaBernstein [#911]
• [OPERATOR] Update Cinder CSI v1.30.1 -> v1.30.2 for shoots on v1.30.x by @kon-angelo [#915]
• [USER] Shoots with NodeLocalDNS enabled will use UDP instead of TCP for upstream DNS queries by default to avoid performance issues on OpenStack. by @domdom82 [#925]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.44.0
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.44.0
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.44.0

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.44.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.44.0

v1.43.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix an issue where the CSI-Provisioner was missing 'patch' permissions on PVs by @AndreasBurger [#924]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.43.1
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.43.1
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.43.1

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.43.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.43.1

v1.43.0

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] Deprecated configuring bastion via helm chart config map by @hebelsan [#838]

📰 Noteworthy

• [OPERATOR] Added support for configuring bastion vm from CloudProfile's bastion section by @hebelsan [#838]

🏃 Others

• [DEPENDENCY] Add gosec as sast makefile target by @hebelsan [#902]
• [DEPENDENCY] Update go to version 1.23.3 by @hebelsan [#900]
• [OPERATOR] Fix an issue where provider-openstack required permissions for share network operations even when not required by the InfrastructureConfig. by @kon-angelo [#885]
• [OPERATOR] Update gardener/gardener to v1.107.0 by @hebelsan [#896]
• [OPERATOR] Fix an issue where the deletion with the flow reconciler would fail if the network was already deleted. by @kon-angelo [#898]
• [OPERATOR] Added validation to prevent IPv6-only/dual-stack clusters as they are not supported, yet. by @ScheererJ [#886]
• [OPERATOR] Remove the duplicate provider type check from the admission webhooks. by @LucaBernstein [#895]
• [OPERATOR] Fix possible nil-pointer deref when looking for networks. during reconciliation by @AndreasBurger [#879]
• [OPERATOR] subnet overlapping, missing expected router and Policy doesn't allow .* to be performed errors are now non-retryable user errors. by @RadaBDimitrova [#894]
• [OPERATOR] Updating CSI driver provisioner ClusterRole rules by @hebelsan [#880]
• [DEVELOPER] Update gardener/gardener to v1.105.0 by @hebelsan [#881]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.43.0
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.43.0
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.43.0

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.43.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.43.0

v1.42.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix a bug that prevented the Cinder CSI from working on shoots with kubernetes version less than v1.28. by @kon-angelo [#876]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.42.1
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.42.1
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.42.1

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.42.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.42.1

v1.42.0

[gardener/gardener-extension-provider-openstack]

✨ New Features

• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#856]
• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#845]
• [OPERATOR] Allows the operator to configure whether he wants to deploy the standard ClusterFilters and/or StorageClass by @nschad [#830]
• [OPERATOR] Enable support for the field shoot.Spec.CloudProfile alongside shoot.Spec.CloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#834]
• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#811]

🐛 Bug Fixes

• [OPERATOR] Removed unnecessary preStop hook from node-driver-registrar in csi-driver-node, as socket removal is now handled internally by node-driver-registrar, resolving distroless image error. by @AndreasBurger [#802]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the gardener-extension-admission-openstack Helm chart. by @timuthy [#806]
• [OPERATOR] Starting with gardenlet >= v1.98.0, use controlplane webhook object selector to limit mutator calls. by @LucaBernstein [#797]
• [OPERATOR] Update cloud-provider-openstack images and remove credential use from nodeserver by @kon-angelo [#864]
• [OPERATOR] Update the VPA CRD used for testing locally by @hebelsan [#822]
• [OPERATOR] Update CSI sidecar containers to latest version. by @kon-angelo [#865]
• [OPERATOR] Adapt new WorkerPoolHash function in Gardener v1.98. by @Duciwuci [#816]
• [OPERATOR] Inserts architecture from worker to the machine class by @sssash18 [#820]
• [OPERATOR] The provider-openstack extension no longer configures min/maxAllowed in any managed VPA resource. by @kon-angelo [#863]
• [OPERATOR] Allow multiple loadBalancerProviders as the default and for a region by @lotharbach [#841]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#850]

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where the Unitialised error code was blocking machine deletion by @rishabh-11 [gardener/machine-controller-manager#928]

[gardener/machine-controller-manager-provider-openstack]

🏃 Others

• [DEVELOPER] Set repository PR template /platform from aws to openstack by @hebelsan [gardener/machine-controller-manager-provider-openstack#165]
• [DEVELOPER] Update golang to v1.23.1 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#175]
• [DEVELOPER] Update gardener to v1.103.0 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#175]
• [DEPENDENCY] Golang version updated to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-openstack#152]
• [OPERATOR] Allow input of pod CIDRs as slice. by @kon-angelo [gardener/machine-controller-manager-provider-openstack#177]
• [OPERATOR] Update machine-controller-manager to v0.54.0 by @kon-angelo [gardener/machine-controller-manager-provider-openstack#181]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.42.0
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.42.0
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.42.0

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.42.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.42.0

v1.41.2

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix an issue with share network reconciliation not calculating number of existing share networks correctly. by @AndreasBurger [#827]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.2
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.2

v1.41.1

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Fix a bug that would migrate shoots away from terraform during control-plane migration. This would occur only if the seed was marked to use the flow reconciler for new shoots. by @AndreasBurger [#825]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.1

v1.41.0

[gardener/gardener-extension-provider-openstack]

🏃 Others

• [OPERATOR] Add migration test for the infrastructure reconciler by @kon-angelo [#779]
• [OPERATOR] QoL improvements to the infrastructure reconciler by @kon-angelo [#779]
• [OPERATOR] A problem with deploying MachineClasses that reference an operating system image whose version contains a + character was fixed. by @AndreasBurger [#795]
• [USER] When a missing router is being encountered during reconciliation/deletion it will now be classified as ERR_INFRA_DEPENDENCIES, enabling force deletion of the shoot via annotation. by @AndreasBurger [#794]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.41.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.41.0

v1.40.1

[gardener/gardener-extension-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Fixes a monitoring configuration issue that caused false CCM-down alerts to fire. by @kon-angelo [#789]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.40.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.40.1

v1.40.0

[gardener/machine-controller-manager]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references. by @ccwienk [gardener/machine-controller-manager#878]

🐛 Bug Fixes

• [DEVELOPER] MCM restart happens properly in integration tests now. This fix will get activated, once this version is vendored in your mcm-provider by @sssash18 [gardener/machine-controller-manager#879]
• [OPERATOR] Fix for edge case of Node object deletion missed during machine termination. by @elankath [gardener/machine-controller-manager#887]

🏃 Others

• [OPERATOR] machine controller won't reconcile machine on non-spec update events by @himanshu-kun [gardener/machine-controller-manager#877]
• [OPERATOR] fixed IT for seed with k8s >= 1.27 as control cluster by @piyuagr [gardener/machine-controller-manager#869]
• [OPERATOR] Architecture field added in the nodetemplate. This will allow CA to pickup architecture from machine class and schedule pods on relevant arch nodes. by @sssash18 [gardener/machine-controller-manager#894]
• [DEVELOPER] go-git now removed from dependencies due to CVE's. by @elankath [gardener/machine-controller-manager#896]
• [DEVELOPER] Bump k8s.io/* deps to v0.28.2 by @afritzler [gardener/machine-controller-manager#858]

📖 Documentation

• [DEVELOPER] Phase transition diagram for a machine object is added to FAQs by @himanshu-kun [gardener/machine-controller-manager#886]

[gardener/terraformer]

🏃 Others

• [OPERATOR] Update go -> v1.21.5 by @kon-angelo [gardener/terraformer#146]
• [OPERATOR] Update alpine -> v1.29.0 by @kon-angelo [gardener/terraformer#146]

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] provider-openstack no longer supports Shoots with Кubernetes version == 1.24. by @shafeeqes [#702]
• [USER] [csi-snapshotter] Enable prevent-volume-mode-conversion feature flag by default. Volume mode change can still be triggered with the respective annotations. You can read more in the KEP by @kon-angelo [#732]

✨ New Features

• [OPERATOR] This extension now makes use of the new .spec.pools[].userDataSecretRef field to get to the worker pool user data. by @rfranzke [#776]
• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.30. You should consider the Kubernetes release notes before upgrading to 1.30. by @shafeeqes [#770]

🐛 Bug Fixes

• [DEVELOPER] source- prefix of BackupEntry name is being ignored when performing entry deletion by @Kostov6 [#726]

🏃 Others

• [DEPENDENCY] The following golang dependencies have been upgraded :
  • go: 1.21.1 to 1.22.1
  • gardener/gardener: v1.86.0->v1.91.2
  • k8s.io/* : v0.28.3 -> v0.29.3
  • sigs.k8s.io/controller-runtime: v0.16.3-> v0.17.2
  • sigs.k8s.io/controller-tools v0.13.0-> v0.14.0 by @hebelsan [#745]
• [OPERATOR] Add support for share networks in the flow reconciler. by @kon-angelo [#715]
• [OPERATOR] add os information as labels in machine class objects. by @tedteng [#735]
• [OPERATOR] This extension is now using the new way of providing monitoring configuration (ref GEP-19) in case a shoot cluster's Prometheus has been migrated to management via prometheus-operator. by @rfranzke [#766]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.92.0 to 1.93.0. by @dependabot[bot] [#755]
• [OPERATOR] NodeGroupAutoscalingOptions can now be specified per worker group via the worker through the field worker.spec.pools.clusterAutoscaler by @aaronfern [#752]
• [OPERATOR] Allows bastion to use images by ID instead of just by name. by @kon-angelo [#741]
• [OPERATOR] The controlplaneexposure.openstack.extensions.gardener.cloud webhook does no longer mutate Services/Deployments. Previously the webhook was called for Services/Deployments mutations and was not mutating anything. by @ialidzhikov [#772]
• [OPERATOR] provider-openstack will calculate a shoot's Egress CIDRs on infrastructure reconciliation. by @hebelsan [#763]
• [DEVELOPER] Infrastructure tests now support application credentials by @hebelsan [#742]

[gardener/machine-controller-manager-provider-openstack]

🐛 Bug Fixes

• [OPERATOR] Set DeleteOnTermination for in BlockDeviceMappings to false in case of volumes with RootDiskType. by @dergeberl [gardener/machine-controller-manager-provider-openstack#114]

🏃 Others

• [OPERATOR] Increase openstack poll interval to reduce the number of openstack API calls. by @dergeberl [gardener/machine-controller-manager-provider-openstack#115]
• [USER] upgraded mcm to v0.50.1 by @himanshu-kun [gardener/machine-controller-manager-provider-openstack#104]

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.40.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.40.0