gardener

Kubernetes-native system managing the full lifecycle of conformant Kubernetes clusters as a service on Alicloud, AWS, Azure, GCP, OpenStack, vSphere, KubeVirt, Hetzner, EquinixMetal, MetalStack, and OnMetal with minimal TCO.

OTHER License

Stars
2.7K
Committers
211
View Code on GitHub Visit Website View on X
Ecosystems: Azure, Kubernetes, Amazon Web Services, Go

Bot releases are visible (Hide)

gardener - v1.55.0

Published by gardener-robot-ci-1 about 2 years ago

[gardener]

⚠️ Breaking Changes

✨ New Features

  • [USER] The KubeletConfiguration.Registry{PullQPS,Burst} fields are configurable via Shoot.spec.{provider.workers[]}.kubernetes.kubelet.registry{PullQPS,Burst} now. (gardener/gardener#6591, @timebertt)
  • [OPERATOR] It is now possible to override the kubeconfig validity as well as the auto-rotation jitter boundaries for the gardenlet via its component configuration. By default, the --cluster-signing-duration value of the kube-controller-manager in the garden cluster still applies, and the kubeconfig is renewed when 70%-90% of its validity expires. (gardener/gardener#6568, @rfranzke)
  • [OPERATOR] Gardenlet now checks that the seed network configuration conforms to the reality in the seed cluster in case the seed is a shoot itself. (gardener/gardener#6576, @ScheererJ)
  • [OPERATOR] Add gardenlet feature gate to automatically rewrite some dns requests to reduce amount of requests being made due to dns search path and ndots=5. (gardener/gardener#6192, @ScheererJ)
  • [OPERATOR] Adds prometheus metrics required for multi-node etcd. (gardener/gardener#6601, @ishan16696)
  • [DEVELOPER] The existing ManagedSeed e2e test has been enhanced with verifications for the three gardenlet kubeconfig rotation scenarios. (gardener/gardener#6568, @rfranzke)
  • [DEVELOPER] The local gardener setup includes pull-through cache registries now to speed up development and testing. (gardener/gardener#6591, @timebertt)

🐛 Bug Fixes

  • [OPERATOR] A bug has been fixed which caused the EveryNodeReady condition on Shoots to become False and complaining about outdated cloud configs on nodes during rolling updates. (gardener/gardener#6555, @rfranzke)
  • [OPERATOR] Operation of a seed using cilium as networking provider and node-local-dns is now working. (gardener/gardener#6583, @ScheererJ)
  • [OPERATOR] A bug in the monitoring configuration that was scraping the deprecated metric etcd_object_counts even for k8s >= 1.21 has been fixed. (gardener/gardener#6584, @vpnachev)
  • [OPERATOR] Fix worker group dropdown in "Node/Worker Pool Overview" dashboard. (gardener/gardener#6594, @rickardsjp)
  • [OPERATOR] A bug in resourcemanager that not all truthy values were considered for the resources.gardener.cloud/ignore annotation value is fixed. (gardener/gardener#6603, @vpnachev)
  • [OPERATOR] An issue that could potentially cause Pod to fail to be scheduled when the bin-packing scheduling profile is used is now fixed. When the kube-apiserver fails to call the pod-scheduler-name.resources.gardener.cloud webhook the corresponding Pod will be scheduled according to the default-scheduler. (gardener/gardener#6610, @ialidzhikov)
  • [OPERATOR] Fix the network metrics for clusters with containerd. (gardener/gardener#6628, @istvanballok)
    • The "Kubernetes Pods" dashboard's "Network I/O" panel showed no data for clusters with containerd. Now it correctly shows the network metrics (sent and received bytes/s) for pods that are not in the host network namespace, also for clusters with containerd. For pods in the host network namespace no network metrics are shown because by definition the host network namespace's network stats include all the pods and system services and hence are not meaningful in the context of a specific pod. This explanation is as also included on the dashboard to avoid confusion due to missing data.
    • The "Node Details" dashboard's "Network I/O Pressure" panel showed incorrect readings for clusters with docker and no data for clusters with containerd. Both aspects are fixed.

🏃 Others

  • [OPERATOR] If a config for PodSecurity admission plugin is provided in the Shoot spec, kube-system is added to the exempted namespace. (gardener/gardener#6549, @shafeeqes)
  • [OPERATOR] The ExtensionsReady condition for Seeds will first be set to Progressing instead of being directly set to False when a ExtensionsReady condition threshold is specified in the controllers.seedExtensionsCheck.conditionThresholds configuration for the gardener controller manager and that threshold has not expired yet. (gardener/gardener#6551, @plkokanov)
  • [OPERATOR] The container_oom_events_total metric is allow listed and added to the Kubernetes Pods dashboard (gardener/gardener#6564, @istvanballok)
  • [OPERATOR] Gardener-managed webhooks are no longer considered by the shoot care controller when it comes to finding problematic webhooks. (gardener/gardener#6573, @rfranzke)
  • [OPERATOR] Specify the kubelet flag runtime-cgroups when using containerd (gardener/gardener#6574, @istvanballok)
    • The node details dashboard shows the resource usage of the system services (kubelet and containerd) for containerd based clusters
  • [OPERATOR] The BackupBucketsReady condition for Seeds will first be set to Progressing instead of being directly set to False when a BackupBucketsReady condition threshold is specified in the controllers.seedBackupBucketsCheck.conditionThresholds configuration for the gardener controller manager and that threshold has not expired yet. (gardener/gardener#6587, @plkokanov)
  • [OPERATOR] Added condition with type Progressing to the ControllerInstallation resource, which is maintained based on the ResourcesProgressing condition of the ManagedResource created for the ControllerInstallation (gardener/gardener#6590, @plkokanov)
  • [OPERATOR] When the ExtensionsReady condition is evaluated, the ControllerInstallations Progressing condition is now also taken into account. When the Progressing condition is not False, the ExtensionsReady condition will be evaluated to False (gardener/gardener#6590, @plkokanov)
  • [OPERATOR] Kubernetes container images are now pulled from registry.k8s.io instead of k8s.gcr.io, see the announcement. (gardener/gardener#6591, @timebertt)
  • [OPERATOR] The GA-ed SecretBindingProviderValidation feature gate is removed and can no longer be specified via the gardener-apiserver's --feature-gates flags . (gardener/gardener#6593, @ialidzhikov)
  • [OPERATOR] Improve the Node/Worker Pool Overview dashboard (gardener/gardener#6595, @istvanballok)
  • [OPERATOR] gardenlet's SeedKubeScheduler feature gate is now deprecated in favor of the bin-packing scheduling profile that can be configured for a Shoot referred by a ManagedSeed. (gardener/gardener#6599, @ialidzhikov)
  • [OPERATOR] The gardener grafana dashboards are serialized with the "compact" JSON representation into the configmap to avoid reaching the configmap size limit. (gardener/gardener#6605, @istvanballok)
  • [OPERATOR] Adapt blackbox exporter resource requests to VPA recommendations (gardener/gardener#6609, @istvanballok)
  • [OPERATOR] Update envoy proxy to v1.23.1. (gardener/gardener#6366, @ScheererJ)

[etcd-backup-restore]

🐛 Bug Fixes

🏃 Others

📰 Noteworthy

[etcd-custom-image]

🏃 Others

[etcd-druid]

✨ New Features

🐛 Bug Fixes

  • [USER] Fix statefulset volumeClaimTemplate StorageClassName value population if etcd storageClass is an empty string. (gardener/etcd-druid#400, @shreyas-s-rao)
  • [OPERATOR] This PR fixes an issue which caused the sts.spec.podManagementPolicy not to be updated to Parallel if an existing etcd cluster is scaled-up from 1 -> x. This can cause an issue if the cluster is afterwards completely scaled-down (aka hibernation) and scaled-up again. (gardener/etcd-druid#406, @timuthy)
  • [OPERATOR] An issue has been fixed that caused Etcd-Druid to update immutable fields sts.spec.serviceName and sts.spec.podManagementPolicy for older etcd resources that had different values configured. These updates must only happen when a etcd cluster is scaled up for the first time (1 -> x) because (a) then these values are mandatory and (b) a disruption is accepted. (gardener/etcd-druid#408, @timuthy)
  • [OPERATOR] An issue has been fixed that caused Etcd-Druid to not consider the hostPath configuration in the referenced backup secret etcd.spec.backup.store.secretRef. (gardener/etcd-druid#412, @timuthy)

🏃 Others

  • [OPERATOR] Liveness and startup probes for etcd were removed. After activating them, we noticed that they cause more harm than good since the startup time for etcd clusters varies and isn't predicable. Killing the etcd container in such a case doesn't solve the situation and will rather end in an endless loop of restarts. This change will cause a restart of etcd clusters. (gardener/etcd-druid#424, @aaronfern)
  • [OPERATOR] Liveness and startup probes for etcd were removed. After activating them in the last release, we noticed that they cause more harm than good since the startup time for etcd clusters varies and isn't predicable. Killing the etcd container in such a case doesn't solve the situation and will rather end in an endless loop of restarts. This change will cause a restart of etcd clusters. (gardener/etcd-druid#423, @timuthy)
  • [OPERATOR] The Golang version used to compile Etcd-Druid has been updated to go 1.18.5. (gardener/etcd-druid#410, @timuthy)
  • [OPERATOR] Adds a document mentioning the metrics for multi-node etcd. (gardener/etcd-druid#414, @ishan16696)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.55.0
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.55.0
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.55.0
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.55.0
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.55.0
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.55.0
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.55.0

gardener - v1.53.4

Published by gardener-robot-ci-3 about 2 years ago

[gardener]

🏃 Others

[etcd-druid]

🐛 Bug Fixes

  • [OPERATOR] This PR fixes an issue which caused the sts.spec.podManagementPolicy not to be updated to Parallel if an existing etcd cluster is scaled-up from 1 -> x. This can cause an issue if the cluster is afterwards completely scaled-down (aka hibernation) and scaled-up again. (gardener/etcd-druid#406, @timuthy)

🏃 Others

  • [OPERATOR] Liveness and startup probes for etcd were removed. After activating them, we noticed that they cause more harm than good since the startup time for etcd clusters varies and isn't predicable. Killing the etcd container in such a case doesn't solve the situation and will rather end in an endless loop of restarts. This change will cause a restart of etcd clusters. (gardener/etcd-druid#424, @aaronfern)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.53.4
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.53.4
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.53.4
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.53.4
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.53.4
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.53.4
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.53.4

gardener - v1.54.1

Published by gardener-robot-ci-3 about 2 years ago

[gardener]

🏃 Others

[etcd-druid]

🐛 Bug Fixes

  • [OPERATOR] This PR fixes an issue which caused the sts.spec.podManagementPolicy not to be updated to Parallel if an existing etcd cluster is scaled-up from 1 -> x. This can cause an issue if the cluster is afterwards completely scaled-down (aka hibernation) and scaled-up again. (gardener/etcd-druid#406, @timuthy)

🏃 Others

  • [OPERATOR] Liveness and startup probes for etcd were removed. After activating them, we noticed that they cause more harm than good since the startup time for etcd clusters varies and isn't predicable. Killing the etcd container in such a case doesn't solve the situation and will rather end in an endless loop of restarts. This change will cause a restart of etcd clusters. (gardener/etcd-druid#424, @aaronfern)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.54.1
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.54.1
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.54.1
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.54.1
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.54.1
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.54.1
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.54.1

gardener - v1.51.1

Published by gardener-robot-ci-2 about 2 years ago

[gardener]

🐛 Bug Fixes

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.51.1
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.51.1
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.51.1
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.51.1
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.51.1
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.51.1
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.51.1

gardener - v1.52.3

Published by gardener-robot-ci-3 about 2 years ago

[gardener]

🐛 Bug Fixes

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.52.3
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.52.3
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.52.3
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.52.3
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.52.3
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.52.3
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.52.3

gardener - v1.53.3

Published by gardener-robot-ci-3 about 2 years ago

[gardener]

🐛 Bug Fixes

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.53.3
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.53.3
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.53.3
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.53.3
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.53.3
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.53.3
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.53.3

gardener - v1.54.0

Published by gardener-robot-ci-3 about 2 years ago

[gardener]

⚠️ Breaking Changes

✨ New Features

🐛 Bug Fixes

🏃 Others

[ext-authz-server]

✨ New Features

🏃 Others

[logging]

✨ New Features

  • [OPERATOR] The event-logger watches events of multiple namespaces specified by --seed-event-namespaces and --shoot-event-namespaces like comma-separated values. (gardener/logging#142, @vlvasilev)
    • The flags --seed-event-namespace and --shoot-event-namespace are dropped.

🐛 Bug Fixes

🏃 Others

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.54.0
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.54.0
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.54.0
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.54.0
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.54.0
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.54.0
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.54.0

gardener - v1.53.2

Published by gardener-robot-ci-1 about 2 years ago

[gardener]

🐛 Bug Fixes

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.53.2
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.53.2
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.53.2
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.53.2
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.53.2
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.53.2
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.53.2

gardener - v1.53.1

Published by gardener-robot-ci-1 about 2 years ago

[gardener]

🐛 Bug Fixes

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.53.1
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.53.1
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.53.1
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.53.1
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.53.1
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.53.1
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.53.1

gardener - v1.53.0

Published by gardener-robot-ci-3 about 2 years ago

[gardener]

⚠️ Breaking Changes

  • [OPERATOR] The SecretBindingProviderValidation feature gate of gardener-apiserver is promoted to GA and is now unconditionally enabled. (gardener/gardener#6429, @ialidzhikov)
  • [OPERATOR] The logging.loki.garden.priority field is removed from gardenlet's component config as it is no longer used after the new concept for PriorityClasses in Gardener. (gardener/gardener#6465, @ialidzhikov)
  • [OPERATOR] The Gardener API server now enforces the following configuration options for ManagedSeed resources: (gardener/gardener#6388, @ialidzhikov)
      1. The vertical pod autoscaler should be enabled from the Shoot specification.
      1. The nginx-ingress addon should not be enabled for a Shoot referred by a ManagedSeed.
    • Before upgrading to this version of Gardener make sure that all ManagedSeeds and the Shoots they refer to conform the newly enforced configuration options.

✨ New Features

🐛 Bug Fixes

  • [USER] K8s dependencies are upgraded to v0.24.3 to adopt a fix in the k8s.io/apiserver module that causes gardener-apiserver to do not always return the expected result when the client requests resources with the --selector / --field-selector flags. (gardener/gardener#6443, @ialidzhikov)
  • [OPERATOR] A bug causing gardenlet helm chart deployment to fail is fixed. (gardener/gardener#6432, @acumino)
  • [OPERATOR] A bug has been fixed for HA shoots and their underlying etcd clusters. In some occasions, Gardenlet didn't wait for changes to be completely rolled out to etcd. Especially in combination with the CA-rotation feature this could cause the cluster being stuck in an unrecoverable state. (gardener/gardener#6434, @timuthy)
  • [OPERATOR] An issue causing the Seed nginx-ingress to fail on 1.22 GKE Seed cluster (or any 1.22 Seed cluster with K8s version that has a suffix - for example v1.22.12-gke.300) is now fixed. (gardener/gardener#6468, @ialidzhikov)

🏃 Others

  • [OPERATOR] Owner checks (which are used by the backup-restore sidecar to determine whether the owner domain name resolves to the specified owner ID and if not, take a final full snapshot and disable the cluster), will no longer be enabled by gardenlet, if the HAControlPlanes feature gate is enabled, the Shoot is annotated with alpha.control-plane.shoot.gardener.cloud/high-availability and the Shoot's ETCDs are started as a cluster (with more than 1 replica). (gardener/gardener#6412, @plkokanov)
  • [OPERATOR] node-problem-detector image is updated from k8s.gcr.io/node-problem-detector/node-problem-detector:v0.8.7 to eu.gcr.io/gardener-project/3rd/node-problem-detector:v0.8.10-gardener.1. (gardener/gardener#6415, @acumino)
  • [OPERATOR] The node-exporter is configured to collect filesystem metrics for the /run mount point. (gardener/gardener#6424, @istvanballok)
  • [OPERATOR] The following image is updated: (gardener/gardener#6428, @rishabh-11)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v1.22.2 -> v1.23.1 (for Kubernetes >= 1.23)
  • [OPERATOR] Latency metrics of the proxy subresource are not considered for the KubeApiServerLatency alert and API Server / Request Latency dashboard panel. (gardener/gardener#6445, @istvanballok)
  • [OPERATOR] The following images are updated: (gardener/gardener#6449, @rishabh-11)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v1.20.2 -> v1.20.3 (for Kubernetes 1.20)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v1.21.2 -> v1.21.3 (for Kubernetes 1.21)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v1.22.2 -> v1.22.3 (for Kubernetes 1.22)
  • [OPERATOR] The node-local-dns/node-cache container no longer runs in privileged mode. (gardener/gardener#6451, @ialidzhikov)
  • [OPERATOR] The SeedChange and CopyEtcdBackupsDuringControlPlaneMigration feature gates have been promoted to beta and are now enabled by default. (gardener/gardener#6452, @plkokanov)
  • [OPERATOR] The following images is updated: (gardener/gardener#6456, @ScheererJ)
    • k8s.gcr.io/dns/k8s-dns-node-cache: 1.22.5 -> v1.22.8
  • [OPERATOR] Workaround for https://issues.k8s.io/109286 is now only executed for < 1.25 Shoots. In K8s 1.25+ the issue is fixed with https://github.com/kubernetes/kubernetes/pull/109288 and we no longer need to execute the workaround. (gardener/gardener#6457, @ialidzhikov)
  • [OPERATOR] Use priority class gardener-system-500 for etcd, as per https://github.com/gardener/gardener/issues/5634. (gardener/gardener#6467, @shreyas-s-rao)

[dependency-watchdog]

🐛 Bug Fixes

  • [OPERATOR] A bug is fixed which allowed dependency-watchdog to not ignore scaling operations on deployment which are not enabled/deployed in a given cluster (gardener/dependency-watchdog#41, @ashwani2k)
    • A bug with uploading of a rotated dependency-watchdog-probe secrets is now fixed by refreshing the clients with updated secrets.

🏃 Others

📰 Noteworthy

[etcd-backup-restore]

⚠️ Breaking Changes

  • [OPERATOR] Dropping the feature of passing storage container credentials through ENV for the following storage provider: S3, Swift, OCS, ABS, OSS. Please switch to pass the storage container credentials through volume file mount. (gardener/etcd-backup-restore#493, @ishan16696)
  • [DEVELOPER] Added new package membergarbagecollector to remove superfluous members from the ETCD cluster. Due to this, etcd-backup-restore now needs permissions to list pods and statefulsets. (gardener/etcd-backup-restore#403, @aaronfern)

🏃 Others

📰 Noteworthy

[etcd-custom-image]

🏃 Others

[etcd-druid]

⚠️ Breaking Changes

  • [OPERATOR] The entrypoint for etcd-druid in its container image has been modified. (gardener/etcd-druid#360, @dimityrmirchev)
  • [OPERATOR] etcd Statefulsets are not claimed anymore based on labels. Instead, the statefulsets are fetched using Name and Namespace combination. Thus, etcd.spec.selector does not have an effect on statefulsets anymore. (gardener/etcd-druid#365, @abdasgupta)

✨ New Features

🐛 Bug Fixes

  • [USER] Fix statefulset volumeClaimTemplate StorageClassName value population if etcd storageClass is an empty string. (gardener/etcd-druid#401, @shreyas-s-rao)
  • [USER] Temporarily fix issue where PodManagementPolicy was trying to be updated from OrderedReady to Parallel for older shoots (created using etcd-druid:v0.8.5 and before), but the statefulset forbids updates to this field. (gardener/etcd-druid#402, @shreyas-s-rao)
  • [USER] Temporarily fixes an issue where druid tries to set spec.ServiceName to PeerServiceName by default, although older single-node etcds would have this field set to ClientServiceName, and updation of statefulset spec.ServiceName field is forbidden. (gardener/etcd-druid#403, @shreyas-s-rao)
  • [OPERATOR] A bug has been fixed that caused the etcd-backup-restore side-car to connect to the etcd cluster via the peer-service URL. The side-car is supposed to use the client-service instead since it a) exposes client port 2379 and b) redirects traffic only to members which are ready to service traffic. (gardener/etcd-druid#388, @timuthy)
  • [OPERATOR] An issue has been fixed that caused the liveness and readiness probes of etcd to always succeed even though an error was reported. This prevented defective etcd pods from being restarted automatically and caused unready candidates being considered as ready to serve traffic via the etcd service. (gardener/etcd-druid#396, @timuthy)
  • [OPERATOR] A startup probe has been added to etcd to allow 2 minutes of initialization time before checking for etcd liveness. (gardener/etcd-druid#396, @timuthy)

🏃 Others

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.53.0
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.53.0
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.53.0
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.53.0
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.53.0
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.53.0
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.53.0

gardener - v1.52.2

Published by gardener-robot-ci-1 about 2 years ago

[gardener]

🐛 Bug Fixes

  • [USER] K8s dependencies are upgraded to v0.24.3 to adopt a fix in the k8s.io/apiserver module that causes gardener-apiserver to do not always return the expected result when the client requests resources with the --selector / --field-selector flags. (gardener/gardener#6447, @gardener-ci-robot)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.52.2
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.52.2
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.52.2
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.52.2
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.52.2
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.52.2
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.52.2

gardener - v1.52.1

Published by gardener-robot-ci-1 about 2 years ago

[gardener]

🐛 Bug Fixes

gardener - v1.52.0

Published by gardener-robot-ci-3 about 2 years ago

[gardener]

⚠️ Breaking Changes

  • [OPERATOR] Gardener's component configuration APIs have been changed in the following breaking ways: (gardener/gardener#6333, @timebertt)
    • kubernetesLogLevel has been removed from all component configs
    • ControllerManagerConfiguration.server.http has been split into server.{healthProbes,metrics} (health endpoints and metrics are now served on different ports)
    • ControllerManagerConfiguration.server.https has been removed
  • [OPERATOR] gardener-controller-manager serves health endpoints and metrics on different ports now. Adapt your scrape configs accordingly to port metrics. (gardener/gardener#6333, @timebertt)
  • [OPERATOR] The DisableDNSProviderManagement feature gate has been promoted to GA and is now unconditionally enabled. If the shoot-dns-service extension is deployed, please make sure following prerequistes are given for a smoothly transition: (gardener/gardener#6341, @MartinWeindel)
    • The shoot-dns-service extension must be installed in a version >= v1.20.0.
    • The controller deployment of the shoot-dns-service sets providerConfig.values.dnsProviderManagement.enabled=true
    • Its admission controller (gardener-extension-admission-shoot-dns-service) is deployed on the garden cluster
    • the dns-external extension must still be installed
  • [OPERATOR] The already deprecated shoot.gardener.cloud/use-as-seed annotation (since v1.18.0) is no longer supported for creating Shooted Seed clusters. Please check the following documentation on how to migrate from the use-as-seed annotation to ManagedSeeds. Before updating to this version of Gardener, make sure that you migrated to ManagedSeeds and that you no longer have usages of the use-as-seed annotation on the landscape. (gardener/gardener#6379, @ialidzhikov)
  • [DEPENDENCY] Extension health check types are moved from github.com/gardener/gardener/extensions/pkg/controller/healthcheck/config to github.com/gardener/gardener/extensions/pkg/apis/config (gardener/gardener#6276, @oliver-goetz)
  • [DEPENDENCY] hack/install-requirements.sh is removed. You can use hack/tools.mk to install tools needed for development and CI. (gardener/gardener#6323, @timebertt)
  • [DEPENDENCY] All Actuator interfaces for extension controllers have been extended and now receive a logr.Logger passed from the reconciler with the proper context of the reconciled object. (gardener/gardener#6332, @rfranzke)
  • [DEPENDENCY] Some signatures in pkg/controllerutils/mapper have changed to support the simple injection of a proper context and logger. (gardener/gardener#6358, @rfranzke)

✨ New Features

  • [USER] The machine image defaulting does now work based on the CPU architecture of the machine in a given worker pool. (gardener/gardener#6324, @acumino)
  • [USER] The Shoot maintenance controller has been enhanced to auto-update the machine image of the worker pool in a Shoot based on the CPU architecture of the machines. (gardener/gardener#6327, @acumino)
  • [DEVELOPER] Allow passing custom REST configuration settings (QPS, Burst, Timeout) to extension shoot clients. (gardener/gardener#6276, @oliver-goetz)
  • [DEVELOPER] If a resource in the ManagedResource is annotated with resources.gardener.cloud/skip-health-check=true then the resource will be skipped during health checks by the health controller. The ManagedResource conditions will not reflect the health condition of this resource anymore. The ResourcesProgressing condition will also be set to False. (gardener/gardener#6309, @shafeeqes)

🐛 Bug Fixes

  • [USER] Fixed a bug that prevented Shoots from being able to use expander: priority for cluster-autoscaler (gardener/gardener#6372, @voelzmo)
  • [USER] A bug that prevented Shoot deletion when the OS image version or kubernetes version was beyond its expiration date is now fixed. (gardener/gardener#6389, @voelzmo)
  • [OPERATOR] An issue causing a panel in the Node/Worker Pool Overview dashboard to fail to load due to invalid query is now fixed. (gardener/gardener#6406, @Sallyan)
  • [OPERATOR] A bug causing gardenlet to panic in case of shoot using namespace which doesn't have the required project label is fixed. (gardener/gardener#6408, @acumino)
  • [DEVELOPER] Downloading several tools vial ./hack/tools.mk has been fixed for ARM64 based Linux machines. (gardener/gardener#6314, @timuthy)

🏃 Others

[apiserver-proxy]

🏃 Others

[etcd-backup-restore]

⚠️ Breaking Changes

  • [DEVELOPER] Added new package membergarbagecollector to remove superfluous members from the ETCD cluster. Due to this, etcd-backup-restore now needs permissions to list pods and statefulsets. (gardener/etcd-backup-restore#403, @aaronfern)

🐛 Bug Fixes

🏃 Others

📰 Noteworthy

[etcd-custom-image]

🏃 Others

[etcd-druid]

🏃 Others

[hvpa-controller]

🏃 Others

[vpn2]

📰 Noteworthy

  • [OPERATOR] VPN shoot client can now be run with a privileged init container and a non-privileged runtime container (gardener/vpn2#12, @ScheererJ)
  • [OPERATOR] vpn-seed-server and vpn-shoot-client container images now contain only a reduced set of binary/libaries. (gardener/vpn2#14, @ScheererJ)
  • [OPERATOR] Add missing sleep command to minimized container image. (gardener/vpn2#16, @ScheererJ)
  • [OPERATOR] Switched openvpn topology to subnet and ensured that the chosen cipher is always selected. (gardener/vpn2#15, @ScheererJ)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.52.0
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.52.0
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.52.0
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.52.0
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.52.0
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.52.0
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.52.0

gardener - v1.50.2

Published by gardener-robot-ci-3 over 2 years ago

[gardener]

🐛 Bug Fixes

gardener - v1.48.7

Published by gardener-robot-ci-1 over 2 years ago

[gardener]

🐛 Bug Fixes

gardener - v1.49.4

Published by gardener-robot-ci-1 over 2 years ago

[gardener]

🐛 Bug Fixes

gardener - v1.51.0

Published by gardener-robot-ci-3 over 2 years ago

[gardener]

⚠️ Breaking Changes

  • [USER] The kubeReserved and systemReserved specs of workers are now validated against the node allocatable resources of the corresponding machine type. (gardener/gardener#6198, @shafeeqes)
  • [USER] The SecretBindingProviderValidation feature gate of gardener-apiserver is now promoted to beta and enabled by default. This enables the following validations: (gardener/gardener#6240, @ialidzhikov)
    • requires the provider type of a SecretBinding to be set (on SecretBinding creation)
    • requires the SecretBinding provider type to match the Shoot provider type (on Shoot creation)
    • enforces immutability on the provider type of a SecretBinding
  • [OPERATOR] The TestMachinery-based ManagedSeed tests (including the related TestDefinitions in the .test-defs directory) have been deleted in favor of new e2e tests. (gardener/gardener#6293, @rfranzke)
  • [OPERATOR] The GA-ed or deprecated ShootMaxTokenExpiration{Overwrite,Validation} and RotateSSHKeypairOnMaintenance feature gates have been removed. (gardener/gardener#6241, @rfranzke)
  • [OPERATOR] The ShootCARotation and ShootSARotation feature gates have been promoted to beta and are now enabled by default. Make sure that all provider extensions registered to your system support these features before upgrading to this Gardener version. (gardener/gardener#6252, @rfranzke)
  • [OPERATOR] The minimum Kubernetes version for garden and seed clusters is now 1.20. Make sure to upgrade your clusters to at least 1.20 before deploying this Gardener version. (gardener/gardener#6255, @rfranzke)
  • [DEPENDENCY] Gardener extensions which contain a worker controller need to implement functions: PreReconcileHook, PostReconcileHook, PreDeleteHook, PostDeleteHook. The functions DeployMachineDependencies and CleanupMachineDependencies are now deprecated and will be removed in a future release. The logic of those deprecated functions can be moved to the respective pre/post hook functions. (gardener/gardener#6290, @dkistner)

✨ New Features

  • [USER] It is now possible to provide additional containerd configuration for shoot worker nodes, please take a look at this document for more information. (gardener/gardener#6293, @rfranzke)
  • [USER] The Shoot spec now supports selecting scheduling profiles. Apart from the "balanced" (aka "default") profile it is possible to configure a bin-packing profile (alpha feature). For more details see the usage docs. (gardener/gardener#6251, @ialidzhikov)
  • [OPERATOR] The new ShootNodeLocalDNSEnabledByDefault admission plugin of the gardener-apiserver (disabled by default) controls whether the .spec.systemComponents.nodeLocalDNS.enabled field for newly created Shoot resources is defaulted to true. Existing Shoots are not modified. Shoot's can still explicitly disable the node local dns cache by setting .spec.systemComponents.nodeLocalDNS.enabled=false. See this document. (gardener/gardener#6279, @DockToFuture)
  • [DEVELOPER] provider-local does now support ManagedSeeds in the Skaffold-based environment. (gardener/gardener#6293, @rfranzke)
  • [DEVELOPER] A new testing strategy and developer guideline has been added. Make sure to check out the document if you want to learn more about the different kinds of tests we use and how to best write them! (gardener/gardener#6245, @timebertt)
  • [DEPENDENCY] Add Bastion config validator (gardener/gardener#6197, @tedteng)

🐛 Bug Fixes

  • [OPERATOR] A bug has been fixed which prevented automatic remediation of webhooks in case there was at least one webhook with failurePolicy=Ignore. (gardener/gardener#6277, @rfranzke)
  • [OPERATOR] Health checks of ManagedResources are more reliable now when updating resources in the referenced secrets. (gardener/gardener#6136, @ary1992)
  • [OPERATOR] Differentiate the vpa metrics for the seed and control planes to avoid conflicts in prometheus when the recording rules are evaluated. (gardener/gardener#6303, @istvanballok)
  • [OPERATOR] Fixed an issue that could cause a Shoot's control plane namespace to be orphaned. This could happen when control plane migration is triggered, but does not start because the destination Seed is not Ready yet, and meanwhile the Shoot is deleted. (gardener/gardener#6206, @plkokanov)
  • [DEPENDENCY] The recent changes to the "github.com/gardener/gardener/extensions/pkg/controller/healthcheck/config".HealthCheckConfig type that added client configuration settings are now reverted. (gardener/gardener#6248, @ialidzhikov)

🏃 Others

  • [OPERATOR] The following images are updated: (gardener/gardener#6224, @istvanballok)
    • registry.k8s.io/kube-state-metrics/kube-state-metrics: v1.9.7 -> v2.1.1 (for kubernetes < 1.20)
    • registry.k8s.io/kube-state-metrics/kube-state-metrics: v1.9.7 -> v2.5.0 (for kubernetes >= 1.20)
  • [OPERATOR] Updated vertical-pod-autoscaler to v0.11.0 (gardener/gardener#6243, @voelzmo)
  • [DEVELOPER] Removed unnecessary PATCH to machine.status.node during restoration of machine objects. (gardener/gardener#6205, @plkokanov)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.51.0
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.51.0
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.51.0
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.51.0
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.51.0
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.51.0
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.51.0

gardener - v1.50.1

Published by gardener-robot-ci-3 over 2 years ago

[gardener]

🐛 Bug Fixes

  • [DEPENDENCY] The recent changes to the "github.com/gardener/gardener/extensions/pkg/controller/healthcheck/config".HealthCheckConfig type that added client configuration settings are now reverted. (gardener/gardener#6250, @gardener-ci-robot)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.50.1
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.50.1
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.50.1
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.50.1
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.50.1
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.50.1
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.50.1

gardener - v1.50.0

Published by gardener-robot-ci-3 over 2 years ago

[gardener]

⚠️ Breaking Changes

  • [USER] Changing the spec.seedName for Shoots is now possible only via the new shoots/binding subresource. Patches to spec.seedName in the Shoot will not have any effect anymore. Please see this document for more information. (gardener/gardener#6018, @shafeeqes)
  • [OPERATOR] The WorkerPoolKubernetesVersion feature gate has been promoted to GA and is now unconditionally enabled. Make sure that all provider extensions registered to your system support this feature before upgrading to this Gardener version. (gardener/gardener#6166, @rfranzke)
  • [OPERATOR] Patches to spec.seedName field in the shoot manifest will be rejected. Please use the shoots/binding subresource instead. (gardener/gardener#6179, @shafeeqes)
  • [OPERATOR] The DisableDNSProviderManagement feature gate has been promoted to beta and is now enabled by default. If you are using the Gardener extension shoot-dns-service make sure to deploy version >= v1.20.0 and to set providerConfig.values.dnsProviderManagement.enabled=true in its controller deployment. The shoot DNS service admission controller (gardener-extension-admission-shoot-dns-service) must be deployed on the garden cluster. (gardener/gardener#6142, @MartinWeindel)
  • [DEPENDENCY] Files in ./extensions/test have been moved to ./test package, Please adapt the import paths accordingly: (gardener/gardener#6158, @shafeeqes)
    • https://github.com/gardener/gardener/tree/master/extensions/test/testmachinery has been moved to https://github.com/gardener/gardener/tree/master/test/testmachinery/extensions
    • https://github.com/gardener/gardener/tree/master/extensions/test/integration has been moved to https://github.com/gardener/gardener/tree/master/test/integration/extensions/controller
  • [DEPENDENCY] Gardenlet now manages fine-granular PriorityClasses that are supposed to be used by all components in order to improve the overall robustness of the system. (gardener/gardener#6186, @timebertt)
    • Find out more in the related documentation.
    • Extensions need to migrate all their extension controller pods as well as their shoot control plane and shoot system components to the newly defined PriorityClasses and drop custom ones.
    • Legacy PriorityClass gardener-shoot-controlplane is deprecated and will be removed in a future release.

✨ New Features

  • [USER] In case at least one shoot cluster CA certificate is about to expire in less than 1y, a new constraint of type CACertificateValiditiesAcceptable will be visible in the .status.constraints to make end-users aware that a rotation should be performed. (gardener/gardener#6149, @rfranzke)
  • [USER] The Shoot API now supports a new field spec.provider.workers[].machine.architecture. It specifies the CPU architecture of the machine in a given worker pool of shoot. It must match the architecture of the used machine type and machine image as defined in the referenced CloudProfile. (gardener/gardener#6233, @acumino)
  • [USER] There are now client warnings for Shoot resources when credentials rotation is due or when the static token kubeconfig is used. (gardener/gardener#6110, @rfranzke)
  • [USER] It is now possible to override the maximum delay seconds for the cloud-config user-data execution on shoot worker nodes by specifying the shoot.gardener.cloud/cloud-config-execution-max-delay-seconds annotation on the Shoot resource (default: 300). (gardener/gardener#6124, @rfranzke)
  • [OPERATOR] Images in image vector now support a new field architectures. It is a list of CPU architecture of machines on which one image can be used. If not specified images are considered to support both amd64 and arm64 CPU architecture. (gardener/gardener#6156, @acumino)
  • [OPERATOR] The --secure-port flag of the Gardener API Server can now be configured through the helm chart by setting .Values.global.apiserver.securePort. The default value is 8443. The service exposing the Gardener API Server deployment will continue to listen on port 443. (gardener/gardener#6170, @dimityrmirchev)
  • [OPERATOR] SeedKubeScheduler: gardenlet does now support the SeedKubeScheduler feature gate to be enabled for K8s 1.24 Seed clusters. (gardener/gardener#6173, @ialidzhikov)
  • [OPERATOR] CloudProfiles now supports two new fields .spec.machineImages[].architectures and .spec.machineTypes[].architecture. (gardener/gardener#6178, @acumino)
    • .spec.machineImages[].architectures - It is a list of CPU architectures of the machine image supported by the particular machine image version.
    • .spec.machineTypes[].architecture - It specifies the CPU architecture of the given machine type.
  • [OPERATOR] Worker now supports a new field .spec.pools[].architecture. It specifies the CPU architecture of the machine in the given worker pool. (gardener/gardener#6178, @acumino)
  • [OPERATOR] You can now make the gardenlet remediate problematic webhooks in shoot clusters by setting .controllers.shootCare.webhookRemediatorEnabled=true in its configuration file. (gardener/gardener#6090, @rfranzke)
  • [OPERATOR] A disruption free CA rotation is now being supported for HA shoot clusters. (gardener/gardener#6099, @timuthy)
  • [DEVELOPER] gardener-apiserver, gardener-controller-manager, gardener-scheduler, gardener-admission-controller, gardener-seed-admission-controller and gardener-resource-manager are now using gcr.io/distroless/static-debian11:nonroot instead of versions of alpine as a base image. (gardener/gardener#6159, @dimityrmirchev)
  • [DEVELOPER] It is now possible to render charts from embedded file systems (embed.FS). The Render method of the chartrenderer.Interface in favour of RenderEmbeddedFS. The Apply/Delete methods of the kubernetes.ChartApplier interfaces are deprecated and in favor of {Apply,Delete}FromEmbeddedFS. They will be removed in a future version. You should consider adapting your code to the newly introduced methods. (gardener/gardener#6165, @rfranzke)
  • [DEVELOPER] Seed prometheus: allow to overwrite scheme per annotation for job garden. (gardener/gardener#6180, @MartinWeindel)
  • [DEVELOPER] Adds ability to create a second seed cluster in the local setup. (gardener/gardener#6059, @plkokanov)
  • [DEVELOPER] Allow passing custom REST configuration settings (QPS, Burst, RateLimiter, Timeout) to extension shoot clients. (gardener/gardener#6113, @oliver-goetz)
  • [DEVELOPER] Added e2e integration test for control plane migration (gardener/gardener#5987, @kris94)

🐛 Bug Fixes

  • [USER] It is no longer possible to perform the following shoot operations when it is hibernated: rotate-{credentials,etcd-encryption-key,serviceaccount-key}-{start,complete}. (gardener/gardener#6148, @rfranzke)
  • [USER] Allow cilium to be used on seeds with SNI enabled. (gardener/gardener#6130, @ScheererJ)
  • [USER] Allow updates of old shoot clusters that were already created with an invalid default domain before the validation was introduced. (gardener/gardener#6139, @plkokanov)
  • [OPERATOR] A bug has been fixed which could prevent gardenlet pods from coming up in case the projected-token-mount webhook served by gardener-resource-manager is unavailable or broken. (gardener/gardener#6175, @rfranzke)
  • [OPERATOR] A bug has been fixed which prevented the etcd defragmentation from running properly. This fix will cause a restart of all etcd instances during the next maintenance time window. (gardener/gardener#6182, @timuthy)
  • [OPERATOR] A bug has been fixed which prevented the assignment of the ERR_CLEANUP_CLUSTER_RESOURCES error code to Shoots. (gardener/gardener#6202, @rfranzke)

📖 Documentation

🏃 Others

  • [USER] Upgrade node-exporter to v1.3.1 (gardener/gardener#6171, @wyb1)
  • [OPERATOR] The following images are updated: (gardener/gardener#6163, @himanshu-kun)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v0.19.0 -> v1.20.1 (for Kubernetes < 1.20)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v1.20.0 -> v1.20.1 (for Kubernetes 1.20)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v1.21.0 -> v1.21.1 (for Kubernetes 1.21)
    • eu.gcr.io/gardener-project/gardener/autoscaler/cluster-autoscaler: v1.21.0 -> v1.22.1 (for Kubernetes >= 1.22)
  • [OPERATOR] Adapt allow-to-dns networkpolicy to also work with node local dns in cilium case. (gardener/gardener#6181, @DockToFuture)
  • [OPERATOR] Activate the diskstats collector for the node_exporter (gardener/gardener#6183, @wyb1)
  • [OPERATOR] The GA-ed CachedRuntimeClients, AdminKubeconfigRequest, DenyInvalidExtensionResources and UseDNSRecords feature gates are removed and can no longer be specified via the --feature-gates flags. (gardener/gardener#6193, @ialidzhikov)
  • [OPERATOR] The default value for --audit-log-path of Gardener API Server was changed from /var/lib/audit.log to /tmp/audit.log so that a nonroot user can access it without additional permissions. (gardener/gardener#6204, @vpnachev)
  • [OPERATOR] Pause container image is now used from k8s.gcr.io/pause instead of gcr.io/google_containers/pause-amd64. (gardener/gardener#6238, @acumino)
  • [OPERATOR] Improve the CPU and memory usage calculation on the Node Details dashboard (gardener/gardener#6132, @istvanballok)
  • [OPERATOR] Update node local dns to v1.22.5 (gardener/gardener#6138, @ScheererJ)
  • [OPERATOR] The blackbox exporter scrape probe logs are also written to stdout (gardener/gardener#6140, @istvanballok)
  • [OPERATOR] Bump prometheus to v2.36.1 (gardener/gardener#6141, @wyb1)
  • [OPERATOR] NetworkPolicy/allow-to-private-networks now allows access to networks overlapping the shoot networks in case reversed VPN is active. (gardener/gardener#6143, @ScheererJ)
  • [OPERATOR] kube-apiserver and prometheus pods are no longer allowed to access shoot networks in case reversed VPN is active. (gardener/gardener#6143, @ScheererJ)
  • [DEVELOPER] Added wrapper scripts and make targets that can be used to setup the skaffold test environment and trigger e2e integration tests: make ci-e2e-kind can be used to trigger the default e2e integration tests; make ci-e2e-kind-migration can be used to trigger the control plane migration e2e test. (gardener/gardener#5987, @kris94)
  • [DEPENDENCY] k8s.io/* is now upgraded to v0.24.1 and sigs.k8s.io/controller-runtime is now upgraded to v0.12.1. (gardener/gardener#6101, @kris94)

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.50.0
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.50.0
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.50.0
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.50.0
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.50.0
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.50.0
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.50.0

gardener - v1.48.6

Published by gardener-robot-ci-3 over 2 years ago

[gardener]

🐛 Bug Fixes

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.48.6
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.48.6
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.48.6
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.48.6
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.48.6
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.48.6
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.48.6

Package Rankings
Top 0.84% on Proxy.golang.org
Badges
Extracted from project README
REUSE status CI Build status Slack channel #gardener Go Report Card GoDoc CII Best Practices Gardener v1.30 Conformance Tests Gardener v1.29 Conformance Tests Gardener v1.28 Conformance Tests Gardener v1.27 Conformance Tests Gardener v1.26 Conformance Tests Gardener v1.25 Conformance Tests Gardener v1.30 Conformance Tests Gardener v1.29 Conformance Tests Gardener v1.28 Conformance Tests Gardener v1.27 Conformance Tests Gardener v1.26 Conformance Tests Gardener v1.25 Conformance Tests Gardener v1.30 Conformance Tests Gardener v1.29 Conformance Tests Gardener v1.28 Conformance Tests Gardener v1.27 Conformance Tests Gardener v1.26 Conformance Tests Gardener v1.25 Conformance Tests Gardener v1.30 Conformance Tests Gardener v1.29 Conformance Tests Gardener v1.28 Conformance Tests Gardener v1.27 Conformance Tests Gardener v1.26 Conformance Tests Gardener v1.25 Conformance Tests Gardener v1.30 Conformance Tests Gardener v1.29 Conformance Tests Gardener v1.28 Conformance Tests Gardener v1.27 Conformance Tests Gardener v1.26 Conformance Tests Gardener v1.25 Conformance Tests
Related Projects
scheduler-plugins

Repository for out-of-tree scheduler plugins based on scheduler framework.

16 Jan 2020 1,003
automated-garden

weather-based smart irrigation controller and backend

05 Dec 2020 18
kubernetes

Production-Grade Container Scheduling and Management

06 Jun 2014 107,341
kubebuilder

Kubebuilder - SDK for building Kubernetes APIs using CRDs

14 Mar 2018 7,392
glasskube

🧊 The next generation Package Manager for Kubernetes 📦 Featuring a GUI and a CLI. Glasskube packa...

11 Jan 2024 2,778
kind

Kubernetes IN Docker - local clusters for testing Kubernetes

12 Sep 2018 13,392
kube-fledged

A kubernetes operator for creating and managing a cache of container images directly on the clust...

26 Oct 2018 1,246