MongoDB Atlas Operator 2.4.0

New features, improvements and fixes

• Introduce support for Backup Compliance Policies in #1623 by @roothorp
• Introduce support for Short Names and listing Atlas Kubernetes Operator resources in #1582 by @s-urbaniak
• Fix integrations reconciliation due to redacted secret comparisons in #1691 by @josvazg

Images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

Supported Kubernetes versions updated in this release: 1.28-1.30
Supported OpenShift versions updated: 4.15

Full Changelog: https://github.com/mongodb/mongodb-atlas-kubernetes/compare/v2.3.1...v2.4.0

MongoDB Atlas Operator 2.3.1

Warnings

• Improve the validation of the X509Type field at AtlasDatabaseUser custom resources in #1576 by @josvazg
  • The valid values continue to be just NONE, CUSTOMER, MANAGED.

New features, improvements and bug fixes

• Region configurations in Deployments are now sorted consistently to prevent redundant updates in #1624 by @roothorp

Images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

Supported Kubernetes versions: 1.27-1.29
Supported OpenShift versions: 4.14

Full Changelog: https://github.com/mongodb/mongodb-atlas-kubernetes/compare/v2.3.0...v2.3.1

MongoDB Atlas Operator 2.3.0

New features, improvements and bug fixes

• Introduce support for Atlas Streams in #1529 in #1564 by @helderjs and @s-urbaniak
• Introduce support for Atlas Search, Atlas Vector Search and Atlas Search Nodes in #1392, #1430 by @igor-karpukhin @roothorp @s-urbaniak

Images can be found at: https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

Supported Kubernetes versions: 1.27-1.29
Supported OpenShift versions: 4.14

Full changelog: https://github.com/mongodb/mongodb-atlas-kubernetes/compare/v2.2.2...v2.3.0

New features, improvements and bug fixes

• Fix concurrency issue that could result in changes to a resource being missed by the operator in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1520 and https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1528 by @s-urbaniak and @igor-karpukhin.

Images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

Supported Kubernetes versions: 1.27-1.29
Supported OpenShift versions: 4.14

Full Changelog: https://github.com/mongodb/mongodb-atlas-kubernetes/compare/v2.2.1...v2.2.2

New features, improvements and bug fixes

• All MongoDB images are now signed by @josvazg in #1462. See Image Signature Verification for details on verifying these signatures
• Remove CPU limits, increase memory limits to 1Gi, and increase memory requests to 256Mi by @igor-karpukhin in #1479 and #1472
• Improve reconciliation of Serverless Private Endpoints by @helderjs in #1489. The operator will no longer get stuck in a reconcile loop recreating serverless private endpoints when it fails to synchronize with Atlas.
• Ensure Atlas Teams are always cleaned up by @igor-karpukhin in #1481. This will prevent Atlas Team resources being orphaned and left in the cluster with no associated projects.

Deprecations and removals

• The following fields are deprecated, and setting them will have no effect in Serverless Deployments by @igor-karpukhin in #1491:
  • DiskIOPS
  • DiskTypeName
  • EncryptEBSVolume
  • InstanceSizeName
  • VolumeType
  • AutoScaling

Images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

Supported Kubernetes versions: 1.27-1.29
Supported OpenShift versions: 4.14

Full Changelog: https://github.com/mongodb/mongodb-atlas-kubernetes/compare/v2.2.0...v2.2.1

New features, improvements and bug fixes

• Fix Federated Authentication role mapping assignment handling by @helderjs in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1434.
• Add support for AP1 and US1-Fed DataDog regions in Third-Party Services Integration by @helderjs in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1433.
• Add support for yearly backup frequencies in Cloud Backups by @helderjs in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1429

Images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v2.1.0

Warnings

• Disable sub-object deletion protection by @s-urbaniak in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1371: This disables the --subobject-deletion-protection flag due to a bug, where ownership of subjects between the operator and the Atlas API cannot be detected deterministically. The --object-deletion-protection flag is still in place.

New features, improvements and bug fixes

• Add terminationProtectionEnabled property for AdvancedDeployment resources by @igor-karpukhin in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1356: This adds the terminationProtectionEnabled property to advanced deployments to achieve feature parity with serverless deployments.
• Add OIDC and AWS IAM authentication fields for AtlasDatabaseUser resources by @igor-karpukhin in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1221: In addition to existing authentication methods this adds support for OIDC and AWS IAM.

Deprecations and removals

• Deprecate cloudProviderAccess* fields in favour of cloudProviderIntegration* in the AtlasProject resource by @helderjs in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1230: This changes the field names for clarity. Note that the old cloudProviderAccess* fields will be removed in future versions.

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.9.3

Operator Changes

• Fix failing reconciliation when updating a deployment with auto-scaling ON (#1351).

What's Changed

!!! Warning, this release contains breaking changes !!!

Breaking changes

• Improve snapshot distribution management by @helderjs in #1168
  To enable an AtlasBackupSchedule custom resource to be reused by multiple deployments managed by the operator, we have removed replicationSpecId from the AtlasBackupSchedule custom resource. It will now be automatically set for every deployment that references it. As a result of this change, replicationSpecId is no longer configurable in an AtlasBackupSchedule and should be removed.
• Add deletion protection feature by @helderjs in #1173 See: https://www.mongodb.com/docs/atlas/atlas-operator/#new-default--deletion-protection-in-ak8so-2.0
  With Atlas Kubernetes Operator 2.0, custom resources you delete in Kubernetes are no longer deleted in Atlas by default. Instead, Atlas Kubernetes Operator simply stops managing those resources - avoiding destructive change. The old behavior can be reverted. More info https://www.mongodb.com/docs/atlas/atlas-operator/#new-default--deletion-protection-in-ak8so-2.0
• Remove legacy deployment by @igor-karpukhin in #1182
  In order to standardize on one deployment type (for non-serverless deployments), we have removed the notion of advancedDeploymentSpec. All deployment options are now supported as part of the deploymentSpec. For the AtlasDeployment resource, the following things were changed:
  spec.deploymentSpec - now contains all fields from the spec.advancedDeploymentSpec.
  spec.advancedDeploymentSpec - is gone. If you used advancedDeploymentSpec before, the only change you need to make is to rename the advancedDeploymentSpec to deploymentSpec in the AtlasDeployment resource. If you used deploymentSpec, you will need to rewrite it to advancedDeploymentSpec format.
• Force secretRef fields for EncryptionAtREST and AlertConfiguration features by @roothorp in #1203 . This forces use of secrets for all credentials to promote security best practices.
  The following API secrets and credentials were moved from the AtlasProject custom resource to Secrets. Credentials and API secrets should now be stored in Secrets and referenced from the AtlasProject custom resource. The following fields were replaced:
  For the .spec.alertConfiguration.notifications:
  APIToken -> APITokenRef
DatadogAPIKey -> DatadogAPIKeyRef
FlowdockTokenAPI -> FlowdockTokenAPIRef
OpsGenieAPIKey -> OpsGenieAPIKeyRef
VictorOpsAPIKey -> VictorOpsSecretRef
VictorOpsRoutingKey -> VictorOpsSecretRef (expected to have both VictorOps values)
  For the .spec.encryptionAtRest:
  • For AWS:
    AccessKeyID, SecretAccessKey, CustomerMasterKeyID and RoleID -> secretRef (expected to contain all those fields with values). Note: although there are fields AccessKeyID, SecretAccessKey they can only be provided for AtlasProject resources that had them before. New projects required to configure CloudProviderAccessRoles feature to enable the Encryption at REST for AWS.
  • For Azure:
    SubscriptionID, KeyVaultName, KeyIdentifier, Secret -> secretRef (expected to contain all those fields with values)
  • For GCP:
    ServiceAccountKey, KeyVersionResourceID -> secretRef (expected to contain all those fields with values)

Fixes

• Fixed resource version label by @igor-karpukhin in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1209
• Put go context within workflow.Context by @josvazg in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1152
• Replace github.com/pborman/uuid with github.com/google/uuid by @gssbzn in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1187
• Bump google.golang.org/api from 0.143.0 to 0.146.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1159
• Bump github.com/aws/aws-sdk-go from 1.45.20 to 1.45.24 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1160
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.7.2 to 1.8.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1163
• Bump golang.org/x/sync from 0.3.0 to 0.4.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1162
• Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1161
• Bump go.mongodb.org/atlas from 0.33.0 to 0.34.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1174
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.3.1 to 1.4.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1175
• Bump github.com/aws/aws-sdk-go from 1.45.24 to 1.45.26 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1176
• Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1177
• Bump cloud.google.com/go/compute from 1.23.0 to 1.23.1 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1178
• Bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1169
• Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1189
• Bump google.golang.org/api from 0.146.0 to 0.148.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1192
• Bump docker/login-action from 2 to 3 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1194
• Bump cloud.google.com/go/kms from 1.15.2 to 1.15.3 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1193
• Bump google.golang.org/grpc from 1.58.2 to 1.58.3 in /tools/clean by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1200
• Bump cloud.google.com/go/compute from 1.23.1 to 1.23.2 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1204
• Bump cloud.google.com/go/kms from 1.15.3 to 1.15.4 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1205
• Bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1206
• Bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.2.0 to 1.3.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1207
• Bump github.com/aws/aws-sdk-go from 1.45.26 to 1.46.7 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1208
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.8.0 to 1.9.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1214
• Bump cloud.google.com/go/kms from 1.15.4 to 1.15.5 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1215
• Bump github.com/aws/aws-sdk-go from 1.46.7 to 1.47.4 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1216
• Bump go.mongodb.org/atlas from 0.34.0 to 0.35.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1217
• Bump google.golang.org/api from 0.148.0 to 0.150.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1218

New Contributors

• @slaskawi made their first contribution in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1145

Full Changelog: https://github.com/mongodb/mongodb-atlas-kubernetes/compare/v1.9.0...v2.0.0

What's Changed

!!! Warning, this release contains breaking changes !!!

Breaking changes

• Improve snapshot distribution management by @helderjs in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1168
• Add deletion protection flags by @helderjs in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1173 See: https://dochub.mongodb.org/core/ako-deletion-protection
• Remove legacy deployment by @igor-karpukhin in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1182
  For the AtlasDeployment resource, the following things were changed:
  spec.deploymentSpec - now contains all fields from the spec.advancedDeploymentSpec
  spec.advancedDeploymentSpec - is gone
• Force secretRef fields for EncryptionAtREST and Alerts features by @roothorp in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1203

Fixes

• Fixed resource version label by @igor-karpukhin in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1209
• Put go context within workflow.Context by @josvazg in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1152
• task: replace github.com/pborman/uuid with github.com/google/uuid by @gssbzn in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1187
• Bump google.golang.org/api from 0.143.0 to 0.146.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1159
• Bump github.com/aws/aws-sdk-go from 1.45.20 to 1.45.24 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1160
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.7.2 to 1.8.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1163
• Bump golang.org/x/sync from 0.3.0 to 0.4.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1162
• Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1161
• Bump go.mongodb.org/atlas from 0.33.0 to 0.34.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1174
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.3.1 to 1.4.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1175
• Bump github.com/aws/aws-sdk-go from 1.45.24 to 1.45.26 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1176
• Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1177
• Bump cloud.google.com/go/compute from 1.23.0 to 1.23.1 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1178
• Bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1169
• Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1189
• Bump google.golang.org/api from 0.146.0 to 0.148.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1192
• Bump docker/login-action from 2 to 3 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1194
• Bump cloud.google.com/go/kms from 1.15.2 to 1.15.3 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1193
• Bump google.golang.org/grpc from 1.58.2 to 1.58.3 in /tools/clean by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1200
• Bump cloud.google.com/go/compute from 1.23.1 to 1.23.2 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1204
• Bump cloud.google.com/go/kms from 1.15.3 to 1.15.4 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1205
• Bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1206
• Bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.2.0 to 1.3.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1207
• Bump github.com/aws/aws-sdk-go from 1.45.26 to 1.46.7 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1208
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.8.0 to 1.9.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1214
• Bump cloud.google.com/go/kms from 1.15.4 to 1.15.5 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1215
• Bump github.com/aws/aws-sdk-go from 1.46.7 to 1.47.4 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1216
• Bump go.mongodb.org/atlas from 0.34.0 to 0.35.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1217
• Bump google.golang.org/api from 0.148.0 to 0.150.0 by @dependabot in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1218

New Contributors

• @slaskawi made their first contribution in https://github.com/mongodb/mongodb-atlas-kubernetes/pull/1145

Full Changelog: https://github.com/mongodb/mongodb-atlas-kubernetes/compare/v1.9.0...v2.0.0

Fixes

• Minor update fixing some missing permissions for Atlas Federated Authentication Resources (#1198)

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.9.0

Operator Changes

• Add secret management sample snippets (#1147)
• Support Atlas for government (#1135)
• Use UBI micro base image instead of minimal (#1099)

AtlasProject Resource

• Duplicate Projects Listed in Teams Status (#1139)
• Refactor reconciliation flow to avoid unneeded recreation (#1121)

AtlasDeployment Resource

• Improve validation and handling of advanced deployments (#1146)
• Validate away duplicate alert configs (#1148)
• Fix backup schedule repeatedly updating (#1136)
• Add extra args to serverless tags updates (#1115)
• Deployment Resource Tagging (#1041)

NEW AtlasFederatedAuth Resource

• Atlas Federated Authentication configuration (#1124)

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.8.2

Operator Changes

AtlasProject Resource

• Fixed a problem with constant Auditing reconciliations (#1081)
• Fixed a problem with incorrect reconciliation for CustomRoles (#1096)

AtlasDeployment Resource

• Fixed a problem with removing AtlasBackupSchedule resources that were referenced by AtalsDeployment resources (#1082)

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.8.1

Operator Changes

• Atlas client version bumped up to v0.32.0 (#1077)

AtlasProject Resource

• Fixed missing watchers for Integrations secrets (#1021)
• Encryption at REST feature: credentials for cloud providers can now be stored in secrets instead of the AtlasProject CR (#1045)
• Encryption at REST feature: fixed GCP credentials validation (#1008)

AtlasDeployment Resource

AtlasDatabaseUser Resource

• Fixed missing PE connection string for SHARDED clusters (#1062)

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.8.0

Operator Changes

• Fix encryption at REST aws.roleID (#987)
• Support optional secrets for Alerts Configuration (#1002)

AtlasDataFederation Resource

• Support to manage Data Federation deployments (#943)

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.7.3

Operator Changes

• Move leases.coordination.k8s.io to its own proxy-role rule (#947)

AtlasProject Resource

• Added IsExtendedStorageSizesEnabled field to the settings section (#936)
• Bumped up Go version to 1.20 (#936)

AtlasDeployment Resource

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.7.2

Operator Changes

• Internally use only Atlas Advanced Cluster API (#825)

AtlasDeployment Resource

• Fix connection secret generation for different namespaces (#914)
• Fix Backup Auto Export configuration (#923)

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.7.1

Operator Changes

• Atlas operator now won't print credentials in logs #907

AtlasBackupSchedule Resource

• Fixed broken export field #897

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.7.0

Operator Changes

• Added Openshift 4.12 compatibility

AtlasProject Resource

• Project can refer to a connection secret in a different namespace (#866)
• Support for multiple private endpoints per single provider and region & Store all private endpoints connection strings (#877)
• Fix for not working Encryption at REST for Google KMS #838

AtlasDeployment Resource

• autoIndexingEnabled field marked as deprecated (#874)
• Snapshot distribution (#870)

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator

MongoDB Atlas Operator v1.6.1

AtlasProject Resource

• Remove ip access list validator #852 (#851)

AtlasDeployment Resource

• Fixed BackupSchedule reconciliation #854

The images can be found in:
https://quay.io/mongodb/mongodb-atlas-kubernetes-operator