GoogleCloudPlatform/k8s-config-connector v1.158.0

Release 1.158.0

on GitHub

• Special shout-outs to @acpana, @anfernee, @anhdle-sso, @barney-s, @cdmello-g, @eugenenuke, @gemmahou, @katrielt, @ldanielmadariaga, @maqiuyujoyce, @sdowell, and @YpNo for their contributions to this release.

New Alpha Resources (Direct Reconciler):

• AgentRegistryBinding

  • Manage Agent Registry bindings to connect agent tools and authentication configurations.

• AIPlatformPersistentResource

  • Manage Vertex AI Persistent Resources for cluster computing and training jobs.

• AssuredWorkloadsWorkload

  • Manage Assured Workloads to enforce security and compliance controls for regulated workloads.

• BigtableSchemaBundle

  • Manage Cloud Bigtable schema bundles for storing protobuf schemas in Bigtable.

• CloudNumberRegistryRegistryBook

  • Manage Cloud Number Registry registry books for phone number allocation and inventory management.

• EventarcMessageBus

  • Manage Eventarc message buses to route events from publishers to subscribers.

• ModelArmorFloorSetting

  • Manage Model Armor floor settings at project, folder, or organization scope to enforce baseline safety and security filters for LLMs.

New Fields:

• BackupDRBackupPlanAssociation

  • Added spec.sqlInstanceRef field to support backing up Cloud SQL instances.

• ComputeNetworkFirewallPolicyRule

  • Added spec.match.srcNetworkContext and spec.match.destNetworkContext fields.

• ComputeRegionNetworkEndpointGroup

  • Added INTERNET_IP_PORT, INTERNET_FQDN_PORT, and GCE_VM_IP_PORTMAP values for spec.networkEndpointType.

• RedisCluster

  • Added spec.clusterEndpoints and status.clusterEndpoints fields.
  • Added spec.gcsSource field.
  • Added spec.managedBackupSource field.

• SQLInstance

  • Added spec.settings.databaseReplicationEnabled field.

Reconciliation Improvements

We have added support for direct reconciliation to more resources, with opt-in
behaviour. The API is unchanged. To use the direct reconciler, add the
alpha.cnrm.cloud.google.com/reconciler: direct annotation to the corresponding
Config Connector object. The following resources now have direct reconciliation
support (and we list some of the issues that this fixes):

• FilestoreInstance
  • Support direct reconciliation (opt-in).

New Features:

• Resource-Level Pause Support: Support pausing and unpausing actuation at the individual resource level using the annotation cnrm.cloud.google.com/actuation-mode.

Bug Fixes:

• BigQueryDataset

  • Fixed reconciliation failure in projects whose project ID contains a colon (such as domain-scoped projects example.com:my-project), where creation previously failed with an invalid ID format error and resourceID / selfLink were not populated.

• ComposerEnvironment

  • Fixed infinite reconciliation loops, false drift, and HTTP 400 errors when using empty map fields (envVariables: {}, labels: {}), partial workloadsConfig blocks, or disabling scheduledSnapshotsConfig.

• ComputeRouterNAT

  • Supported both short name and canonical long path in spec.routerRef in the direct controller.

• CRD Structural Schema Alignment:

  • Removed empty status.observedState from v1alpha1 CRDs to align with Kubernetes structural schema requirements.