github GoogleCloudPlatform/k8s-config-connector v1.160.0

3 hours ago

New Alpha Resources (Direct Reconciler):

New Fields:

Reconciliation Improvements

We have added support for direct reconciliation to more resources, with opt-in
behaviour. The API is unchanged. To use the direct reconciler, add the
alpha.cnrm.cloud.google.com/reconciler: direct annotation to the corresponding
Config Connector object. The following resources now have direct reconciliation
support (and we list some of the issues that this fixes):

  • ComputeNetworkFirewallPolicy

    • Support direct reconciliation (opt-in).
  • ComputeProjectMetadata

    • Support direct reconciliation (opt-in).
  • FirebaseHostingSite

    • Support direct reconciliation (opt-in).
  • NetworkServicesEdgeCacheService

    • Support direct reconciliation (opt-in).
  • OSLoginSSHPublicKey

    • Support direct reconciliation (opt-in).
  • SQLSSLCert

    • Support direct reconciliation (opt-in).

New Features:

  • Configurable Max Exponential Backoff Delay: Support configurable max exponential backoff delay ceiling and retry halting for direct controllers via the cnrm.cloud.google.com/backoff-max-delay-in-seconds annotation.
  • Halt Deletions in Paused Actuation Mode: Halt delete operations when cnrm.cloud.google.com/actuation-mode is set to Paused on an individual resource.

Bug Fixes:

  • AlloyDBCluster

    • Fixed false-positive diffs on labels, initialUser, and network during takeover and re-reconciliation in the direct controller.
  • ArtifactRegistryRepository

    • Fixed Terraform-to-Direct controller migration diffs on cleanup_policies and cleanup_policy_dry_run.
  • ComputeRouterNAT

    • Aligned direct controller create defaults and delete behavior with the legacy controller.
  • ComputeSecurityPolicy

    • Fixed an issue where setting rateLimitOptions.enforceOnKeyConfigs failed with an API error unless enforceOnKey: "" was explicitly specified.
  • EssentialContactsContact

    • Supported automatic acquisition of existing contact by email on 409 ALREADY_EXISTS.
  • MemorystoreInstance

    • Unmanaged maintenanceVersion if omitted from configuration YAML.

Don't miss a new k8s-config-connector release

NewReleases is sending notifications on new releases.