[dashboard]

Action Required

• [OPERATOR] This dashboard version requires terminal-controller-manager v0.14.0 or higher, in case the terminal feature is enabled (#852, @petersutter)
• [OPERATOR] Seeds that are unreachable by the dashboard backend server need to be flagged as such with a corresponding label by setting the property unreachableSeeds.matchLabels in the gardener-dashboard chart's values.yaml file (#831, @petersutter)

Most notable changes

• [USER] When creating a new terminal, you can now choose the target Garden Cluster. This allows you to talk directly to the gardener api server, e.g. run kubectl get shoots or kubectl get project my-project -oyaml (#852, @petersutter)
• [USER] Member Management Improvements (#821, @grolu)
  • Show all service accounts, even those that have no role in the project
  • Added possibility to add service accounts without a role
  • Added possibility to add foreign service accounts, this means you are now able to connect service accounts from other namespaces by using the prefixed service account name (e.g. system:serviceaccount:other-namespace:service-account-name). Those service accounts need to have a role assigned
  • Delete button now has different icons for own service accounts, users and foreign service accounts, the latter two have a remove icon
  • Deletion of service accounts now needs to be confirmed by entering the name
  • It is now possible to add a description to a service account
  • Prevent to add service accounts via the add user dialog, all service accounts need to be added using the add service account dialog
  • Technical Contact has been renamed to Owner for all occurrences
  • Show owner role (greyed out, not editable, with tooltip), previously this has been hidden in the member list
  • Removed Technical Contact card on member list

Improvements

• [USER] Fixed: Create button on new cluster page was sometimes disabled after switching cloud profile / infrastructure even if there was no validation error for the current selection (#851, @grolu)
• [USER] Fixed: Pressing enter on the confirmation dialog now behaves the same as if the OK button is pressed (#847, @petersutter)
• [USER] Fixed bug that the action buttons in the lifecycle card were not disabled in some cases for clusters that are in the process of being deleted (#837, @petersutter)
• [USER] We are now handling the case when seed is not reachable by the dashboard backend server (#831, @petersutter)
  • Terminal feature is disabled for affected clusters
  • A hint is shown that the monitoring credentials can't be fetched in case the seed is not reachable by the dashboard (only applies for operators)
• [USER] Fixed some UI issues of the tickets feature (#825, @petersutter)
• [USER] In case a zone is defined multiple times for a worker group, the Dashboard is now able to handle this correctly (#822, @grolu)
• [USER] The correct navigation menu is shown if ALL PROJECTS is selected from the project selection menu (#814, @holgerkoser)
• [OPERATOR] The dashboard is now using the field .spec.settings.scheduling.visible instead of the taint seed.gardener.cloud/invisible (#855, @petersutter)
• [OPERATOR] Fixed issue that when changing the terminal settings and selecting Cluster as runtime for the terminal pod and afterwards try to change the runtime to Infrastructure (Seed) it wouldn't work (#839, @petersutter)
• [OPERATOR] We are now handling the case when seed is not reachable by the dashboard backend server (#831, @petersutter)
  • Terminal bootstrapping disabled for affected shoot and seed clusters
  • A hint is shown that the monitoring credentials can't be fetched in case the seed is not reachable by the dashboard (only applies for operators)
• [OPERATOR] In case the ticket feature is configured, you can now specify the avatar source by setting frontendConfig.ticket.avatarSource of the values.yaml file to be either github, gravatar or none (#825, @petersutter)
  • github(default) - uses the avatar_url to fetch the avatar from github. Fetching the avatar image from an enterprise github could fail in case an authentication is required. In this case, use either gravatar or none
  • gravatar - uses logon name to fetch the avatar from gravatar
  • none - no avatar is displayed
• [OPERATOR] Member Management Improvements (#821, @grolu)
  • Service accounts are now added to project resource with kind ServiceAccount. When updating an existing service account of kind User it will not be migrated to ServiceAccount
  • Members that have multiple entries in a project resource will not be merged when updated via the Dashboard. Only the first occurrence will get new roles, while roles of existing additional occurrences will be removed if they are no longer assign to this member. Entries without roles will be deleted
• [DEVELOPER] Introduces the foundation to split gardener-dashboard into independent packages and build independent container images / deployments. (#815, @holgerkoser)
• [DEVELOPER] License and copyright information is now specified in REUSE format. (#811, @msohn)