[dashboard]

✨ New Features

• [USER] You can now define your own (project specific) custom fields for your shoots. (#890, @petersutter)
  • The custom fields can be displayed on the cluster list and / or on the cluster details page
  • The defined custom fields are listed on the ADMINISTRATION page
  • You have to set metadata.annotations["dashboard.gardener.cloud/customFieldsShoot"]on your project with your custom field definitions, e.g. using kubectl. See #890 for more details
• [USER] Available Networking Extensions are listed and can be selected during cluster creation (#881, @grolu)
• [USER] Member Management Improvements (#872, @grolu)
  • Added feature that allows to rotate secrets of service accounts
  • Members are now sortable and shown in table layout
  • Added help texts for member roles
  • Service Account Members whose Service Account has been deleted, are now flagged in the Dashboard and can be cleaned up

🐛 Bug Fixes

• [USER] Cancel Cluster Creation warning did popup even if cluster settings were initial (#920, @grolu)
• [USER] An invalid Cost Object cannot be saved by pressing the ENTER key. The popover remains open and the error message persists (#909, @holgerkoser)
• [USER] The alert banner is now permanently hidden when clicking the close icon (#899, @petersutter)
• [OPERATOR] Dex is upgraded to v2.27.0 fixing multiple CVEs in golang's encoding/xml package: (#904, @mvladev)
  • Element namespace prefix instability (CVE-2020-29511)
  • Attribute namespace prefix instability (CVE-2020-29509)
  • Directive comment instability (CVE-2020-29510)
• [DEVELOPER] Update vulnerable dependency highlight.js that mitigates the risk of lengthy freezes or crashes on the client-side (Browser) (#907, @holgerkoser)
• [DEVELOPER] Honor insecureSkipTLSVerify spec from gardener-apiserver (#897, @gesslein)

🏃 Others

• [USER] Added media subdomain to list of allowed GitHub subdomains for image cross-domain requests (#882, @Shegox)
• [DEVELOPER] All backend tests are now independent from the underlying http transport. This is a prerequisite to migrate the kube-client transport from http/1.1 to http/2. With http/2 sessions we are able to perform "liveness" checks on the underlying tcp connection and we will get rid of the watch with resourceVersion problem (watch caches of different apiservers have different resourceVersions). In addition the test framework has been migrated from multi tool solution mocha, sinon, chai, nock and istanbuljs/nyc to the single tool solution jest. All other gardener-dashboard packages already use jest as test runner. (#900, @holgerkoser)