[dashboard]

⚠️ Breaking Changes

• [OPERATOR] The Dashboard no longer adds dockerto the list of available CRIs. You need to adapt all CloudProfiles and explicitly add docker to all MachineImageVersions which support it (#1059, @grolu)

✨ New Features

• [USER] Container Runtime is now a required field for cluster workers and defaulted to containerd for cluster kubernetes versions 1.22 and higher. Clusters with older kubernetes versions keep docker as default container runtime. If default runtime is not in the list of supported runtimes of a machine image it defaults to the first one specified in the cloud profile (#1059, @grolu)
• [USER] Added support to authenticate against GKE clusters using google service account key. In this case, the referenced secret needs to have the serviceaccount.json data key in addition to the kubeconfig data key (#1058, @holgerkoser)
• [USER] Container runtimes of existing workers can now be changed (#1044, @grolu)
• [USER] Support for the hetzner cloud extension (hcloud) (#1043, @poelzi)
• [USER] External DNS Provider Support (#1026, @grolu)
  • Add and manage DNS Provider Secrets
  • Configure Shoot DNS Providers
• [USER] Added extended search capabilities to cluster search: (#1021, @grolu)
  • Search params are now ANDed, allowing one to refine the search
  • Use quotes for exact words or phrases
  • Use minus sign to exclude words that you don't want
• [OPERATOR] It is now possible to add configurable hints for machine image vendors (#1066, @grolu)
• [OPERATOR] Added support for ERR_RETRYABLE_INFRA_DEPENDENCIES and ERR_INFRA_REQUEST_THROTTLING error codes (#1040, @grolu)
• [OPERATOR] The option to Hide user issues for operators has been replaced by an option to remove both user issues and temporary issues. This new filter is labelled as Hide no operator action required issues (#1040, @grolu)

🐛 Bug Fixes

• [USER] Preserve the initial URL hostname during the OIDC login process (#1054, @holgerkoser)
• [USER] Fixed an issue where the terminal container was not created with privileged set to true of the containers securityContext when enabling the Privileged flag on the terminal settings UI (#1051, @petersutter)

📖 Documentation

• [OPERATOR] Please note the following changes in the values.yaml file of the gardener-dashboard helm chart: (#1054, @holgerkoser)
  • The configuration property .Values.oidc.redirectUri is no longer used and has been removed. Instead, the list of valid OIDC redirect URIs is determined based on the ingress hosts .Values.ingress.hosts. If tls .Values.ingress.tls is active the redirect URI scheme is assumed to be https for all hosts.