[dashboard]

⚠️ Breaking Changes

[USER] The feature to rotate the service account secrets was removed. Instead you now have to delete the service account if you want to invalidate all tokens that were issued for your service account (gardener/dashboard#1234, @petersutter)
[USER] Downloaded kubeconfigs for service accounts on the project Members page now have tokens that will expire by default in 90 days, except if the kube-apiserver is configured with a shorter maximum validity duration or the dashboard's default was changed by your landscape administrator (gardener/dashboard#1234, @petersutter)
[OPERATOR] This Dashboard version is not compatible with Gardener versions prior v1.48.x (gardener/dashboard#1216, @petersutter)
[OPERATOR] Downloaded kubeconfigs for service accounts on the project Members page have tokens that will expire by default in 90 days, except the kube-apiserver is configured with a shorter maximum validity duration (--service-account-max-token-expiration). (gardener/dashboard#1234, @petersutter)
- You can change the default token expiration with .frontendConfig.serviceAccountDefaultTokenExpiration in the values.yaml file of the gardener-dashboard chart
- You can change the list of the intended audiences of the service account token with .tokenRequestAudiences in the values.yaml file of the gardener-dashboard chart

[USER] You can now assign the Service Account Manager role to project members. (gardener/dashboard#1216, @petersutter)
[USER] Added support to enter application credentials for OpenStack as an alternative for the use of a technical user with password (gardener/dashboard#1230, @NotTheEvilOne)
[USER] Sort supported versions up within same patch group, use colors to highlight supported / deprecated versions (gardener/dashboard#1238, @grolu)
[OPERATOR] Garden cluster with kubernetes version v1.24 are now supported (gardener/dashboard#1234, @petersutter)
- Tokens for service accounts are now fetched using the TokenRequest API
[OPERATOR] Added dedicated icon for user errors in shoot status so that the underlying shoot status is still visible (gardener/dashboard#1239, @grolu)

[OPERATOR] Fixed a bug that caused seeds with empty label section not to be mapped to cloud profiles with empty matchLabels (gardener/dashboard#1236, @grolu)

[OPERATOR] Identity chart: bumped version of dex to v2.32.0-distroless (gardener/dashboard#1245, @petersutter)