[gardener-extension-provider-openstack]

✨ New Features

• [USER] The selection of the subnet in floating pool network via InfrastructureConfig.floatingPoolSubnetName can now be also done via a name pattern matching. (#237, @dkistner)
• [OPERATOR] Allow to configure a default subnet for floating pools configuration in the CloudProfile and enable the selection of floating pool subnet via a name pattern. (#237, @dkistner)

🐛 Bug Fixes

• [USER] The following images are updated (see CHANGELOG for more details): (#233, @ialidzhikov)
  • k8s.gcr.io/sig-storage/csi-snapshotter: v2.1.3 -> v2.1.4
  • k8s.gcr.io/sig-storage/snapshot-controller: v2.1.3 -> v2.1.4
• [USER] An issue has been resolved which prevented the CSI driver from properly functioning when the infrastructure credentials were changed. (#226, @rfranzke)
• [OPERATOR] Fix a bug in servergroup creation when the Nova API is > 2.63 (#245, @kon-angelo)

🏃 Others

• [OPERATOR] The timeout seconds for the validating admission webhook is now set to 10s. (#252, @vpnachev)
• [OPERATOR] Add ingress rule to allow UDP. (#244, @DockToFuture)
• [OPERATOR] The cloud-controller-manager VPA does now specify minAllowed values to prevent too low resource recommendations from VPA that lead to OOM. (#238, @ialidzhikov)
• [OPERATOR] All resources are now deleted from the shoot namespace during migration. Also, during restore the MCM is now scaled down to 0 and not deleted. (#236, @kris94)
• [OPERATOR] An issue causing github.com/gardener/gardener/pkg/utils/imagevector.FindImages to not give a higher score on exact matched targetVersion or runtimeVersion is now fixed. (#228, @ialidzhikov)
• [OPERATOR] An issue causing Shoots to be marked as Failed (and no longer retried) on transient not found error is now fixed. (#228, @ialidzhikov)
• [OPERATOR] Openstack extension now uses the new Out-Of-Tree MCM implementation. (#224, @kon-angelo)
• [OPERATOR] The name of the Openstack domain, tenant/project name and the technical name of the respective Shoot will be added as http headers for the API call which the Openstack Cloud Controller Manager and CSI driver run against Openstack APIs. (#218, @dkistner)
• [OPERATOR] Reducing credential update complexity by all the machine classes using the new .{spec.}credentialsSecretRef field. (#207, @kon-angelo)
  • This means all worker pools use the same "cloudprovider" secret containing only the cloud provider credentials.
  • The existing MachineClass SecretReference only contains the user data that is different for each pool.
• [DEVELOPER] github.com/gardener/gardener dependency is now updated to v1.19.0. For the complete list of changes, see the release notes. (#243, @ialidzhikov)

📰 Noteworthy

• [OPERATOR] The validator/admission component's Helm chart is now deploying a VerticalPodAutoscaler resource by default. If undesired or no VPA is available in the garden cluster then it can be turned of via .Values.global.vpa.enabled=false. (#223, @rfranzke)

[machine-controller-manager]

🐛 Bug Fixes

• [DEVELOPER] Azure: Improved NIC creation and deletion logic to handle NIC creation and deletions more gracefully. (gardener/machine-controller-manager#594, @prashanth26)

[terraformer]

🐛 Bug Fixes

• [OPERATOR] A bug was fixed that caused terraform to leak its finalizer on ConfigMaps and Secrets in case of an interrupt during terraform destroy. (gardener/terraformer#71, @timebertt)
• [OPERATOR] A bug was fixed that caused terraform to leak its finalizer on ConfigMaps and Secrets in case of an interrupt during terraform destroy. (gardener/terraformer#72, @timebertt)

🏃 Others

• [OPERATOR] The following terraform provider plugins are updated: (gardener/terraformer#84, @ialidzhikov)
  • hashicorp/terraform-provider-aws: 3.18.0 -> 3.32.0
  • hashicorp/terraform-provider-google: 3.27.0 -> 3.59.0
  • hashicorp/terraform-provider-google-beta: 3.27.0 -> 3.59.0
• [OPERATOR] The Terraformer now instantly removes its finalizer from the state ConfigMap if the state is empty and destroy is called. A separate Terraform destroy is not executed. (gardener/terraformer#80, @timuthy)
• [OPERATOR] Terraformer will now publish an additional image without any pre-installed terraform plugins. (gardener/terraformer#77, @Diaphteiros)
• [OPERATOR] Provides support for the Equinix Metal provider, which replaces the Packet one (gardener/terraformer#73, @deitch)
• [OPERATOR] The terraformer-openstack use now the openstack provider in version v1.37.0 (gardener/terraformer#70, @kon-angelo)
• [OPERATOR] The terraformer-openstack use now the openstack provider in version v1.36.0 (gardener/terraformer#68, @dkistner)

📰 Noteworthy

• [OPERATOR] Curl has been removed from the Terraformer image. (gardener/terraformer#69, @timuthy)