[github.com/gardener/gardener-extension-provider-openstack:v1.59.0]
⚠️ Breaking Changes
[OPERATOR]credential fields containing control characters (e.g. embedded newlines) are now rejected by@hebelsan[#1470]
✨ New Features
[OPERATOR]The newCloudProfileConfigfieldrootDiskAvailabilityZoneallows to create root disk volumes of worker machines in an availability zone different from the one of the machine. This supports clouds with differing compute and Cinder availability zones. It requires a machine-controller-manager-provider-openstack version that supportsrootDiskAvailabilityZone. by@rhizoet[#1452][OPERATOR]SelfHostedShootExposureis now supported by this extension. by@tobschli[#1401][OPERATOR]Metrics for the Cinder CSI driver controller are now enabled by@hebelsan[#1438][OPERATOR]ThestorageClassesin the openstack CloudProfileproviderConfignow support an optionalregionslist to overrideparametersper region, or to mark a storageClass asunavailablein a region. by@lotharbach[#1428][USER]This extension now supports shoot clusters with Kubernetes version 1.37.
You should consider the Kubernetes release notes before upgrading to 1.37. by@shafeeqes[#1454]
🐛 Bug Fixes
[OPERATOR]Fix DeleteRule calling groups.Delete instead of rules.Delete by@hebelsan[#1468][OPERATOR]Fixes incorrect reconciliation of wildcard DNS records by@hebelsan[#1436][OPERATOR]If the network overlay is disabled, the managed security group now allows incoming traffic from the pod CIDRs. Without this rule, pod traffic between nodes was dropped on Neutron backends like ML2/OVN. by@kubicgruenfeld[#1457][USER]Support disabling ssh access for openstack worker nodes by@MichaelEischer[#1453]
🏃 Others
[OPERATOR]Harden validation of OpenStack credential and resource name fields by@hebelsan[#1470][OPERATOR]Retrieve caBundle in imagevector by@hebelsan[#1423][OPERATOR]Support bring your own subnet, security group and and share network by@hebelsan[#1422][OPERATOR]Allow adding networks.ipv6 to an existing single-stack IPv4 cluster to enable dual-stack migration. by@axel7born[#1459][OPERATOR]Escape special chars in machineclass generation by@hebelsan[#1469][OPERATOR]Fix calico mutating policy CEL type-check failure on K8s 1.36 by@DockToFuture[#1473][DEPENDENCY]The following container images have been updated:- csi-attacher: v4.12.0 -> v4.13.0 (singleton)
- csi-liveness-probe: v2.19.0 -> v2.20.0 (singleton)
- csi-node-driver-registrar: v2.17.0 -> v2.18.0 (singleton) by
@federated-github-access[bot][#1433]
[DEPENDENCY]The following container images have been updated:- csi-driver-nfs: v4.13.4 -> v4.13.5 (singleton)
- csi-provisioner: v6.3.0 -> v6.4.0 (singleton)
- csi-resizer: v2.2.1 -> v2.3.0 (singleton)
- machine-controller-manager-provider-openstack: v0.27.1 -> v0.28.0 (singleton) by
@federated-github-access[bot][#1463]
[DEPENDENCY]The following container images have been updated:- csi-driver-nfs: v4.13.4 -> v4.13.5 (singleton)
- csi-provisioner: v6.3.0 -> v6.4.0 (singleton)
- csi-resizer: v2.2.1 -> v2.3.0 (singleton) by
@federated-github-access[bot][#1462]
📖 Documentation
[OPERATOR]Documented how to create Cinder volumes in a dedicated storage availability zone (availabilityStorageClass parameter together withignoreVolumeAZ: true) for OpenStack setups with multiple compute zones but a single storage zone. by@rhizoet[#1450]
Helm Charts
- admission-openstack-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.59.0 - admission-openstack-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.59.0 - provider-openstack:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.59.0
Container (OCI) Images
- gardener-extension-admission-openstack:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.59.0 - gardener-extension-provider-openstack:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.59.0