[github.com/gardener/gardener-extension-shoot-dns-service:v1.95.0]

🏃 Others

• [OPERATOR] Scope per-shoot dnsentries RBAC to its namespace by @MartinWeindel [#857]
• [OPERATOR] Return nil SecretRef when external DNSRecord is absent by @MartinWeindel [#858]
• [OPERATOR] Add support for disabling DNS provider types by @MartinWeindel [#865]
• [USER] Adds the optional dnsProviderReplication.namespaceRestrictionEnabled field to the DNSConfig. When enabled, replicated DNSProviders are restricted to their own namespace, enabling multi-tenant single-cluster setups via the external-dns-management next-generation controller.
  Only effective when the next-generation controller is used and replication is enabled; ignored otherwise by @MartinWeindel [#853]

[github.com/gardener/external-dns-management:v0.54.0]

⚠️ Breaking Changes

• [OPERATOR] aws-route53 providers can only use AWS_USE_CREDENTIALS_CHAIN when the operator has enabled it via the environment variable ALLOW_AWS_CREDENTIALS_CHAIN=true on the dns-controller-manager. Otherwise the provider is rejected during validation. This is typically only relevant for stand alone deployments. by @MartinWeindel [#1155]
• [USER] DNSEntries with spec.reference set is not supported anymore. It now fails reconciliation instead of inheriting attributes from the referenced entry. by @MartinWeindel [#1162]

🐛 Bug Fixes

• [OPERATOR] [aws-route53] validate properties even when providerConfig is present. by @MartinWeindel [#1174]
• [OPERATOR] [next-generation] Release DNS accounts on provider delete and credential rotation. by @MartinWeindel [#1171]
• [OPERATOR] [next-generation] fix: nil-guard SecretRef in Secret watch map func of source controller by @MartinWeindel [#1161]
• [OPERATOR] [next-generation] fix(dnsentry): normalize DNS name case before suffix matching by @MartinWeindel [#1163]
• [OPERATOR] fix(alicloud): use comma-ok type assertion in isSDKErrorWithCode by @MartinWeindel [#1173]
• [OPERATOR] [next-generation] fix: evict stale annotation state entries by @MartinWeindel [#1165]
• [USER] [next-generation] Fix: re-reconcile conflicting DNSAnnotations after active one is deleted by @MartinWeindel [#1183]

🏃 Others

• [OPERATOR] Validate and allow configuring the Google service account token_uri by @MartinWeindel [#1164]
• [OPERATOR] [powerdns,infoblox,rfc2136]: Sanitize provider errors by @MartinWeindel [#1167]
• [OPERATOR] fix(remote): nil-guard ChangeRequest in UnmarshalChangeRequest by @MartinWeindel [#1168]
• [OPERATOR] fix(openstack): sanitize Keystone authentication error by @MartinWeindel [#1166]
• [OPERATOR] [next-generation] Cap dnscache TTL by @MartinWeindel [#1172]
• [OPERATOR] feat(legacy): Add disable-provider-types option to legacy controller by @MartinWeindel [#1186]
• [OPERATOR] [powerdns] use dedicated http client per provider. by @MartinWeindel [#1143]

application/spdx+json

• gardener-extension-admission-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service@sha256:30665b60db18334c36a5671720294ffeb169bc22e25dbac9f77d43d2e29c51d6
• gardener-extension-admission-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service@sha256:ff786d7f9f7e3b5d3a571b25863692761b972a3b447a99bf4fcd70a48e8072dd
• gardener-extension-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service@sha256:2869ada0e6274e2bb1bdd076abf541d9e6677bddd4b39c12cda72bcc0e065218
• gardener-extension-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service@sha256:809796c6cd88cb254ea4ef8bb7a29a38fd9d4ade8dfaf11f785c67446d46a731

application/vnd.cyclonedx+json

• gardener-extension-admission-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service@sha256:539c61517c30ed2827d2094ff99405daaae079c01edc280fa5f89ebc9747b4f4
• gardener-extension-admission-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service@sha256:c0f9eddca587a3cd7bbe3d120301df8bc61f79b3b1b3d7cef28a9584802eeed4
• gardener-extension-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service@sha256:4df92cea7aad743bbae6cb977b9c242d3b9e4965ddec019bd68d4c37cb587a8f
• gardener-extension-shoot-dns-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service@sha256:c4f5eb0fce0c682be5125855440e61db08bcdfccf7724481182a1da0232568e9

Helm Charts

• shoot-dns-service-admission-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service-admission-application:v1.95.0
• shoot-dns-service-admission-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service-admission-runtime:v1.95.0
• shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service:v1.95.0

Container (OCI) Images

• gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.95.0
• gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.95.0