github gardener/gardener v1.59.0
on GitHub

latest releases: v1.107.2, v1.107.1, v1.106.2...
2 years ago

[gardener]

⚠️ Breaking Changes

  • [OPERATOR] The .spec.highAvailability field in the Seed is deprecated and no longer respected. It will be removed in a future release. The seed.gardener.cloud/multi-zonal label is removed and no longer respected. Instead, the Seed API now has .spec.provider.zones. Operators should enter the names of all availability zones the seed worker nodes run in. (gardener/gardener#6914, @rfranzke)
  • [OPERATOR] HAControlPlanes feature gate is added to gardener-apiserver and removed from gardenlet. (gardener/gardener#6915, @oliver-goetz)
  • [OPERATOR] The values for the gardenlet Helm chart are no longer put below .global.gardenlet. For example, before this PR the replica count was controlled via the global.gardenlet.replicaCount value while it's now controlled via replicaCount directly. Please adapt your values files accordingly. (gardener/gardener#6876, @rfranzke)
  • [OPERATOR] The validate-namespace-deletion ValidatingWebhookConfiguration is renamed to gardener-admission-controller. You might need to cleanup the existing validate-namespace-deletion ValidatingWebhookConfiguration. (gardener/gardener#6894, @AleksandarSavchev)
  • [OPERATOR] The gardener-shoot-controlplane PriorityClass is now deleted by gardenlet. Before updating to this version of Gardener, make sure that there are no extensions or external components still using this PriorityClass. Refer to this documentation to find out which PriorityClass should be used instead. (gardener/gardener#6899, @ialidzhikov)
  • [DEVELOPER] The gardener-resource-manager component has been reworked entirely. It now uses a component config instead of CLI flags. Also, its Helm chart has been reworked entirely. (gardener/gardener#6865, @rfranzke)

✨ New Features

  • [USER] It is now possible to configure the protectKernelDefaults field for the kubelet configuration in the Shoot API via .spec.{provider.workers[]}.kubernetes.kubelet.protectKernelDefaults. This will be unset by default for shoots with k8s version < 1.26 and will be defaulted to true for shoots with k8s version >= 1.26 once Gardener releases support for these versions. (gardener/gardener#6919, @dimityrmirchev)
  • [USER] It is now possible to configure the streamingConnectionIdleTimeout field for the kubelet configuration in the Shoot API via .spec.{provider.workers[]}.kubernetes.kubelet.streamingConnectionIdleTimeout. This is implicitly defaulted to 4h for shoots with k8s version < 1.26 and will be defaulted to 5m for shoots with k8s version >= 1.26 once Gardener releases support for these versions. (gardener/gardener#6937, @dimityrmirchev)
  • [USER] Kubelet configurations containerLogMaxSize and containerLogMaxFiles are now supported in the corresponding Shoot resource. Those properties manage rotation policy of the container logs. Under heavy load the default values may result in frequent log rotations. (gardener/gardener#6702, @nickytd)
  • [OPERATOR] HAControlPlanes feature gate controls if it is possible to create shoots with a HighAvailability configuration in the landscape. (gardener/gardener#6915, @oliver-goetz)
  • [DEVELOPER] log-level and log-format of provider-local can now be configured. (gardener/gardener#6875, @oliver-goetz)
  • [DEPENDENCY] Extensions can now use the extensions/pkg/util.{DetermineError,DetermineErrorCodes} functions for conveniently handling errors with codes. (gardener/gardener#6912, @acumino)
  • [DEPENDENCY] gardener-extensions-controller package includes CLI parameter for --log-level and --log-format now. (gardener/gardener#6875, @oliver-goetz)

🐛 Bug Fixes

  • [OPERATOR] An issue has been fixed for shoot clusters on multi-zonal seeds that prevented control-plane pods from being scheduled, e.g. after hibernation. With this version of Gardener, zone-pinning for shoot control-planes will be suspended until a new version of the feature will be rolled out in a future release. (gardener/gardener#6934, @timuthy)
  • [OPERATOR] A bug has been fixed which could prevent gardenlet pods from coming up in case the seccomp-profile webhook served by gardener-resource-manager is unavailable or broken. (gardener/gardener#6953, @dimityrmirchev)
  • [OPERATOR] The KubeApiServerTooManyAuditlogFailures alert is now fixed to fire also when the audit plugins buffered and truncate are failing to process an audit event. (gardener/gardener#6871, @vpnachev)
  • [OPERATOR] An issue causing the nginx-ingress-controller installed via the shoot's nginx-ingress addon to fail to start when cluster-wide seccomp defaulting is enabled is now fixed. (gardener/gardener#6895, @dimityrmirchev)

🏃 Others

  • [USER] The rotation procedure of the ServiceAccount token signing key has been improved. (gardener/gardener#6943, @rfranzke)
  • [OPERATOR] Profiling is now disabled for kube-controller-manager for shoots that have Kubernetes version >= 1.19. (gardener/gardener#6922, @dimityrmirchev)
  • [OPERATOR] You should make sure that all Shoots are getting reconciled successfully or deleted in case they still have either the etcd-encryption-secret or service-account-key secrets in their namespaces in the seed cluster. (gardener/gardener#6929, @rfranzke)
  • [OPERATOR] The zone-pinning feature for control-planes on multi-zonal seeds (introduced by #6579) has been removed. There will be a new version of the feature soon, that takes a different approach and fixes some bug and flaws along the way. (gardener/gardener#6934, @timuthy)
  • [OPERATOR] Revert removal DNSProvider from supported extension kinds until v1.60.0 or later. (gardener/gardener#6951, @MartinWeindel)
  • [OPERATOR] The ManagedResources related to seed system components are now labeled with gardener.cloud/role=system-component. (gardener/gardener#6836, @rfranzke)
  • [OPERATOR] The gardenlet now waits for all managed resources referring the shoot to be deleted before continuing with the deletion of the shoot's kube-apiserver during shoot deletion or controlplane migration. (gardener/gardener#6853, @dimityrmirchev)
  • [OPERATOR] Add new Prometheus alert ApiserverRequestsFailureRate for API Server failure rate. (gardener/gardener#6736, @cathyzhang05)
  • [OPERATOR] gardenlet no longer tries to delete Ingress resources for a Seed via the extensions/v1beta1 API (no longer served as of K8s 1.22). As Gardener supports only Seed clusters with K8s >= 1.20, it is enough to delete the Ingress resources via the networking.k8s.io/v1 API (available since v1.19). (gardener/gardener#6866, @ialidzhikov)
  • [OPERATOR] The Kubernetes Control Plane Status dashboard has been updated to show correct values for kube-controller-manager and kube-scheduler once they are deployed with multiple replicas for HA shoots. (gardener/gardener#6874, @timuthy)
  • [DEVELOPER] Update golangci to v1.50.1. (gardener/gardener#6916, @oliver-goetz)
  • [DEVELOPER] Go is updated to 1.19.3 (gardener/gardener#6941, @oliver-goetz)

[apiserver-proxy]

⚠️ Breaking Changes

🐛 Bug Fixes

  • [USER] An issue causing the apiserver-proxy-pod-webhook to wrongly remove the grpc field from livenessProbes, readinessProbes and startupProbes when defaulting a Pod is now fixed. (gardener/apiserver-proxy#24, @ialidzhikov)
  • [OPERATOR] Native arm64 builds (builds on arm hosts) are now supported. Previously only arm64 builds with qemu were supported. (gardener/apiserver-proxy#25, @ialidzhikov)

🏃 Others

[logging]

🏃 Others

Check out latest releases or
releases around gardener/gardener v1.59.0

Don't miss a new gardener release

NewReleases is sending notifications on new releases.

Get notifications