• [ATTN] Fix orphaned apiserver-is-running initContainers in usercluster controlplane. This can cause a short reconciliation burst to bring older usercluster resources in all Seed clusters up to date. Tune the maxReconcileLimit if needed (#6336)
• [ATTN] Default to the latest available OpenStack CCM version. This fixes a bug where newly-created OpenStack clusters running Kubernetes 1.19 were using the in-tree cloud provider instead of the external CCM. Those clusters will remain to use the in-tree cloud provider until the CCM migration mechanism is not implemented. The OpenStack clusters running Kubernetes 1.19+ and created with KKP 2.15.6+ will use the external CCM (#6300)
• Dex does not require cert-manager CRDs to be installed anymore, certificates are acquired via Ingress annotation (#6284)
• Add option to specify Pod Node Selector Configuration (#2957)
• Extend Cluster CRD for PodNodeSelectorAdmissionPluginConfig (#6402)
• Add admission control configuration for the user cluster API deployment (#6431)