ACTION REQUIRED
- The default values for webhook flags
tls-cert-path
andtls-key-path
have been changed to/tmp/cert/tls.crt
and/tmp/cert/tls.key
respectively. This is a result of updating it to use certificates generated from cert-manager (#1644) - Deprecation: User data plugins for machine-controller are deprecated and will soon be removed. Operating System Manager is the successor of user data plugins. It's responsible for creating and managing the required configurations for worker nodes in a Kubernetes cluster with better modularity and extensibility. Please refer to Operating System Manager for more details (#1642)
Bugfixes
- Allow external CCMs to handle failing node objects before MC (#1645)
- Anexia Provider: fix cleanup of failed machines (#1600)
- Anexia Provider: Fix nil pointer exception when providing no network configuration (#1646)
- Anexia Provider: fixed race condition in
Cleanup
method (#1571) - Cancelled or timed out admission requests are not cached anymore (#1593)
- For generating cloud-config for Kubernetes 1.27 machines on AWS, make sure to set
DisableStrictZoneCheck
tofalse
, as the flag is not supported in 1.27+ anymore (#1638) - Machine deletion does not get stuck if assigned floating ip is absent (e.g. deleted externally) (#1616)
- Reduce default log verbosity from 6 to 4 (#1597)
New Feature
- Add machine_controller_provisioning_time_seconds and machine_controller_deprovisioning_time_seconds metrics to the machine controller (#1572)
- Add support for Kubernetes v1.27 (#1623)
- Add support for OpenNebula as a cloud provider (#1450)
- Add VMs to an Anti-Affinity rule (vSphere only). This requires additional permissions: (#1647)
- AutoDeploy
- Rule
- Create
- Delete
- Edit
- Rule
- Host
- Inventory
- Modify cluster
- Inventory
- AutoDeploy
- Anexia Provider: Enable up to 4 custom dns entries (#1637)
- AWS: Machines using a VPC without
enableDnsHostname
enabled will now fail validation, as those machines would not be able to register themselves successfully as nodes in the cluster (#1590) - Logging was replaced with Zap; the klog-related CLI flags like
-logtostderr
,-v
etc. have been removed; use-log-debug=true/false
and-log-format=text/json
instead (#1606) - Support for finding nodes by providerID for VMware Cloud Director, Nutanix, and linode (#1568)
- Support for Vultr cloud provider (#1531)
- Support Public IPs assignments for Hetzner cloud (#1579)
- Create the file
/etc/iscsi/initiatorname.iscsi
, if not present, start and enable theiscsid.service
for any new VM, if you use flatcar nodes on Nutanix (#1596) - VMware Cloud Director now supports authentication using API Token (#1612)
Chore
- Default timeout for OpenStack client has been increased to 300 seconds (#1570)
- Update to Go 1.20.5 (#1659)
Documentation
- Clarify provider status for Linode, Vultr and OpenNebula as community providers (#1631)