• add api resources for devpod pro external devcontainer spec management: Adds types and API for managing external devcontainer spec settings for Pro users (by @janekbaraniewski in #3117)
• breaking-change: Changed the default project namespace prefix to 'p-' from 'loft-p-' (by @FabianKramm in #2734)
• breaking-change: Platform will fail if old project namespace prefix is detected (by @FabianKramm in #2778)
• breaking-change: Removed APIs virtualclusters.cluster.loft.sh and spaces.cluster.loft.sh (by @FabianKramm in #2811)
• breaking-change: Removed isolated control plane functionality from Platform, please use https://www.vcluster.com/docs/vcluster/deploy/topologies/isolated-control-plane instead (by @FabianKramm in #2778)
• breaking-change: Removed platform cli, please use respective vCluster or DevPod CLI's instead (by @FabianKramm in #2741)
• bug: Fix duplicated clusterRef issue when importing vCluster release to platform (by @janekbaraniewski in #2736)
• bugfix: Fix sleep mode for multi-namespace virtual clusters (by @lizardruss in #3105)
• bugfix: Fixed an issue where Project Quotas of type limits would not work with extended Resources (by @neogopher in #2713)
• bugfix: Fixed an issue where idle connections were not closed correctly (by @FabianKramm in #2634)
• bugfix: Fixed an issue where platform app installation would fail when using private OCI registry as source for the helm charts. (by @neogopher in #2802)
• bugfix: Fixed an issue where retrieving metrics from Loft caused a recursive request (by @FabianKramm in #2652)
• bugfix: Fixed an issue where setting env.LEADER_ELECTION_ENABLED caused Loft to set the environment variable multiple times (by @FabianKramm in #2643)
• bugfix: Fixed an issue with chart templating causing kustomize to fail for agentOnly installations (by @neogopher in #2765)
• bugfix: Fixed an issue with helm templating for rollingUpdate deployment strategy (by @neogopher in #2862)
• bugfix: Loft will also downgrade the agent if the agent version is higher than the Loft version (by @FabianKramm in #2641)
• bugfix: Prevent deleting sleeping virtual clusters due to no network peers (by @lizardruss in #3145)
• bugfix: Track all Istio gateway activity for vclusters, regardless of destination service (by @lizardruss in #2787)
• bugfix: ensure all required labels are set on namespace when handling existing vcluster with agent (by @janekbaraniewski in #2923)
• bugfix: importing namespaces fixed (by @rohantmp in #2767)
• bugfix: makes old vCluster chart versions accessible for air-gapped Platform (by @hidalgopl in #3183)
• bugfix, enhancement: OIDC secrets as described in Using vCluster Platform as OIDC Provider will now take precedence over clients specified in the loft config's OIDC field. This means if an OIDC client is specified in both the loft config's oidc.clients field and an OIDC secret with matching clientID fields, the OIDC secret will be used for OIDC authorization. Additionally, a panic has been resolved that occurred when an OIDC secret contained a redirect URI containing the wildcard character '*' and the loft config's oidc field was empty. (by @rmweir in #3181)
• enhancement: Added tooltips describing the source of node CPU, memory, and storage metrics data (by @lizardruss in #3157)
• enhancement: Allow sleep mode features to be configured via vcluster.yaml (by @lizardruss in #2872)
• enhancement: For Platform created vCluster instances, use default vCluster k8s version (by @hidalgopl in #3175)
• enhancement: Performance improvements for loft use space and loft use vcluster commands (by @lizardruss in #2609)
• enhancement: Prevent regular application POST requests from waking sleeping resources (by @lizardruss in #2655)
• enhancement: When an app fails to install within a vCluster, the vCluster is now not in an error state anymore and instead display a warning (by @FabianKramm in #2643)
• enhancement: allow configuration of the loft project namespace prefix (by @rohantmp in #2721)
• enhancement: allow user to configure container securityContext and podSecurityContext in helm values (by @hidalgopl in #3135)
• enhancement: deprecating OIDC client on loft config. Use OIDC secrets or the new OIDC clients UI. (by @rmweir in #3160)
• enhancement: projects cannot be deleted if they contain instances annotated with non-deletable, and loft-management-admin cannot delete collections of management resources (by @rohantmp in #2958)
• feature: Add EnvironmentRef to DevPodWorkspaceInstanceSpec (by @janekbaraniewski in #3212)
• feature: Add an API endpoint ConvertVirtualClusterConfig that converts a virtual cluster config to the new v0.20 format. (by @johannesfrey in #2629)
• feature: Added a new flag helm-chart-version to the loft connect cluster command (by @FabianKramm in #2634)
• feature: automatic importing of vClusters now doesn't require any settings in the project (by @rohantmp in #2667)
• feature: change loft.sh/skip-helm-deploy annotation to loft.sh/externally-managed (by @rohantmp in #2565)
• feature: expose single-namespace renaming logic through API (by @janekbaraniewski in #2834)
• fix: Fixed an issue where ts net server would restart if multiple access keys were found (by @FabianKramm in #2612)
• fix: Require chart version during virtual cluster instance and template creation. This will allow the platform to better handle major version changes in the future. (by @lizardruss in #2608)
• fix: The oidc.clients is now deprecated. OIDC clients for use with vCluster Platform as an OIDC provider can be configured via the /oidcclients path or in the new OIDC clients config (found in the same view as the loft config). The oidc.clients field will continue to work until v5.0. In v5.0 it will be removed. OIDC clients can be created via kubectl using a secrets yaml that contains the following fields and labels:
  Labels:
  clientID: <ID for OIDC client>
component: oidcServer
  Data fields:
  name: <name that describe client>
clientID: <OIDC client ID>
clientSectret: <OIDC client secret>
redirectURIs: <OIDC redirect URIs to accept for this client> (by @rmweir in #2939)
• fix: The selected item in the select dropdown now has a light background to indicate that, that option is selected. (by @andyluak in #3176)
• fix: additionalCA will no longer override the system ca certs and instead add itself to the root ca certs directory (by @ThomasK33 in #2757)
• include devpod-crane binary in image: Downloads devpod-crane binary from release when building the image (by @janekbaraniewski in #3137)
• security: Bumped Go to version 1.22.5 and dependencies (by @ThomasK33 in #2982)
• ui change: A small improvement to the UX of the batch delete action for the vCluster table. The modal now shows the items deleted and replaces the old confirmation text with simply DELETE. (by @andyluak in #3171)
• update: Update devpod-crane -> v0.0.1-alpha.2 (by @janekbaraniewski in #3161)