Pause and Resume vclusters
vcluster is now able to pause and resume. Pausing a vcluster means to temporarily scale down the vcluster and delete all its created workloads on the host cluster. This can be useful to save computing resources used by vcluster workloads in the host cluster.
For more information please checkout the vcluster docs
Expiring kube configs & automatic service account creation
vcluster is now able to automatically create service account tokens for generated kube configs, which allow you to easily create kube configs for other vcluster users that should not be cluster admin. For example:
# Create a kube config for a cluster viewer
vcluster connect my-vcluster -n my-vcluster --service-account viewer --cluster-role view
# OR: create a kube config for a cluster admin
vcluster connect my-vcluster -n my-vcluster --service-account admin --cluster-role cluster-admin
# OR: create a kube config that expires after an hour
vcluster connect my-vcluster -n my-vcluster --service-account viewer --cluster-role view --token-expiration 3600
This makes it also possible to use vcluster more easily without ingresses that require ssl passthrough. For more information please checkout the vcluster access docs and vcluster ingress docs
Support for VolumeSnapshots
vcluster now supports syncing of volume snapshots between the host and virtual cluster, that can be enabled via a values.yaml:
rbac:
clusterRole:
enabled: true
role:
extended: true
syncer:
extraArgs:
- --sync=volumesnapshots
and then used via:
vcluster create ... -f values.yaml
Other Changes
- cli: New flag
--insecureforvcluster connectto create a kube config withinsecure-skip-tls-verify - cli: Add v1.23 support for k3s
- syncer: Start controllers after api server started
- chart: Fixed a problem where k3s would not startup correctly on cgroupsv2 nodes (#264)
- other: For each release there will be a new
vcluster-images.txtwhich holds all the needed images by vcluster. In addition, we include two scripts to download and push the needed images automatically