Merge Requests integrated in this release
36 merge requests were integrated in this repo between 1.4.17 and 1.4.18.
These notes don't account for the MRs merged in secondary repos.
Networking
- [backport-1.4] capo-contrail-bgpaas fixes !7532 ~"backport" ~"capo"
- [backport 1.4] Multus: prevent secondary interface loss on node boot/reboot and pod restart !7739 ~"type::bug"
OpenStack ~capo
- Update heat-operator to v0.1.3 !7937 ~"renovate"
- [backport-1.4] capo-contrail-bgpaas fixes !7532 ~"area:networking" ~"backport"
Baremetal ~capm3
- Update misc-controllers-suite to v1.1.6 !7278 ~"area:capi" ~"renovate"
- [release-1.4] reload ironic and bmo when ironic-cert is renewed !7156 ~"area:capi"
- [release-1.4] improve ironic-cert-reload Policy by adding deployment existence as precondition !7373
Monitoring
- Update Sylva Helm chart sylva-thanos-rules to v0.1.7 !7219 ~"area:observability" ~"renovate"
Observability
- Update Sylva Helm chart sylva-thanos-rules to v0.1.7 !7219 ~"monitoring" ~"renovate"
Security
- [Backport 1.4] Fix server-side apply conflict on .data.secrets by adding --force-conflicts !7720
Bug Fixes
- [backport-1.4] Do not rely on gitlab CI cache in delete workload cluster job !8021 ~"area:capi"
Other
- [backport 1.4] Upgrade runner-aas to 1.4.0 and remove Equinix references !7230
- [backport-1.4] sylva-units: allow templating helm_chart_versions !7314 ~"area:units-framework"
- [backport-1.4] Prevent password leaking in Vault resource !7333 (issues: #3818)
- Add default for ironic-cacert missing secret in kyverno policy !7346 ~"area:capi"
- [backport-1.4] Fix vault sso secret !7360
- [backport-1.4] check-sylva-units-k8s-versions.py changes !7335 ~"area:CI"
- [release-1.4] Allow changing snmp exporter scrape timeout/interval !7372
- [backport 1.4] Runner aas on GCP !7389 ~"area:CI"
- Validate secret exists for cert renewal !7374 ~"area:misc"
- [backport 1.4] Fix persistent runner cleaning and job references !7448 ~"area:CI" ~"backport"
- [Backport 1.4] - Change CI values patching order !7431 ~"area:CI" ~"backport"
- [backport 1.4] Avoid launching useless jobs on deployment runners !7452 ~"area:CI" ~"backport"
- [backport-1.4] Add system-node-critical priority class to Whereabouts IPAM pods !7491 (issues: #3870)
- fix neuvector controller pod failure !7562
- [backport-1.4] Prevent Secret data leakage in CI logs by using server-side apply !7638 (issues: #3919)
- [release-1.4] Revert "Prevent Secret data leakage in CI logs by using server-side apply" !7655
- [backport-1.4] CI: Make enabled/disabled units take precedence over any other configuration !7707 ~"CI::configuration" ~"area:CI" ~"backport"
- [backport-1.4]: Set per unit-timeout and increase global timeout in order to avoid transient failures during check status of sylva test units !7752 ~"area:CI" (issues: #3085)
- [backport-1.4] Ease default minio pools configuration !7746 (issues: #3900)
- [backport-1.4] Fix minio serverCount computation !7900
- [backport-1.4] normalise the version by removing '/' prefix in check_downgrade_versions script !7911 ~"area:CI" ~"backport"
- [backport-1.4] Separate sylva-toolbox caches based on the current branch / MR / target branch !7931
- [1.4] fix rke2-charts versions for 1.29 !8124 ~"area:kubernetes-core" (issues: #4160)
Other dependency upgrades
CI
- Update External dependencies !5691 ~"area:CI" ~"area:observability" ~"area:security" ~"capm3" ~"capo" ~"capv" ~"logging" ~"monitoring" ~"okd" ~"renovate" ~"rke2" ~"security"
Contributors
15 people contributed.
Advit Pandey, Akshay Yadav, Aurélien Sollaud, Bogdan Antohe, Cristian Manda, Dragos Gerea, Francois Eleouet, Jonathan Gayvallet, Loic Nicolle, Manik Bindlish, Médéric De Verdilhac, Priya Goyal, Sakshi Choudhary, Teodora Pirvan, Thomas Morin