v1.32.0

[gardener/gardener-extension-provider-gcp]

⚠️ Breaking Changes

• [OPERATOR] provider-gcp no longer supports Shoots or Seeds with Кubernetes version < 1.22. by @shafeeqes [#628]
• [OPERATOR] The security.gardener.cloud/pod-security-enforce annotation in the ControllerRegistration is set to baseline. With this, the pods running in the extension namespace should comply with baseline pod-security standard. by @shafeeqes [#632]

✨ New Features

• [DEVELOPER] This extension is now compatible with the MachineControllerManagerDeployment feature gate of gardenlet. by @rfranzke [#624]
• [OPERATOR] The gardener-extension-admission-gcp chart allows to optionally configure a projected volume based kubeconfig. by @timuthy [#638]

🏃 Others

• [OPERATOR] cloud-controller-manager's route controller is no longer activated for clusters with overlay network by @ScheererJ [#631]
• [OPERATOR] Remove limits from critical control plane components. by @kon-angelo [#634]
• [OPERATOR] The following image is updated:
  • registry.k8s.io/cloud-provider-gcp/gcp-compute-persistent-disk-csi-driver: v1.9.5 -> v1.9.7 by @ialidzhikov [#636]

[gardener/terraformer]

🏃 Others

• [OPERATOR] Golang has been updated to v1.20.5 by @kon-angelo [gardener/terraformer#138]
• [OPERATOR] Alpine has been updated to v1.18.2 by @kon-angelo [gardener/terraformer#138]

v1.31.0

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Included UnavailableReplicas in determining if a machine deployment status update is needed by @ialidzhikov [gardener/machine-controller-manager#834]

[gardener/gardener-extension-provider-gcp]

✨ New Features

• [USER] The GCP extension does now support shoot clusters with Kubernetes version 1.27. You should consider the Kubernetes release notes before upgrading to 1.27. by @ary1992 [#615]

🏃 Others

• [DEPENDENCY] The following dependencies were updated: by @dimityrmirchev [#618]
  • registry.k8s.io/sig-storage/csi-provisioner v3.4.0 -> v3.4.1
• [DEPENDENCY] The following dependency is updated: by @ary1992 [#604]
• github.com/gardener/gardener: v1.70.2 -> v1.73.0
• [OPERATOR] Old and obsolete logging configurations are removed. by @vlvasilev [#616]
• [OPERATOR] This extension is now build with golang 1.20.5. by @vpnachev [#622]
• [DEVELOPER] All code related to the removed APIServerSNI feature gate of gardenlet has been removed from this extension. by @rfranzke [#623]

⚠️ Breaking Changes

• [OPERATOR] With #283 provider-gcp migrated the volumesnapshot CRDs to a new dedicated ManagedResources. provider-gcp does now remove the ignored CRDs. by @ialidzhikov [#606]
• Before updating to this version of provider-gcp, make sure that the migration of the volumesnapshot CRDs from the extension-controlplane-shoot to the extension-controlplane-shoot-crds ManagedResource completed. If the migration did not complete yet, GRM will interpret the removal of the CRDs as deletion and will delete the CRDs.

v1.30.2

[gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] This extension is now build with golang 1.20.5. (gardener/gardener-extension-provider-gcp#626, @vpnachev)

[machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Included UnavailableReplicas in determining if a machine deployment status update is needed (gardener/machine-controller-manager#834, @ialidzhikov)

v1.29.5

no release notes available

v1.30.0

[gardener-extension-provider-gcp]

📖 Documentation

• [DEPENDENCY] The flags which went out-of-support in MCM v0.49.0 have been cleaned up from MCM deployment yaml. (gardener/gardener-extension-provider-gcp#585, @himanshu-kun)

🏃 Others

• [OPERATOR] a sustainable way to look for available bastion OS images (gardener/gardener-extension-provider-gcp#568, @tedteng)
• [OPERATOR] machineDeployment will have the label topology.gke.io/zone when created. (gardener/gardener-extension-provider-gcp#591, @elankath)
• [OPERATOR] The admission/validation component is now adapted such that it works well in garden cluster with enabled NetworkPolicy protection (default since gardener/gardener@v1.71 when garden cluster is managed by gardener-operator). (gardener/gardener-extension-provider-gcp#594, @rfranzke)
• [OPERATOR] Update go version to v1.20.4 (gardener/gardener-extension-provider-gcp#599, @kon-angelo)
• [OPERATOR] Update cloud-provider-gcp image v1.24.9 -> v1.24.13 (gardener/gardener-extension-provider-gcp#600, @kon-angelo)
• [OPERATOR] Update cloud-provider-gcp image v1.25.5 -> v1.25.9 (gardener/gardener-extension-provider-gcp#600, @kon-angelo)
• [OPERATOR] Update cloud-provider-gcp image v1.26.1 -> v1.26.4 (gardener/gardener-extension-provider-gcp#600, @kon-angelo)
• [OPERATOR] Support for CMEK Disk Encryption for volumes (gardener/gardener-extension-provider-gcp#607, @elankath)
• [OPERATOR] Update CCM configuration to always enable the route controller regardless if overlay is used. This is done to prevent a race condition that would mark an otherwise healthy node with the NetworkUnavailable condition. (gardener/gardener-extension-provider-gcp#613, @kon-angelo)
• [OPERATOR] The following dependencies were updated: (gardener/gardener-extension-provider-gcp#619, @vpnachev)
  • registry.k8s.io/cloud-provider-gcp/gcp-compute-persistent-disk-csi-driver v1.9.4 -> v1.9.5
• [OPERATOR] Introduce flow-based infrastructure reconciliation without Terraformer. To use it, the Shoot or Infrastructure objects must be annotated with gcp.provider.extensions.gardener.cloud/use-flow=true. (gardener/gardener-extension-provider-gcp#495, @kon-angelo)
• [DEPENDENCY] The following dependency is updated: (gardener/gardener-extension-provider-gcp#596, @shafeeqes)
  • github.com/gardener/gardener: v1.67.1 -> v1.70.2

[machine-controller-manager]

⚠️ Breaking Changes

• [OPERATOR] Removal of the following flags (and corresponding fields in associated structs): 'machine-creation-timeout' 'machine-drain-timeout', 'machine-pv-detach-timeout', 'machine-health-timeout=10m', 'machine-safety-apiserver-statuscheck-timeout', 'machine-safety-apiserver-statuscheck-period', 'machine-safety-orphan-vms-period', 'machine-max-evict-retries', 'node-conditions', 'bootstrap-token-auth-extra-groups', 'delete-migrated-machine-class'. The MCM no longer accepts these flags since these are options handled by the Machine Controller invoked by platform specific provider launchers. (gardener/machine-controller-manager#769, @elankath)
• [DEVELOPER] Deletion of 'Driver.GenerateMachineClassForMigration'. Providers need to adapt to this. (gardener/machine-controller-manager#769, @elankath)

✨ New Features

• [USER] Machine object won't turn from Pending to Running state if node.gardener.cloud/critical-components-not-ready taint is there on the corresponding node. (gardener/machine-controller-manager#778, @SimonKienzler)

🐛 Bug Fixes

• [USER] An edge case where all the machineSets were scaled down to zero has been dealt with. (gardener/machine-controller-manager#803, @himanshu-kun)
• [USER] Fix a bug in the bootstrap token creation that caused node to not be able to join the cluster due to an expired bootstrap token. (gardener/machine-controller-manager#773, @schrodit)
• [USER] An edge case where all the machineSets were scaled down to zero has been dealt with. (gardener/machine-controller-manager#804, @himanshu-kun)
• [USER] An edge case where outdated DesiredReplicas annotation blocked a rolling update is fixed. (gardener/machine-controller-manager#822, @rishabh-11)
• [OPERATOR] An issue causing nil pointer panic on scaleup of the machinedeployment along with trigger of rolling update, is fixed (gardener/machine-controller-manager#817, @himanshu-kun)

📖 Documentation

• [DEVELOPER] Added proposal for hot-update of resources (instance/Nic/Disk) (gardener/machine-controller-manager#761, @himanshu-kun)

🏃 Others

• [OPERATOR] CrashloopBackoff machines will turn to Running quicker (gardener/machine-controller-manager#806, @rishabh-11)
• [OPERATOR] CVE categorization for MCM has been added. (gardener/machine-controller-manager#791, @dkistner)
• [DEVELOPER] The API generation now works again. Previously the API docs was generated to a location that was ignored by git and other API docs file was maintained. (gardener/machine-controller-manager#800, @ialidzhikov)
• [DEVELOPER] Bump k8s.io/* dependencies to v1.26.2 (gardener/machine-controller-manager#792, @afritzler)

[machine-controller-manager-provider-gcp]

⚠️ Breaking Changes

• [OPERATOR] Support for migration of machineClass is dropped by the mcm-provider (gardener/machine-controller-manager-provider-gcp#80, @himanshu-kun)

🏃 Others

• [USER] Updated golang version to 1.20.4 (gardener/machine-controller-manager-provider-gcp#83, @rishabh-11)
• [USER] CMEK disk encryption is now supported for disks attached to VM. Refer https://github.com/gardener/machine-controller-manager-provider-gcp/blob/master/kubernetes/machine-class.yaml for example (gardener/machine-controller-manager-provider-gcp#84, @elankath)
• [USER] Updated golang version to 1.20.5 (gardener/machine-controller-manager-provider-gcp#87, @rishabh-11)
• [OPERATOR] CVE categorization for mcm-provider-gcp has been added. (gardener/machine-controller-manager-provider-gcp#72, @dkistner)
• [DEVELOPER] Enhanced Dev Testing Doc for CMEK (gardener/machine-controller-manager-provider-gcp#85, @elankath)
• [DEPENDENCY] upgraded dependency: (gardener/machine-controller-manager-provider-gcp#80, @himanshu-kun)
  • github.com/gardener/machine-controller-manager -> v0.49.1

[terraformer]

🏃 Others

• [OPERATOR] Update alpine base image to v3.17.3 (gardener/terraformer#136, @kon-angelo)
• [OPERATOR] Terrafomer base image has been updated from alpine:3.17.2 to alpine:3.18.0 ([gardener/terraform...

v1.29.4

[gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] The following dependencies were updated: (gardener/gardener-extension-provider-gcp#620, @vpnachev)
  • registry.k8s.io/cloud-provider-gcp/gcp-compute-persistent-disk-csi-driver v1.9.4 -> v1.9.5

v1.29.3

[gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] Remove the error code check from NodesChecker to prevent nil pointer panic. (gardener/gardener-extension-provider-gcp#595, @acumino)

v1.29.2

no release notes available

v1.29.1

[gardener-extension-provider-gcp]

🐛 Bug Fixes

• [DEPENDENCY] gcp-compute-persistent-disk-csi-driver to v1.9.4 (gardener/gardener-extension-provider-gcp#590, @kon-angelo)

v1.29.0

[gardener-extension-provider-gcp]

⚠️ Breaking Changes

• [USER] The default NAT mapping has changed to endpoint-dependent. Existing connections should not be interrupted but users will need to adapt their configuration if they want to keep Endpoint-Independent Mapping for their CloudNAT instance. (gardener/gardener-extension-provider-gcp#571, @kon-angelo)

✨ New Features

• [USER] Users can now specify whether they want to enable or disable Endpoint-Independent Mapping. (gardener/gardener-extension-provider-gcp#571, @kon-angelo)
• [OPERATOR] csi-driver-node is annotated with the wait-for-csi-node annotation. Gardener uses this to only schedule workload pods to a Node once the driver has been successfully registered with the CSINode object. (gardener/gardener-extension-provider-gcp#567, @SimonKienzler)
• [OPERATOR] The csi-snapshot-validation Service deployed by the provider-gcp extension can now be topology-aware (depending on the Seed setting and the Shoot HA failure tolerance type). For more details, see the Topology-aware Traffic Routing documentation. (gardener/gardener-extension-provider-gcp#574, @ialidzhikov)

🐛 Bug Fixes

• [OPERATOR] An issue has been fixed which caused undesired PATCH requests when updating the state in the Worker or ShootState resources. (gardener/gardener-extension-provider-gcp#580, @oliver-goetz)
• [OPERATOR] The stale healthcheck conditions from the extension are now properly cleaned up. (gardener/gardener-extension-provider-gcp#575, @acumino)

🏃 Others

• [OPERATOR] The gardener-extension-admission-gcp Service in the gardener-extension-admission-gcp chart can now be configured to be topology-aware. (gardener/gardener-extension-provider-gcp#582, @ialidzhikov)
• [OPERATOR] Disable SNAT to the upstream dns server for non-overlay shoot cluster. (gardener/gardener-extension-provider-gcp#556, @DockToFuture)
• [OPERATOR] Adapted extension components to support the FullNetworkPoliciesInRuntimeCluster feature gate introduced by gardener/gardener v1.66, see here and #7352 for more information. (gardener/gardener-extension-provider-gcp#566, @oliver-goetz)
• [OPERATOR] Update csi-driver version v1.7.3 -> v1.9.1 (gardener/gardener-extension-provider-gcp#572, @kon-angelo)
• [DEVELOPER] Update to Go 1.19.7. (gardener/gardener-extension-provider-gcp#565, @oliver-goetz)

[machine-controller-manager]

🐛 Bug Fixes

• [USER] An edge case where all the machineSets were scaled down to zero has been dealt with. (gardener/machine-controller-manager#804, @himanshu-kun)

[terraformer]

🏃 Others

• [OPERATOR] Update TF_VERSION 0.15.5 -> 1.3.9 and update how the local providers are fetched and stored to be compatible with the latest TF specification. (gardener/terraformer#133, @kon-angelo)