v0.23.0

[terminal-controller-manager]

🏃 Others

• [OPERATOR] Updated kube-rbac-proxy to v0.14.0 (gardener/terminal-controller-manager#123, @petersutter)
• [DEVELOPER] The Golang version has been updated to 1.19.5 (gardener/terminal-controller-manager#126, @dependabot[bot])

v0.22.0

[terminal-controller-manager]

✨ New Features

• [OPERATOR] ControllerManagerConfiguration.honourCleanupProjectMembership defines if target.credential.serviceAccountRef.cleanupProjectMembership property should be honoured. Defaults to false. (gardener/terminal-controller-manager#94, @petersutter)
  • ControllerManagerConfiguration.controllers.serviceAccount.allowedServiceAccountNames defines a list of service account names that are allowed to be cleaned up as project members. If the list is empty all names are considered as allowed.
• [DEVELOPER] With Terminal.spec.target.cleanupProjectMembership you can now indicate if the service account referenced by Terminal.spec.target.credentials.serviceAccountRef should be removed as project member if not referenced anymore by a Terminal resource. (gardener/terminal-controller-manager#94, @petersutter)

🏃 Others

• [OPERATOR] Updated kube-rbac-proxy to v0.13.1 (gardener/terminal-controller-manager#96, @petersutter)
• [DEVELOPER] The Golang version has been updated to 1.19.3 (gardener/terminal-controller-manager#107, @dependabot[bot])

v0.21.0

[terminal-controller-manager]

⚠️ Breaking Changes

• [USER] The volume mount path for the hosts root filesystem changed from /hostroot to /host (gardener/terminal-controller-manager#78, @petersutter)

🏃 Others

• [DEVELOPER] The Golang version has been updated to 1.18.4 (gardener/terminal-controller-manager#77, @dependabot[bot])

v0.20.0

[terminal-controller-manager]

✨ New Features

• [DEVELOPER] In case of a Shoot cluster, you can now reference it with spec.host.credentials.shootRef and spec.target.credentials.shootRef instead of referencing the kubeconfig secret. (gardener/terminal-controller-manager#66, @petersutter)

🏃 Others

• [OPERATOR] Updated kube-rbac-proxy to v0.13.0 (gardener/terminal-controller-manager#69, @petersutter)
• [DEVELOPER] The Golang version has been updated to 1.18.3 (gardener/terminal-controller-manager#70, @petersutter)

v0.19.0

[terminal-controller-manager]

⚠️ Breaking Changes

• [DEVELOPER] You now have to set spec.target.apiServer.caData in case the target kube-apiserver does not present a browser trusted certificate (gardener/terminal-controller-manager#64, @petersutter)

🏃 Others

• [OPERATOR] Updated kube-rbac-proxy to v0.12.0 (gardener/terminal-controller-manager#65, @petersutter)

v0.18.0

[terminal-controller-manager]

🏃 Others

• [OPERATOR] Switch to CustomResourceDefinition v1 for the Terminal resource (gardener/terminal-controller-manager#59, @petersutter)
• [OPERATOR] Go dependencies to kubernetes/* and kubernetes-sigs/controller-runtime were updated to v0.22.2 and v0.10.2 respectively (gardener/terminal-controller-manager#59, @petersutter)

v0.17.0

[terminal-controller-manager]

✨ New Features

• [OPERATOR] Added support to authenticate against GKE clusters using google service account key. In this case, the referenced secret needs to have the serviceaccount.json data key in addition to the kubeconfig data key (#57, @petersutter)

🏃 Others

• [OPERATOR] Tolerations with NoExecute effect and CriticalAddonsOnly key will be added to the terminal pod when host.pod.nodeSelector is specified in the Terminal resource. (#58, @plkokanov)
• [DEVELOPER] The Golang version has been updated to 1.16.6 (#57, @petersutter)

v0.16.0

[terminal-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Terminal resource is fetched again before updating its status. This should reduce the likelihood of getting the error the object has been modified; please apply your changes to the latest version and try again when updating the status. (#54, @petersutter)

🏃 Others

• [DEVELOPER] The Golang version has been updated to 1.16.4 (#56, @petersutter)
• [DEVELOPER] License and copyright information is specified in REUSE format. (#55, @msohn)

v0.15.0

[terminal-controller-manager]

🏃 Others

• [OPERATOR] Updated kube-rbac-proxy to v0.8.0 (#49, @petersutter)
• [DEVELOPER] The Golang version has been updated to 1.16.0 (#53, @petersutter)
• [DEVELOPER] Go dependencies to kubernetes/* and kubernetes-sigs/controller-runtime were updated to v0.20.2 and v0.8.2 respectively (#51, @petersutter)

v0.14.0

[terminal-controller-manager]

Action Required

• [DEVELOPER] The field spec.target.apiServerServiceRef is deprecated and will be removed with one of the next versions. Use spec.target.apiServer.serviceRef instead (#45, @petersutter)

Improvements

• [USER] To use an external endpoint of the target kube-apiserver you can now overwrite the server property of the kubeconfig that is mounted into the terminal pod. This can be done by setting spec.target.apiServer.server on the Terminal resource (#45, @petersutter)
• [OPERATOR] It's now possible to let the gardener-controller-manager manage the rbac for the temporary access service account by adding it to the project as member with the corresponding roles (#47, @petersutter)
• [DEVELOPER] The Golang version has been updated to 1.15.3 (#46, @petersutter)
• [DEVELOPER] Added script to setup local development certificates hack/setup-local-dev-certs (#46, @petersutter)