Gardener Review Meetings 2022 β
Overview β
In case you couldn't participate and are interested in catching up, you can find the contents of the review meetings we have had in 2022 here.
Note that all review meetings in 2022 were SAP-internal meetings back then. Despite those, we also had a few Community Meetings in the open.
Reviews β
2022/12/07 - v1.61 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@grolu | 10m | πΉ Recent Gardener Dashboard Features | dashboard (repo) |
@shreyas-s-rao | 5m | π Grafana Dashboard For Multi-Node ETCD | #7023 |
@DockToFuture | 10m | πΈοΈ Removal Of Overlay Networks | backlog#29 (issue) |
@kon-angelo | 5m | π·οΈ Annotate OpenStack VMs With Pool Labels | provider-openstack#511 |
@rfranzke | 10m | π§πΌβπΎ Introduction Of Gardener Operator | #7009, #7048 |
No Demo, But Still Worth Celebrating π β
- πͺ [USER] Gardener does no longer support shoot clusters with Kubernetes versions
< 1.20
. [...] #6987 - β¨ [USER] The
kube-apiserver
is now verifying the server certificates presented bykubelet
s. #7047 - πͺ [OPERATOR] The already deprecated
SeedKubeScheduler
feature gate is now removed. [...] Instead, use thebin-packing
scheduling profile. #7052 - β¨ [OPERATOR] The
gardener-seed-admission-controller
binary has been dropped from the code. Its logic has been merged intogardener-resource-manager
. #7053
2022/11/23 - v1.60 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@rfranzke | 10m | π¨βπ©βπ¦ High Availability Deployment Configurations | #6967, #6982, #6989, #6992 |
@seshachalam-yv | 5m | π§ͺ E2E Tests For Upgrading Shoot s To Become Highly Available | #6910 |
@istvanballok, @rickardsjp | 10m | π§Ύ Monthly Average Resource Usage of Shoot s | #6944 |
@axel7born | 5m | π¦ Disable DNS Query Forwarding For External Domains | #6942 |
@danielfoehrKn | 10m | π« Prevent containerd -Monitor From Terminating containerd-shim s | #6696 |
No Demo, But Still Worth Celebrating π β
- β¨ [OPERATOR] The field
ManagedSeed.spec.seedTemplate
has been deprecated and will be removed very soon in a future release of Gardener. [...] #7006 - β¨ [OPERATOR] The seed
vpa-recommender
is no longer scaled by VPA. Instead, fixed resource request values are used. #7001 - π [OPERATOR] A bug was fixed where sometimes the
kube-apiserver
was deleted during shoot deletion flow even though there were still shoot managed resources present. #7008 - β¨ [DEPENDENCY]
Deployment
s orStatefulSet
s deployed by extensions in seed or shoot clusters can now benefit from the newhigh-availability-config
webhook for automatically mutating the HA-related configuration of these resources. Please refer to this document. #6967 - β¨ [DEPENDENCY] Extension controllers no longer perform owner checks based on the owner
DNSRecord
at the start of their reconciliations. #6973
2022/11/09 - v1.59 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@rfranzke | 5m | π¨βπ©βπ¦ High Availability-related API Changes | #6914, #6915 |
@briantopping, @tuxgoose | 10m | π§ͺ TestMachinery Running Alongside of Google Cloud VMware Engine | provider-vsphere (repo) |
@dimityrmirchev | 5m | π kubelet Container Logs Maximum Configurations | #6702 |
No Demo, But Still Worth Celebrating π β
- β¨ [USER] The rotation procedure of the
ServiceAccount
token signing key has been improved. #6943 - β¨ [OPERATOR] The
ManagedResource
s related to seed system components are now labeled withgardener.cloud/role=system-component
. #6836 - β¨ [DEPENDENCY] Extensions can now use the
extensions/pkg/util.{DetermineError,DetermineErrorCodes}
functions for conveniently handling errors with codes. #6912 - β¨ [DEPENDENCY]
gardener-extensions-controller
package includes CLI parameter for--log-level
and--log-format
now. #6875 - β¨ [DEVELOPER] The
gardener-resource-manager
component has been reworked entirely. It now uses a component config instead of CLI flags. Also, its Helm chart has been reworked entirely. #6865
2022/11/02 - v1.58 Release (Part II) β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@petersutter | 10m | πΉ Recent Gardener Dashboard Updates | dashboard (repo) |
@plkokanov | 10m | π Extension Controller Heartbeats | #6626 |
@rfranzke | 10m | πͺͺ kubelet 's Server Certificate | #6784 |
2022/10/26 - v1.58 Release (Part I) β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@istvanballok | 5m | π« Eliminating VPA Exporter | #6771 |
@istvanballok | 10m | π€― Remote Local Setup - WHAT??? | #6730 |
@timuthy | 10m | πΏ Topology Spread Constraints | #6665, #6674, #6685 |
@axel7born | 10m | π Network Policies in Seed s for Istio | #6765, #6826 |
@timebertt | 5m | β‘οΈ Making Resource-Manager's Health Controller Lightning-Fast | #6770 |
No Demo, But Still Worth Celebrating π β
- πͺ [USER]
Shoot
s with failure tolerance typenode
can be scheduled onSeed
s with.spec.highAvailability != nil
only. #6833 - π [USER] Shoot worker definitions are now validated using
.spec.kubernetes.kubelet
when.spec.provider.workers[].kubernetes.kubelet
is not specified. #6741 - πͺ [OPERATOR]
HAControlPlanes
feature flag is removed fromgardener-scheduler
. #6833 - πͺ [OPERATOR] Remove
DNSProvider
from supported extension kinds. #6840 - π [OPERATOR] Remove
/scale
subresource fromEtcd
CRD. #6850 - β¨ [OPERATOR] Short names for
Machine
(mc
),MachineClass
(mcc
),MachineDeployment
(mcd
), andMachineSet
(mcs
) resources are now added. #6787 - β¨ [OPERATOR] Gardenlet will not start in case the seed configuration is incorrect, i.e. if the node, pod or service network specified in the Seed resource do not match to the cluster reality. #6782
2022/10/12 - v1.57 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@seshachalam-yv | 5m | π§ͺ Local E2E Tests For High Availability Scenario | #6719 |
@vpnachev | 10m | βοΈ Extension For Image Signature Verification | shoot-lakom-service (repo) |
@ialidzhikov | 5m | πͺ΄ Seed Selector in CloudProfile and Shoot | #6680 |
No Demo, But Still Worth Celebrating π β
- β¨ [USER] The create/modify/delete permissions for
ServiceAccount
s assigned toProject
members with the admin role are now removed. Read permissions are preserved. [...] #6740 - πͺ [OPERATOR] Deprecated functions
DeprecatedDetermineError
andDeprecatedDetermineErrorCodes
will be dropped in the upcoming releases, extensions using these functions now need to use their own methods to get the error code from the errors. #6677 - β¨ [OPERATOR] Logs from pods managed by
garden-resource-manager
will be scraped and stored in the shoot's Loki. #6748 - β¨ [OPERATOR] The
ShootCARotation
andShootSARotation
feature gates have been promoted to beta and are now enabled by default. [...] #6734
2022/10/06 - v1.56 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@rishabh-11 | 10m | πΌ Configurable Throughput for AWS Disks | machine-controller-manager-provider-aws#95 |
@ScheererJ | 10m | π§· Make Istio's Ingress Gateway Traffic Zone-Aware | #6653 |
@shafeeqes | 10m | β Kubernetes 1.25 Support | #6638 |
@plkokanov | 10m | π Validation For Admission Plugins | #6625 |
No Demo, But Still Worth Celebrating π β
- β¨ [USER] Introduce shoot spec field
spec.controlPlane
to allow enabling HA control planes with failure tolerance type ofnode
orzone
. [...] #6530 - β¨ [OPERATOR] gardenlet is now using
gcr.io/distroless/static-debian11:nonroot
instead of versions ofalpine
as a base image. #6641 - β¨ [DEVELOPER] The e2e tests do now also tear down the Gardener environment, effectively verifying whether the
Seed
deletion works as expected. #6664
2022/09/21 - v1.55 Release (Part II) β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@plkokanov | 10m | π Progressing Status For Seed Conditions | #6551, #6587, #6590 |
@oliver-goetz | 5m | πΏ Replacement Of Release Milestone GitHub Action | #6627 |
@istvanballok, @wyb1, @rickardsjp | 15m | π containerd -Related Monitoring Fixes | #6574, #6628 |
@rfranzke | 5m | πΏ Local Container Image Pull-Through Cache | #6591 |
2022/09/14 - v1.55 Release (Part I) β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@grolu | 5m | πΉ Dashboard Release Updates | dashboard@1.61.0 |
@ishan16696 | 10m | πΎ ETCD Member Restoration | etcd-backup-restore#509 |
@ialidzhikov | 5m | β Do Not Run Privileged Containers | backlog#7 (issue) |
@MartinWeindel, @ScheererJ | 10m | π Custom AWS Route Controller | provider-aws#591, provider-aws#596 |
@shafeeqes | 5m | π‘ PodSecurityPolicy -> Pod Security Admission Migration Update | #5250 (issue) |
No Demo, But Still Worth Celebrating π β
- β¨ [DEVELOPER] The existing
ManagedSeed
e2e test has been enhanced with verifications for the three gardenlet kubeconfig rotation scenarios. #6568 - β¨ [OPERATOR] gardenlet's
SeedKubeScheduler
feature gate is now deprecated in favor of the bin-packing scheduling profile that can be configured for aShoot
referred by aManagedSeed
. #6599 - β¨ [OPERATOR] Gardenlet now checks that the seed network configuration conforms to the reality in the seed cluster in case the seed is a shoot itself. #6576
- π [OPERATOR] A bug has been fixed which caused the
EveryNodeReady
condition on Shoots to becomeFalse
and complaining about outdated cloud configs on nodes during rolling updates. #6555
2022/08/31 - v1.54 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@ialidzhikov | 10m | π‘ Seccomp Profile Defaulting For Seed Workload | #6450 |
@MartinWeindel | 5m | π Network Problem Detector Updates | shoot-networking-problemdetector#21, shoot-networking-problemdetector#18 |
@ScheererJ | 10m | π¬ Shoot DNS Rewriting | #6192 |
@MartinWeindel | 5m | ππ»ββοΈ Weighted Routing Policy For DNSEntry s | external-dns-management#270 |
@timuthy | 10m | π Zone Pinning on Multi-Zonal Seeds | #6579 |
No Demo, But Still Worth Celebrating π β
- β¨ [DEVELOPER] Gardener envtest now supports running against an existing gardener setup via
USE_EXISTING_GARDENER
, see doc #6497 (will be presented in the next review meeting) - β¨ [DEVELOPER] A new
gomegacheck
linter is now executed on make check. [...] #6455 - β¨ [OPERATOR]
Plant
API has been dropped, operators need to clean upPlant
resources before upgrading the Gardener version to v1.54. #6472 - β¨ [OPERATOR] The
DNSProvider
extension kind was removed. Please make sure to remove anyControllerRegistration
s that include the DNSProvider kind. [...] #6479 - π [OPERATOR] Shoots are correctly labeled for globally enabled extensions now. #6534
2022/08/17 - v1.53 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@oliver-goetz | 5m | βοΈ Custom REST Configuration For Shoot Clients | #6276 |
@unmarshall | 10m | π [GEP-20] HA Shoot Control Planes | #6287 |
@vlvasilev | 10m | πͺ΅ Shoot event-logger | #6223 |
@dimityrmirchev | 5m | π· Label All Managed Resources | #6393 |
@ishan16696 | 10m | π§ͺ E2E Tests For etcd-druid | etcd-druid#296 |
No Demo, But Still Worth Celebrating π β
- β¨ Enforce that Shoot nginx-ingress addon and Seed VPA are not enabled for ManagedSeeds. #6388
- β¨ Promote the
SecretBindingProviderValidation
feature gate to GA. #6429 - β¨ Promote
SeedChange
andCopyEtcdBackupsDuringControlPlaneMigration
feature gates to beta. #6452
2022/08/03 - v1.52 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@dkistner | 10m | πͺͺ Pod CIDR Allocation For Nodes | provider-azure#539 |
@timebertt | 5m | π Streamlined Logging In Controllers | #4251 (issue) |
@acumino | 5m | π Improvements For Multiple Architectures | #6324, #6327 |
@timuthy | 10m | β¬οΈ ETCD Cluster Scale Up | etcd-backup-restore#487 |
@shafeeqes | 5m | π©Ί Skipping Health Checks For ManagedResource s | #6309 |
@shafeeqes | 5m | ππ»ββοΈ Disabling Admission Plugins | #6403 |
No Demo, But Still Worth Celebrating π β
- β¨ Promote
DisableDNSProviderManagement
to GA. #6341 - β¨ Drop support for the
shoot.gardener.cloud/use-as-seed
annotation. #6379 - π Fix tools download for aarch64 (arm64) π§. #6314
2022/07/20 - v1.51 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@oliver-goetz | 5m | π TestGrid For Prow | ci-infra#257 |
@ialidzhikov | 10m | βοΈ Shoot Scheduling Profiles | #6251 |
@wyb1 | 5m | π [GEP-19] Migrating To prometheus-operator | #6151 |
@kon-angelo | 10m | π GCP Service Account Creation For Workers | provider-gcp#451 |
@ary1992 | 5m | βοΈ Custom containerd Configuration | #6293@bdb4247 |
@rfranzke | 10m | πͺ Support For ManagedSeed s Locally | #6293 |
@shafeeqes | 5m | π‘ PodSecurityPolicy -> Pod Security Admission Migration Plan | #5250 (issue) |
No Demo, But Still Worth Celebrating π β
- π [DEVELOPER] A new testing strategy and developer guideline has been added. Make sure to check out the document if you want to learn more about the different kinds of tests we use and how to best write them! #6245
- π [OPERATOR] Health checks of ManagedResources are more reliable now when updating resources in the referenced secrets. #6136
- β¨ [OPERATOR] The new
ShootNodeLocalDNSEnabledByDefault
admission plugin of thegardener-apiserver
(disabled by default) controls whether the.spec.systemComponents.nodeLocalDNS.enabled
field for newly created Shoot resources is defaulted to true. [...] #6279 - β¨ [OPERATOR] Several feature gate changes:
SecretBindingProviderValidation
-> beta (#6240),ShootMaxTokenExpiration{Overwrite,Validation}
andRotateSSHKeypairOnMaintenance
-> removed (#6241),Shoot{C,S}ARotation
-> beta (#6252)
2022/07/06 - v1.50 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@ScheererJ / @DockToFuture | 5m | π Node Local DNS Improvements (Part 2) | #6057 |
@rfranzke | 10m | π§Ή Automatic Remediation Of Problematic Shoot Webhooks | #6090 |
@shafeeqes | 5m | πͺ’ New shoots/binding API To Bind Shoot s To Seed s | #6018 |
@plkokanov | 10m | π Running Control Plane Migration Locally | #5987, #6059 |
@acumino | 5m | π API Changes For Supporting Multiple Architectures | #6156, #6178, #6233 |
@timebertt | 10m | π‘ Warnings When Credentials Rotation Is Due | #6110, #6149 |
@grolu | 5m | πΉ Recent Gardener Dashboard Updates | dashboard (repo) |
No Demo, But Still Worth Celebrating π β
- β¨ [DEVELOPER]
gardener-{apiserver,controller-manager,scheduler,admission-controller,seed-admission-controller,resource-manager}
are now usinggcr.io/distroless/static-debian11:nonroot
instead of versions ofalpine
as a base image. #6159 - β¨ [DEVELOPER] It is now possible to render charts from embedded file systems (
embed.FS
). TheRender
method of thechartrenderer.Interface
in favour ofRenderEmbeddedFS
. [...] #6165 - β¨ [DEPENDENCY] Gardenlet now manages fine-granular
PriorityClasses
that are supposed to be used by all components in order to improve the overall robustness of the system. Find out more in the related documentation. [...] #6186 - β¨ [OPERATOR] The
WorkerPoolKubernetesVersion
andDisableDNSProviderManagement
feature gates have been promoted. #6166, #6142 - β¨ [DEVELOPER]
k8s.io/*
is now upgraded tov0.24.1
andsigs.k8s.io/controller-runtime
is now upgraded tov0.12.1
. #6101 - π [OPERATOR] A disruption free CA rotation is now being supported for HA shoot clusters. #6099
2022/06/22 - v1.49 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@timuthy | 10m | π¨βπ¦βπ¦ New HAControlPlane Feature Gate | #5741 |
@Diaphteiros | 5m | π‘ On-Demand Kubeconfig Renewal For gardenlet | #6069 |
@rfranzke | 5m | π Dump Container Logs Of E2E Tests | #6088, #6089 |
@himanshu-kun | 10m | πΎ GPU Support For GCP Worker Nodes | provider-gcp#132 (issue) |
@ScheererJ, @DockToFuture | 10m | π Node Local DNS Improvements (Part 1) | #6057 |
No Demo, But Still Worth Celebrating π β
- β¨ [OPERATOR] A full snapshot of
etcd-main
is now triggered after all Secret were encrypted with the new key after ETCD encryption key rotation. #6064 - β¨ [OPERATOR] Making
blackbox-exporter
on shoots highly-available, to prevent false positive alerts during rollouts ofblackbox-exporter
,apiserver-proxy
and worker nodes. #6025 - β¨ [DEPENDENCY] The generic
Worker
actuator now scales upmachine-controller-manager
Deployment whenShoot
is hibernating (or waking up) andmachine-controller-manager
Deployment is already scaled down by external actor (dependency-watchdog
). #6054
2022/06/08 - v1.48 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@rfranzke | 10m | π‘ Credentials Rotation (ServiceAccount Signing Key, ETCD Encryption Key) | #5968, #6021 |
@dimityrmirchev | 5m | π New serviceaccountmanager Project Member Role | #5971 |
@timebertt | 10m | π‘ Extension Webhook Certificate Rotation | #6003 |
@acumino | 5m | β Kubernetes 1.24 Support | #6023 |
@plkokanov | 10m | π§± SeedSystemComponentsHealthy Condition Use Cases | #5850 (issue) |
@wyb1 | 10m | π° Make blackbox-exporter Work In Local Setup | #6051 |
No Demo, But Still Worth Celebrating π β
- β¨ [USER] With the new
maintenance.gardener.cloud/operation
annotation forShoot
s it is now possible to confine the execution of the respective operation to the shoot cluster's maintenance time window. #6039 - β¨ [USER] There are two new
rotate-credentials-{start,complete}
operation annotations forShoot
s which can be used to start or complete the rotation of all Gardener-provided/Gardener-generated credentials. #6038 - π [USER] It is now possible again to migrate the CRIs for existing worker pools in shoot clusters. #6004
- π [OPERATOR] The
ManagedIstio
andAPIServerSNI
feature gates are now deprecated. They are already turned on by default and will be removed in a future version of Gardener. #6007
2022/05/25 - v1.47 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@himanshu-kun | 10m | 0οΈβ£ Generic Scale-To-Zero Support | autoscaler#27 (issue) |
@krgostev | 10m | π©Ί SystemComponentsHealthy condition for Seed s | #5274 |
@rfranzke | 5m | π Progressing condition for ManagedResource s | #5904 |
@grolu | 10m | πΉ Recent Gardener Dashboard Updates | dashboard (repo) |
@ary1992 | 10m | π‘ Observability Credentials Rotation | #5926 |
@MartinWeindel | 10m | π Network Problem Detector Extension | shoot-networking-problemdetector (repo) |
No Demo, But Still Worth Celebrating π β
- π [USER] A new document related to the rotation of the CA certificate rotation has been added. #5939
- β¨ [DEVELOPER]
provider-local
now allows to enable thedependency-watchdog-probe
in the seed cluster. #5937 - β¨ [DEVELOPER]
provider-local
now supports Ingress objects in theSeed
cluster and now enables using the shoot node logging feature. #5924 - β¨ [OPERATOR] The
lastActivityTimestamp
of theProject
is now updated every time aPlant
,BackupEntry
orShoot
is created, or aQuota
orSecret
in the project namespace is referred by aSecretBinding
. The timestamp is also updated when these resources are updated or deleted. #5821
2022/05/11 - v1.46 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@timebertt | 10m | π‘οΈ Shoot Cluster CA Rotation e2e Demo | #3292 (issue) |
@dimityrmirchev | 10m | π§ͺ Extension e2e Tests Via Local Garden | shoot-oidc-service#33 |
@krgostev | 10m | πΎ Backup{Bucket,Entry} Support For Local Garden | #5514 |
@istvanballok, @wyb1 | 10m | π Connectivity Exporter | connectivity-exporter (repo) |
@ialidzhikov | 5m | π Extension SecretBinding Validator | provider-gcp#428 |
No Demo, But Still Worth Celebrating π β
- π [USER] Documentation for accessing the shoot cluster is added here. #5849
- π [USER] There is a new document explaining the various configurations (and caveats) regarding the ServiceAccount configuration for shoot clusters. #5888
- β¨ [OPERATOR] The
WorkerPoolKubernetesVersion
feature gate has been promoted to beta and is now enabled by default. #5857
2022/04/27 - v1.45 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@Diaphteiros | 10m | π‘οΈ Virtual Garden Cluster CA Rotation | #5735 |
@acumino | 5m | π API Diff PR Check To Detect Breaking Changes | #5532 |
@shafeeqes | 5m | π Improved Cloud-Config Downloads To Save I/O | #5768 |
@ScheererJ | 10m | π Extension For Networking Filter | shoot-networking-filter (repo) |
@BeckerMax | 10m | π‘οΈ Dedicated Client CA For Shoots | #5779 |
@rfranzke | 10m | π‘οΈ Adaptation Of Extensions Library For CA Rotation | #5803 |
No Demo, But Still Worth Celebrating π β
- π [OPERATOR] Fixed an issue that could cause the
cloud-config-downloader
to invalidate its credentials token if the node that it is currently running on has issues with the file system where the credentials token is stored (for example when the node runs out of disk space). #5719 - π [OPERATOR] Increase the QPS and burst value for
kube-apiserver
requests for thevpa-recommender
of Seed and Shoot clusters to better cope with large cluster sizes. #5743 - π [OPERATOR] VPA binaries and dependency have been upgraded to 0.10.0. #5716
- β¨ Several Feature Gate Promotions:
DenyInvalidExtensionResources
(#5793) andCachedRuntimeClients
(#5752) are now GA,RotateSSHKeypairOnMaintenance
(#5740) andShootMaxTokenExpirationOverwrite
(#5726) are now beta.
2022/04/13 - v1.44 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@acumino | 5m | πͺ Validation For Locked Feature Gates | #5667 |
@ary1992 | 5m | π‘οΈ Deactivation Of Static Shoot Kubeconfig | #5649 |
@ishan16696 | 10m | πΎ New etcd-druid@v0.8 Release | #5693 |
@rfranzke | 10m | π‘οΈ Auto-Rotation Of Expiring Secrets | #5679 |
@MartinWeindel | 10m | π Central DNS Proxy | shoot-dns-service#104 |
@oliver-goetz | 10m | πΌ Prow Image Builds | ci-infra#181 |
No Demo, But Still Worth Celebrating π β
- π [OPERATOR] CPU limits from all gardener components have been removed to prevent CPU throttling due to reaching limits. #5627
- π [OPERATOR] Memory limits of all shoot control plane or system components have been removed or adjusted according to measured usage to prevent OOMKills due to reaching the limits. #5689
- π [OPERATOR] VPA resources now use
controlledValues: RequestsOnly
to prevent the VPA mechanism from proportionally changing the limits, which doesn't make sense. #5638 - π‘ [OPERATOR]
dependency-watchdog-probe
does no longer use a client certificate but an auto-rotatedServiceAccount
token which is only valid for12h
. #5685
2022/03/30 - v1.43 Release β
Demo Agenda π β
Presenter(s) | Duration | Topic | Reference(s) |
---|---|---|---|
@rfranzke | 5m | π Optimized LIST nodes Calls | #5529 |
@ialidzhikov | 5m | π Improved CheckDaemonSet Function | #5628 |
@timebertt | 10m | π‘οΈ New Secrets Manager | #5503 |
@acumino | 5m | βοΈ Exclude Reconciliations Of ManagedResource s | #5556 |
@vlvasilev | 10m | π Logs of kube-system Pods Are Now Scraped By Loki | #5600 |
@rfranzke | 10m | π§ Move DNSRecord Reconciliation Into Maintenance Time Window | #5531 |
@oliver-goetz | 5m | π’ Move Of unit And integration Jobs To Prow | / |
No Demo, But Still Worth Celebrating π β
- β¨ [USER] There is a new Secret for each Shoot in the corresponding Project Namespace (
<shoot-name>.ca-cluster
) which contains the current CA bundle for establishing trust to the Shoot's API server. #5612 - π [OPERATOR] An issue causing Shoot deletion to fail in a rare case when the corresponding Shoot Namespace in the Seed is already terminating is now fixed. #5555
- π [USER] A race condition has been fixed which can lead to pods without any projected token volumes for newly created shoots. #5549
- π [USER] A bug causing shoot reconciliations or deletions to fail with "no matches for kind" errors has been fixed. #5539