Gardener

Appearance

Gardener Review Meetings (2023) ​

In case you couldn't participate and are interested in catching up, you can find the contents of the review meetings we have had in 2023 here.

The meetings were recorded, but not published.

Reviews ​

2023/12/06 - v1.85 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@timuthy10m🪪 Auto-Registration + Certificate Management for Extension Admission Webhooks#8725
@acumino5m🧹 Orphaned Lease Garbage Collection#8817
@rfranzke10m🕵️ Introduction Of gardener-node-agent#8023 (issue)

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] All the functionality related to the deprecated field .spec.secretRef in Seeds has been removed and subsequently .spec.secretRef will be dropped from the Seed API in a later release of Gardener. Please check your Seeds and remove any usage before upgrading to this Gardener version. #8833
  • ✨ [OPERATOR] The gardener-resource-manager deployment procedure was improved. Earlier, GRM was unnecessarily rolled during shoot reconciliation if worker nodes contained custom taints. #8835

2023/11/29 - v1.84 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@danielfoehrKn10m⬆️ Machine Image Version Update Strategies#8275
@plkokanov5m🤲🏻 node-exporter's Textfile Collector#8721
@timuthy5m🔄 Improved Shoot Condition Handling#8736
@shafeeqes5m🎮 kube-controller-manager Controller Enablement Based on APIs#8763
@aaronfern5m🚥 cluster-autoscaler Metrics#8750

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [USER] A validation rule was added that forbids changing the primary DNS provider in .spec.dns.providers as soon as the Shoot was scheduled. #8761
  • 🪓 [OPERATOR] ⚠️ The deprecated fields spec.settings.dependencyWatchdog.endpoint and spec.settings.dependencyWatchdog.probe have been removed from the Seed API. Please check your Seeds and remove any usage before upgrading to this Gardener version. #8747
  • 🐛 [OPERATOR] During the restore phase of control plane migration, the machine-controller-manager is deployed with 0 replicas if it did not exist before or if it existed and was not scaled up yet. This fixes an issue that could cause the Shoot's nodes to get recreated during control plane migration. #8742
  • ✨ [DEVELOPER] Vendoring has been removed from the project, i.e., there is no vendor folder anymore. #8775

2023/11/22 - v1.83 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@Kostov610m🐛 Prevent Unintended etcd-backup Secret Deletions#8709
@AleksandarSavchev10m📑 Diki - Gardener Compliance Checkerdiki (repo)
@shafeeqes5m🔎 API Server Runtime Config Validation#8695
@dimitar-kostadinov15m💾 Introduction To registry-cache Extensionregistry-cache (repo)

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [OPERATOR] A bug has been fixed which caused ServiceAccounts related to garden access secrets for extensions to leak in the seed namespace in the garden cluster after uninstallation of said extensions. #8697
  • ✨ [OPERATOR] The .status.lastOperation in core.gardener.cloud/v1beta1.Seed and operator.gardener.cloud/v1alpha1.Garden resources is now only updated each 5s during a reconciliation. Previously, it was updated immediately when a task was finished. #8705

2023/11/15 - Hack The Garden Wrap Up ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@robinschneider5m🏛️ ARM Support For OpenStack ExtensionSummary
@dergeberl10m🛡️ Make ACL Extension Production-ReadySummary
@oliver-goetz5m🕵️ Continuation Of gardener-node-agentSummary
@rfranzke5m🧑🏼‍🌾 Deploy gardenlets Through Custom Resource Via gardener-operatorSummary
@Kumm-Kai5m🦅 Shoot Control Plane Live Migration (Without Downtime)Summary
@afritzler10m🗄️ Stop Vendoring Third-Party Code In vendor FolderSummary
@Gerrit915m🔍 Generic Extension For Shoot Cluster Audit LogsSummary
@timebertt5m🚛 Rework Shoot Flux ExtensionSummary

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [USER] A discussion about air-gapped shoot clusters was conducted. Summary
  • ✨ [DEVELOPER] A new script hack/update-skaffold-deps.sh has been added for automatically updating Skaffold dependencies for the binaries. Previously, you had to update them manually in the skaffold.yaml file. Summary

2023/10/25 - v1.82 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@rfranzke10m🌀 Improved Machine State Persistence For Shoot Control Plane Migrations#8559, #8618
@acumino5m📝 No Longer Report Skipped Flow Tasks#8541
@oliver-goetz5m🚤 Accelerated API Server Rollouts#8640
@ScheererJ5m💥 Forceful Managed Resources Finalization#8584

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [DEPENDENCY] The MachineClassKind(), MachineClass(), and MachineClassList() methods have been dropped from the generic Worker actuator's interface and do not need to be implemented anymore. #8559
  • 🪓 [DEPENDENCY] The no longer required --gardenlet-manages-mcm option has been removed. All code in provider extensions related to management/deployment of machine-controller-manager should be removed. #8596
  • 🪓 [DEVELOPER] The extensions/pkg/controller/operatingsystemconfig/oscommon package is deprecated and will be removed as soon as the UseGardenerNodeAgent feature gate has been promoted to GA. OS extension developers should start adapting to this new feature, see documentation and example based on provider-local. #8647

2023/10/11 - v1.81 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@holgerkoser5m🎭 Dashboard Theming + Brandingdashboard#1568
@seshachalam-yv5m📅 Delta Snapshot Retention Periodetcd-druid#651
@shafeeqes10m🗑️ Forceful Shoot Deletion#8414, #8608
@rfranzke5mℹ️ Shoot Scheduling Failure Reason Population#8527
@himanshu-kun10m🔙 Autoscaler Early Abort/Backoffautoscaler#154

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [USER] Gardener refined the scope of the problematic webhook matcher for Endpoints objects. Earlier, shoot clusters were assigned a constraint reporting a problem with a failurePolocy: Fail webhook acting on these objects. Now, only Endpoints in the kube-system and default namespaces are considered for this check. #8521
  • ✨ [OPERATOR] The MachineControllerManagerDeployment has been promoted to beta and is now enabled by default. Make sure that all registered provider extensions support this feature gate before upgrading to this version of Gardener. #8526
  • ✨ [OPERATOR] The DisableScalingClassesForShoots feature gates has been promoted to GA (and is now always enabled). #8526

2023/09/27 - v1.80 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@acumino5m💽 Enabled Target Cache In gardener-resource-manager#8483
@grolu5m🕹️ Support For Workerless Shootsdashboard#1531
@plkokanov10m📮 Introduction To rsyslog-relp Extensionshoot-rsyslog-relp (repo)
@rfranzke10m🎮 gardener-operator Manages Gardener Control Plane#8309
@oliver-goetz10m🔂 Seed Credentials Renewing On Garden Credentials Rotation#8396
@oliver-goetz5m⎈ Kubernetes 1.28 Support#8479

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [USER] A bug has been fixed which was allowing users to specify an extension of the same type in .spec.extensions[].type more than once in the Shoot API. #8457
  • ✨ [USER] Gardener now reports nodes for which the checksum/cloud-config-data hasn't been populated yet. This could point towards an error on the node and that not all Gardener related configuration happened successfully. #8448
  • ✨ [OPERATOR] gardener-operator now refuses to start if operators attempt to downgrade or skip minor Gardener versions. Please see this document for more information. #8413
  • ✨ [DEVELOPER] The following golang dependencies have been upgraded, please consult the upstream release notes and this issue for guidance on upgrading your golang dependencies when vendoring this gardener version: k8s.io/* to v0.28.2, sigs.k8s.io/controller-runtime to v0.16.2. #8464

2023/09/13 - v1.79 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@ary199210m🎮 sigs.k8s.io/controller-runtime@v0.15 Upgrade#8245
@oliver-goetz10m🫧 Additional Excess Capacity Reservation Configurations#8356
@ScheererJ10m👨🏼‍💻 Extension Admission Controllers In Local Setup#8311

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [USER] When the Kubernetes control plane version is at least v1.28, it is now possible to set the worker pool Kubernetes version to be at most three versions behind the control plane version. Earlier, only a skew of at most two versions was allowed. Find more details here. #8402
  • ✨ [OPERATOR] The DisablingScalingClassesForShoots feature gate has been promoted to beta. #8428
  • ✨ [OPERATOR] The WorkerlessShoots feature gate has been promoted to beta and is now turned on by default. Before deploying this Gardener version, make sure that all your registered extensions support this feature gate. #8417

2023/08/30 - v1.78 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@schrodit20m🌀 How Codesphere Uses Gardenercodesphere.com (website)
@acumino5m🧑🏼‍🌾 Gardener Operator Manages Plutono#8301
@aaronfern10m🥾 Golang-Based ETCD Bootstrappingetcd-wrapper#3

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] It is possible now to trigger a Seed reconciliation by annotating the Seed with gardener.cloud/operation=reconcile. #8347
  • ✨ [OPERATOR] Status of Garden now includes the ObservabilityComponentsHealthy condition which show the health of observability components in the garden runtime-cluster. #8346
  • ✨ [DEPENDENCY] BackupBucket/BackupEntry controllers: watch secret metadata only. #8348

2023/08/16 - v1.77 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@dimityrmirchev10m🔒 Use immutable secrets in ManagedResource library#8116
@ialidzhikov10m🗂️ Introduce the ContainerdRegistryHostsDir feature gate#8094
@shafeeqes5m🪓 Split make generate targets#8289
@oliver-goetz5m🚮 Remove secrets from gardener-controlplane helm chart#8308
@timuthy10m🌎 Enhance minimal distance algorithm in gardener-scheduler#8277

No Demo, But Still Worth Celebrating 🎉 ​

  • 🔄 [OPERATOR] gardenlet no longer reports the Bootstrapped condition on Seeds. Instead, it now reports the progress in .status.lastOperation, similar to how it's done for Shoots. #8290
  • 🔎 [OPERATOR] Operators can now view and manage dashboards for compaction jobs running in shoot control plane. #8206
  • 📈 [OPERATOR] gardener-operator now takes over management of fluent-operator and vali. #8240

2023/08/02 - v1.76 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@oliver-goetz10m🩺 Garden Care Controller#8158, #8238
@acumino5m🔢 Error Code Detection In Worker Controller#8242
@dergeberl10m🔑 Garden Cluster Access For Extension Controllers In Seeds#8001 (issue)
@timuthy5m📌 Support For Custom Gardener Schedulers#8261
@DockToFuture, @axel7born10m🔀 AWS IPv4/6 Dual-Stack Supportprovider-aws#778

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] Removed service.beta.kubernetes.io/aws-load-balancer-type: nlb annotation from istio-ingressgateway service template. Set this annotation in Seed configuration. [...] #8214
  • ✨ [USER] It is now possible to enable disabled APIs for workerless shoot clusters via spec.kubernetes.kubeAPIServer.runtimeConfig. #8258
  • 🐛 [USER] An issue has been fixed which caused CoreDNS to not rewrite CNAME values in DNS answers. #8231

2023/07/19 - v1.75 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@StenlyTU10m🧑🏼‍🌾 Gardener Operator Deploys nginx-ingress-{controller,k8s-backend}#7945
@AleksandarSavchev5m🚔 Pod Security Enforcements For Garden And Seed#8099
@acumino10m⚙️ Kubeconfigs For Admission Plugin Configurations#8110
@shafeeqes5m⚠️ New CRDsWithProblematicConversionWebhooks Constraint For Shoots#8159
@ScheererJ10m🏎️ Race Mitigation For NetworkUnavailable Condition In Nodesprovider-gcp#631
@timuthy5m🪄 Kubernetes Version Defaulting#8198

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [DEVELOPER] Shoot fields .spec.dns.providers[].domains and .spec.dns.providers[].zones are now deprecated and expected to be removed in version v1.87. Please plan ahead to drop using those fields in extensions. #8199
  • 🪓 [USER] Adding Gardener-managed finalizers (e.g., gardener or gardener.cloud/reference-protection) to the Shoot on creation is now forbidden. #8209
  • 🐛 [OPERATOR] A bug causing the gardenlet to panic when a ETCD encryption key rotation operation is triggered for a hibernated Shoot is now fixed. Now, triggering ETCD encryption key rotation or ServiceAccount signing key rotation is forbidden when the Shoot is in waking up phase. #8184

2023/07/05 - v1.74 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@timuthy5m🏷️ Multiple Domains For Garden Clusters#8156
@rfranzke10m📈 [GEP-22] Improved Usage of ShootState API#8073 (issue)
@rfranzke5m💪 Keep kube-proxy VPA On Kubernetes Patch Updates#8071
@oliver-goetz5m🧹 Removal Of Deprecated Development Setups#8075
@timebertt5m🔐 Usage Of InternalSecret API#7999 (issue)

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] ⚠️ Gardener does no longer support garden, seed, or shoot clusters with Kubernetes versions < 1.22. Make sure to upgrade all existing clusters before upgrading to this Gardener version. #8087
  • 🐛 [OPERATOR] gardener-resource-manager's system-components-config webhook no longer adds the toleration for the ToBeDeletedByClusterAutoscaler taint to system components in shoot clusters. The ToBeDeletedByClusterAutoscaler taint is maintained by the cluster-autoscaler. This was breaking cluster-autoscaler's drain mechanism when scaling down an under-utilized node. It was causing just evicted system components from to be deleted node to be scheduled again on the to be deleted node. #8172

2023/06/21 - v1.73 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@voelzmo10m📈 Disabled Scaling Classes For kube-apiserver Resource Requirements#8003
@dimitar-kostadinov10m🌍 Improved Robustness Of terraformer Executions#8059
@rfranzke10m🤖 machine-controller-manager Managed By gardenlet#8015, #8018, #8056
@shafeeqes5m🧹 Cleanup Secret Reference In ManagedSeeds#8039

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] The field .spec.secretRef in the Seed API has been deprecated and will be removed in a future release of Gardener. #8064
  • ✨ [OPERATOR] gardener-apiserver now exposes a new core.gardener.cloud/v1beta1.InternalSecret API, see the documentation for more information. #8025
  • ✨ [DEVELOPER] It is now easier to annotate Services related to extensions serving webhook handlers that must be reached by kube-apiservers running in separate namespaces such that the respective network traffic gets allowed. Please refer to this guide for all information. [...]. #8076
  • ✨ [DEVELOPER] gardenlet's ControllerInstallation controller now populates the feature gate of gardenlet via the Helm values to extensions when they are getting installed. The information is populated via the .gardener.gardenlet.featureGates key. It contains a map whose keys are feature gates names and whose values are booleans (depicting the enablement status). #8011

2023/06/14 - v1.72 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@ScheererJ5m🔦 Virtual Garden API Server Exposure Via Istio#7953
@axel7born5m🐹 Golang Implementation For Egress Network Filteringshoot-networking-filter#64
@rfranzke5m📐 Improved Accuracy For Local Control Plane Migration E2E Tests#7981
@ishan1669610m⬆️ Improved ETCD Cluster Scale-Upetcd-druid#584 (issue)
@kon-angelo5m🔧 Live AWS EBS Volume Modificationsprovider-aws#754
@elankath5m🔐 GCP Disk Encryption With Customer-Managed Keysprovider-gcp#607
@MartinWeindel5m📀 OpenStack Manila CSI Driverprovider-openstack#572

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] It is required to have ControllerRegistrations for Kinds ControlPlane, Infrastructure and Worker with the same types used for seeds (.spec.provider.type). [...]. #7928
  • ✨ [USER] The core/v1alpha1 API version is dropped. Make sure that you don't use the core/v1alpha1 API version in your machinery. #7965
  • ✨ [USER] The certificate chains served by kube-apiservers does now include the CA certificates used to sign their server certificates. #7961
  • 🐛 [USER] A bug that prevented finalizers from being added to referenced Secrets or ConfigMaps in .spec.resources in Shoots has been fixed. #7995

2023/06/07 - v1.71 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@shafeeqes5m💡 Improved Validation For Shoot Worker Pool Config#7855
@ScheererJ10m🧑🏼‍🌾 Gardener Operator Updates#7881, #7931
@ialidzhikov5m⏱️ Configurable Toleration Seconds For Unready Nodes#7861
@acumino10m🕹️ Workerless Shoot Clusters#7635 (issue)
@ary19925m⎈ Kubernetes 1.27 Support#7883
@istvanballok10m📊 Replace Grafana With Plutono, Loki With Vali#7318

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [DEVELOPER] Extensions vendoring this gardener/gardener version need to provide RBAC privileges for PATCH apps/depoyments/scale. #7868
  • ✨ [OPERATOR] The HAControlPlanes feature gate has been promoted to beta and is now turned on by default. #7867
  • ✨ [OPERATOR] It is now possible to provide namespace selectors for additional namespaces which should be covered by the NetworkPolicy controllers of gardener-operator or gardenlet. [...] #7929
  • ✨ [DEVELOPER] In order to allow kube-apiserver pods of shoot or garden clusters to reach webhook servers, they must no longer be explicitly labeled with networking.resources.gardener.cloud/to-<service-name>-<protocol>-<port>=allowed. Instead, it is enough to annotate the Service of the webhook server with networking.resources.gardener.cloud/from-all-webhook-targets-allowed-ports=<ports>. #7907
  • 📖 [DEVELOPER] A guideline for developers regarding TODO statements has been introduced. #7939

2023/05/31 - Hack The Garden Wrap Up ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@majst01, @Gerrit9110m🕵️ Introduction Of gardener-node-agentSummary
@einfachnuralex10m🌐 IPv6 Shoot Clusters On Cloud ProvidersSummary
@JensAc10m🌱 Experimenting With Masterful Shoot ClustersSummary
@timebertt10m🔑 Garden Cluster Access For Extension Controllers In SeedsSummary
@rfranzke10m💾 Replacing ShootStates With Backups in Backup BucketsSummary
@timebertt10m🔐 New InternalSecrets API In GardenerSummary

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ The machine-controller-manager deployment procedure has been moved from the generic Worker actuator used in extensions controllers into gardenlet. Summary
  • ✨ The accuracy for local control plane migration e2e tests has been increased as much as possible. Summary
  • ✨ A few of the necessary steps for supporting ETCD encryption for custom resources have been addressed. Summary
  • 🧹 The apiserver-proxy-pod-mutator webhook has been moved into gardener-resource-manager. Summary

2023/05/10 - v1.70 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@Kristian-ZH10m🪵 Introduction Of Fluent Operator#7568
@danielfoehrKn10m🧱 Move Prow E2E Tests To cgroup-v2 Nodes#7780, #7797
@ScheererJ5m🌽 User-Defined Kernel Settings Per Worker Pool#7825
@rfranzke10m🧑🏼‍🌾 Gardener Operator Manages Istio and kube-state-metrics#7817, #7836
@plkokanov10m🔄 Control Plane Migration For HA Shoots#7626, #7742

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] Gardener now supports seed clusters with Kubernetes versions up to v1.26. #7831
  • ✨ [OPERATOR] The highavailabilityconfig webhook configures topology spread constraints with minDomains=<number-of- zones>. [...]. #7826
  • ✨ [OPERATOR] Annotations in seed.spec.settings.loadBalancerServices.annotations are now applied to the nginx-ingress load balancer service in the seed cluster. #7835
  • 🧹 [OPERATOR] The promoted or deprecated feature gates ManagedIstio and ReversedVPN have been removed. #7830

2023/04/26 - v1.69 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@oliver-goetz10m🐞 Skaffold-Based Debugging Experience#7755
@plkokanov10m🔄 Control Plane Migration For HA Shoots#7626
@DockToFuture10m🔗 E2E Tests For Networking Extensionsnetworking-calico#257, networking-cilium#261
@breuerfelix10m🌱 Local IPv6-Based Seed Clusters#7561

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] The SeedChange and CopyEtcdBackupsDuringControlPlaneMigration feature gates have been promoted to GA and are now locked to true. #7763
  • 🐛 [OPERATOR] Fixed potential leaks of ShootStates that could happen when a Shoot cluster is deleted. This is achieved by no longer exiting early from the deletion flow if the shoot's seed Namespace has been deleted. The same logic has been applied to the migration flow for consistency. #7789
  • 🐛 [OPERATOR] A bug causing kube-controller-manager to fail to clean up ShootState resources is now fixed. #7793
  • 🧹 [OPERATOR] The .spec.settings.ownerChecks field of the Seed configuration is deprecated. The "bad-case" control plane migration is being removed in favor of the HA Shoot control planes [...]. #7748

2023/04/12 - v1.68 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@ialidzhikov5m🚦 Toplogy-Aware-Routing in Garden Cluster#7729
@ary199210m⏳ Restrict Duration Of Reconciliations#7147
@robinschneider5m🔃 Copy Docker Hub Images To Gardener GCR#7698
@timuthy10m🧑🏼‍🌾 Gardener Operator Manages kube-apiserver#7693, #7730
@timuthy5m📸 Trigger ETCD Snapshots Via API Server Proxy Endpoint#7714

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] Enable memory-saver mode for the VPA recommender. It stops tracking resource consumption for Containers without matching VPAs and frees up memory. #7746
  • ✨ [DEVELOPER] The server certificate of the kube-apiserver deployment now contains the <service-name>.<namespace>.svc.cluster.local SAN. #7735
  • 🐛 [OPERATOR] A bug causing the gardenlet to be unable to access the BackupBucket generated secret in garden namespace is now fixed. #7708
  • 🐛 [OPERATOR] A bug has been fixed for the Gardener Operator that occasionally caused "404 not-found" errors when garden resources where applied and the operator ran with multiple replicas. #7739

2023/04/05 - Special Edition ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@vlerenc25m🤪 Gardener Chaos Engineeringchaos-engineering (repo)

2023/03/29 - v1.67 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@himanshu-kun10m🐶 Dependency Watchdog v1dependency-watchdog (repo), #6693
@SimonKienzler10m🫀 Ensure CSINode Readiness Before Scheduling Pods#7621
@timebertt5m🔄 Skaffold-Based Development Experience#7659
@grolu10m🕹 Recent Gardener Dashboard Featuresdashboard (repo)
@timuthy10m💿 Single Object Cache#7632, #7681

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [OPERATOR] An issue has been fixed which caused undesired PATCH requests when updating the state in the Worker or ShootState resources. #7637
  • 🐛 [DEVELOPER] A bug in managedresources.NewRegistry that was leading to excessive memory usage when this function is called multiple times has been fixed. #7694
  • ✨ [DEVELOPER] Shoot clusters using provider-local can now have multiple worker nodes with calico as CNI. #7684
  • ✨ [DEVELOPER] The local deployment of Gardener with extensions can now deal with multiple seeds. Additional seeds can be added and removed again. #7673

2023/03/15 - v1.66 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@shafeeqes5m👻 Dropped Support For Self-Managed Ingress Controllers In Seeds#7529
@timuthy10m🧑🏻‍⚖️ Adapted NetworkPolicys For Istio Namespaces#7570
@ScheererJ10m🧑🏻‍⚖️ Adapted NetworkPolicys For Extension Namespaces#7589
@ialidzhikov10m🚦 Routing Network Traffic Toplogy-Aware#7191

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [USER] Updates to the AuditPolicy referenced by Shoots are now also validated against the Kubernetes versions of those shoot clusters. This fixes an issue where it was possible to specify an unsupported audit.k8s.io version when updating the ConfigMap which contains the AuditPolicy. #7563
  • 🐛 [USER] Fixes control-plane migration of hibernated shoot being stuck if shoot was hibernated for 24h. #7608
  • 🪓 [OPERATOR] The ForceRestore feature gate has been removed. #7543
  • ✨ [OPERATOR] The ManagedSeed controller does no longer try to sync the Seed kubeconfig Secret when Shoot's static token kubeconfig is not enabled. #7546

2023/03/01 - v1.65 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@axel7born5m🥸 Response Rewrite For DNS Search Path Optimization#7478
@shafeeqes5m🔍 Validation For Admission Plugin Configurations#7472
@shafeeqes5m🥷🏻 Recreation For Immutable ConfigMaps/Secrets#7516
@acumino5m🩺 Shoot System Components Health Checks#7462
@rfranzke5m🧑🏻‍⚖️ Adapted NetworkPolicys For Shoot Control Plane Components#7484, #7515
@Kumm-Kai10m🫀 Schedule Node-Critical Pods First#7406

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [USER] The core.gardener.cloud/v1alpha1 API is deprecated and will be removed soon. The core.gardener.cloud/v1beta1 API is already available since a very long time and should be used instead. #7443
  • 🪓 [OPERATOR] Before upgrading to this Gardener version, Seeds using .spec.dns.ingressDomain must now finally be switched to using .spec.ingress and .spec.dns.provider [...]. #7515
  • 🐛 [OPERATOR] Fix a bug in the etcd deploy flow that erroneously unsets etcd.spec.etcd.peerUrlTls in the Etcd CRs of high available shoots when marked for hibernation. #7514

2023/02/15 - v1.64 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@rfranzke10m🧑🏻‍⚖️ NetworkPolicy Controller In gardener-resource-manager#7392, #7412, #7437
@himanshu-kun5m🏗️ Progressing Condition In MachineDeploymentsmachine-controller-manager#762
@kon-angelo10m🤸🏼‍♂️ Nodes CIDR Expansion For Shoots#7368
@timebertt5m🐛 Simplified Debugging Experience For Integration Tests#7431
@rickardsjp10m⛙ Unification Of Grafana Deployments#7007

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] The istio-system namespace in seed clusters is now labeled with gardener.cloud/role=istio-system. All istio-ingress* namespaces are now labeled with gardener.cloud/role=istio-ingress. #7389
  • 🐛 [OPERATOR] When deleting a seed the cluster-identity config map in kube-system namespace is not deleted anymore if it was already existing on seed creation. #7436
  • 🐛 [OPERATOR] A bug has been fixed which caused the conditions of Shoots to be set to Unknown too fast in case the responsible gardenlet is no longer posting its heartbeat. #7404
  • ✨ [DEVELOPER] Add bootstrapping a local IPv6 KinD cluster with make kind-up IPFAMILY=ipv6. #7388

2023/02/08 - v1.63 Release (Part III) ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@einfachnuralex10m🛠️ Development Box On GCP#7319
@acumino10m⚙️ New SystemComponentsConfig Webhook#7204, #7304
@rfranzke5m🚅 Skip Readiness Checks In Shoot Flow#7268
@ialidzhikov10m⎈ Kubernetes 1.26 Support#7275
@SimonKienzler, @breuerfelix10m👮 Access Control For Shoot Clustersextension-acl (repo)

2023/02/01 - v1.63 Release (Part II) ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@AleksandarSavchev10m🔒 Disable SSH Access To Worker Nodes#7188
@ary19925m🎮 controller-runtime Refactoring#4251 (issue)
@shafeeqes10m📊 Dashboards For controller-runtime Metrics#7180
@ialidzhikov5m⛓️ Kubelet Versions Constraints For Machine Image Versions#7265
@timebertt10m🚦 [GEP-21] IPv6 Single-Stack Support in Local Gardener#7050, #7246, #7288
@plkokanov5m🏗 Control Plane Migration Status Update#5620, #5587, dashboard#1262

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [USER] The ServiceAccount signing key rotation procedure has been improved and should work better for clusters with lots of ServiceAccounts or intermittent creations/deletions of new/old ServiceAccount secrets. #7313
  • 🐛 [USER] A bug in the kubelet-monitor script running on all shoot worker nodes has been fixed which was causing to also kill processes other than kubelet only. #7278
  • ✨ [OPERATOR] The legacy VPN solution has been removed. The feature gates ReversedVPN, ManagedIstio and APIServerSNI are unconditionally enabled (locked to their default values) now. #7167
  • ✨ [OPERATOR] gardener-operator is now managing the load balancer Service for exposing the virtual-garden-kube-apiserver as part of the virtual garden cluster control plane. It is possible to specify annotations for it via .spec.runtimeCluster.settings.loadBalancerServices.annotations in the Garden resource. #7238
  • 🐛 [OPERATOR] When deploying kube-apiserver version v1.24, Gardener will add the --shutdown-send-retry-after=true command line flag to the kube-apiserver command. [...]. #7250
  • ✨ [DEVELOPER] The HighAvailabilityConfig webhook now also mutates replica settings of HPA and HVPA resources. To make use of this handling, please label respective resources with the well known high-availability-config.resource.gardener.cloud/type label [...]. #7226
  • ✨ [DEVELOPER] It is now possible to make secrets manager adopt existing secrets. Find out more in this document. #7243
  • 📖 [DEVELOPER] The Gardener project has introduced a policy for the number of supported Kubernetes versions read it here. #7300

2023/01/25 - v1.63 Release (Part I) ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@rgroemmer5m💿 OpenStack StorageClasses Via CloudProfilesprovider-openstack#408
@ScheererJ10m👨‍👩‍👧 Highly Available Istio Deployment#6997
@shafeeqes5m👀 New ObservabilityComponentsHealthy Condition For Shoots#7325
@acumino5m🛵 Catching Long-Running Stuck Rollouts#7241

2023/01/18 - v1.62 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@dimityrmirchev10m🪐 Extension Lifecycle Strategies#6999
@rfranzke10m🧑‍💻 [operator] ETCD Management, Credentials Rotation, Validation#7067, #7144, #7225
@acumino5m🧰 Tracking Last Maintenance Operation#7035
@oliver-goetz10m💻 kind-Based Local Setup For Extensions#6678
@MartinWeindel10m👨‍👩‍👦 Highly Available VPN Deployment#6978

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [USER] gardener-admission-controller now validates Shoot Kubernetes version compatibility with Audit Policy API version on Shoot update request. #7205
  • ✨ [USER] It is now possible to configure the general log verbosity and the verbosity for HTTP access logs for the kube-apiserver via the Shoot specification. #7094
  • 🐛 [OPERATOR] Prevent updating Shoots which are scheduled to a Seed with less then 3 zones to spec.controlPlane.failureTolerance.type: zone #7195
  • 📖 [DEVELOPER] A new document for developers has been added with a checklist for what to pay attention to when adding new components to garden, seed, or shoot clusters. Read it here. #7125
EU and German government funding logos

Funded by the European Union – NextGenerationEU.

The views and opinions expressed are solely those of the author(s) and do not necessarily reflect the views of the European Union or the European Commission. Neither the European Union nor the European Commission can be held responsible for them.

Copyright © Linux Foundation Europe.

2023 | Gardener is a project of NeoNephos Foundation. For applicable policies including privacy policy, terms of use and trademark usage guidelines, please see https://linuxfoundation.eu. Linux is a registered trademark of Linus Torvalds.
Terms of Use|Privacy Statement|Legal Disclosure