Gardener

Appearance

Gardener Review Meetings (2024) ​

In case you couldn't participate and are interested in catching up, you can find the contents of the review meetings we have had in 2024 here.

The meetings were recorded, but not published.

Reviews ​

2024/12/18 - v1.109 and v1.110 Releases ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@timuthy5m🫣 Virtual Cluster Watch In gardener-operator#10663
@oliver-goetz10m💂 Node Agent Authorizer#10781
@tobschli5m🐛 Fix Shoot SSH Keypair Rotation#10671
@maboehm5m🪪 Support More Use-Cases For TokenRequestor#10988
@axel7born5m🧑‍🧒 IPv4/IPv6 Dual Stack Shoots on AWS#10803

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] The deprecated and unconditionally disabled HVPA and HVPAForShootedSeed feature gates are removed. [...] #10853
  • 🪓 [DEVELOPER] Extension webhooks need to remove the provider type Predicates and add an ObjectSelector against the object's provider type label instead. #10896
  • 🐛 [OPERATOR] seed-authorizer and structured authorization webhooks of shoot kube-apiservers no longer use the default TTL for AuthorizedTTL and UnauthorizedTTL. #10703

2024/12/11 - Hack The Garden Wrap Up ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@damyan5m🌐 IPv6 Support On IronCoreSummary
@LucaBernstein5m💡 Gardener SLIs: Shoot Cluster Creation/Deletion TimesSummary
@Gerrit915m🔁 Version Classification Lifecycle In CloudProfilesSummary
@rfranzke5m🛡️ Enhanced Seed Authorizer With Label/Field SelectorsSummary
@hown3d5m🔑 Bring Your Own ETCD Encryption Key Via Key Management SystemsSummary
@MichaelEischer5m⚖️ Load Balancing For Calls To kube-apiserversSummary
@Nuckal7775m🪴 Validate PoC For In-Place Node Updates Of Shoot ClustersSummary
@ialidzhikov5m🚀 Prevent Pod Scheduling Issues Due To OverscalingSummary
@maboehm5m💪🏻 Prevent Multiple systemd Unit Restarts On Reconciliation ErrorsSummary
@rfranzke5m🤹‍♂️ Trigger Nodes Rollout Individually Per Worker Pool During Credentials RotationSummary
@dergeberl5m🚏 Replace TopologyAwareHints with ServiceTrafficDistributionSummary
@oliver-goetz5m⬆️ Deploy Prow Via FluxSummary
@timebertt5m⛓️‍💥 E2E Test Skeleton For Autonomous Shoot ClustersSummary
@tobschli5m🫄 cluster-autoscaler's ProvisioningRequest APISummary
@Gerrit915m🐢 Cluster API Provider For GardenerSummary

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪪 Support More Use-Cases For TokenRequestor. Summary
  • 👀 Watch ManagedResources In Shoot Care Controller. Summary
  • 👨🏼‍💻 Make cluster-autoscaler Work In Local Setup. Summary
  • 🧹 Use Structured Authorization In Local KinD Cluster. Summary
  • 🧹 Drop Internal Versions From Component Configuration APIs. Summary
  • 🐛 Fix Non-Functional Shoot Node Logging In Local Setup. Summary
  • 🧹 No Longer Generate Empty Secret For reconcile OperatingSystemConfigs. Summary
  • 🖥️ Generic Monitoring Extension. Summary

2024/11/20 - v1.108 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@LucaBernstein10m🖼️ Custom Machine Images For NamespacedCloudProfiles#10629, #10811
@dimitar-kostadinov5m💳 TLS Between Registry Cache And containerd#10831, registry-cache#245
@unmarshall10m🤖 ETCD Druid v0.23etcd-druid (release)
@MartinWeindel10m👩‍🌾 Gardener Operator Deploys BackupBucket/DNSRecord#10645
@istvanballok10m🛝 Gardener Demo Playgrounddemo (website)

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [OPERATOR] Fixed an issue that that could occur during control plane migration causing the core.gardener.cloud/v1beta1.BackupEntry to be reconciled after it was successfully migrated, but before it was restored. #10761
  • ✨ [USER] The URLs of Shoot plutono, prometheus and alertmanager are now stored as annotations in <shoot-name>.monitoring secret in the project namespace. #10735

2024/11/06 - v1.107 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@timuthy10m🪪 Structured Authorization Configuration#10682
@tobschli10m⛔ Shoot Access Restrictions#10654
@petersutter5m🕹 Recent Gardener Dashboard Features1.78.0

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] A new required controller was added to gardener-operator. It maintains the RequiredRuntime condition for Extension resources to indicate that the extension deployment is required in the Garden-Runtime cluster. #10650
  • ✨ [USER] Gardener reports the cluster's egress CIDRs in Shoot.status.networking.egressCIDRs if supported by the used provider extension. #10240
  • 🪓 [OPERATOR] The gardener/controlplane Helm chart has been deprecated and will be removed after v1.135 has been released (around beginning of 2026). We urge you to switch to a gardener-operator-based installation. Read all about it here. #10706

2024/10/23 - v1.106 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@plkokanov5m🫐 vpa-recommender Metrics Collection#10517
@grolu5m📊 Dashboard Adaptations In gardener-operator#10572
@andrerun5m📖 GEP-29: Autoscaling Storage Volumes#10690
@DockToFuture, @axel7born10m🛜 IPv6 Shoot Clusters on AWSprovider-aws#1024
@ary19925m🎮 k8s.io/* + controller-runtime Upgrades#10459
@ialidzhikov10m⎈ Kubernetes 1.31 Support#10472

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] The HVPA and HVPAForShootedSeed feature gates have been deprecated and locked to false. Disable the HVPA and HVPAForShootedSeed feature gates if you have them enabled before upgrading to this version of Gardener. #10659
  • ✨ [OPERATOR] Gardener generated certificates are valid 1 minute before issuance to handle some amount of clock skew. #10603
  • ✨ [DEVELOPER] Allow gosec to be consumed from gardener/gardener. #10642

2024/10/16 - ApeiroRA Special Edition & v1.105 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@mkorbi, @phyrog25m🌲 CO2/Green Monitoring Via Kubecostextension-shoot-kubecost (repo), extension-shoot-kepler (repo)
@rfranzke5m🎱 Support For 80+ Worker Pools#10542
@oliver-goetz10m👨🏻‍🌾 gardener-operator Deploys Extension Resources#10518

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [OPERATOR] When checking whether a Deployment rollout is complete, stale Pods are now ignored and no longer counted. #10548
  • ✨ [OPERATOR] gardenlet now performs garbage collection of stale Pods in all namespaces (except kube-system) in the seed cluster. #10548
  • ✨ [OPERATOR] The TopologySpreadConstraint calculation was improved for workload spread across multiple zones. This especially leads to a more balanced distribution of kube-apiserver and istio replicas in seed clusters. #10608

2024/09/25 - v1.104 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@LucaBernstein5m🪪 Custom RBAC Verbs For NamespacedCloudProfiles#10485
@dimityrmirchev5m➡️ Migrating From SecretBinding to CredentialsBinding#10365
@ScheererJ10m🐹 Golang-Based VPN Implementation#9774
@ScheererJ5m📖 GEP-28: Autonomous Shoot Clusters#10536

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] The gardener-operator metrics are now automatically scraped by the garden Prometheus. #10464
  • ✨ [OPERATOR] Alerts based on the proposals_failed_total metric of the etcd cluster are not raised anymore. #10524

2024/09/11 - v1.103 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@dimityrmirchev10m🔑 Token Requestor Controller For WorkloadIdentitys#10298
@LucaBernstein5m⚙️ New API: NamespacedCloudProfile#10266
@timuthy10m👨🏻‍🌾 gardener-operator Deploys Extension Admission Components#10277

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] kube-proxy now has a readiness probe so that a Node will only become ready for workloads after kube-proxy was ready at least once. #10407
  • ✨ [OPERATOR] Host spread for shoots with failure tolerance node (.spec.controlPlane.highAvailability.failureTolerance.type) is now accomplished via minDomains. Earlier, this happened at a best effort basis only. If a seed was having less than 3 nodes at the time the control-plane pods were scheduled, the desired pod distribution was not possible. #10400

2024/08/28 - v1.102 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@AleksandarSavchev10m🪪 Structured Authentication For Shoot and Garden#10244
@ialidzhikov5m⚙️ VPA Recommender Configurability#10221
@plkokanov10m🕴️ Cross-Provider Control Plane Migration#10323
@vicwicker10m📊 Migrate VPA Metrics To CustomResourceState Metrics#9941

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] When the NewWorkerPoolHash feature gate is enabled, the calculation now also rolls worker nodes of Shoots when changing systemReserved in the kubelet configuration. Worker pools are not rolled if the sum of kubeReserved and systemReserved does not change. [...] #10290
  • 🐛 [USER] Fixes a bug preventing shoot clusters with annotation shoot.gardener.cloud/skip-readiness: "true" to be created. #10317
  • ✨ [OPERATOR] The .spec.deployment.vpa field in the seedmanagement.gardener.cloud/v1alpha1.{Gardenlet,ManagedSeed} APIs is deprecated and has no effect anymore. It will be removed in a future version. Now, gardenlet deploys its own VPA as part of the Seed reconciliation (after it ensured the VPA CRD exists). #10299
  • 📖 [DEVELOPER] This document now contains a guide for developers how to handle deprecations and backwards-compatibility of changes. #10294

2024/08/14 - v1.101 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@vpnachev10m🔑 token Subresource For WorkloadIdentity API#10042
@nkraetzschmar5m🐧 Secure Boot On Gardenlinuxgardenlinux#2237
@rfranzke10m🪴 gardenlet Management Via gardener-operator#10161, #10218
@timuthy10m🪞 Registry Mirror Management Via OperatingSystemConfig#10050, #10167

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [DEVELOPER] The IPv4 addresses for the local Gardener setup was changed from 127.0.0.x to 172.18.255.x (default kind subnet) to resolve an issue on developer machines which can't use additional IP addressed from the 127.0.0.0/8 space. [...] #10019
  • 🪓 [DEVELOPER] The legacy method of providing monitoring configuration via ConfigMaps labeled with extensions.gardener.cloud/configuration=monitoring has been removed. See this instead. #10220
  • 🐛 [OPERATOR] Fixed a bug in the vpa-eviction-requirements controller causing etcds to be evicted for downscaling outside of their maintenance window. #10202

2024/07/31 - v1.100 Release ​

Demo Agenda 📋 ​

No topics available for presentation, hence, meeting was canceled.

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [USER] A bug causing sshd running in cluster pods to receive a SIGTERM when SSHAccess for worker nodes is disabled is now fixed. #10123
  • ✨ [USER] Added document in which we share our pod autoscaling best practices with end users. #10083
  • ✨ [OPERATOR] Scrape vpa-admission-controller metrics with prometheus. #10033

2024/07/24 - v1.99 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@ScheererJ10m📡 Network Range Propagation From Extensions#9998
@MartinWeindel5m👨🏻‍🌾 gardener-operator Manages Cert Management#9957

No Demo, But Still Worth Celebrating 🎉 ​

  • 🐛 [USER] Erroneous warnings for incomplete shoots credentials rotation has been fixed. #10059

2024/07/17 - v1.98 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@LucaBernstein5m🥅 Object Selector For Extension Webhooks#9981, #10026
@MichaelEischer10m🔄 New Worker Pool Hash Calculation For Rolling Updates#9865
@dimityrmirchev5m🪢 CredentialsBinding: Successor Of SecretBinding#9853
@istvanballok10m🪜 Renovated Remote Local Setup#9980
@oliver-goetz5m🚔 Introduce gosec For Static Application Security Testing (SAST)#9959

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] The Resource Size Validator of the gardener-admission-controller ignores status subresource and metadata.managedFields for resource size limits. [...] #10011
  • 🪓 [DEPENDENCY] The extensions/pkg/webhook/cloudprovider.Args#EnableObjectSelector field is now removed. The corresponding webhook's object selector is now enforced unconditionally. #10027
  • ✨ [OPERATOR] kube-apiserver HPA's max replicas count from 3 to 6 in VPAAndHPA autoscaling mode to support very large control planes. #9971
  • ✨ [OPERATOR] The data in ManagedResource secrets is now compressed with Brotli and stored under a single data key data.yaml.br. #9964

2024/06/19 - v1.97 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@timuthy5m🚫 Register Node Tains With Kubelet#9872
@acumino5m🧰 Update Shoot Maintenance State If Last Maintenance Failed#9945

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [DEVELOPER] gardener-operator local development setup supports creating seeds, shoots and managed-seeds now. #9763
  • ✨ [OPERATOR] gardenlet is now capable of keeping itself updated by pulling configuration and deployment values from the garden cluster. #9874
  • 🐛 [OPERATOR] Fix a regression where etcd alerts for the virtual Garden cluster did not work. #9973
  • 🪓 [DEVELOPER] The deprecated fields .spec.{reloadConfigFilePath,command} and .status.{units,files} have been removed from the extensions.gardener.cloud/v1alpha1.OperatingSystemConfig API. #9885

2024/06/05 - v1.96 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@ScheererJ10m📢 Proxy Protocol Termination On Load Balancers In Seeds#9844
@MichaelEischer5m📋 Improved OperatingSystemConfig Rollout Check For Nodes#9757
@MartinWeindel5m🔄 Secrets Manager: Configurable Validity Percentage For Auto-Renewal#9819
@dimityrmirchev10m👨🏻‍🌾 gardener-operator Manages Discovery Server#9746
@marwinski10m👮 GEP-27: Falco Extension#9845

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [DEVELOPER] The allow-shoot-networks NetworkPolicy has been dropped entirely, hence, the networking.gardener.cloud/to-shoot-networks=allowed label has no effect anymore and should be removed. #9752
  • 🪓 [DEPENDENCY] The extensions/pkg/webhook/controlplane/genericmutator.Ensurer#EnsureKubeAPIServerService func is removed. This func was used before the introduction of ManagedIstio/APIServerSNI (when the kube-apiserver Service was of type LoadBalancer) to set cloud provider specific annotations to the Service. [...] #9770
  • ✨ [OPERATOR] A new core.gardener.cloud/v1 API version is introduced which only includes the ControllerDeployment resource for now. The new version of the ControllerDeployment drops the type and providerConfig fields in favor of a well-structured section for helm-based ControllerDeployments. #9771
  • ✨ [OPERATOR] It is now possible to specify an OCI repository in ControllerDeployments describing from where the Helm chart can be pulled (instead of specifying a base64-encoded chart in the specification). #9823, Summary

2024/05/29 - v1.95 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@shafeeqes5m⎈ Kubernetes 1.30 Support#9508
@ialidzhikov10m🚀 VPA- and HPA-Based Autoscaling For kube-apiserver#9678
@rfranzke10m👀 Four-Eyes Approval Concept For Shoot Deletion#9680
@ScheererJ5m🧪 IPv6-Only E2E Tests In Prow#9693

No Demo, But Still Worth Celebrating 🎉 ​

  • ❗️ [DEVELOPER] The legacy method for extensions to provide observability configuration for shoot clusters (via ConfigMaps labelled with extensions.gardener.cloud/configuration=monitoring) is deprecated and will be removed in a future release. Please refer to this document to get information about the new, recommended way, and start migrating to it. #9695
  • ❗️ [DEVELOPER] The extensions.gardener.cloud/v1alpha1.Worker resource now has a new .spec.pools[].userDataSecretRef field which references a Secret containing the actual user data. The .spec.pools[].userData field is deprecated and will be removed in a future version. [...] #9722
  • 🐛 [USER] A bug has has been fixed which caused unneeded gardener-node-agent reconciliations after each Shoot reconciliation even if the underlying OperatingSystemConfig did not contain relevant changes. #9723

2024/05/22 - Hack The Garden Wrap Up ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@maboehm5m🗃️ OCI Helm Release Reference For ControllerDeploymentsSummary
@oliver-goetz5m👨🏼‍💻 gardener-operator Local Development Setup With gardenletsSummary
@kon-angelo5m👨🏻‍🌾 Extensions For Garden Cluster Via gardener-operatorSummary
@rfranzke5m🪄 Gardenlet Self-Upgrades For Unmanaged SeedsSummary
@Gerrit915m🦺 Type-Safe Configurability in OperatingSystemConfig For containerd, DNS, NTP, etc.Summary
@majst015m👮 Expose Shoot API Server In Tailscale VPNSummary
@hown3d5m⌨️ Rewrite gardener/vpn2 From Bash To GolangSummary
@ScheererJ5m🕳️ Pure IPv6-Based VPN TunnelSummary
@timebertt5m👐 Harmonize Local VPN Setup With Real-World ScenarioSummary
@timuthy5m🍞 Compression For ManagedResource SecretsSummary
@afritzler5m🚛 Making Shoot Flux Extension Production-ReadySummary

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ An approach for supporting Cilium v1.15+ for highly-available Shoots has been developed. Summary
  • ✨ The contents of the machine-controller-manager-provider-local repository have been merged into the gardener repository to improve development productivity. Summary
  • ✨ The vendor folder is going to be removed from OS extensions. Summary
  • ✨ Embedded files are now considered for local image builds with Skaffold. Summary

2024/05/08 - v1.94 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@voelzmo10m🚀 VPA For ETCD Autoscaling#8984
@oliver-goetz5m🔎 Worker Node Count Validation#9599
@rfranzke10m📊 Dynamic Plutono Dashboard Reconciliation#9624
@petersutter10m🎮 gardener-operator Manages Dashboard + Web Terminal Controller#9583, #9646

No Demo, But Still Worth Celebrating 🎉 ​

  • ❗️ [OPERATOR] Five minutes Infrastructure Cleanup Wait Period during shoot deletion was removed. Shoot annotation shoot.gardener.cloud/infrastructure-cleanup-wait-period-seconds which could be used to configure this period was removed, too. #9632
  • ✨ [OPERATOR] gardener-node-agent no longer watches all Nodes in the cluster but restricts to only the Node it is responsible for (with the help of label/field selectors). This should lead to a significant reduction of network I/O, especially for shoot clusters with many nodes. #9672
  • 🐛 [OPERATOR] gardener-operator is now capable of reconciling shoot cluster-specific NetworkPolicys in case the garden cluster is a seed cluster at the same time. #9658

2024/04/24 - v1.93 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@maboehm10m🔄 New AfterWorker Extension Lifecycle Strategy#9472
@MichaelEischer10m🏨 Machine Type Dependent Resource Reservations#9449
@rfranzke5m🔎 Garden Prometheis Managed By prometheus-operator#9543, #9606
@oliver-goetz10m🐛 Fix Kubelet Data Volume Usage#9609

No Demo, But Still Worth Celebrating 🎉 ​

  • ❗️ [OPERATOR] Set kube-apiserver maxReplicas=3 for all Shoots that are not annotated with alpha.control-plane.scaling.shoot.gardener.cloud/scale-down-disabled=true. #9605
  • ✨ [OPERATOR] A new gardenlet feature gate called ShootManagedIssuer was introduced. This feature gate guards the functionality described in GEP-24 until all of the components mentioned in the enhancement proposal are implemented by Gardener. #9489
  • 🐛 [OPERATOR] Istio-ingress gateway dashboard now shows the correct sent tcp traffic metric and the correct memory usage. #9596

2024/04/10 - v1.92 Release ​

Demo Agenda 📋 ​

No topics available for presentation, hence, meeting was canceled.

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] The graduated UseGardenerNodeAgent feature gate has been dropped. [...]. #9477
  • 🪓 [DEVELOPER] The deprecated oscommon package has been removed. #9477
  • ✨ [OPERATOR] Secret openvpn-diffie-hellman-key in the garden namespace containing the Diffie-Hellmann key can be deleted from landscapes as it is no longer needed. #9386
  • ✨ [DEVELOPER] A new extension lifecycle strategy reconcile: AfterWorker is now available for Extensions to use in their ControllerRegistration. #9472

2024/03/27 - v1.91 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@rfranzke5m🚨 Alertmanager For Garden Clusters#9301, #9065 (issue)
@rfranzke5m🐶 Health Checks For Dependency Watchdog Actions#9376
@ScheererJ10m🚦 Replace kube-apiserver Ingress Resources With Istio Exposure#9300
@shafeeqes5m🧽 Force Kubernetes Upgrade Removes Unsupported Feature Gates + Admission Plugins#9365
@dimityrmirchev10m🎫 Managed Shoot OIDC Issuer#9196, #9354, #9157 (issue)

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [OPERATOR] Operators can create duplicate istio ingress gateways for migration if the zone names should be changed in the Seed specification. #9304
  • ✨ [DEVELOPER] The {garden,seed,shoot}-care controllers now incorporate ManagedResources into all relevant conditions, and it is possible to override the condition type into which a ManagedResource's status gets incorporated via the care.gardener.cloud/condition-type label. [...] #9313

2024/03/13 - v1.90 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@rishabh-1110m🐶 Dependency Watchdog Considers Node Leasesdependency-watchdog#94, #9072
@ScheererJ5m🌏 Add IP Stack To DNSRecords#9289
@kon-angelo10m🗃️ AWS ECR Credentials Provider For Kubeletprovider-aws#854
@rfranzke5m🩺 Health Checks For VerticalPodAutoscalers#9211
@oliver-goetz10m🤖 Renovate Botci-infra#1163, #9197

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] ⚠️ Gardener does no longer support garden, seed, or shoot clusters with Kubernetes versions == 1.24. Make sure to upgrade all existing clusters before upgrading to this Gardener version. #8989
  • 🐛 [DEPENDENCY] An issue was fixed that sometimes led to leaked extension-controlplane-shoot-webhooks which blocked the shoot deletion. #9209
  • ✨ [OPERATOR] The UseGardenerNodeAgent feature gate has been promoted to GA. It was already enabled by default and can now no longer be turned off. The feature gate will be removed in a future release. #9208

2024/02/28 - v1.89 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@ScheererJ10m⚖️ Drop nginx-ingress Load Balancer In Favor Of Istio#9038
@shafeeqes5m⎈ Skip Minor Kubernetes Version Upgrades#9185
@rfranzke10m🔎 Seed Prometheis Managed By prometheus-operator#9128, #9159, #9200, #9163
@petersutter5m📄 Read-Only Kubeconfigs For Shoots in Dashboard and CLIdashboard#1711 (issue)

No Demo, But Still Worth Celebrating 🎉 ​

  • ✨ [USER] The shoot cluster CA bundle is now stored in a ConfigMap in the project namespace of the garden cluster, in addition to storing it in a Secret. This ConfigMap shares the same name as the pre-existing Secret, which is <shoot-name>.ca-cluster. The Secret will be removed in a future Gardener release. [...] #9123
  • ✨ [OPERATOR] The UseGardenerNodeAgent feature gate has been promoted to beta and is now turned on by default. #9161
  • ✨ [OPERATOR] Add condition type ObservabilityComponentsHealthy for extension health check, it will allow extensions to register with this type. #9092

2024/02/14 - v1.88 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@rfranzke10m🛡️ Additional/Custom RBAC Permissions For Extensions#9079
@oliver-goetz10m👨🏻‍🌾 gardener Linux User On Shoot Worker Nodes#9077
@tobschli5m🩺 EveryNodeReady Considers gardener-node-agent Health#9073
@MartinWeindel10m✍🏻 Istio Resources As Source Objects For DNS Recordsexternal-dns-management#354

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] The docker CRI is no longer supported for machine images in the CloudProfile. Docker CRI was already not supported for Shoots with Kubernetes versions >= v1.23, so adding this CRI is a no-op currently. Please remove all the usages of docker CRI from your CloudProfiles before upgrading to this version. #9135
  • 🐛 [OPERATOR] A bug has been fixed which was preventing valitail systemd services on shoot workers from starting when the UseGardenerNodeAgent feature gate is enabled. #9149
  • 🐛 [USER] The kube-apiserver deployment is annotated to mark the completion of labeling the resources for encrytion so that this step is not repeated in case the "label removal" step fails and resources are partially without the label. #9147
  • ✨ [OPERATOR] BackupEntrys and Shoots are now labelled with seed.gardener.cloud/<seed-name>=true where <seed-name> is the value of .spec.seedName or .status.seedName. This allows for server-side filtering when watching these resources by leveraging a label selector. #9089

2024/01/31 - v1.87 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@timebertt10m🌏 IPv6 Single-Stack In Local Gardener#8574
@axel7born10m👨🏼‍💻 Local Setup For Dual-Stack Seeds#8983
@acumino5m⎈ Kubernetes 1.29 Support#8976
@ScheererJ10m👨‍👨‍👦 Spread Istio Pods Across Hosts#8970
@shafeeqes10m🔓 Custom Resource Encryption in ETCD#8842, #8966

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [OPERATOR] The deprecated field seed.spec.secretRef has been removed from the Seed API. Please check your Seeds and remove any usage before upgrading to this Gardener version. #8896
  • 🪓 [OPERATOR] Migration code for Plutono and Vali is now removed. Consider manual cleanup for longterm broken Shoots as described in the PR to avoid leaking Loki's PV. #8999
  • ✨ [OPERATOR] The components managed by gardener now use PDBs with unhealthyPodEvictionPolicy: AlwaysAllow for clusters with kubernetes version >= 1.26. [...] #8969

2024/01/24 - v1.86 Release ​

Demo Agenda 📋 ​

Presenter(s)DurationTopicReference(s)
@grolu10m🕹 Recent Gardener Dashboard Featuresdashboard (repo)
@holgerkoser10m📈 "All Projects" Dashboard Page Scalability Improvementsdashboard#1637
@rfranzke5m📖 Read-Only Kubeconfigs For Shoots#8870
@oliver-goetz5m💾 Registry Cache For E2E Tests In Prow#8880

No Demo, But Still Worth Celebrating 🎉 ​

  • 🪓 [DEVELOPER] Support for the deprecated NetworkPolicy annotations networking.resources.gardener.cloud/from-policy-allowed-ports and networking.resources.gardener.cloud/from-policy-pod-label-selector has been removed. Use networking.resources.gardener.cloud/from-<some-alias>-allowed-ports instead (documentation). #8883
  • 🐛 [OPERATOR] A bug causing the Shoot to use the wrong istio load balancer if the ExposureClass name and the exposureclass handler name are not the same is now fixed. #8926
  • ✨ [OPERATOR] Add egressCIDRs field to the infrastructureStatus resource. This allows provider-extensions to specify a list of stable CIDRs used as source IP for traffic generated by the shoot's worker nodes. #8888
EU and German government funding logos

Funded by the European Union – NextGenerationEU.

The views and opinions expressed are solely those of the author(s) and do not necessarily reflect the views of the European Union or the European Commission. Neither the European Union nor the European Commission can be held responsible for them.

Copyright © Linux Foundation Europe.

2024 | Gardener is a project of NeoNephos Foundation. For applicable policies including privacy policy, terms of use and trademark usage guidelines, please see https://linuxfoundation.eu. Linux is a registered trademark of Linus Torvalds.
Terms of Use|Privacy Statement|Legal Disclosure