v1.38.0

[gardener/gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] IPv6 support is added to cilium extension for gardener shoot clusters. by @DockToFuture [#421]
• [OPERATOR] gosec was introduced for Static Application Security Testing (SAST). by @ScheererJ [#420]

Helm Charts

• admission-cilium-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-application:v1.38.0
• admission-cilium-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-runtime:v1.38.0
• networking-cilium: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/networking-cilium:v1.38.0

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.38.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.38.0

v1.37.0

[gardener/gardener-extension-networking-cilium]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#369]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the gardener-extension-admission-cilium Helm chart. by @timuthy [#362]
• [OPERATOR] Update cilium to v1.16.1 and enable cilium-envoy to enable features like (Ingress, Gateway API, Network Policies with L7 functionality, L7 Protocol Visibility). by @DockToFuture [#409]
• [OPERATOR] The networking cilium extension no longer configures min/maxAllowed in any managed VPA resource. by @ScheererJ [#408]
• [OPERATOR] Update to cilium v1.16.2. by @DockToFuture [#411]

Helm Charts

• admission-cilium-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-application:v1.37.0
• admission-cilium-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-runtime:v1.37.0
• networking-cilium: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/networking-cilium:v1.37.0

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.37.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.37.0

v1.36.0

[gardener/gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] This extension is now using the new way of providing monitoring configuration (ref GEP-19) in case a shoot cluster's Prometheus has been migrated to management via prometheus-operator. by @rfranzke [#307]
• [OPERATOR] Update cilium to v1.15.6. by @DockToFuture [#351]

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.36.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.36.0

v1.35.0

[gardener/gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Cilium uses the label-prefix-file with the excluded identities from: https://docs.cilium.io/en/stable/operations/performance/scalability/identity-relevant-labels/#identity-relevant-labels except the statefulset. by @DockToFuture [#326]
• [OPERATOR] Set policy-cidr-match-mode to match node CIDRs in networkpolicies. by @axel7born [#321]

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.35.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.35.0

v1.34.0

[gardener/gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Update cilium to v1.15.3. by @DockToFuture [#282]

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.34.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.34.0

v1.33.0

[gardener/gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [OPERATOR] networking-cilium no longer supports Shoots with Кubernetes version == 1.24. by @shafeeqes [#233]

🏃 Others

• [OPERATOR] Update cilium to v1.14.9 by @gardener-ci-robot [#259]
• [OPERATOR] Cilium configuration option enable-l7-proxy is now enabled per default. by @ScheererJ [#261]
• [OPERATOR] Fixed a validation error which occurs when deploying the gardener-extension-admission-cilium charts because of a missing apiVersion field in its charts/gardener-extension-admission-cilium/charts/runtime/templates/serviceaccount.yaml file. by @plkokanov [#241]
• [OPERATOR] Set leader election namespace in cilium admission deployment. by @DockToFuture [#243]

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.33.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.33.0

v1.32.2

no release notes available

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.32.2
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.32.2

v1.32.1

no release notes available

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.32.1
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.32.1

v1.32.0

[gardener/gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [OPERATOR] CA and server certificates for the admission component are managed automatically. Passing custom certificates via Helm values is not supported anymore. by @timuthy [#234]
• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references.
  by @ccwienk [#231]

🐛 Bug Fixes

• [OPERATOR] Fixes an error that occurs when running with iptables-nft. by @axel7born [#229]
• [OPERATOR] The actuator.Delete doesn't wait for ManagedResources to get deleted in case of ForceDelete. by @shafeeqes [#227]
• [OPERATOR] An issue in the charts missing versions for some resources is now fixed. by @shafeeqes [#225]

🏃 Others

• [DEVELOPER] The vendor directory was removed in favor of the go mod cache. by @timuthy [#234]
• [OPERATOR] Update cilium to v1.14.6 by @DockToFuture [#239]
• [OPERATOR] Reconciliation of hibernated cilium clusters now works again. by @ScheererJ [#226]
• [OPERATOR] Bump github.com/gardener/gardener to 1.86.0. by @timuthy [#234]
• [OPERATOR] Update cilium to v1.14.5. by @DockToFuture [#235]
• [OPERATOR] Update cilium to v1.14.4. by @DockToFuture [#230]

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.32.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.32.0

v1.31.0

[gardener/gardener-extension-networking-cilium]

🐛 Bug Fixes

• [OPERATOR] The actuator.Delete doesn't wait for ManagedResources to get deleted in case of ForceDelete. by @shafeeqes [#227]
• [OPERATOR] An issue in the charts missing versions for some resources is now fixed. by @shafeeqes [#225]
• [OPERATOR] Fixes an error that occurs when running with iptables-nft. by @axel7born [#229]

🏃 Others

• [OPERATOR] Reconciliation of hibernated cilium clusters now works again. by @ScheererJ [#226]

Docker Images

• gardener-extension-admission-cilium: eu.gcr.io/gardener-project/gardener/extensions/admission-cilium:v1.31.0
• gardener-extension-networking-cilium: eu.gcr.io/gardener-project/gardener/extensions/networking-cilium:v1.31.0