v1.10.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Disables rp_filter properly when running cilium on all operating systems (gardener/gardener-extension-networking-cilium#84, @ScheererJ)
• [OPERATOR] Added cilium network policy to allow cilium's dns proxy to perform dns requests to make dns based policy working. (gardener/gardener-extension-networking-cilium#83, @ScheererJ)

v1.9.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Add init container to cilium agent which disables reverse path filtering (rp_filter). (gardener/gardener-extension-networking-cilium#82, @DockToFuture)

v1.8.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Update cilium to v1.11.1 which contains several bugfixes for agent instability. (gardener/gardener-extension-networking-cilium#78, @DockToFuture)
• [OPERATOR] Update cilium to v1.11.0. (gardener/gardener-extension-networking-cilium#75, @DockToFuture)

📰 Noteworthy

• [OPERATOR] The extension controller uses a projected ServiceAccount token in case it runs on a seed with a gardenlet of at least v1.37 or higher. The same applies for the cilium-related Pods deployed to shoot cluster. (gardener/gardener-extension-networking-cilium#76, @rfranzke)
• [DEVELOPER] The Golang version has been updated to 1.17.5. (gardener/gardener-extension-networking-cilium#76, @rfranzke)

v1.7.1

no release notes available

v1.7.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Update cilium to v1.10.5. (gardener/gardener-extension-networking-cilium#70, @DockToFuture)

v1.6.0

[gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [USER] Removed kube-proxy disabled flag from extension config. Use the shoot spec (Shoot.Spec.Kubernetes.KubeProxy.Enabled) instead. (gardener/gardener-extension-networking-cilium#61, @ScheererJ)
• [OPERATOR] Drop support for k8s<v1.15.0. (gardener/gardener-extension-networking-cilium#58, @DockToFuture)
• [OPERATOR] The default leader election resource lock of gardener-extension-networking-cilium has been changed from configmapsleases to leases. (gardener/gardener-extension-networking-cilium#57, @ialidzhikov)
  • Please make sure, that you had at least [email protected] running before upgrading to v1.6.0, so that it has successfully required leadership with the hybrid resource lock (configmapsleases) at least once.

✨ New Features

• [OPERATOR] The Cilium extension does now support seed clusters with Kubernetes version 1.22. You should consider the Kubernetes release notes before upgrading to 1.22. (gardener/gardener-extension-networking-cilium#65, @timuthy)
• [OPERATOR] It is now possible to specify the leader election resource lock via the chart value leaderElection.resourceLock (defaults to leases). (gardener/gardener-extension-networking-cilium#57, @ialidzhikov)

🏃 Others

• [OPERATOR] The extension does no longer depend on a list of supported Kubernetes versions (coming from the github.com/gardener/gardener dependency). This was preventing the extension to start against Seed clusters running on K8s versions that were not present in the mentioned list. (gardener/gardener-extension-networking-cilium#66, @ialidzhikov)
• [OPERATOR] Vendor to gardener v1.28.1 and grm v0.25.0. (gardener/gardener-extension-networking-cilium#63, @DockToFuture)
• [OPERATOR] Update cilium to v1.10.3 and use cgroupv2. (gardener/gardener-extension-networking-cilium#62, @DockToFuture)
• [OPERATOR] Revendored to gardener v1.26.0 (gardener/gardener-extension-networking-cilium#59, @ScheererJ)
• [OPERATOR] Vendor to gardener v1.25.1. (gardener/gardener-extension-networking-cilium#54, @DockToFuture)
• [OPERATOR] Update cilium to v1.10.1 (gardener/gardener-extension-networking-cilium#53, @DockToFuture)
• [OPERATOR] Update cilium to v1.9.6, which includes many bugfixes. (gardener/gardener-extension-networking-cilium#45, @ScheererJ)

v1.5.0

[gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [USER] Extension resource configs (NetworkConfig) are now deserialized in "strict" mode. This means that deserializing resources with fields that are not allowed by the API schema will result in errors. Shoots containing such resources will fail with an appropriate error until you manually update the shoot to make sure any extension resource configs contained in it are valid. (#40, @stoyanr)

🏃 Others

• [OPERATOR] Update cilium to v1.9.5, which includes many bugfixes. (#39, @DockToFuture)
• [OPERATOR] Cilium is updated to v.1.9.4. The ipam mode is switched from legacy hostscope mode which is removed to cluter-pool ipam mode. (#38, @DockToFuture)
• [OPERATOR] Vendor to gardener v1.16.0 and update controller runtime to v0.7.1 (#37, @DockToFuture)

Docker Images

gardener-extension-networking-cilium: eu.gcr.io/gardener-project/gardener/extensions/networking-cilium:v1.5.0

v1.4.0

[gardener-extension-networking-cilium]

Improvements

• [OPERATOR] The cache for Secrets and ConfigMaps is now disabled to decrease the extension controller's memory footprint (#34, @ialidzhikov)
• [OPERATOR] An issue causing networking-cilium controller to not respect the --max-concurrent-reconciles flag is now fixed. (#33, @ialidzhikov)

Docker Images

gardener-extension-networking-cilium: eu.gcr.io/gardener-project/gardener/extensions/networking-cilium:v1.4.0

v1.3.0

[gardener-extension-networking-cilium]

Improvements

• [OPERATOR] Update cilium to v1.8.5 and update missing clusterrole permissions. (#31, @DockToFuture)
• [OPERATOR] Vendor cilium to gardener v1.12.6 and update golang to 1.15 and alpine image to 3.12.1. (#30, @DockToFuture)
• [OPERATOR] Adds priority class for extension pods to prevent preemption. (#28, @danielfoehrKn)
• [OPERATOR] The following options can now be configured through the extension's Helm chart values charts/gardener-extension-networking-cilium/values.yaml: (#26, @timuthy)
  • Health check worker count
  • minAllowed values for VPA
• [OPERATOR] Cilium is now running on v1.8.4. (#24, @DockToFuture)

Docker Images

gardener-extension-networking-cilium: eu.gcr.io/gardener-project/gardener/extensions/networking-cilium:v1.3.0

v1.2.0

[gardener-extension-networking-cilium]

Improvements

• [OPERATOR] Cilium is now running on v1.8.2. (#17, @zanetworker)
• [OPERATOR] hostscope IPAM is now used by default for Cilium clusters instead of cluster-pool. (#16, @zanetworker)
• [OPERATOR] Monitoring is now enabled by default which would expose metrics/dashboards for the agent/hubble and operator components. (#14, @zanetworker)