Fleet Management

  • Changed

    • Updated Go version.
  • Changed

    • BREAKING All values of cluster userconfig for CAPA are moving under global.
  • Changed

    • Changed the length of randomly-generated cluster names to 10
  • Added

    • Add support for device authentication flow in the login command and a new --device-auth flag to activate it.

    Fixed

    • Fix storage of separate kubeconfig file (--self-contained) for EKS workload clusters
  • ⚠️ Attention: Minor release [1.2.0] contains breaking changes in default user values! The name of the service account changed to efs-csi-sa for both components. This affects clusters with already configured IRSA roles. You either need to update the trust identity policy on the role to match the new service account or set service account names to the original values via the values file. ⚠️

    Updated

    • Extract registry from container images to allow set it for all images on the value level.
    • Change node-selector values to fit the new scheme.
    • Configure the same service account for both controller and node to simplify IRSA role permissions.
  • Changed

    • Increase the cluster name length to 20 characters.
    • Change how login works to use our DNS record for the k8s API when using non-vintage providers, rather than the value found in the CAPI CRs.
    • Defaults for cluster template --provider vsphere since it was migrated to flatcar os.
  • Changed

    • Change default volume Docker size to 10Gb on AWS vintage NodePools.
  • Added

    • Add VPA CRs to both keda-operator and keda-operator-metrics-apiserver.
  • Added

    • Add CAPA cluster templating parameter --control-plane-load-balancer-ingress-allow-cidr-block which automatically adds NAT Gateway IPs of the MC to the allowlist
  • Added

    • Added a bash script to generate self-contained kubeconfig files with client certificate for workload clusters in Vintage installations using device auth flow in Dex