Fleet Management

  • Added

    • Add cluster-namespace controller which ensures that RBAC resources to access resources in cluster namespaces can be granted to those with access to the clusters organization
    • Add bootstrapping for the read-cluster-apps and write-cluster-apps clusterRoles.
    • Add update option for orgReadClusterRoleBinding resource.

    Changed

    • The write_all_group configuration key is now optional.
  • Removed

    • Remove Cluster CRD from KVM installations.
  • Fixed

    • Bump go module major version to v5.

    Added

    • Upgrade etcdbackup CRD.
  • Fixed

    • Fix naming of VPA deployments in workload clusters.
  • Fixed

    • login command: Try logging in again if token renewal fails.
    • Add security API group to scheme in order to get organizations during login.

    Changed

    • Enable logging into clusters in all versions and namespaces if --insecure-namespace flag is active.
    • Simplify log in with context name

    Added

    • Add support for self-contained kubeconfig creation for management cluster context.
    • Add --keep-context flag to login.
  • Added

    • Network Policy for VPA.
  • Added

    • Create RBAC for customer-facing Flux to access organization namespaces.
    • Add automation ServiceAccount to organization namespaces with permissions to handle Flux resources in that namespace by default.
  • Changed

    • Upgrade CAPI / CAPZ CRDs to v1beta1 on Azure.
  • Changed

    • Enable cluster-topology templates for OpenStack by default.
    • Update default cluster-openstack version to 0.3.0.

    Removed

    • Remove deprecated --cluster-id flag from get nodepools, template cluster, and template nodepool commands. Replaced by --cluster-name.
    • Remove deprecated --owner flag from template cluster, template networkpool, and template nodepool commands. Replaced by --organization.
    • Remove deprecated --master-az flag from template cluster command. Replaced by --control-plane-az.
    • Remove deprecated --nodepool-name flag from template nodepool command. Replaced by --description.
    • Remove deprecated --nodex-min flag from template nodepool command. Replaced by --nodes-min.
    • Remove deprecated --nodex-max flag from template nodepool command. Replaced by --nodes-max.

    Added

    • Add support for templating App CRs in organization namespace.
    • Add --catalog-namespace flag to template app.
  • Fixed

    • Add missing imagePullSecret.