Workload cluster release vsphere-29.3.0 for VSPHERE

Changes compared to v29.2.0

Components

  • cluster-vsphere from v0.68.0 to v0.68.1
  • Flatcar from v3975.2.2 to v4081.2.1
  • Kubernetes from v1.29.12 to v1.29.13

cluster-vsphere v0.68.0…v0.68.1

Added

  • Add components.containerd to the schema and values.

Changed

  • Update example manifest.
  • Make cloud-provider-vsphere HelmRelease catalog configurable.
  • Update kube-vip to 0.8.9.
  • Update kube-vip static pod manifest with CIDR.

Apps

  • cilium from v0.25.1 to v0.25.2
  • cloud-provider-vsphere from v1.11.0 to v1.12.0
  • prometheus-blackbox-exporter from v0.4.2 to v0.5.0
  • security-bundle from v1.8.2 to v1.9.1
  • vertical-pod-autoscaler from v5.3.0 to v5.3.1
  • vertical-pod-autoscaler-crd from v3.1.1 to v3.1.2

cilium v0.25.1…v0.25.2

Changed

cloud-provider-vsphere v1.11.0…v1.12.0

Added

  • Add Renovate to track new tags.
  • Update kube-vip helm chart to 0.6.2.
  • Update kube-vip to 0.8.4.
  • Add initContainer to CSI node registrar container to wait for CRD to be registered.

prometheus-blackbox-exporter v0.4.2…v0.5.0

Changed

  • Harden security context to pass PSS compliance.

Removed

  • Remove PSP resources.

security-bundle v1.8.2…v1.9.1

Breaking changes

Note: When upgrading to this security-bundle version with Falco enabled, the Falco App will fail to upgrade due to a breaking change in the upstream chart. To finish the upgrade, disable, then re-enable the Falco App by setting apps.falco.enabled=[false|true] in the security-bundle user values Config Map.

Changed

  • Update trivy-operator (app) to v0.10.3.
  • Update trivy (app) to v0.13.1.
  • Update kyverno (app) to v0.18.1.
  • Update kyverno-crds (app) to v1.12.0.
  • Update kyverno-policies (app) to v0.21.0.
  • Update starboard-exporter (app) to v0.8.0.
  • Update falco (app) to v0.9.1.

vertical-pod-autoscaler v5.3.0…v5.3.1

Changed

  • Chart: Update Helm release vertical-pod-autoscaler to v9.9.1. (#333)

vertical-pod-autoscaler-crd v3.1.1…v3.1.2

Changed

  • Chart: Sync to upstream. (#124)

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.