metal-stack v0.22.1

See original release note at https://github.com/metal-stack/releases/releases/tag/v0.22.1

General

Noteworthy

• In case of outputs that ingest audit logs too slow, the behavior of gardener-extension-audit now depends on the configured webhookMode. The modes batch and blocking configure fluentbit such that audit log messages may be dropped if the audit log backend cannot ingest them in time. The mode blocking-strict instead causes all kube-apiserver requests to fail in this case. Fluentbit buffers up to storage.max_chunks_up * 2M (roughly 900MB). (release notes)

Breaking Changes

• The gardener-monitoring-certs was updated to work with the Gardener operator virtual garden. The parametrization for the role has breaking changes. Please adapt your playbooks accordingly if you use this role. (metal-stack/metal-roles#487)

Component Releases

csi-driver-lvm v0.7.0

• Pod eviction controller (metal-stack/csi-driver-lvm#117) @ostempel
• Update to go-1.25 (metal-stack/csi-driver-lvm#122) @majst01
• add matrix multiplatform build (metal-stack/csi-driver-lvm#119) @ostempel
• include sbom in container image (metal-stack/csi-driver-lvm#118) @mac641
• Bump golang.org/x/net from 0.37.0 to 0.38.0 (metal-stack/csi-driver-lvm#115) @dependabot[bot]

gardener-extension-provider-metal v0.27.1

• Allow PVC deletion on eviction with csi-driver-lvm ETCD volumes. (metal-stack/gardener-extension-provider-metal#468) @Gerrit91
• Fix metallb webhook (metal-stack/gardener-extension-provider-metal#475) @Gerrit91
• restrict ccm rbac for nodes (metal-stack/gardener-extension-provider-metal#478) @mwennrich

gardener-extension-ontap v0.2.9

• Update Torc (metal-stack/gardener-extension-ontap#73) @Honigeintopf

metal-roles v0.17.25

• Allow configuring csi-driver-lvm ETCD volume evictions on GEPM. (metal-stack/metal-roles#477) @Gerrit91
• Cleanup release vector mapping. (metal-stack/metal-roles#489) @Gerrit91
• Remove valkey migration steps (metal-stack/metal-roles#488) @Gerrit91
• Add capms controller to release vector mapping. (metal-stack/metal-roles#485) @Gerrit91
• Fix shoot template when auditing + csi-driver-lvm extension is enabled. (metal-stack/metal-roles#492) @Gerrit91
• Add gardener-partition-proxy role (metal-stack/metal-roles#491) @Gerrit91
• Update gardener-monitoring-certs role to work with operator. (metal-stack/metal-roles#487) @Gerrit91
• Adaptions for g/g v1.120 + drop deprecated gardener role. (metal-stack/metal-roles#486) @Gerrit91
• Remove debugging output from nsq role. (metal-stack/metal-roles#474) @Gerrit91
• Bump monitoring to match current Gardener version. (metal-stack/metal-roles#476) @Gerrit91
• Fix issue with removal of gardenlet image overwrites. (metal-stack/metal-roles#494) @Gerrit91
• CreateCRDs for shoot-dns-service extension. (metal-stack/metal-roles#495) @Gerrit91
• Update oci-mirror image semver constraints for isolated clusters (metal-stack/metal-roles#496) @mwennrich
• Add new csi-driver-lvm-controller image to oci-mirror. (metal-stack/metal-roles#497) @Gerrit91

os-metal-extension v0.8.9

• Go 1.25 (metal-stack/os-metal-extension#62) @majst01
• Trim down README.md. (metal-stack/os-metal-extension#61) @Gerrit91
• include sbom in container image (metal-stack/os-metal-extension#60) @mac641

duros-controller v0.11.8

• Update duros-go and use go-1.25 (metal-stack/duros-controller#98) @majst01

gardener-extension-audit v0.4.0

• Fix storage size overflow (metal-stack/gardener-extension-audit#61) @MichaelEischer

helm-charts v0.5.1

• Postgreslet next release (metal-stack/helm-charts#134) @eberlep

droptailer v0.2.19

• Update to go-1.25, debian13 (metal-stack/droptailer#45) @majst01
• include sbom in container image (metal-stack/droptailer#44) @mac641

cluster-api-provider-metal-stack v0.6.3

• Add --namespace flag to watch only specific namespace if necessary. (metal-stack/cluster-api-provider-metal-stack#114) @Gerrit91
• Cluster K8s Upgrade (metal-stack/cluster-api-provider-metal-stack#105) @simcod
• fix(machine): give load balancers some time after control plane machine deletion (metal-stack/cluster-api-provider-metal-stack#115) @vknabel
• test: reference new templates (metal-stack/cluster-api-provider-metal-stack#113) @vknabel
• Use calico flavor for tests (metal-stack/cluster-api-provider-metal-stack#112) @simcod
• Add first flavors for cluster templates. (metal-stack/cluster-api-provider-metal-stack#110) @Gerrit91
• Add Calico HelmChartProxy and metal-ccm ClusterResourceSet sample. (metal-stack/cluster-api-provider-metal-stack#106) @Gerrit91
• test: teardown and slight refactorings (metal-stack/cluster-api-provider-metal-stack#104) @vknabel
• docs: updated readme for current status (metal-stack/cluster-api-provider-metal-stack#109) @vknabel
• Integration test for HA cluster setup (metal-stack/cluster-api-provider-metal-stack#103) @simcod
• Integration Tests: clusterctl move (metal-stack/cluster-api-provider-metal-stack#102) @simcod

gardener-extension-csi-driver-lvm v0.1.6

• add eviction controller to csi-driver-lvm (metal-stack/gardener-extension-csi-driver-lvm#16) @ostempel
• docs: improved docs regarding migration (metal-stack/gardener-extension-csi-driver-lvm#14) @vknabel
• Add more netpols required when running in distributed landscapes (metal-stack/gardener-extension-csi-driver-lvm#15) @Gerrit91
• include sbom in container image (metal-stack/gardener-extension-csi-driver-lvm#13) @mac641
• Fix image vector points to wrong csi-driver-lvm container tag. (metal-stack/gardener-extension-csi-driver-lvm#18) @Gerrit91

api v0.0.33

• Infra Role Handling and Admin Token Create, better Token documentation (metal-stack/api#69) @majst01

Merged Pull Requests

This is a list of pull requests that were merged since the last release. The list does not contain pull requests from release-vector-repositories.

The fact that these pull requests were merged does not necessarily imply that they have already become part of this metal-stack release.

• Blog article for metal-stack v0.22.0. (metal-stack/website#136) @Gerrit91
• Bump releases to version v0.22.0 (metal-stack/website#137) @metal-robot[bot]
• Gardener v1.120 + drop deprecated Gardener parts. (metal-stack/releases#256) @Gerrit91
• Fix link in v0.22.0 blog article. (metal-stack/website#138) @Gerrit91
• Add blog article for OCP hardware support. (metal-stack/website#132) @Gerrit91
• GenericCLI Fix: Commands set to 'false' in OnlyCmds are now correctly disabled (metal-stack/metal-lib#193) @izvyk
• Correct grammar of on-premises (metal-stack/website#140) @stmcginnis
• fix capms-ubuntu release location (metal-stack/metal-images#368) @mac641
• Firewall: update node_exporter, tailscale and kernel (metal-stack/metal-images#369) @majst01
• Add vendor Gigabyte to supported hardware list (metal-stack/website#141) @simcod
• Bump typescript from 5.9.2 to 5.9.3 (metal-stack/website#135) @dependabot[bot]
• Bump @headlessui/react from 2.2.7 to 2.2.9 (metal-stack/website#117) @dependabot[bot]
• Remove unused Dockerfile and docker-bake.hcl args (metal-stack/metal-images#357) @majst01
• Bump tailwindcss from 4.1.13 to 4.1.16 (metal-stack/website#133) @dependabot[bot]
• Update to go-1.25, debian:13 (metal-stack/oci-mirror#18) @majst01
• Stay with frr-10.4.x for now (metal-stack/metal-images#372) @majst01
• use docker-bake tar exporter as default output (metal-stack/metal-images#358) @mac641
• Next attempt to calculate planning meetings table. (metal-stack/website#148) @Gerrit91
• docs(MEP16): FCM contents adjustments (metal-stack/website#142) @vknabel
• Bump @tailwindcss/postcss from 4.1.13 to 4.1.17 (metal-stack/website#143) @dependabot[bot]
• Bump @docusaurus/types from 3.8.1 to 3.9.2 (metal-stack/website#144) @dependabot[bot]
• Bump tailwindcss from 4.1.16 to 4.1.17 (metal-stack/website#145) @dependabot[bot]
• chore(deps): bump docusaurus to 3.9.2 (metal-stack/website#149) @vknabel
• Update debian kernel to 6.1.0-41 (metal-stack/metal-images#373) @majst01
• Use grype instead of cve-bin-tool (metal-stack/website#150) @majst01
• Downgrade debian 12 kernel because of eBPF bug preventing calico to work (metal-stack/metal-images#374) @majst01
• Next release (metal-stack/releases#257) @metal-robot[bot]