Skip to main content
Version: v0.22

metal-stack v0.22.20

See original release note at https://github.com/metal-stack/releases/releases/tag/v0.22.20

General​

  • Gardener v1.139
  • This release was integration tested against the control plane that fully uses Gateway API and without anymore Ingress resources. We recommend to migrate to Gateway API for this release.

Breaking Changes​

  • It is now possible to configure NoncurrentDays also via flag, as follow up from #141. The s3 backend can be configured with NewerNoncurrentVersions as well as NoncurrentDays. Both can be used together, independently or completely removed from the lifecycle rule. The always applied default for NewerNoncurrentVersions was removed. So make sure to configure it accordingly, if not already configured in your deployment. (metal-stack/backup-restore-sidecar#148)

Required Actions​

  • ⚠️ Make sure the seed clusters are updated to at least K8s 1.32 before rolling out this Gardener release. Gardener writes that >= 1.30 seeds are supported but these lower versions cannot be reconciled because the perses-operator CRDs cannot be applied.
  • The monsoon sonic-exporter was superseded and will be removed in a future release. Use gNMI instead. More information about the migration can be found in the gnmic README. (metal-stack/metal-roles#670)

Noteworthy​

    • We now create a dedicated internal mini-lab docker network (mini_lab_internal) to enable explicit reproducible IP assignments for Service type: LoadBalancer. We reserve the 172.42.0.1/16 subnet for the mini_lab_internal network. mini-lab will manage the lifecycle of this network and will destroy it during make down.

    • We made changes to the certificates. If you deployed mini-lab before you need to run make roll-certs to update host names in the certificates. (metal-stack/mini-lab#299)

  • In #633 changes were introduced for the s3 backend configuration used by the backup-restore-sidecar component. Unfortunately, the defaults for the Ansible variable *_backup_restore_sidecar_object_max_keep were removed in the process. So if the corresponding *_backup_restore_sidecar_object_max_keep variable for the metal-stack databases (ipam-db, masterdata-db, metal-db) are not explicitly defined in your deployment, the backup lifecycle rule configuration will be modified unexpectedly. So before rolling out metal-stack v0.22.18 please consider setting those variables explicitly in your deployment. If you want to use the defaults configure e.g. ipam_db_backup_restore_sidecar_object_max_keep: 480 The defaults will be added back again with metal-roles pull request #699. (metal-stack/metal-roles#699)

Component Releases​

metal-ansible-modules v0.3.2​

  • Update v2 modules to latest API. (metal-stack/metal-ansible-modules#26) @Gerrit91
  • Act on latest created resource when using identifier label. (metal-stack/metal-ansible-modules#27) @Gerrit91
  • Use abstract base class to bundle common v2 module behavior + tests (metal-stack/metal-ansible-modules#29) @Gerrit91

virtual-garden-kubeconfig-refresher v0.1.6​

  • Use STATIC_KUBECONFIG as environment variable name (metal-stack/virtual-garden-kubeconfig-refresher#7) @simcod

metal-roles v0.30.0​

  • Deploy gardener metrics exporter again (metal-stack/metal-roles#599) @simcod
  • Increase default length of metal-apiserver session secret. (metal-stack/metal-roles#674) @Gerrit91
  • Optional loki deployment (metal-stack/metal-roles#672) @simcod
  • Enable TLS verification by default (metal-stack/metal-roles#677) @simcod
  • fix(alloy): allow setting docker network (metal-stack/metal-roles#676) @ma-hartma
  • Adaptions for g/g v1.139. (metal-stack/metal-roles#682) @Gerrit91
  • sonic-exporter to gnmic migration (metal-stack/metal-roles#670) @Sven-Ric, @Gerrit91
  • feat(monitoring): allow separate ingress annotations for grafana and alertmanager (metal-stack/metal-roles#685) @ma-hartma
  • Update partition-proxy image tag. (metal-stack/metal-roles#686) @Gerrit91
  • Add missing s3 object max keep backup lifecycle defaults (metal-stack/metal-roles#699) @simcod
  • Enable vpn in metal-apiserver (metal-stack/metal-roles#687) @majst01
  • mgmt-server: render ssh_config hosts in stable order (metal-stack/metal-roles#689) @GeertJohan
  • mgmt-server: escape the pubkey in the authorized_keys regexp (metal-stack/metal-roles#690) @GeertJohan
  • Fix handler notify/listen case mismatches (metal-stack/metal-roles#692) @GeertJohan

backup-restore-sidecar v0.14.0​

  • fix: do not remove redis dump #145 (metal-stack/backup-restore-sidecar#146) @vknabel
  • Replace s3/manager with s3/transfermanager (metal-stack/backup-restore-sidecar#147) @simcod
  • Make NewerNoncurrentVersions optional in lifecycle policy for s3 backend (metal-stack/backup-restore-sidecar#148) @simcod

helm-charts v0.7.7​

  • Enable TLS verification by default (metal-stack/helm-charts#172) @simcod
  • Enable vpn in metal-apiserver (metal-stack/helm-charts#173) @majst01
  • Modify Postgres pg_stat_statement query (metal-stack/helm-charts#171) @emekaponw, @eberlep

metal-apiserver v0.9.1​

  • Enable TLS verification by default (metal-stack/metal-apiserver#278) @simcod

api v0.4.4​

  • Update typescript dependencies (metal-stack/api#169) @majst01
  • Add test interceptor to Python client. (metal-stack/api#170) @Gerrit91
  • Add missing update labels for images. (metal-stack/api#172) @Gerrit91

tenant-apiserver v0.1.1​

  • Create v7 uuids for resources. (metal-stack/tenant-apiserver#5) @Gerrit91

metal-hammer v0.15.2​

  • Strict error checking on umount, report back to metal-api (metal-stack/metal-hammer#190) @majst01
  • build with go-hal@add-H13SSH (metal-stack/metal-hammer#184) @mwennrich
  • Fix chrony config of firewalls (metal-stack/metal-hammer#192) @majst01

mini-lab v0.7.0​

  • feat: add gateway-api support (metal-stack/mini-lab#299) @l0wl3vel
  • Raise Garden cluster K8s version to 1.35. (metal-stack/mini-lab#323) @Gerrit91
  • Disable metal-apiserver TLS verification (metal-stack/mini-lab#319) @simcod
  • Add a make target to export admin editor token (metal-stack/mini-lab#314) @majst01
  • Example for metal-roles override (metal-stack/mini-lab#313) @simcod
  • Fix route reconciliation by enabling fpm (metal-stack/mini-lab#315) @l0wl3vel
  • Latest adaptions for MEP-4. (metal-stack/mini-lab#311) @Gerrit91
  • Export metal-apiserver url (metal-stack/mini-lab#307) @majst01

duros-controller v0.12.2​

  • Update lb-csi and csi sidecars (metal-stack/duros-controller#102) @majst01

gardener-extension-ontap v0.2.21​

  • Documentation ontap (metal-stack/gardener-extension-ontap#98) @Honigeintopf
  • Update go dependencies and ci actions (metal-stack/gardener-extension-ontap#99) @majst01
  • provide ontap VolumeSnapshotClass (metal-stack/gardener-extension-ontap#97) @mwennrich
  • use dedicated names for snapshot-controller rbac, to not collide with existing rbac (metal-stack/gardener-extension-ontap#96) @mwennrich

Merged Pull Requests

This is a list of pull requests that were merged since the last release. The list does not contain pull requests from release-vector-repositories.

The fact that these pull requests were merged does not necessarily imply that they have already become part of this metal-stack release.

  • Update ubuntu kernel to 6.18.40 (metal-stack/metal-images#431) @majst01
  • Better support for protoyaml (printer and multi-document reader) (metal-stack/metal-lib#210) @Gerrit91
  • Bump releases to version v0.22.19 (metal-stack/website#329) @metal-robot[bot]
  • chore(deps): bump the docusaurus-dependencies group with 4 updates (metal-stack/website#330) @dependabot[bot]
  • chore(deps): bump the other-dependencies group across 1 directory with 4 updates (metal-stack/website#331) @dependabot[bot]
  • Use protoyaml for edit command (metal-stack/metal-lib#212) @Gerrit91
  • Use protoyaml for everything by default and update to latest API (metal-stack/cli#38) @Gerrit91
  • Partition (metal-stack/cli#19) @majst01
  • Update containerd on debian (metal-stack/metal-images#425) @majst01
  • Remove iptables and fever (metal-stack/metal-images#432) @majst01
  • Generate admin docs. (metal-stack/cli#43) @Gerrit91
  • Admin token create (metal-stack/cli#41) @majst01
  • Unify update meta and labels + slight refactorings. (metal-stack/cli#42) @Gerrit91
  • Add gnmic to the release vector (metal-stack/releases#313) @Sven-Ric
  • VPN commands. (metal-stack/cli#44) @Gerrit91
  • Fix empty chrony config if ntpservers is empty (metal-stack/os-installer#9) @majst01
  • Network commands (metal-stack/cli#45) @Gerrit91
  • cleanup completions (metal-stack/cli#46) @majst01
  • Debian kernel 6.12.100 (metal-stack/metal-images#434) @majst01
  • Next release (metal-stack/releases#310) @metal-robot[bot]