v1.33.0

[gardener-extension-provider-aws]

⚠️ Breaking Changes

• [OPERATOR] Removes the cleanup for the older AWSMachineclasses during worker reconciliation. (gardener/gardener-extension-provider-aws#456, @kon-angelo)

✨ New Features

• [USER] The AWS extension does now support shoot clusters with Kubernetes version 1.23. You should consider the Kubernetes release notes before upgrading to 1.23. (gardener/gardener-extension-provider-aws#480, @rfranzke)
• [USER] In case gardener/gardener's WorkerPoolKubernetesVersion feature gate is enabled, it's possible having worker pools with overridden Kubernetes versions for Shoots whose .spec.kubernetes.version is greater or equal than the CSI migration version (1.18). (gardener/gardener-extension-provider-aws#479, @rfranzke)
• [USER] Extension aws now can read nodeTemplate from worker resource and fill it in machineClass. It prioritizes nodeTemplate provided by user in providerConfig (under worker section in shoot yaml) over worker resource's nodeTemplate, if user provides it. (gardener/gardener-extension-provider-aws#461, @AxiomSamarth)
• [OPERATOR] This extension does now support gardener/gardener's WorkerPoolKubernetesVersion feature gate, i.e., having worker pools with overridden Kubernetes versions. (gardener/gardener-extension-provider-aws#479, @rfranzke)

🐛 Bug Fixes

• [OPERATOR] The following dependency is updated: (gardener/gardener-extension-provider-aws#490, @ialidzhikov)
  • github.com/gardener/gardener: v1.39.0 -> v1.39.4
• [OPERATOR] The creation timeouts of aws_route_tables are now increased from 2m to 5m. (gardener/gardener-extension-provider-aws#473, @ialidzhikov)

🏃 Others

• [OPERATOR] The following image is updated: (gardener/gardener-extension-provider-aws#471, @shafeeqes)
  • k8s.gcr.io/provider-aws/aws-ebs-csi-driver: v1.1.4 -> v1.5.0 (see CHANGELOG)
• [OPERATOR] New check-docforge step will be executed on each PR (gardener/gardener-extension-provider-aws#459, @Kristian-ZH)
• [OPERATOR] It is now possible to configure the route53 rate limiter wait timeout via the --dnsrecord-provider-client-wait-timeout command line option. (gardener/gardener-extension-provider-aws#458, @stoyanr)

📰 Noteworthy

• [USER] Since go1.17 both net.ParseIP and net.ParseCIDR reject leading zeros in the dot-decimal notation of IPv4 addresses. With the update to go1.17, admission-aws now rejects Shoot objects with CIDR ranges that have such leading zeros in the dot-decimal notation. Before updating to this version of admission-aws, make sure that there are no Shoot objects with leading zeros in the dot-decimal notation of an IPv4 address. For reference: https://nvd.nist.gov/vuln/detail/CVE-2021-29923 (gardener/gardener-extension-provider-aws#463, @rfranzke)
• [DEVELOPER] The Golang version has been updated to 1.17.5. (gardener/gardener-extension-provider-aws#463, @rfranzke)

[cloud-provider-aws]

✨ New Features

• [DEPENDENCY] k8s.io/legacy-cloud-providers is now updated to v1.23.2. (gardener/cloud-provider-aws@d3fd5b0532b6)
• [DEPENDENCY] k8s.io/legacy-cloud-providers is now updated to v0.22.6. (gardener/cloud-provider-aws@d2b414faa94c)
• [DEPENDENCY] k8s.io/legacy-cloud-providers is now updated to v0.21.9. (gardener/cloud-provider-aws@234a445f1961)
• [DEPENDENCY] k8s.io/legacy-cloud-providers is now updated to v0.20.15. (gardener/cloud-provider-aws@6b6e8acb12a9)

🏃 Others

• [DEVELOPER] The alpine version has been updated to v3.13.7. (gardener/cloud-provider-aws@a238662f9b18)

[machine-controller-manager]

⚠️ Breaking Changes

• [OPERATOR] Components that deploy the machine-controller-manager will now have to adapt the RBAC rules to allow machine-controller-manager to maintain its leader election resource lock in leases as well. (gardener/machine-controller-manager#662, @acumino)

✨ New Features

• [OPERATOR] orphan collection is also triggered if machine obj is updated with having multiple backing VMs (gardener/machine-controller-manager#667, @himanshu-kun)

🏃 Others

• [USER] Updated golang version to v1.17 (gardener/machine-controller-manager#664, @AxiomSamarth)
• [OPERATOR] The default leader election resource lock of machine-controller-manager has been changed from endpoints to endpointsleases. (gardener/machine-controller-manager#662, @acumino)

[machine-controller-manager-provider-aws]

🐛 Bug Fixes

• [USER] The machine obj will be deleted if the AWS API indicate absence of backing instance. Earlier retrying used to happen, which led to cases where machine obj never got deleted. (gardener/machine-controller-manager-provider-aws#59, @himanshu-kun)
• [USER] A problem is resolved where multiple VMs were created by the driver in case the APIs on the AWS are not consistent for some time. (gardener/machine-controller-manager-provider-aws#58, @himanshu-kun)

📖 Documentation

• [DEVELOPER] Ginkgo version 1.16.5 is used for tests until changes compatible with v2.0.0 are made. (gardener/machine-controller-manager-provider-aws#62, @himanshu-kun)

🏃 Others

• [USER] Updated golang version to v1.17 (gardener/machine-controller-manager-provider-aws#60, @AxiomSamarth)

[terraformer]

🏃 Others

• [OPERATOR] The following terraform provider plugins are updated: (gardener/terraformer#108, @ialidzhikov)
  • hashicorp/terraform-provider-aws: 3.63.0 -> 3.66.0
• [OPERATOR] terraform has been upgraded to 0.14.11 (gardener/terraformer#106, @stoyanr)
• [OPERATOR] terraform has been upgraded to 0.13.7 (gardener/terraformer#105, @stoyanr)

📰 Noteworthy

• [OPERATOR] The following terraform provider plugin is updated: (gardener/terraformer#116, @molecule-z)
  • aliyun/terraform-provider-alicloud: 1.124.2 -> 1.149.0