shoot-dns-service-1.45.1

[gardener/external-dns-management]

🐛 Bug Fixes

• [OPERATOR] Register gateway.networking.k8s.io in version v1beta1 by @MartinWeindel [gardener/external-dns-management@6557e2a]

Docker Images

• gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.45.1
• gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.45.1

shoot-dns-service-1.45.0

[gardener/gardener-extension-shoot-dns-service]

🏃 Others

• [OPERATOR] Bumps github.com/gardener/gardener from 1.88.0 to 1.89.0. by @dependabot[bot] [#297]
• [OPERATOR] Bumps golang from 1.21.6 to 1.22.0. by @dependabot[bot] [#291]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.87.0 to 1.88.0. by @dependabot[bot] [#292]

[gardener/external-dns-management]

✨ New Features

• [USER] The Istio resource Gateway can now be annotated with dns.gardener.cloud/dnsnames='*' to enable the automatic creation of DNSEntries for domain names extracted from hosts fields in this resource or related VirtualServices resources.
  The Gateway and HTTPRoute resources from the Gateway API are supported in a similar way. by @MartinWeindel [gardener/external-dns-management#354]

🐛 Bug Fixes

• [OPERATOR] Uncached listing of virtual services and httproutes by @MartinWeindel [gardener/external-dns-management#355]
• [OPERATOR] Ignore generated load balancer services of gateways. by @MartinWeindel [gardener/external-dns-management#355]

🏃 Others

• [USER] Ignore empty targets for slave entries on update. More concretely, if an ingress resource lose their load balancer addresses during an update, the old targets are kept until new targets are set. by @MartinWeindel [gardener/external-dns-management#357]

Docker Images

• gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.45.0
• gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.45.0

shoot-dns-service-1.44.0

[gardener/external-dns-management]

🏃 Others

• [OPERATOR] Bumps golang from 1.21.5 to 1.21.6. by @MartinWeindel [gardener/external-dns-management#353]
• [USER] Merge dns.gardener.cloud/dnsnames annotations from multiple DNSAnnotation objects. by @MartinWeindel [gardener/external-dns-management#352]

[gardener/gardener-extension-shoot-dns-service]

🏃 Others

• [OPERATOR] Bump github.com/gardener/gardener from 1.86.0 to 1.87.0. by @dependabot[bot] [#286]

Docker Images

• gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.44.0
• gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.44.0

shoot-dns-service-1.43.0

[gardener/external-dns-management]

✨ New Features

• [USER] [aws-route53] Support dual-stack AWS load balancers by creating additional AAAA record with alias target if annotation service.beta.kubernetes.io/aws-load-balancer-ip-address-type=dualstack (services only) or dns.gardener.cloud/ip-stack=dual-stack (ingresses,dnsentries, and services) is set. by @MartinWeindel [gardener/external-dns-management#350]

🏃 Others

• [DEVELOPER] Move canonicalhostedzone map of aws-route53 provider to own package to allow reuse in gardener/provider-aws. by @MartinWeindel [gardener/external-dns-management#348]

[gardener/gardener-extension-shoot-dns-service]

🏃 Others

• [OPERATOR] The requirement for the admission controller to need cluster-wide read permissions for secrets has been dropped. by @timuthy [#280]
• [OPERATOR] Bumps golang from 1.21.5 to 1.21.6. by @dependabot[bot] [#283]
• [DEVELOPER] An issue causing the testmachinery test to fail to due to an outdated golang version in the TestDefinition is now fixed. by @ialidzhikov [#282]

Docker Images

• gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.43.0
• gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.43.0

shoot-dns-service-1.42.2

[gardener/gardener-extension-shoot-dns-service]

🏃 Others

• [OPERATOR] Downgrade dns-controller-manager from v0.16.1 to v0.16.0 to disable newly introduced feature "Create alias AAAA records for load balancers if target domain name has an IPv6 address" because of leaking AAAA under some circumstances. by @MartinWeindel [#279]

shoot-dns-service-1.42.1

[gardener/gardener-extension-shoot-dns-service]

🐛 Bug Fixes

• [OPERATOR] An issue has been fixed that led to invalid webhook configurations after the admission controller rotated the CA and server certificates. by @timuthy [#278]

shoot-dns-service-1.42.0

[gardener/external-dns-management]

⚠️ Breaking Changes

• [OPERATOR] rfc2136 provider expects TSIGSecret in base64 encoded format (previously base64 decoded was expected) by @Avarei [gardener/external-dns-management#347]
• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references.
  by @ccwienk [gardener/external-dns-management#342]

✨ New Features

• [USER] [AWS Route53] Create an additional alias AAAA record for load balancers (NLBs) if load balancer target domain name has an IPv6 address. by @MartinWeindel [gardener/external-dns-management#341]

🏃 Others

• [DEVELOPER] Remove vendoring by @MartinWeindel [gardener/external-dns-management#345]
• [OPERATOR] Bumps golang from 1.21.4 to 1.21.5. by @dependabot[bot] [gardener/external-dns-management#338]

[gardener/gardener-extension-shoot-dns-service]

🏃 Others

• [OPERATOR] Bump github.com/gardener/gardener from 1.85.0 to 1.86.0. by @MartinWeindel [#268]
• [DEVELOPER] Remove vendoring from project by @MartinWeindel [#268]

shoot-dns-service-1.41.0

[gardener/gardener-extension-shoot-dns-service]

⚠️ Breaking Changes

• [OPERATOR] CA and server certificates for the admission component are managed automatically. Passing custom certificates via Helm values is not supported anymore. by @timuthy [#266]

🐛 Bug Fixes

• [OPERATOR] An issue was fixed that caused shoot clusters with a shoot-dns-service extension configuration not to be validated during creation. Potential validation errors only happened later and remained unnoticed, e.g. when update requests from Gardenlet were denied and shoot reconciliation got stuck. by @timuthy [#270]

🏃 Others

• [OPERATOR] Bumps golang from 1.21.4 to 1.21.5. by @dependabot[bot] [#267]
• [OPERATOR] Bump github.com/gardener/gardener from 1.83.0 to 1.84.0. by @dependabot[bot] [#261]
• [OPERATOR] Bump github.com/gardener/gardener from 1.84.1 to 1.85.0. by @timuthy [#266]
• [OPERATOR] Bump github.com/gardener/gardener from 1.84.0 to 1.84.1. by @dependabot[bot] [#262]

[gardener/external-dns-management]

⚠️ Breaking Changes

• [USER] NS records are not retrieved anymore for all accessible hosted zones to avoid reading all DNS record sets of all hosted zones periodically independently if they are used. Only hosted zones with active DNSProviders are synched, but without caring about consequences of NS records for subdomains. If there are many large hosted zones accessible for given credentials and there are only DNSProviders using a few of these zones (either by domain or zone include), the period synchronisation of the zone state for all other hosted zones is avoided. This can result in a significant reduction of requests to the provider backend. As a downside of this change, applying a DNSEntry for a forwarded subdomain now results in a DNS record set in the parent hosted zone, if the real hosted zone is unknown to the controller. Formerly, applying such a DNSEnty resulted in an error state.
  No action is necessary from the users, this is only a "heads up" for the changed behaviour if NS records are used for subdomains. by @MartinWeindel [gardener/external-dns-management#336]

🏃 Others

• [USER] Validate provider domain includes and excludes for forbidden wildcard domains. by @MartinWeindel [gardener/external-dns-management#335]
• [OPERATOR] Bumps golang from 1.21.3 to 1.21.4. by @dependabot[bot] [gardener/external-dns-management#333]

Docker Images

• gardener-extension-admission-shoot-dns-service: eu.gcr.io/gardener-project/gardener/extensions/admission-shoot-dns-service:v1.41.0
• gardener-extension-shoot-dns-service: eu.gcr.io/gardener-project/gardener/extensions/shoot-dns-service:v1.41.0

shoot-cert-service-1.41.0

[gardener/cert-management]

🐛 Bug Fixes

• [USER] Updating certificates from source objects (like Ingress or Service) with first domain name longer than 64 character failed, as the commonName field was filled. It must be left empty in this case. by @MartinWeindel [gardener/cert-management#164]

🏃 Others

• [OPERATOR] Bump golang from 1.22.0 to 1.22.1 by @MartinWeindel [gardener/cert-management#165]

[gardener/gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] Bumps golang from 1.22.0 to 1.22.1. by @dependabot[bot] [#236]

Docker Images

• gardener-extension-shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service:v1.41.0

shoot-cert-service-1.40.0

[gardener/gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] Bump github.com/gardener/gardener from 1.84.0 to 1.84.1. by @dependabot[bot] [#216]
• [OPERATOR] Bump github.com/gardener/gardener from 1.85.0 to 1.86.0. by @dependabot[bot] [#222]
• [OPERATOR] Bump github.com/gardener/gardener from 1.86.0 to 1.87.0. by @dependabot[bot] [#228]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.87.0 to 1.88.0. by @dependabot[bot] [#232]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.88.0 to 1.89.0. by @dependabot[bot] [#233]
• [OPERATOR] Bump github.com/gardener/gardener from 1.83.0 to 1.84.0. by @dependabot[bot] [#215]
• [OPERATOR] Bump github.com/gardener/gardener from 1.84.1 to 1.85.0. by @dependabot[bot] [#218]
• [OPERATOR] Bump github.com/gardener/gardener from 1.82.1 to 1.83.0. by @dependabot[bot] [#212]
• [DEVELOPER] Remove vendoring from project by @MartinWeindel [#227]

[gardener/cert-management]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references.
  by @ccwienk [gardener/cert-management#156]

✨ New Features

• [USER] Allow certificates without common name. As the common name is restricted to 64 characters, this means it is now possible to create certificates for domains longer than 64 characters without needing to set the common name to a shorter domain name. by @MartinWeindel [gardener/cert-management#150]

🏃 Others

• [DEVELOPER] Remove vendoring by @MartinWeindel [gardener/cert-management#157]
• [OPERATOR] Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot[bot] [gardener/cert-management#158]
• [OPERATOR] Update expirationDate if secret is shared between certs by @MartinWeindel [gardener/cert-management#152]
• [OPERATOR] Bumps golang from 1.21.5 to 1.21.6. by @dependabot[bot] [gardener/cert-management#159]
• [OPERATOR] Bumps golang from 1.21.3 to 1.21.4. by @dependabot[bot] [gardener/cert-management#148]
• [OPERATOR] Bumps golang from 1.21.4 to 1.21.5. by @dependabot[bot] [gardener/cert-management#154]
• [OPERATOR] Updated dependencies controller-manager-library and kubernetes from v1.28.2 to v1.28.3 by @MartinWeindel [gardener/cert-management#149]
• [OPERATOR] Bumps golang from 1.21.6 to 1.22.0. by @dependabot[bot] [gardener/cert-management#161]
• [USER] Improve message if DNS entry is not getting ready. by @MartinWeindel [gardener/cert-management#151]

Docker Images

• gardener-extension-shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service:v1.40.0