RATATOSKRATATOSK
Sign in

Open Cluster Management

v0.16.0Orchestration & Management
Mar 13, 2025

ACTION 7CHECK 2OTHER 171

A feature-rich release centered on AWS registration, IRSA, importing, and add-on support, with API, default, dependency, and correctness updates. Breaking behavior and configuration changes affect lifecycle annotations, management defaults, leader election, and ARN pattern formatting.

Action needed (7)

  • breakingThe cma lifecycle annotation and addon-manager ownership

    This breaking change removes the lifecycle annotation from cma and makes it managed by addon-manager.

  • breakingThe AWS CLI Docker image

    The AWS CLI Docker image is removed from the release.

  • breakingThe cluster-manager resource limit

    The resource limit for cluster-manager is removed.

  • breakingManagedClusterSet webhook registration

    ManagedClusterSet webhook registration is removed.

  • breakingThe cluster-manager resource limit

    The resource limit for cluster-manager is removed.

  • breakingThe klusterlet operator replica count

    The default replica count for the klusterlet operator is changed to one.

  • breakingThe cma lifecycle annotation and addon-manager ownership

    This breaking change removes the lifecycle annotation from cma and makes it managed by addon-manager.

Check if affected (2)

  • breakingklusterlet-agent leader election on single-node management clusters

    Applies if klusterlet-agent runs on a single-node management cluster.

    Leader election for klusterlet-agent on a single-node management cluster is reverted.

  • breakingThe ARN pattern format

    Applies if you configure ARN pattern.

    The ARN pattern format changes from a string enclosed in square brackets to a comma-separated string.

All 171 other recorded changesvalue changes 55 · additions 50 · fixes 43 · constraints 12 · renames 5 · defaults 4 · removals 2

value changes (55)

  • - Make ocm changes to tag aws resources by OCM hub (#862) @amrcoder
  • - ✨ cleanup IAM resources for aws irsa (#860) @ramekris3163
  • - update sdk-go to fix unstable test (#715) @skeeey
  • - Use release version for appVersion rather than trimmed version (#661) @qiujian16
  • - Bump addon framework to the latest version (#857) @zhujian7
  • - Upgrade golang.org/x/net (#790) @zhujian7
  • - Bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#774) @zhujian7
  • - Bump k8s.io/kube-aggregator from 0.31.3 to 0.31.4 (#763) @dependabot[bot]
  • - Bump k8s.io/component-base from 0.31.3 to 0.31.4 (#762) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.36.0 to 1.36.1 (#758) @dependabot[bot]
  • - uprade supported kueue version to v0.9.1 (#748) @haoqing0110
  • - Bump golang.org/x/net from 0.31.0 to 0.32.0 (#741) @dependabot[bot]
  • - Bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 (#733) @dependabot[bot]
  • - Change kubecofnig secret creation time to non pointer (#731) @zhujian7
  • - Bump github.com/onsi/gomega from 1.35.1 to 1.36.0 (#725) @dependabot[bot]
  • - Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#723) @dependabot[bot]
  • - Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 (#718) @dependabot[bot]
  • - Bump k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3 (#717) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 (#716) @dependabot[bot]
  • - Bump k8s.io/kube-aggregator from 0.31.2 to 0.31.3 (#711) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.16.2 to 3.16.3 (#704) @dependabot[bot]
  • - Bump golang.org/x/net from 0.30.0 to 0.31.0 (#702) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.21.0 (#701) @dependabot[bot]
  • - Bump github.com/mochi-mqtt/server/v2 from 2.6.5 to 2.6.6 (#699) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.15.3 to 3.16.2 (#698) @dependabot[bot]
  • - Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5 (#697) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.34.1 to 1.35.1 (#696) @dependabot[bot]
  • Update api dependency and remove unnecessary featureGate enabling part
  • Upgrade Dependencies.
  • Bump github.com/onsi/gomega from … to …×3
  • Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5
  • Bump helm.sh/helm/v3 from … to …×2
  • Bump github.com/mochi-mqtt/server/v2 from 2.6.5 to 2.6.6
  • Bump golang.org/x/net from … to …×2
  • Bump github.com/onsi/ginkgo/v2 from … to …×2
  • Bump k8s.io/kube-aggregator from … to …×2
  • update sdk-go to fix unstable test
  • Bump sigs.k8s.io/controller-runtime from … to …×2
  • Bump k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3
  • Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  • Change kubecofnig secret creation time to non pointer
  • Bump k8s.io/component-base from 0.31.3 to 0.31.4
  • Bump golang.org/x/crypto from 0.30.0 to 0.31.0
  • Upgrade golang.org/x/net
  • fix work agent performance issue
  • upgrade the AddOnDeploymentConfig API
  • upgrade addon-framework
  • Bump api/sdk-go/addon-framework to v0.16

additions (50)

  • - Adding Guidewire team members to registration owners (#851) @jaswalkiranavtar
  • - Add managed cluster auto-approval for awsirsa (#850) @jaswalkiranavtar
  • - Made changes for clusteradm accept to create role and policies on hub (#819) @alex0chan
  • - ✨ feature feat: add registration drivers to cluster manager helm chart template. (#810) @ramekris3163
  • - Assume prerequisite role on hub if initailize with aws-irsa (#807) @jaswalkiranavtar
  • - Removing manual step to generate the hub kube config secret (#800) @amrcoder
  • - Completing aws registration on spoke (#788) @jaswalkiranavtar
  • - Mount the awscli volume when using AWS IRSA-based authentication. (#783) @dtclxy64
  • - Start import in registration by feature gate. (#775) @qiujian16
  • - Add a configmap to handle the proxy ca bundle (#772) @zhujian7
  • - Support configuring proxy for addons (#760) @zhujian7
  • - Cluster decorator interface (#759) @jaswalkiranavtar
  • - Add importer into registration (#753) @qiujian16
  • - Add manual steps to connect EKS clusters (#749) @suvaanshkumar
  • - Adding second group for aws auth flow (#735) @jaswalkiranavtar
  • - Adding aws-cli to docker image (#729) @jaswalkiranavtar
  • - Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714) @jaswalkiranavtar
  • - Add AWS IAM support (#677) @suvaanshkumar
  • - Register ManifestWorkReplicaSet webhook when feature is enabled (#673) @RokibulHasan7
  • - Registration option for aws-irsa type of authentication (#744) @suvaanshkumar
  • - Add auto approve annotation for an accepted cluster when auto approval enabled (#680) @skeeey
  • - Bump api/sdk-go/addon-framework to v0.16 (#879) @qiujian16
  • - Add bootstrapSA flags for importer (#803) @qiujian16
  • - support CA file in the bootstrap hub kubeconfig (#710) @elgnay
  • - Record the external kubeconfig creation timestamp (#700) @zhujian7
  • Register ManifestWorkReplicaSet webhook when feature is enabled
  • Add AWS IAM support
  • Record the external kubeconfig creation timestamp
  • support CA file in the bootstrap hub kubeconfig
  • Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR
  • Adding aws-cli to docker image
  • Adding second group for aws auth flow
  • Add manual steps to connect EKS clusters
  • Implement ignoreFields in server side apply
  • Cluster decorator interface
  • Support configuring proxy for addons
  • Add importer into registration
  • support override images in helm chart
  • Add a configmap to handle the proxy ca bundle
  • Start import in registration by feature gate.
  • Mount the awscli volume when using AWS IRSA-based authentication.
  • use images overrides in operator deploy
  • Completing aws registration on spoke
  • set empty nodeselect to nil
  • Add bootstrapSA flags for importer
  • Assume prerequisite role on hub if initailize with aws-irsa
  • add registration drivers to cluster manager helm chart template.
  • Made changes for clusteradm accept to create role and policies on hub
  • Add managed cluster auto-approval for awsirsa
  • Make ocm changes to tag aws resources by OCM hub

fixes (43)

  • - fix nodeSelector type in the helm chart config (#871) @zhiweiyin318
  • - ARN pattern should be comma separated string instead of a string enclosed in square brackets (#865) @jaswalkiranavtar
  • - Apply ownerref eventhough other field is ignored (#847) @qiujian16
  • - fix gc controller not handle empty cluster (#812) @zhiweiyin318
  • - set empty nodeselect to nil (#799) @zhiweiyin318
  • - Fix the issue that ownerref is not set with ignorefields (#794) @qiujian16
  • - update rbac for capi (#789) @zhiweiyin318
  • - fix work agent performance issue (#785) @elgnay
  • - Ignore field should not be honored when creating the resource (#784) @qiujian16
  • - Only enable auth driver when type is irsa (#777) @qiujian16
  • - Agents stop update managedcluster status when clock is out of sync. (#770) @xuezhaojun
  • - Fixing aws-cli image (#738) @jaswalkiranavtar
  • - Should use metadata name queue key func for addon informer (#722) @qiujian16
  • - Fix issue with printing <nil> for error messages (#681) @RokibulHasan7
  • - Fix accetp false add rbac (#675) @xuezhaojun
  • - Fix duplicate deployment names in klusterlet-agent availability message (#671) @RokibulHasan7
  • - Use context cancel func to trigger reselect (#658) @qiujian16
  • - generate mca before testing rollout (#657) @haoqing0110
  • - handle the unknown status of the previously accepted cluster (#656) @elgnay
  • - Ensure one cma is processed by one addon worker at the same time (#654) @zhujian7
  • Ensure one cma is processed by one addon worker at the same time
  • generate mca before testing rollout
  • handle the unknown status of the previously accepted cluster
  • Use release version for appVersion rather than trimmed version
  • Return false when accept return error
  • Fix duplicate deployment names in klusterlet-agent availability message
  • Use context cancel func to trigger reselect
  • Add auto approve annotation for an accepted cluster when auto approval enabled
  • Fix issue with printing <nil> for error messages
  • Fix accetp false add rbac
  • Fix manifestwork and appliedmanifestwork unsync issue
  • Should use metadata name queue key func for addon informer
  • Fixing aws-cli image
  • Use e2e images instead of latest
  • Agents stop update managedcluster status when clock is out of sync.
  • Only enable auth driver when type is irsa
  • Ignore field should not be honored when creating the resource
  • update rbac for capi
  • Fix the issue that ownerref is not set with ignorefields
  • Requeue importer when secret is not found
  • fix gc controller not handle empty cluster
  • Apply ownerref eventhough other field is ignored
  • fix nodeSelector type in the helm chart config

constraints (12)

  • - support override images in helm chart (#771) @zhiweiyin318
  • - Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate (#747) @zhujian7
  • - Implement ignoreFields in server side apply (#726) @qiujian16
  • - support wildcard in ManifestConfigs (#703) @zhiweiyin318
  • - Only bind the agent role for the addon group (#721) @zhujian7
  • - Check capi status if it is provisioned (#801) @qiujian16
  • - upgrade the AddOnDeploymentConfig API (#791) @elgnay
  • support wildcard in ManifestConfigs
  • Only bind the agent role for the addon group
  • uprade supported kueue version to v0.9.1
  • Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate
  • Check capi status if it is provisioned

renames (5)

  • - Change the component name to klusterlet-agent (#809) @qiujian16
  • - rename bootstrap sa and rbac (#802) @zhiweiyin318
  • Rename and relocate cluster related roles files.
  • rename bootstrap sa and rbac
  • Change the component name to klusterlet-agent

defaults (4)

  • - change replicas of klusterlet operator to 1 (#813) @zhiweiyin318
  • - enable leader election of klusterlet-agent on single node managed clusters (#727) @haoqing0110
  • - enable leader election of klusterlet-agent on single node managed cluster (#695) @haoqing0110
  • enable leader election of klusterlet-agent on single node managed clusters

removals (2)

  • Removing manual step to generate the hub kube config secret
  • cleanup IAM resources for aws irsa
Add Open Cluster Management to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Open Cluster Management releases →