RATATOSKRATATOSK
ログイン

Open Cluster Management

v0.16.0Orchestration & Management
2025年3月13日

ACTION 7CHECK 2OTHER 171

AWS向けの認証や登録、インポート、アドオンに関する機能を拡張し、既定値やAPIを更新するとともに、従来の挙動を削除しています。依存関係と正確性に関する改善も含まれており、アップグレードでは互換性のない挙動と設定への影響の確認が必要です。

要対応 (7)

  • breakingcma の管理方法を変更

    cma にライフサイクルアノテーションを追加しない動作に変わり、既定では addon-manager が管理します。

  • breakingawscli Dockerイメージの削除

    awscli Dockerイメージを削除しました。

  • breakingcluster-manager のリソース制限を削除

    cluster-manager のリソース制限を削除しました。

  • breakingManagedClusterSet webhook 登録処理の削除

    ManagedClusterSet webhook の登録処理を削除しました。

  • breakingcluster-manager のリソース制限を削除

    cluster-manager のリソース制限を削除しました。

  • breakingklusterlet operator のレプリカ数を1に変更

    klusterlet operator のレプリカ数の既定値を1に変更しました。

  • breakingcma の管理方法を変更

    cma にライフサイクルアノテーションを追加しない動作に変わり、既定では addon-manager が管理します。

影響確認 (2)

  • breakingシングルノード構成でのリーダー選出変更を取り消し

    klusterlet-agent がシングルノードの管理クラスター上で動作する場合に適用されます。

    klusterlet-agent のリーダー選出をシングルノード構成向けに有効化する変更を取り消しました。

  • breakingARN pattern の指定形式を変更

    ARN pattern を設定している場合に適用されます。

    ARN pattern は角括弧で囲んだ文字列ではなく、カンマ区切りの文字列で指定する形式に変わりました。

その他の記録済み変更 171 件すべてvalue changes 55 · additions 50 · fixes 43 · constraints 12 · renames 5 · defaults 4 · removals 2

value changes (55)

  • - Make ocm changes to tag aws resources by OCM hub (#862) @amrcoder
  • - ✨ cleanup IAM resources for aws irsa (#860) @ramekris3163
  • - update sdk-go to fix unstable test (#715) @skeeey
  • - Use release version for appVersion rather than trimmed version (#661) @qiujian16
  • - Bump addon framework to the latest version (#857) @zhujian7
  • - Upgrade golang.org/x/net (#790) @zhujian7
  • - Bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#774) @zhujian7
  • - Bump k8s.io/kube-aggregator from 0.31.3 to 0.31.4 (#763) @dependabot[bot]
  • - Bump k8s.io/component-base from 0.31.3 to 0.31.4 (#762) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.36.0 to 1.36.1 (#758) @dependabot[bot]
  • - uprade supported kueue version to v0.9.1 (#748) @haoqing0110
  • - Bump golang.org/x/net from 0.31.0 to 0.32.0 (#741) @dependabot[bot]
  • - Bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 (#733) @dependabot[bot]
  • - Change kubecofnig secret creation time to non pointer (#731) @zhujian7
  • - Bump github.com/onsi/gomega from 1.35.1 to 1.36.0 (#725) @dependabot[bot]
  • - Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#723) @dependabot[bot]
  • - Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 (#718) @dependabot[bot]
  • - Bump k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3 (#717) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 (#716) @dependabot[bot]
  • - Bump k8s.io/kube-aggregator from 0.31.2 to 0.31.3 (#711) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.16.2 to 3.16.3 (#704) @dependabot[bot]
  • - Bump golang.org/x/net from 0.30.0 to 0.31.0 (#702) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.21.0 (#701) @dependabot[bot]
  • - Bump github.com/mochi-mqtt/server/v2 from 2.6.5 to 2.6.6 (#699) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.15.3 to 3.16.2 (#698) @dependabot[bot]
  • - Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5 (#697) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.34.1 to 1.35.1 (#696) @dependabot[bot]
  • Update api dependency and remove unnecessary featureGate enabling part
  • Upgrade Dependencies.
  • Bump github.com/onsi/gomega from … to …×3
  • Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5
  • Bump helm.sh/helm/v3 from … to …×2
  • Bump github.com/mochi-mqtt/server/v2 from 2.6.5 to 2.6.6
  • Bump golang.org/x/net from … to …×2
  • Bump github.com/onsi/ginkgo/v2 from … to …×2
  • Bump k8s.io/kube-aggregator from … to …×2
  • update sdk-go to fix unstable test
  • Bump sigs.k8s.io/controller-runtime from … to …×2
  • Bump k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3
  • Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  • Change kubecofnig secret creation time to non pointer
  • Bump k8s.io/component-base from 0.31.3 to 0.31.4
  • Bump golang.org/x/crypto from 0.30.0 to 0.31.0
  • Upgrade golang.org/x/net
  • fix work agent performance issue
  • upgrade the AddOnDeploymentConfig API
  • upgrade addon-framework
  • Bump api/sdk-go/addon-framework to v0.16

additions (50)

  • - Adding Guidewire team members to registration owners (#851) @jaswalkiranavtar
  • - Add managed cluster auto-approval for awsirsa (#850) @jaswalkiranavtar
  • - Made changes for clusteradm accept to create role and policies on hub (#819) @alex0chan
  • - ✨ feature feat: add registration drivers to cluster manager helm chart template. (#810) @ramekris3163
  • - Assume prerequisite role on hub if initailize with aws-irsa (#807) @jaswalkiranavtar
  • - Removing manual step to generate the hub kube config secret (#800) @amrcoder
  • - Completing aws registration on spoke (#788) @jaswalkiranavtar
  • - Mount the awscli volume when using AWS IRSA-based authentication. (#783) @dtclxy64
  • - Start import in registration by feature gate. (#775) @qiujian16
  • - Add a configmap to handle the proxy ca bundle (#772) @zhujian7
  • - Support configuring proxy for addons (#760) @zhujian7
  • - Cluster decorator interface (#759) @jaswalkiranavtar
  • - Add importer into registration (#753) @qiujian16
  • - Add manual steps to connect EKS clusters (#749) @suvaanshkumar
  • - Adding second group for aws auth flow (#735) @jaswalkiranavtar
  • - Adding aws-cli to docker image (#729) @jaswalkiranavtar
  • - Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714) @jaswalkiranavtar
  • - Add AWS IAM support (#677) @suvaanshkumar
  • - Register ManifestWorkReplicaSet webhook when feature is enabled (#673) @RokibulHasan7
  • - Registration option for aws-irsa type of authentication (#744) @suvaanshkumar
  • - Add auto approve annotation for an accepted cluster when auto approval enabled (#680) @skeeey
  • - Bump api/sdk-go/addon-framework to v0.16 (#879) @qiujian16
  • - Add bootstrapSA flags for importer (#803) @qiujian16
  • - support CA file in the bootstrap hub kubeconfig (#710) @elgnay
  • - Record the external kubeconfig creation timestamp (#700) @zhujian7
  • Register ManifestWorkReplicaSet webhook when feature is enabled
  • Add AWS IAM support
  • Record the external kubeconfig creation timestamp
  • support CA file in the bootstrap hub kubeconfig
  • Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR
  • Adding aws-cli to docker image
  • Adding second group for aws auth flow
  • Add manual steps to connect EKS clusters
  • Implement ignoreFields in server side apply
  • Cluster decorator interface
  • Support configuring proxy for addons
  • Add importer into registration
  • support override images in helm chart
  • Add a configmap to handle the proxy ca bundle
  • Start import in registration by feature gate.
  • Mount the awscli volume when using AWS IRSA-based authentication.
  • use images overrides in operator deploy
  • Completing aws registration on spoke
  • set empty nodeselect to nil
  • Add bootstrapSA flags for importer
  • Assume prerequisite role on hub if initailize with aws-irsa
  • add registration drivers to cluster manager helm chart template.
  • Made changes for clusteradm accept to create role and policies on hub
  • Add managed cluster auto-approval for awsirsa
  • Make ocm changes to tag aws resources by OCM hub

fixes (43)

  • - fix nodeSelector type in the helm chart config (#871) @zhiweiyin318
  • - ARN pattern should be comma separated string instead of a string enclosed in square brackets (#865) @jaswalkiranavtar
  • - Apply ownerref eventhough other field is ignored (#847) @qiujian16
  • - fix gc controller not handle empty cluster (#812) @zhiweiyin318
  • - set empty nodeselect to nil (#799) @zhiweiyin318
  • - Fix the issue that ownerref is not set with ignorefields (#794) @qiujian16
  • - update rbac for capi (#789) @zhiweiyin318
  • - fix work agent performance issue (#785) @elgnay
  • - Ignore field should not be honored when creating the resource (#784) @qiujian16
  • - Only enable auth driver when type is irsa (#777) @qiujian16
  • - Agents stop update managedcluster status when clock is out of sync. (#770) @xuezhaojun
  • - Fixing aws-cli image (#738) @jaswalkiranavtar
  • - Should use metadata name queue key func for addon informer (#722) @qiujian16
  • - Fix issue with printing <nil> for error messages (#681) @RokibulHasan7
  • - Fix accetp false add rbac (#675) @xuezhaojun
  • - Fix duplicate deployment names in klusterlet-agent availability message (#671) @RokibulHasan7
  • - Use context cancel func to trigger reselect (#658) @qiujian16
  • - generate mca before testing rollout (#657) @haoqing0110
  • - handle the unknown status of the previously accepted cluster (#656) @elgnay
  • - Ensure one cma is processed by one addon worker at the same time (#654) @zhujian7
  • Ensure one cma is processed by one addon worker at the same time
  • generate mca before testing rollout
  • handle the unknown status of the previously accepted cluster
  • Use release version for appVersion rather than trimmed version
  • Return false when accept return error
  • Fix duplicate deployment names in klusterlet-agent availability message
  • Use context cancel func to trigger reselect
  • Add auto approve annotation for an accepted cluster when auto approval enabled
  • Fix issue with printing <nil> for error messages
  • Fix accetp false add rbac
  • Fix manifestwork and appliedmanifestwork unsync issue
  • Should use metadata name queue key func for addon informer
  • Fixing aws-cli image
  • Use e2e images instead of latest
  • Agents stop update managedcluster status when clock is out of sync.
  • Only enable auth driver when type is irsa
  • Ignore field should not be honored when creating the resource
  • update rbac for capi
  • Fix the issue that ownerref is not set with ignorefields
  • Requeue importer when secret is not found
  • fix gc controller not handle empty cluster
  • Apply ownerref eventhough other field is ignored
  • fix nodeSelector type in the helm chart config

constraints (12)

  • - support override images in helm chart (#771) @zhiweiyin318
  • - Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate (#747) @zhujian7
  • - Implement ignoreFields in server side apply (#726) @qiujian16
  • - support wildcard in ManifestConfigs (#703) @zhiweiyin318
  • - Only bind the agent role for the addon group (#721) @zhujian7
  • - Check capi status if it is provisioned (#801) @qiujian16
  • - upgrade the AddOnDeploymentConfig API (#791) @elgnay
  • support wildcard in ManifestConfigs
  • Only bind the agent role for the addon group
  • uprade supported kueue version to v0.9.1
  • Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate
  • Check capi status if it is provisioned

renames (5)

  • - Change the component name to klusterlet-agent (#809) @qiujian16
  • - rename bootstrap sa and rbac (#802) @zhiweiyin318
  • Rename and relocate cluster related roles files.
  • rename bootstrap sa and rbac
  • Change the component name to klusterlet-agent

defaults (4)

  • - change replicas of klusterlet operator to 1 (#813) @zhiweiyin318
  • - enable leader election of klusterlet-agent on single node managed clusters (#727) @haoqing0110
  • - enable leader election of klusterlet-agent on single node managed cluster (#695) @haoqing0110
  • enable leader election of klusterlet-agent on single node managed clusters

removals (2)

  • Removing manual step to generate the hub kube config secret
  • cleanup IAM resources for aws irsa
Open Cluster Managementをスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。 今回の破壊的変更も、その一例です。

スタックに追加 →
公式リリースノート ↗Open Cluster Managementのリリース一覧 →