RATATOSKRATATOSK
로그인

Open Cluster Management

v0.16.0Orchestration & Management
2025년 3월 13일

ACTION 7CHECK 2OTHER 171

AWS 중심 기능과 등록 및 가져오기 기능을 넓히고, 기본값과 API를 조정한 릴리스입니다. 의존성 갱신과 동작 보완도 포함하지만, 기존 동작을 없애거나 설정에 영향을 주는 변경이 있으므로 업그레이드 전에 관련 동작과 구성을 검토해야 합니다.

조치 필요 (7)

  • breakingcma 수명 주석과 기본 관리 방식 변경

    cma에 lifecycle annotation을 추가하지 않으며, 기본 관리 주체는 addon-manager로 바뀝니다.

  • breakingawscli docker image 제거

    awscli docker image를 제거했습니다.

  • breakingcluster-manager 리소스 제한 제거

    cluster-manager의 resource limit을 제거했습니다.

  • breakingManagedClusterSet webhook registration 제거

    ManagedClusterSet webhook registration 부분을 제거했습니다.

  • breakingcluster-manager 리소스 제한 제거

    cluster-manager의 resource limit을 제거했습니다.

  • breakingklusterlet operator 복제본 기본값 1개로 변경

    klusterlet operator의 replicas 기본값을 1로 변경했습니다.

  • breakingcma 수명 주석과 addon-manager 관리 방식 변경

    cma에 lifecycle annotation을 추가하지 않으며, 기본 관리는 addon-manager가 담당합니다.

영향 확인 (2)

  • breakingklusterlet-agent 리더 선출 변경 되돌림

    klusterlet-agent가 단일 노드 관리 클러스터에서 실행되는 경우에 적용됩니다.

    klusterlet-agent의 단일 노드 리더 선출 활성화 변경을 되돌렸습니다.

  • breakingARN pattern 입력 형식 변경

    ARN pattern을 설정한 경우에 적용됩니다.

    ARN pattern은 대괄호로 감싼 문자열 대신 쉼표로 구분한 문자열로 지정하는 형식으로 바뀝니다.

그 외 기록된 변경 171건 전체value changes 55 · additions 50 · fixes 43 · constraints 12 · renames 5 · defaults 4 · removals 2

value changes (55)

  • - Make ocm changes to tag aws resources by OCM hub (#862) @amrcoder
  • - ✨ cleanup IAM resources for aws irsa (#860) @ramekris3163
  • - update sdk-go to fix unstable test (#715) @skeeey
  • - Use release version for appVersion rather than trimmed version (#661) @qiujian16
  • - Bump addon framework to the latest version (#857) @zhujian7
  • - Upgrade golang.org/x/net (#790) @zhujian7
  • - Bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#774) @zhujian7
  • - Bump k8s.io/kube-aggregator from 0.31.3 to 0.31.4 (#763) @dependabot[bot]
  • - Bump k8s.io/component-base from 0.31.3 to 0.31.4 (#762) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.36.0 to 1.36.1 (#758) @dependabot[bot]
  • - uprade supported kueue version to v0.9.1 (#748) @haoqing0110
  • - Bump golang.org/x/net from 0.31.0 to 0.32.0 (#741) @dependabot[bot]
  • - Bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 (#733) @dependabot[bot]
  • - Change kubecofnig secret creation time to non pointer (#731) @zhujian7
  • - Bump github.com/onsi/gomega from 1.35.1 to 1.36.0 (#725) @dependabot[bot]
  • - Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#723) @dependabot[bot]
  • - Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 (#718) @dependabot[bot]
  • - Bump k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3 (#717) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 (#716) @dependabot[bot]
  • - Bump k8s.io/kube-aggregator from 0.31.2 to 0.31.3 (#711) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.16.2 to 3.16.3 (#704) @dependabot[bot]
  • - Bump golang.org/x/net from 0.30.0 to 0.31.0 (#702) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.21.0 (#701) @dependabot[bot]
  • - Bump github.com/mochi-mqtt/server/v2 from 2.6.5 to 2.6.6 (#699) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.15.3 to 3.16.2 (#698) @dependabot[bot]
  • - Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5 (#697) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.34.1 to 1.35.1 (#696) @dependabot[bot]
  • Update api dependency and remove unnecessary featureGate enabling part
  • Upgrade Dependencies.
  • Bump github.com/onsi/gomega from … to …×3
  • Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5
  • Bump helm.sh/helm/v3 from … to …×2
  • Bump github.com/mochi-mqtt/server/v2 from 2.6.5 to 2.6.6
  • Bump golang.org/x/net from … to …×2
  • Bump github.com/onsi/ginkgo/v2 from … to …×2
  • Bump k8s.io/kube-aggregator from … to …×2
  • update sdk-go to fix unstable test
  • Bump sigs.k8s.io/controller-runtime from … to …×2
  • Bump k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3
  • Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  • Change kubecofnig secret creation time to non pointer
  • Bump k8s.io/component-base from 0.31.3 to 0.31.4
  • Bump golang.org/x/crypto from 0.30.0 to 0.31.0
  • Upgrade golang.org/x/net
  • fix work agent performance issue
  • upgrade the AddOnDeploymentConfig API
  • upgrade addon-framework
  • Bump api/sdk-go/addon-framework to v0.16

additions (50)

  • - Adding Guidewire team members to registration owners (#851) @jaswalkiranavtar
  • - Add managed cluster auto-approval for awsirsa (#850) @jaswalkiranavtar
  • - Made changes for clusteradm accept to create role and policies on hub (#819) @alex0chan
  • - ✨ feature feat: add registration drivers to cluster manager helm chart template. (#810) @ramekris3163
  • - Assume prerequisite role on hub if initailize with aws-irsa (#807) @jaswalkiranavtar
  • - Removing manual step to generate the hub kube config secret (#800) @amrcoder
  • - Completing aws registration on spoke (#788) @jaswalkiranavtar
  • - Mount the awscli volume when using AWS IRSA-based authentication. (#783) @dtclxy64
  • - Start import in registration by feature gate. (#775) @qiujian16
  • - Add a configmap to handle the proxy ca bundle (#772) @zhujian7
  • - Support configuring proxy for addons (#760) @zhujian7
  • - Cluster decorator interface (#759) @jaswalkiranavtar
  • - Add importer into registration (#753) @qiujian16
  • - Add manual steps to connect EKS clusters (#749) @suvaanshkumar
  • - Adding second group for aws auth flow (#735) @jaswalkiranavtar
  • - Adding aws-cli to docker image (#729) @jaswalkiranavtar
  • - Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714) @jaswalkiranavtar
  • - Add AWS IAM support (#677) @suvaanshkumar
  • - Register ManifestWorkReplicaSet webhook when feature is enabled (#673) @RokibulHasan7
  • - Registration option for aws-irsa type of authentication (#744) @suvaanshkumar
  • - Add auto approve annotation for an accepted cluster when auto approval enabled (#680) @skeeey
  • - Bump api/sdk-go/addon-framework to v0.16 (#879) @qiujian16
  • - Add bootstrapSA flags for importer (#803) @qiujian16
  • - support CA file in the bootstrap hub kubeconfig (#710) @elgnay
  • - Record the external kubeconfig creation timestamp (#700) @zhujian7
  • Register ManifestWorkReplicaSet webhook when feature is enabled
  • Add AWS IAM support
  • Record the external kubeconfig creation timestamp
  • support CA file in the bootstrap hub kubeconfig
  • Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR
  • Adding aws-cli to docker image
  • Adding second group for aws auth flow
  • Add manual steps to connect EKS clusters
  • Implement ignoreFields in server side apply
  • Cluster decorator interface
  • Support configuring proxy for addons
  • Add importer into registration
  • support override images in helm chart
  • Add a configmap to handle the proxy ca bundle
  • Start import in registration by feature gate.
  • Mount the awscli volume when using AWS IRSA-based authentication.
  • use images overrides in operator deploy
  • Completing aws registration on spoke
  • set empty nodeselect to nil
  • Add bootstrapSA flags for importer
  • Assume prerequisite role on hub if initailize with aws-irsa
  • add registration drivers to cluster manager helm chart template.
  • Made changes for clusteradm accept to create role and policies on hub
  • Add managed cluster auto-approval for awsirsa
  • Make ocm changes to tag aws resources by OCM hub

fixes (43)

  • - fix nodeSelector type in the helm chart config (#871) @zhiweiyin318
  • - ARN pattern should be comma separated string instead of a string enclosed in square brackets (#865) @jaswalkiranavtar
  • - Apply ownerref eventhough other field is ignored (#847) @qiujian16
  • - fix gc controller not handle empty cluster (#812) @zhiweiyin318
  • - set empty nodeselect to nil (#799) @zhiweiyin318
  • - Fix the issue that ownerref is not set with ignorefields (#794) @qiujian16
  • - update rbac for capi (#789) @zhiweiyin318
  • - fix work agent performance issue (#785) @elgnay
  • - Ignore field should not be honored when creating the resource (#784) @qiujian16
  • - Only enable auth driver when type is irsa (#777) @qiujian16
  • - Agents stop update managedcluster status when clock is out of sync. (#770) @xuezhaojun
  • - Fixing aws-cli image (#738) @jaswalkiranavtar
  • - Should use metadata name queue key func for addon informer (#722) @qiujian16
  • - Fix issue with printing <nil> for error messages (#681) @RokibulHasan7
  • - Fix accetp false add rbac (#675) @xuezhaojun
  • - Fix duplicate deployment names in klusterlet-agent availability message (#671) @RokibulHasan7
  • - Use context cancel func to trigger reselect (#658) @qiujian16
  • - generate mca before testing rollout (#657) @haoqing0110
  • - handle the unknown status of the previously accepted cluster (#656) @elgnay
  • - Ensure one cma is processed by one addon worker at the same time (#654) @zhujian7
  • Ensure one cma is processed by one addon worker at the same time
  • generate mca before testing rollout
  • handle the unknown status of the previously accepted cluster
  • Use release version for appVersion rather than trimmed version
  • Return false when accept return error
  • Fix duplicate deployment names in klusterlet-agent availability message
  • Use context cancel func to trigger reselect
  • Add auto approve annotation for an accepted cluster when auto approval enabled
  • Fix issue with printing <nil> for error messages
  • Fix accetp false add rbac
  • Fix manifestwork and appliedmanifestwork unsync issue
  • Should use metadata name queue key func for addon informer
  • Fixing aws-cli image
  • Use e2e images instead of latest
  • Agents stop update managedcluster status when clock is out of sync.
  • Only enable auth driver when type is irsa
  • Ignore field should not be honored when creating the resource
  • update rbac for capi
  • Fix the issue that ownerref is not set with ignorefields
  • Requeue importer when secret is not found
  • fix gc controller not handle empty cluster
  • Apply ownerref eventhough other field is ignored
  • fix nodeSelector type in the helm chart config

constraints (12)

  • - support override images in helm chart (#771) @zhiweiyin318
  • - Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate (#747) @zhujian7
  • - Implement ignoreFields in server side apply (#726) @qiujian16
  • - support wildcard in ManifestConfigs (#703) @zhiweiyin318
  • - Only bind the agent role for the addon group (#721) @zhujian7
  • - Check capi status if it is provisioned (#801) @qiujian16
  • - upgrade the AddOnDeploymentConfig API (#791) @elgnay
  • support wildcard in ManifestConfigs
  • Only bind the agent role for the addon group
  • uprade supported kueue version to v0.9.1
  • Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate
  • Check capi status if it is provisioned

renames (5)

  • - Change the component name to klusterlet-agent (#809) @qiujian16
  • - rename bootstrap sa and rbac (#802) @zhiweiyin318
  • Rename and relocate cluster related roles files.
  • rename bootstrap sa and rbac
  • Change the component name to klusterlet-agent

defaults (4)

  • - change replicas of klusterlet operator to 1 (#813) @zhiweiyin318
  • - enable leader election of klusterlet-agent on single node managed clusters (#727) @haoqing0110
  • - enable leader election of klusterlet-agent on single node managed cluster (#695) @haoqing0110
  • enable leader election of klusterlet-agent on single node managed clusters

removals (2)

  • Removing manual step to generate the hub kube config secret
  • cleanup IAM resources for aws irsa
Open Cluster Management 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 브레이킹 체인지 같은 것들입니다.

스택에 추가 →
공식 릴리스 노트 ↗Open Cluster Management 릴리스 전체 →