Release v0.9.1

What's Changed

• [release-0.9] 🐛 Fix potential panic during instance create by @k8s-infra-cherrypick-robot in #1806
• [release-0.9] ✨ Add flags for configuring rate limits by @k8s-infra-cherrypick-robot in #1817
• [release-0.9] 🐛 Fix patching OpenstackMachine's immutable spec during reconcile by @k8s-infra-cherrypick-robot in #1819
• [release-0.9] 🐛 Persist API FloatingIP immediately on creation by @k8s-infra-cherrypick-robot in #1831
• Update CI to use OpenStack Bobcat & Ubuntu 22.04 by @EmilienM in #2033
• [release-0.9] 🌱 Sync OWNERS_ALIASES with main by @mdbooth in #2084
• [release-0.9] ci: reduce vcpu for m1.medium by @mdbooth in #2090
• [release-0.9] Fix port cleanup of servers in ERROR state by @mdbooth in #2092
• [release-0.9] 🐛 Fall back to cluster identityRef in absence of machine identityRef by @k8s-infra-cherrypick-robot in #2093
• [release-0.9] 🐛 Fix empty version output in release builds by @k8s-infra-cherrypick-robot in #2094

Full Changelog: v0.9.0...v0.9.1

Release v0.10.3

Changes since v0.10.2

🐛 Bug Fixes

• Handle errors returned by GetInstanceStatusByName in machine controller (#2087)
• allNodesSecurityGroupRules: relax remote fields (#2080)
• Fix loadbalancer timeout panic (#2076)
• Fix empty version output in release builds (#2059)
• Fix panic executing manager without valid kube context (#2061)
• Fix nil pointer issue while creating port (#2065)

🌱 Others

• Drop dulek from reviewers (#2083)
• Set FallbackToLogsOnError on CAPO manager (#2072)
• Refactoring: never assign unacceptable TLS versions (#2062)

Thanks to all our contributors! 😊

Release v0.10.2

What's Changed

• 🐛 [release-0.10] Fix enabling of disabled bastion on upgrade to v1beta1 by @mdbooth in #2053

Full Changelog: v0.10.1...v0.10.2

Release v0.10.1

What's Changed

• [release-0.10] 🐛 Fix v1alpha7 e2e tests by @k8s-infra-cherrypick-robot in #2031
• [release-0.10] 🐛 Fix webhook panic when adding managed security groups by @k8s-infra-cherrypick-robot in #2044

Full Changelog: v0.10.0...v0.10.1

Release v0.10.0

Breaking API Changes

v0.10.0 is a major update which brings major changes to the API.

v1alpha5 is no longer served

If you are still using v1alpha5, this will not work in v0.10.0. However, for this release only objects are still defined in the CRDs and the code is still present, so as a temporary workaround it is possible to manually edit the CRDs to set versions.served to true for v1alpha5 objects. This is not tested, and we have low confidence that this will work without problems. Some manual effort may be required to check and fix automatically converted objects.

v1alpha6 and v1alpha7 are deprecated

v1alpha6 and v1alpha7 objects will be automatically converted to v1beta during use. This is well tested. We don’t anticipate problems with these conversions.

We will stop serving and testing v1alpha6 in the next release.

v1alpha7 is not marked deprecated in v0.10.0 to allow a switch-over period without deprecation warnings, but will be marked deprecated in the next release. Will will stop serving and testing it in a release after that.

You should update to use v1beta1 natively as soon as possible.

v1beta1 is released

v1beta1 marks a major update to the CAPO API. The specific changes from v1alpha7 are documented here: https://cluster-api-openstack.sigs.k8s.io/topics/crd-changes/v1alpha7-to-v1beta1

More than this, though, it marks an intention by the maintainers to stop making breaking changes. The API will continue to evolve, but we will make every effort to do this without introducing more backwards-incompatible changes.

Removal of hardcoded Calico CNI security group rules

This is documented more completely in the API upgrade documentation.

Prior to v1beta1, when using managed security groups we would automatically add certain rules which were specific to Calico CNI. It was not possible to add rules for any other CNI. A common way to work round this was to set allowAllInClusterTraffic: true.

With v1beta1 there are no longer any implicit rules for any CNI. However, it is now possible to specify custom rules in the cluster spec which will be automatically added to managed security groups. Users of Calico CNI must now add these rules explicitly. Users of other CNIs now have the option of using managed security groups.

Calico CNI rules will be added automatically when upgrading to v1beta1 from a previous API version.

The Calico CNI rules have been added to the release templates, so for now creating a cluster with clusterctl will continue to have Calico rules when using the default templates.

Management cluster changes

Removal of MutatingWebhookConfiguration

CAPO no longer uses a mutating webhook, and its configuration is removed. If you upgrade your management cluster with clusterctl this will be handled correctly. If you do it manually you must ensure you remove the MutatingWebhookConfiguration capo-mutating-webhook-configuration. If you do not you may see errors like the one in #1927.

Minimum management cluster version is now 1.25

v0.10.0 now uses https://kubernetes.io/docs/reference/using-api/cel/ for some API validations, which only became available without a feature gate in 1.25. Consequently we now require the management cluster to be at least k8s 1.25.

Highlighted new features

API Reference documentation

We now automatically publish API reference documentation! The documentation for v1beta1 can be found here: https://cluster-api-openstack.sigs.k8s.io/api/v1beta1/api

Floating IP IPAM Provider

It is now possible to allocate floating IPs for individual machines using the new Floating IP IPAM Provider documented here: https://cluster-api-openstack.sigs.k8s.io/api/v1alpha1/api#infrastructure.cluster.x-k8s.io/v1alpha1.OpenStackFloatingIPPool

Attach them to a machine via the new floatingIPPoolRef in OpenStackMachineSpec: https://cluster-api-openstack.sigs.k8s.io/api/v1beta1/api#infrastructure.cluster.x-k8s.io/v1beta1.OpenStackMachineSpec

What's Changed

New Features

• ✨ Add flatcar-sysext template to use regular Flatcar images by @tormath1 in #1776
• ✨ Add flags for configuring rate limits by @tobiasgiese in #1815
• ✨ Change API for OpenStackMachine.Spec.Image by @EmilienM in #1796
• ✨ Update CI to use OpenStack Bobcat by @EmilienM in #1804
• ✨ Allow AZs to be Omitted at Runtime by @spjmurray in #1769
• ✨ Support BYO dual-stack Network by @MaysaMacedo in #1789
• ✨ IPAM provider for floating ips by @bilbobrovall in #1763
• ✨ add TLS configuration flags by @tuminoid in #1867
• ✨ Adds MaxIPs to OpenstackFloatingIPPool by @bilbobrovall in #1862
• ✨ Re-work ports management by @EmilienM in #1788
• ✨ Add support to set allocation_pools for subnet by @dulek in https://github.com/kubernetes-sigs/cluster-api-provider-
• ✨ Add API docs for v1alpha1 by @mdbooth in #1993
• ✨ Adds IPAM support for floating ips in OpenStackMachine by @bilbobrovall in #1762
• 🐛 Fall back to cluster identityRef in absence of machine identityRef by @stephenfin in #1768
• 🌱 Enforce restricted pod security standards by @lentzi90 in #1895
• 📖 Add API reference documentation generation by @alexandrevilain in #1702
• 🐛 Make LB additional ports security-group generation are dynamic by @huxcrux in #1918
• feat: add configurable loadbalancer network by @oblazek in #1922
• 🐛 Include more device_owners when looking for a port for floating ip by @bilbobrovall in #1996

Bug fixes

• 🐛 Don't apply worker SG to control plane machines by @stephenfin in #1785
• 🐛 Fix potential panic during instance create by @mandre in #1803
• 🐛 Fix patching OpenstackMachine's immutable spec during reconcile by @strudelPi in #1807
• 🐛 fix: skip port deletion when instances have no port by @dulek in #1818
• 🐛 Fix random instance port deletion by @zioc in #1753
• 🐛 Persist API FloatingIP immediately on creation by @mdbooth in #1829
• 🐛 controllers: do not return a RequeueAfter and an error at the same time by @EmilienM in #1839
• 🐛Fix a stacktrace in LB logic by removing listener name from an error message when not set by @huxcrux in #1853
• 🐛Make sure that allowedCidrs lists are compared correctly to avoid patching LB listener when not needed by @huxcrux in #1854
• 🐛 Prevent the bastion to be removed before it's been disabled by @EmilienM in #1866
• 🐛 Ignore 'OS_*' environment variables by @stephenfin in #1883
• 🐛 Fix cluster network cleanup by @dulek in #1880
• 🐛 loadbalancer: resolve ControlPlaneEndpoint.Host when needed by @EmilienM in #1738
• 🐛 api/additionalPorts: don't create UDP rules by @EmilienM in #1899
• 🐛 v1alpha5: Fix panic in conversion when port has no binding profile by @mdbooth in #1949
• 🐛 Fix accidental parsing of password by @JanGutter in #1953

Documentation

• 🌱 Update links in release docs by @lentzi90 in #1798
• fix: fix the block device type name in doc by @okozachenko1203 in #1865
• 🌱 Fix doc references to NodeCIDR in v1alpha8 by @mdbooth in #1889

Administrative

• Remove Tobias and Se...

Release v0.10.0-rc.1

What's Changed

• 🐛 Fix crash on delete with no bastion by @mdbooth in #2017

Full Changelog: v0.10.0-rc.0...v0.10.0-rc.1

Release v0.10.0-rc.0

What's Changed

• 🌱 Minor improvements to api validation tests by @mdbooth in #2001
• 📖 Document the change of instanceID in v1beta1 by @pierreprinetti in #2003
• feat: add configurable loadbalancer network by @oblazek in #1922
• 🐛 Include more device_owners when looking for a port for floating ip by @bilbobrovall in #1996
• 🌱 Cleanup security group created by e2e test by @mdbooth in #2010
• 🐛 Don't try to resolve machine on delete if cluster not ready by @mdbooth in #2006
• Add opt to use AZ for APISeverLoadBalancer by @dulek in #2004
• 🌱 Bump k8s dep to 0.29.3 by @mdbooth in #2014
• ⚠️ Allow explicitly empty volume AZ by @mdbooth in #2008
• 🐛 Fix idempotent restore when setting ControlPlaneEndpoint by @mdbooth in #2011

New Contributors

• @oblazek made their first contribution in #1922
• @nguyenhuukhoi made their first contribution in #2004

Full Changelog: v0.10.0-alpha.1...v0.10.0-rc.0

Release v0.10.0-alpha.1

What's Changed

• 🌱 Remove legacy v1alpha7 filterconvert utils by @mdbooth in #1992
• 🐛 Rules are optional in security group rules before v1beta1 by @mdbooth in #2000
• 🐛 Make floatingIPNetwork a pointer and if there's only one external network use it as default by @bilbobrovall in #1998

Full Changelog: v0.10.0-alpha.0...v0.10.0-alpha.1

Release v0.10.0-alpha.0

Breaking API Changes

v0.10.0 is a major update which brings major changes to the API.

v1alpha5 is no longer served

If you are still using v1alpha5, this will not work in v0.10.0. However, for this release only objects are still defined in the CRDs and the code is still present, so as a temporary workaround it is possible to manually edit the CRDs to set versions.served to true for v1alpha5 objects. This is not tested, and we have low confidence that this will work without problems. Some manual effort may be required to check and fix automatically converted objects.

v1alpha6 and v1alpha7 are deprecated

v1alpha6 and v1alpha7 objects will be automatically converted to v1beta during use. This is well tested. We don’t anticipate problems with these conversions.

We will stop serving and testing v1alpha6 in the next release, and v1alpha7 some time after that. You should update to use v1beta1 natively as soon as possible.

v1beta1 is released

v1beta1 marks a major update to the CAPO API. The specific changes from v1alpha7 are documented here: https://cluster-api-openstack.sigs.k8s.io/topics/crd-changes/v1alpha7-to-v1beta1

More than this, though, it marks an intention by the maintainers to stop making breaking changes. The API will continue to evolve, but we will make every effort to do this without introducing more backwards-incompatible changes.

Management cluster changes

Removal of MutatingWebhookConfiguration

CAPO no longer uses a mutating webhook, and its configuration is removed. If you upgrade your management cluster with clusterctl this will be handled correctly. If you do it manually you must ensure you remove the MutatingWebhookConfiguration capo-mutating-webhook-configuration. If you do not you may see errors like the one in #1927.

Minimum management cluster version is now 1.25

v0.10.0 now uses https://kubernetes.io/docs/reference/using-api/cel/ for some API validations, which only became available without a feature gate in 1.25. Consequently we now require the management cluster to be at least k8s 1.25.

Highlighted new features

API Reference documentation

We now automatically publish API reference documentation! The documentation for v1beta1 can be found here: https://cluster-api-openstack.sigs.k8s.io/api/v1beta1/api

Floating IP IPAM Provider

It is now possible to allocate floating IPs for individual machines using the new Floating IP IPAM Provider documented here: https://cluster-api-openstack.sigs.k8s.io/api/v1alpha1/api#infrastructure.cluster.x-k8s.io/v1alpha1.OpenStackFloatingIPPool

Attach them to a machine via the new floatingIPPoolRef in OpenStackMachineSpec: https://cluster-api-openstack.sigs.k8s.io/api/v1beta1/api#infrastructure.cluster.x-k8s.io/v1beta1.OpenStackMachineSpec

Detailed changes

• 🌱 Import CAPI v1.6.0 by @EmilienM in #1731
• 🐛 Revert "Move FloatingIP to Bastion spec" by @mdbooth in #1778
• 🐛 Don't apply worker SG to control plane machines by @stephenfin in #1785
• ⚠️ Add v1alpha8 by @EmilienM in #1782
• Remove Tobias and Sean as maintainer by @tobiasgiese in #1793
• 🌱 Update links in release docs by @lentzi90 in #1798
• 🌱 Make it possible to use a pre-created volume type in e2e tests by @maxrantil in #1766
• 🐛 Fix potential panic during instance create by @mandre in #1803
• ✨ Add flatcar-sysext template to use regular Flatcar images by @tormath1 in #1776
• 🐛 Move flatcar-sysext to v1alpha8 by @EmilienM in #1812
• 🌱 Improve method signatures of conversion functions by @mdbooth in #1813
• ✨ New API for Server Groups by @stephenfin in #1779
• ✨ New API: OpenStackCluster.Spec.ExternalNetwork by @EmilienM in #1790
• ✨ Add flags for configuring rate limits by @tobiasgiese in #1815
• 🐛 Fall back to cluster identityRef in absence of machine identityRef by @stephenfin in #1768
• 🐛 Fix patching OpenstackMachine's immutable spec during reconcile by @strudelPi in #1807
• 🌱 change how we register scheme as per capi 1.6 by @kranurag7 in #1797
• 🐛 fix: skip port deletion when instances have no port by @dulek in #1818
• CI fixes by @mandre in #1820
• 🌱 Bump e2e node images to v1.28.5 by @lentzi90 in #1823
• 🐛 Fix random instance port deletion by @zioc in #1753
• ✨ Change API for OpenStackMachine.Spec.Image by @EmilienM in #1796
• 🌱 Bump controller-tools to v0.14.0 by @mdbooth in #1825
• ✨ Update CI to use OpenStack Bobcat by @EmilienM in #1804
• ⚠️ Move FloatingIP to Bastion spec by @mdbooth in #1824
• ✨ Allow AZs to be Omitted at Runtime by @spjmurray in #1769
• 🐛 Persist API FloatingIP immediately on creation by @mdbooth in #1829
• ✨ Support BYO dual-stack Network by @MaysaMacedo in #1789
• ✨ IPAM provider for floating ips by @bilbobrovall in #1763
• e2e: remove "allow-all-in-cluster-traffic" patch by @EmilienM in #1834
• 🐛 controllers: do not return a RequeueAfter and an error at the same time by @EmilienM in #1839
• 🌱 Enhance Tilt integration with CAPO using a ClusterClass template by @maxrantil in #1833
• 🐛 Fill up OpenStack cluster ReferencedResources with Image ID by @EmilienM in #1845
• 🌱 Update the dev-test ClusterClass by @lentzi90 in #1848
• ⚠️ Convert ServerMetadata from a map to a list by @mdbooth in #1828
• 🌱 Decrease number of machines in e2e tests by @lentzi90 in #1849
• Migrate Dockerfile to use golang 1.21 to match go.mod in project by @huxcrux in #1857
• 🐛Fix a stacktrace in LB logic by removing listener name from an error message when not set by @huxcrux in #1853
• 🌱 test: bump Flatcar version by @tormath1 in #1858
• fix: fix the block device type name in doc by @okozachenko1203 in #1865
• 🐛 api: openstackcluster.status default to false by @EmilienM in #1842
• 🐛 Adds Kind to ipaddress pool name index by @bilbobrovall in #1864
• ✨ add TLS configuration flags by @tuminoid in #1867
• OpenstackFloatingIPPool: Adds popped ip to claimedIPs #1869 by @bilbobrovall in #1870
• 🐛Make sure that allowedCidrs lists are compared correctly to avoid patching LB listener when not needed by @huxcrux in #1854
• 🐛 Prevent the bastion to be removed before it's been disabled by @EmilienM in #1866
• ✨ Move subnet options to SubnetSpec by @dulek in #1856
• ✨ Bump Go to 1.22.0 by @EmilienM in #1877
• 🐛 Fix cluster network cleanup by @dulek in #1880
• 🐛 Ignore...

Release v0.9.0

What's Changed

• ⚠️ Bump Go to 1.20.10 by @EmilienM in #1740
• ✨ Additional data volumes for machines by @mkjpryor in #1668
• ✨ Add server name for the Machine InternalDNS by @MaysaMacedo in #1715
• ✨ Add option to customize private network MTU by @alexandrevilain in #1701
• ✨ Add cache on provider scope by @alexandrevilain in #1688
• ✨ Use kustomize new syntax for patches by @mquhuy in #1735
• ✨ Add ephemeral storage support to the AdditionalBlockDevices by @EmilienM in #1696
• ✨remove flavor check to relief restrictions to CPU by @jichenjc in #1745
• 🐛 Only delete all ports when deleting cluster network by @mdbooth in #1680
• 🐛 Don't remove BYO api server loadbalancer floating IP by @alexandrevilain in #1728
• 🐛Fix missing endpoint type in OpenStack endpoint clients configuration by @teran in #1744
• 🐛 Update e2e testing image of CAPI version from 1.5.0 to 1.5.1 by @maxrantil in #1754
• 🐛 Verify success of parsing OpenStack cloud cacert by @MaysaMacedo in #1770
• 📖 Clarify release notes content for releases and pre-releases by @wwentland in #1678
• 📖 Fix network-related docs for API v1alpha7 by @stephenfin in #1764
• 🌱 Remove defaulter-gen by @mdbooth in #1677
• 🌱 Update Gophercloud to 1.7.0 by @EmilienM in #1682
• 🌱 Move webhook CA injection into webhook resource by @mdbooth in #1686
• 🌱 gitignore: ignore vendor/ directory by @EmilienM in #1690
• 🌱 Bump ginkgo by @stephenfin in #1705
• 🌱 Build setup-envtest in hack/tools by @mdbooth in #1707
• 🌱 Ignore vendor directories in boilerplate check by @mdbooth in #1709
• 🌱 Allow custom KUBEBUILDER_ASSETS_DIR in tests by @mdbooth in #1710
• 🌱 Add explicit dependency on github.com/golang/mock/mockgen/model by @mdbooth in #1712
• 🌱 Bump devstack image to ubuntu 22.04 by @lentzi90 in #1716
• 🌱 ci: Several CI fixes by @mdbooth in #1718
• 🌱 ci: bump Flatcar tested version by @tormath1 in #1713
• 🌱 E2e: Use pre-build node images by @lentzi90 in #1699
• 🌱 Ignore go workspaces by @mdbooth in #1724
• 🌱 e2e: dump cinder volumes by @EmilienM in #1722
• 🌱 Replace kustomize vars with replacements by @mdbooth in #1726
• 🌱 Use k8s v1.28 in tests by @lentzi90 in #1723
• 🌱 Enable k8s upgrade in self hosted test by @lentzi90 in #1732
• 🌱 deps: Bump dependencies by @pierreprinetti in #1733
• 🌱 Fix log message typo by @lishaokai1995 in #1758
• 🌱 Remove Containerfile and Dockerfile experimental by @mdbooth in #1760
• 🌱 Bump version artifacts for release-0.9 by @mdbooth in #1775
• 🌱 Import CAPI v1.6.0 by @EmilienM in #1780

New Contributors

• @teran made their first contribution in #1744
• @maxrantil made their first contribution in #1754
• @lishaokai1995 made their first contribution in #1758

Full Changelog: v0.8.0...v0.9.0