1.73.1

[gardener/dashboard]

🐛 Bug Fixes

• [USER] Enhanced volume management for OpenStack workers
  In the last dashboard release, we inadvertently introduced an issue that caused the loss of custom volume sizes for OpenStack workers when they were updated via the dashboard. This release brings a fix to this bug, ensuring that your custom volume configurations are retained post-update.
  Additionally, we've improved the storage size configuration interface. Now, it's easier to distinguish between default and custom volumes. by @grolu [#1722]

Docker Images

• dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.73.1

1.73.0

[gardener/dashboard]

✨ New Features

• [USER] You can now force delete clusters via the dashboard if they are stuck in deletion by @grolu [#1665]
• [USER] Improved cluster messages:
  • Show icons always next to title on cluster details page
  • Fixed overall severity sometimes not correct by @grolu [#1665]
• [USER] Users with the Project viewer role are now able to to download the gardenlogin kubeconfig by fetching the cluster CA via ConfigMap. This feature is anticipated to be supported with Gardener v1.89 and requires gardenlogin v0.5 or higher. by @petersutter [#1708]
• [OPERATOR] Add support for IronCore as infrastructure provider by @afritzler [#1700]

🐛 Bug Fixes

• [USER] Fixed invalid default minimum volume size limits for clusters without a limit defined in the cloud profile. Also improved handling for machine types without storage or volume defined in the cloud profile by @grolu [#1701]
• [USER] Terminal: fixed an issue where the loading spinner would not disappear, even though the terminal pod is running and the terminal connection shows as connected by @petersutter [#1702]
• [USER] Fixed an issue that caused dark theme color to be applied to some alert messages by @grolu [#1665]
• [USER] Action dialogs fixes:
  • We've addressed an issue where tooltips were missing for some disabled cluster action buttons. Users will now see helpful tooltips providing more context on why these actions are currently unavailable
  • Fixed issues with line breaks in the tooltips for certain buttons, ensuring that the tooltip text is now displayed correctly and is easier to read
  • Resolved problems related to the display of precondition constraint failure messages during maintenance operations
  • Fixed an issue where some action buttons were visible to users who did not have permission to perform those actions. This update ensures that the interface correctly reflects available actions based on user rights by @grolu [#1697]

Docker Images

• dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.73.0

1.72.0

[gardener/dashboard]

⚠️ Breaking Changes

• [USER] Removed support for deprecated annotations. These annotations have been deprecated long time ago:
  • garden.sapcloud.io/createdBy. If you still have a cluster using this annotation, you can migrate it manually to dashboard.gardener.cloud/created-by if you need to
  • shoot.garden.sapcloud.io/ignore: If you still have a cluster using this annotation, you can migrate it manually to shoot.gardener.cloud/ignore if you need to by @grolu [#1669]

✨ New Features

• [USER] Streamlined Kubernetes cluster upgrades for enhanced user experience. We've removed non-eligible versions from the upgrade selection, replacing them with a hint to indicate the existence of more versions. Additionally, only supported versions are now highlighted on the version chip. To aid in version management, chips for deprecated versions will now display in a warning color, alerting users to the need for an upgrade by @grolu [#1683]
• [USER] Hidden GitHub comments will no longer be displayed on the Cluster Details page. by @holgerkoser [#1675]
• [USER] Added support to request a time-limited kubeconfig on the cluster details page. The lifetime can be configured on the settings page. This feature is disabled by default and can be enabled by the gardener dashboard operator. by @grolu [#1666]
• [OPERATOR] The feature to request a time-limited kubeconfig is disabled by default. You can enabled it via .Values.global.dashboard.frontendConfig.shootAdminKubeconfig.enabled. The maximum expiration seconds can be controlled via .Values.global.dashboard.frontendConfig.shootAdminKubeconfig.maxExpirationSeconds. by @grolu [#1666]

🐛 Bug Fixes

• [USER] The broken link to the permission configuration documentation for Azure secrets was fixed. by @MrBatschner [#1667]
• [USER] Fixed an issue on the member management page. Update members and service account dialog did not render correctly because of an issue with the input validation by @grolu [#1686]
• [USER] Project list: fixed issue where the second entry is highlighted on key-down in some cases by @petersutter [#1687]
• [USER] Fixed email check for account names: Non email user accounts are no longer converted to a mailto link by @grolu [#1669]
• [USER] Resolved an issue from Dashboard version 1.70 that prevented the display of descriptions in the 'Update Cluster Version' dropdown selection by @grolu [#1672]
• [USER] Improved Navigation in project list filter: Disabled spell check to enhance arrow key navigation reliability. This update addresses an issue where spell check functionality occasionally interfered with keyboard navigation by @grolu [#1696]
• [USER] Resolved a styling issue that affected the hover functionality in the Safari browser by @grolu [#1696]

🏃 Others

• [USER] Introduced tonal variations to our chips and alert designs, previously defined with outline styles by @grolu [#1681]

📖 Documentation

• [USER] Enhanced the Connect Kubectl documentation by @petersutter [#1679]
• [DEVELOPER] Updated the Project Operations kubeconfig documentation by @n-boshnakov [#1673]

Docker Images

• dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.72.0

1.71.1

[gardener/dashboard]

🐛 Bug Fixes

• [USER] Fixed an issue where the error message _all is not a function was displayed on the ALL PROJECTS page. by @holgerkoser [#1663]

Docker Images

• dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.71.1

1.71.0

[gardener/dashboard]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases) by @ccwienk [#1645]

✨ New Features

• [USER] Enhanced Client-Side Validation:
  Previously, if there was a validation error, the submit buttons on Dialogs and the Create Cluster page would be greyed out. Now, these buttons remain active even if there is a validation error.
  Clicking on the submit button in the presence of a validation error will not execute the submit logic. Instead, it will trigger the validation process to ensure that all validation error messages are clearly visible at the respective input fields.
  In addition, we've made it easier to view all error messages. They are now collected and displayed in an alert, similar to how server-side error messages are shown. This enhancement ensures that users are fully aware of any errors that prevent to proceed with the action. by @grolu [#1633]
• [USER] An improvement in performance and memory usage on the shoot list has been achieved when a large number of clusters are present. In the past, under heavy load, there were repeated instances where the dashboard became unresponsive due to very high memory consumption. This has been achieved by implementing the following two changes:
  • Throttling of shoot events in the frontend.
    Now, only the uid of the modified object is sent to the client, coupled with periodic synchronization of associated shoots.
  • Removal of the key property in the g-shoot-list-row component
  • Improved performance of sorting and filtering implementation
  • Faster response times for list shoot request (experimental: must be enabled by an operator)
  • Reduced network traffic for invisible browser tabs by @holgerkoser [#1637]
• [OPERATOR] Added a configuration parameter Values.global.dashboard.maxRequestBodySize that specifies the maximum size of the request body. It's value defaults to 100kb. by @holgerkoser [#1656]
• [OPERATOR] Experimental Features:
  • Enhanced Watch Cache Control for List Shoots Requests.
    We've introduced a new feature to fine-tune caching behavior for list shoots requests. A new configuration option, Values.global.dashboard.experimentalUseWatchCacheForListShoots, has been added to the gardener-dashboard Helm chart. This allows for more precise control over caching with four settings: never, no, yes, and always. By default, this is set to never. As an experimental feature, we welcome feedback and suggest caution in production environments.
  • Fine-tune the throttle delay per cluster.
    This option, found under Values.global.dashboard.frontendConfig.experimental.throttleDelayPerCluster, allows administrators to set the base number of milliseconds delay per cluster. This delay dynamically adjusts the synchronization throttle based on the number of active clusters, optimizing performance and resource utilization in environments with a varying number of clusters. by @holgerkoser [#1637]

🐛 Bug Fixes

• [OPERATOR] Fixed garden cluster terminals when the host cluster is a managed Seed by @petersutter [#1657]
• [OPERATOR] Dashboard pods were not recreated after assets have been changed by @petersutter [#1627]
• [USER] Fixed issues with the machine image input field:
  • image description was not shown
  • certain mache image hints were not shown when editing the worker for an existing shoot by @petersutter [#1635]
• [USER] Fxed issue where the kubernetes dashboard was not shown on cluster details page in case the addon was enabled. The issue occurs when static token kubeconfig is disabled. by @petersutter [#1658]
• [USER] Fixed the owner selection via mouse click on the project administration page. by @holgerkoser [#1632]
• [USER] Fixed issue on create cluster page: On error, alert should scroll into view by @petersutter [#1629]
• [USER] Users will now be redirected back to the last visited URL after automatic logout due to session timeout or authentication errors. by @holgerkoser [#1624]
• [USER] Fixed several bugs on the project filter menu. More details in this PR by @petersutter [#1623]
• [USER] Fixed vSphere Load Balancer Class selection by @grolu [#1625]

Docker Images

• dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.71.0

1.70.1

[gardener/dashboard]

✨ New Features

• [OPERATOR] Enhanced the gardener-dashboard helm chart with additional configuration options:
  • Browser window title is now customizable via Values.global.dashboard.frontendConfig.branding.documentTitle
  • Manual configuration of OIDC redirect URLs is supported through Values.global.dashboard.oidc.redirectUris. This is particularly useful for local development setups by @holgerkoser [#1611]

🐛 Bug Fixes

• [USER] If the login session in the dasboard expires the user no longer gets an error message JWT expired. In case of autoLogin is enabled the user is redirected back to the last visited page by @holgerkoser [#1612]
• [USER] Fixed duplicative tooltip on issue since value by @petersutter [#1614]
• [USER] Fixed a typo in shoot credentials rotation by @memeToasty [#1610]
• [USER] Fixed two memory leaks in GTimeString and localStorage store. This issue was causing an unnecessary allocation of memory, which, over time, led to degraded UI performance and eventually leading to Out of Memory crashes. by @holgerkoser [#1613]

🏃 Others

• [OPERATOR] This release includes nodejs v20.8.1 by @holgerkoser [#1609]

1.70.0

[gardener/dashboard]

⚠️ Breaking Changes

• [OPERATOR] Tickets are no longer automatically closed by the dashboard when a shoot is deleted. This should be handled by a different component instead, like a robot. by @petersutter [#1517]
• [OPERATOR] The gardener-dashboard Deployment now runs with high availability config (with label high-availability-config.resources.gardener.cloud/type=server). For more information about the HA config see resource-manager.md#high-availability-config by @petersutter [#1504]
• [OPERATOR] Terminals: The connectSrc directive of the Content Security Policy no longer permits the use of wss: by default. You need to set up the allowed hosts that the browser can connect to for the web terminal feature. This can be done using Values.global.terminal.allowedHostSourceList. For more details see webterminals.md#allowlist-for-hosts by @petersutter [#1561]
• [OPERATOR] Terminals: As gardener took over the responsibility of providing kube-apiserver endpoints with trusted certificates the terminal-bootstrap component was dropped. Make sure to clean up the created resources of the terminal bootstrapper. See PR description for more details. by @petersutter [#1561]

✨ New Features

• [USER] Added an input field to configure the maintenance time window duration. The textfield hints now show the UTC begin and end time by @grolu [#1587]
• [USER] Enable focus mode for regular project lists. This feature used to be exclusive for operators. It can now be used by regular users on all cluster lists. This feature enables users to get a static overview of clusters with issues. In order to use this feature, you need to enable it on the Settings page. by @grolu [#1557]
• [USER] Implementation of lazy loading for copy to clipboard functionality by @holgerkoser [#1546]
• [USER] Added functionality to create, view and manage workerless clusters by @grolu [#1531]
• [OPERATOR] Allow customization of dashboard branding like product logo, name, title, slogan and custom html templates for teaser and footer. The documentation and a detailed example can be found in the dashboard operation guidelines https://github.com/gardener/dashboard/blob/master/docs/operations/customization.md by @holgerkoser [#1568]
• [OPERATOR] Terminal: By default, the access service account within the garden terminal pod is bound to gardener.cloud:system:administrators, not cluster-admin anymore. by @petersutter [#1541]
• [OPERATOR] Github app authentication is now supported (in addition to token authentication) for the ticket feature by @petersutter [#1514]
• [OPERATOR] Terminal: You can now configure the role bindings to which the access service account within the garden terminal pod is bound (Values.global.terminal.garden.roleBindings). by @petersutter [#1541]
• [OPERATOR] The dashboard chart allows to optionally configure a projected volume based kubeconfig by @timuthy [#1598]
• [OPERATOR] In addition to the defaultNodesCIDR config (Values.global.dashboard.frontendConfig.defaultNodesCIDR) of the gardener-dashboard which applies for all new Shoots, you can now have a configuration per cloud profile, by setting .spec.providerConfig.defaultNodesCIDR on the respective CloudProfile by @petersutter [#1591]
• [DEVELOPER] Migrated frontend code to Vue 3 and Vuetify 3 UI components. Vue 2 will reach End of Life (EOL) on December 31st, 2023 by @holgerkoser [#1510]

🐛 Bug Fixes

• [USER] Fixed code completion and tooltips in cluster editor: Recent Gardener releases dropped support for OpenAPI v2. Dashboard now uses OpenAPI v3 to fetch shoot resource information by @grolu [#1600]
• [USER] Users with permission to list all projects can see them now in the dashboard. Previously the permission to get secrets across all namespaces was required. by @petersutter [#1518]
• [USER] Fixed hibernation schedule time input for Safari browser by @grolu [#1536]
• [USER] Fixed an issue where the filter on the Secrets, Members and Clusters page was not reset when switching the Project by @petersutter [#1529]

🏃 Others

• [OPERATOR] The default grant types for the garden cluster OIDC kubeconfig have changed to auto, authcode and device-code. authcode-keyboard was removed and device-code grant type was added. The default grant types can be overridden by setting Values.global.dashboard.frontendConfig.grantTypes in the gardener-dashboard helm chart by @petersutter [#1512]
• [OPERATOR] An error will now be logged in case the OIDC issuer discovery fails by @petersutter [#1562]

1.69.2

[gardener/dashboard]

🐛 Bug Fixes

• [USER] Errors shown as notification alerts sometimes did not contain the failure reason by @grolu [#1539]
• [USER] Fixed error handling for manage workers and hibernation dialogs. The dialogs did not show all error messages and resetted to empty broken state on errors by @grolu [#1539]

1.69.1

[dashboard]

⚠️ Breaking Changes

• [OPERATOR] The default ingress class annotation under Values.global.dashboard.ingress.annotations['kubernetes.io/ingress.class'] will not be set anymore. Instead, the ingress class name will be set using Values.global.dashboard.ingress.ingressClassName (gardener/dashboard#1499, @petersutter)

🐛 Bug Fixes

• [OPERATOR] Fixed an issue where the helm deployment failed with the error annotations.kubernetes.io/ingress.class: Invalid value: "nginx": can not be set when the class field is also set (gardener/dashboard#1499, @petersutter)

1.69.0

[dashboard]

✨ New Features

• [OPERATOR] You can now set annotations and labels for the dashboard deployment, allowing you to set e.g. the high-availability-config.resources.gardener.cloud/type=server label (gardener/dashboard#1495, @petersutter)

🐛 Bug Fixes

• [USER] The terms Grafana and Loki are replaced with Plutono and Vali to reflect the change in gardener/[email protected]. (gardener/dashboard#1494, @rickardsjp)

🏃 Others

• [OPERATOR] The Helm chart are now adapted such that they work well in garden cluster with enabled NetworkPolicy protection (default since gardener/[email protected] when garden cluster is managed by gardener-operator). (gardener/dashboard#1490, @rfranzke)
• [OPERATOR] spec.ingressClassName is now set to nginx for the dashboard Ingress. You can change the default in the values.yaml file by adjusting the property global.dashboard.ingress.ingressClassName. (gardener/dashboard#1493, @StenlyTU)