Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: release note draft #3177

Closed
wants to merge 2 commits into from
+33 −14
Closed

fix: release note draft #3177

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
642f241
fix: release note draft
yuwenma Nov 14, 2024
5e7008f
Update release-1.125.md
yuwenma Nov 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
47 changes: 33 additions & 14 deletions docs/releasenotes/release-1.125.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,42 +2,61 @@

* Special shout-outs to @600lyy, @acpana, @anhdle-sso, @cheftako, @ericpang777, @gemmahou, @hankfreund, @jasonvigil, @jingyih, @justinsb, @maqiuyujoyce, @nb-goog, @svetakvsundhar, @xiaoweim, @yuwenma, @zicongmei, @ziyue-101 for their contributions to this release.

## Announcement

## New Beta Resources (Direct Reconciler):

* `BigQueryAnlayticsHubDataExchange`
* `PrivilegedAccessManagerEntitlement`
* `RedisCluster`
* `WorkstationCluster`
* [`BigQueryConnectionConnection`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigqueryconnection/bigqueryconnectionconnection)

* Manage [connections](https://cloud.google.com/bigquery/docs/working-with-connections) to connect to Google services and external data sources

* [`BigQueryAnalyticsHubDataExchange`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigqueryanalyticshub/bigqueryanalyticshubdataexchange.md)

* Manage [data exchange](https://cloud.google.com/bigquery/docs/analytics-hub-introduction#data_exchanges) to enable self-service data sharing

* [`PrivilegedAccessManagerEntitlement`](https://cloud.google.com/config-connector/docs/reference/resource-docs/privilegedaccessmanager/privilegedaccessmanagerentitlement)

* Manage [entitlements](https://cloud.google.com/iam/docs/pam-create-entitlements) to grant for projects, folders, and organizations

* [`WorkstationCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/workstations/workstationcluster.md)

* Manage [workstation cluster](https://cloud.google.com/workstations/docs/overview) to define a group of workstations in a particular region and the VPC network they're attached to.

## New Alpha Resources (Direct Reconciler):

* `KMSAutokeyConfig`

* Manage the [KMS auto key](https://cloud.google.com/kms/docs/autokey-overview) which simplifies the CMEKs provisioning and assignment.

## New Fields:

* `AlloyDBInstance`
* [`AlloyDBInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/alloydb/alloydbinstance) (Beta)
* Added `spec.networkConfig.enableOutboundPublicIp` field.
* Added `status.outboundPublicIpAddresses` field.

## Modified Beta Reconciliation
## Reconciliation Improvements

We migrated the following resources from the Terraform-based or DCL-based controller to the new Direct Controller to enhance the reliability and performance. The resource CRD is unchanged.

* `SQLInstance`
* [`SQLInstance`](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/pkg/test/resourcefixture/testdata/basic/sql/v1beta1/sqlinstance)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jasonvigil check my recollection. We have added support for running SQLInstance via Direct Controller but not actually migrated to it?

Copy link
Collaborator

@jasonvigil jasonvigil Nov 14, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's fair. Maybe the wording should say we "added support" for the direct controller, instead of "migrated"

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! I updated the release note to reflect the discussion


* You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the `SQLInstance` CR object to opt-in the direct controller, which fixes issues with updating from ENTERPRISE -> ENTERPRISE_PLUS edition and allows "create from clone" functionality.
* You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the SQLInstance CR object to opt-in the direct controller.
* The direct reconciler contains 2 fix and improvement:
* Fix the upgrade and downgrade issue between ENTERPRISE and ENTERPRISE_PLUS.
* Supports creating from clone functionality via `spec. cloneSource`
* We migrated the `SQLInstance` from the Terraform-based or DCL-based controller to the new Direct Controller to enhance the reliability and performance. The CRD is unchanged.

* `ComputeFirewallPolicyRule`
* [`ComputeFirewallPolicyRule`](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/pkg/test/resourcefixture/testdata/basic/compute/v1beta1/computefirewallpolicyrule)

* You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the `ComputeFirewallPolicyRule` CR object to opt-in the direct controller, which fixes the `targetResources` error *required value "priority" could not be found*.

## New features:

* Add *cluster mode* to manage the rate-limit for the Config Connector requests

* Previously we added [rate-limit control in namespace mode](https://cloud.google.com/config-connector/docs/how-to/customize-controller-manager-rate-limit). Users can configure the `NamespacedControllerReconciler` object to set the rate-limit for the reconciling requests to the kube-apiserver for their Config Connector resources.
* This release adds this feature in the cluster mode in `ControllerReconciler` object. This [example](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/operator/config/samples/controller_reconciler_customization_sample.yaml) shows how to set up the configuration.
* In v1.119, we added [rate-limit control in namespace mode](https://cloud.google.com/config-connector/docs/how-to/customize-controller-manager-rate-limit). Users can configure `NamespacedControllerReconciler` object (Alpha) to set the rate-limit for the reconciling requests to the kube-apiserver for their Config Connector resources.
* In this release, we add this feature for cluster mode. User can configure `ControllerReconciler` object (Alpha) to set the rate-limit for all their cnrm manager controllers in the cluster. This [example](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/operator/config/samples/controller_reconciler_customization_sample.yaml) shows how to set up the configuration.
yuwenma marked this conversation as resolved.
Show resolved Hide resolved

## Bug Fixes:

* [Issue 3007](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/3007) ComputeBackendService cannot refer clientTLSPolicy due to invalid format
* [Issue 2973](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/2973) kubelet_config has `insecure_kubelet_readonly_port_enabled: true` set even if not configured in the `ContainerNodePool` object.
* [Issue 3140](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/3007) BigQueryConnectionConnection requires UUID to acquire the resource.
* [Issue 3140](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/3007) BigQueryConnectionConnection requires UUID to acquire the resource.