v2.5.0

[damdo]

Release notes for Cluster API Provider AWS (CAPA) v2.5.0

Documentation

Changelog since v2.4.2

Changes by Kind

Support

• Bump CAPI to v1.7.0 (🌱 Bump CAPI to v1.7.0 #4897, @damdo)
• Bump cert-manager to v1.14.4 (🌱 Bump cert-manager to v1.14.4 to align with CAPI #4935, @damdo)

API Change

• Action required
  Support deploying network requirements, subnets and carrier gateway, in AWS Wavelength Zones. This introduces new required IAM permissions. If you have an existing stack you will need to update it with clusterawsadm bootstrap iam create-cloudformation-stack (✨ Support of managing subnets on AWS Wavelength Zones #4901, @mtulio)
• Add support to provision subnets on AWS Local Zone infrastructure. (✨ Introduce edge subnets to support AWS Local Zones #4882, @mtulio)
• Exposing the health check attributes for the target group for the control plane load balancers, allowing customized health checks for API or additional listeners. (✨ Feat: ELBv2/TGs - Add health check customization #4849, @mtulio)
• Fixed a bug where ingress rules specified in the secondary load balancer were not applied to the security group. (🐛 fix: create ingress rules from all load balancers #4866, @r4f4)

Feature

• Add a new field to S3Bucket, BestEffortDeleteObjects, to allow ignoring AccessDenied errors when deleting S3 objects. (✨ s3: allow best effort delete for objects #4904, @r4f4)
• Add flags to manager for leaderElection timeouts (✨ Add flags for leaderElection timeouts #4845, @nikParasyr)
• Add support to specify PlacementGroupPartition of placement group in instances. (✨ Add support to specify PlacementGroupPartition of placement group #4883, @chiragkyal)
• ROSA: Support for External OIDC (✨ ROSA: Support for External OIDC #4915, @muraee)
• Use goreleaser for releasing binary (✨ use goreleaser for releasing binary #4748, @kranurag7)

Bug or Regression

• Create aws.Config with a region to be able to work with different AWS partitions (🐛 Create a aws.Config with region to be able to work different AWS partition (like gov cloud or china AWS partition) #4860, @calvix)
• Fix a bug where the machine controller will keep trying to delete an already deleted s3 object. (🐛 fix: s3: fix bucket object not found #4879, @r4f4)
• Fix machines getting a public IP even when user-supplied subnets don't have MapPublicIpOnLaunch. (🐛 ec2: instances: fix assigning public IP #4892, @r4f4)
• Fix the error handling by deleting the created route table on errors when creating routes. (🐛 fix/network/rtb: delete rtb handling err when failed to create routes #4899, @mtulio)
• Fixes in the health check probe configuration for API target group on ELBv2. The correct health check path now is set to /readyz when AWSLoadBalancerSpec.HealthCheckProtocol is HTTP or HTTPS. (🐛 Allow overriding health check endpoint protocol #4846, @mtulio)
• Retry getting and deleting user data from SecretsManager in the bootstrap script in case of request failure. (🐛Retry fetching user data from secretmanager if first request fails #4896, @alexander-demicev)
• Revert a change where the Target Group's name would use the Load Balancer's name as prefix, possibly causing it to exceed the 32 characters limit (🐛 Fix Target Group's name exceeding 32 characters #4948, @r4f4)

Other (Cleanup or Flake)

• Bump aws-sdk-go to v1.51 (🌱 bump aws sdk version #4916, @stefanmcshane)

The images for this release are: registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.5.0

Thanks to all our contributors.

---

This discussion was created from the release v2.5.0.