Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api-provider-azure: v1.4.0 → v1.4.5

Removed

Nothing has changed. Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.25.3...v0.25.4

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Feature

• Added discovery source for TMC. Fixed fetching artifacts over http to handle large file reads by processing chunks at a time. (#2950, @pgandigesang)

Bug or Regression

• Acquire lock before reading tanzu config file to avoid races with config writes (#3177, @anujc25)

Miscellaneous

• Bump CAPV to v1.3.2 (#3682, @srm09)

• Bump CAPV to v1.3.5 (#3829, @srm09)

• Bump kapp-controller to 0.38.5 for release-0.25 (#3540, @haoranleo)

• Currently, all CLI plugins are specific to the Kubernetes context. As more services like TMC add plugins, there is some room for confusion as there is name collision between the plugins. To make the user experience very explicit, we are adding the target to the command invocation.

  With this change, the Tanzu CLI supports two targets (context types): kubernetes, mission-control. This is currently backwards compatible, i.e., the plugins are still available at the root level. In addition to that, we have all the contextual plugins grouped under their corresponding targets.

  Note: This is currently behind a feature flag. To enable the flag please run tanzu config set features.global.context-target true and then run tanzu init once after the upgrade.

  Please find some examples below:

  1. TKG workload cluster plugin:

  Without target grouping (a TKG management cluster is set as the current active server)

  ~ tanzu cluster

  With target grouping

  ~ tanzu kubernetes cluster

  2. TMC workload cluster plugin:

  Without target grouping (a TMC server is set as the current active server)

  ~ tanzu cluster

  With target grouping

  ~ tanzu mission-control cluster (#3126, @giri-varma)

• Currently, the Tanzu CLI supports storing authentication information on a per server basis (management cluster). This information is created using the login plugin and can be managed using the config server command in the core CLI. As we add more server types like a workload cluster, Tanzu Mission Control endpoint, etc. we need a consistent mechanism to manage the configuration for every server or rather for every context.

  Also, we need to move away from the notion of server to contexts. To clarify, a server is just a remote endpoint that can be accessed via the Tanzu CLI (or its plugins). A context would include a server endpoint and any related client side configurations like default output format, feature flags enabled, etc. This can also be extended in future to support a local environment without any server if needed.

  Hence, added a context command as part of the core CLI like below to create and manage contexts in the CLI.

  Note: This is currently behind a feature flag. To enable the flag please run tanzu config set features.global.context-target true

  Migration notes:

  • CLI users should start using the context command instead of the login command.
  • Plugin developers should use the config.GetContext methods in the core CLI library instead of config.GetServer when looking for server information.

  ~ tanzu context -h Configure and manage contexts for the Tanzu CLI

  Usage: tanzu context [command]

  Aliases: context, ctx, contexts

  Available Commands: create Create a Tanzu CLI context delete Delete a context from the config get Display a context from the config list List contexts use Make a context as the current active context for its type

  Flags: -h, --help help for context

  Use "tanzu context [command] --help" for more information about a command. (#2202, @giri-varma)

• Fixes UI bug that inserted trailing comma in cluster labels and annotations (#3662, @miclettej)

• Users can now configure the NSX ALB controller with the same ALB resource name across multiple clouds. (#3721, @XudongLiuHarold)

Dependencies

Added

Nothing has changed.

Changed

• github.com/stretchr/objx: v0.2.0 → v0.4.0
• github.com/stretchr/testify: v1.7.1 → v1.8.0
• gopkg.in/yaml.v3: 496545a → v3.0.1
• sigs.k8s.io/cluster-api-provider-vsphere: v1.3.1 → v1.3.5

Removed

Nothing has changed.

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.25.1...v0.25.3

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Adds support for "tanzu cluster get" command to show details (tree view) for TKGS (#3087, @prkalle)

Bug or Regression

• Fix incorrect log message when creating management-cluster (#3172, @anujc25)
• Fixed "tanzu cluster get" command to return Classy cluster details on TKGS (#3049, @prkalle)
• Fixed an issue with Cluster UpdatesAvailable condition calculation: when new TKRs (and their OSImages) are added to the system, they are not being considered for UpdatesAvailable calculation for already existing clusters, until the clusters are modified (e.g. updating an annotation) or the TKR Status Controller is restarted. (#3127, @imikushin)
• Remove spaces in TKG_NO_PROXY; '*' is not allowed in TKG_NO_PROXY; Remove wrong comma in the end of TKG_NO_PROXY in AWS cluster settings (#3044, @lubronzhan)
• Use TKR v1alpha3 API commands based on feature-gate on the supervisor-cluster (#3057, @anujc25)
• Validate cluster kubernetes version upgrade check as initial step (#3033, @prkalle)

Miscellaneous

• Display correct error message when passing Cluster resource without ClusterClass as part of cluster create (#3076, @anujc25)
• Explicitly set criSocket for KubeadmControlPlane and KubeadmConfigTemplate in AWS and Azure to avoid race conditions at the node level (#3119, @yastij)
• Fixed osInfo annotation in Cluster CR is not correct after upgrade workload cluster with another os (#3092, @anujc25)
• Fixes PCI passthrough support decimal conversion (#3080, @srm09)
• Implement logr wrapper as part of existing logger and use with clusterctl (#3122, @anujc25)
• Package-based-lcm: Fix data race in cluster pause webhook (#3055, @vijaykatam)
• The issue has been fixed in core addon's packages monitoring logic in creating workload cluster flow when cluster bootstrap does not have the correct package name (#3113, @chandrareddyp)
• tanzu cluster create classy-cluster.yaml does monitors addons core packages (kapp, cni, csi, cpi) installation after cluster creation (#3082, @chandrareddyp)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Refactor

• Create separate directory cli/runtime for cli integration library and make it a go module. (#3201, @anujc25)
• Create separate go modules for apis/cli and apis/config (#3141, @anujc25)

Enhancement

• Adds support for "tanzu cluster get" command to show details (tree view) for TKGS (#3086, @prkalle)

Bug or Regression

• A plugin error code is propagated to the core CLI. When a command fails the error messages are no longer duplicated. (#3103, @marckhouzam)
• Acquire lock before reading tanzu config file to avoid races with config writes (#3177, @anujc25)
• Any component using prompt.go will have the question mark color changed from green to cyan. (#3170, @mpanchajanya)
• Fix incorrect log message when creating management-cluster (#3171, @anujc25)
• Fixed "tanzu cluster get" command to return Classy cluster details on TKGS (#3050, @prkalle)
• Fixed an issue with Cluster UpdatesAvailable condition calculation: when new TKRs (and their OSImages) are added to the system, they are not being considered for UpdatesAvailable calculation for already existing clusters, until the clusters are modified (e.g. updating an annotation) or the TKR Status Controller is restarted. (#3127, @imikushin)
• Improved error messages when the user attempts to add a discovery source of an invalid type. (#3134, @marckhouzam)
• Package-based-lcm: Fix the issue of tkg-clusterclass packageinstall reconcile failed after 15 minutes of management-cluster creation (#3026, @anujc25)
• Remove spaces in TKG_NO_PROXY; '*' is not allowed in TKG_NO_PROXY; Remove wrong comma in the end of TKG_NO_PROXY in AWS cluster settings (#3044, @lubronzhan)
• Use TKR v1alpha3 API commands based on feature-gate on the supervisor-cluster (#3041, @anujc25)
• Validate cluster kubernetes version upgrade check as initial step (#3033, @prkalle)

Miscellaneous

• Add Calico CNI E2E tests to AWS_CC suite (#3031, @codegold79)

• Add TKGS E2E tests to verify the workload cluster is created successfully with Calico CNI (#2955, @HL-EverGreen)

• Add automation tests for upgrade aws workload cluster (#3117, @maralavi)

• Add automation tests for upgrade aws workload cluster with custom clusterbootstrap (#3178, @maralavi)

• Add cc cluster E2E tests with custom clusterbootstrap on AWS (#3106, @ggpaue)

• Add cc guest cluster upgrade E2E tests with CNI Calico on AWS (#3153, @HL-EverGreen)

• Adds cluster upgrade integration test for tkgs (#3018, @adduarte)

• Adds metadata versioning to the addons-manager package bundle (#3185, @adduarte)

• Adds upgrade integration test for custom CB clusters (#3084, @adduarte)

• Automate create/delete CC Guest cluster for a package with inline config on supervisor using Custom ClusterBootstrap and verify if the data value secret is created successfully on both supervisor and Guest cluster (#3146, @shivaani0505)

• Automate create/delete CC Guest cluster on supervisor using Custom ClusterBootstrap and verify if all addons are successfully deployed (#3073, @shivaani0505)

• Automate testing to check if addons are successfully deployed when guest cluster got created (#3036, @ggpaue)

• Currently, the Tanzu CLI supports storing authentication information on a per server basis (management cluster). This information is created using the login plugin and can be managed using the config server command in the core CLI. As we add more server types like a workload cluster, Tanzu Mission Control endpoint, etc. we need a consistent mechanism to manage the configuration for every server or rather for every context.

  Also, we need to move away from the notion of server to contexts. To clarify, a server is just a remote endpoint that can be accessed via the Tanzu CLI (or its plugins). A context would include a server endpoint and any related client side configurations like default output format, feature flags enabled, etc. This can also be extended in future to support a local environment without any server if needed.

  Hence, added a context command as part of the core CLI like below to create and manage contexts in the CLI.

  Note: This is currently behind a feature flag. To enable the flag please run tanzu config set features.global.context-target true

  Migration notes:

  • CLI users should start using the context command instead of the login command.
  • Plugin developers should use the config.GetContext methods in the core CLI library instead of config.GetServer when looking for server information.

  ~ tanzu context -h Configure and manage contexts for the Tanzu CLI

  Usage: tanzu context [command]

  Aliases: context, ctx, contexts

  Available Commands: create Create a Tanzu CLI context delete Delete a context from the config get Display a context from the config list List contexts use Make a context as the current active context for its type

  Flags: -h, --help help for context

  Use "tanzu context [command] --help" for more information about a command. (#2202, @giri-varma)

• Display correct error message when passing Cluster resource without ClusterClass as part of cluster create (#3053, @anujc25)

• Explicitly set criSocket for KubeadmControlPlane and KubeadmConfigTemplate in AWS and Azure to avoid race conditions at the node level (#3120, @yastij)

• Fix package plugin tests flakiness (#3096, @shyaamsn)

• Fix vendir out of sync for antreaconfig crd (#3168, @maralavi)

• Fixed osInfo annotation in Cluster CR is not correct after upgrade workload cluster with another os (#3091, @anujc25)

• Implement logr wrapper as part of existing logger and use with clusterctl (#3101, @anujc25)

• Package-based-lcm: Fix data race in cluster pause webhook (#3055, @vijaykatam)

• Package-based-lcm: Fix data race in clusterbootstrap webhook that tries to concurrently access GVR (#3064, @vijaykatam)

• Plumb legacy skipCNIBinaries config to CalicoConfig API (#2774, @12345lcr)

• The issue has been fixed in core addon's packages monitoring logic in creating workload cluster flow when cluster bootstrap does not have the correct package name (#3113, @chandrareddyp)

• Version annotation has been added in ClusterClass templates (#3063, @chandrareddyp)

• tanzu cluster create classy-cluster.yaml does monitors addons core packages (kapp, cni, csi, cpi) installation after cluster creation (#3019, @chandrareddyp)

Dependencies

Added

Nothing has changed.

Changed

• github.com/AlecAivazis/survey/v2: v2.1.1 → v2.3.5
• github.com/Netflix/go-expect: 0e00d91 → 73e0943
• github.com/briandowns/spinner: v1.18.0 → v1.19.0
• github.com/cpuguy83/go-md2man/v2: v2.0.1 → v2.0.2
• github.com/creack/pty: v1.1.11 → v1.1.17
• github.com/google/go-cmp: v0.5.7 → v0.5.8
• github.com/hinshun/vt10x: d55458d → 820417d
• github.com/mattn/go-isatty: v0.0.14 → v0.0.16
• github.com/spf13/cobra: v1.4.0 → v1.5.0
• github.com/stretchr/objx: v0.2.0 → v0.4.0
• github.com/stretchr/testify: v1.7.1 → v1.8.0
• github.com/tj/assert: 0180943 → v0.0.3
• golang.org/x/sys: a9b59b0 → fbc7d0a
• gopkg.in/yaml.v3: 496545a → v3.0.1
• k8s.io/klog/v2: v2.40.1 → v2.60.1

Removed

Nothing has changed.

New Contributors

• @abhijit-dev82 made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2970

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.25.0...v0.26.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Check users' AVI related inputs valid or not (#2823, @XudongLiuHarold)
• Package-based-lcm: Update cluster upgrade and available-upgrades commands to support clusterclass based clusters (#2745, @prkalle)

Bug or Regression

• Add support to list clusterclass based clusters on TKGs (#2886, @prkalle)
• Fixed TKC based cluster template generation issue when TKG_CUSTOM_IMAGE_REPOSITORY is set (#2954, @chandrareddyp)
• Fixes to validate workload cluster existence and throws an error if exists (#2987, @chandrareddyp)

Miscellaneous

• AWS classy clusters now populate os-name information from config file and for all possible machineDeployments. (#2839, @tenczar)

• Add AWS EBS CSI Driver and AzureDisk CSI Driver (#2875, @jeffwubj)

• Add ClusterClass based cluster creation validation check at runtime based on feature-flag and feature-gate (#2804, @anujc25)

• Add Object propagation controller to the tkg-clusterclass package (#2749, @anujc25)

• Add node role selector to kapp controller (#2864, @maralavi)

• Addons-manager "--cluster-delete-timeout" is exposed to templates as tanzuAddonsManager.deployment.clusterDeleteTimeout (#2996, @adduarte)

• Adds the following variables to support PCI Passthrough on TKG on vSphere without Supervisor:

  VSPHERE_WORKER_PCI_DEVICES, if set will configure PCI passthrough on all worker machines VSPHERE_WORKER_PCI_DEVICES must be specified in the format <vendor_id>:<device_id> e.g. VSPHERE_WORKER_PCI_DEVICES: "10DE:1EB8"

  VSPHERE_CONTROL_PLANE_PCI_DEVICES, if set will configure PCI passthrough on all control plane machines VSPHERE_CONTROL_PLANE_PCI_DEVICES must be specified in the format <vendor_id>:<device_id> e.g. VSPHERE_CONTROL_PLANE_PCI_DEVICES: "10DE:1EB8"

  VSPHERE_IGNORE_PCI_DEVICES_ALLOW_LIST, if set to true will allow other PCI devices to be passed through other than NVIDIA T4 (i.e. "10DE:1EB8")

  VSPHERE_CONTROL_PLANE_CUSTOM_VMX_KEYS, if set will set custom VMX keys on all control plane machines Keys must be set in the form =,=

  WORKER_ROLLOUT_STRATEGY configures the MachineDeployment rollout strategy. If set to OnDelete, on updates, the existing worker machines will be deleted first before the replacement worker machines are created. (#2948, @randomvariable)

• Bug fix for regression caused by https://github.com/vmware-tanzu/tanzu-framework/pull/2926/ (#2974, @vijaykatam)

• Bump Cluster API and providers (CAPI/CAPD to 1.1.5, CAPV provider to 1.3.1, CAPZ provider to 1.4.0) (#2951, @ykakarap)

• Bump cert-manager to v1.7.2. (#2490, @ridavid2002)

• Bump kapp-controller to 0.38.3 (#2719, @ridavid2002)

• Bump kapp-controller to version 0.38.4 (#2880, @shivaani0505)

• Bumping Antrea component to version 1.5.3 (#2792, @knabben)

• CAPI controller deployed during management cluster creation will activate ClusterTopology featuregate only if needed (#2994, @vuil)

• Change default AVI_CONTROLLER_VERSION to 20.1.3. (#2931, @HanFa)

• Enable leader election for Addons Controller (#2787, @HL-EverGreen)

• Featuregates controller reconciles on Namespace resource changes. (#2984, @sathyanarays)

• Fix incorrect namespace used with IsClusterClassBased during management cluster upgrade (#2859, @12345lcr)

• Fixed object-propagation-controller copying cluster owned MachineTemplate and KubeadmConfigTemplate resources to other namespaces (#3007, @anujc25)

• Fixes bug where passing a ccluster input file to create dry-run would error expecting a legacy config file. (#2899, @tenczar)

• Kapp-controller .sh file update (#2901, @shivaani0505)

• Legacy-style Clusters (with tanzuKubernetesRelease label) now have UpdatesAvailable status condition. If the condition is True, its message looks similar to the one in "classy" Clusters: a space-separated TKR version list, looking like this: [v1.21.3+vmware.1-tkg.3 v1.22.0+vmware.1-tkg.1 v1.22.0+vmware.1-tkg.2] (#2997, @imikushin)

• Modifying machinehealthchecks on classy clusters is not supported. The API will return an error when performing these operations on classy clusters. (#2693, @tenczar)

• Package-based-lcm: change cluster pause webhook behavior to not pause for legacy TKGS tkr's (#2935, @maralavi)

• Package-based-lcm: set maxUnavailable to 1 in addons-manager deployment (#2962, @ggpaue)

• Package-based-lcm: Add AntreaNSXPodRoutingEnabled to CPI CRD for uTKG routablePod (#2929, @lubronzhan)

• Package-based-lcm: Fix stuck addons finalizer on deleted clusters (#2848, @vijaykatam)

• Package-based-lcm: Verify addons installation and deletion as part of tkg clusterclass tests (#2913, @shyaamsn)

• Package-based-lcm: add common functions to test addon packages (#2743, @ggpaue)

• Package-based-lcm: fix memory leaks in packageinstallstatus_controller (#3004, @vijaykatam)

• Package-based-lcm: updates node pool API to properly support all node pool customization values, e.g vmClass, storageClass (#2900, @tenczar)

• Package-based-lcm: updates node pool API to support clusterclass based clusters doc (#2445, @tenczar)

• Package-based-lcm: when feature flag is set, legacy style cluster creation should still work (#2898, @vuil)

• Remove feature-gate validation for TKGS cluster and make it based on vSphere version (#2986, @anujc25)

• Show core and additional package install statuses in clusterbootstrap status message field. (#2781, @codegold79)

• Show plugin version as installed version and status based on discovered plugin version (#2903, @anujc25)

• Support air-gapped scenario for context-scoped plugins to allow registry override (#2937, @anujc25)

• Support configuring multiple default trusted registry for plugin downloads during build-time using TANZU_PLUGINS_ALLOWED_IMAGE_REPOSITORIES (#2977, @anujc25)

• The TKR Resolver Cluster webhook now honors the custom imageRepository cluster variable: if present, its host field value is written into the resolved TKR_DATA values' kubernetesSpec imageRepository fields. (#3013, @imikushin)

• Updates scale API to support clusterclass based clusters. (#2999, @tenczar)

• Use fslock to acquire lock when reading/writing the tanzu config file for update (#2882, @anujc25)

• When cluster's CNI implementation is Antrea, AKO will use NodePortLocal routing mode by default (#2938, @XudongLiuHarold)

Dependencies

Added

• github.com/Masterminds/squirrel: v1.5.2
• github.com/gofrs/uuid: v4.2.0+incompatible
• github.com/jmoiron/sqlx: v1.3.4
• github.com/lann/builder: 47ae307
• github.com/lann/ps: 62de8c4
• github.com/lib/pq: v1.10.4
• github.com/rubenv/sql-migrate: 55d5740
• gopkg.in/gorp.v1: v1.7.2
• helm.sh/helm/v3: v3.8.1
• oras.land/oras-go: v1.1.0

Changed

• github.com/Azure/aad-pod-identity: v1.8.6 → v1.8.9
• github.com/Azure/azure-sdk-for-go: v58.1.0+incompatible → v66.0.0+incompatible
• github.com/Microsoft/hcsshim: v0.8.24 → v0.8.21
• github.com/containerd/containerd: v1.5.11 → v1.5.9
• github.com/containerd/ttrpc: v1.1.0 → v1.0.2
• github.com/coredns/corefile-migration: v1.0.14 → v1.0.17
• github.com/cyphar/filepath-securejoin: v0.2.2 → v0.2.3
• github.com/docker/cli: v20.10.10+incompatible → v20.10.11+incompatible
• github.com/docker/docker: v20.10.12+incompatible → v20.10.16+incompatible
• github.com/hashicorp/consul/api: v1.11.0 → v1.12.0
• github.com/onsi/ginkgo/v2: v2.0.0 → v2.1.3
• github.com/onsi/gomega: v1.18.1 → v1.19.0
• github.com/sagikazarmark/crypt: v0.3.0 → v0.4.0
• github.com/spf13/viper: v1.10.0 → v1.10.1
• github.com/vmware-tanzu/carvel-vendir: v0.24.0 → v0.26.0
• github.com/xeipuuv/gojsonschema: ac52e68 → v1.2.0
• google.golang.org/api: v0.62.0 → v0.63.0
• k8s.io/api: v0.23.4 → v0.23.5
• k8s.io/apiextensions-apiserver: v0.23.4 → v0.23.5
• k8s.io/apimachinery: v0.23.4 → v0.23.5
• k8s.io/apiserver: v0.23.4 → v0.23.5
• k8s.io/client-go: v0.23.4 → v0.23.5
• k8s.io/code-generator: v0.23.4 → v0.23.5
• k8s.io/component-base: v0.23.4 → v0.23.5
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.27 → v0.0.30
• sigs.k8s.io/cluster-api-provider-azure: v1.2.1 → v1.4.0
• sigs.k8s.io/cluster-api-provider-vsphere: v1.1.0 → v1.3.1
• sigs.k8s.io/cluster-api/test: v1.1.2 → v1.1.5
• sigs.k8s.io/cluster-api: v1.1.3 → v1.1.5
• sigs.k8s.io/controller-runtime: v0.11.1 → v0.11.2

Removed

Nothing has changed.

New Contributors

• @jeffwubj made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2875
• @ridaz made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2926
• @jvrahav made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2960
• @sathyanarays made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2984
• @DimpleRajaVamsi made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/3016

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.24.0...v0.25.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Bug or Regression

• Package-based-lcm: Add service account for tkr-conversion-webhook deployment (#2557, @prkalle)

Other (Cleanup or Flake)

• Fixed TKR Source Controller (pkg/v2/tkr/controller/tkr-source): it now installs TKR package contents.

  Changed TKR Source Controller (pkg/v2/tkr/controller/tkr-source): only compatible TKR BOMs and TKR packages are being fetched now.

  Improved util/patchset.PatchSet: it is now safe for concurrent use and more efficient. (#2524, @imikushin)

Miscellaneous

• 1. new FormUtils.addDynamicControl method
  2. usage of FormArray for labels
  3. Usage of Reactive Form Validations from Rxweb
  4. tkg-labels shared component (#2515, @mpanchajanya)
• Adds scaffolding for the autoscaler package (#2393, @saji-pivotal)
• Bump cluster-api-azure to v1.2.1 (#2247, @saimanoj01)
• Bumping Antrea to v1.5.2 on ClusterResourceSet (#2353, @knabben)
• Creates scaffolding to convert storage class to a carvel package (#1984, @saji-pivotal)
• Fixed #2543 TKR resolver blocks cluster update even when cluster is marked for deletion: TKR Resolver now allows the request to pass through for Clusters with deletionTimestamp set. (#2545, @imikushin)
• Package plugin now provides extended functionality for better observability and debugging.
  • tanzu config set features.package.kctrl-package-command-tree true can be used to enable this new behaviour.
  • package installed includes status command which can be used to tail status of a package install.
  • package installed includes pause and kick commands which can be used to pause the reconciliation of a package install or force trigger the reconciliation of a package install.
  • The tailing behaviour for a package install is also present in kick command and has been added to package installed create or update.
  • Breaking changes when feature flag is activated:
    • --verbose global flag is removed.
    • --create-namespace flag is removed from all the commands (package repository add, package repository update, package installed create, package installed update and package install)
    • --poll-interval and -poll-timeout are renamed to --wait-interval and --wait-timeout in all the commands (package repository add, package repository update, package repository delete, package install, package installed create and package installed update.
    • --create flag is removed in package repository update.
    • REPOSITORY and TAG columns are replaced by SOURCE column which consist of source type (eg imgpkg), repo url and tag in package repository list.
    • In package available list, SHORT-DESCRIPTION is not displayed by default (--wide flag can be used to display it). Also, LATEST-VERSION column is removed.
    • package available get provides an additional table which lists the available versions for that package.
    • --generate-default-values-file is renamed to --default-values-file-output in package available get which accepts a filename where the default values need to be saved. Also, all the values are commented by default.
    • --package-name flag is renamed to --package in package installed create and package install.
    • --install flag is removed in the package installed update. (#2522, @praveenrewar)
• Package-based-lcm: Add permissions required by VsphereCPIConfig and VSphereCSIConfig controller to create ClusterRole for CAPV to reconcile ProviderServiceAccount (#2575, @shyaamsn)
• Package-based-lcm: Add docs for updated addons-manager (#2412, @vijaykatam)
• Package-based-lcm: Fix cluster pause webhook to set the temporary pause annotation on cluster's TKR label change (#2514, @maralavi)
• Package-based-lcm: Fix constant reloading of certificates of controller-runtime by only changing certs on filesystem if contents have changed. (#2584, @adduarte)
• Package-based-lcm: Fix patching rbac rules of capv aggregated cluster role (#2595, @vijaykatam)
• Package-based-lcm: Fix reinvocation policy add logs to cluster pause webhook (#2642, @maralavi)
• Package-based-lcm: Fix vsphereCSIConfig controller bug where multiple vsphereclusters are resolved for 1 capicluster (#2553, @peterochodo)
• Package-based-lcm: Ignore clusters tied to TKR with legacy tkr label (#2624, @adduarte)
• Package-based-lcm: Sync csi feature states from supervisor cluster to workload cluster (#2493, @peterochodo)
• Package-bassed-lcm: Enhanced TKR Source Controller to consider ConfigMaps labeled with the new label run.tanzu.vmware.com/additional-compatible-tkrs: "" to mark TKRs with versions listed in such ConfigMaps as compatible. Only ConfigMaps in the namespace configured in the tkr-source-controller --namespace command line parameter are considered. (#2608, @imikushin)
• Support building and publishing multiple versions of specific package as part of package repository (#2578, @anujc25)
• TBA (#2581, @vuil)
• The builder command has been restructured and can now be used programmatically. (#1792, @stmcginnis)

Dependencies

Added

• github.com/go-logr/stdr: v1.2.2
• github.com/vmware-tanzu/carvel-kapp-controller/cli: 3beaddc
• go.opentelemetry.io/otel/exporters/otlp/internal/retry: v1.4.0

Changed

• bazil.org/fuse: 65cc252 → 371fbbd
• github.com/Azure/aad-pod-identity: v1.8.5 → v1.8.6
• github.com/Azure/go-autorest/autorest/adal: v0.9.16 → v0.9.18
• github.com/Azure/go-autorest/autorest/azure/auth: v0.5.8 → v0.5.10
• github.com/Azure/go-autorest/autorest: v0.11.21 → v0.11.23
• github.com/armon/go-radix: v1.0.0 → 7fddfc3
• github.com/benbjohnson/clock: v1.1.0 → v1.3.0
• github.com/cenkalti/backoff/v4: v4.1.1 → v4.1.2
• github.com/cppforlife/cobrautil: bb86e69 → c28a9f2
• github.com/google/martian: 25dcb96 → v2.1.0+incompatible
• github.com/hashicorp/consul/sdk: v0.8.0 → v0.1.1
• github.com/hashicorp/go-multierror: v1.1.0 → v1.0.0
• github.com/hashicorp/mdns: v1.0.1 → v1.0.0
• github.com/hashicorp/memberlist: v0.2.2 → v0.1.3
• github.com/mattn/go-shellwords: v1.0.10 → v1.0.3
• github.com/miekg/dns: v1.1.26 → v1.0.14
• github.com/mitchellh/cli: v1.1.0 → v1.0.0
• github.com/posener/complete: v1.2.3 → v1.1.1
• github.com/rogpeppe/go-internal: v1.5.2 → v1.3.0
• github.com/smartystreets/assertions: v1.2.0 → b2de0cb
• github.com/smartystreets/goconvey: v1.7.2 → v1.6.4
• github.com/vmware-tanzu/carvel-kapp-controller: v0.25.0 → v0.35.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.25.0 → v0.27.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.0.1 → v1.4.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.0.1 → v1.4.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.24.0 → v0.27.0
• go.opentelemetry.io/otel/internal/metric: v0.24.0 → v0.27.0
• go.opentelemetry.io/otel/metric: v0.24.0 → v0.27.0
• go.opentelemetry.io/otel/sdk/export/metric: v0.24.0 → v0.20.0
• go.opentelemetry.io/otel/sdk/metric: v0.24.0 → v0.27.0
• go.opentelemetry.io/otel/sdk: v1.0.1 → v1.4.0
• go.opentelemetry.io/otel/trace: v1.0.1 → v1.4.0
• go.opentelemetry.io/otel: v1.0.1 → v1.4.0
• go.opentelemetry.io/proto/otlp: v0.9.0 → v0.12.0
• golang.org/x/exp: e8c3332 → 6cc2880
• honnef.co/go/tools: v0.2.0 → v0.0.1-2020.1.4
• k8s.io/kube-aggregator: v0.19.2 → v0.22.4
• sigs.k8s.io/cluster-api-provider-azure: v1.0.1 → v1.2.1
• sigs.k8s.io/cluster-api/test: v1.1.1 → v1.1.2

Removed

• code.gitea.io/sdk/gitea: v0.12.0
• contrib.go.opencensus.io/exporter/aws: 2befc13
• contrib.go.opencensus.io/exporter/stackdriver: v0.12.1
• contrib.go.opencensus.io/integrations/ocsql: v0.1.4
• contrib.go.opencensus.io/resource: v0.1.1
• github.com/Azure/azure-amqp-common-go/v2: v2.1.0
• github.com/Azure/azure-pipeline-go: v0.2.2
• github.com/Azure/azure-service-bus-go: v0.9.1
• github.com/Azure/azure-storage-blob-go: v0.8.0
• github.com/Djarvur/go-err113: v0.1.0
• github.com/GoogleCloudPlatform/cloudsql-proxy: e802c2c
• github.com/GoogleCloudPlatform/k8s-cloud-provider: 27a4ced
• github.com/OpenPeeDeeP/depguard: v1.0.1
• github.com/Shopify/sarama: v1.19.0
• github.com/Shopify/toxiproxy: v2.1.4+incompatible
• github.com/StackExchange/wmi: 5d04971
• github.com/alecthomas/kingpin: v2.2.6+incompatible
• github.com/apache/thrift: v0.12.0
• github.com/apex/log: v1.3.0
• github.com/apex/logs: v0.0.4
• github.com/aphistic/golf: 02c07f1
• github.com/aphistic/sweet: v0.2.0
• github.com/aybabtme/rgbterm: cc83f3b
• github.com/blakesmith/ar: 809d437
• github.com/bombsimon/wsl/v2: v2.2.0
• github.com/bombsimon/wsl/v3: v3.1.0
• github.com/caarlos0/ctrlc: v1.0.0
• github.com/campoy/unique: 88950e5
• github.com/cavaliercoder/go-cpio: 925f952
• github.com/devigned/tab: v0.1.1
• github.com/eapache/go-resiliency: v1.1.0
• github.com/eapache/go-xerial-snappy: 776d571
• github.com/eapache/queue: v1.1.0
• github.com/fortytw2/leaktest: v1.3.0
• github.com/go-critic/go-critic: v0.4.3
• github.com/go-lintpack/lintpack: v0.5.2
• github.com/go-ole/go-ole: v1.2.1
• github.com/go-sql-driver/mysql: v1.5.0
• github.com/go-toolsmith/astcast: v1.0.0
• github.com/go-toolsmith/astcopy: v1.0.0
• github.com/go-toolsmith/astequal: v1.0.0
• github.com/go-toolsmith/astfmt: v1.0.0
• github.com/go-toolsmith/astinfo: 9809ff7
• github.com/go-toolsmith/astp: v1.0.0
• github.com/go-toolsmith/pkgload: v1.0.0
• github.com/go-toolsmith/strparse: v1.0.0
• github.com/go-toolsmith/typep: v1.0.2
• github.com/go-xmlfmt/xmlfmt: d5b6f63
• github.com/golangci/check: cfe4005
• github.com/golangci/dupl: 3e9179a
• github.com/golangci/errcheck: ef45e06
• github.com/golangci/go-misc: 927a3d8
• github.com/golangci/goconst: 041c5f2
• github.com/golangci/gocyclo: 0a533e8
• github.com/golangci/gofmt: 244bba7
• github.com/golangci/golangci-lint: v1.27.0
• github.com/golangci/ineffassign: 42439a7
• github.com/golangci/lint-1: 297bf36
• github.com/golangci/maligned: b1d8939
• github.com/golangci/misspell: v0.3.5
• github.com/golangci/prealloc: 215b22d
• github.com/golangci/revgrep: 276a5c0
• github.com/golangci/unconvert: 28b1c44
• github.com/google/go-github/v28: v28.1.1
• github.com/google/go-replayers/grpcreplay: v0.1.0
• github.com/google/go-replayers/httpreplay: v0.1.0
• github.com/google/rpmpack: aa36bfd
• github.com/google/subcommands: v1.0.1
• github.com/google/wire: v0.4.0
• github.com/googleapis/gax-go: v2.0.2+incompatible
• github.com/gookit/color: v1.2.4
• github.com/goreleaser/goreleaser: v0.136.0
• github.com/goreleaser/nfpm: v1.3.0
• github.com/gorilla/context: v1.1.1
• github.com/gostaticanalysis/analysisutil: v0.0.3
• github.com/jarcoal/httpmock: v1.0.5
• github.com/jingyugao/rowserrcheck: 72ab760
• github.com/jirfag/go-printf-func-name: 7558a9e
• github.com/jmoiron/sqlx: d7d9517
• github.com/joho/godotenv: v1.3.0
• github.com/klauspost/cpuid: v1.2.0
• github.com/lib/pq: v1.2.0
• github.com/maratori/testpackage: v1.0.1
• github.com/matoous/godox: 5d6d842
• github.com/mattn/go-ieproxy: v0.0.1
• github.com/mattn/go-sqlite3: v1.9.0
• github.com/mattn/go-zglob: v0.0.1
• github.com/mattn/goveralls: v0.0.2
• github.com/mitchellh/go-ps: 621e559
• github.com/mozilla/tls-observatory: 4fa42e1
• github.com/nakabonne/nestif: v0.3.0
• github.com/nbutton23/zxcvbn-go: ae427f1
• github.com/op/go-logging: 970db52
• github.com/phayes/checkstyle: bfd46e6
• github.com/pierrec/lz4: v2.0.5+incompatible
• github.com/pin/tftp: v2.1.0+incompatible
• github.com/quasilyte/go-consistent: c6f3937
• github.com/quasilyte/go-ruleguard: b00d7a7
• github.com/rcrowley/go-metrics: 3113b84
• github.com/remyoudompheng/bigfft: 52369c6
• github.com/rubiojr/go-vhd: 0bfd3b3
• github.com/rwcarlsen/goexif: 9e8deec
• github.com/ryancurrah/gomodguard: v1.1.0
• github.com/sassoftware/go-rpmutils: a8f1bae
• github.com/securego/gosec/v2: v2.3.0
• github.com/securego/gosec: e946c8c
• github.com/shirou/gopsutil: e4ec7b2
• github.com/shirou/w32: bb4de01
• github.com/shurcooL/go-goon: 37c2f52
• github.com/shurcooL/go: 9e1955d
• github.com/sigma/bdoor: babf2a4
• github.com/sigma/vmw-guestinfo: 95dd412
• github.com/smartystreets/go-aws-auth: 0c1422d
• github.com/smartystreets/gunit: v1.0.0
• github.com/sourcegraph/go-diff: v0.5.3
• github.com/tdakkota/asciicheck: e657995
• github.com/tetafro/godot: v0.4.2
• github.com/timakin/bodyclose: cb62158
• github.com/tj/go-elastic: 36157cb
• github.com/tj/go-kinesis: 08b17f5
• github.com/tj/go-spin: v1.1.0
• github.com/tommy-muehle/go-mnd: e6f9a99
• github.com/ulikunitz/xz: v0.5.7
• github.com/ultraware/funlen: v0.0.2
• github.com/ultraware/whitespace: v0.0.4
• github.com/uudashr/gocognit: v1.0.1
• github.com/valyala/bytebufferpool: v1.0.0
• github.com/valyala/fasthttp: v1.2.0
• github.com/valyala/quicktemplate: v1.2.0
• github.com/valyala/tcplisten: ceec8f9
• github.com/vmware/vmw-ovflib: 1f217b9
• github.com/xanzy/go-gitlab: v0.32.0
• github.com/xi2/xz: 48954b6
• gocloud.dev: v0.19.0
• gonum.org/v1/netlib: 7672324
• k8s.io/csi-translation-lib: v0.17.4
• modernc.org/cc: v1.0.0
• modernc.org/golex: v1.0.0
• modernc.org/mathutil: v1.0.0
• modernc.org/strutil: v1.0.0
• modernc.org/xc: v1.0.0
• mvdan.cc/interfacer: c200402
• mvdan.cc/lint: adc824a
• mvdan.cc/unparam: b37ab49
• pack.ag/amqp: v0.11.2
• sigs.k8s.io/structured-merge-diff: b1b620d
• sourcegraph.com/sqs/pbtypes: v1.0.0

New Contributors

• @mpanchajanya made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2515
• @praveenrewar made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2522

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.22.0...v0.23.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Show TKR name in cluster list and cluster get commands (#2391, @prkalle)

Feature

• Package-based-lcm: Added support to configure deployment and webhook ports in tkr-service package (#2299, @prkalle)

Bug or Regression

• Deleting management cluster can run successfully even in high latency network env. (#2329, @XudongLiuHarold)
• Package-based-lcm: Fixed the indentation for Issuer resource in tkr-service package (#2319, @prkalle)

Miscellaneous

• Addons finalizers will not be added to clusters labeled as management clusters (#2425, @adduarte)
• Bump calico to 3.22.1 (#2229, @12345lcr)
• Cluster creation validates SERVICE_CIDR size does not exceed kube-apiserver's size restriction, and fails fast. IPv4 CIDRs mask must be /12 or smaller and IPv6 CIDRs must be /108 or smaller. (#2342, @tylerschultz)
• Consider additional metadata as part of kubernetes build version during version comparison (#2289, @anujc25)
• Expose AVI_LABELS for creating workload cluster, for example "{foo: 'bar'}", double quotations are required. (#2337, @HanFa)
• Fix context-scoped plugins not getting installed after creating management-cluster through Kickstart UI (#2287, @anujc25)
• Fixed bug where ENABLE_CEIP_PARTICIPATION config variable was not being heeded (#2290, @saji-pivotal)
• Package-based-lcm: Allow adding tkg.tanzu.vmware.com/add-missing-fields-from-tkr= in the annotation of ClusterBootstrap to enable the defaulting webhook logic which adds defaults to the missing spec fields and complete the partially filled ClusterBootstrapPackage RefName (#2403, @danniel1205)
• Package-based-lcm:
  1. vsphere cpi config controller creates either paravirt or non-paravirt config
  2. ProviderServiceAccount for vsphere cpi and csi uses VsphereCluster in spec and ownerRef (#2198, @vijaykatam)
• Package-based-lcm: Adding tkr-status-controller to tkr-service package (#2322, @saji-pivotal)
• Package-based-lcm: Change addons-manager-v2 package name to addons-manager (#2315, @shyaamsn)
• Package-based-lcm: Create aggregate cluster role for CAPV (#2494, @vijaykatam)
• Package-based-lcm: Ensure addons-manager package has latest CRDs (#2507, @vijaykatam)
• Package-based-lcm: Fix VSphereCPIConfig data values type inconsistency and directly use endpoint IP. (#2196, @HanFa)
• Package-based-lcm: Fix cliplugins package deletion issue (#2400, @anujc25)
• Package-based-lcm: Made healthz & webhook server port configurable in addons-manager package (#2354, @ggpaue)
• Package-based-lcm: Packaging tkr-source-controller (#2355, @prkalle)
• Package-based-lcm: Remove owner references from PackageInstall on workload clusters. (#2351, @adduarte)
• Package-based-lcm: Removes superfluous logging of machine-controller (#2331, @adduarte)
• Package-based-lcm: TKR Source Controller makes TKRs published as Carvel packages available on the management cluster. (#2173, @imikushin)
• Package-based-lcm: Update CalicoConfig vethMTU to string and remove namespace (#2164, @12345lcr)
• Package-based-lcm: Update SkipCNIBinaries param to CalicoConfig and fix CRD additionalPrinterColumns (#2416, @12345lcr)
• Package-based-lcm: addons-manager bug fixes (#2297, @vijaykatam)
• Package-based-lcm: postpone connecting to remote cluster until when needed (#2402, @maralavi)
• Package-based-lcm: set vsphere csi replica count based on controlplane node count (#2311, @peterochodo)
• Removed packages/{management,standalone} directories and move their contents to the packages directory. (#1906, @codegold79)
• Support deletion of IPv6 primary dualstack management clusters with automatically provisioned cleanup clusters. (#2348, @adobley)
• Update the KR plugin to implement the new TKR API v1alpha3 (#2242, @prkalle)
• tanzu cluster and tanzu management-cluster commands and their sub-commands, do not print usage information in case the command fails for any reason, it just prints error information. To get usage information for tanzu cluster or tanzu management-cluster commands and their sub-commands, need to call the command or sub-commands with the flag --help or -h. (#2253, @chandrareddyp)

Dependencies

Added

Nothing has changed.

Changed

• github.com/gorilla/websocket: v1.4.2 → v1.5.0
• golang.org/x/sys: 22a9840 → a9b59b0

Removed

Nothing has changed.

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.21.0...v0.22.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Bug or Regression

• Conditonally set --node-ip on kubelet for TKR 1.22+ IPv6 workload clusters (#2381, @christianang)
• Fix provider version mismatch when talking with old management cluster using tkgctl library (#2333, @anujc25)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.11.5...v0.11.6

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Bug or Regression

• Consider additional metadata as part of kubernetes build version during version comparison (#2296, @anujc25)
• Fix context-scoped plugins not getting installed after creating management-cluster through Kickstart UI (#2295, @anujc25)
• Fixed bug where ENABLE_CEIP_PARTICIPATION config variable was not being heeded (#2290, @saji-pivotal)
• Fixed issue where some host network pods get pod IP set to kube-vip control plane endpoint address on clusters with IPv6 as the primary IP family (#2234, @mcwumbly)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.11.4...v0.11.5

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Package-based-lcm: Add TKR Service package to framework composite package (#2047, @prkalle)

Feature

• Add cliplugins management package which contains CLIPlugin CRD (#1997, @anujc25)
• Added framework meta package (#1848, @yharish991)
• Adds TKR conversion webhook to TKR service package. (#2178, @ShashankGirish)
• Package-based-lcm: Install kapp-controller to the bootstrap and management cluster (#1867, @anujc25)
• Package-based-lcm: Support management package upgrades as part of management-cluster upgrade (#2141, @anujc25)
• Packaging the TKR service (#1895, @prkalle)

Documentation

• Added documentation on how to add a new package to a package repository Added documentation on how to add a package to a composite package (#1238, @yharish991)

Bug or Regression

• Added ordering to resources in featuregates package (#1957, @yharish991)

Miscellaneous

• Add Cluster UpdatesAvailable status condition which lists version strings that can be used to update the Cluster. These version strings can be used directly in Cluster spec.topology.version field. (#2223, @imikushin)

• Add back --bootstrap-token-ttl timeout flag to kubeadm-bootstrap-controller (#2184, @vuil)

• Add v1alpha2 to TanzuKubernetesRelease CRD. Add conversion code for TKR API v1a2->v1a3. (#2106, @imikushin)

• Added ability to configure deployment in featuregates and capabilities packages (#2110, @yharish991)

• Bump github.com/containerd/containerd from 1.5.9 => 1.5.11 (#1982, @tanzu-bump-robot)

• Bump kapp-controller to 0.34.0 (#1854, @ridavid2002)

• Configure etcd extraArgs from TKR during cluster creation/upgrade (#1950, @anujc25)

• Fixed featuregates package installation on management cluster. (#2045, @yharish991)

• Fixed issue where some host network pods get pod IP set to kube-vip control plane endpoint address on clusters with IPv6 as the primary IP family (#2103, @mcwumbly)

• Load proxy CA passed in TKG_PROXY_CA_CERT to TKG cluster's CA trust store (#1967, @lubronzhan)

• Made namespace configurable for resources in capabilities package (#2257, @yharish991)

• Made webhook server port configurable in Featuregates package (#2265, @yharish991)

• Package bundles can now be created to include thick tarballs for air-gapped environments. (#2187, @codegold79)

• Package tooling generates Package CR when package bundle is being created (#2199, @codegold79)

• Package-based-lcm:

  • when supplying non-paravirtual csi configuration via VSphereCSIConfig api, the fields "username" and "password" have been replaced by a reference to a secret that holds username and password information. (#2122, @peterochodo)

• Package-based-lcm: The following fields of VSphereCPIConfig have been renamed:

  • spec.vsphereCPI.vSphereCredentialRef -> spec.vsphereCPI.vSphereCredentialLocalObjRef
  • spec.nsxt.nsxtCredentialsRef -> spec.nsxt.credentialLocalObjRef

  And the type of above two fields are changed from SecretReference to TypedLocalObjectReference (#1881, @danniel1205)

• Package-based-lcm: Add ClusterPause webhook to addons manager package (#2251, @blc1996)

• Package-based-lcm: Add PackageInstallStatus controller & remote watch managed packages (#1781, @maralavi)

• Package-based-lcm: Add TKR nodeselector to all packageInstalls and handle cluster upgrade unpause in ClusterBootstrap controller (#1920, @blc1996)

• Package-based-lcm: Add addons manager package to framework composite package (#2066, @blc1996)

• Package-based-lcm: Add cliplugins to framework meta package (#2065, @anujc25)

• Package-based-lcm: Add cluster pause webhook (#1965, @blc1996)

• Package-based-lcm: Add generate-package-config Makefile target for VSphereCPIConfig. (#2084, @HanFa)

• Package-based-lcm: Add generate-package-config Makefile target for VSphereCSIConfig. (#2104, @ggpaue)

• Package-based-lcm: Add make target to generate addon config CRs (#1857, @blc1996)

• Package-based-lcm: Adds validation webhook for ClusterBoostrap API (#1697, @blc1996)

• Package-based-lcm: Changed the apis/cni and apis/cpi packages to be their own Go modules so other projects can import those APIs without pulling in this project's entire dependency graph. (#2216, @akutz)

• Package-based-lcm: Clusterbootstrap controller needs to handle inline data value from ClusterBootstrapPackage (#2083, @shivaani0505)

• Package-based-lcm: Derive cluster information required by the paravirtual mode for CPIConfig. (#1939, @HanFa)

• Package-based-lcm: Feature gate Webhooks for AddonConfig (#1879, @shivaani0505)

• Package-based-lcm: Fix issue of namespace being hardcoded in addons-manager webhook templates (#2133, @shyaamsn)

• Package-based-lcm: rename fields for the VSphereCPIConfig CR. (#2063, @HanFa)

• Package-based-lcm: vendor latest CRDs and fix bugs + cleanup issues encountered while testing with supervisor cluster (#2138, @vijaykatam)

• TKR Resolver Cluster webhook now stores the TKR/OSImage data in the TKR_DATA cluster variable. (#2159, @imikushin)

• Tanzu edition now exposed in tkg-metadata configmap (#1949, @joshrosso)

• TlsThumbprint for vsphere-csi is set based on the VSPHERE_INSECURE and VSPHERE_TLS_THUMBPRINT provided (#1969, @adduarte)

• Workload cluster's avi control plane vip network will consider using management cluster vip network first instead of data plane of this cluster. (#1896, @XudongLiuHarold)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Microsoft/hcsshim: v0.8.23 → v0.8.24
• github.com/containerd/containerd: v1.5.9 → v1.5.11
• github.com/getkin/kin-openapi: v0.76.0 → v0.94.0
• github.com/jinzhu/copier: v0.2.8 → v0.3.5
• github.com/pelletier/go-toml/v2: v2.0.0-beta.3 → v2.0.0-beta.6

Removed

Nothing has changed.

New Contributors

• @ridavid2002 made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1854
• @tanzu-bump-robot made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1982
• @peterochodo made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2046
• @akutz made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/2216

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.20.0...v0.21.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Bug or Regression

• Fix the image repo url being read by default (#1922, @saji-pivotal)
• Fix the issue where upgrade operation fails for vSphere provider if vSphere password contains single quote(') (#1723, @prkalle)
• Add 0.12.1 Pinniped package to bring in bug fix release for an incompatibility between the Pinniped CLI and Chrome v98+ that causes browser-based logins to fail. (#1876, @ankeesler)
• Fix the issue that spinner messages being wiped out and redundant empty lines being printed. (#1473, @blc1996)
• Fix for OIDC auth issue: Load all kubernetes credential helpers (#1941, @maralavi)
• Configure etcd extraArgs from TKR during cluster creation/upgrade (#1968, @anujc25)
• Fix the issue for unable to use custom certificate in an airgap environment (#1883, @blc1996)
• Fixed an issue where a finalizer on the VSphereIdentitySecret is not deleted in case of clusters upgraded from TKG 1.x to 1.5. (#1937, @aartij17)
• Fixed the workload cluster upgrade issue when cluster is already on latest TKR and user passes the same TKR with --tkr flag with tanzu cluster upgrade command (#1853, @anujc25)
• Fixes upgrade bug in Azure where upgrade used to fail if AZURE_CLIENT_SECRET was not set. (#1841, @saji-pivotal)
• Load proxy CA passed in TKG_PROXY_CA_CERT to TKG cluster's CA trust store (#1991, @lubronzhan)
• Prevent the vsphere-cpi from assigning the VSPHERE_CONTROL_PLANE_ENDPOINT IP to node's ExternalIP when running kube-vip. (#1964, @christianang)
• Removed incorrect zsh completions instructions. No longer recommend using "source" (#1978, @joshrosso)
• Workload cluster's AVI control plane VIP network will consider using management cluster VIP network first instead of data plane of this cluster. Backport AVI VIP network auto propagate logic to v0.11 (#1960, @XudongLiuHarold)

Miscellaneous

• Bump Cluster API Azure to v1.0.2 (#1923, @saimanoj01)
• Tanzu edition now exposed in tkg-metadata configmap (#1975, @joshrosso)

Dependencies

Added

• github.com/alonyb/spinner: v1.12.7

Changed

• github.com/Microsoft/hcsshim: v0.8.21 → v0.8.23
• github.com/containerd/containerd: v1.5.7 → v1.5.8
• github.com/containerd/ttrpc: v1.0.2 → v1.1.0
• github.com/docker/docker: v20.10.9+incompatible → v20.10.11+incompatible
• sigs.k8s.io/cluster-api-provider-azure: v1.0.1 → v1.0.2
• sigs.k8s.io/cluster-api-provider-vsphere: v1.0.2 → v1.0.3
• sigs.k8s.io/cluster-api/test: v1.0.1 → v1.0.4

Removed

• github.com/briandowns/spinner: v1.16.0

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.11.3...v0.11.4

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• ANTREA_FLOWEXPORTER: "true" ANTREA_EGRESS: "true" (#1869, @iXinqi)
• Rewrote package tooling in Golang (#1512, @yharish991)

Bug or Regression

• Fix the image repo url being read by default (#1922, @saji-pivotal)
• Fix issues while deploying management packages into bootstrap and management cluster (#1775, @anujc25)
• Fixed the workload cluster upgrade issue when cluster is already on latest TKR and user passes the same TKR with --tkr flag with tanzu cluster upgrade command (#1853, @anujc25)
• Fixes upgrade bug in Azure where upgrade used to fail if AZURE_CLIENT_SECRET was not set. (#1841, @saji-pivotal)

Miscellaneous

• GVR Capability Discovery query now supports searching for any version of a resource by omitting the WithVersions method. In addition, WithVersions or WithResource methods return an error when an empty string is passed as an argument. (#1724, @codegold79)
• Load all kubernetes credential helpers (#1816, @scothis)
• Package-based-lcm: Add validating webhooks for AntreaConfig and CalicoConfig (#1796, @shivaani0505)
• Package-based-lcm: Adds function to continuously manage webhook TLS certificates (#1803, @adduarte)
• Package-based-lcm: Handle TKR upgrade in ClusterBootStrap controller (#1713, @blc1996)
• Package-based-lcm: Reconcile ProviderServiceAccount for VSphereCPIConfig paravirtual mode. (#1868, @HanFa)
• Package-based-lcm: Register CPI schema and update addons-manager-v2 package (#1842, @vijaykatam)
• Plugin descriptions in plugin list table output wraps after 80 characters. (#1839, @codegold79)
• Prevent the vsphere-cpi from assigning the VSPHERE_CONTROL_PLANE_ENDPOINT IP to node's ExternalIP when running kube-vip. (#1480, @adobley)
• Resolve TKR/OSImage for Cluster based on 'run.tanzu.vmware.com/resolve-tkr' and 'run.tanzu.vmware.com/resolve-os-image' annotations. (#1835, @imikushin)
• The concierge cluster audience can be a cluster UID instead of a cluster name to ensure uniqueness. (#1811, @benjaminapetersen)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

New Contributors

• @ShashankGirish made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1847

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.19.0...v0.20.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Bug or Regression

• Fixed a panic in node-pool set when extra files are applied to kubeadmconfigtemplates (#1302, @tenczar)
• Fixes an issue where the incorrect node pool will be updated when the name is a substring of another node pool.(#1826, @tenczar)
• Fixes an issue where node pool delete could delete the incorrect node pool if the node pool named passed to delete is a substring of another node pool name. (#1819, @tenczar)
• Expose NSX-T connector for NSX ALB to configure NSX-T cloud. (#1741, @XudongLiuHarold)
• Expose Avi controller version in cluster config. (#1815, @XudongLiuHarold )

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.11.2...v0.11.3

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Known Issues

• addons-controller is crashing. This issue only occurs if the respective feature gates are enabled for the new APIs. See https://github.com/vmware-tanzu/tanzu-framework/issues/1774 and https://github.com/vmware-tanzu/tanzu-framework/pull/1842.

Changes by Kind

Feature

• Add tkr-infra-machine-webhook packages for all providers in management package repository (#1703, @prkalle)

Bug or Regression

• Fix the imgpkg registy custom certificate validation and validation skipping issue (#1804, @prkalle)
• Fix the issue where upgrade operation fails for vSphere provider if vSphere password contains single quote(') (#1723, @prkalle)

Miscellaneous

• Add CPIConfig spec and CRD for vsphere-cpi package. (#1554, @HanFa)
• Add addons manager package in management package test result

  tanzu package repository list -A
  NAME              REPOSITORY                                                     TAG                                                                      STATUS               DETAILS  NAMESPACE
  tanzu-test        index.docker.io/pksoctopus/management                          sha256:466d09f3e3bd09397ac4c0830111ea8849b9b113a031815b6a5e8012fbde5280  Reconcile succeeded           default

  tanzu package available list -A
  NAME                                                DISPLAY-NAME                       SHORT-DESCRIPTION                                                                                                            LATEST-VERSION                NAMESPACE
  addons-manager.tanzu.vmware.com                     tanzu-addons-manager               This package provides TKG addons lifecycle management capabilities.                                                          0.16.0-dev                    default
  core-management-plugins.tanzu.vmware.com            core-management-plugins            CLIPlugin management                                                                                                         0.16.0-dev                    default
  featuregates.tanzu.vmware.com                       featuregates                       Feature management                                                                                                           0.16.0-dev                    default (#1728, @ggpaue)

• Add pause mechanism to ClusterBootstrap (#1780, @blc1996)
• Added a script to fetch and install the latest Tanzu Framework CLI binary for MacOS and Linux distributions. Updated the documentation to reflect the new approach to install the CLI. (#1705, @sriramandev)
• Build process will no longer create a tanzu binary with the version set to "latest". (#1759, @stmcginnis)
• Bump CAPV version to v1.1.0 (#1736, @aartij17)
• Bumps cobra from v1.3.0 to v1.4.0 (#1823, @jpmcb)
• Expose nsx-t connector for nsx alb to configure nsx-t cloud. (#1741, @XudongLiuHarold)
• Fixes an issue where node pool delete could delete the incorrect node pool if the node pool named passed to delete is a substring of another node pool name. (#1819, @tenczar)
• Fixes an issue where the incorrect node pool will be updated when the name is a substring of another node pool. (#1826, @tenczar)
• Management and workload cluster creation activity is now captured in $HOME/.config/tanzu/tkg/logs/$CLUSTER_NAME for later troubleshooting or review. This file will be removed on cluster deletion. (#1525, @stmcginnis)
• The image: section are removed since they are no longer needed (#1790, @lubronzhan)
• Update Cluster API version to v1.1.3 (#1813, @saimanoj01)

Dependencies

Added

• contrib.go.opencensus.io/exporter/zipkin: v0.1.2
• github.com/Masterminds/goutils: v1.1.1
• github.com/Masterminds/sprig/v3: v3.2.2
• github.com/blang/semver/v4: v4.0.0
• github.com/blendle/zapdriver: v1.3.1
• github.com/dgryski/go-gk: a69029f
• github.com/google/go-github/v27: v27.0.6
• github.com/google/mako: 122f8dc
• github.com/huandu/xstrings: v1.3.2
• github.com/influxdata/tdigest: a7d76c6
• github.com/kelseyhightower/envconfig: v1.4.0
• github.com/mitchellh/copystructure: v1.2.0
• github.com/mitchellh/reflectwalk: v1.0.2
• github.com/prometheus/statsd_exporter: v0.21.0
• github.com/shopspring/decimal: v1.2.0
• github.com/tsenart/vegeta/v12: v12.8.4
• github.com/vmware-tanzu/net-operator-api: b0dc6c2
• github.com/vmware-tanzu/vm-operator-api: 6ec913d
• github.com/vmware-tanzu/vm-operator/external/ncp: 0f4ab28
• github.com/vmware-tanzu/vm-operator/external/tanzu-topology: 0f4ab28
• go.uber.org/automaxprocs: v1.4.0
• knative.dev/hack: e178598
• knative.dev/pkg: d2cdc68

Changed

• cloud.google.com/go/storage: v1.10.0 → v1.18.2
• contrib.go.opencensus.io/exporter/ocagent: v0.5.0 → 05415f1
• contrib.go.opencensus.io/exporter/prometheus: v0.1.0 → v0.4.0
• github.com/Masterminds/semver/v3: v3.1.0 → v3.1.1
• github.com/antlr/antlr4/runtime/Go/antlr: b48c857 → ad29539
• github.com/docker/distribution: v2.7.1+incompatible → v2.8.1+incompatible
• github.com/evanphx/json-patch: v4.12.0+incompatible → v5.6.0+incompatible
• github.com/go-openapi/jsonreference: v0.19.5 → v0.19.6
• github.com/go-openapi/swag: v0.19.14 → v0.21.1
• github.com/google/cel-go: v0.9.0 → v0.10.0
• github.com/google/go-cmp: v0.5.6 → v0.5.7
• github.com/hashicorp/mdns: v1.0.4 → v1.0.1
• github.com/hashicorp/memberlist: v0.3.0 → v0.2.2
• github.com/mailru/easyjson: v0.7.6 → v0.7.7
• github.com/miekg/dns: v1.1.41 → v1.1.26
• github.com/openzipkin/zipkin-go: v0.1.6 → v0.3.0
• github.com/pascaldekloe/goe: v0.1.0 → 57f6aae
• github.com/spf13/cobra: v1.3.0 → v1.4.0
• github.com/yuin/goldmark: v1.4.0 → v1.4.1
• go.uber.org/atomic: v1.7.0 → v1.9.0
• golang.org/x/crypto: ceb1ce7 → 8634188
• golang.org/x/net: 58aab5e → 27dd868
• golang.org/x/oauth2: d3ed0bb → 6242fa9
• golang.org/x/sys: da31bd3 → 22a9840
• golang.org/x/time: 1f47c86 → 0e9765c
• golang.org/x/tools: d4cc65f → v0.1.8
• google.golang.org/genproto: 3a66f56 → ae0e222
• google.golang.org/grpc: v1.42.0 → v1.44.0
• k8s.io/api: v0.23.0 → v0.23.4
• k8s.io/apiextensions-apiserver: v0.23.0 → v0.23.4
• k8s.io/apimachinery: v0.23.0 → v0.23.4
• k8s.io/apiserver: v0.23.0 → v0.23.4
• k8s.io/cli-runtime: v0.23.0 → v0.23.4
• k8s.io/client-go: v0.23.0 → v0.23.4
• k8s.io/cluster-bootstrap: v0.23.0 → v0.23.4
• k8s.io/code-generator: v0.23.0 → v0.23.4
• k8s.io/component-base: v0.23.0 → v0.23.4
• k8s.io/component-helpers: v0.23.0 → v0.23.4
• k8s.io/gengo: 485abfe → c02415c
• k8s.io/kube-openapi: e816edb → 4241196
• k8s.io/kubectl: v0.23.0 → v0.23.4
• k8s.io/metrics: v0.23.0 → v0.23.4
• k8s.io/utils: cb0fa31 → 3a6ce19
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.25 → v0.0.27
• sigs.k8s.io/cluster-api-provider-vsphere: v1.0.2 → v1.1.0
• sigs.k8s.io/cluster-api: v1.1.1 → v1.1.3
• sigs.k8s.io/controller-runtime: v0.11.0 → v0.11.1
• sigs.k8s.io/json: c049b76 → 9f7c6b3
• sigs.k8s.io/structured-merge-diff/v4: v4.2.0 → v4.2.1

Removed

• github.com/DataDog/datadog-go: v3.2.0+incompatible
• github.com/circonus-labs/circonus-gometrics: v2.3.1+incompatible
• github.com/circonus-labs/circonusllhist: v0.1.3
• github.com/tv42/httpunix: b75d861

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.18.0...v0.19.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Feature

• Add the ability to have an init container to inject core DNS IP into /etc/resolv.conf for Kapp-Controller package. (#1328, @blc1996)

Bug or Regression

• Fix tanzu init and tanzu update command not respecting context-aware-cli-for-plugins feature flag (#1412, @anujc25)
• Fix bug to enable setting up proxy for cap* infrastructure controllers. (#1216, @saimanoj01)
• Fix cluster upgrade failure error for proxied environment related to config variable TKG_HTTP_PROXY_ENABLED not set (#1469, @anujc25)
• Fix error/warning displayed when CLIPlugin CRD is not installed with tanzu plugin commands (#1393, @anujc25)
• Fix the issue where where cluster upgrade doesn't timeout and stuck indefinitely (#1229, @prkalle)
• Fixed upgrade exits prematurely when upgrade does not involve a change in Kubernetes version (#1283, @anujc25)
• Made CLI backward compatible by supporting legacy directory structure with tanzu plugin install --local command (#1486, @anujc25)

Miscellaneous

• Add extra read only IAM permissions to support Tanzu Mission Control (#1343, @pydctw)
• Adds annotation (edition: ${EDITION}) to management cluster. Skip upgrade standard-package-repo addon when edition does not support it. (#1787, @navidshaikh)
• Allow only trusted registries when installing plugins from OCI source Fixed issue regarding installing plugins on internet restricted environment from OCI source (#1500, @anujc25)
• Bump kapp-controller version to 0.30.0 (#1197, @danniel1205)
• Creates namespace prior to package metadata check. This causes the package metadata check not fail as a result of non-existing namespace, specifically for packages made available as part of adding the package repository to a global namespace. (#1263, @maralavi)
• Fix tanzu config set env command to not be namespace-based (#1215, @anujc25)
• Fix issue with duplicate network paths in vSphere (#1489, @saimanoj01)
• Fixed issue with autoscaler deployment on clusters using k8s version v1.22. (#1390, @saimanoj01)
• Fixed: TKR status not being updated after mgmt cluster upgrade (#1520, @imikushin)
• Fixes a rare issue where cluster machines would be incorrectly rotated when performing an upgrade where the only change to the cluster was the name or path of the VM template. (#1495, @tenczar)
• Fixes the bug that cause segmentation fault on trying to access non existing SecretExport object (#1291, @maralavi)
• Increases kube-vip timeouts during the upgrade process (#1231, @saji-pivotal)
• Introduces ANTREA_DISABLE_UDP_TUNNEL_OFFLOAD for UDP tunnel offload feature configuration. (#1374, @knabben)
• Loosens version check when creating workload clusters. Management cluster and cli need not match in patch version. (#1501, @tenczar)
• Support for CSI 2.4.0 (#1210, @blc1996)
• Update CAPV to version v1.0.2 (#1373, @srm09)
• Updated ytt defaults to disable outbound load balancers when creating private clusters on Azure. (#1301, @saimanoj01)
• Validates filepaths to ensure that an archive cannot be unzipped outside the current directory (#1312, @saji-pivotal)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api-provider-azure: v1.0.0 → v1.0.1
• sigs.k8s.io/cluster-api-provider-vsphere: v1.0.1 → v1.0.2
• sigs.k8s.io/cluster-api/test: v1.0.0 → v1.0.1
• sigs.k8s.io/cluster-api: v1.0.0 → v1.0.1
• sigs.k8s.io/controller-runtime: v0.10.2 → v0.10.3

Removed

Nothing has changed.

For detailed changes in release v0.11, please refer to v0.11.0 release notes and v0.11.1 release notes

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.11.1...v0.11.2

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Feature

• Added capabilities component to packages/standalone directory to generate capabilities package bundle (#1573, @yharish991)

Other (Cleanup or Flake)

• Update the ytt module to use github.com/vmware-tanzu/carvel-ytt version v0.40.0 (#1734, @prkalle)

Miscellaneous

• Add 0.12.1 Pinniped package to bring in bug fix release for an incompatibility between the Pinniped CLI and Chrome v98+ that causes browser-based logins to fail. (#1675, @sabbey37)
• Bump kapp-controller to 0.30.1 and package template bug fix (#1733, @blc1996)
• CLI usage information now formats subcommand descriptions to be more readable. (#1627, @stmcginnis)
• ClusterBootstrap controller should watch for created secrets (#1691, @shivaani0505)
• Consolidates cluster proxy configuration in TanzuClusterBootstrap (#1639, @blc1996)
• Make cni selection using cluster class variable (#1649, @maralavi)
• Removed incorrect zsh completions instructions. No longer recommend using "source" (#1715, @jpmcb)
• Support avi controller version configuration (#1651, @chenlin07)
• Use TKR label to decide whether addon controller or cluster bootstrap controller should reconcile cluster (#1682, @maralavi)

Dependencies

Added

• github.com/ajeddeloh/go-json: 5ae6071
• github.com/antlr/antlr4/runtime/Go/antlr: b48c857
• github.com/danieljoos/wincred: v1.1.0
• github.com/flatcar-linux/container-linux-config-transpiler: v0.9.2
• github.com/flatcar-linux/ignition: v0.36.1
• github.com/google/cel-go: v0.9.0
• github.com/google/cel-spec: v0.6.0
• github.com/k14s/kbld: v0.32.0
• github.com/onsi/ginkgo/v2: v2.0.0
• github.com/pin/tftp: v2.1.0+incompatible
• github.com/rwcarlsen/goexif: 9e8deec
• github.com/sigma/bdoor: babf2a4
• github.com/sigma/vmw-guestinfo: 95dd412
• github.com/valyala/fastjson: v1.6.3
• github.com/vbatts/tar-split: v0.11.2
• github.com/vincent-petithory/dataurl: v1.0.0
• github.com/vmware-tanzu/carvel-imgpkg: v0.23.1
• github.com/vmware-tanzu/carvel-ytt: v0.40.0
• github.com/vmware/vmw-ovflib: 1f217b9
• go4.org: d4a0794
• sigs.k8s.io/json: c049b76

Changed

• github.com/BurntSushi/toml: v0.4.1 → v1.0.0
• github.com/Microsoft/go-winio: v0.5.0 → v0.5.1
• github.com/alecthomas/units: f65c72e → ff826a3
• github.com/aws/amazon-vpc-cni-k8s: v1.9.1 → v1.10.1
• github.com/aws/aws-lambda-go: v1.27.0 → v1.28.0
• github.com/containerd/stargz-snapshotter/estargz: v0.7.0 → v0.10.0
• github.com/coredns/corefile-migration: v1.0.13 → v1.0.14
• github.com/coreos/go-systemd: e64a0ec → d3cd4ed
• github.com/docker/cli: v20.10.7+incompatible → v20.10.10+incompatible
• github.com/docker/docker-credential-helpers: v0.6.3 → v0.6.4
• github.com/docker/docker: v20.10.9+incompatible → v20.10.12+incompatible
• github.com/evanphx/json-patch/v5: v5.5.0 → v5.6.0
• github.com/evanphx/json-patch: v4.11.0+incompatible → v4.12.0+incompatible
• github.com/getkin/kin-openapi: v0.66.0 → v0.76.0
• github.com/go-logr/logr: v0.4.0 → v1.2.2
• github.com/go-logr/zapr: v0.4.0 → v1.2.0
• github.com/gobuffalo/flect: v0.2.3 → v0.2.4
• github.com/golang/glog: 23def4e → v1.0.0
• github.com/google/go-containerregistry: v0.6.0 → v0.7.0
• github.com/google/goterm: 555d40f → fc88cf8
• github.com/hashicorp/go-version: v1.3.0 → v1.4.0
• github.com/klauspost/compress: v1.13.0 → v1.13.6
• github.com/olekukonko/tablewriter: v0.0.4 → v0.0.5
• github.com/onsi/gomega: v1.16.0 → v1.18.1
• github.com/prometheus/client_golang: v1.11.0 → v1.12.1
• github.com/prometheus/common: v0.31.1 → v0.32.1
• github.com/smartystreets/assertions: v1.0.0 → v1.2.0
• github.com/smartystreets/goconvey: v1.6.4 → v1.7.2
• github.com/urfave/cli: v1.22.2 → v1.22.4
• github.com/vdemeester/k8s-pkg-credentialprovider: v1.17.4 → v1.21.0-1
• github.com/vmware-tanzu/carvel-vendir: v0.23.0 → v0.24.0
• github.com/yuin/goldmark: v1.3.5 → v1.4.0
• go.etcd.io/etcd/client/v3: v3.5.0 → v3.5.1
• go.uber.org/goleak: v1.1.10 → v1.1.12
• go.uber.org/zap: v1.19.0 → v1.19.1
• golang.org/x/crypto: 089bfa5 → ceb1ce7
• golang.org/x/net: d2e5035 → 58aab5e
• golang.org/x/sys: 97ca703 → da31bd3
• golang.org/x/tools: v0.1.5 → d4cc65f
• gopkg.in/check.v1: 038fdea → 10cb982
• k8s.io/api: v0.22.2 → v0.23.0
• k8s.io/apiextensions-apiserver: v0.22.2 → v0.23.0
• k8s.io/apimachinery: v0.22.2 → v0.23.0
• k8s.io/apiserver: v0.22.2 → v0.23.0
• k8s.io/cli-runtime: v0.22.2 → v0.23.0
• k8s.io/client-go: v0.22.2 → v0.23.0
• k8s.io/cloud-provider: v0.17.4 → v0.21.0
• k8s.io/cluster-bootstrap: v0.22.2 → v0.23.0
• k8s.io/code-generator: v0.22.2 → v0.23.0
• k8s.io/component-base: v0.22.2 → v0.23.0
• k8s.io/component-helpers: v0.22.2 → v0.23.0
• k8s.io/klog/v2: v2.10.0 → v2.40.1
• k8s.io/kube-openapi: 94abced → e816edb
• k8s.io/kubectl: v0.22.2 → v0.23.0
• k8s.io/legacy-cloud-providers: v0.17.4 → v0.21.0
• k8s.io/metrics: v0.22.2 → v0.23.0
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.22 → v0.0.25
• sigs.k8s.io/cluster-api-provider-aws: v1.0.0 → v1.1.0
• sigs.k8s.io/cluster-api/test: v1.0.1 → v1.1.1
• sigs.k8s.io/cluster-api: v1.0.1 → v1.1.1
• sigs.k8s.io/controller-runtime: v0.10.3 → v0.11.0
• sigs.k8s.io/kustomize/api: v0.8.11 → v0.10.1
• sigs.k8s.io/kustomize/cmd/config: v0.9.13 → v0.10.2
• sigs.k8s.io/kustomize/kustomize/v4: v4.2.0 → v4.4.1
• sigs.k8s.io/kustomize/kyaml: v0.11.0 → v0.13.0
• sigs.k8s.io/structured-merge-diff/v4: v4.1.2 → v4.2.0

Removed

• github.com/anujc25/carvel-kbld: vendir
• github.com/k14s/ytt: 214258b
• github.com/urfave/cli/v2: v2.2.0
• github.com/ziutek/telnet: c3b780d
• go.hein.dev/go-version: v0.1.0
• k8s.io/sample-controller: v0.16.8

New Contributors

• @dependabot made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1693

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.17.0...v0.18.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Feature

• Added implmentation for tkr-infra-machine-webhook (#1638, @prkalle)

Bug or Regression

• Fix installing plugins with legacy directory structure on windows with tanzu plugin install --local (#1606, @anujc25)
• Retracted legacy tags v1.4.0-pre-alpha-1 and v1.4.0-pre-alpha-2 in go.mod. go list -m -versions will no longer list those tags and consumers trying to go get those tags will see a warning. (#1557, @rajathagasthya)

Miscellaneous

• Add base scaffolding directory structure for tkg and tkg-clusterclass management packages (#1609, @anujc25)
• ARM64 based instance types have been removed from lists of available instance types in the Kickstart UI (#1657, @miclettej)
• Add addons manager package in management package test result (#1474, @ggpaue)

  tanzu package repository list -A
  NAME              REPOSITORY                                                     TAG                                                                      STATUS               DETAILS  NAMESPACE
  tanzu-test        index.docker.io/pksoctopus/management                          sha256:466d09f3e3bd09397ac4c0830111ea8849b9b113a031815b6a5e8012fbde5280  Reconcile succeeded           default

  tanzu package available list -A
  NAME                                                DISPLAY-NAME                       SHORT-DESCRIPTION                                                                                                            LATEST-VERSION                NAMESPACE
  addons-manager.tanzu.vmware.com                     tanzu-addons-manager               This package provides TKG addons lifecycle management capabilities.                                                          0.16.0-dev                    default
  core-management-plugins.tanzu.vmware.com            core-management-plugins            CLIPlugin management                                                                                                         0.16.0-dev                    default
  featuregates.tanzu.vmware.com                       featuregates                       Feature management                                                                                                           0.16.0-dev                    default

• Added feature plugin as a context-aware plugin (#1619, @yharish991)
• Adds annotation (edition: ${EDITION}) to management cluster. (#1599, @joshrosso)
• Bumps containerd and image-spec to pick up CVE fixes (#1566, @PushkarJ)
• Compatibility file can now be set via config value rather than exclusively at build time. (#1605, @joshrosso)
• Convert CalicoConfig API spec to data values secret and add CalicoConfig controller (#1555, @maralavi)
• Create AntreaConfig API and controller (#1539, @shivaani0505)
• Create KappControllerConfig API and controller (#1553, @blc1996)
• Deploy management packages into bootstrap and management cluster under feature-flag (#1668, @anujc25)
• Discovered plugins will fail to install unless they are in a trusted location. (#1630, @giri-varma)
• Increases qps & burst values to avoid throttling messages (#1656, @maralavi)
• Make tkg and tkg-clusterclass composite management packages (#1624, @anujc25)
• Replace satori/go.uuid with existing dependency google/uuid (#1552, @PushkarJ)
• TanzuClusterBootstrap reconciler should add labels on cloned objects (#1635, @shivaani0505)
• Update tkgpackageclient to accept kubecontext and add sync operations (#1655, @anujc25)
• Updated Feature plugin to use config of a logged in Tanzu cluster (#1537, @yharish991)
• Verify the integrity of the CLI plugins on download (#1681, @giri-varma)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Microsoft/hcsshim: v0.8.21 → v0.8.23
• github.com/containerd/containerd: v1.5.7 → v1.5.9
• github.com/containerd/ttrpc: v1.0.2 → v1.1.0
• github.com/opencontainers/image-spec: v1.0.1 → v1.0.2

Removed

Nothing has changed.

New Contributors

• @PushkarJ made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1552
• @2022amanda made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1559
• @chandrareddyp made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1629

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.16.0...v0.17.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Package Changes

Antrea

The associated BoM with this release now bundles antrea-standard build as opposed to antrea build in earlier releases. This change neither requires change in tanzu CLI/plugins installation nor cluster lifecycle instructions.

Enhancement

• Add Support for REST based Discovery and GCP URI artifacts for CLI plugin discovery (#1358, @giri-varma)
• New plugins created using tanzu builder command now supports Go 1.17 and includes the latest tanzu-framework release as dependency. (#1527, @rajathagasthya)
• Tanzu framwork now uses Go 1.17 for all builds and language feature support. (#1446, @rajathagasthya)
• The CLI edition can now be set using the command "tanzu config set edition xxx", or manually in the configuration file using "edition: xxx" under the "cli" section. Valid values are "tkg", "tce" and "tce-standalone" (#774, @swalner-vmware)

Feature

• Added Feature plugin to operate on Features and FeatureGates (#889, @yharish991)

Documentation

• Add docs for guidance on updating CLI words. (#308, @iancoffey)

Bug or Regression

• Fix cluster upgrade failure error for proxied environment related to config variable TKG_HTTP_PROXY_ENABLED not set (#1469, @anujc25)
• Fix issue with deploying clusters to Azure government cloud (#1463, @saimanoj01)
• Made CLI backward compatible by supporting legacy directory structure with tanzu plugin install --local command (#1486, @anujc25)

Miscellaneous

• Add CalicoConfigSpec CRD and API types (#1511, @maralavi)
• Add a flag --generate-default-values-file to command tanzu package available get (#1422, @vijaykatam)
• Add support for dual stack ClusterIP Services when Antrea. (#1494, @tylerschultz)
• Add unit tests to validate AVI providers for the network separation feature. (#1530, @HanFa)
• Allow only trusted registries when installing plugins from OCI source Fixed issue regarding installing plugins on internet restricted environment from OCI source (#1500, @anujc25)
• Bug fix: Fix the issue that spinner messages being wiped out and redundant empty lines being printed. (#1473, @blc1996)
• Bug fix: fix erase of previous progress messages and redundant new lines in package plugin output (#1457, @blc1996)
• Fix issue with automatic bootstrap cluster creation when TKG_IP_FAMILY is set to "ipv6,ipv4" (#1487, @adobley)
• Fix issue with duplicate network paths in vSphere (#1489, @saimanoj01)
• Fixed: TKR status not being updated after mgmt cluster upgrade (#1520, @imikushin)
• Fixes a rare issue where cluster machines would be incorrectly rotated when performing an upgrade where the only change to the cluster was the name or path of the VM template. (#1365, @tenczar)
• Header lines in table output will no longer be formatted bold. (#1465, @stmcginnis)
• Issuer API resource in featuregates package has been upgraded to use v1 version. (#1455, @yharish991)
• Loosens version check when creating workload clusters. Management cluster and cli need not match in patch version. (#1501, @tenczar)
• Plugins using native shell completion will now offer suggestions for flag names (#1251, @scothis)
• This PR fixes secret plugin to not allow empty username or server (#1460, @maralavi)
• Yaml linter in github workflow (#1410, @aman556)

Dependencies

Added

• github.com/DataDog/datadog-go: v3.2.0+incompatible
• github.com/briandowns/spinner: v1.18.0
• github.com/circonus-labs/circonus-gometrics: v2.3.1+incompatible
• github.com/circonus-labs/circonusllhist: v0.1.3
• github.com/iancoleman/strcase: v0.2.0
• github.com/lyft/protoc-gen-star: v0.5.3
• github.com/tv42/httpunix: b75d861

Changed

• cloud.google.com/go/firestore: v1.6.0 → v1.6.1
• cloud.google.com/go: v0.93.3 → v0.99.0
• github.com/armon/go-metrics: f0300d1 → v0.3.10
• github.com/census-instrumentation/opencensus-proto: v0.2.1 → v0.3.0
• github.com/cncf/udpa/go: 5459f2c → 04548b0
• github.com/cncf/xds/go: aa0b789 → a8f9461
• github.com/envoyproxy/go-control-plane: cf90f65 → v0.10.1
• github.com/envoyproxy/protoc-gen-validate: v0.1.0 → v0.6.2
• github.com/googleapis/gax-go/v2: v2.1.0 → v2.1.1
• github.com/hashicorp/consul/api: v1.10.1 → v1.11.0
• github.com/hashicorp/go-cleanhttp: v0.5.1 → v0.5.2
• github.com/hashicorp/go-hclog: v0.12.0 → v1.0.0
• github.com/hashicorp/go-immutable-radix: v1.0.0 → v1.3.1
• github.com/hashicorp/mdns: v1.0.1 → v1.0.4
• github.com/hashicorp/memberlist: v0.2.2 → v0.3.0
• github.com/hashicorp/serf: v0.9.5 → v0.9.6
• github.com/mattn/go-colorable: v0.1.11 → v0.1.12
• github.com/miekg/dns: v1.1.26 → v1.1.41
• github.com/mitchellh/mapstructure: v1.4.2 → v1.4.3
• github.com/pascaldekloe/goe: 57f6aae → v0.1.0
• github.com/sagikazarmark/crypt: v0.1.0 → v0.3.0
• github.com/spf13/cobra: v1.2.1 → v1.3.0
• github.com/spf13/viper: v1.9.0 → v1.10.0
• go.etcd.io/etcd/api/v3: v3.5.0 → v3.5.1
• go.etcd.io/etcd/client/pkg/v3: v3.5.0 → v3.5.1
• go.etcd.io/etcd/client/v2: v2.305.0 → v2.305.1
• golang.org/x/oauth2: 2bc19b1 → d3ed0bb
• golang.org/x/sys: 2c5d950 → 97ca703
• google.golang.org/api: v0.56.0 → v0.62.0
• google.golang.org/genproto: c76a74d → 3a66f56
• google.golang.org/grpc: v1.41.0 → v1.42.0
• gopkg.in/ini.v1: v1.63.2 → v1.66.2
• sigs.k8s.io/cluster-api-provider-azure: v1.0.0 → v1.0.1

Removed

• github.com/alonyb/spinner: v1.12.7

New Contributors

• @aman556 made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1410
• @mayankbh made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1506

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.15.0...v0.16.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the legacy installation instructions.

Changes by Kind

Package Changes

Antrea

The associated BoM with this release now bundles antrea-standard build as opposed to antrea build in earlier releases. This change neither requires change in tanzu CLI/plugins installation nor cluster lifecycle instructions.

There are no new enhancements or bug fixes in this patch release compared to v0.10.0 release, check detailed v0.10.0 release notes.

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.10.0...v0.10.1

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Bug or Regression

• Adding management cluster upgrade version compatibility validation (#1293, @prkalle)
• Fix tanzu init and tanzu update command not respecting context-aware-cli-for-plugins feature flag (#1412, @anujc25)
• Fix error/warning displayed when CLIPlugin CRD is not installed with tanzu plugin commands (#1393, @anujc25)

Miscellaneous

• Added CAPD integration tests for telemetry (#1409, @maralavi)
• Assert conditional SEG names for AVI configmap in bootstrap clusters (#1451, @HanFa)
• CSI package fixes the upgrade issue for multi-AZ topology feature. (#1413, @blc1996)
• Nodes include secondary IP family when dual stack clusters are deployed on vSphere (#1199, @tylerschultz)
• Skip checking for autoscaler deployment, if cluster is created without autoscaler. (#1398, @saimanoj01)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

New Contributors

• @Akasurde made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1368

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.14.0...v0.15.0

Changes by Kind

Enhancement

• Experimental support for dualstack primary ipv6 (TKG_IP_FAMILY "ipv6,ipv4") (#1042, @tylerschultz)

API Change

• Introduced serviceAccountName field to Capability API to allow users to only query for resources they have access to. (#381, @yharish991)

Feature

• Add the ability to have an init container to inject core DNS IP into /etc/resolv.conf for Kapp-Controller package. (#1328, @blc1996)
• Support installing plugins with local filesystem when context-aware-cli-for-plugins feature is enabled The --local flag with the tanzu plugin command now only takes the single input directory instead of multiple directories as an input (#1278, @anujc25)

Documentation

• Make changes to the plugin implementation guide based on installing plugins from local source (#1363, @anujc25)

Bug or Regression

• Added missing ordering annotation to cliplugins CRD in the core-management-plugins package (#1389, @yharish991)
• Convert resource names to full paths when creating clusters on vSphere (#1349, @saimanoj01)
• Fix cluster patch failing after successful k8s nodes upgrade for management-cluster (#1308, @anujc25)
• Fix the upgrade issue when the clusters are configured with non-default api server port (#1362, @prkalle)
• Fixed upgrade exits prematurely when upgrade does not involve a change in Kubernetes version (#1283, @anujc25)
• Fixes an issue where the ssh key is not propagated to vsphere machine deployment 1 and 2 in prod plan clusters. (#1272, @tenczar)
• Fixes the issue where gen-publish-images-fromtar.sh script fails to use the certificate set in environment variable while copying the images to private registry. (#1202, @mjangi9292)
• The Capability CRD now allows specifying an empty group name in the GVR query to check for core Kubernetes resources. (#883, @rajathagasthya)

Miscellaneous

• Add CodeQL scan github action (#1295, @navidshaikh)
• Add extra read only IAM permissions to support Tanzu Mission Control (#1343, @pydctw)
• Add unit tests for ytt rendering of AVI related object. (#1317, @HanFa)
• Added validation checks for release artifacts (#1156, @rajaskakodkar)
• Adding Antrea capability to enable/disable UDP tunnel offload. (#1318, @knabben)
• Better make help. (#962, @mamachanko)
• Bump CAPA to v1.1.0 (#1209, @sedefsavas)
• Bump cluster-api-provider-aws version to v1.2.0 (#1354, @sedefsavas)
• Check Carvel packaging API before package plugin cmd executes (#1242, @ggpaue)
• Creates namespace prior to package metadata check. This causes the package metadata check not fail as a result of non-existing namespace, specifically for packages made available as part of adding the package repository to a global namespace. (#1263, @maralavi)
• Fix CPI that node IP could be null or inaccurate after VM is restarted (#1316, @lubronzhan)
• Fixed a panic in node-pool set when extra files are applied to kubeadmconfigtemplates (#1302, @tenczar)
• Fixed issue with autoscaler deployment on clusters using k8s version v1.22. (#1390, @saimanoj01)
• Fixes the bug that cause segmentation fault on trying to access non existing SecretExport object (#1291, @maralavi)
• Increases kube-vip timeouts during the upgrade process (#1231, @saji-pivotal)
• Introduces ANTREA_DISABLE_UDP_TUNNEL_OFFLOAD for UDP tunnel offload feature configuration. (#1374, @knabben)
• Replacing the github.com/dgrijalva/jwt-go with golang-jwt. (#1266, @pgandigesang)
• Update CAPV to version v1.0.2 (#1373, @srm09)
• Updated ytt defaults to disable outbound load balancers when creating private clusters on Azure. (#1301, @saimanoj01)
• Validates filepaths to ensure that an archive cannot be unzipped outside the current directory (#1312, @saji-pivotal)

Dependencies

Added

• github.com/alonyb/spinner: v1.12.7
• github.com/golang-jwt/jwt: v3.2.2+incompatible

Changed

• sigs.k8s.io/cluster-api-provider-vsphere: v1.0.1 → v1.0.2

Removed

• github.com/briandowns/spinner: v1.16.0

New Contributors

• @sedefsavas made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1209
• @jhvhs made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/865
• @lubronzhan made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1316
• @pydctw made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1343
• @ZihanJiang96 made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1367

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.13.0...v0.14.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Deprecation

API-driven context aware plugin discovery has been enabled which adds context-awareness to the CLI in the Tanzu CLI

Following are the deprecated commands to install plugins

tanzu plugin repo update -b tanzu-cli-framework core
tanzu plugin install --local tanzu/cli all

and replaced by

tanzu plugin sync

which installs plugins from the OCI bucket.

Warning:

With context-aware plugin discovery enabled by default, context-aware plugins like (cluster, kubernetes-release) are discovered when a user is logged in to a management cluster. Users logged in to the management-cluster version before v1.5.0 will require to upgrade their management-cluster to use cluster and kubernetes-release commands.

Bug or Regression

• Fix cluster lifecycle features for AWS provider, issue: #1355 fix: #1354

Miscellaneous

• Bump cluster-api-provider-aws version to v1.2.0 (#1354, @sedefsavas)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.13.0...v0.13.1

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Known Issues

• Cluster lifecycle features for AWS provider are not functioning as expected. Please refer issue #1355.

Changes by Kind

Deprecation

API-driven context aware plugin discovery has been enabled which adds context-awareness to the CLI in the Tanzu CLI

Following are the deprecated commands to install plugins

tanzu plugin repo update -b tanzu-cli-framework core
tanzu plugin install --local tanzu/cli all

and replaced by

tanzu plugin sync

which installs plugins from the OCI bucket.

Warning:

With context-aware plugin discovery enabled by default, context-aware plugins like (cluster, kubernetes-release) are discovered when a user is logged in to a management cluster. Users logged in to the management-cluster version before v1.5.0 will require to upgrade their management-cluster to use cluster and kubernetes-release commands.

Bug or Regression

• Fix issue with enabling ceip for tkg management clusters (#1257, @saimanoj01)
• Fix the issue where where cluster upgrade doesn't timeout and stuck indefinitely (#1229, @prkalle)
• Version prefix matching changed to exact match when updating TKR compatibility condition (#1139, @prkalle)

Miscellaneous

• Bump ClusterAPI to v1.0.1 (#1158, @ykakarap)
• Makes the bootstrap kubeadm token TTL value configurable (#1255, @srm09)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.0.0 → v1.0.1
• sigs.k8s.io/cluster-api: v1.0.0 → v1.0.1
• sigs.k8s.io/controller-runtime: v0.10.2 → v0.10.3

Removed

Nothing has changed.

New Contributors

• @garrying made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1225

Full Changelog: https://github.com/vmware-tanzu/tanzu-framework/compare/v0.12.0...v0.13.0

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Deprecation

API-driven context aware plugin discovery has been enabled which adds context-awareness to the CLI in the Tanzu CLI

From v0.11.1 release, following are the deprecated commands to install plugins

tanzu plugin repo update -b tanzu-cli-framework core
tanzu plugin install --local tanzu/cli all

and replaced by

tanzu plugin sync

which installs plugins from the OCI bucket.

Warning:

With context-aware plugin discovery enabled by default, context-aware plugins like (cluster, kubernetes-release) are discovered when a user is logged in to a management cluster. Users logged in to the management-cluster version before v1.5.0 will require to upgrade their management-cluster to use cluster and kubernetes-release commands.

Bug or Regression

• Fix bug to enable setting up proxy for cap* infrastructure controllers. (#1216, @saimanoj01)

Miscellaneous

• Added documentation regarding API-driven plugin discovery (#1188, @anujc25)
• Bump kapp-controller version to 0.30.0 (#1197, @danniel1205)
• Fix tanzu config set env command to not be namespace-based (#1215, @anujc25)
• Support for CSI 2.4.0 (#1210, @blc1996)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Deprecation

API-driven context aware plugin discovery has been enabled which adds context-awareness to the CLI in the Tanzu CLI

Following are the deprecated commands to install plugins

tanzu plugin repo update -b tanzu-cli-framework core
tanzu plugin install --local tanzu/cli all

and replaced by

tanzu plugin sync

which installs plugins from the OCI bucket.

Warning:

With context-aware plugin discovery enabled by default, context-aware plugins like (cluster, kubernetes-release) are discovered when a user is logged in to a management cluster. Users logged in to the management-cluster version before v1.5.0 will require to upgrade their management-cluster to use cluster and kubernetes-release commands.

Bug or Regression

• Fix windows plugin invocation issue on windows environments (#1205, @anujc25)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Deprecation

API-driven context aware plugin discovery has been enabled which adds context-awareness to the CLI in the Tanzu CLI

Following are the deprecated commands to install plugins

tanzu plugin repo update -b tanzu-cli-framework core
tanzu plugin install --local tanzu/cli all

and replaced by

tanzu plugin sync

which installs plugins from the OCI bucket.

Warning:

With context-aware plugin discovery enabled by default, context-aware plugins like (cluster, kubernetes-release) are discovered when a user is logged in to a management cluster. Users logged in to the management-cluster version before v1.5.0 will require to upgrade their management-cluster to use cluster and kubernetes-release commands.

Enhancement

• Added support to configure cluster API server port by setting the configuration parameter CLUSTER_API_SERVER_PORT. This configuration parameter would be ignored when AVI loadbalancer is used for vSphere (#1023, @prkalle)
• UI includes new checkbox to allow bypassing SSL Thumbprint Verification when connecting to your vCenter server (#1090, @miclettej)

Feature

• Add cliplugins and standalone-cliplugins management packages (#1051, @anujc25)
• Added ClusterResourceSet resources to create management package repository and to install featuregates package (#1046, @yharish991)
• Added package tooling to add management packages and added featuregates package (#975, @yharish991)
• Added support for OCI based plugin discovery and distribution for CLIPlugin discovery (#1043, @anujc25)
• Added tooling to create a single management package bundle. (#1053, @yharish991)
• Adds support for enabling TMC integration using ENABLE_TMC_CLOUD_PROVIDER_PERMISSIONS=true as well as adding the generate-cloudformation-template subcommand to management-cluster permissions aws, which will allow users to apply CloudFormation by themselves, or convert the template into IAM policies or Terraform. (#1054, @randomvariable)
• Enabled API-driven CLIPlugin discovery by default. The change makes tanzu CLI context-aware (#1144, @anujc25)
• Implement CLIPlugin discovery source CRUD commands for managing discovery sources (#950, @anujc25)
• Refactored package tooling to support building individual packages (#1061, @yharish991)
• Support set/unset environment variables through tanzu config file (#1086, @anujc25)

Bug or Regression

• Fixed FeatureGates package installation by applying ordering rules to FeatureGates RBAC resources (#1080, @yharish991)
• Fixed issue where azure management cluster identity secret is not moved during pivot operation causing the incorrect cluster status (#1182, @prkalle)
• Package cert-manager v1.5.3 manifests along with the providers. (#1162, @saimanoj01)
• This changes to wait for AKO statefulset annotations instead of status for AKO cleanup AVI resources because of AKO k8s 1.22 fixing. (#1159, @XudongLiuHarold)
• Update TKR, Capabilities, Features, FeatureGates to use v1 CustomResourceDefintion and StorageClasses for Kubernetes v1.22 compatibility (#1092, @yharish991)
• Windows nodes will support reboot. (#990, @hxietkg)

Miscellaneous

• Bumped Carvel tools version to be in sync with the TKG BOM (#1089, @yharish991)

• Add config variables to disable outbound load balancers for Azure private clusters. (#1170, @saimanoj01)

• Add prompt for asking user content when secret is being added and secretexport of the same name exists before. (#1088, @shivaani0505)

• Added scaling suport for TKGS Tanzu Kubrenets clustre with v1alpha2 API version (#1045, @prkalle)

• Adds a new flag to cluster node-pool set --machine-deployment-base This flag allows a user to specify an explicit MachineDeployment as the base from which a new node pool will be created. (#1074, @tenczar)

• Antrea 1.2.3 support for ClusterResourceSet (#979, @knabben)

• Azure VMs with 4 or more CPUs that support Accelerated Networking will now have this enabled by default. (#1025, @stuartpreston)

• Bump CPI to version 1.22.3 (#1118, @nicolehanjing)

• Bump capi core to v1beta1

  • update capi/capa/capz/capv to v1.0.0
  • update controller-runtime to v0.10.2
  • rename --metrics-addr to --metrics-bind-addr and --leader-election to --leader-elect to align with cluster-api for addons-manager (#927, @saimanoj01)

• Bump kapp controller to version 0.28.0 (#1012, @shivaani0505)

• Experimental dual-stack functionality can be enabled with a feature flag. (#1013, @adobley)

• Fixes several node pool related bugs and increases stability of node pool feature. (#1038, @tenczar)

• Node pools on vSphere now properly set ip family and nameservers using properties tkgIPFamily and nameservers (#1117, @tenczar)

• Removes functionality for a TKG cluster to register to TMC using the Tanzu CLI (#1022, @saji-pivotal)

• Set priorityClassName: system-node-critical in CPI daemonset (#1149, @nicolehanjing)

• Supports deployment of workload clusters across multiple azs on vsphere Introduces multiple machine deployments (md-1, md-2) for production clusters - This aligns with the machine deployment strategy used for AWS and Azure. (#1108, @saji-pivotal)

• Updated CLIPlugin to use v1 CustomResourceDefintion (#1101, @anujc25)

• Updates secret registry README to add the workflow for adding a private package repository using package and secret plugins (#1034, @maralavi)

• When deploying a regional cluster in a non-internet facing VPC, the AWS ELB scheme is now correctly set to internal. (#1109, @randomvariable)

• Windows nodes will have their Windows Update service disabled to avoid unnecessary reboots. (#1083, @stuartpreston)

Dependencies

Added

Changed

Removed

New Contributors

• @stuartpreston made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1025
• @4everming made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/901
• @nicolehanjing made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/1118

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Bootstrap clusters will be dual-stack when deploying a dual-stack management-cluster. (#819, @christianang)

Feature

• Added support for local discovery and artifact distribution for CLIPlugin Discovery Implemented tanzu builder publish command to publish artifacts and resources for local discovery and distribution (#972, @anujc25)
• Implemented tanzu plugin sync command to auto-download available plugin for based on CLIPlugin discovery (#1011, @anujc25)

Bug or Regression

• Kube-vips pamameters in vsphere overlay updated to match new recommended values. (#987, @srm09)

Other (Cleanup or Flake)

• This is an internal refactor; it does not provide new functionality to the user. The TCE edition will want to modify their standalone version. Instead of specifying a build edition of tce-standalone, they should use the build edition of tce and during installation run the command tanzu config set features.management-cluster.standalone-cluster-mode true (#952, @swalner-vmware)

Miscellaneous

• "tanzu package available list" command will show the latest package version from the ouput. (#948, @danniel1205)
• Changed to make "package install" and "package repository add" idempotent. Improved "package delete" experience by explicitly naming any related resources being deleted and removing the misleading resource deletion message (#983, @maralavi)
• Check values file exist before package install & update command executes (#915, @ggpaue)
• Increases default poll timeout value to prevent failure in package installation (due to time out) when a package installs many other packages (#1020, @maralavi)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

New Contributors

• @flawedmatrix made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/986

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Added nodepool CRUD operation support for TKGS(vSphere with Kubernetes service) provider (#905, @prkalle)
• Docker pre-requisite checks now validate that user has sufficient memory and CPU settings selected. Minimum CPU required is 4 and minimum Total Memory is 6GB. (#831, @miclettej)
• If there's only one possible choice, preselect it and save the user some time (#919, @raymondz1)
• Kickstart UI now includes an EXPORT CONFIGURATION button on the configuration review page. (#911, @swalner-vmware)

Miscellaneous

• Ability to provide TMC registration URL has been removed from all provider workflows in Kickstart UI (#995, @miclettej)
• Adds secret plugin to the default plugin list (#957, @maralavi)
• Calico 3.19.1 support for ClusterResourceSet (#989, @12345lcr)
• Optimize cluster upgrade to reduce addons compatibility issues (#959, @blc1996)
• Removed the deprecated "config show" command. Use config get as an alternative. (#964, @yharish991)
• Update Scale API to accept a node-pool name, which will scale just the desired node-pool to the desired number of replicas. (#906, @tenczar)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

New Contributors

• @HanFa made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/821

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Added CONTROL_PLANE_NODE_NAMESERVERS and WORKER_NODE_NAMESERVERS cluster configuration variable. This allows the user to specify a comma-delimited list of DNS servers to be configured on the control plane and worker node VMs respectively. This is currently supported on vSphere only. (#834, @christianang)
• Added support for cluster lifecycle operations on v1alpha2 based TKGS clusters (#759, @prkalle)
• Tanzu config set features.. <true|false> sets feature flags for a given plugin. tanzu config set features.global. <true|false> sets feature flags for the entire cli. (#841, @swalner-vmware)

Bug or Regression

• Added check to waits for control-plane nodes to be ready as part of WaitForClusterReady implementation (#760, @anujc25)
• Allow adding custom root CA certificate for proxy environments with TKG_PROXY_CA_CERT. TKG_PROXY_CA_CERT takes precedence over TKG_CUSTOM_IMAGE_REPOSITORY_CA_CERTIFICATE for the custom registry. (#918, @anujc25)

Miscellaneous

• Added integration tests for secret plugin, made secret plugin add operation idempotent and changed --server-url flag for "tanzu secret registry add" to --server (#894, @maralavi)
• Deploy secretgen controller as new core addon in tanzu-system namespace when creating or upgrading clusters (#832, @shivaani0505)
• Ship compressed release artifacts, zip bundle for Windows and gzip bundles for macOS/Linux. (#922, @navidshaikh)
• The CLI plugin "imagepullsecret" has been renamed to "secret". Please use "tanzu plugin delete imagepullsecret" to delete the obsolete plugin. (#810, @maralavi)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

New Contributors

• @mamachanko made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/897
• @yminnew made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/888

Tanzu CLI Installation Instructions

If you are installing Tanzu CLI using the artifacts published as part of this release, please follow the instructions.

Changes by Kind

Enhancement

• Added Kickstart UI supports selection of IP family (IPv4 or IPv6) on vSphere. Once a selection is made, UI form validation for the selected IP family is enabled. Default IP family selection is IPv4. (#775, @raymondz1)

Bug or Regression

• Fix the template file download issue when CLI is executed first time, caused due to the provider config from TKG config fie is not updated after the providers are downloaded (#776, @prkalle)
• Only TKrs with Compatible=True status condition are considered as available updates. (#492, @imikushin)

Miscellaneous

• Added CLIPlugin API definition, Updated catalog API to cache plugin info with server association (#806, @anujc25)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

New Contributors

• @LappleApple made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/801
• @vmw-larry-yu made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/790
• @12345lcr made their first contribution in https://github.com/vmware-tanzu/tanzu-framework/pull/708