Tanzu Standard Repository v2023.10.16 Release Notes

These release notes apply to packages in the Tanzu Standard v2023.10.16 package repository, which is released around the same date as and compatible with Tanzu Kubernetes Grid (TKG) v2.3.1 and Kubernetes v1.24-1.26.

Package version compatibility on workload clusters is based on their Kubernetes version, not the vSphere with Tanzu version of their Supervisor or the TKG version of their standalone management cluster.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

Cert-manager v1.11.1

What’s New

Supported Versions
TKG version jetstack_cert-manager version VMware cert-manager package version Kubernetes version compatibility
v2.3.1, v2.3.0 v1.11.1 v1.11.1+vmware.1 v1.21-1.27

Component Versions

cert manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.11.1
  • quay.io/jetstack/cert-manager-controller:v1.11.1
  • quay.io/jetstack/cert-manager-webhook:v1.11.1
  • quay.io/jetstack/cert-manager-acmesolver:v1.11.1

Deprecations

The following cert manager versions are deprecated in TKG v2.3:

  • v1.5.3
  • v1.7.2
  • v1.10.2

Contour v1.24.5

What’s New

  • See the release notes for Contour v1.24.5:
  • You can configure Envoy to install as a Deployment with a specified number of replicas rather than as a DaemonSet (default), using data values like the following: 
    envoy: 
  workload: 
    type: Deployment 
    replicas: 3

  • You can specify resource requests or limits for each container within the Contour and Envoy workloads, using data values like the following:

    contour: 
  resources: 
    contour: 
      requests: 
        cpu: 250m 
        memory: 128Mi 
      limits: 
        cpu: 1 

        memory: 512Mi
envoy:
  resources:
    envoy:
# include requests and limits as desired
    shutdown-manager:
# include requests and limits as desired
  • data-values file configuration values are verified. Specifying an unsupported value in the data values results in an error.

Supported Versions
TKG version contour version VMware contour package version Kubernetes version compatibility
v2.3.1 v1.24.5 v1.24.5+vmware.1-tkg.1 v1.24-1.26
v2.3.0 v1.24.4 v1.24.4+vmware.1-tkg.1 v1.24-1.26

Supported Kubernetes Versions

Contour v1.24.4 is supported on Kubernetes v1.24-v1.26. See the Contour Compatibility Matrix.

Deprecations

  • All versions of Contour prior to v1.24.4 have been removed from Tanzu Standard repository v2023.7.13.
  • Contour package data-values files no longer accept null values. For any configuration field with a value set to null, you should omit the value entirely.

External-csi-snapshot-webhook v6.1.0

What’s New

  • external-csi-snapshot-webhook is a new package for TKG v2.3
  • TKG v2.3 with a vSphere 8.0U2 Supervisor supports CSI snapshots for Supervisor and the workload clusters it deploys, but you first need to explicitly install external-csi-snapshot-webhook v6.1.0 using the Tanzu CLI.

Supported Versions
TKG version external-csi-snapshot-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
v2.3.0 6.1.0 1.18 - latest 1.24

Dependencies

  • external-csi-snapshot-webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

external-csi-snapshot-webhook contains the following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

External DNS v0.13.4

What’s New

  • See the External DNS v0.13.4 release notes
  • New createNamespace configuration field. Set to true to create the namespace that external-dns components are installed in. If set to false, package components install into an existing namespace.

Supported Versions
TKG version external-dns version VMware external-dns package version Kubernetes version compatibility
v2.3.1, v2.3.0 v0.13.4 v0.13.4+vmware.2-tkg.2 v1.24-1.26

Fluent-bit v2.1.2

What’s New

Supported Versions
TKG version fluent-bit version VMware fluent-bit package version Kubernetes version compatibility
v2.3.1, v2.3.0 v2.1.2 v2.1.2+vmware.2-tkg.1 v1.24-1.26

Limitations / Known Issues

  • Does not support AWS credential environment variables in the fluent-bit package ConfigMap for accessing AWS S3.
    • AWS credentials support is planned for a future release.

Fluxcd controllers

What’s New

See the following Fluxcd controller package release notes:

Supported Versions
TKG version FluxCD controller VMware package version Kubernetes version compatibility
v2.3.1, v2.3.0 fluxcd-helm-controller v0.21.0+vmware.1-tkg.1 v1.24-1.26
v2.3.1, v2.3.0 fluxcd-kustomize-controller v0.24.4+vmware.1-tkg.1 v1.24-1.26
v2.3.1, v2.3.0 fluxcd-source-controller v0.33.0+vmware.2-tkg.1 v1.24-1.26

Grafana v9.5.1

What’s New

Supported Versions
TKG version grafana version VMware grafana package version Kubernetes version compatibility
v2.3.1 v9.5.1 v9.5.1+vmware.2-tkg.3 v1.24-1.26
v2.3.0 v9.5.1 v9.5.1+vmware.2-tkg.1 v1.24-1.26

Component Versions

Grafana v9.5.1 contains the following component image versions:

  • grafana/grafana:9.5.1
  • kiwigrid/k8s-sidecar:1.22.0

Harbor v2.8.4

What’s New

  • See Harbor v2.8.4 release notes
  • Due to CVEs, TKG v2.3 compatibility with the following Harbor versions has been removed:
    • v2.2.3_vmware.1-tkg.1
    • v2.2.3_vmware.1-tkg.2
    • v2.3.3_vmware.1-tkg.1
    • v2.5.3_vmware.1-tkg.1
    • v2.7.1_vmware.1-tkg.1

Supported Versions
TKG version harbor version VMware harbor package version Kubernetes version compatibility
v2.3.1 v2.8.4 v2.8.4+vmware.1-tkg.1 v1.24-1.26
v2.3.0 v2.8.2 v2.8.2+vmware.2-tkg.1 v1.24-1.26

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Multus-CNI v4.0.1

What’s New

  • Introduces a thick-plugin deployment and architecture. See Multus-CNI v4.0.1 new feature

  • Changes default values as follows:

    namespace: kube-system 
#! DaemonSet related configuration 
daemonset: 
  resources: 
    limits: 
      cpu: 100m 
      memory: 50Mi 
    requests: 
      cpu: 100m 
      memory: 50Mi 
configmap: 
  cniVersion: 0.3.1 
  multusConfigFile: auto

Supported Versions
TKG version multus-cni version VMware multus-cni package version Kubernetes version compatibility
v2.3.1, v2.3.0 v2.1.2 v4.0.1+vmware.1-tkg.2 v1.24-1.26

Prometheus v2.43.0

What’s New

Supported Versions
TKG version prometheus version VMware prometheus package version Kubernetes version compatibility
v2.3.1 v2.43.0 v2.43.0+vmware.4-tkg.1 v1.24-1.26
v2.3.0 v2.43.0 v2.43.0+vmware.1-tkg.1 v1.24-1.26

Component Versions

Prometheus v2.43.0 contains the following component image versions:

  • prom/prometheus:v2.43.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.5.1
  • jimmidyson/configmap-reload:v0.8.0
  • bitnami/kube-state-metrics:2.8.2
  • quay.io/prometheus/node-exporter:v1.5.0

Whereabouts v0.6.1

What’s New

  • Supports ipRanges for configuring dual-stack IP assigning; see Example IPv6 Config in the Whereabouts repo README.

Supported Versions
TKG version whereabouts version VMware whereabouts package version Kubernetes version compatibility
v2.3.1, v2.3.0 v0.6.1 v0.6.1+vmware.2-tkg.1 v1.24-1.26
check-circle-line exclamation-circle-line close-line
Scroll to top icon