Tanzu Standard Repository v2023.11.21 Release Notes

These release notes apply to packages in the Tanzu Standard v2023.11.21 package repository, which is released around the same date as and compatible with Tanzu Kubernetes Grid (TKG) v2.4.1 and Kubernetes v1.25-1.27.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

Supported TKr Versions

Package version compatibility on workload clusters is based on their Kubernetes version, not the vSphere with Tanzu version of their Supervisor or the TKG version of their standalone management cluster.

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.27, v1.26, and v1.25 as follows:

Package Package Version Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs Kubernetes v1.25 TKrs
Cert Manager
cert-manager		 1.12.2+vmware.1-tkg.1 ✔ ✔ ✔
1.11.1+vmware.1-tkg.1 ✔ ✔ ✔
Cluster Autoscaler
cluster-autoscaler		 1.27.2+vmware.1-tkg.3 ✔ ✔ ✔
1.26.2+vmware.1-tkg.2 ✔ ✔ ✔
1.25.1+vmware.1-tkg.2 ✔ ✔ ✔
Contour
contour		 1.25.2+vmware.1-tkg.1 ✔ ✔ ✔
1.24.5+vmware.1 ✔ ✔ ✔
External CSI Snapshot Validation Webhook
external-csi-snapshot-webhook		 6.1.0+vmware.1-tkg.3 ✔ ✔ ✔
External DNS
external-dns		 0.13.4+vmware.2-tkg.2 ✔ ✔ ✔
Fluent Bit
fluent-bit		 2.1.6+vmware.1-tkg.1 ✔ ✔ ✔
FluxCD Helm Controller
fluxcd-helm-controller		 0.28.1+vmware.1-tkg.3 ✔ ✔ ✔
FluxCD Kustomize Controller
fluxcd-source-controller		 0.32.0+vmware.1-tkg.3 ✔ ✔ ✔
FluxCD Source Controller
fluxcd-source-controller		 0.36.1+vmware.2 ✔ ✔ ✔
0.33.0+vmware.2 ✔ ✔ ✔
Grafana
grafana		 10.0.1+vmware.1-tkg.1 ✔ ✔ ✔
Harbor
harbor		 2.8.4+vmware.1-tkg.1 ✔ ✔ ✔
2.8.2+vmware.2-tkg.1 ✔ ✔ ✔
Multus CNI
multus-cni		 4.0.1+vmware.1-tkg.2 ✔ ✔ ✔
3.8.0+vmware.3-tkg.1 ✔ ✔ ✔
Prometheus
prometheus		 2.45.0+vmware.1-tkg.1 ✔ ✔ ✔
2.37.0+vmware.3-tkg.1 ✔ ✔ ✔
2.36.2+vmware.1-tkg.1 ✖ ✖ ✔
vSphere PV CSI Webhook
vsphere-pv-csi-webhook		 ✔* ✔ ✔*
Whereabouts
whereabouts		 0.6.1+vmware.2-tkg.2 ✔ ✔ ✔
0.5.4+vmware.2-tkg.1 ✔ ✔ ✔

* Expected compatibility

cert-manager v1.12.2

What’s New

Supported Versions
TKG version jetstack_cert-manager version vmware cert-manager package version Kubernetes version compatibility
2.4 v1.12.2 v1.12.2+vmware.1-tkg.1 1.21-1.27

Image Versions

cert-manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4. See Supported Releases in the cert-manager documentation.

Contour v1.25.2

What’s New

Included versions:

  • Contour v1.25.2
    • See the release notes for v1.25.0-2:
  • Contour v1.24.5

Supported Versions

  • Contour v1.25.2 is supported on Kubernetes v1.25-v1.27.
  • Contour v1.24.5 is supported on Kubernetes v1.24-v1.26.

See the Contour Compatibility Matrix.

Deprecations

  • The envoy.service.loadBalancerIP configuration field is deprecated in the Contour v1.25.2 package schema. Use cloud provider-specific Service annotations instead.

External CSI Snapshot Validation Webhook v6.1.0

What’s New

  • vSphere 8.0U2 enables External CSI snapshot validation support for vSphere with Tanzu Supervisor and its workload clusters.
    • Before you can use CSI snapshot validation on a workload cluster, you need to manually install the components external-csi-snapshot-webhook and snapshot-validation-webhook on the cluster using the Tanzu CLI.
    • As of TKG v2.3, the components csi-snapshotter sidecar and snapshot-controller, which CSI snapshot support also requires, are pre-installed on newly-created workload clusters and need not be installed manually.
    • For details, see Snapshot Validation Webhook in the Kubernetes CSI Developer Documentation.

Image Versions

Snapshot Validation Webhook v6.1.0 contains following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

Supported Versions
TKG version external-csi-snapshot-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
2.4.1, 2.4.0 6.1.0 1.18 - latest 1.26
2.3.0 6.1.0 1.18 - latest 1.24

Dependencies

  • external-csi-snapshot-webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

external-csi-snapshot-webhook contains the following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

External DNS v0.13.4

What’s New

  • No change; same version used since TKG v2.3. See External DNS v0.13.4 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.1 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: fluxcd-source-controller version is unchanged since v2023.9.19, released with TKG v2.4.0; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.0. See FluxCD Controllers in the Tanzu Kubernetes Grid v2.3 Release Notes.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.8.4

What’s New

Supported Versions
TKG version Harbor version Compatible Kubernetes versions
2.4.1, 2.4.0 2.8.4 v1.25.10, v1.26.5, v1.27.2

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Multus-CNI v4.0.1

  • No change; same version used since TKG v2.3. See Multus CNI v4.0.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

vSphere PV CSI Webhook v3.1.0

What’s New

  • vSphere 8.0U2 enables CSI snapshot support for vSphere with Tanzu Supervisor and its workload clusters.
    • The vSphere PV CSI webhook validates PV CSI operations executed in a Supervisor-deployed cluster, such as deleting or expanding a volume associated with snapshot.
    • To enable this validation, you need to manually install the vSphere PV CSI webhook using the Tanzu CLI.

Supported Versions
TKG version vsphere-pv-csi-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
2.4 3.1.0 1.18-latest 1.24, 1.26
  • vSphere PV CSI Webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

  • harbor-repo.vmware.com/cnsdataprotection/cloud-provider-vsphere/csi/ci/syncer:v3.1.0

Whereabouts v0.6.1

What’s New

  • No change; same version used since TKG v2.3.0. See Whereabouts v0.6.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.
check-circle-line exclamation-circle-line close-line
Scroll to top icon