Tanzu Standard Repository Release Notes

The Tanzu Standard repository contains services packaged in Carvel format that you can deploy to Tanzu Kubernetes Grid (TKG) clusters. Each datestamped repository version contains a set of package versions that are all compatible with the same Kubernetes versions.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

Note

As of v2.5, TKG does not support clusters on AWS or Azure. See the End of Support for TKG Management and Workload Clusters on AWS and Azure in the Tanzu Kubernetes Grid v2.5 Release Notes.

Tanzu Standard v2024.8.21

This version of the datestamped Tanzu Standard repo is compatible with Tanzu Kubernetes Grid v2.5.2 and contains the following component versions:

  • cert-manager
  • contour
    • v1.29.1+vmware.1-tkg.1 release notes
    • v1.28.5+vmware.1-tkg.1
    • v1.27.4+vmware.1-tkg.1
  • external-dns
    • v0.14.2+vmware.1-tkg.1 release notes
    • v0.13.6+vmware.2-tkg.1
    • v0.12.2+vmware.8-tkg.1
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.6-tkg.1 release notes
    • v0.24.4+vmware.3-tkg.1
    • v0.33.0+vmware.3-tkg.1
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.2-tkg.1 release notes
    • v0.32.0+vmware.3-tkg.1
    • v0.24.4+vmware.3-tkg.1
  • fluxcd-helm-controller
    • v0.36.2+vmware.2-tkg.1 release notes
    • v0.28.1+vmware.3-tkg.1
    • v0.36.2+vmware.2-tkg.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
    • v1.30.0+vmware.2-tkg.1 release notes
    • v1.29.0+vmware.2-tkg.1
    • v1.28.0+vmware.1-tkg.2
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.7.2

Component versions packaged in this datestamped Tanzu Standard repo:

  • cert-manager
  • contour
    • v1.28.2+vmware.1-tkg.1 release notes
    • v1.27.1+vmware.1-tkg.1
    • v1.26.2+vmware.1-tkg.1
  • external-dns
    • v0.13.6+vmware.1-tkg.1 release notes
    • v0.12.2+vmware.7-tkg.1
    • v0.11.0+vmware.1-tkg.8
    • v0.10.0+vmware.1-tkg.8
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.5-tkg.1 release notes
    • v1.1.2+vmware.1-tkg.1
    • v0.36.1+vmware.2-tkg.2
    • v0.33.0+vmware.2-tkg.3
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.1-tkg.1 release notes
    • v0.32.0+vmware.1-tkg.4
    • v0.24.4+vmware.1-tkg.5
  • fluxcd-helm-controller
    • v0.36.2+vmware.1-tkg.1 release notes
    • v0.28.1+vmware.1-tkg.4
    • v0.21.0+vmware.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.6.27

Component versions packaged in this datestamped Tanzu Standard repo:

  • cert-manager
  • contour
    • v1.28.2+vmware.1-tkg.1 release notes
    • v1.27.1+vmware.1-tkg.1
    • v1.26.2+vmware.1-tkg.1
  • external-dns
    • v0.13.6+vmware.1-tkg.1 release notes
    • v0.12.2+vmware.7-tkg.1
    • v0.11.0+vmware.1-tkg.8
    • v0.10.0+vmware.1-tkg.8
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.5-tkg.1 release notes
    • v1.1.2+vmware.1-tkg.1
    • v0.36.1+vmware.2-tkg.2
    • v0.33.0+vmware.2-tkg.3
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.1-tkg.1 release notes
    • v0.32.0+vmware.1-tkg.4
    • v0.24.4+vmware.1-tkg.5
  • fluxcd-helm-controller
    • v0.36.2+vmware.1-tkg.1 release notes
    • v0.28.1+vmware.1-tkg.4
    • v0.21.0+vmware.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.5.14

Component versions packaged in this datestamped Tanzu Standard repo:

  • cert-manager
  • contour
    • v1.28.2+vmware.1-tkg.1 release notes
    • v1.27.1+vmware.1-tkg.1
    • v1.26.2+vmware.1-tkg.1
  • external-dns
    • v0.13.6+vmware.1-tkg.1 release notes
    • v0.12.2+vmware.7-tkg.1
    • v0.11.0+vmware.1-tkg.8
    • v0.10.0+vmware.1-tkg.8
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.5-tkg.1 release notes
    • v1.1.2+vmware.1-tkg.1
    • v0.36.1+vmware.2-tkg.2
    • v0.33.0+vmware.2-tkg.3
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.1-tkg.1 release notes
    • v0.32.0+vmware.1-tkg.4
    • v0.24.4+vmware.1-tkg.5
  • fluxcd-helm-controller
    • v0.36.2+vmware.1-tkg.1 release notes
    • v0.28.1+vmware.1-tkg.4
    • v0.21.0+vmware.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.4.12

Supported TKr Versions

Package version compatibility on workload clusters is based on their Kubernetes version, not the vSphere with Tanzu version of their Supervisor or the TKG version of their standalone management cluster.

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.28, v1.27, and v1.26 as follows:

Package Package Version Kubernetes v1.28 TKrs Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs
Cert Manager
cert-manager
1.12.2+vmware.2-tkg.2
Cluster Autoscaler
cluster-autoscaler
1.27.2+vmware.1-tkg.3
1.26.2+vmware.1-tkg.3
1.25.1+vmware.1-tkg.3
Contour
contour
1.28.2+vmware.1-tkg.1
1.27.1+vmware.1-tkg.1
1.26.2+vmware.1-tkg.1
External CSI Snapshot Validation Webhook
external-csi-snapshot-webhook
6.1.0+vmware.1-tkg.5
External DNS
external-dns
0.13.6+vmware.1-tkg.1
0.12.2+vmware.7-tkg.1
0.11.0+vmware.1-tkg.8
0.10.0+vmware.1-tkg.8
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.2
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.4
0.21.0+vmware.1-tkg.5
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.4
0.24.4+vmware.1-tkg.5
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2-tkg.2
0.33.0+vmware.2-tkg.3
0.24.4+vmware.2-tkg.3
Grafana
grafana
10.0.1+vmware.1-tkg.2
Harbor
harbor
2.9.1+vmware.1-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.2-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.2
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
3.1.0+vmware.1-tkg.3
Whereabouts
whereabouts
0.6.3+vmware.1-tkg.1
0.5.4+vmware.1-tkg.1
0.5.1+vmware.2-tkg.1

cert-manager v1.12.2

What’s New

Supported Versions

TKG version jetstack_cert-manager version vmware cert-manager package version Kubernetes version compatibility
2.5, 2.4 v1.12.2 v1.12.2+vmware.2-tkg.2 1.21-1.27

Image Versions

cert-manager v1.12.2 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4. See Supported Releases in the cert-manager documentation.

Cluster Autoscaler v1.27.2

What’s New

Contour v1.28.2

What’s New

  • Update Envoy to v1.29.2
  • Disable Envoy removing TE header

Included versions:

See the Contour Compatibility Matrix.

External DNS v0.13.6

What’s New

  • See the release notes for the following versions of External DNS included in the Tanzu Standard v2024.4.12 repository:

  • v0.13.6

  • v0.12.2
  • v0.11.0
  • v0.10.0

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.2 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: fluxcd-source-controller version is unchanged since v2023.9.19, released with TKG v2.4.0; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.0. See FluxCD Controllers in the Tanzu Kubernetes Grid v2.3 Release Notes.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.9.1

What’s New

Component Versions

Harbor v2.9.1 contains the following component image versions:

  • harbor-core:v2.9.1
  • harbor-db:v2.9.1
  • harbor-exporter:v2.9.1
  • harbor-jobservice:v2.9.1
  • harbor-portal:v2.9.1
  • harbor-registryctl:v2.9.1
  • registry-photon:v2.9.1
  • notary-server-photon:v2.9.1
  • notary-signer-photon:v2.9.1
  • redis-photon:v2.9.1
  • trivy-adapter-photon:v2.9.1

Multus-CNI v4.0.1

  • No change; same version used since TKG v2.3. See Multus CNI v4.0.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

External CSI Snapshot Validation Webhook v6.1.0

What’s New

  • No version change since Tanzu Standard repository v2023.11.21.
  • vSphere 8.0U2 enables External CSI snapshot validation support for vSphere with Tanzu Supervisor and its workload clusters.
    • Before you can use CSI snapshot validation on a workload cluster, you need to manually install the components external-csi-snapshot-webhook and snapshot-validation-webhook on the cluster using the Tanzu CLI.
    • As of TKG v2.3, the components csi-snapshotter sidecar and snapshot-controller, which CSI snapshot support also requires, are pre-installed on newly-created, Supervisor-deployed workload clusters and need not be installed manually on TKGS.
    • For details, see Snapshot Validation Webhook in the Kubernetes CSI Developer Documentation.

Image Versions

Snapshot Validation Webhook v6.1.0 contains following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

Dependencies

  • external-csi-snapshot-webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

external-csi-snapshot-webhook contains the following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

vSphere PV CSI Webhook v3.1.0

What’s New

  • No version change since Tanzu Standard repository v2023.11.21.
  • vSphere 8.0U2 enables CSI snapshot support for vSphere with Tanzu Supervisor and its workload clusters.

    • The vSphere PV CSI webhook validates PV CSI operations executed in a Supervisor-deployed cluster, such as deleting or expanding a volume associated with snapshot.
    • To enable this validation, you need to manually install the vSphere PV CSI webhook using the Tanzu CLI.
  • vSphere PV CSI Webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

  • harbor-repo.vmware.com/cnsdataprotection/cloud-provider-vsphere/csi/ci/syncer:v3.1.0

Whereabouts v0.6.3

What’s New

  • Add overlapping ranges check to network_name feature
  • Denormalize IP name before checking if pod is alive
  • Rechecking pending Pods
  • For more details, see Whereabouts v0.6.3.

Tanzu Standard v2024.2.1

Supported TKr Versions

Package version compatibility on workload clusters is based on their Kubernetes version, not the vSphere with Tanzu version of their Supervisor or the TKG version of their standalone management cluster.

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.28, v1.27, and v1.26 as follows:

Package Package Version Kubernetes v1.28 TKrs Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs
Cert Manager
cert-manager
1.12.2+vmware.2-tkg.1
Cluster Autoscaler
cluster-autoscaler
1.27.2+vmware.1-tkg.3
1.26.2+vmware.1-tkg.3
1.25.1+vmware.1-tkg.3
Contour
contour
1.26.1+vmware.1-tkg.1
1.25.3+vmware.1-tkg.1
1.24.6+vmware.1-tkg.1
External CSI Snapshot Validation Webhook
external-csi-snapshot-webhook
6.1.0+vmware.1-tkg.3
External DNS
external-dns
0.13.6+vmware.1-tkg.1
0.12.2+vmware.7-tkg.1
0.11.0+vmware.1-tkg.8
0.10.0+vmware.1-tkg.8
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.2
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.4
0.21.0+vmware.1-tkg.5
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.4
0.24.4+vmware.1-tkg.5
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2-tkg.2
0.33.0+vmware.2-tkg.3
0.24.4+vmware.2-tkg.3
Grafana
grafana
10.0.1+vmware.1-tkg.2
Harbor
harbor
2.9.1+vmware.1-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.2-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.2
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
3.1.0+vmware.1-tkg.3
Whereabouts
whereabouts
0.6.1+vmware.3-tkg.1
0.5.4+vmware.1-tkg.1
0.5.1+vmware.2-tkg.1

cert-manager v1.12.2

What’s New

Supported Versions

TKG version jetstack_cert-manager version vmware cert-manager package version Kubernetes version compatibility
2.5, 2.4 v1.12.2 v1.12.2+vmware.2-tkg.2 1.21-1.27

Image Versions

cert-manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4. See Supported Releases in the cert-manager documentation.

Cluster Autoscaler v1.27.2

What’s New

Contour v1.26.1

What’s New

Included versions:

See the Contour Compatibility Matrix.

Deprecations

  • The envoy.service.loadBalancerIP configuration field is deprecated in the Contour v1.25.2 package schema. Use cloud provider-specific Service annotations instead.

External DNS v0.13.6

What’s New

  • See the release notes for the following versions of External DNS included in the Tanzu Standard v2024.2.1 repository:

  • v0.13.6

  • v0.12.2
  • v0.11.0
  • v0.10.0

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.2 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: fluxcd-source-controller version is unchanged since v2023.9.19, released with TKG v2.4.0; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.0. See FluxCD Controllers in the Tanzu Kubernetes Grid v2.3 Release Notes.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.9.1

What’s New

Component Versions

Harbor v2.9.1 contains the following component image versions:

  • harbor-core:v2.9.1
  • harbor-db:v2.9.1
  • harbor-exporter:v2.9.1
  • harbor-jobservice:v2.9.1
  • harbor-portal:v2.9.1
  • harbor-registryctl:v2.9.1
  • registry-photon:v2.9.1
  • notary-server-photon:v2.9.1
  • notary-signer-photon:v2.9.1
  • redis-photon:v2.9.1
  • trivy-adapter-photon:v2.9.1

Multus-CNI v4.0.1

  • No change; same version used since TKG v2.3. See Multus CNI v4.0.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

External CSI Snapshot Validation Webhook v6.1.0

What’s New

  • No version change since Tanzu Standard repository v2023.11.21.
  • vSphere 8.0U2 enables External CSI snapshot validation support for vSphere with Tanzu Supervisor and its workload clusters.
    • Before you can use CSI snapshot validation on a workload cluster, you need to manually install the components external-csi-snapshot-webhook and snapshot-validation-webhook on the cluster using the Tanzu CLI.
    • As of TKG v2.3, the components csi-snapshotter sidecar and snapshot-controller, which CSI snapshot support also requires, are are pre-installed on newly-created, Supervisor-deployed TKGS workload clusters and need not be installed manually on TKGS.
    • For details, see Snapshot Validation Webhook in the Kubernetes CSI Developer Documentation.

Image Versions

Snapshot Validation Webhook v6.1.0 contains following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

Dependencies

  • external-csi-snapshot-webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

external-csi-snapshot-webhook contains the following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

vSphere PV CSI Webhook v3.1.0

What’s New

  • No version change since Tanzu Standard repository v2023.11.21.
  • vSphere 8.0U2 enables CSI snapshot support for vSphere with Tanzu Supervisor and its workload clusters.

    • The vSphere PV CSI webhook validates PV CSI operations executed in a Supervisor-deployed cluster, such as deleting or expanding a volume associated with snapshot.
    • To enable this validation, you need to manually install the vSphere PV CSI webhook using the Tanzu CLI.
  • vSphere PV CSI Webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

  • harbor-repo.vmware.com/cnsdataprotection/cloud-provider-vsphere/csi/ci/syncer:v3.1.0

Whereabouts v0.6.1

What’s New

  • No change; same version used since TKG v2.3.0. See Whereabouts v0.6.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Tanzu Standard v2023.11.21

Supported TKr Versions

Package version compatibility on workload clusters is based on their Kubernetes version, not the vSphere with Tanzu version of their Supervisor or the TKG version of their standalone management cluster.

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.27, v1.26, and v1.25 as follows:

Package Package Version Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs Kubernetes v1.25 TKrs
Cert Manager
cert-manager
1.12.2+vmware.1-tkg.1
1.11.1+vmware.1-tkg.1
Cluster Autoscaler
cluster-autoscaler
1.27.2+vmware.1-tkg.3
1.26.2+vmware.1-tkg.2
1.25.1+vmware.1-tkg.2
Contour
contour
1.25.2+vmware.1-tkg.1
1.24.5+vmware.1
External CSI Snapshot Validation Webhook
external-csi-snapshot-webhook
6.1.0+vmware.1-tkg.3
External DNS
external-dns
0.13.4+vmware.2-tkg.2
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.1
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.3
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.3
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2
0.33.0+vmware.2
Grafana
grafana
10.0.1+vmware.1-tkg.1
Harbor
harbor
2.8.4+vmware.1-tkg.1
2.8.2+vmware.2-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.1-tkg.2
3.8.0+vmware.3-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.1
2.37.0+vmware.3-tkg.1
2.36.2+vmware.1-tkg.1
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
* *
Whereabouts
whereabouts
0.6.1+vmware.2-tkg.2
0.5.4+vmware.2-tkg.1

* Expected compatibility

cert-manager v1.12.2

What’s New

Supported Versions

TKG version jetstack_cert-manager version vmware cert-manager package version Kubernetes version compatibility
2.4 v1.12.2 v1.12.2+vmware.1-tkg.1 1.21-1.27

Image Versions

cert-manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4. See Supported Releases in the cert-manager documentation.

Contour v1.25.2

What’s New

Included versions:

  • Contour v1.25.2
    • See the release notes for v1.25.0-2:
  • Contour v1.24.5

Supported Versions

  • Contour v1.25.2 is supported on Kubernetes v1.25-v1.27.
  • Contour v1.24.5 is supported on Kubernetes v1.24-v1.26.

See the Contour Compatibility Matrix.

Deprecations

  • The envoy.service.loadBalancerIP configuration field is deprecated in the Contour v1.25.2 package schema. Use cloud provider-specific Service annotations instead.

External CSI Snapshot Validation Webhook v6.1.0

What’s New

  • vSphere 8.0U2 enables External CSI snapshot validation support for vSphere with Tanzu Supervisor and its workload clusters.
    • Before you can use CSI snapshot validation on a workload cluster, you need to manually install the components external-csi-snapshot-webhook and snapshot-validation-webhook on the cluster using the Tanzu CLI.
    • As of TKG v2.3, the components csi-snapshotter sidecar and snapshot-controller, which CSI snapshot support also requires, are are pre-installed on newly-created, Supervisor-deployed TKGS workload clusters and need not be installed manually on TKGS.
    • For details, see Snapshot Validation Webhook in the Kubernetes CSI Developer Documentation.

Image Versions

Snapshot Validation Webhook v6.1.0 contains following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

Supported Versions

TKG version external-csi-snapshot-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
2.4.1, 2.4.0 6.1.0 1.18 - latest 1.26
2.3.0 6.1.0 1.18 - latest 1.24

Dependencies

  • external-csi-snapshot-webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

external-csi-snapshot-webhook contains the following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

External DNS v0.13.4

What’s New

  • No change; same version used since TKG v2.3. See External DNS v0.13.4 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.1 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: fluxcd-source-controller version is unchanged since v2023.9.19, released with TKG v2.4.0; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.0. See FluxCD Controllers in the Tanzu Kubernetes Grid v2.3 Release Notes.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.8.4

What’s New

Supported Versions

TKG version Harbor version Compatible Kubernetes versions
2.4.1, 2.4.0 2.8.4 v1.25.10, v1.26.5, v1.27.2

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Multus-CNI v4.0.1

  • No change; same version used since TKG v2.3. See Multus CNI v4.0.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

vSphere PV CSI Webhook v3.1.0

What’s New

  • vSphere 8.0U2 enables CSI snapshot support for vSphere with Tanzu Supervisor and its workload clusters.
    • The vSphere PV CSI webhook validates PV CSI operations executed in a Supervisor-deployed cluster, such as deleting or expanding a volume associated with snapshot.
    • To enable this validation, you need to manually install the vSphere PV CSI webhook using the Tanzu CLI.

Supported Versions

TKG version vsphere-pv-csi-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
2.4 3.1.0 1.18-latest 1.24, 1.26
  • vSphere PV CSI Webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

  • harbor-repo.vmware.com/cnsdataprotection/cloud-provider-vsphere/csi/ci/syncer:v3.1.0

Whereabouts v0.6.1

What’s New

  • No change; same version used since TKG v2.3.0. See Whereabouts v0.6.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Tanzu Standard v2023.10.16

These release notes apply to packages in the Tanzu Standard v2023.10.16 package repository, which is released around the same date as and compatible with Tanzu Kubernetes Grid (TKG) v2.3.1 and Kubernetes v1.24-1.26.

Package version compatibility on workload clusters is based on their Kubernetes version, not the vSphere with Tanzu version of their Supervisor or the TKG version of their standalone management cluster.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

Cert-manager v1.11.1

What’s New

Supported Versions

TKG version jetstack_cert-manager version VMware cert-manager package version Kubernetes version compatibility
v2.3.1, v2.3.0 v1.11.1 v1.11.1+vmware.1 v1.21-1.27

Component Versions

cert manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.11.1
  • quay.io/jetstack/cert-manager-controller:v1.11.1
  • quay.io/jetstack/cert-manager-webhook:v1.11.1
  • quay.io/jetstack/cert-manager-acmesolver:v1.11.1

Deprecations

The following cert manager versions are deprecated in TKG v2.3:

  • v1.5.3
  • v1.7.2
  • v1.10.2

Contour v1.24.5

What’s New

  • See the release notes for Contour v1.24.5:
  • You can configure Envoy to install as a Deployment with a specified number of replicas rather than as a DaemonSet (default), using data values like the following:
    envoy: 
      workload: 
        type: Deployment 
        replicas: 3
    
  • You can specify resource requests or limits for each container within the Contour and Envoy workloads, using data values like the following:

    contour: 
      resources: 
        contour: 
          requests: 
            cpu: 250m 
            memory: 128Mi 
          limits: 
            cpu: 1 
    
            memory: 512Mi
    envoy:
      resources:
        envoy:
    # include requests and limits as desired
        shutdown-manager:
    # include requests and limits as desired 
    
  • data-values file configuration values are verified. Specifying an unsupported value in the data values results in an error.

Supported Versions

TKG version contour version VMware contour package version Kubernetes version compatibility
v2.3.1 v1.24.5 v1.24.5+vmware.1-tkg.1 v1.24-1.26
v2.3.0 v1.24.4 v1.24.4+vmware.1-tkg.1 v1.24-1.26

Supported Kubernetes Versions

Contour v1.24.4 is supported on Kubernetes v1.24-v1.26. See the Contour Compatibility Matrix.

Deprecations

  • All versions of Contour prior to v1.24.4 have been removed from Tanzu Standard repository v2023.7.13.
  • Contour package data-values files no longer accept null values. For any configuration field with a value set to null, you should omit the value entirely.

External-csi-snapshot-webhook v6.1.0

What’s New

  • external-csi-snapshot-webhook is a new package for TKG v2.3
  • TKG v2.3 with a vSphere 8.0U2 Supervisor supports CSI snapshots for Supervisor and the workload clusters it deploys, but you first need to explicitly install external-csi-snapshot-webhook v6.1.0 using the Tanzu CLI.

Supported Versions

TKG version external-csi-snapshot-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
v2.3.0 6.1.0 1.18 - latest 1.24

Dependencies

  • external-csi-snapshot-webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

external-csi-snapshot-webhook contains the following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

External DNS v0.13.4

What’s New

  • See the External DNS v0.13.4 release notes
  • New createNamespace configuration field. Set to true to create the namespace that external-dns components are installed in. If set to false, package components install into an existing namespace.

Supported Versions

TKG version external-dns version VMware external-dns package version Kubernetes version compatibility
v2.3.1, v2.3.0 v0.13.4 v0.13.4+vmware.2-tkg.2 v1.24-1.26

Fluent-bit v2.1.2

What’s New

Supported Versions

TKG version fluent-bit version VMware fluent-bit package version Kubernetes version compatibility
v2.3.1, v2.3.0 v2.1.2 v2.1.2+vmware.2-tkg.1 v1.24-1.26

Limitations / Known Issues

  • Does not support AWS credential environment variables in the fluent-bit package ConfigMap for accessing AWS S3.
    • AWS credentials support is planned for a future release.

Fluxcd controllers

What’s New

See the following Fluxcd controller package release notes:

Supported Versions

TKG version FluxCD controller VMware package version Kubernetes version compatibility
v2.3.1, v2.3.0 fluxcd-helm-controller v0.21.0+vmware.1-tkg.1 v1.24-1.26
v2.3.1, v2.3.0 fluxcd-kustomize-controller v0.24.4+vmware.1-tkg.1 v1.24-1.26
v2.3.1, v2.3.0 fluxcd-source-controller v0.33.0+vmware.2-tkg.1 v1.24-1.26

Grafana v9.5.1

What’s New

Supported Versions

TKG version grafana version VMware grafana package version Kubernetes version compatibility
v2.3.1 v9.5.1 v9.5.1+vmware.2-tkg.3 v1.24-1.26
v2.3.0 v9.5.1 v9.5.1+vmware.2-tkg.1 v1.24-1.26

Component Versions

Grafana v9.5.1 contains the following component image versions:

  • grafana/grafana:9.5.1
  • kiwigrid/k8s-sidecar:1.22.0

Harbor v2.8.4

What’s New

  • See Harbor v2.8.4 release notes
  • Due to CVEs, TKG v2.3 compatibility with the following Harbor versions has been removed:
    • v2.2.3_vmware.1-tkg.1
    • v2.2.3_vmware.1-tkg.2
    • v2.3.3_vmware.1-tkg.1
    • v2.5.3_vmware.1-tkg.1
    • v2.7.1_vmware.1-tkg.1

Supported Versions

TKG version harbor version VMware harbor package version Kubernetes version compatibility
v2.3.1 v2.8.4 v2.8.4+vmware.1-tkg.1 v1.24-1.26
v2.3.0 v2.8.2 v2.8.2+vmware.2-tkg.1 v1.24-1.26

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Multus-CNI v4.0.1

What’s New

  • Introduces a thick-plugin deployment and architecture. See Multus-CNI v4.0.1 new feature
  • Changes default values as follows:

    namespace: kube-system 
    #! DaemonSet related configuration 
    daemonset: 
      resources: 
        limits: 
          cpu: 100m 
          memory: 50Mi 
        requests: 
          cpu: 100m 
          memory: 50Mi 
    configmap: 
      cniVersion: 0.3.1 
      multusConfigFile: auto 
    

Supported Versions

TKG version multus-cni version VMware multus-cni package version Kubernetes version compatibility
v2.3.1, v2.3.0 v2.1.2 v4.0.1+vmware.1-tkg.2 v1.24-1.26

Prometheus v2.43.0

What’s New

Supported Versions

TKG version prometheus version VMware prometheus package version Kubernetes version compatibility
v2.3.1 v2.43.0 v2.43.0+vmware.4-tkg.1 v1.24-1.26
v2.3.0 v2.43.0 v2.43.0+vmware.1-tkg.1 v1.24-1.26

Component Versions

Prometheus v2.43.0 contains the following component image versions:

  • prom/prometheus:v2.43.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.5.1
  • jimmidyson/configmap-reload:v0.8.0
  • bitnami/kube-state-metrics:2.8.2
  • quay.io/prometheus/node-exporter:v1.5.0

Whereabouts v0.6.1

What’s New

  • Supports ipRanges for configuring dual-stack IP assigning; see Example IPv6 Config in the Whereabouts repo README.

Supported Versions

TKG version whereabouts version VMware whereabouts package version Kubernetes version compatibility
v2.3.1, v2.3.0 v0.6.1 v0.6.1+vmware.2-tkg.1 v1.24-1.26

Tanzu Standard v2023.9.19

These release notes apply to packages in the Tanzu Standard v2023.9.19 package repository, which is released around the same date as and compatible with Tanzu Kubernetes Grid (TKG) v2.4.0 and Kubernetes v1.25-1.27.

Package version compatibility on workload clusters is based on their Kubernetes version, not the vSphere with Tanzu version of their Supervisor or the TKG version of their standalone management cluster.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

Supported TKr Versions

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.27, v1.26, and v1.25 as follows:

Package Package Version Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs Kubernetes v1.25 TKrs
Cert Manager
cert-manager
1.12.2+vmware.1-tkg.1
1.11.1+vmware.1-tkg.1
Contour
contour
1.25.2+vmware.1-tkg.1
1.24.5+vmware.1
External DNS
external-dns
0.13.4+vmware.2-tkg.2
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.1
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.3
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.3
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2
0.33.0+vmware.2
Grafana
grafana
10.0.1+vmware.1-tkg.1
Harbor
harbor
2.8.4+vmware.1-tkg.1
2.8.2+vmware.2-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.1-tkg.2
3.8.0+vmware.3-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.1
2.37.0+vmware.3-tkg.1
2.36.2+vmware.1-tkg.1
Snapshot Validation Webhook
snapshot-validation-webhook
* *
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
* *
Whereabouts
whereabouts
0.6.1+vmware.2-tkg.2
0.5.4+vmware.2-tkg.1

* Expected compatibility

cert-manager v1.12.2

What’s New

Supported Versions

TKG version jetstack_cert-manager version vmware cert-manager package version Kubernetes version compatibility
2.4 v1.12.2 v1.12.2+vmware.1-tkg.1 1.21-1.27

Image Versions

cert-manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4.0. See Supported Releases in the cert-manager documentation.

Contour v1.25.2

What’s New

Included versions:

  • Contour v1.25.2
    • See the release notes for v1.25.0-2:
  • Contour v1.24.5

Supported Versions

  • Contour v1.25.2 is supported on Kubernetes v1.25-v1.27.
  • Contour v1.24.5 is supported on Kubernetes v1.24-v1.26.

See the Contour Compatibility Matrix.

Deprecations

  • Contour 1.24.4 has been removed from Tanzu Standard repository v2023.9.19 due to CVEs.
  • The envoy.service.loadBalancerIP configuration field is deprecated in the Contour v1.25.2 package schema. Use cloud provider-specific Service annotations instead.

External DNS v0.13.4

What’s New

  • No change; same version as used for TKG v2.3.0. See External DNS v0.13.4 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.1 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: Tanzu Standard package repository v2023.9.19 has a new version offluxcd-source-controller; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3. See FluxCD Controllers in the Tanzu Kubernetes Grid v2.3 Release Notes.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.8.4

What’s New

Supported Versions

TKG version Harbor version Compatible Kubernetes versions
2.4.0 2.8.4 v1.25.10, v1.26.5, v1.27.2

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Deprecations

The following Harbor package versions have been removed from Tanzu Standard repository v2023.9.19 due to CVEs:

  • v2.2.3_vmware.1-tkg.1
  • v2.2.3_vmware.1-tkg.2
  • v2.3.3_vmware.1-tkg.1
  • v2.5.3_vmware.1-tkg.1
  • v2.7.1_vmware.1-tkg.1

Multus-CNI v4.0.1

  • No change; same version as used for TKG v2.3.0. See Multus CNI v4.0.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4.0. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

Snapshot Validation Webhook v6.1.0

What’s New

  • This package is new for v2023.9.19 of the Tanzu Standard package repository.
  • vSphere 8.0U2 enables External CSI snapshot validation support for vSphere with Tanzu Supervisor and its workload clusters.
    • Before you can use CSI snapshot validation on a workload cluster, you need to manually install the components external-csi-snapshot-webhook and snapshot-validation-webhook on the cluster using the Tanzu CLI.
    • As of TKG v2.3, the components csi-snapshotter sidecar and snapshot-controller, which CSI snapshot support also requires, are are pre-installed on newly-created, Supervisor-deployed TKGS workload clusters and need not be installed manually on TKGS.
    • For details, see Snapshot Validation Webhook in the Kubernetes CSI Developer Documentation.

Image Versions

Snapshot Validation Webhook v6.1.0 contains following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

Supported Versions

TKG version external-csi-snapshot-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
2.4.0 6.1.0 1.18 - latest 1.26
2.3.0 6.1.0 1.18 - latest 1.24

Dependencies

  • external-csi-snapshot-webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

external-csi-snapshot-webhook contains the following component image version:

  • registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.1.0

vSphere PV CSI Webhook v3.1.0

What’s New

  • This package is new for v2023.9.19 of the Tanzu Standard package repository.
  • vSphere 8.0U2 enables CSI snapshot support for vSphere with Tanzu Supervisor and its workload clusters.
    • The vSphere PV CSI webhook validates PV CSI operations executed in a Supervisor-deployed cluster, such as deleting or expanding a volume associated with snapshot.
    • To enable this validation, you need to manually install the vSphere PV CSI webhook using the Tanzu CLI.

Supported Versions

TKG version vsphere-pv-csi-webhook version Expected Kubernetes version compatibility Tested on Kubernetes version
2.4 3.1.0 1.18-latest 1.24, 1.26
  • vSphere PV CSI Webhook requires cert-manager, for secure X509 communication with the Kubernetes API server.

Component Versions

  • harbor-repo.vmware.com/cnsdataprotection/cloud-provider-vsphere/csi/ci/syncer:v3.1.0

Whereabouts v0.6.1

What’s New

  • No change; same version as used for TKG v2.3.0. See Whereabouts v0.6.1 in the Tanzu Kubernetes Grid v2.3 Release Notes.
check-circle-line exclamation-circle-line close-line
Scroll to top icon