Skip to content

Releases: kubernetes-sigs/image-builder

v0.1.14

07 Mar 18:28
6e7fa1e
Compare
Choose a tag to compare

What's Changed

New Contributors

Read more

v0.1.13

07 Mar 18:27
4b97ae8
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.1.12...v0.1.13

v0.1.12

24 May 22:28
v0.1.12
e7b0e8b
Compare
Choose a tag to compare

This patch release includes new features, enhancements, and bug fixes.

The GA container image can be found at k8s.gcr.io/scl-image-builder/cluster-node-image-builder-amd64:v0.1.12

Removals 🚫

  • After first being announced as deprecated in v0.1.7 (March, 2021), both the ESX builder for OVAs and the HAProxy OVA build target have been removed.

Features 🚀

  • Add Rocky/RHEL 8 support for QEMU, AWS (#721, #801)
  • Add support for OCI (Oracle Cloud Infrastructure) (#754)
  • Add support for building images with VirtualBox (#699)
  • Bump default containerd version (1.6.x) (#864, #822, #802, #776)
  • Add support for Flatcar Azure gen2 images (#834)

Enhancements 📈

  • Make sure Windows shows up in doc Table of Contents (#769)
  • Bump mdBook to 0.4.14(#770)
  • Use nssm for kubelet log rotation on Windows (#762)
  • Make debug_tools for Windows Ansible role configurable (#751)
  • Only provide Windows dockershim flags with docker below 1.24 (#783)
  • Add ExtendVolumesPlugin cloubase-init plugin (auto-extend Windows volumes) (#781)
  • Remove ESX builder for OVAs (#771)
  • Update Rocky Linux from 8.4 to 8.5 (#792)
  • Enable Ubuntu 20.04 in GCE nightly builds (#797)
  • Bump default K8s version (#891, #798)
  • Update crictl from 1.20.0 to 1.23.0 (#807)
  • Add GOSS tests to GCE images (#810)
  • Add option to compress capi/qemu images (#799)
  • Allow user to specify temporary_security_group_source_cidrs (#812)
  • Add containerd source client header for CAPZ (#805)
  • Add skip_create_ami flag to amazon-ebs builder (#804)
  • Separate CI logs into separate file per target (#736, #872)
  • Replacing \var\lib\kubelet path to \etc\kubernetes on Windows (#785)
  • ARM support on OCI (#821)
  • Bump VMware Guestinfo datasource to 1.4.1 (#824)
  • Install nfs-common on Azure images (#823)
  • Windows: remove admin user when creating custom user (#832)
  • allow overriding volume_type and throughput on AMI (#826)
  • Install Azure Key Vault gMSA plugin if configured (#835)
  • Disable Hyper-V KVP protocol daemon on GCE ubuntu images (#849)
  • Add ability to supply global pip config file (#850)
  • Make Flatcar build process more generic (#827)
  • Remove deprecated HAProxy OVA (#869)
  • Use com2 serial port for logging on Azure (#875)
  • Quote multi-value fields in ansible-args.json (#876)
  • ami: Use cloud-init only on supported distros (#874)
  • Improve building Azure SIG images (#867)
  • Expose security group and ssh variables in capi packer ami (#871)
  • Set transparent huge pages to madvise (#868)
  • Simplify conditional in Flatcar provisioner (#883)
  • Make sure goss inpsect mode is disabled for OVA CI (#884)
  • OVA: Remove downgrade of cloud-init, no longer install guestinfo datasource when not needed (#889)
  • Update Azure scripts for new naming scheme (#878)
  • Remove KUBERNETES_VERSION from Azure SKU template (#896)

Bug Fixes 🐛

  • Ensure GOSS installation for QEMU and Raw builders (#768)
  • Use Python3 in Windows build scripts (#772)
  • Make sure Ansible Galaxy collections install even if Ansible already is present (#774)
  • Fix make clean-raw command (#778)
  • Make IP address retrieval more robust on Windows/vSphere (#742)
  • Fix downgrade of cloud-init on Photon OVA (#786)
  • Remove unnecessary default vagrant credentials (#788)
  • Upgrade pip on CentOS 7 (#796)
  • Fix creation of symlink to ctr (#761, #806)
  • Remove unwanted boot order from containerd service definition (#758)
  • Fix the location of the containerd state/root folders for Windows (#764)
  • Make al-2 images immutable by disabling security updates on boot (#837)
  • Fix custom role arguments passing on Windows (#825)
  • Add SSH key to windows images (#839)
  • Fix windows goss wrong provider on AWS (#843)
  • Absolute in Windows kubelet don't work < 1.23 (#856)
  • Fix tdnf install in firstboot role (#851)
  • Modify permission of SSH folder on Windows (#813)
  • Fix building Flatcar images for Flatcar stable releases after 3139.2.0 (#863)
  • Fix QEMU Flatcar build (#829)
  • Fix QEMU boot_media_path overrides (#880)
  • Fix regression in Flatcar provisioner (#888)
  • qemu,raw: Mask sshd during bootstrap (#893)

v0.1.11

17 Dec 04:53
v0.1.11
be5a48f
Compare
Choose a tag to compare

This patch release includes new features, enhancements, security and bug fixes.

The GA container image can be found at k8s.gcr.io/scl-image-builder/cluster-node-image-builder-amd64:v0.1.11

Deprecation notices

  • The ESX builder for OVAs is deprecated and will be removed in an upcoming release. Building OVAs with VMware vSphere, Fusion, and Workstation are all still supported
  • The HAProxy OVA is deprecated and will be removed in an upcoming release. Cluster API Provider vSphere (CAPV) no longer uses this image, and now uses kube-vip for control plane load-balancing.

Features 🚀

  • Add support for Flatcar in Azure SIG (#652)
  • Mature support for Flatcar with CAPI (#701)
  • Add support for Windows Server 2022 for Azure and vSphere (#682, #713)
  • Add support for CentOS-7 QEMU images (#714)
  • Add RockyLinux-8 as a build target on vSphere (#715)
  • Add EFI support to QEMU and raw builders (#638)

Security 🔒

Enhancements 📈

  • containerd version bumps (#678, #708)
  • Add ability to provide custom containerd config file (#677)
  • Bump az CLI to 2.28.1 (#691)
  • Bump default K8s version to 1.20.10 (#692)
  • Bump base Ubuntu 18.04 ISO to 18.04.6 (#697)
  • Bump pause image (#689)
  • Add ability to install OpenSSH on Windows from alternative sources (#687)
  • Bump Ansible to 2.11.5 to detect RockyLinux (#706)
  • Allow ability to specify users who have access to WireServer in WIndows (#719)
  • Add ability to set Windows timezone in auto unattend (#592)
  • Update Flatcar download URLs (#725)
  • Support kickstart file over floppy drive for CentOS-7 and RHEL OVAs (#729, #730)
  • Update Flatcar URLs to flatcar-linux.org (#725)
  • Fix installation of open-vm-tools in CentOS-7 OVA, and add CentOS to OVA CI (#731)
  • Distinguish between virtual and baremetal build targets (#634)
  • Update CAPG nightly config (#733, #738)
  • Set a default containerd imports directory (#711)
  • Support packer provisioner paths other than /tmp for Azure builds (#749)
  • Use 'latest" tag for container image instead of 'focal` (#740)
  • Add default values for more Ansible variables to make it easier to run roles standalone (#739)
  • Add photon-3 to OVA CI script (#765)
  • Expand Windows dynamic port range (#750)

Bug Fixes 🐛

  • Fixes for Azure SIG builds (#686)
  • Support custom networks on Azure SIGs, not just VHD (#685)
  • Ensure SSH program data folder is always present on Windows (#695, #696)
  • Make Windows pick up common pause image config (#704)
  • Fixes for Digital Ocean provider (#710)
  • Force a specific cloud-init version on OVAs for photon and Ubuntu (#728)
  • Don't expect python2-pip on Photon from GOSS (#734)
  • Configure Ubuntu and Photon OVAs to support DHCP Option 42 -- NTP servers (#732)
  • Install apparmor-parser binary on Photon, and deal with side-effects (#735, #755, #756, #757)
  • FIx Amazon Linux 2 RPM list (#744, #746)
  • Fix possible OVA CI issues with backgrounded process errors (#752)
  • Fix disabling of Windows auto updates (#759)

v0.1.10

16 Dec 21:20
v0.1.10
7cd6d9a
Compare
Choose a tag to compare

This patch release includes new features, enhancements, and bug fixes.

The GA container image can be found at k8s.gcr.io/scl-image-builder/cluster-node-image-builder-amd64:v0.1.10

Deprecation notices

  • The ESX builder for OVAs is deprecated and will be removed in an upcoming release. Building OVAs with VMware vSphere, Fusion, and Workstation are all still supported
  • The HAProxy OVA is deprecated and will be removed in an upcoming release. Cluster API Provider vSphere (CAPV) no longer uses this image, and now uses kube-vip for control plane load-balancing.

Features 🚀

  • Add new load_additional_components role for adding container images or binaries (#529)
  • Add support for EFI firmware in OVAs (#482)
  • Add support for GOSS tests on Windows targets (#563)

Enhancements 📈

  • Support using custom networks for Azure builds (#681)
  • Allow containerd version to be specified via flag for Flatcar (#670)
  • Azure CI enhancements (#661, #662, #663)
  • Bump default K8s version to 1.20.x series (#674)
  • Add Cilium NICs to list of those excluded by guest-tools on OVAs (#669)
  • Add option to configure Photon with ability to resolve .local addresses via DNS (#671)
  • Update kubeadm API version to v1beta2 (#673)
  • Containerd version bumps (#659, #654, #617, #610, #606)
  • Upgrade to ansible_windows 1.7 from Ansible Galaxy (#657)
  • CAPG nightly image build enhancements (#655, #665, #641, #625, #445)
  • Add CI job for building the container image (#651)
  • Support a docker build var for specifying base container image (#650)
  • Add/Enable CI for OVAs (#425)
  • Update Azure pub tool to v0.3.2 (#646)
  • Add OWNERS file for Windows Ansible roles (#637)
  • Add new GOSS options to support running GOSS tests in air-gapped environments (#635)
  • Increase size of /tmp on Photon builds (#629)
  • Set GOSS tests to enforcing on Azure and GCE (#620)
  • Add ansible_user_vars as a way to pass user defined variables to Ansible (#622)
  • Ability to install additional container images and binaries in Windows (#534)
  • Add ability to pass args to ovftool (#616)
  • Disable automatic Windows updates (#600)
  • Make STORAGE_ACCOUNT_NAME configurable in init-vhd.sh (#603)

Bug Fixes 🐛

  • Lower GOSS test concurrency for Windows to avoid timeouts (#666)
  • Improve reliability of Windows builds by increasing restart timeout (#660)
  • Cleanup remaining netplan files and clear out journald (#645)
  • Windows build fixes and optimizations (#623)
  • Add option to disable IPv6 during boot when building OVAs (#648)
  • Skip VMDK export in vsphere-iso-base builder (#647)
  • Fix for building Azure gen2 images (#627)
  • Rationalize vSphere CPU and RAM build allocations (#639)
  • Fix for multiple URIs found in packer.out for Azure (#636)
  • Prevent iptables rules in Photon from getting overwritten in sysprep role (#633)
  • Using ovftool fails when no args are set (#628)
  • Fix missing firmware designation for Windows builds (#605)
  • Only disable the apt-daily timer services (#604)

Documentation 📝

  • Fix k8s.gcr.io location for container images (#642)

v0.1.9

19 Apr 15:19
v0.1.9
2120597
Compare
Choose a tag to compare

This patch release includes bug fixes and cleanups, most notably an issue with containerd and SystemdCgroups when deploying K8s >= v1.21.0.

The GA container image can be found at k8s.gcr.io/scl-image-builder/cluster-node-image-builder-amd64:v0.1.9

Backwards Incompatibility Notices

  • containerd_pause_image has been renamed to pause_image (#535)

Deprecation notices

  • The ESX builder for OVAs is deprecated and will be removed in an upcoming release. Building OVAs with VMware vSphere, Fusion, and Workstation are all still supported
  • The HAProxy OVA is deprecated and will be removed in an upcoming release. Cluster API Provider vSphere (CAPV) no longer uses this image, and now uses kube-vip for control plane load-balancing.

Features 🚀

  • Add a builder dedicated to building raw images (#547)
  • Bump dependency versions to Packer v1.7.2, GOSS 0.3.16, GOSS provisioner 3.0.3 (#570)(#569)

Enhancements 📈

  • containerd_pause_image has been renamed to pause_image (#535)
  • Enabled DNS resolution of SMB shares for Windows nodes with containerd pods (#558)
  • Make best attempt to update Windows Defender signatures (#553)
  • Clean up and add CI for all make validate targets (#546)
  • Improve Windows unattend behavior (#581)
  • Add CI test for GOSS test generation (#585)
  • Make consistent use of ansible.cfg file (#584)
  • No longer display skipped Ansible tasks (#531)
  • Add local development HTTP server script for hosting local files (#582)

Bug Fixes 🐛

  • No longer install cloud-initramfs-growroot for Ubuntu qemu builder (#562)
  • Fix containerd systemdCgroup settings for K8s >= v1.21.0 (#573)
  • Do not export OVA manifest file during vCenter builds (#580)
  • Fix HNS hang when multiple LB policies are present for Windows nodes (#566)
  • Exclude Calico NICS from vmtools in OVAs (#557)
  • No longer restart kubelet service during build, only set service to enabled (#583)

Documentation 📝

  • Add details for using container image (#495)
  • Fix Azure logo links (#564)(#594)
  • GCE doc updates (#574)

v0.1.8

19 Mar 18:57
v0.1.8
d6a2b02
Compare
Choose a tag to compare

This patch release addresses an issue with the v0.1.7 container image not working for building AMIs

The GA container image can be found at k8s.gcr.io/scl-image-builder/cluster-node-image-builder-amd64:v0.1.8

Known Issues

The v0.1.8 container image should not be used for building Azure images, as there is a resource cleanup issue with Packer >= 1.6.2 (hashicorp/packer#10713). v0.1.7 should be used for Azure, v0.1.8 for all others.

Deprecation notices

  • The ESX builder for OVAs is deprecated and will be removed in an upcoming release. Building OVAs with VMware vSphere, Fusion, and Workstation are all still supported
  • The HAProxy OVA is deprecated and will be removed in an upcoming release. Cluster API Provider vSphere (CAPV) no longer uses this image, and now uses kube-vip for control plane load-balancing.

Bug Fixes 🐛

  • Default Packer version bumped from v1.6.0 to v1.6.6 to support AMIs (#548)
  • Address CI flakiness for Windows nodes by not trying to update Windows Defender during build (#550)
  • Fix issue with OVF metadata when building Windows OVAs (#545)

Enhancements 📈

  • Bump containerd in Flatcare to 1.4.4 (#543)

Features 🚀

  • Add support for Azure Gen2 VMs (#422)

v0.1.7

12 Mar 16:00
v0.1.7
facf334
Compare
Choose a tag to compare

This patch release includes new features, bug fixes, and enhancements!

The GA container image can be found at k8s.gcr.io/scl-image-builder/cluster-node-image-builder-amd64:v0.1.7

Known Issues

The v0.1.7 container image should not be used for building AMIs, as there is a Packer bug dependency error where the included version of Packer (1.6.0) does not work with the included Packer configurations. v0.1.8 addresses this issue and should be used for AMIs.

Deprecation notices

  • The ESX builder for OVAs is deprecated and will be removed in an upcoming release. Building OVAs with VMware vSphere, Fusion, and Workstation are all still supported
  • The HAProxy OVA is deprecated and will be removed in an upcoming release. Cluster API Provider vSphere (CAPV) no longer uses this image, and now uses kube-vip for control plane load-balancing.

Bug Fixes 🐛

  • Fix hardcoding of gallery name when creating Azure image definition (#414)
  • Fix Azure e2e flake with duplicate storage account name (#418)
  • Fix file ownership in container image (#421)
  • Fix http proxy support (#440)
  • Set Kubelet config to recognize pause image as infra container (#501)
  • Fix issue with Ubuntu images not booting due to growpart not working if disk was resized (#510)
  • Set reverse path filter to "strict" (1) in Ubuntu 20.04 to fix Calico networking

Enhancements 📈

  • OVF Metadata enhancements (#353)
  • OVA Build script uses Python 3 (#367)
  • Update Packer GOSS provisioner to 2.0.0 (#369)
  • Azure pipeline - only run SKU stage if VHD stage succeeds (#364)
  • Add ON_ERROR_ASK env var to Makefile (#376)
  • Truncate log files instead of deleting (#331)
  • Default to BBR TCP congestion control algorithm (#386)
  • Add cloud-init feature flags file (#406)
  • Make CRI socket configurable (#433)
  • Use gp3 ebs volumes for AMI (#452)
  • Merge OVF templates (#467)
  • Make ignition capable of detecting Flatcar images (#487)
  • Switch OVA ubuntu images to boot from floppy during build (#497)
  • Add image-builder version metadata to Azure images (#499)
  • Allow setting AMI builder instance type (#516)
  • Allow variable disk size for OVAs (#498)
  • Add CI job to make sure JSON files remain sorted (#527, #368)

Features 🚀

  • Add Ubuntu 20.04 support for all providers (#347)
  • Add auditd to Ubuntu images (#373)
  • containerd updates (#383, #444, #539)
  • Support building base VMDK images from ISO (#352, #394)
  • Add Ubuntu 20.04 and CentOS 7 support for Digital Ocean (#380)
  • Use Ansible 2.10 (#357)
  • Standardize on chrony for time sync (#397)
  • Add CentOS to Azure SIG CI (#424)
  • Add GCP CAPI images (#419)
  • Add Windows node support for Azure, vSphere, AWS (#382, #402, #442)
  • Add support for Flatcar Linux on AWS and QEMU (#248)
  • Support ova custom post-processor (#457)
  • Add DEBUG flag for builds (#415)
  • Add continual container image promotion (#450)
  • Add support for custom OVF properties (#503)
  • Add support for using ovftool create OVA (#509, #524)
  • Support systemd cgroup driver for K8s >= 1.21.0 (#540)

v0.1.6

27 Aug 14:36
v0.1.6
6595c9d
Compare
Choose a tag to compare

This patch release includes new features, bug fixes, and enhancements!

Bug Fixes 🐛

  • ova: remove deprecated Packer config keys for Packer 1.6 (#255)
  • Fix CNI plugins binary name for HTTP installs (#264)
  • ova: Add exclude-nics filter for more reliable IP address reporting (#269)
  • Fix installation of rng-tools on Photon OS (#290)
  • Fix building OVAs as root by passing Ansible user explicitly (#306)
  • Fix containerd/cloud-init startup race (#323)
  • Explicitly ensure all cloud-init related services are enabled on boot (#324)
  • Fix the failed startup of auditd and sysstat services on Amazon Linux 2 (#315)

Enhancements 📈

  • Bump default CentOS 7 ISO from 7.7 to 7.8 (#262)
  • Bump default Photon 3 ISO to Rev 3 (#338)
  • Bump default kubernetes-CNI version to v0.8.6 (#258)
  • Bump default Kubernetes version to 1.16.14 (#334)
  • Refactor AMI builds to always use Makefile (#266)
  • Tag AMIs with version of image-builder used (#266)
  • Allow overriding location of kubeadm template (#274)
  • Enable auditd in PhotonOS image (#271)
  • make deps now updates goss-provisioner as required, and is run automatically with make build (#301, #318)
  • Default/recommended Packer version is now 1.6 (#304)
  • jq package added to all RPM-based images (#305)
  • Disable HyperV daemon on Ubuntu 18.04 AMIs (#316)
  • Tune TCP stack in Photon for better bandwidth in K8s clusters (#319, #340)
  • Add option to disable color output from Packer (#329)
  • Refactor Azure Packer configs to break out different OS's into separate files (#325)
  • Allow multiple custom roles to be named (#328)
  • Improve cloud-init logging by adding timestamp (#294)
  • ova: default hardware version now set to 15 (#337)
  • Add Packer validation targets to makefile (#336)
  • Always explicitly set file mode to suppress Ansible warnings (#339)
  • Remove/disable conntrackd from all node images (conntrack tools still present) (#344)
  • Add Azure image building as PR CI job (#313)

Features 🚀

  • Vastly expanded GOSS validation support (#286, #288, #305, #307)
  • Add CentOS 7 as supported Node OS for Azure (#287)
  • Add RHEL 7 as supported Node OS for OVA (#129)
  • Allow customizing volume size for AMIs (#293)
  • Add a container image that has all pre-reqs installed (#276)

⚠️ Breaking Changes

  • If you previously used the var custom_role_name to pass the name of a custom Ansible role to include during build, this has been renamed to custom_role_names to allow for multiple roles. (#328)

v0.1.5

16 Jun 16:37
v0.1.5
7720f19
Compare
Choose a tag to compare

This patch release includes new features, bug fixes, and enhancements!

Bug Fixes 🐛

  • Fix race between systemd-resolvd and kubelet in kubelet systemd unit file (#229)
  • Fix ability to do QEMU build as both root and non/root (#250)
  • Force Python3 interpreter for Ansible in QEMU builder (#249)

Enhancements 📈

  • Update hack/image-upload.py to handle HAProxy OVA (#230)
  • Update QEMU image to use 18.04.4 ISO (#234)
  • Update Photon 3 image to use Update 2 Revision 2 (#251)
  • Update GOSS plugin version to 1.0.0 (#237)
  • Ensure that chrony is enabled and configured for Azure (#240)

Features 🚀

  • Initial exploratory support for container-based builds (#202)
  • Add ability to run custom Ansible role during build (#239)
  • Support for air-gapped AMI builds (#218)