v2.24.0

What's Changed

🐛 Bug fixes

• terraform-provider: pass ServiceCIDR from resource to chart loader by @burgerdev in #3793

🔧 Other changes

• helm: bump Cilium version to v1.15.19-edg.0 by @burgerdev in #3894
• cryptsetup: enable detached header by @daniel-weisse in #3927
• helm: update CSI charts by @daniel-weisse in #3932
• deps: update to Fedora 42 by @msanft in #3929

Full Changelog: v2.23.1...v2.24.0

v2.23.1

What's Changed

This patch release addresses two bugs in Constellation infrastructure setup.

1. Changing the Kubernetes service CIDR was not working correctly when using the Terraform provider.
2. On GCP, the cloud controller manager had insufficient permissions to manage load balancers.

🐛 Bug fixes

• terraform-provider: pass ServiceCIDR from resource to chart loader in d3f32af
• helm: force app creds in GCP CCM in 6510a9d

Full Changelog: v2.23.0...v2.23.1

v2.23.0

What's Changed

🔧 Other changes

• cli: support http proxy by @thomasten in #3772

Full Changelog: v2.22.0...v2.23.0

v2.22.0

What's Changed

🛠 Breaking changes

• terraform: remove legacy infrastructure modules by @3u13r in #3691
• gcp: support projects with no default permissions by @3u13r in #3656

🎁 New features

• feat: implement RFC 16 to allow emergency node access by @miampf in #3557

🐛 Bug fixes

• terraform: update AWS LB permissions by @msanft in #3681

Full Changelog: v2.21.1...v2.22.0

v2.21.1

What's Changed

🐛 Bug fixes

• Fixed an issue with LoadBalancer resources on AWS that caused them not to be created as they should through the aws-load-balancer-controller. Users upgrading from a previous release on AWS have to perform an IAM upgrade for this release of Constellation:

  constellation iam upgrade apply

Full Changelog: v2.21.0...v2.21.1

v2.21.0

What's Changed

🎁 New features

• cli: add ssh command to securely connect with nodes over ssh by @miampf in #3568
• versions: add k8s 1.31, remove k8s 1.28 by @burgerdev in #3396

🐛 Bug fixes

• attestation: fix Azure SNP attestation issuing caused by a bug in MAA PCR11 handling by @thomasten in #3644

🔧 Other changes

• docs: correct STACKIT IDs by @msanft in #3545
• deps: update go-sev-guest to include fix for badram platform info by @katexochen in #3552
• dependencies: drop google/go-sev-guest fork by @daniel-weisse in #3595

Full Changelog: v2.20.0...v2.21.0

v2.20.1

• Fixed an issue in which MAA-based attestation on Azure would not succeed due to a bug in handling PCR 11 in the MAA service.
• Minor Fixes.

Full Changelog: v2.20.0...v2.20.1

v2.20.0

What's Changed

🐛 Bug fixes

• terraform: fix security rule reconciliation on Azure by @elchead in #3454
• bootstrapper: only err if no control plane IPs available by @msanft in #3496

🔧 Other changes

• config: only allow confidential instances on stackit by @h3adex in #3463

New Contributors

• @h3adex made their first contribution in #3463

Full Changelog: v2.19.3...v2.20.0

v2.19.3

What's Changed

🐛 Bug fixes

• deps: update google/go-sev-guest to v0.11.2-0.20241122022416-97a55186df28 to fix AMD SEV-SNP attestation report parsing on AWS by @daniel-weisse in #3490

Full Changelog: v2.19.2...v2.19.3

v2.19.2

What's Changed

🐛 Bug fixes

• terraform: fix security rule reconciliation on Azure by @elchead in #3454

🔧 Other changes

• config: only allow confidential instances on stackit by @h3adex in #3463

Full Changelog: v2.19.0...v2.19.2