mirror of https://github.com/YuzuZensai/netbird-kubernetes-operator.git synced 2026-09-13 10:49:15 +00:00

T

127089a929 Bump sigs.k8s.io/kind from 0.31.0 to 0.32.0 in /test/e2e in the gomod-e2e group across 1 directory (#287 )

Bumps the gomod-e2e group with 1 update in the /test/e2e directory:
[sigs.k8s.io/kind](https://github.com/kubernetes-sigs/kind).

Updates `sigs.k8s.io/kind` from 0.31.0 to 0.32.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/kind/releases">sigs.k8s.io/kind's
releases</a>.</em></p>
<blockquote>
<h2>v0.32.0</h2>
<p>This release contains critical dependency updates, bug fixes, and
defaults to Kubernetes 1.36.1.</p>
<h1>Breaking Changes</h1>
<ul>
<li><strong>The default node image is now
<code>kindest/node:v1.36.1@sha256:3489c7674813ba5d8b1a9977baea8a6e553784dab7b84759d1014dbd78f7ebd5</code></strong></li>
<li><strong>New node images requiring upgrading kind to <code>kind load
...</code></strong>: Due to a containerd upgrade, you must upgrade
<code>kind</code> to this release or newer to use <code>kind load
...</code> with the newly published node images. As always, we cannot
gurantee full compatibility of node images between kind releases. You
can use the digests from previous releases, upgrade kind, or build your
own node-images.</li>
<li><strong>kubeadm v1beta4 config format is now used for Kubernetes
1.36.0+</strong> If you are using versioned config patches, you must
update to target v1beta4. Unversioned patches kind will attempt to
convert as needed (more below in New Features). This change is required
for Kubernetes 1.37+ which drops kubeadm v1beta3 config.</li>
<li><strong>Adoption of Envoy for Load Balancing in multi-control-plane
node clusters:</strong> HAProxy has been replaced by Envoy
(<code>docker.io/envoyproxy/envoy:v1.36.2</code>) as the load balancer
in multi-control-plane (HA) clusters. If you rely on custom HAProxy
loadbalancer configurations or images, please note that Envoy is now
used.</li>
<li><strong>cgroup v1 warning:</strong> A warning is now printed if
cgroup v1 is detected on the host. Kubernetes <a
href="https://redirect.github.com/kubernetes/enhancements/issues/5573">has
deprecated support for cgroup v1</a>, and at some point in the future
KIND releases / node-images will also drop support for cgroup v1.</li>
</ul>
<h1>New Features</h1>
<ul>
<li><strong>kubeadm v1beta4 configuration support:</strong> KIND now
uses the <code>v1beta4</code> config format for Kubernetes
<code>v1.36.0+</code> while maintaining <code>v1beta3</code> for
<code>v1.23.0</code> up to <code>v1.35.x</code>, and
<code>v1beta2</code> for older versions.</li>
<li><strong>Custom Merging &amp; Version-Awareness for Kubeadm Config
Patches:</strong>
<ul>
<li>KIND now automatically translates old-style map-based
<code>extraArgs</code> / <code>kubeletExtraArgs</code> patches to the
list-based <code>v1beta4</code> format when targeting
<code>v1beta4</code> configs.</li>
<li>Config patches now append to <code>extraArgs</code> /
<code>kubeletExtraArgs</code> / <code>certSANs</code> reliably. To
overwrite or make other more precise patching, use json6902
patches.</li>
</ul>
</li>
<li><strong>Support for containerd config v4 format:</strong> Enabled
support for containerd's config v4 format in <code>kind load</code> and
snapshotter parsing, which is required for newer containerd
versions.</li>
<li><strong>Building Node Images from CI Artifacts:</strong> Added
support to build node images from Kubernetes CI artifacts (resolving
endpoints like <code>https://dl.k8s.io/ci/latest.txt</code> or CI build
prefixes).</li>
<li><strong>Support for containerd version-aware containerd config
patching:</strong> Like kubeadmConfigPatches, containerd config patching
is now aware of <code>version</code> and if specified in patches will
only apply patches that match the containerd config being used.</li>
<li>Assorted dependency updates.</li>
</ul>
<p>Images pre-built for this release:</p>
<ul>
<li>v1.36.1:
<code>kindest/node:v1.36.1@sha256:3489c7674813ba5d8b1a9977baea8a6e553784dab7b84759d1014dbd78f7ebd5</code></li>
<li>v1.35.5:
<code>kindest/node:v1.35.5@sha256:ce977ae6d65918d0b58a5f8b5e940429c2ce42fa3a5619ec2bbc60b949c0ac95</code></li>
<li>v1.34.8:
<code>kindest/node:v1.34.8@sha256:02722c2dedddcfc00febf5d27fbeb9b7b2c14294c82109ff4a85d89ac9ba3256</code></li>
<li>v1.33.12:
<code>kindest/node:v1.33.12@sha256:3f5c8443c620245e4d355cfe09e96a91ead32ceaa569d3f1ca9edf0cb2fe2ff4</code></li>
</ul>
<p><strong>NOTE</strong>: You <em>must</em> use the <code>@sha256</code>
digest to guarantee an image built for this release, until such a time
as we switch to a different tagging scheme. Even then we will highly
encourage digest pinning for security and reproducibility reasons.</p>
<h1>Fixes</h1>
<ul>
<li>Fix permission error when creating pods with <code>hostUsers:
false</code> (Kubernetes 1.36+).</li>
<li>Handle registry ports correctly in image normalization logic (e.g.,
registry running on ports like <code>localhost:5000/...</code>).</li>
<li>Handle empty port mapping listen addresses correctly (defaults to
wildcard address).</li>
<li>Skip <code>/dev/mapper</code> mount on rootless Docker.</li>
<li>Assorted documentation fixes and improvements.</li>
</ul>
<p>See also:</p>
<ul>
<li><a
href="https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster">https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster</a></li>
<li><a
href="https://kind.sigs.k8s.io/docs/user/quick-start/#building-images">https://kind.sigs.k8s.io/docs/user/quick-start/#building-images</a></li>
</ul>
<p>NOTE: These node images support amd64 and arm64, both of our
supported platforms. <strong>You must use the same platform as your
host,</strong> for more context see <a
href="https://redirect.github.com/kubernetes-sigs/kind/issues/2718">#2718</a></p>
<h1>Contributors</h1>
<p>Committers for this release:</p>
<ul>
<li><a
href="https://github.com/AnjaliMishra1st"><code>@AnjaliMishra1st</code></a></li>
<li><a href="https://github.com/aojea"><code>@aojea</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/kind/blob/main/RELEASE.md">sigs.k8s.io/kind's
changelog</a>.</em></p>
<blockquote>
<h1>kind Release Process</h1>
<p>This document describes the steps to cut a new kind release. It is
intended for
maintainers who have push access to the upstream repository and the
staging
image registry.</p>
<h2>Prerequisites</h2>
<ul>
<li>GNU sed (macOS: <code>brew install gnu-sed</code>)</li>
<li>Docker with buildx support</li>
<li><a
href="https://github.com/google/go-containerregistry/blob/main/cmd/crane/README.md"><code>crane</code></a>
installed (for image promotion to Docker Hub)</li>
<li>Push access to <code>github.com/kubernetes-sigs/kind</code></li>
<li>Push access to <code>gcr.io/k8s-staging-kind</code></li>
<li>Push access to <code>kindest</code> on Docker Hub</li>
</ul>
<hr />
<h2>Phase 1 - Publish Node Images</h2>
<p>Node images must be built, tested, and promoted to Docker Hub
<strong>before</strong> the
kind release so their digest hashes are known and can be embedded in the
release binary.</p>
<h3>1.1 Build and push to staging</h3>
<p>Use <code>hack/release/push-node.sh</code> for Kubernetes v1.31 and
later:</p>
<pre lang="bash"><code>./hack/release/push-node.sh v1.35.0
</code></pre>
<p>This builds <code>amd64</code> and <code>arm64</code> node images and
pushes them to
<code>gcr.io/k8s-staging-kind/node:v1.35.0</code>, then creates a
multi-arch manifest
list.</p>
<p>You can override the registry or add architectures:</p>
<pre lang="bash"><code>REGISTRY=gcr.io/k8s-staging-kind
ARCHES=&quot;amd64 arm64&quot; ./hack/release/push-node.sh v1.35.0
</code></pre>
<h3>1.2 Test with the staging image</h3>
<p>Update the default image in
<code>pkg/apis/config/defaults/image.go</code> to point to the
staging image with its digest, then run CI to validate:</p>
<pre lang="go"><code>const Image =
&quot;gcr.io/k8s-staging-kind/node:v1.35.0@sha256:&lt;digest-from-push&gt;&quot;
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/cda67ef8588f6bfdac5358233f2471cb2149ecaf"><code>cda67ef</code></a>
version v0.32.0</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/a335a9ecaf7fa3e1c15cb758ddf73d3547f2f9b8"><code>a335a9e</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/kind/issues/4182">#4182</a>
from stmcginnis/kindest/node-v1.36.1</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/645b868081c9c506dddb9498eac11b8cf7dbebdd"><code>645b868</code></a>
bump default image to kindest/node:v1.36.1</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/d1b84e81dfe80910174f209cdf332148c64ee8a8"><code>d1b84e8</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/kind/issues/4181">#4181</a>
from BenTheElder/base-fix</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/25d94fa0794dcbe0d7eaad34f233959630ef2430"><code>25d94fa</code></a>
bump staging node image</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/088013abf90d230b1c7da817edcda51800bea580"><code>088013a</code></a>
update base image with permissions fix</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/995e8fa59e4b6bbe1f3e1f5b8d49d9e0b3c6632a"><code>995e8fa</code></a>
Fix: Permission error when creating pod with hostUsers: false (<a
href="https://redirect.github.com/kubernetes-sigs/kind/issues/4179">#4179</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/b029a2bff48151f4cba3cc5f59b5df334c27baf3"><code>b029a2b</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/kind/issues/4149">#4149</a>
from BenTheElder/bump-images-asdf</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/140186f00e6490d0ede21b2375fa94676656342e"><code>140186f</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/kind/issues/4174">#4174</a>
from BenTheElder/ci-builds</li>
<li><a
href="https://github.com/kubernetes-sigs/kind/commit/811ea849faa759a8fd2844043f392b4a717835bb"><code>811ea84</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/kind/issues/4173">#4173</a>
from BenTheElder/kubeadm-v1beta4-special-patch</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/kind/compare/v0.31.0...v0.32.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigs.k8s.io/kind&package-manager=go_modules&previous-version=0.31.0&new-version=0.32.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-08 10:12:15 +02:00

.github

Bump the github-actions group with 2 updates (#285 )

2026-06-08 10:08:06 +02:00

api

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

charts/netbird-operator

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

cmd

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

config/crd

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

docs

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

examples

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

hack

Fix SPDX license header (#231 )

2026-05-05 12:59:36 +02:00

internal

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

pkg/applyconfigurations

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

test/e2e

Bump sigs.k8s.io/kind from 0.31.0 to 0.32.0 in /test/e2e in the gomod-e2e group across 1 directory (#287 )

2026-06-08 10:12:15 +02:00

.dockerignore

Refactor Dockerfile to build Go binary outside of Docker (#218 )

2026-05-04 14:44:10 +02:00

.gitignore

Add codecov to Go unit tests (#282 )

2026-06-01 16:06:57 +02:00

.golangci.yml

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

CONTRIBUTOR_LICENSE_AGREEMENT.md

Add CLA (#15 )

2025-03-19 15:12:18 +01:00

Dockerfile

Rename Helm chart and Docker image and move to GHCR (#233 )

2026-05-06 12:26:32 +02:00

go.mod

Bump github.com/fluxcd/pkg/runtime from 0.106.0 to 0.107.0 (#280 )

2026-06-01 09:49:13 +02:00

go.sum

Bump github.com/fluxcd/pkg/runtime from 0.106.0 to 0.107.0 (#280 )

2026-06-01 09:49:13 +02:00

LICENSE

Initial commit

2025-01-24 13:01:03 +01:00

Makefile

Add codecov to Go unit tests (#282 )

2026-06-01 16:06:57 +02:00

PROJECT

Add new resource for Kubernetes API proxy (#279 )

2026-06-01 11:41:48 +02:00

README.md

Move docs to NetBird documentation website. (#247 )

2026-05-13 12:43:27 +02:00

README.md

NetBird Kubernetes Operator

The NetBird Kubernetes Operator automates the provisioning of NetBird network access for services running in your cluster. It extends the Kubernetes API with CRDs, letting you manage NetBird peers, routes, and groups declaratively, the same way you manage the rest of your infrastructure.

Features

Declarative peer management - define NetBird peers as Kubernetes resources and let the operator handle provisioning and lifecycle
Automatic secret management - setup keys and credentials are stored and rotated as Kubernetes secrets
Namespace-scoped or cluster-wide - deploy per-namespace for multi-tenant clusters or cluster-wide for full coverage
Works with any NetBird deployment - compatible with NetBird Cloud and self-hosted instances

Getting Started

For full setup instructions, see the Getting Started documentation.

Once your secret is configured, install the operator with Helm.

helm upgrade --install --create-namespace -n netbird netbird-operator oci://ghcr.io/netbirdio/helm-charts/netbird-operator

API

Kind	API Version
Group	`netbird.io/v1alpha1`
NetworkResource	`netbird.io/v1alpha1`
NetworkRouter	`netbird.io/v1alpha1`
SetupKey	`netbird.io/v1alpha1`
SidecarProfile	`netbird.io/v1alpha1`