Merge branch 'main' into kubernetes-1.34

Author: jfbus

Makefile

@@ -163,9 +163,10 @@ check-helm-docs:
 	./hack/verify-helm-docs
 
 helm-manifest:
-	@helm template test ./deploy/k8s-osc-ccm/ --set image.tag=v1.31.0 > deploy/osc-ccm-manifest-v1.31.yml
-	@helm template test ./deploy/k8s-osc-ccm/ --set image.tag=v1.32.0 > deploy/osc-ccm-manifest-v1.32.yml
-	@helm template test ./deploy/k8s-osc-ccm/ --set image.tag=v1.33.0 > deploy/osc-ccm-manifest-v1.33.yml
+	@helm template test ./deploy/k8s-osc-ccm/ --set image.tag=v1.31.1 > deploy/osc-ccm-manifest-v1.31.yml
+	@helm template test ./deploy/k8s-osc-ccm/ --set image.tag=v1.32.1 > deploy/osc-ccm-manifest-v1.32.yml
+	@helm template test ./deploy/k8s-osc-ccm/ --set image.tag=v1.33.1 > deploy/osc-ccm-manifest-v1.33.yml
+	@helm template test ./deploy/k8s-osc-ccm/ --set image.tag=v1.34.1 > deploy/osc-ccm-manifest-v1.34.yml
 
 check-helm-manifest:
 	./hack/verify-helm-manifest.sh

deploy/osc-ccm-manifest-v1.31.yml

@@ -146,7 +146,7 @@ spec:
       serviceAccountName: cloud-controller-manager
       containers:
         - name: osc-cloud-controller-manager
-          image: outscale/cloud-provider-osc:v1.31.0
+          image: outscale/cloud-provider-osc:v1.31.1
           imagePullPolicy: IfNotPresent
           command:
             - /bin/osc-cloud-controller-manager

deploy/osc-ccm-manifest-v1.32.yml

@@ -146,7 +146,7 @@ spec:
       serviceAccountName: cloud-controller-manager
       containers:
         - name: osc-cloud-controller-manager
-          image: outscale/cloud-provider-osc:v1.32.0
+          image: outscale/cloud-provider-osc:v1.32.1
           imagePullPolicy: IfNotPresent
           command:
             - /bin/osc-cloud-controller-manager

deploy/osc-ccm-manifest-v1.33.yml

@@ -146,7 +146,7 @@ spec:
       serviceAccountName: cloud-controller-manager
       containers:
         - name: osc-cloud-controller-manager
-          image: outscale/cloud-provider-osc:v1.33.0
+          image: outscale/cloud-provider-osc:v1.33.1
           imagePullPolicy: IfNotPresent
           command:
             - /bin/osc-cloud-controller-manager

deploy/osc-ccm-manifest-v1.34.yml

@@ -0,0 +1,186 @@
+---
+# Source: osc-cloud-controller-manager/templates/serviceaccount.yaml
+# ServiceAccount Def
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cloud-controller-manager
+  namespace: kube-system
+---
+# Source: osc-cloud-controller-manager/templates/osc-ccm.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: system:cloud-controller-manager
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+  - update
+- apiGroups:
+  - ""
+  resources:
+  - serviceaccounts
+  verbs:
+  - create
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - create
+  - get
+  - list
+  - update
+  - watch
+- apiGroups:
+  - ""
+  resourceNames:
+  - node-controller
+  - service-controller
+  - route-controller
+  resources:
+  - serviceaccounts/token
+  verbs:
+  - create
+- apiGroups:
+  - ""
+  resources:
+  - nodes
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - nodes/status
+  verbs:
+  - patch
+- apiGroups:
+  - ""
+  resources:
+  - services
+  verbs:
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - services/status
+  verbs:
+  - patch
+  - update
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - endpoints
+  verbs:
+  - create
+  - get
+  - list
+  - update
+  - watch
+---
+# Source: osc-cloud-controller-manager/templates/osc-ccm.yaml
+# CCM Service
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: system:cloud-controller-manager
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- apiGroup: ""
+  kind: ServiceAccount
+  name: cloud-controller-manager
+  namespace: kube-system
+---
+# Source: osc-cloud-controller-manager/templates/osc-ccm.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: cloud-controller-manager:apiserver-authentication-reader
+  namespace: kube-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: extension-apiserver-authentication-reader
+subjects:
+- apiGroup: ""
+  kind: ServiceAccount
+  name: cloud-controller-manager
+  namespace: kube-system
+---
+# Source: osc-cloud-controller-manager/templates/osc-ccm.yaml
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    app: osc-cloud-controller-manager
+  name: osc-cloud-controller-manager
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels:
+      app: osc-cloud-controller-manager
+  updateStrategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: osc-cloud-controller-manager
+    spec:
+      serviceAccountName: cloud-controller-manager
+      containers:
+        - name: osc-cloud-controller-manager
+          image: outscale/cloud-provider-osc:v1.34.1
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/osc-cloud-controller-manager
+            - --configure-cloud-routes=false
+            - --cloud-provider=osc
+            - -v=5
+          resources:
+            {}
+          env:
+            - name: OSC_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: osc-secret
+                  key: access_key
+                  optional: true
+            - name: OSC_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: osc-secret
+                  key: secret_key
+                  optional: true
+      hostNetwork: true
+      affinity: 
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: node-role.kubernetes.io/control-plane
+                operator: Exists
+      nodeSelector: 
+        {}
+      tolerations: 
+        - effect: NoSchedule
+          key: node.cloudprovider.kubernetes.io/uninitialized
+          value: "true"
+        - effect: NoSchedule
+          key: node-role.kubernetes.io/control-plane

docs/CHANGELOG.md

@@ -1,21 +1,69 @@
 # Changelog
 
+## [v1.34.1] - 2025-11-26
+
+New release for Kubernetes 1.34.
+
+### ✨ Added
+* ✨ feat: check credentials at boot by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/547
+### 🐛 Fixed
+* 🐛 fix: nodes should be removed when terminated by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/546
+### 📦 Dependency updates
+* ⬆️ deps: Bump github.com/outscale/osc-sdk-go/v2 from 2.29.0 to 2.31.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/524
+* ⬆️ build(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/542
+
+## [v1.33.1] - 2025-11-26
+
+### ✨ Added
+* ✨ feat: check credentials at boot by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/547
+### 🐛 Fixed
+* 🐛 fix: nodes should be removed when terminated by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/546
+### 📦 Dependency updates
+* ⬆️ deps: Bump github.com/outscale/osc-sdk-go/v2 from 2.29.0 to 2.31.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/524
+* ⬆️ build(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/542
+
+## [v1.32.1] - 2025-11-26
+
+### ✨ Added
+* ✨ feat: check credentials at boot by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/547
+### 🐛 Fixed
+* 🐛 fix: nodes should be removed when terminated by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/546
+### 📦 Dependency updates
+* ⬆️ deps: Bump github.com/outscale/osc-sdk-go/v2 from 2.29.0 to 2.31.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/524
+* ⬆️ build(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/542
+
+## [v1.31.1] - 2025-11-26
+
+### ✨ Added
+* ✨ feat: check credentials at boot by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/547
+### 🐛 Fixed
+* 🐛 fix: nodes should be removed when terminated by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/546
+### 📦 Dependency updates
+* ⬆️ deps: Bump github.com/outscale/osc-sdk-go/v2 from 2.29.0 to 2.31.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/524
+* ⬆️ build(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 by @dependabot[bot] in https://github.com/outscale/cloud-provider-osc/pull/542
+
 ## [v1.33.0] - 2025-11-19
 
+New release for Kubernetes 1.33.
+
 ### ✨ Added
 * ✨feat(loadbalancer): implement ipmode by @moh2a in https://github.com/outscale/cloud-provider-osc/pull/518
 ### 🛠️ Changed / Refactoring
 * 🔊 logs: fix LBU response logging / switch to Go 1.25 by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/519
 
 ## [v1.32.0] - 2025-11-19
 
+New release for Kubernetes 1.32.
+
 ### ✨ Added
 * ✨feat(loadbalancer): implement ipmode by @moh2a in https://github.com/outscale/cloud-provider-osc/pull/518
 ### 🛠️ Changed / Refactoring
 * 🔊 logs: fix LBU response logging / switch to Go 1.25 by @jfbus in https://github.com/outscale/cloud-provider-osc/pull/519
 
 ## [v1.31.0] - 2025-11-19
 
+New release for Kubernetes 1.31.
+
 ### ✨ Added
 * ✨feat(loadbalancer): implement ipmode by @moh2a in https://github.com/outscale/cloud-provider-osc/pull/518
 ### 🛠️ Changed / Refactoring

docs/README.md

@@ -30,10 +30,10 @@ CCM versions are available for Kubernetes 1.31, 1.32, and 1.33. As Kubernetes 1.
 | Kubernetes version | Recommended CCM version |
 |--------------------|-------------------------|
 | v1.30.x            | v0.2.8                  |
-| v1.31.x            | v1.31.0                 |
-| v1.32.x            | v1.32.0                 |
-| v1.33.x            | v1.33.0                 |
-| v1.34.x            | to be released          |
+| v1.31.x            | v1.31.1                 |
+| v1.32.x            | v1.32.1                 |
+| v1.33.x            | v1.33.1                 |
+| v1.34.x            | v1.34.1                 |
 
 ## Deployment on a new cluster