v0.44.1

📰 Noteworthy

• [USER] REVERTED the PR #1000 for users who have not migrated populating the cloud provider storage endpoint from etcd backup secret to using the --store-endpoint-override flag. i.e Reverted "Removed deprecated support for passing storage endpoint via credential secrets for AWS, GCP & Azure. Users must now use the --store-endpoint-override flag for custom endpoints (emulators, S3-compatible providers, regional endpoints). The following credential secret fields are no longer supported: endpoint (S3), domain/emulatorEnabled (Azure), storageAPIEndpoint/emulatorEnabled (GCS). by @anveshreddy18 [#1000]"

application/spdx+json

• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:27c3f98772523d12a36ca4e9107bcc3153a30de43e4cff5da67ec09fd0059c69
• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:47de06bef05688499b3e8385fad39e923291d1bda8bd524762213ee49f7777e8

application/vnd.cyclonedx+json

• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:1c1e869ed0a0f7d22061cf0a88ba663d6a13e4f6c3469b6b932f9b10545cbe43
• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:631d670e5b3d5f93574b8c293850dcf950b247575858422e8d33f8ed650d6858

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.44.1

v0.44.0

[github.com/gardener/etcd-backup-restore:v0.44.0]

⚠️ Breaking Changes

• [USER] BREAKING: Removed deprecated support for passing storage endpoint via credential secrets for AWS, GCP & Azure. Users must now use the --store-endpoint-override flag for custom endpoints (emulators, S3-compatible providers, regional endpoints). The following credential secret fields are no longer supported: endpoint (S3), domain/emulatorEnabled (Azure), storageAPIEndpoint/emulatorEnabled (GCS). by @anveshreddy18 [#1000]

📰 Noteworthy

• [USER] Schedule/cron etcd defragmentation can be auto skipped if TotalDBSize < 3GB and FreeSpaceAvailable < 1GB (configurable via CLI flag --freespace-threshold ) by @ishan16696 [#1039]
• [USER] Remove StatefulSet-based scale-out detection from etcd's initial-cluster-state determination; cluster state for multi-node etcd is derived solely from etcd learner membership. Respective RBACs has also been removed from helm charts. by @priyadharshini-151193 [#1040]

🏃 Others

• [DEPENDENCY] Upgrade Go builder to 1.26.5 and bump grpc and the AWS SDK to fix reported vulnerabilities. by @anveshreddy18 [#1054]

application/spdx+json

• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:dc094324592a924d9a681c0d1892a91049e94b1090f3d0b8625687ad8d378dee
• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:f854ffba93b571ed3f5222f40fc252beb50421840ab459354b5c03c6da8a2f71

application/vnd.cyclonedx+json

• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:1c51a9f80b3c89e5e52c4dc9fd345c419e3e5d7795273c2c055690d588d7a5ea
• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:c36b12a0e22147e9ce44ae7eb3234a2ed06487c87f6a7676a6ed38a9192f79e4

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.44.0

v0.43.0

[github.com/gardener/etcd-backup-restore:v0.43.0]

⚠️ Breaking Changes

• [OPERATOR] Dropping the support of failBelowRevision feature as it seems to be no longer in usage for almost ~5years. by @ishan16696 [#1013]

📰 Noteworthy

• [OPERATOR] A fallback mechanism is introduced for contacting the etcd cluster when the --service-endpoints flag is not specified. by @CaptainIRS [#939]
• [DEVELOPER] Migrate e2e tests from archived LocalStack community image to licensed localstack/localstack:stable. Running AWS e2e tests now requires a LOCALSTACK_AUTH_TOKEN environment variable. by @shreyas-s-rao [#1014]

✨ New Features

• [OPERATOR] Disable fsync in the embedded etcd during restoration to reduce restoration time. by @Tomy2e [#991]
• [OPERATOR] etcd member names now support an optional member-name-prefix field in the etcd config file. When set, member names take the form <prefix>-<pod-name> instead of just the pod name. by @acumino [#1030]

🏃 Others

• [OPERATOR] Upgrade Go to 1.26, k8s.io/* to v0.35.5, and object store SDK dependencies. by @CaptainIRS [#1036]
• [DEVELOPER] Add GHA workflow PR Review Timeline for easy tracking of reviewer timelines for PRs. by @shreyas-s-rao [#983]

application/spdx+json

• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:7ade82666233ad1a638e6769b6d6d04a1c224d6e95911bef5419c6fcbbb843b6
• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:8f096ab3c1ee39264ec68caafc219667d7c49dcc7903322065ced0c519d9810f

application/vnd.cyclonedx+json

• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:afb99cb6caa77e9e0852ff70cca4df15a5794d1659e7484daabd49af6efa92cd
• etcdbrctl-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl@sha256:bd24f8bdb8dbe7e6db377adfe0bc210463f0c3a5d6d7b87a9234f7f69cb3c4e5

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.43.0

v0.41.2

[github.com/gardener/etcd-backup-restore:v0.41.2]

📰 Noteworthy

• [DEVELOPER] Migrate e2e tests from archived LocalStack community image to licensed localstack/localstack:stable. Running AWS e2e tests now requires a LOCALSTACK_AUTH_TOKEN environment variable. by @ishan16696 [#1022]

🏃 Others

• [OPERATOR] The copy operation now fetches the latest 4 full snapshots when checking if a final full snapshot is present. by @plkokanov [#1021]

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.41.2

v0.42.0

[github.com/gardener/etcd-backup-restore:v0.42.0]

⚠️ Breaking Changes

• [OPERATOR] The --enable-etcd-member-gc and --k8s-member-gc-duration flags are removed along with the member GC feature due to a lack of use-cases. by @CaptainIRS [#999]

🐛 Bug Fixes

• [OPERATOR] Fix the deadlock issue in snapshotter. by @ishan16696 [#971]
• [OPERATOR] Memory leak issue has been fixed by ensuring the etcd watch client is properly closed. by @ishan16696 [#985]
• [DEVELOPER] The make verify target was fixed so that it properly executes unit tests. by @plkokanov [#1002]

🏃 Others

• [OPERATOR] Upgrade etcd version to 3.5.27 by @Shreyas-s14 [#986]
• [OPERATOR] added the next-cluster-version-compatible flag for embed etcd and helm chart by @Shreyas-s14 [#988]
• [OPERATOR] export testresults as inlined ocm-resource by @heldkat [#981]
• [OPERATOR] The copy operation now fetches the latest 4 full snapshots when checking if a final full snapshot is present. by @plkokanov [#1001]
• [OPERATOR] Upgrade to golang:1.25.7 in build/Dockerfile by @Shreyas-s14 [#990]

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.42.0

v0.41.1

[github.com/gardener/etcd-backup-restore:v0.41.1]

🐛 Bug Fixes

• [OPERATOR] Fix the deadlock issue in snapshotter. by @ishan16696 [#984]
• [OPERATOR] Memory leak issue has been fixed by ensuring the etcd watch client is properly closed. by @ishan16696 [#987]

🏃 Others

• [OPERATOR] Upgrade to golang:1.25.7 in build/Dockerfile by @Shreyas-s14 [#997]
• [OPERATOR] Added the next-cluster-version-compatible flag to embed etcd and helm chart for version compatibility of etcd. by @Shreyas-s14 [#998]

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.41.1

v0.41.0

[github.com/gardener/etcd-backup-restore:v0.41.0]

✨ New Features

• [OPERATOR] Operators can now configure a secondary target for backup storage, please check this usage doc for more information: https://github.com/gardener/etcd-backup-restore/tree/master/docs/usage/backup_sync_dual_site.md by @tchinmai7 [#917]

🐛 Bug Fixes

• [OPERATOR] Fixed the restoration failures that could occur when etcd backups was taken from etcd which has auth enabled. by @Tomy2e [#954]

🏃 Others

• [OPERATOR] Upgrade to go 1.25.0 by @ishan16696 [#969]
• [OPERATOR] Storage endpoint configuration must now be passed through the --store-endpoint-override flag instead of a field in the credential secret. The older method of passing endpoint through credential files is now deprecated. by @renormalize [#952]
• [OPERATOR] Update AWS SDK to provider support for new regions by @kon-angelo [#960]
• [OPERATOR] Upgrade to golang:1.25.6 in build/Dockerfile by @renormalize [#974]
• [OPERATOR] Upgrade k8s.io/* to v0.34.3, and cloud provider dependencies to latest. by @renormalize [#980]
• [DEVELOPER] Introduce build/.dockerignore to reduce the time take in the COPY phase during a local docker build on a developer's machine. by @renormalize [#972]

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.41.0

v0.40.0

[github.com/gardener/etcd-backup-restore:v0.40.0]

📰 Noteworthy

• [DEPENDENCY] Upgrade k8s.io/* dependencies to v0.34.2, and direct dependencies to latest desired versions. by @renormalize [#937]

🏃 Others

• [OPERATOR] Adds the additional handling to reduce file permissions of safe_guard file. by @ishan16696 [#933]
• [OPERATOR] Upgrade to Go 1.25 in Dockerfile and Actions. by @renormalize [#929]
• [USER] Snapshot compression is now enabled by default.
  If you wish to disable the snapshot compression then please set this flag: --compress-snapshots to false. by @ishan16696 [#927]
• [DEVELOPER] Set least permissible privileges for GHA build for release & non-release workflows by @anveshreddy18 [#942]

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.40.0

v0.39.0

[github.com/gardener/etcd-backup-restore:v0.39.0]

✨ New Features

• [OPERATOR] When using S3 (or a S3-compatible) storage provider you can now configure the responseChecksumValidation and requestChecksumCalculation options via the secret file by @maboehm [#902]
• [OPERATOR] Cluster ID is now part of the etcd member lease for operators to easily troubleshoot split-brain/split-quorum scenarios. by @CaptainIRS [#913]
• [OPERATOR] GCS snapstore now support web identity authentication.
  To be enabled, the credentialsConfig (or serviceaccount.json) must be configured with credentials of type external_account, additionally in the same directory files projectID and token must be set respectively with the GCP project id and identity token. by @vpnachev [#908]

🏃 Others

• [DEVELOPER] migrate CICD-Pipeline to GitHub-Actions by @ccwienk [#894]

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.39.0

v0.38.0

[github.com/gardener/etcd-backup-restore:v0.38.0]

📰 Noteworthy

• [OPERATOR] etcd-backup-restore now supports worm immutable objects for storage provider: ALI Cloud OSS, provided by the WORM Lock feature. by @ishan16696 [#887]
• [OPERATOR] Support for WORM lock (ALI Cloud's OSS) in etcd-backup-restore is backward compatible. For more info please refer to this doc: https://github.com/gardener/etcd-backup-restore/blob/master/docs/usage/enabling_immutable_snapshots.md by @ishan16696 [#887]
• [OPERATOR] Snapshots garbage collection performed by etcd-backup-restore (if enabled) for ALI Cloud OSS is performed only when the snapshots's retention period get expires. by @ishan16696 [#887]

✨ New Features

• [OPERATOR] S3 snapstore now support web identity authentication.
  To be enabled, the roleARN and token credentials files or json fields must be set, while accessKeyID and secretAccessKey has to be unset. by @vpnachev [#892]

🐛 Bug Fixes

• [OPERATOR] The copy command does not attempt to upload snapshots with the .final suffix in the source to the destination store if they are already in the destination. by @renormalize [#907]

🏃 Others

• [DEVELOPER] Convert .reuse/dep5 to REUSE.toml. by @shreyas-s-rao [#904]
• [OPERATOR] The container base image has been updated to debian12. by @vpnachev [#892]

Container (OCI) Images

• etcdbrctl: europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.38.0