1.38.1

Warning: Private GKE clusters are potentially impacted by a change included in this release of the node port the API server uses to communicate with the Config Connector webhooks from 443 (allowed by default) to 9443 (not allowed by default). Please ensure that 9443 is allowed by configuring your firewall rules according to the Adding firewall rules for specific use cases GKE private cluster documentation. This port will be reverted to 443 in future releases.

• Miscellaneous bug fixes

1.38.0

Warning: Private GKE clusters are potentially impacted by a change included in this release of the node port the API server uses to communicate with the Config Connector webhooks from 443 (allowed by default) to 9443 (not allowed by default). Please ensure that 9443 is allowed by configuring your firewall rules according to the Adding firewall rules for specific use cases GKE private cluster documentation. This port will be reverted to 443 in future releases.

• Added resourceID support to:
  • ContainerCluster
  • ContainerNodePool
  • SourceRepoRepository
  • AccessContextManager resources
• bug fix: enables 'config-connector bulk-export' to operate on LoggingLogSink resources
• Increased CPU and Memory limit for ConfigConnector Operator

1.37.0

Warning: Private GKE clusters are potentially impacted by a change included in this release of the node port the API server uses to communicate with the Config Connector webhooks from 443 (allowed by default) to 9443 (not allowed by default). Please ensure that 9443 is allowed by configuring your firewall rules according to the Adding firewall rules for specific use cases GKE private cluster documentation. This port will be reverted to 443 in future releases.

• Added a column Status Age showing the last transition time for the value in Status, and added the column Age back to the default output of kubectl get for all Config Connector resources. Improved the value at Status and Ready columns to match against the condition name.
• Added resourceID support for:
  • ArtifactRegistryRepository
  • Bigtable resources
  • DataflowJob
  • DNS resources
  • Monitoring resources
  • RedisInstance
  • ResourceManagerLien
  • SecretManagerSecret
  • Spanner resources
  • StorageTransferJob
• Fixed the issue with the legacy Common Name field on x509 certificate. Config Connector should be working on clusters of K8s 1.19+. (#335)

1.36.0

Warning: Private GKE clusters are potentially impacted by a change included in this release of the node port the API server uses to communicate with the Config Connector webhooks from 443 (allowed by default) to 9443 (not allowed by default). Please ensure that 9443 is allowed by configuring your firewall rules according to the Adding firewall rules for specific use cases GKE private cluster documentation. This port will be reverted to 443 in future releases.

• Added a column 'Ready' showing the value of the .status.conditions[0] (the ready condition), and associated Status to the default output of kubectl get for all Config Connector resources.
• Added support for referencing an organization to IAMCustomRole.
• Added a new sub-command to the CLI, config-connector print-resources which shows all config connector resources and their associated level of export and bulk-export support.
• Reduce the memory usage of deletiondefender and controller-manager in high-scale scenarios (1000+ resources under management).
• Added resourceID support to the Compute resources.

1.35.0

• Added resourceID support for:
  • SQL resources
  • PubSub resources
  • LoggingLogSink
  • StorageBucket
  • KMS resources
  • IAMCustomRole
• Added support for the MonitoringGroup resource
• Miscellaneous bug fixes

1.34.0

• Added support for IAM Member References. This allows users to create an IAMPolicyMember that references another resource as the IAM member (e.g. IAMServiceAccount, LoggingLogSink). For more information, see the memberFrom field in the IAMPolicyMember reference documentation. Support for IAM Member References is added only to IAMPolicyMember, not IAMPolicy. Fixes #89.
• Added support for the GameServicesRealm resource.
• Added IAM support for ComputeDisk.
• Added cacheMode, clientTtl, defaultTtl, maxTtl, negativeCaching, negativeCachingPolicy, serveWhileStale, and customResponseHeaders fields to ComputeBackendBucket.
• Added customTimeBefore, daysSinceCustomTime, daysSinceNoncurrentTime, and noncurrentTimeBefore fields to StorageBucket. Fixes #309.
• Allow for IAMPolicy, IAMPolicyMember, and IAMAuditConfig to reference resources in other namespaces. Fixes #320.
• Added support for UpdateFailed, DeleteFailed, DependencyNotFound, and DependencyNotReady events to IAMPolicy, IAMPoicyMember, IAMAuditConfig.
• Allow for Project and Folder resources to be migrated across folders and organizations by updating the folder-id/organization-id annotation. Only folder-to-folder or organization-to-organization migrations are allowed; folder-to-organization migrations or vice versa are not yet supported. Fixes #181.
• Miscellaneous bug fixes.

1.33.0

• Added support for the ComputeProjectMetadata resource
• Updated ContainerCluster samples to include a VPC-native scenario
• Added resourceID field to ServiceUsageService and StorageNotification
• Added IAM support to BigtableTable
• DataflowJobs can now be acquired by name
• Added computeResponseHeaders field to ComputeBackendService
• Added maintenancePolicy.maintenanceExclusion field to ContainerCluster
• Added description and disabled fields to LoggingLogSink
• Miscellaneous bug fixes

1.32.0

• Add resourceID field to Folder, BigQueryTable, BigQueryJob, and BigQueryDataset. (#147, #128)
• Add customResponseHeaders field to ComputeBackendService.
• Add maintenancePolicy.maintenanceExclusion field to ContainerCluster.
• Add description and disabled fields to LoggingLogSink.
• Add "ORC" as a new available value to the CRD description of externalDataConfiguration.sourceFormat field in BigQueryTable.
• Fix the bug that the actual Bigtable GC Policy can't be created via the Config Connector resource. (#300)

1.31.1

Miscellaneous fixes and improvements

1.31.0

• Added support for the ComputeTargetGRPCProxy resource
• Added support for the ResourceManagerLien resource
• Fixed issue where IAMPolicyMember and IAMPolicy resources cannot be deleted if an invalid
  configuration is applied (such as referencing a non-existent resource)
• Fixed issue where notificationConfig.pubsub.topicRef was not usable