Tanzu Packages latest

Tanzu Standard Repository Release Notes

Last Updated February 10, 2025

The Tanzu Standard repository contains services packaged in Carvel format that you can deploy to Tanzu Kubernetes Grid (TKG) clusters. Each datestamped repository version contains a set of package versions that are all compatible with the same Kubernetes versions.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

As of v2.5, TKG does not support clusters on AWS or Azure. See the End of Support for TKG Management and Workload Clusters on AWS and Azure in the Tanzu Kubernetes Grid v2.5 Release Notes.

Tanzu Standard v2025.1.27

This version of the datestamped Tanzu Standard repo is compatible with Tanzu Kubernetes Grid v2.5.2 and contains updates to the Prometheus and Whereabouts packages. The v2024.8.21 standard package is still supported and is still the default package for TKG 2.5.2. However, you should install v2025.1.27 if you use Prometheus and Whereabouts on your clusters.

The package versions in this release are compatible with Kubernetes minor versions v1.30, v1.29, v1.28, v1.27, and v1.26.

These new versions update the default tolerations for the Prometheus and Whereabouts node-exporter to NoSchedule and NoExecute respectively:

      tolerations:
      - effect: NoSchedule
        operator: Exists
      - effect: NoExecute
        operator: Exists

These tolerations match those of the Multus daemonSet.

For instructions about how to update Prometheus and Whereabouts from the versions provided in v2024.8.21 to the new versions in v2025.1.27, see Install Prometheus in Workload Clusters Deployed by a Standalone Management Cluster and Install Multus with Whereabouts in Workload Clusters Deployed by a Standalone Management Cluster.

Tanzu Standard v2024.8.21

This version of the datestamped Tanzu Standard repo is compatible with Tanzu Kubernetes Grid v2.5.2. The package versions in this release are compatible with Kubernetes minor versions v1.30, v1.29, v1.28, v1.27, and v1.26. This release contains the following component versions:

  • cert-manager
  • contour
    • v1.29.1+vmware.1-tkg.1 release notes
    • v1.28.5+vmware.1-tkg.1
    • v1.27.4+vmware.1-tkg.1
  • external-dns
    • v0.14.2+vmware.1-tkg.1 release notes
    • v0.13.6+vmware.2-tkg.1
    • v0.12.2+vmware.8-tkg.1
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.6-tkg.1 release notes
    • v0.24.4+vmware.3-tkg.1
    • v0.33.0+vmware.3-tkg.1
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.2-tkg.1 release notes
    • v0.32.0+vmware.3-tkg.1
    • v0.24.4+vmware.3-tkg.1
  • fluxcd-helm-controller
    • v0.36.2+vmware.2-tkg.1 release notes
    • v0.28.1+vmware.3-tkg.1
    • v0.36.2+vmware.2-tkg.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
    • v1.30.0+vmware.2-tkg.1 release notes
    • v1.29.0+vmware.2-tkg.1
    • v1.28.0+vmware.1-tkg.2
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.7.2

Component versions packaged in this datestamped Tanzu Standard repo:

  • cert-manager
  • contour
    • v1.28.2+vmware.1-tkg.1 release notes
    • v1.27.1+vmware.1-tkg.1
    • v1.26.2+vmware.1-tkg.1
  • external-dns
    • v0.13.6+vmware.1-tkg.1 release notes
    • v0.12.2+vmware.7-tkg.1
    • v0.11.0+vmware.1-tkg.8
    • v0.10.0+vmware.1-tkg.8
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.5-tkg.1 release notes
    • v1.1.2+vmware.1-tkg.1
    • v0.36.1+vmware.2-tkg.2
    • v0.33.0+vmware.2-tkg.3
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.1-tkg.1 release notes
    • v0.32.0+vmware.1-tkg.4
    • v0.24.4+vmware.1-tkg.5
  • fluxcd-helm-controller
    • v0.36.2+vmware.1-tkg.1 release notes
    • v0.28.1+vmware.1-tkg.4
    • v0.21.0+vmware.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.6.27

Component versions packaged in this datestamped Tanzu Standard repo:

  • cert-manager
  • contour
    • v1.28.2+vmware.1-tkg.1 release notes
    • v1.27.1+vmware.1-tkg.1
    • v1.26.2+vmware.1-tkg.1
  • external-dns
    • v0.13.6+vmware.1-tkg.1 release notes
    • v0.12.2+vmware.7-tkg.1
    • v0.11.0+vmware.1-tkg.8
    • v0.10.0+vmware.1-tkg.8
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.5-tkg.1 release notes
    • v1.1.2+vmware.1-tkg.1
    • v0.36.1+vmware.2-tkg.2
    • v0.33.0+vmware.2-tkg.3
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.1-tkg.1 release notes
    • v0.32.0+vmware.1-tkg.4
    • v0.24.4+vmware.1-tkg.5
  • fluxcd-helm-controller
    • v0.36.2+vmware.1-tkg.1 release notes
    • v0.28.1+vmware.1-tkg.4
    • v0.21.0+vmware.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.5.14

Component versions packaged in this datestamped Tanzu Standard repo:

  • cert-manager
  • contour
    • v1.28.2+vmware.1-tkg.1 release notes
    • v1.27.1+vmware.1-tkg.1
    • v1.26.2+vmware.1-tkg.1
  • external-dns
    • v0.13.6+vmware.1-tkg.1 release notes
    • v0.12.2+vmware.7-tkg.1
    • v0.11.0+vmware.1-tkg.8
    • v0.10.0+vmware.1-tkg.8
  • fluent-bit
  • grafana
  • prometheus
  • harbor
  • multus-cni
  • whereabouts
  • fluxcd-source-controller
    • v1.1.2+vmware.5-tkg.1 release notes
    • v1.1.2+vmware.1-tkg.1
    • v0.36.1+vmware.2-tkg.2
    • v0.33.0+vmware.2-tkg.3
    • v0.24.4+vmware.2-tkg.3
  • fluxcd-kustomize-controller
    • v1.1.1+vmware.1-tkg.1 release notes
    • v0.32.0+vmware.1-tkg.4
    • v0.24.4+vmware.1-tkg.5
  • fluxcd-helm-controller
    • v0.36.2+vmware.1-tkg.1 release notes
    • v0.28.1+vmware.1-tkg.4
    • v0.21.0+vmware.1-tkg.5
  • external-csi-snapshot-webhook
  • cluster-autoscaler
  • vsphere-pv-csi-webhook

Tanzu Standard v2024.4.12

Supported TKr Versions

Package version compatibility on workload clusters is based on their Kubernetes version, not the TKG version of their standalone management cluster.

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.28, v1.27, and v1.26 as follows:

Package Package Version Kubernetes v1.28 TKrs Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs
Cert Manager
cert-manager
1.12.2+vmware.2-tkg.2
Cluster Autoscaler
cluster-autoscaler
1.27.2+vmware.1-tkg.3
1.26.2+vmware.1-tkg.3
1.25.1+vmware.1-tkg.3
Contour
contour
1.28.2+vmware.1-tkg.1
1.27.1+vmware.1-tkg.1
1.26.2+vmware.1-tkg.1
External CSI Snapshot Validation Webhook
external-csi-snapshot-webhook
6.1.0+vmware.1-tkg.5
External DNS
external-dns
0.13.6+vmware.1-tkg.1
0.12.2+vmware.7-tkg.1
0.11.0+vmware.1-tkg.8
0.10.0+vmware.1-tkg.8
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.2
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.4
0.21.0+vmware.1-tkg.5
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.4
0.24.4+vmware.1-tkg.5
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2-tkg.2
0.33.0+vmware.2-tkg.3
0.24.4+vmware.2-tkg.3
Grafana
grafana
10.0.1+vmware.1-tkg.2
Harbor
harbor
2.9.1+vmware.1-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.2-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.2
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
3.1.0+vmware.1-tkg.3
Whereabouts
whereabouts
0.6.3+vmware.1-tkg.1
0.5.4+vmware.1-tkg.1
0.5.1+vmware.2-tkg.1

cert-manager v1.12.2

What’s New

Supported Versions

TKG versionjetstack_cert-manager versionvmware cert-manager package versionKubernetes version compatibility
2.5, 2.4v1.12.2v1.12.2+vmware.2-tkg.21.21-1.27

Image Versions

cert-manager v1.12.2 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4. See Supported Releases in the cert-manager documentation.

Cluster Autoscaler v1.27.2

What’s New

Contour v1.28.2

What’s New

  • Update Envoy to v1.29.2
  • Disable Envoy removing TE header

Included versions:

See the Contour Compatibility Matrix.

External DNS v0.13.6

What’s New

  • See the release notes for the following versions of External DNS included in the Tanzu Standard v2024.4.12 repository:

  • v0.13.6

  • v0.12.2
  • v0.11.0
  • v0.10.0

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.2 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: fluxcd-source-controller version is unchanged since v2023.9.19, released with TKG v2.4.0; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.0.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.9.1

What’s New

Component Versions

Harbor v2.9.1 contains the following component image versions:

  • harbor-core:v2.9.1
  • harbor-db:v2.9.1
  • harbor-exporter:v2.9.1
  • harbor-jobservice:v2.9.1
  • harbor-portal:v2.9.1
  • harbor-registryctl:v2.9.1
  • registry-photon:v2.9.1
  • notary-server-photon:v2.9.1
  • notary-signer-photon:v2.9.1
  • redis-photon:v2.9.1
  • trivy-adapter-photon:v2.9.1

Multus-CNI v4.0.1

  • No change; same version used since TKG v2.3.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

Whereabouts v0.6.3

What’s New

  • Add overlapping ranges check to network_name feature
  • Denormalize IP name before checking if pod is alive
  • Rechecking pending Pods
  • For more details, see Whereabouts v0.6.3.

Tanzu Standard v2024.2.1

Supported TKr Versions

Package version compatibility on workload clusters is based on their Kubernetes version, not the TKG version of their standalone management cluster.

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.28, v1.27, and v1.26 as follows:

Package Package Version Kubernetes v1.28 TKrs Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs
Cert Manager
cert-manager
1.12.2+vmware.2-tkg.1
Cluster Autoscaler
cluster-autoscaler
1.27.2+vmware.1-tkg.3
1.26.2+vmware.1-tkg.3
1.25.1+vmware.1-tkg.3
Contour
contour
1.26.1+vmware.1-tkg.1
1.25.3+vmware.1-tkg.1
1.24.6+vmware.1-tkg.1
External CSI Snapshot Validation Webhook
external-csi-snapshot-webhook
6.1.0+vmware.1-tkg.3
External DNS
external-dns
0.13.6+vmware.1-tkg.1
0.12.2+vmware.7-tkg.1
0.11.0+vmware.1-tkg.8
0.10.0+vmware.1-tkg.8
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.2
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.4
0.21.0+vmware.1-tkg.5
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.4
0.24.4+vmware.1-tkg.5
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2-tkg.2
0.33.0+vmware.2-tkg.3
0.24.4+vmware.2-tkg.3
Grafana
grafana
10.0.1+vmware.1-tkg.2
Harbor
harbor
2.9.1+vmware.1-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.2-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.2
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
3.1.0+vmware.1-tkg.3
Whereabouts
whereabouts
0.6.1+vmware.3-tkg.1
0.5.4+vmware.1-tkg.1
0.5.1+vmware.2-tkg.1

cert-manager v1.12.2

What’s New

Supported Versions

TKG versionjetstack_cert-manager versionvmware cert-manager package versionKubernetes version compatibility
2.5, 2.4v1.12.2v1.12.2+vmware.2-tkg.21.21-1.27

Image Versions

cert-manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4. See Supported Releases in the cert-manager documentation.

Cluster Autoscaler v1.27.2

What’s New

Contour v1.26.1

What’s New

Included versions:

See the Contour Compatibility Matrix.

Deprecations

  • The envoy.service.loadBalancerIP configuration field is deprecated in the Contour v1.25.2 package schema. Use cloud provider-specific Service annotations instead.

External DNS v0.13.6

What’s New

  • See the release notes for the following versions of External DNS included in the Tanzu Standard v2024.2.1 repository:

  • v0.13.6

  • v0.12.2
  • v0.11.0
  • v0.10.0

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.2 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: fluxcd-source-controller version is unchanged since v2023.9.19, released with TKG v2.4.0; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.0.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.9.1

What’s New

Component Versions

Harbor v2.9.1 contains the following component image versions:

  • harbor-core:v2.9.1
  • harbor-db:v2.9.1
  • harbor-exporter:v2.9.1
  • harbor-jobservice:v2.9.1
  • harbor-portal:v2.9.1
  • harbor-registryctl:v2.9.1
  • registry-photon:v2.9.1
  • notary-server-photon:v2.9.1
  • notary-signer-photon:v2.9.1
  • redis-photon:v2.9.1
  • trivy-adapter-photon:v2.9.1

Multus-CNI v4.0.1

  • No change; same version used since TKG v2.3.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

Whereabouts v0.6.1

What’s New

  • No change; same version used since TKG v2.3.0.

Tanzu Standard v2023.11.21

Supported TKr Versions

Package version compatibility on workload clusters is based on their Kubernetes version, not the TKG version of their standalone management cluster.

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.27, v1.26, and v1.25 as follows:

Package Package Version Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs Kubernetes v1.25 TKrs
Cert Manager
cert-manager
1.12.2+vmware.1-tkg.1
1.11.1+vmware.1-tkg.1
Cluster Autoscaler
cluster-autoscaler
1.27.2+vmware.1-tkg.3
1.26.2+vmware.1-tkg.2
1.25.1+vmware.1-tkg.2
Contour
contour
1.25.2+vmware.1-tkg.1
1.24.5+vmware.1
External CSI Snapshot Validation Webhook
external-csi-snapshot-webhook
6.1.0+vmware.1-tkg.3
External DNS
external-dns
0.13.4+vmware.2-tkg.2
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.1
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.3
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.3
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2
0.33.0+vmware.2
Grafana
grafana
10.0.1+vmware.1-tkg.1
Harbor
harbor
2.8.4+vmware.1-tkg.1
2.8.2+vmware.2-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.1-tkg.2
3.8.0+vmware.3-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.1
2.37.0+vmware.3-tkg.1
2.36.2+vmware.1-tkg.1
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
* *
Whereabouts
whereabouts
0.6.1+vmware.2-tkg.2
0.5.4+vmware.2-tkg.1

* Expected compatibility

cert-manager v1.12.2

What’s New

Supported Versions

TKG versionjetstack_cert-manager versionvmware cert-manager package versionKubernetes version compatibility
2.4v1.12.2v1.12.2+vmware.1-tkg.11.21-1.27

Image Versions

cert-manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4. See Supported Releases in the cert-manager documentation.

Contour v1.25.2

What’s New

Included versions:

  • Contour v1.25.2
    • See the release notes for v1.25.0-2:
  • Contour v1.24.5

Supported Versions

  • Contour v1.25.2 is supported on Kubernetes v1.25-v1.27.
  • Contour v1.24.5 is supported on Kubernetes v1.24-v1.26.

See the Contour Compatibility Matrix.

Deprecations

  • The envoy.service.loadBalancerIP configuration field is deprecated in the Contour v1.25.2 package schema. Use cloud provider-specific Service annotations instead.

External DNS v0.13.4

What’s New

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.1 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: fluxcd-source-controller version is unchanged since v2023.9.19, released with TKG v2.4.0; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.0.

See the following Fluxcd controller package release notes:

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.8.4

What’s New

Supported Versions

TKG versionHarbor versionCompatible Kubernetes versions
2.4.1, 2.4.02.8.4v1.25.10, v1.26.5, v1.27.2

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Multus-CNI v4.0.1

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

Whereabouts v0.6.1

What’s New

Tanzu Standard v2023.10.16

These release notes apply to packages in the Tanzu Standard v2023.10.16 package repository, which is released around the same date as and compatible with Tanzu Kubernetes Grid (TKG) v2.3.1 and Kubernetes v1.24-1.26.

Package version compatibility on workload clusters is based on their Kubernetes version, not the TKG version of their standalone management cluster.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

Cert-manager v1.11.1

What’s New

Supported Versions

TKG versionjetstack_cert-manager versionVMware cert-manager package versionKubernetes version compatibility
v2.3.1, v2.3.0v1.11.1v1.11.1+vmware.1v1.21-1.27

Component Versions

cert manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.11.1
  • quay.io/jetstack/cert-manager-controller:v1.11.1
  • quay.io/jetstack/cert-manager-webhook:v1.11.1
  • quay.io/jetstack/cert-manager-acmesolver:v1.11.1

Deprecations

The following cert manager versions are deprecated in TKG v2.3:

  • v1.5.3
  • v1.7.2
  • v1.10.2

Contour v1.24.5

What’s New

  • See the release notes for Contour v1.24.5:
  • You can configure Envoy to install as a Deployment with a specified number of replicas rather than as a DaemonSet (default), using data values like the following:
    envoy:
      workload:
        type: Deployment
        replicas: 3
    
  • You can specify resource requests or limits for each container within the Contour and Envoy workloads, using data values like the following:

    contour:
      resources:
        contour:
          requests:
            cpu: 250m
            memory: 128Mi
          limits:
            cpu: 1
    
            memory: 512Mi
    envoy:
      resources:
        envoy:
    # include requests and limits as desired
        shutdown-manager:
    # include requests and limits as desired
    
  • data-values file configuration values are verified. Specifying an unsupported value in the data values results in an error.

Supported Versions

TKG versioncontour versionVMware contour package versionKubernetes version compatibility
v2.3.1v1.24.5v1.24.5+vmware.1-tkg.1v1.24-1.26
v2.3.0v1.24.4v1.24.4+vmware.1-tkg.1v1.24-1.26

Supported Kubernetes Versions

Contour v1.24.4 is supported on Kubernetes v1.24-v1.26. See the Contour Compatibility Matrix.

Deprecations

  • All versions of Contour prior to v1.24.4 have been removed from Tanzu Standard repository v2023.7.13.
  • Contour package data-values files no longer accept null values. For any configuration field with a value set to null, you should omit the value entirely.

External DNS v0.13.4

What’s New

  • See the External DNS v0.13.4 release notes
  • New createNamespace configuration field. Set to true to create the namespace that external-dns components are installed in. If set to false, package components install into an existing namespace.

Supported Versions

TKG versionexternal-dns versionVMware external-dns package versionKubernetes version compatibility
v2.3.1, v2.3.0v0.13.4v0.13.4+vmware.2-tkg.2v1.24-1.26

Fluent-bit v2.1.2

What’s New

Supported Versions

TKG versionfluent-bit versionVMware fluent-bit package versionKubernetes version compatibility
v2.3.1, v2.3.0v2.1.2v2.1.2+vmware.2-tkg.1v1.24-1.26

Limitations / Known Issues

  • Does not support AWS credential environment variables in the fluent-bit package ConfigMap for accessing AWS S3.
    • AWS credentials support is planned for a future release.

Fluxcd controllers

What’s New

See the following Fluxcd controller package release notes:

Supported Versions

TKG versionFluxCD controllerVMware package versionKubernetes version compatibility
v2.3.1, v2.3.0fluxcd-helm-controllerv0.21.0+vmware.1-tkg.1v1.24-1.26
v2.3.1, v2.3.0fluxcd-kustomize-controllerv0.24.4+vmware.1-tkg.1v1.24-1.26
v2.3.1, v2.3.0fluxcd-source-controllerv0.33.0+vmware.2-tkg.1v1.24-1.26

Grafana v9.5.1

What’s New

Supported Versions

TKG versiongrafana versionVMware grafana package versionKubernetes version compatibility
v2.3.1v9.5.1v9.5.1+vmware.2-tkg.3v1.24-1.26
v2.3.0v9.5.1v9.5.1+vmware.2-tkg.1v1.24-1.26

Component Versions

Grafana v9.5.1 contains the following component image versions:

  • grafana/grafana:9.5.1
  • kiwigrid/k8s-sidecar:1.22.0

Harbor v2.8.4

What’s New

  • See Harbor v2.8.4 release notes
  • Due to CVEs, TKG v2.3 compatibility with the following Harbor versions has been removed:
    • v2.2.3_vmware.1-tkg.1
    • v2.2.3_vmware.1-tkg.2
    • v2.3.3_vmware.1-tkg.1
    • v2.5.3_vmware.1-tkg.1
    • v2.7.1_vmware.1-tkg.1

Supported Versions

TKG versionharbor versionVMware harbor package versionKubernetes version compatibility
v2.3.1v2.8.4v2.8.4+vmware.1-tkg.1v1.24-1.26
v2.3.0v2.8.2v2.8.2+vmware.2-tkg.1v1.24-1.26

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Multus-CNI v4.0.1

What’s New

  • Introduces a thick-plugin deployment and architecture. See Multus-CNI v4.0.1 new feature
  • Changes default values as follows:

    namespace: kube-system
    #! DaemonSet related configuration
    daemonset:
      resources:
        limits:
          cpu: 100m
          memory: 50Mi
        requests:
          cpu: 100m
          memory: 50Mi
    configmap:
      cniVersion: 0.3.1
      multusConfigFile: auto
    

Supported Versions

TKG versionmultus-cni versionVMware multus-cni package versionKubernetes version compatibility
v2.3.1, v2.3.0v2.1.2v4.0.1+vmware.1-tkg.2v1.24-1.26

Prometheus v2.43.0

What’s New

Supported Versions

TKG versionprometheus versionVMware prometheus package versionKubernetes version compatibility
v2.3.1v2.43.0v2.43.0+vmware.4-tkg.1v1.24-1.26
v2.3.0v2.43.0v2.43.0+vmware.1-tkg.1v1.24-1.26

Component Versions

Prometheus v2.43.0 contains the following component image versions:

  • prom/prometheus:v2.43.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.5.1
  • jimmidyson/configmap-reload:v0.8.0
  • bitnami/kube-state-metrics:2.8.2
  • quay.io/prometheus/node-exporter:v1.5.0

Whereabouts v0.6.1

What’s New

  • Supports ipRanges for configuring dual-stack IP assigning; see Example IPv6 Config in the Whereabouts repo README.

Supported Versions

TKG versionwhereabouts versionVMware whereabouts package versionKubernetes version compatibility
v2.3.1, v2.3.0v0.6.1v0.6.1+vmware.2-tkg.1v1.24-1.26

Tanzu Standard v2023.9.19

These release notes apply to packages in the Tanzu Standard v2023.9.19 package repository, which is released around the same date as and compatible with Tanzu Kubernetes Grid (TKG) v2.4.0 and Kubernetes v1.25-1.27.

Package version compatibility on workload clusters is based on their Kubernetes version, not the TKG version of their standalone management cluster.

For information about VMware support for these packages, see Tanzu Standard Repository Package Support.

Supported TKr Versions

Package versions in the Tanzu Standard repository are compatible with Tanzu Kubernetes releases (TKrs) for Kubernetes minor versions v1.27, v1.26, and v1.25 as follows:

Package Package Version Kubernetes v1.27 TKrs Kubernetes v1.26 TKrs Kubernetes v1.25 TKrs
Cert Manager
cert-manager
1.12.2+vmware.1-tkg.1
1.11.1+vmware.1-tkg.1
Contour
contour
1.25.2+vmware.1-tkg.1
1.24.5+vmware.1
External DNS
external-dns
0.13.4+vmware.2-tkg.2
Fluent Bit
fluent-bit
2.1.6+vmware.1-tkg.1
FluxCD Helm Controller
fluxcd-helm-controller
0.28.1+vmware.1-tkg.3
FluxCD Kustomize Controller
fluxcd-source-controller
0.32.0+vmware.1-tkg.3
FluxCD Source Controller
fluxcd-source-controller
0.36.1+vmware.2
0.33.0+vmware.2
Grafana
grafana
10.0.1+vmware.1-tkg.1
Harbor
harbor
2.8.4+vmware.1-tkg.1
2.8.2+vmware.2-tkg.1
Multus CNI
multus-cni
4.0.1+vmware.1-tkg.2
3.8.0+vmware.3-tkg.1
Prometheus
prometheus
2.45.0+vmware.1-tkg.1
2.37.0+vmware.3-tkg.1
2.36.2+vmware.1-tkg.1
Snapshot Validation Webhook
snapshot-validation-webhook
* *
vSphere PV CSI Webhook
vsphere-pv-csi-webhook
* *
Whereabouts
whereabouts
0.6.1+vmware.2-tkg.2
0.5.4+vmware.2-tkg.1

* Expected compatibility

cert-manager v1.12.2

What’s New

Supported Versions

TKG versionjetstack_cert-manager versionvmware cert-manager package versionKubernetes version compatibility
2.4v1.12.2v1.12.2+vmware.1-tkg.11.21-1.27

Image Versions

cert-manager v1.11.1 contains following component image versions:

  • quay.io/jetstack/cert-manager-cainjector:v1.12.2
  • quay.io/jetstack/cert-manager-controller:v1.12.2
  • quay.io/jetstack/cert-manager-webhook:v1.12.2
  • quay.io/jetstack/cert-manager-acmesolver:v1.12.2

Deprecations

Cert Manager package versions 1.9.x and prior are not supported on TKrs released with TKG v2.4.0. See Supported Releases in the cert-manager documentation.

Contour v1.25.2

What’s New

Included versions:

  • Contour v1.25.2
    • See the release notes for v1.25.0-2:
  • Contour v1.24.5

Supported Versions

  • Contour v1.25.2 is supported on Kubernetes v1.25-v1.27.
  • Contour v1.24.5 is supported on Kubernetes v1.24-v1.26.

See the Contour Compatibility Matrix.

Deprecations

  • Contour 1.24.4 has been removed from Tanzu Standard repository v2023.9.19 due to CVEs.
  • The envoy.service.loadBalancerIP configuration field is deprecated in the Contour v1.25.2 package schema. Use cloud provider-specific Service annotations instead.

External DNS v0.13.4

What’s New

  • No change; same version as used for TKG v2.3.0.

Fluent-bit v2.1.6

What’s New

Image versions

The Fluent Bit package v2.1.6+vmware.1-tkg.1 contains following component image versions:

  • fluent/fluent-bit:2.1.6

FluxCD controllers

What’s New

  • Source controller: Tanzu Standard package repository v2023.9.19 has a new version offluxcd-source-controller; see the fluxcd-source-controller v0.36.1 release notes.

  • Helm controller and Kustomize controller: fluxcd-helm-controller and fluxcd-kustomize-controller versions are unchanged since v2023.7.13, released with TKG v2.3.

Grafana v10.0.1

What’s New

Image versions

Grafana package v10.0.1+vmware.1-tkg.2 contains following component image versions:

  • grafana/grafana:10.0.1
  • kiwigrid/k8s-sidecar:1.24.6

Harbor v2.8.4

What’s New

Supported Versions

TKG versionHarbor versionCompatible Kubernetes versions
2.4.02.8.4v1.25.10, v1.26.5, v1.27.2

Component Versions

Harbor v2.8.4 contains the following component image versions:

  • harbor-core:v2.8.4
  • harbor-db:v2.8.4
  • harbor-exporter:v2.8.4
  • harbor-jobservice:v2.8.4
  • harbor-portal:v2.8.4
  • harbor-registryctl:v2.8.4
  • registry-photon:v2.8.4
  • notary-server-photon:v2.8.4
  • notary-signer-photon:v2.8.4
  • redis-photon:v2.8.4
  • trivy-adapter-photon:v2.8.4

Deprecations

The following Harbor package versions have been removed from Tanzu Standard repository v2023.9.19 due to CVEs:

  • v2.2.3_vmware.1-tkg.1
  • v2.2.3_vmware.1-tkg.2
  • v2.3.3_vmware.1-tkg.1
  • v2.5.3_vmware.1-tkg.1
  • v2.7.1_vmware.1-tkg.1

Multus-CNI v4.0.1

  • No change; same version as used for TKG v2.3.0.

Prometheus v2.45.0

What’s New

Component Versions

Prometheus v2.45.0 contains the following component image versions:

  • prom/prometheus:v2.45.0
  • prom/alertmanager:v0.25.0
  • prom/pushgateway:v1.6.0
  • jimmidyson/configmap-reload:v0.11.0
  • bitnami/kube-state-metrics:2.9.2
  • quay.io/prometheus/node-exporter:v1.6.0

Deprecations

  • Prometheus package versions v2.37.0+vmware.2-tkg.1 and prior are not supported on TKrs released with TKG v2.4.0. Those package versions used Pod Security Policies, which were removed in Kubernetes v1.25.

Whereabouts v0.6.1

What’s New