Deckhouse

Fixes


- **[candi]** Change containerd restart flow to avoid unwanted restarts. [7991](https://github.com/deckhouse/deckhouse/pull/7991)
- **[multitenancy-manager]** Fix the default `security-with-dedicated-nodes` project template. [7996](https://github.com/deckhouse/deckhouse/pull/7996)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.58.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.58.0).

Features


- **[control-plane-manager]** Option to change service account tokens issuer. [7892](https://github.com/deckhouse/deckhouse/pull/7892)

Fixes


- **[deckhouse]** Run `DeckhouseRelease` requirements checks only for enabled modules. [7925](https://github.com/deckhouse/deckhouse/pull/7925)
- **[ingress-nginx]** Fix MaxMind DB download for controller `1.9`. [7944](https://github.com/deckhouse/deckhouse/pull/7944)
Ingress-nginx 1.9 controller will restart.


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.58.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.58.0).

Fixes


- **[cloud-provider-vcd]** Change the default network mode for new VMs. [7875](https://github.com/deckhouse/deckhouse/pull/7875)
- **[control-plane-manager]** Fix error when `d8-cluster-configuration` secret is missing. [7861](https://github.com/deckhouse/deckhouse/pull/7861)
- **[deckhouse]** Сhange the way the `deckhouse` pod readiness is determined during the minor version update. [7867](https://github.com/deckhouse/deckhouse/pull/7867)
- **[multitenancy-manager]** Fix Project rendering in some cases for embedded templates. [7876](https://github.com/deckhouse/deckhouse/pull/7876)
- **[node-manager]** Add permission for _cluster API_ resources for a cluster. [7893](https://github.com/deckhouse/deckhouse/pull/7893)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.58.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.58.0).

Fixes


- **[cloud-provider-vcd]** Add validation for a virtual application name. [7817](https://github.com/deckhouse/deckhouse/pull/7817)
- **[deckhouse-controller]** Repeat queries to get CRD and apply conversion strategies. [7827](https://github.com/deckhouse/deckhouse/pull/7827)
Prevents a critical error from occurring in the cluster when starting or turning on modules.
- **[istio]** Got rid of `istioMinimalVersion` requirement in `release.yaml` to fix the upgrading issue. [7815](https://github.com/deckhouse/deckhouse/pull/7815)
- **[node-manager]** Disable MCM for unsupported cloud providers. [7817](https://github.com/deckhouse/deckhouse/pull/7817)
- **[node-manager]** kubelet resource reservation fixes. [7788](https://github.com/deckhouse/deckhouse/pull/7788)
- **[operator-trivy]** Update trivy ConfigMap template. [7780](https://github.com/deckhouse/deckhouse/pull/7780)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.58.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.58.0).

Fixes


- **[cni-cilium]** Run `safe_agent_updater` pods in the `hostNetwork` mode and use `kubernetes-api-proxy`. [7760](https://github.com/deckhouse/deckhouse/pull/7760)
`cilium-agent` pods will probably restart and L7 policies will flap.
- **[control-plane-manager]** Fixed `D8KubernetesVersionIsDeprecated` alert. [7768](https://github.com/deckhouse/deckhouse/pull/7768)
- **[dhctl]** Prevent deadlock when re-bootstrap cluster. [7753](https://github.com/deckhouse/deckhouse/pull/7753)
- **[flow-schema]** Change apiVersion for `FlowSchema` and `PriorityLevelConfiguration` to the minimum available. [7750](https://github.com/deckhouse/deckhouse/pull/7750)
- **[ingress-nginx]** Add missed libraries to the Ingress controller v1.6 image. [7764](https://github.com/deckhouse/deckhouse/pull/7764)
Ingress controller v1.6 will restart.

Chore


- **[istio]** Added a pre-upgrade compatibility check for the coming Kubernetes version. [7712](https://github.com/deckhouse/deckhouse/pull/7712)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.58.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.58.0).

Know before update


- Ingress controller will restart.

Features


- **[dhctl]** Generate `DeckhouseRelease` manifests for mirrored releases. [7697](https://github.com/deckhouse/deckhouse/pull/7697)

Fixes


- **[candi]** Fix regex validation pattern of the `additionalRolePolicies` field. [7696](https://github.com/deckhouse/deckhouse/pull/7696)
- **[dhctl]** Avoid mirroring versions in `dhctl mirror` that were not yet released. [7716](https://github.com/deckhouse/deckhouse/pull/7716)
- **[ingress-nginx]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[ingress-nginx]** Fix missed libs. [7717](https://github.com/deckhouse/deckhouse/pull/7717)
Ingress controller will restart.
- **[kube-dns]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[local-path-provisioner]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[loki]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[monitoring-kubernetes]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[node-manager]** Fixed kubelet resource reservation for Static nodes [7724](https://github.com/deckhouse/deckhouse/pull/7724)
- **[operator-prometheus]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[operator-trivy]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[prometheus]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[prometheus-metrics-adapter]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)
- **[user-authn]** Use `go get` instead of `go get -u` to image immutability. [7726](https://github.com/deckhouse/deckhouse/pull/7726)

Chore


- **[network-policy-engine]** Deny module setup if the `cni-cilium` module is enabled. [7687](https://github.com/deckhouse/deckhouse/pull/7687)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.58.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.58.0).