Deckhouse

Features


- **[admission-policy-engine]** Allow to create `virtualization` module's pods even in the restricted namespaces. [9316](https://github.com/deckhouse/deckhouse/pull/9316)

Fixes


- **[network-policy-engine]** Downgrade iptables version from 1.8.10 to 1.8.9 due to iptables chains overflow. You need to clear unwanted iptables rules manually or reboot the affected nodes. [9340](https://github.com/deckhouse/deckhouse/pull/9340)
- **[registrypackages]** Downgrade iptables version from 1.8.10 to 1.8.9. [9340](https://github.com/deckhouse/deckhouse/pull/9340)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.62.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.62.0).

Fixes


- **[candi]** Keep `admissionregistration.k8s.io/v1alpha1` API support for K8s 1.28+. [9223](https://github.com/deckhouse/deckhouse/pull/9223)
- **[candi]** Fix network configuration in OpenStack when using DirectRoutingWithPortSecurityEnabled. [9196](https://github.com/deckhouse/deckhouse/pull/9196)
- **[cloud-provider-vcd]** Fix impossibility to use 0 as value of Max IOPS in storage policy. [9232](https://github.com/deckhouse/deckhouse/pull/9232)
- **[cni-cilium]** Fix missing datasource variable and dashboard rendering (for DKP EE). [9244](https://github.com/deckhouse/deckhouse/pull/9244)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.62.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.62.0).

Fixes


- **[candi]** Restore the installation of the `nfs-common` package from the system package repositories. [9182](https://github.com/deckhouse/deckhouse/pull/9182)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.62.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.62.0).

Fixes


- **[dhctl]** Enable default preflight checks for dhctl server bootstrap operation. [9013](https://github.com/deckhouse/deckhouse/pull/9013)
- **[istio]** Revert Istio operator RBAC. [9116](https://github.com/deckhouse/deckhouse/pull/9116)
The previous fix was breaking the deployment of new versions of istiod.
- **[registrypackages]** Fix detection of iptables nft support in iptables registry-package during install. [9121](https://github.com/deckhouse/deckhouse/pull/9121)

Chore


- **[dhctl]** Minor logging fixes. [9062](https://github.com/deckhouse/deckhouse/pull/9062)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.62.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.62.0).

Fixes


- **[network-policy-engine]** The kube-router image now use the same iptables binaries as on the host to prevent incompatibility. [9065](https://github.com/deckhouse/deckhouse/pull/9065)
- **[node-manager]** Revert bashible drain annotations checks. [9057](https://github.com/deckhouse/deckhouse/pull/9057)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.62.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.62.0).

Fixes


- **[candi]** Fix home directory permission for NodeUser. [9030](https://github.com/deckhouse/deckhouse/pull/9030)
default
- **[monitoring-kubernetes]** Fix node exporter NTP address. [9016](https://github.com/deckhouse/deckhouse/pull/9016)
node-exporter will restart.

Chore


- **[cni-cilium]** Add alert for orphan EgressGatewayPolicy. [8912](https://github.com/deckhouse/deckhouse/pull/8912)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.62.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.62.0).