Deckhouse

Fixes


- **[cloud-provider-openstack]** Remove 'minLength: 1' requirement from mainNetwork and defaultImageName properties in OpenAPI specification. [5386](https://github.com/deckhouse/deckhouse/pull/5386)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.48.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.48.0).

Fixes


- **[cloud-provider-openstack]** Fix discovery security groups and errors in hybrid clusters. [5341](https://github.com/deckhouse/deckhouse/pull/5341)
- **[helm_lib]** Fix X.509 certificate common name generation. [5342](https://github.com/deckhouse/deckhouse/pull/5342)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.48.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.48.0).

Features


- **[okmeter]** Mount `containerd` socket into `okmeter` DaemonSet Pods to meet the requirement for `containerd` monitoring feature. [5304](https://github.com/deckhouse/deckhouse/pull/5304)
Rolling upgrade of the `okmeter` DaemonSet. This will cause a short disruption in node monitoring.

Fixes


- **[cloud-provider-openstack]** Fix creating long name of backup secret in state. [5332](https://github.com/deckhouse/deckhouse/pull/5332)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.48.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.48.0).

Fixes


- **[candi]** Fix router metric if the `additionalNetworks` parameter is specified. [5286](https://github.com/deckhouse/deckhouse/pull/5286)
- **[cloud-provider-aws]** Add rbac Role to access d8-provider-cluster-configuration and d8-cloud-provider-discovery-data secrets. [5291](https://github.com/deckhouse/deckhouse/pull/5291)
- **[cloud-provider-azure]** Add rbac Role to access d8-provider-cluster-configuration and d8-cloud-provider-discovery-data secrets. [5291](https://github.com/deckhouse/deckhouse/pull/5291)
- **[cloud-provider-gcp]** Add rbac Role to access d8-provider-cluster-configuration and d8-cloud-provider-discovery-data secrets. [5291](https://github.com/deckhouse/deckhouse/pull/5291)
- **[go_lib]** Add test that original SANs are not mutated. [5290](https://github.com/deckhouse/deckhouse/pull/5290)

Chore


- **[candi]** Bump patch versions of Kubernetes images: `v1.27.3` [5246](https://github.com/deckhouse/deckhouse/pull/5246)
Kubernetes 1.27 control plane components and kubelet will restart.


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.48.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.48.0).

Fixes


- **[cloud-provider-openstack]** Remove duplicates from additional security groups in cloud-data-discoverer. [5279](https://github.com/deckhouse/deckhouse/pull/5279)
- **[cloud-provider-openstack]** Fix migration from `openstack_blockstorage_volume_v2` to `openstack_blockstorage_volume_v3` for bastion hosts. [5271](https://github.com/deckhouse/deckhouse/pull/5271)
- **[user-authn]** Fix kubeconfig certificate generation. [5273](https://github.com/deckhouse/deckhouse/pull/5273)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.48.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.48.0).

Fixes


- **[admission-policy-engine]** Improve bootstrap handler logic. [5242](https://github.com/deckhouse/deckhouse/pull/5242)
- **[control-plane-manager]** Restoring `D8KubernetesVersionIsDeprecated` alert from `1.23` to `1.22`. [5249](https://github.com/deckhouse/deckhouse/pull/5249)

For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.48.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.48.0).