Update Helm release crossplane to v2.1.0

[botty-mcbottington]

This PR contains the following updates:

Package	Update	Change
crossplane (source)	minor	2.0.2 -> 2.1.0

---

Release Notes

crossplane/crossplane (crossplane)

v2.1.0

Compare Source

The v2.1.0 release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads. After the major v2.0 release, we spent time focusing on polishing and hardening the experience with the goal of enhancing core reliability.

⚠️ Upgrade from v2.0

It is strongly advised to upgrade to v2.1 from the previous minor version, which is v2.0. Upon upgrade for each minor release, Crossplane performs any necessary migrations of its CRDs to ensure the latest versions are stored in the Kubernetes API server. Therefore, it is important to upgrade sequentially through one minor version at a time as described in the upgrade docs.

🎉 Highlights

• XR circuit breaker: A circuit breaker was added to all Composite Resource (XR) controllers in #​6777 to prevent reconciliation thrashing when controllers fight over composed resource state. This addresses a common cause of excessive resource (CPU) usage.
  • Each circuit breaker monitors reconciliation rates for their XR and opens ("breaks the circuit") when thresholds are exceeded (50 burst, 1 every 2s sustained). While open, it blocks most reconcile requests but allows one through every 30 seconds. The circuit stays open for 5 minutes, then automatically closes and returns to normal operation. If thrashing resumes, the circuit will open again.
• Realtime compositions for namespaced XRs: #​6780 fixes an issue where namespaced XRs were not being reconciled in response to changes in their composed resources.
• crossplane render for remote Docker daemons: #​6799 fixes an issue that prevented crossplane render from establishing a connection to the remote Docker host.
  • crossplane render now allows function annotations to be passed on the command line with -a/--function-annotations flags. Two new function annotations are now supported:
    • render.crossplane.io/runtime-docker-publish-address controls the host address Docker publishes the container port to (defaults to 127.0.0.1 for security)
    • render.crossplane.io/runtime-docker-target controls the address the CLI connects to (defaults to the publish address)
• XRD change detection: In previous versions of Crossplane, XRD spec fields could change without the XR controller being restarted automatically. With #​6806, users no longer need to manually restart the Crossplane deployment for some XRD changes to take effect.

🚨 Warnings and breaking changes

• Crossplane's custom rate limiting implementation as well as client-side rate limiting has been removed in #​6851 as proposed and described in detail in #​6790.
  • Crossplane's reconcilers will rely on a combination of the Kubernetes API Priority and Fairness, the circuit breaker described in the highlights below, and worker pool size configuration to appropriately manage reconciliation load and retries in the control plane.
  • --max-concurrent-reconciles can be set to influence the maximum number of concurrent reconcile operations (worker pool size) that Crossplane will perform.
    • The --max-reconcile-rate flag has been renamed to this new --max-concurrent-reconciles flag to better represent what this flag controls
    • The old --max-reconcile-rate flag is now an alias for the new flag name
  • Providers are unaffected by this change, only core Crossplane reconcilers are affected.

🏅 Release MVP

@​binarycode is the v2.1 release MVP! They discovered a critical issue preventing realtime compositions from functioning correctly for namespaced XRs. Their fix in #​6780 now properly configures an index for each namespaced XR so that events generated from changes in their composed resources correctly result in the XR being enqueued for reconciliation.

Thank you very much to @​binarycode, our latest release MVP! 🙇‍♂️

What's Changed

• chore(deps) bump crossplane-runtime to v2.1.0-rc.0 by @​jbw976 in #​6690
• build: add release-2.0 branch to renovate baseBranches by @​jbw976 in #​6692
• Add alpha render subcommands for XRs and Operations by @​negz in #​6695
• Fuzzy match function capabilities by @​negz in #​6697
• Use FILE level buf breaking change detection by @​negz in #​6698
• chore: bump releases table, remove 1.18 from renovate baseBranches by @​jbw976 in #​6703
• Support function cache XfnCacheMaxTTL CLI option by @​stevendborrelli in #​6710
• chore(deps): update docker/login-action digest to 184bdaa (main) by @​crossplane-renovate[bot] in #​6706
• Fix composed resource names containing invalid characters by @​negz in #​6705
• Fix CRD-to-MRD converter to preserve provider configuration CRDs by @​negz in #​6721
• adds Terradue as adopter by @​fabricebrito in #​6723
• Update Get Started Docs link by @​itsrainingmani in #​6713
• Add Sophotech to adopters list by @​archy-rock3t-cloud in #​6760
• Address some linter/format issues from main by @​negz in #​6775
• fix realtime Compositions for Namespaced XRs by @​binarycode in #​6780
• pkg: Ignore tags that are incomplete semantic versions by @​adamwg in #​6776
• Initial CodeRabbit configuration by @​negz in #​6791
• Rename WebhooksEnabled by EnableWebhooks in init cmd by @​frigaut-orange in #​6793
• Set CodeRabbit to chill mode by @​negz in #​6794
• Disable code rabbit review status messages by @​negz in #​6795
• run the validating webhook remover only if webhooks are enabled by @​frigaut-orange in #​6801
• Isolate buf and code generation tools in separate module by @​negz in #​6796
• Apply consistent error handling pattern in apiextensions reconcilers by @​negz in #​6755
• Include kind logs when running E2Es by @​negz in #​6786
• Update ADOPTERS.md by @​zouldapp in #​6811
• Update ADOPTERS.md by @​zouldapp in #​6816
• chore(deps): update module github.com/go-chi/chi/v5 to v5.2.2 [security] (main) by @​crossplane-renovate[bot] in #​6815
• Update ADOPTERS.md by @​PI-Victor in #​6807
• Separate go mod tidy from code generation to speed development by @​negz in #​6814
• Queue reconciles for packages when ImageConfigs change by @​negz in #​6765
• Support remote Docker daemons in render commands by @​negz in #​6799
• Add MRD and MRAP to package kind linter by @​negz in #​6797
• Fix XRD controller restart to detect all spec changes by @​negz in #​6806
• Add circuit breaker to prevent XR reconciliation thrashing by @​negz in #​6777
• fix(render): propagate XR namespace to composed resources by @​u-kai in #​6812
• Fix circuit breaker tests to match consistent error handling pattern by @​negz in #​6822
• Sort extra resources alphabetically to guarantee stable order by @​twobiers in #​6819
• Move cached function response protos to internal/proto by @​negz in #​6825
• Update adding monday.com to ADOPTERS.md by @​elhayef in #​6828
• README: clarify purpose of SIGs by @​jbw976 in #​6835
• governance: community extension projects list by @​jbw976 in #​6836
• Update Add Baloise to ADOPTERS.md by @​jonasz-lasut in #​6838
• fix: add missing permissions on protection and ops groups by @​phisco in #​6829
• docs: add RELEASE.md and links to crossplane/release for better discoverability of release process by @​jbw976 in #​6843
• One pager for a namespace-restricted option by @​frigaut-orange in #​6419
• fix(deps): update module github.com/go-git/go-billy/v5 to v5.6.2 (main) by @​crossplane-renovate[bot] in #​6568
• fix(deps): update module github.com/google/go-containerregistry to v0.20.6 (main) by @​crossplane-renovate[bot] in #​6642
• chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] (main) by @​crossplane-renovate[bot] in #​6740
• chore(deps): update actions/checkout digest to 08eba0b (main) by @​crossplane-renovate[bot] in #​6715
• build: update releases/charts bucket names by @​jbw976 in #​6849
• chore(deps): Update k8s.io modules to latest by @​branden in #​6844
• Remove watch debug message by @​bobh66 in #​6720
• Add XR circuit breaker Prometheus metrics by @​mfkd in #​6854
• Refactor circuit breaker metrics to match Crossplane patterns by @​negz in #​6870
• chore: remove all migrators that are no longer needed by @​jbw976 in #​6869
• feat(crl): remove custom rate limiting by @​haarchri in #​6851
• doc(crank): Remove deprecated subcommands from the convert help message by @​tampakrap in #​6743
• fix: ensure enforcedCompositionRef properly controls composition selection by @​ezgidemirel in #​6881
• fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] (main) by @​crossplane-renovate[bot] in #​6845
• chore(deps): update module github.com/quic-go/quic-go to v0.54.1 [security] (main) by @​crossplane-renovate[bot] in #​6846
• Fix XRD controller watch startup after transient failures by @​negz in #​6885
• chore(deps): bump crossplane-runtime to v2.1.0-rc.1 by @​jbw976 in #​6889
• [Backport release-2.1] Fix Docker port binding race condition on macOS by using HostPort "0" by @​github-actions[bot] in #​6901
• chore(deps): bump crossplane-runtime to v2.1.0 by @​jbw976 in #​6902

New Contributors

• @​fabricebrito made their first contribution in #​6723
• @​itsrainingmani made their first contribution in #​6713
• @​archy-rock3t-cloud made their first contribution in #​6760
• @​binarycode made their first contribution in #​6780
• @​frigaut-orange made their first contribution in #​6793
• @​zouldapp made their first contribution in #​6811
• @​PI-Victor made their first contribution in #​6807
• @​u-kai made their first contribution in #​6812
• @​elhayef made their first contribution in #​6828
• @​jonasz-lasut made their first contribution in #​6838
• @​branden made their first contribution in #​6844
• @​mfkd made their first contribution in #​6854

Full Changelog: crossplane/crossplane@v2.0.0...v2.1.0

v2.0.4

Compare Source

This is a patch release scoped to fixing issues reported by users of Crossplane v2.0 and fixing security related issues in Crossplane's dependencies.

What's Changed

• [Backport release-2.0] pkg: Ignore tags that are incomplete semantic versions by @​github-actions[bot] in #​6789
• [Backport release-2.0] fix realtime Compositions for Namespaced XRs by @​github-actions[bot] in #​6787
• [Backport release-2.0] Queue reconciles for packages when ImageConfigs change by @​github-actions[bot] in #​6817
• [Backport release-2.0] Add MRD and MRAP to package kind linter by @​github-actions[bot] in #​6820
• [Backport release-2.0] fix(render): propagate XR namespace to composed resources by @​github-actions[bot] in #​6821
• [Backport release-2.0] chore: remove all migrators that are no longer needed by @​github-actions[bot] in #​6875
• [Backport release-2.0] fix: add missing permissions on protection and ops groups by @​github-actions[bot] in #​6839
• [Backport release-2.0] fix: ensure enforcedCompositionRef properly controls composition selection by @​github-actions[bot] in #​6882
• chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] (release-2.0) by @​crossplane-renovate[bot] in #​6742
• fix(deps): update module github.com/docker/docker to v28 [security] (release-2.0) by @​crossplane-renovate[bot] in #​6730
• [Backport release-2.0] build: update releases/charts bucket names by @​github-actions[bot] in #​6905

Full Changelog: crossplane/crossplane@v2.0.2...v2.0.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.