Renovate: Update External dependencies#23
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
Conversation
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
Bot
force-pushed
the
renovate/external-dependencies
branch
from
965f2a2 to
d3d9f77
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.133.0→v1.142.0v2.27.2→v2.28.3v1.38.2→v1.40.0v1.27.1→v1.28.0v0.18.0→v0.20.0v0.22.4→v0.24.0Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.142.0Compare Source
[github.com/gardener/gardener:v1.142.0]
[OPERATOR]With the discontinued support of Kubernetes1.31, the API groupsettings.gardener.cloudwas completely removed from the Gardener API.Earlier, this API group contained the resources
OpenIDConnectPresetandClusterOpenIDConnectPresetwhich have been unsupported since Kubernetes1.32.Please make sure to clean up all
OpenIDConnectPresetandClusterOpenIDConnectPresetobjects and automations before upgrading to this version. by @timuthy [#14615][OPERATOR]1.31. Make sure to upgrade all existing clusters before upgrading to this Gardener version. by @timuthy [#14615][USER]The deprecatedgardener/controlplaneHelm chart has been removed. Usegardener-operatorto deploy Gardener instead. by @rfranzke [#14614][DEVELOPER]Themake operator-seed-{up,dev,down}targets have been renamed tomake gardener-{up,dev,down}.make kind-{up,down}is now an alias formake kind-single-node-{up,down}. All local development scenarios that were previously based on the legacygardener/controlplaneHelm chart are now based ongardener-operator. by @rfranzke [#14614][DEVELOPER]In case you're using the remote development setup, the kubeconfig of the remote cluster you're using as seed is no longer expected in/dev-setup/remote/kubeconfigs/kubeconfigbut indev-setup/kubeconfigs/remote/kubeconfig. by @rfranzke [#14614][DEVELOPER]./hack/usage/generate-admin-kubeconfig.shhas been merged into./hack/usage/generate-kubeconfig.sh. Use./hack/usage/generate-kubeconfig.sh --helpto learn about the usage. by @rfranzke [#14614]📰 Noteworthy
[OPERATOR]DisableNginxIngressInGardenallows to disablenginx-ingressin a Garden runtime cluster managed bygardener-operator. by @ScheererJ [#14636][OPERATOR]DisableNginxIngressInSeedallows to disablenginx-ingressin Seed clusters. by @ScheererJ [#14636][OPERATOR]DisableNginxIngressInShootallows to disablenginx-ingressfor Shoot clusters:gardener-apiserver, it disallows creation of new Shoot clusters with thenginx-ingressaddon enabled and it prevents existing shoot clusters from enabling it. Shoot cluster, which already have the addon enabled, are left as is.gardener-controller-manager, it disables thenginx-ingressaddon for all Shoot clusters during their next maintenance period. by @ScheererJ [#14636][OPERATOR]ThepropagateCAFromKubeAPIServerSNIfield was added to theGardenerDashboardConfigAPI. When the kube-apiserver SNI endpoint uses a private/custom CA, set this field totrueto include the CA certificate in the dashboard'sapiServerCaData. This makes the behavior introduced in #14217 opt-in, preserving transparent CA rotation for publicly trusted certificates. by @petersutter [#14637][OPERATOR]Thegardener-operatornow deploys anextensionsv1alpha1.BackupEntryalongside theBackupBucketwhen etcd backup is configured (whenBackupEntryForGardenfeature gate is enabled), aligning the garden controller with the same extension contract that shoot clusters use for backup credential management. by @rfranzke [#14628][OPERATOR]When backup is configured in theGardenresource, thegardener-operatornow requires aBackupEntrycontroller registration in theoperator.gardener.cloud/v1alpha1.Extensionresource of the backup provider when the newBackupEntryForGardenfeature gate is enabled. If theExtensionobject for the provider does not yet includeBackupEntryin.spec.resources, it must be added before upgradinggardener-operator. All provider extensions should also enable theirBackupEntrycontrollers when running in the garden runtime cluster. by @rfranzke [#14628][DEVELOPER]The localgardenadmdevelopment setup for the unmanaged infrastructure scenario now uses GinD (Gardener-in-Docker) instead of KinD. Refer to the updated documentation for details. by @rfranzke [#14700]✨ New Features
[USER]TheShootAPI now supports configuringcluster-autoscaler'smaxBinpackingTimeflag for specifying a longer duration to be spent on binpacking for scale-up. by @takoverflow [#14698][DEVELOPER]ManagedResourcesthat use theresources.gardener.cloud/delete-on-invalid-updateannotation can now also specify the deletion propagation with the annotationresources.gardener.cloud/deletion-propagation-on-invalid-updateby @maboehm [#14642]🐛 Bug Fixes
[OPERATOR]An issue causing the guestbook TM test to fail against IPv6 Shoot clusters in now fixed. by @plkokanov [#14701][OPERATOR]The secret used for thekube-rbac-proxyfor theopentelemetry-collectoris now deployed for all shoot clusters, independent of whether node logging is enabled or not. by @iypetrov [#14428][OPERATOR]A bug has been fixed where theEveryNodeReadyConditionwas showing and error for self-hosted shoots on unmanaged infrastructure. by @tobschli [#14665][OPERATOR]Thesystemdunitcheckcontroller now correctly treats systemd units that are in a failed state but explicitly disabled as healthy. by @cerealsnow [#14733][OPERATOR]Errors during resource deletion caused by missing CRDs are now ignored by @matthias-horne [#14645][USER]Rotating the etcd encryption key tolerates unavailableAPIServices. by @robinschneider [#14679][DEPENDENCY]ThereconcileSeedWebhookConfigfunction now correctly reconciles bothMutatingWebhookConfigurationandValidatingWebhookConfigurationfor extensions that register both mutating and validating admission webhooks. Previously, only the first configuration was reconciled due to a premature return in the loop. by @Roncossek [#14664]🏃 Others
[OPERATOR]AddresourceIdfor imageistio-basic-auth-serverto fix overwrite image lookup by @MartinWeindel [#14716][OPERATOR]Certain best-practice Envoy settings for HTTP2 protocol options have been applied toistio-ingressgateways. by @oliver-goetz [#14678][OPERATOR]The images of the registry caches used in the dev setups are now updated to distribution/distribution@v3.1.0. by @dimitar-kostadinov [#14718][OPERATOR]The Prometheus health check rule evaluation interval has been reduced from 60s to 5s for faster detection of health check state changes. by @vicwicker [#14662][OPERATOR]The garden Prometheus maximum metric retention has been increased to 30 days. by @vicwicker [#14657][DEVELOPER]The TM tests no longer rely on thenginx-ingressaddon for any Kubernetes release. by @ScheererJ [#14643][DEPENDENCY]The following dependencies have been updated:gardener/ext-authz-serverfromv0.2.0tov0.3.0. Release Notes by @gardener-ci-robot [#14725][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/coredns/corednsfromv1.14.2tov1.14.3. by @gardener-ci-robot [#14724][DEPENDENCY]The following dependencies have been updated:envoyproxy/envoyfromdistroless-v1.37.2tov1.38.0. Release Notes by @gardener-ci-robot [#14674][DEPENDENCY]The following dependencies have been updated:quay.io/cortexproject/cortexfromv1.20.1tov1.21.0. by @gardener-ci-robot [#14695][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/dns/k8s-dns-node-cachefrom1.26.7to1.26.8. by @gardener-ci-robot [#14659][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/alertmanagerfromv0.32.0tov0.32.1. by @gardener-ci-robot [#14732][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.6.0to2.7.1. by @gardener-ci-robot [#14699][DEPENDENCY]The following dependencies have been updated:quay.io/brancz/kube-rbac-proxyfromv0.21.2tov0.22.0. by @gardener-ci-robot [#14703][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.11to1.84.1. Release Notes by @marc1404 [#14771]application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:1eb5d65be651660ff2e4dd3012315ab4f8feac3b94af8e321f833e0848ab69c4europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:f926858481411ed15cc1a31be14b214e764f882163c764e23def1c1fe1d9daf6europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:0e02ebedbe9ed6a34dc99736a6e41b45ad5b730f564b1eaa848d5f156e11e311europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:1815b4550cbd1f2c6c4b7d50ac6e092e3ad3e6f207de9666ad889243bb0988f8europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:7234f2705acad476e26c663eb8d589770e7f77108eeeb28fa33a38c07908c0f3europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:f5a956378f5fba34b51ca828e0f1c448b11a9e27f65633ec73874d695231689ceurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:3b7c03096e6f8de1fee49ec62a17849aeae261b67751871da0dc635764d689b5europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:fc7085b785212951f63bfaa63bbea9d019cdc7f66735c2fc2dcec753f01bb70aeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:34f283da125518e68415117b86c926ed5b103ec88a4c82c2602399172dc5d70aeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:d7f1c555d75bc17c1a3c3fc6c6034fd9e934396a455d8e4df2c03021f4921438europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:5c26ac6437adcfcd20aeab1a233d29d774980fc4d8f1801ffde480fb4a893635europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:7b518fb710dc7cc187784d621fe5deb7e5d3032623233768232596b5a575db0feurope-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:13c624f9dfbf1b6b146f314b8da20b5edde93a4c4c14ddbb0d4424555e04f138europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:22549456a978c9ff74e6b79252abb655e3926b36c0bfdc8714c127f412c800f1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:9769cc9338182588139cb6a6d3c39ad79f9a0a27a3bc447c3b1c0292b1968391europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:a8745e5d63dc898d042ccbad0947cc617e5624bf1165bb8bf90744dcbcd91471europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:0a6ec2623516f5c20d688b379c0ee075ed81deff5509abb600569182fd5c9addeurope-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:57694de6715aae8751988b140957adff88db9b020f01cecac1f0cf42b5ad27c5Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.142.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.142.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.142.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.142.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.142.0v1.141.2Compare Source
[github.com/gardener/gardener:v1.141.2]
🐛 Bug Fixes
[OPERATOR]Thesystemdunitcheckcontroller now correctly treats systemd units that are in a failed state but explicitly disabled as healthy. by @cerealsnow [#14735]application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:5dd670caa5309d8b06b460b71f33725b8bfcb25aeda6b3ee64a6db918193a67deurope-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:933d25c394b74a6ac0fcfd5b6e678935602f8aa84351df2798043da37109dfd8europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:9781050578e62778b20ba950f7d43045b150c7b6d0214a38b43dc61c4bebbd46europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:dcedc5a442e8c821cb2f18914a408b87ad9e23f950bb3a4eb8ecf3bb9e96ada2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:a95ecd742a1a0a489a92130a31e07a8c1d66a734c1cdf8d1709765473d67e941europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:e45ba9cc83a504ac48831a51121412d706a4d1790dd6d0635e0e5cf5456fe98feurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:122515831cb6ec9981fbbaa9a45c8e4356077ddb824c561a4341f9c6a3197d40europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:6678b6c8a9c982f5d8d2b9e23559badaa0382ea23400129b28cc313091678ef2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:a7fa8035167b9570a725a4e39ee10396ee57c6909b02688dfe56f0629944f851europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:e2c4afe9f2b0209660104da05f25cd71830b10fc16d6261e35d3a4ab9891ccbbeurope-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:9859d4465d38f82463ba1c96087a99210b6b16ab49f506888155d93c024839b5europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:cbf63ae7bad9d390cd84fb67d2accc04b4ab5c183348a348b2ec07e1939f300ceurope-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:593456a34d5c363a25270ee46a89d0ad362033ff8e3d7feb97c4decf2a2910ebeurope-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:82c7af01130929040201be55b8655223cc75f203422aa849d8f8859729370133europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:0f06b6c79b939f097da495f51593df2846f1bc7a35cbb847c721a4dd596071aaeurope-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:9108e978171f8121c32219c222d61151494fd5f90668342bbe117c9ac397292aeurope-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:39ebd15a2e3c45c25b36972820ce1a6d91aa0f7ec02713e19b9a42ad97224b39europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:a59564c628591b8785fb69c03cb84a936a4674a6e4429f28779ee93dc2e596aaHelm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.141.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.141.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.141.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.141.2Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.141.2europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.141.2v1.141.1Compare Source
[github.com/gardener/gardener:v1.141.1]
🐛 Bug Fixes
[OPERATOR]An issue causing the guestbook TM test to fail against IPv6 Shoot clusters in now fixed. by @plkokanov [#14705][DEPENDENCY]ThereconcileSeedWebhookConfigfunction now correctly reconciles bothMutatingWebhookConfigurationandValidatingWebhookConfigurationfor extensions that register both mutating and validating admission webhooks. Previously, only the first configuration was reconciled due to a premature return in the loop. by @Roncossek [#14688]🏃 Others
[OPERATOR]AddresourceIdfor imageistio-basic-auth-serverto fix overwrite image lookup by @MartinWeindel [#14721][OPERATOR]Certain best-practice Envoy settings for HTTP2 protocol options have been applied toistio-ingressgateways. by @oliver-goetz [#14685][DEPENDENCY]The following dependencies have been updated:gardener/ext-authz-serverfromv0.2.0tov0.3.0. Release Notes by @ScheererJ [#14728]application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:a533cff53ce26faae8d16ce777e42acfaec59f37b14e037f3df49897eb6e37a6europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:f9a88c4286072181ba44333dae0899fd7f04e6109deee7649b7ec4225d061c2eeurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:e4a314c878793de9230de8e578f4affde97f13669773b1038a1cedb542e3a46feurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:ec09bb23be84cdc04592a29db374e1107b91114c4420523bb8ad52a07777d2e2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:2f4e2274461634f42f90fb5787cf2176d00079b0dcb1cbd6d6b06b5e8bfa3243europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:a20de14a51d7512cf7e4658a4e52a2c60dff17efbf2965ef20565a696619aa6aeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:0723efdd00b677215935e8d86c5568c7c583afbecc130f1a281bd1da4ccacb67europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:e1ddbc08706eb9ac4af03811a12553cadeb00915f890883572ba7c267173473feurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:2904444a43a685fee5e601b621603114585857c6205d3d9286921a114110849ceurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:a592e08ced947cda1565a4bf3800785c2596880940542843787388baf0ad51eeeurope-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:63efdd9693ec670ba326fd4c3f70f88702aa41aaac69c268c83ab4a69820eea1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:f61bcb10bfbd98c0a17d944d061357b78a59e09f79bc207db64203488bfb6ebdeurope-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:358db949d83420843f863158d5b97d6a7d2d6df8ed48e4ac4a442e883387c0d9europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:90d8da86f54ce63dd043285388d7acce0f9b3fb30f15e040ae4452f59d1d5b02europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:1c50c5a130190374ed9ddf8244e48585ef15fc4bed428817b7db101e8b14d747europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:9b1947be7ce2fe329591e02acb40960aadb1c41a88f9b8b9e10824ed5dd85787europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:0406036d984dcb000eb4a7af85a453ca7ec8a5cf7772c0cf7dfdbd6e576ba881europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:c5272548e8a05a13aeaf02d69bc1b10a57fd0e3de0ce44cf51433b43d00f964bHelm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.141.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.141.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.141.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.141.1Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.141.1europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.141.1v1.141.0Compare Source
[github.com/gardener/gardener:v1.141.0]
[OPERATOR]TheNewWorkerPoolHashfeature gate has been promoted to GA and can no longer be disabled. by @timuthy [#14531][OPERATOR][USER]Newly createdShoots now have a set period of28dfor etcd encryption key rotation. by @AleksandarSavchev [#14034][DEVELOPER]make gardenadm-up SCENARIO=connectnow deploys the Gardener (gardener-operatorandGardenresource) directly into the self-hosted shoot. Previously, it was deploying them next to the machine pods of the self-hosted shoot in the kind cluster. Usemake gardenadm-up SCENARIO=connect-kindfor the out-of-self-hosted-shoot deployment mode. by @rfranzke [#14387][DEPENDENCY]The obsoleteProviderfield was removed from theextensionswebhook.Webhookstruct. The field can be removed without substitution. by @timuthy [#14460]📰 Noteworthy
[OPERATOR]Thegardener-resource-managerHA config webhook now usesScheduleAnywayinstead ofDoNotSchedulefor the hostname topology spread constraint when there is at most one node in the cluster. A newnode-high-availability-configcontroller re-triggers the webhook when the node count crosses this threshold. by @rfranzke [#14595][OPERATOR]machine-controller-manager's RBAC permissions for the source cluster have been reduced to follow the principle of least privilege. by @dimityrmirchev [#14372][DEVELOPER]Added panic recovery toflow.Taskto prevent a single task failure from crashing the entire controller. If you previously implemented custom panic recovery within your tasks, you can consider removing that custom panic recovery. by @dergeberl [#14606][DEVELOPER]The local setup now includes acloud-controller-manager-local, which is deployed for kind clusters (in thekube-systemnamespace) and for shoot clusters (in the control plane namespace). The cloud-controller-manager implementsServicesof typeLoadBalancerby creating dedicated Docker containers listening on external IPs (automatically added to the host's loopback interface on kind cluster creation). This replaces previous hacks for implementing load balancers in provider-local and supports load balancers in shoot clusters for the first time. by @timebertt [#14415][DEPENDENCY]Extension charts deployed on self-hosted shoot clusters may not receive.Values.gardener.seedwhen the shoot has not yet been promoted to aSeed. Charts should guard Seed-dependent values with{{ if .Values.gardener.seed }}. by @rfranzke [#14395][DEPENDENCY]A new helper functionBuildExtensionTypeNamespaceSelectorhas been introduced. It builds proper namespaces selectors for extension webhooks, based on the extensiontypeandclassattributes. by @timuthy [#14460]✨ New Features
[OPERATOR]Addedspec.runtimeCluster.settings.loadBalancerServices.proxyProtocol.allowedandspec.runtimeCluster.settings.loadBalancerServices.externalTrafficPolicyto theGardenresource. When Allowed set totrue,gardener-operatorconfigures the Istio ingress gateway to terminate PROXY protocol, enabling preservation of the original client IP address for load balancers that use PROXY protocol. The explicit nature of the setting allows a seamless migration while enforcing a good security posture.ExternalTrafficPolicyallows configuring the Gateway either asCluster(default) orLocal, similar to the Seed. by @jamand [#14420][OPERATOR]Thegardener-node-agentnow monitors the health of systemd units declared in theOperatingSystemConfigand reports aSystemdUnitsReadycondition on theNode. Unhealthy units are surfaced on theShootvia theEveryNodeReadycondition. by @rfranzke [#14496][USER]TheShootspec fieldspec.kubernetes.kubeAPIServer.encryptionConfig.provider.typenow supports theaesgcmandsecretboxencryption provider types. The field is immutable. by @AleksandarSavchev [#14034][USER]TheGardenspec fieldsspec.virtualCluster.kubernetes.kubeAPIServer.encryptionConfig.provider.typeandspec.virtualCluster.gardener.gardenerAPIServer.encryptionConfig.provider.typenow support theaesgcmandsecretboxencryption provider types. The fields are immutable. by @AleksandarSavchev [#14034]🐛 Bug Fixes
[OPERATOR]The garbage collection logic now also deletes pods that are stuck due to preemption by the kubelet or scheduler. by @rfranzke [#14519][OPERATOR]The observability setup is deleted as late as possible so that, in case an error occurs during the deletion of any components, there is still enough information available to investigate the issue. by @iypetrov [#14475][OPERATOR]A bug was fixed wheregardenadm initcould fail due to a transient error while fetching theshoot-gardener-node-agentManagedResource when the Kubernetes API server is temporarily unavailable due to static pod rollout. by @ialidzhikov [#14601][OPERATOR]A bug has been fixed that caused unintentionalShootStatecreations forShoots running on managed seed clusters (those backed byManagedSeedobjects). The affectedShootStateresources are automatically cleaned up bygardenletduring start-up. by @plkokanov [#14666][USER]Cluster-proportional autoscaling of coredns now works with Kubernetes >= 1.33 by @ScheererJ [#14638][DEPENDENCY]Thegolangci-lintmakefile install recipe can be used in Gardener extensions again. by @timebertt [#14555]🏃 Others
[OPERATOR]Gardener Discovery Server is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14587][OPERATOR]Alertmanager is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14575][OPERATOR]Vali is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14567][OPERATOR]OpenTelemetry Collector is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14585][OPERATOR]UseInfologging for admission denials instead ofErrorso that the full stack trace to every denial log entry does not get logged by @DockToFuture [#14561][OPERATOR]Apiserver-Proxy uses a dedicated network interfaceapiserver-proxyfor its advertised IP address. Requests from nodes such as kubelet probes will use the proper IP as per the route table again. by @domdom82 [#14440][OPERATOR]Shoot advertised addresses are now configurable by extension components for Shoot VirtualService resources. by @ScheererJ [#14534][OPERATOR]DuringShootreconciliationMachineDeployments are now deployed in parallel. This should speed up the reconciliation of theWorkerresource. by @plkokanov [#14220][OPERATOR]Resource limits have been removed for node-problem-detector by @domdom82 [#14450][OPERATOR]Prometheus is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14573][OPERATOR]Additional per nodegroup metrics can be exposed bycluster-autoscalervia the field.spec.kubernetes.clusterAutoscaler.emitPerNodeGroupMetricsin theShootAPI . by @aaronfern [#14557][OPERATOR]Gardener Dashboard is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14586][OPERATOR]Patchis now used to label allMachines withforce-deletion: Trueinstead ofUpdatewhen theShootis being hibernated or deleted. Additionally, the function used to do this during the reconciliation of theWorkerresource is now only executed once instead of for eachMachineDeployment. by @plkokanov [#14220][OPERATOR]Thegardenadm initflow now determines Pod network availability by checking the Node'sNetworkUnavailablecondition instead of theshoot-core-corednsManagedResource health. This is a prerequisite improvement for the control plane Node restoration feature. by @ialidzhikov [#14523][OPERATOR]The following dependencies have been updated:gardener/etcd-druidfromv0.36.2tov0.36.3. Release Notesgithub.com/gardener/etcd-druid/apifromv0.36.2tov0.36.3. by @Shreyas-s14 [#14661][OPERATOR]cluster-autoscaler now supports a new expanderleast-nodesfrom v1.31 onwards by @aaronfern [#14558][OPERATOR]Plutono is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14142][USER]VPN-related dashboards now show a shared crosshair on all panels. by @domdom82 [#14576][DEVELOPER]The DinD version used in the remote local setup has been updated to v29. by @vicwicker [#14644][DEVELOPER]make seed-downandmake garden-downcleanup additional resources by @matthias-horne [#14547][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/node-exporterfromv1.10.2tov1.11.1. by @gardener-ci-robot [#14508][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.29.1to1.29.2.gcr.io/istio-release/proxyv2from1.29.1to1.29.2.istio.io/apifromv1.29.1tov1.29.2. by @gardener-ci-robot [#14582][DEPENDENCY]Update kindest/node image to v1.35.1 (Kubernetes v1.35.1, containerd v2.2.1). by @LucaBernstein [#14421][DEPENDENCY]The following dependencies have been updated:credativ/valifromv2.2.31tov2.2.32. Release Notes by @gardener-ci-robot [#14611][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.5.5to2.6.0. by @gardener-ci-robot [#14537][DEPENDENCY]The following dependencies have been updated:gardener/etcd-druidfromv0.36.1tov0.36.2. Release Notesgithub.com/gardener/etcd-druid/apifromv0.36.1tov0.36.2. by @gardener-ci-robot [#14579][DEPENDENCY]The following dependencies have been updated:credativ/plutonofromv7.5.46tov7.5.47. Release Notes by @gardener-ci-robot [#14613][DEPENDENCY]The following dependencies have been updated:gardener/gardener-discovery-serverfromv0.9.0tov0.10.0. Release Notes by @gardener-ci-robot [#14600][DEPENDENCY]The following dependencies have been updated:gardener/coredns-config-adapterfromv0.5.0tov0.6.0. Release Notes by @gardener-ci-robot [#14605][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/alertmanagerfromv0.31.1tov0.32.0. by @gardener-ci-robot [#14538][DEPENDENCY]The following dependencies have been updated:envoyproxy/envoyfromdistroless-v1.37.0tov1.37.2. Release Notes by @gardener-ci-robot [#14563]application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:4c0764b6cbd79bea391de905c444e8901f3ef901c9cc601a5b8fcf66394aa40aeurope-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:a4bed35099c21fb59a719a718afc1f83040d4746a7dfaf81c4442e09725bf0abeurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:549aafc0b61b16d9e7d6fa1ab0bd95bd68f0d7dfac77989be541e9551f4dc726europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b0675085cef3786d983b6a751cff7820b6dd896e55afccd99e07cefa2891f161europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:3757e8e04a1e555abbe832c72932211b4fb766ee8f3d6ded15c9acd6a14adde9europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:68bc182b3b1cbfcbbdb26bcb9b0ac5a182e0de0b1ae785c7f0fd9947e9653ccdeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:558ae9de4cfffe41cce57e22bc8505c9f38d54e0fb8feea7b06754970b9090a3europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:ca399bfd9253860c2a8f5287aec8ecdd90b8b4fa96e8694dede72a05f0fbe263europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:47b8d427ac8f6deee19004e196c2a3396edd5010293bb1272abd7aaa2d385daeeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:88953b01d223307b0ea3e05c8df24eeb1f08e5c1883b85be42b5e5da7a2f5af3europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:97bbf8d719ee9a6a441aee3ea1690bcb054eaf5ee23b3e98ee7ba580e5732a80europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:b40af8512c84cb32e56541716cba9036152e4393e9c810d0ea109d9e89f3abe7europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:b687d0080c773f8b51d7e7fe262bd38774cace83dc175bd59e86b38d4378fa89europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:de2bed5eedb5348fb5399b7ade0ec3569a247f75a6ea532b1365cab8c84cba59europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:127276658aff87d975ce690a0a862c0073d1c119028110d0a4dcb1a71e281c50europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:637b96ae9ddebe86ce4b36cb9a275b88a5dcd6cc7a7c1ac3993d7d93c0b89374europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:118cf6da60ad6930362891b741ab79a4d596a5fc8933c2cef7f8cb9fe75653f8europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:f9aa546df5d17ae6fe8510da46bb403de6d5a594febec773258cf79886257ec6Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.141.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.141.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.141.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.141.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.141.0v1.140.4Compare Source
application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:c6c8d824d637786e9aa017bba029ef512306df31df4903f493b21fbc05280414europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:d16460876d36d3dbcf248a4417d70b7c172de0c5b561e064798894628366cf9aeurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:0b3a7a1a0b373410208b9f4938676ed9a600aa18c22ffb7930e7b7e5b006ae25europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:d9a9c687409af12c577bc0512342ebfe175ab00dd657f9d96d40610b9914825ceurope-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:0ed24cae71f8dd1c3724de9315e4bebfbe8aaf6f6491a4137baaa30f7c84ca45europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:ec1ef7abbeebfe998ce84a6831659ad4ed8ae1e4dc5771c711453b57232b9daceurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:8396aa742d759b566aeaedda1cd5cac5b3e5fc6b4460a3842cf5c871d39bf831europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:b7409242b8fe8580e8ff99cc36c47d057e52a494ff2519ede56aa76f38de90edeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:3d6f1c7aed329de13deb935266a13b7afa2a9f4bb0a7d6b181e1e54cd664c5d2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:8093e74b25495dc76c910a961c2285af2d0976b14b8e3caced8f18d81e1632a0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:2f7d207280740289640d57b10c771a68dfa944c7002fb3860c6ebc237f716e7eConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.