-
Notifications
You must be signed in to change notification settings - Fork 31
Update module github.com/gardener/gardener to v1.123.0 - autoclosed #150
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update module github.com/gardener/gardener to v1.123.0 - autoclosed #150
Conversation
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
bf225b3
to
b539084
Compare
ff0f190
to
b539084
Compare
@gardener-ci-robot: The following test failed, say
Full PR test history. Your PR dashboard. Command help for this repository. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
This PR contains the following updates:
v1.118.2
->v1.123.0
Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.123.0
Compare Source
[gardener/gardener]
[OPERATOR]
There is a new validation for theGarden
resource which ensures the API server domain of the virtual cluster which is derived from the primary (immutable) DNS name does not match any SNI domain pattern. by @oliver-goetz [#11996][OPERATOR]
Shoot
API fieldspec.provider.workers[].controlPlane.backup.secretRef
has been removed, please migrate your shoot manifests tospec.provider.workers[].controlPlane.backup.credentialsRef
! by @vpnachev [#12347][OPERATOR]
Seed
API fieldspec.backup.secretRef
has been removed, please migrate your seed manifests tospec.backup.credentialsRef
! Gardener API server already has defaulted this field. by @vpnachev [#12347][OPERATOR]
GardenletConfiguration
configuration file fieldseedConfig.spec.backup.secretRef
has been removed, please migrate your gardenlet configuration manifests toseedConfig.spec.backup.credentialsRef
! Gardenlet already has defaulted this field . by @vpnachev [#12347][OPERATOR]
Gardenlet
API fieldspec.config.seedConfig.spec.backup.secretRef
has been removed, please migrate your gardenlet manifests tospec.config.seedConfig.spec.backup.credentialsRef
! Gardener API server already has defaulted this field. by @vpnachev [#12347][OPERATOR]
gardenlet
s cannot connect to Garden cluster withinsecure-skip-tls-verify
anymore. This setting still works in the bootstrap kubeconfig but is unset bootstrapping. by @oliver-goetz [#11996][OPERATOR]
The deprecated fieldgloballyEnabled
has been removed from theControllerRegistration
andExtension
APIs. Please make sure thatgloballyEnabled
is not used anymore and all already appliedControllerRegistration
andExtension
resources switched to the new fieldautoEnable
, before upgrading to this version. Read more about the extension registration and theautoEnable
feature here. by @timuthy [#12465][OPERATOR]
TheDoNotCopyBackupCredentials
feature gate has been promoted to beta and is now enabled by default. When the feature is enabled theSeed
backup secret is no longer copied from theShoot
infrastructure credentials in case an operator does not provide an existing backup secret. If you configureseed.spec.backup.credentialsRef
, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeed
backup andShoot
infrastructure. by @dimityrmirchev [#12414][OPERATOR]
TheNodeAgentAuthorizer
feature gate has been graduated to GA and is locked totrue
. by @oliver-goetz [#12405][OPERATOR]
ManagedSeed
API fieldspec.gardenlet.config.seedConfig.spec.backup.secretRef
has been removed, please migrate your managed seed manifests tospec.gardenlet.config.seedConfig.spec.backup.credentialsRef
! Gardener API server already has defaulted this field. by @vpnachev [#12347][DEVELOPER]
The.spec.purpose
field in theControlPlane
resource has been removed after being deprecated since Gardener v1.120.0. It was previously used to distinguish between thenormal
andexposure
purposes. The exposure purpose was used before SNI was introduced. Since SNI is now unconditionally enabled, the field is no longer needed. by @theoddora [#12340][DEVELOPER]
The functiong.yxqyang.asia/gardener/gardener/extensions/pkg/controller/controlplane/genericactuator.NewActuator
no longer acceptsexposureSecretConfigs
,exposureShootAccessSecrets
functions as parameters, andcontrolPlaneExposureChart
chart.The interface
github.com/gardener/gardener/extensions/pkg/controller/controlplane/genericactuator.ValuesProvider
no longer defines a method calledGetControlPlaneExposureChartValues
. Implementations of the interface can drop the said method. by @theoddora [#12340][USER]
Setting resources with.
suffix in thespec.kubernetes.kubeAPIServer.encryptionConfig.resources
field is now forbidden. by @AleksandarSavchev [#12355][USER]
The deprecatedurl
annotation in<shoot-name>.monitoring
secrets in the project namespace has been removed. Please use theplutono-url
annotation instead. by @oliver-goetz [#12396][USER]
The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDelete
field in theShoot
API is forbidden to be set for Kubernetes versions >= 1.33 and will be removed after support for Kubernetes 1.32 is dropped. by @Kostov6 [#12413]📰 Noteworthy
[OPERATOR]
The graduated feature gateRemoveAPIServerProxyLegacyPort
has been removed. by @Wieneo [#12406][USER]
For worker pools with in-place update strategies, themaxSurge
andmaxUnavailable
fields are now correctly defaulted to0
and1
respectively. by @shafeeqes [#12438]✨ New Features
[OPERATOR]
Introduced the OpenTelemetry Operator as a component to Seed & Garden Clusters. by @rrhubenov [#12165][OPERATOR]
gardenlet
s are now able to update their garden cluster CA automatically from Garden cluster ifgardenClusterCACert
field ingardenlet
resource is omitted.gardenClusterCACert
field ingardenlet
resource is deprecated now. by @oliver-goetz [#11996][OPERATOR]
Operators do no longer have to specify agardenClusterAddress
ingardenlet
resources. by @oliver-goetz [#11996][OPERATOR]
Cluster internal L7 load balancing for control plane components of shoot and virtual garden kube-apiservers is supported now. by @oliver-goetz [#12260][DEVELOPER]
The provider-local extension implements theBastion
resource now. With this, you can usegardenctl ssh
in the local setup. by @timebertt [#12366][DEVELOPER]
BackupBucket/BackupEntry controllers now support WorkloadIdentity type of credentials, provider extensions may need to adjust the respective controllers or to explicitly disallow BackupBuckets of their type to configure WorkloadIdentity. by @vpnachev [#12321]🐛 Bug Fixes
[DEVELOPER]
Fixed the local-setup for Cilium shoots. by @axel7born [#12410][USER]
A bug causing thekube-apiserver
to crash due to invalid resources in thespec.kubernetes.kubeAPIServer.encryptionConfig.resources
was fixed. by @AleksandarSavchev [#12355][USER]
A bug forbidding the update ofspec.kubernetes.kubeAPIServer.encryptionConfig.resources
due to use of.
suffix in resources was fixed. by @AleksandarSavchev [#12355][OPERATOR]
Fix istio creation on cloud regions with uppercase characters by @modzilla99 [#12466]🏃 Others
[DEPENDENCY]
The following dependencies have been updated:gardener/gardener-metrics-exporter
from0.39.0
to0.40.0
. Release Notes by @gardener-ci-robot [#12441][DEPENDENCY]
The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecar
from1.30.5
to1.30.6
. by @gardener-ci-robot [#12447][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/kube-state-metrics/kube-state-metrics
fromv2.15.0
tov2.16.0
. by @gardener-ci-robot [#12424][DEPENDENCY]
The following dependencies have been updated:perses/perses-operator
fromv0.1.12
tov0.2.0
. Release Notes by @gardener-ci-robot [#12420][DEPENDENCY]
The base image of thegardener-extension-provider-local-node
image is now updated tokindest/[email protected]
. by @Kostov6 [#12386][DEPENDENCY]
local setup: The kind cluster's node image is now updated tokindest/[email protected]
. by @Kostov6 [#12386][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.12.3
tov1.12.4
. by @gardener-ci-robot [#12445][DEPENDENCY]
The following dependencies have been updated:perses/perses
fromv0.51.0
tov0.51.1
. Release Notes by @gardener-ci-robot [#12417][DEPENDENCY]
The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecar
from1.30.6
to1.30.7
. by @gardener-ci-robot [#12488][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.11.7
tov1.11.8
. by @gardener-ci-robot [#12443][DEPENDENCY]
The following dependencies have been updated:gardener/dashboard
from1.80.3
to1.81.0
. Release Notes by @petersutter [#12514][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.12.4
tov1.13.0
. by @gardener-ci-robot [#12444][OPERATOR]
Default
field inFeatureGateVersionRange
is now renamed toLockedValue
. by @RadaBDimitrova [#12458][OPERATOR]
Add Capabilities validation utils for provider-extension. Read more about Machine Capabilities here by @Roncossek [#12128][OPERATOR]
Clean up obsoleteprometheus-
folder from Prometheus volumes. This might be a leftover of GEP-19 by @vicwicker [#12219][OPERATOR]
The status of constraintDualStackNodesMigrationReady
is nowprogressing
instead offalse
at the start of a migration to dual-stack networking. by @axel7born [#12470]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.123.0
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.123.0
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.123.0
v1.122.1
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[USER]
An issue causing gardenlet to panic during the migration from single-stack IPv4 to dual-stack IPv4, IPv6 when the Shoot is hibernated is now fixed. by @DockToFuture [#12435][USER]
A bug causing themaxSurge
andmaxUnavailable
fields for worker pools with update strategyManualInPlaceUpdate
always getting overwritten is now fixed. by @shafeeqes [#12454][DEVELOPER]
An issue causing reporting data generated by the testframework to be incompatible with recent elasticsearch/opensearch versions is now fixed. by @dguendisch [#12462][OPERATOR]
Fixed an error inBackupBucket
reconciliation by replacingStrategicMergePatch
withMergePatch
to properly handleruntime.RawExtension
fields. by @shafeeqes [#12461]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.122.1
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.122.1
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.122.1
v1.122.0
Compare Source
[gardener/gardener]
[DEPENDENCY]
The Workload Identity secrets will no longer set theconfig
data key (with value"null"
) when theworkloadIdentity.spec.targetSystem.providerConfig
isnil
. by @vpnachev [#12372][OPERATOR]
If an operator configuresserviceAccountConfig.issuer
for the virtual cluster in a Garden resource and that issuer matches a hostname of the virtualkube-apiserver
then the--external-hostname
flag of the virtualkube-apiserver
will be set to that hostname instead of the first domain set in thevirtualCluster.dns.domains[]
field. by @dimityrmirchev [#12351][USER]
The.spec.kubernetes.enableStaticTokenKubeconfig
field in theShoot
API is removed. This field has been deprecated since Gardener v1.114.0. Adapt your manifests and machinery to no longer specify this field. Otherwise, CREATE/UPDATE requests for Shoot will be rejected due to unknown field. by @shafeeqes [#12284]📰 Noteworthy
[OPERATOR]
TheRemoveAPIServerProxyLegacyPort
feature gate has been promoted to GA and is now unconditionally enabled. by @Wieneo [#12341]✨ New Features
[DEVELOPER]
Gardener can now support clusters with Kubernetes version 1.33. Extension developers have to prepare individual extensions as well to work with 1.33. by @RadaBDimitrova [#12216][OPERATOR]
Gardener can now support clusters with Kubernetes version 1.33. To allow creation/update of 1.33 clusters you will have to update the version of your provider extension(s) to a version that supports 1.33 as well. Please consult the respective releases and notes in the provider extension's repository. by @RadaBDimitrova [#12216][OPERATOR]
The JWTs issued on behalf of WorkloadIdentity now have thejti
claim set. Already issued tokens will get thejti
claim next time when they are renewed. by @vpnachev [#12353][USER]
Support defaulting machine image versions from version prefix on Shoot spec update. by @LucaBernstein [#12374]🐛 Bug Fixes
[USER]
A regression causing the gardenlet to fail to decode the referencedAuthenticationConfiguration
while deploying the kube-apiserver when the API version is notapiserver.config.k8s.io/v1beta1
is now fixed. by @AleksandarSavchev [#12399]🏃 Others
[DEPENDENCY]
The following dependencies have been updated:quay.io/persesdev/perses
fromv0.50.3
tov0.51.0
. by @gardener-ci-robot [#12237][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/node-problem-detector/node-problem-detector
fromv0.8.20
tov0.8.21
. by @gardener-ci-robot [#12242][DEPENDENCY]
The following dependencies have been updated:credativ/vali
fromv2.2.23
tov2.2.24
. Release Notes by @gardener-ci-robot [#12313][DEPENDENCY]
The following dependencies have been updated:credativ/plutono
fromv7.5.38
tov7.5.39
. Release Notes by @gardener-ci-robot [#12312][DEPENDENCY]
The following dependencies are updated:k8s.io/*
:v0.32.5
->v0.33.1
sigs.k8s.io/controller-runtime
:v0.20.4
->v0.21.0
sigs.k8s.io/controller-tools
:v0.17.3
->v0.18.0
by @plkokanov [#12208][DEPENDENCY]
The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecar
from1.30.3
to1.30.5
. by @gardener-ci-robot [#12375][OPERATOR]
The.spec.kubernetes.kubeControllerManager.podEvictionTimeout
field in theShoot
API is forbidden to be set for Kubernetes versions >= 1.33 and will be removed after support for Kubernetes 1.32 is dropped. by @plkokanov [#12343][OPERATOR]
Terraform container now forbids privilege escalation explicitly. by @AleksandarSavchev [#12325][USER]
The redundantcontainerd-monitor
systemd unit is now removed. It had already been replaced by thegardener-node-agent
's health check controller which fully covers the functionality of thecontainerd-monitor
unit. by @theoddora [#12297]📖 Documentation
[OPERATOR]
A documentation on how to configure and use immutable backup buckets for enhanced data protection is now added. by @seshachalam-yv [#12175]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.122.0
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.122.0
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.122.0
v1.121.4
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[USER]
An issue causing gardenlet to panic during the migration from single-stack IPv4 to dual-stack IPv4, IPv6 when the Shoot is hibernated is now fixed. by @DockToFuture [#12435][USER]
A bug causing themaxSurge
andmaxUnavailable
fields for worker pools with update strategyManualInPlaceUpdate
always getting overwritten is now fixed. by @shafeeqes [#12455][DEVELOPER]
An issue causing reporting data generated by the testframework to be incompatible with recent elasticsearch/opensearch versions is now fixed. by @dguendisch [#12463][OPERATOR]
Fixed an error inBackupBucket
reconciliation by replacingStrategicMergePatch
withMergePatch
to properly handleruntime.RawExtension
fields. by @shafeeqes [#12459]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.4
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.4
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.4
v1.121.3
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[USER]
A regression causing the gardenlet to fail to decode the referencedAuthenticationConfiguration
while deploying the kube-apiserver when the API version is notapiserver.config.k8s.io/v1beta1
is now fixed. by @AleksandarSavchev [#12400]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.3
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.3
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.3
v1.121.2
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[DEVELOPER]
Installinglogcheck
andtypos
as custom linters for gardener extensions has been fixed. by @timuthy [#12380][OPERATOR]
An issue preventing the cluster-autoscaler to listvolumeattachments
in now fixed. by @aaronfern [#12376][OPERATOR]
TheGarden
resource validation no longer forbids setting bothbucketName
andproviderConfig
in the ETCD backup configuration under the.spec.virtualCluster
field. by @seshachalam-yv [#12367]🏃 Others
[DEPENDENCY]
Perses container images are switched from upstreamquay.io
images to Gardener AR images (mirror from upstreamdocker.io
images). The upstreamquay.io
images are 200MB larger compared to thedocker.io
ones and include binary with Sleepycat license (Berkeley DB). by @ialidzhikov [#12383]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.2
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.2
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.2
v1.121.1
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
A regression was fixed that previously prevented the creation or update ofCloudProfile
s without a specified machine image versionclassification
. by @timuthy [#12334]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.1
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.1
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.1
v1.121.0
Compare Source
[gardener/gardener]
[DEVELOPER]
Movedextensions/pkg/predicate
topkg/controllerutils/predicate
. Please adjust imports accordingly. by @Wieneo [#12026][DEVELOPER]
TheMutatorWithShootClient
has been removed from Gardener. If your mutator requires a shoot client, it should implement the newWantsShootClient
interface instead. The corresponding client can be found in the passed context via theShootClientContextKey
. by @timuthy [#12289][DEVELOPER]
Movedextensions/pkg/util/cloudprofile
topkg/utils/gardener/cloudprofile
. Please adjust imports accordingly. by @Wieneo [#12026][USER]
The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDelete
field in the Shoot API is deprecated in favor of.spec.kubernetes.clusterAutoscaler.maxScaleDownParallelism
and will be removed once gardener stops supporting kubernetesv1.32
. Please adapt your Shoot manifests accordingly. by @takoverflow [#12115][OPERATOR]
gardenlet no longer deploys ControlPlane resources with.spec.purpose=exposure
for Shoots usingunmanaged
DNS provider. gardenlet will now cleanup any ControlPlane exposure resource as part of the reconciliation and deletion flows for such Shoots. by @theoddora [#12162]📰 Noteworthy
[OPERATOR]
TheSeed
backup secret is no longer copied from theShoot
infrastructure credentials in case an operator does not provide an existent backup secret andDoNotCopyBackupCredentials
feature gate is enabled forgardenlet
. If you configureseed.spec.backup.credentialsRef
orseed.spec.backup.secretRef
, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeed
backup andShoot
infrastructure. by @dimityrmirchev [#12168][OPERATOR]
TheCredentialsRotationWithoutWorkersRollout
feature gate has been promoted to beta and is now enabled by default. by @rfranzke [#12236]✨ New Features
[DEVELOPER]
Extension mutators or validators can now retrieve a correspondingCluster
object from the passedcontext.Context
. TheWantsClusterObject
interface must be implemented for this functionality. by @timuthy [#12289][USER]
Concurrent drain and deletion of nodes that require drain can now be configured forcluster-autoscaler
via the field.spec.kubernetes.clusterAutoscaler.maxDrainParallelism
in the Shoot API. by @takoverflow [#12115][OPERATOR]
gardenlet
now doesn't scale up deployments duringShoot
reconciliation if they havedependency-watchdog.gardener.cloud/meltdown-protection-active
annotation on them. by @ashwani2k [#12314]🐛 Bug Fixes
[USER]
A bug causing thekube-apiserver
to crash when anonymous authentication is configured viaStructuredAuthentication
was fixed. by @dimityrmirchev [#12198][OPERATOR]
An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12306]🏃 Others
[OPERATOR]
Enhance DualStack migration docs with knowledge about manual reconciliation. by @adenitiu [#12246][OPERATOR]
gardenadm
is now published as a container image in release and snapshot builds. by @timebertt [#12294][OPERATOR]
Introduce theperses-operator
toGarden
andSeed
clusters. by @rickardsjp [#12084][OPERATOR]
Clarified and enforced policy in the Kubernetes version support process to retain only the latest 5 minor versions, improving security by dropping older, unpatched versions more consistently. by @vlerenc [#12201][DEVELOPER]
Added the helper functionCurrentLifecycleClassification(version)
to evaluate the current classification of a givenExpirableVersion
. by @LucaBernstein [#12298][DEVELOPER]
Introduced new version classificationsunavailable
andexpired
. They are not meant to be set manually but should act as computed classification states. by @LucaBernstein [#12298][DEPENDENCY]
The following dependencies have been updated:gardener/dashboard
from1.80.2
to1.80.3
. Release Notes by @gardener-ci-robot [#12227][DEPENDENCY]
The following dependencies have been updated:gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. Release Notesg.yxqyang.asia/gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. by @ashwani2k [#12314][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-recommender
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-updater
from1.4.0
to1.4.1
. by @gardener-ci-robot [#12239][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.12.2
tov1.12.3
. by @gardener-ci-robot [#12258][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-recommender
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-updater
from1.3.1
to1.4.0
. by @gardener-ci-robot [#12167][DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.11.6
tov1.11.7
. by @gardener-ci-robot [#12257]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.0
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.0
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.0
v1.120.4
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[USER]
An issue causing gardenlet to panic during the migration from single-stack IPv4 to dual-stack IPv4, IPv6 when the Shoot is hibernated is now fixed. by @DockToFuture [#12435][DEVELOPER]
An issue causing reporting data generated by the testframework to be incompatible with recent elasticsearch/opensearch versions is now fixed. by @dguendisch [#12464][OPERATOR]
Fixed an error inBackupBucket
reconciliation by replacingStrategicMergePatch
withMergePatch
to properly handleruntime.RawExtension
fields. by @shafeeqes [#12460]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.120.4
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.120.4
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.120.4
v1.120.3
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
An issue preventing the cluster-autoscaler to listvolumeattachments
in now fixed. by @aaronfern [#12378][DEVELOPER]
Installinglogcheck
andtypos
as custom linters for gardener extensions has been fixed. by @timuthy [#12381]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.120.3
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.120.3
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.120.3
v1.120.2
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12303]🏃 Others
[OPERATOR]
gardenadm
is now published as a container image in release and snapshot builds. by @timebertt [#12291]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.120.2
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.120.2
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.120.2
v1.120.1
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[USER]
An issue causing the in-place update to fail during credentials rotation without workers rollout is now fixed. by @shafeeqes [#12249]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.120.1
Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.120.1
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.120.1
v1.120.0
Compare Source
[gardener/gardener]
[DEPENDENCY]
Themachinecontrollermanager.ProviderSidecarContainer
now expects additionalshoot
andcontrolPlaneNamespace
params. Incontrolplane
webhooks, extensions can useGardenContext.GetCluster
to retrieve the shoot from theCluster
object. by @timebertt [#12152][OPERATOR]
The graduated and unconditionally enabledShootForceDeletion
feature gate has been removed. If you have references to the feature gate, clean them up before upgrading to this version of Gardener. by @acumino [#12078][OPERATOR]
The field.seedConfig.spec.backup.credentialsRef/secretRef
will no longer be defaulted inGardenletConfiguration
when backup is configured but reference to credentials is not provided. Operators are responsible to provide a valid credentials reference when configuring backup for seeds. Please consult the deploy gardenlet documentation for more information. by @dimityrmirchev [#12087][OPERATOR]
TheBackupBucket
API fieldspec.secretRef
has been deprecated and will be removed in a future version of Gardener in favor ofspec.credentialsRef
, please adapt your BackupBucket manifests to use the newcredentialsRef
field. by @vpnachev [#12032][OPERATOR]
A new field,clusterCompatibility
, has been added to theExtension
API. If your landscape is managed bygardener-operator
and yourgarden
specifiesspec.extensions
, please add thegarden
cluster type value to your correspondingExtension
resources. by @timuthy [#11982][DEVELOPER]
WorkerPoolHash
now includes a new parameteradditionalDataInPlace
to support hash calculation for worker pools using theInPlace
update strategy. by @acumino [#12178][DEVELOPER]
The already deprecatedg.yxqyang.asia/gardener/gardener/pkg/utils/gardener.ReconcileTopologyAwareRoutingMetadata
func is now removed. Instead, useg.yxqyang.asia/gardener/gardener/pkg/utils/gardener.ReconcileTopologyAwareRoutingSettings
. by @ialidzhikov [#12091]📰 Noteworthy
[DEVELOPER]
The Shoot Pod autoscaling best practices guide now recommends for a container under VPA to not set initial resource requests less than VPA'sminAllowed
or10m
and10Mi
.10m
and10Mi
are the minimum resConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.