🤖 Update module github.com/gardener/gardener to v1.107.0 #112
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.101.3->v1.107.0Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.107.0Compare Source
[gardener/gardener]
[DEVELOPER]The unused methodWithShootCredentialshave been removed fromgithub.com/gardener/gardener/pkg/gardenlet/operation/shoot.Builder. by @vpnachev [#10672][DEVELOPER]In the local development setup, the images are pushed togarden.local.gardener.cloud:5001instead oflocalhost:5001now. Please add127.0.0.1 garden.local.gardener.cloudto your/etc/hosts. by @rrhubenov [#10257][OPERATOR]Feature gateIPv6SingleStackhas been removed. Infrastructure-specific validations will be added in parallel to the corresponding provider extensions. by @ScheererJ [#10716]📰 Noteworthy
[OPERATOR]ManagedSeed's.spec.gardenlet.config.seedConfig.spec.ingress.controller.kindfield is now defaulted tonginxwhen.spec.gardenlet.config.seedConfigor.spec.gardenlet.config.seedConfig.spec.ingressis nil.This allows the creation of ManagedSeed without specifying the
.spec.gardenletfield. by @RadaBDimitrova [#10655][OPERATOR]A newrequiredcontroller was added togardener-operator. It maintains theRequiredRuntimecondition forExtensionresources to indicate that the extension deployment is required in the Garden-Runtime cluster. by @timuthy [#10650][OPERATOR]Thegardener/controlplaneHelm chart has been deprecated and will be removed afterv1.135has been released (around beginning of 2026). We urge you to switch to agardener-operator-based installation. Read all about it here. by @rfranzke [#10706][DEVELOPER].spec.gardenletof ManagedSeed is now a required field. This was already the case from an API perspective, enforced by validation. by @RadaBDimitrova [#10648][USER]Thespec.kubernetes.kubeAPIServer.oidcConfigfield in theShootAPI is deprecated and will be removed after support for Kubernetes 1.31 is dropped. by @AleksandarSavchev [#10666]✨ New Features
[OPERATOR]If an admission webhook which was deployed viaExtensionresource bygardener-operatoris deleted again, its webhook configuration in the virtual-cluster is cleaned up automatically. by @oliver-goetz [#10585][OPERATOR]TheCloudProfile,Seed, andShootAPIs are now allowing to configure access restrictions (e.g., to enable "EU access"-only or similar policies). The legacy approach with theseed.gardener.cloud/eu-accesslabels is deprecated and will be removed in a future release. Make sure to adapt to the new APIs. Read all about it here. by @rfranzke [#10654][USER]The viewer kubeconfigs for shoot clusters now allow thepods/logsubresource. by @rfranzke [#10711][USER]Service Account Managed Issuer can be now enabled for workerless shoot clusters. by @dimityrmirchev [#10689][USER]Structured authorization configuration can now be set by creating aConfigMapwith theAuthorizationConfigurationfile set in theconfig.yamldata key and referencing it (in theShootvia.spec.kubernetes.kubeAPIServer.structuredAuthorization, in theGardenvia.spec.virtualCluster.kubernetes.kubeAPIServer.structuredAuthorizationfor Kubernetes versions>= v1.30. Read all about it here. by @rfranzke [#10682][USER]Gardener reports the cluster's egress CIDRs inShoot.status.networking.egressCIDRsif supported by the used provider extension. by @timebertt [#10240]🐛 Bug Fixes
[OPERATOR]Fix Prometheus ruleshoot-kube-proxy. by @LucaBernstein [#10757][OPERATOR]The TopologySpreadConstraints calculation was improved forStatefulSets to always use a stable label selector. This led to issues in the past when shoots were upgraded to HA. by @timuthy [#10750][OPERATOR]valitail version is now pinned to v2.2.15 (depends on glibc 2.32). by @ialidzhikov [#10776]🏃 Others
[DEPENDENCY]Thecredativ/plutonoimage has been updated tov7.5.34. Release Notes by @gardener-ci-robot [#10732][DEPENDENCY]Thegardener/etcd-druidimage has been updated tov0.23.2. Release Notes by @gardener-ci-robot [#10747][DEPENDENCY]Thegardener/cert-managementimage has been updated tov0.16.0. Release Notes by @gardener-ci-robot [#10684][DEPENDENCY]Thecredativ/valiimage has been updated tov2.2.19. Release Notes by @gardener-ci-robot [#10680][DEPENDENCY]Thegcr.io/istio-release/pilotimage has been updated to1.23.3. by @gardener-ci-robot [#10725][DEPENDENCY]Thequay.io/prometheus/prometheusimage has been updated tov2.55.0. by @gardener-ci-robot [#10697][DEPENDENCY]Thequay.io/prometheus-operator/prometheus-config-reloaderimage has been updated tov0.77.2. by @gardener-ci-robot [#10692][DEPENDENCY]Theenvoyproxy/envoyimage has been updated tov1.32.1. Release Notes by @gardener-ci-robot [#10755][DEPENDENCY]Thegardener/dashboardimage has been updated to1.78.0. Release Notes by @gardener-ci-robot [#10731][OPERATOR]The admission automatically adds theprovider.extensions.gardener.cloudlabel toNamespacedCloudProfiles. by @LucaBernstein [#10742][OPERATOR]Add dual-stack support for coredns. by @DockToFuture [#10733][OPERATOR]Allow extensions to be scraped in garden runtime cluster even outside garden namespace by @ScheererJ [#10720][OPERATOR]Add label selector to ShootResourceReservation plugin to control for which Shoots the ShootResourceReservation Plugin setskubeReservedaccording to the GKE formula whenuseGKEFormula: trueis set. by @voelzmo [#10492][OPERATOR]Increase the readiness probe timeout for thegardener-metrics-exporterfrom 1s to 10s. by @vicwicker [#10771][OPERATOR]Thegardener/etcd-druidimage has been updated tov0.23.1. Release Notes v0.23.1, Release Notes v0.23.0 by @shreyas-s-rao [#10526][OPERATOR]Theautoscaler/cluster-autoscalerimage has been updated tov1.29.2(for Kubernetes v1.29). Release Notes by @rishabh-11 [#10700][OPERATOR]Gardener API Server feature gateShootCredentialsBindinghas been promoted to beta and is enabled by default. by @dimityrmirchev [#10662][DEVELOPER]Add Make targetmake operator-seed-devfor local development of thegardenletin the operator setup. by @marc1404 [#10710][DEVELOPER]Fix/etc/hostsconfiguration in the remote local setup by @vicwicker [#10744][DEVELOPER]The base image of thegardener-extension-provider-local-nodeimage is now updated tokindest/[email protected]. by @ialidzhikov [#10688][DEVELOPER]local setup: The kind cluster's node image is now updated tokindest/[email protected]. by @ialidzhikov [#10723]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.0Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.0v1.106.2Compare Source
[gardener/gardener]
🏃 Others
[OPERATOR]Increase the readiness probe timeout for thegardener-metrics-exporterfrom 1s to 10s. by @vicwicker [#10769]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.106.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.106.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.106.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.106.2Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.106.2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.106.2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.106.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.106.2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.106.2europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.106.2europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.106.2europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.106.2v1.106.1Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]Thegardener-resource-managerdoes not markDeployments as progressing when there are still completedPods in the system. by @timuthy [#10727]🏃 Others
[OPERATOR]IPv6 support fornode-local-dns. by @DockToFuture [#10707][OPERATOR]Fixed an issue that would cause the entry for themachine-statein theShootStateto be overwritten with nil data during control plane migration, if themigratephase errored and was retried after theMachineDeployment,MachineSetandMachineobjects were deleted, which would result in the Shoot's nodes to be recreated during Control Plane Migration. by @plkokanov [#10695]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.106.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.106.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.106.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.106.1Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.106.1europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.106.1europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.106.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.106.1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.106.1europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.106.1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.106.1europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.106.1v1.106.0Compare Source
[gardener/gardener]
[OPERATOR]kubeletCSRApprovercontroller ingardener-resource-managerHelm chart has been renamed tocsrApprover. by @oliver-goetz [#10549][OPERATOR]TheHVPAandHVPAForShootedSeedfeature gates have been deprecated and locked to false. Disable theHVPAandHVPAForShootedSeedfeature gates if you have them enabled before upgrading to this version of Gardener. by @plkokanov [#10659]📰 Noteworthy
[USER]For Kubernetes 1.31+ Shoot clusters, the kubelet and containerd cgroup driver is set tosystemd. Previously, the used cgroup driver wascgroupfs. Find more details in the cgroup driver section. by @ialidzhikov [#10472][OPERATOR]The gardener operator chart (charts/gardener/operator) does no longer enable theHVPAfeature gate in its defaultvalues.yaml. by @ialidzhikov [#10566]✨ New Features
[DEVELOPER]Allow gosec to be consumed from gardener/gardener by @ScheererJ [#10642][DEVELOPER]Gardener can now support clusters with Kubernetes version 1.31. Extension developers have to prepare individual extensions as well to work with 1.31. by @ialidzhikov [#10472][OPERATOR]AddsCloudProfilevalidation for the recently introduced.spec.bastionsection. by @hebelsan [#10318][OPERATOR]Gardener can now support clusters with Kubernetes version 1.31. To allow creation/update of 1.31 clusters you will have to update the version of your provider extension(s) to a version that supports 1.31 as well. Please consult the respective releases and notes in the provider extension's repository. by @ialidzhikov [#10472][OPERATOR]Added an alert for theGardenresource's conditions, along with a dashboard that also displays the resource's last operation. by @rickardsjp [#10562]🐛 Bug Fixes
[OPERATOR]Fixes an issue with the network metrics relabeling config that caused theNode Detailsdashboard to not display data for AWS nodes. by @rickardsjp [#10625]🏃 Others
[DEPENDENCY]Theregistry.k8s.io/ingress-nginx/controller-chrootimage has been updated tov1.11.3. by @gardener-ci-robot [#10626][DEPENDENCY]Thegardener/vpn2image has been updated to0.28.0. Release Notes by @gardener-ci-robot [#10640][DEPENDENCY]Thequay.io/cortexproject/corteximage has been updated tov1.18.1. by @gardener-ci-robot [#10657][DEPENDENCY]Theregistry.k8s.io/node-problem-detector/node-problem-detectorimage has been updated tov0.8.20. by @gardener-ci-robot [#10661][DEPENDENCY]Theenvoyproxy/envoyimage has been updated tov1.32.0. Release Notes by @gardener-ci-robot [#10656][OPERATOR]HA-VPN works if seed and shoot have different IPFamilies. by @DockToFuture [#10622][OPERATOR]Update istio to version 1.23.2 by @axel7born [#10558][OPERATOR][NewVPN] Enable IPv6 for HA if needed. by @MartinWeindel [#10641][OPERATOR]Gardener generated certificates are valid 1 minute before issuance to handle some amount of clock skew. by @ScheererJ [#10603][OPERATOR]Metrics forvpa-recommenders are now collected in separate prometheus instances depending on where thevpa-recommenderpods are deployed. Metrics for thevpa-recommenderin thegardennamespace are collected inprometheus-seed. Metrics for thevpa-recommenderin the shoot control plane namespaces are collected in the correspondingprometheus-shoot. Additionally, theVPA Recommenderplutono dashboard is separately deployed for seeds in thegardennamespace and shoots in their control plane namespaces. by @plkokanov [#10517][OPERATOR]Clean up migration code from the monitoring component by @vicwicker [#10597][DEVELOPER]The following dependencies are updated:k8s.io/*:v0.29.8->v0.31.0sigs.k8s.io/controller-runtime:v0.17.5->v0.19.0by @ary1992 [#10459][DEVELOPER]The HVPA features gates (HVPAandHVPAForShootedSeed) are no longer enabled in local setups. by @ialidzhikov [#10566]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.106.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.106.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.106.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.106.0Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.106.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.106.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.106.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.106.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.106.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.106.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.106.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.106.0v1.105.3Compare Source
[gardener/gardener]
🏃 Others
[OPERATOR]Increase the readiness probe timeout for thegardener-metrics-exporterfrom 1s to 10s. by @vicwicker [#10770]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.3Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.3europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.3europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.3europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.3europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.3europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.3europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.3europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.3v1.105.2Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]Thegardener-resource-managerdoes not markDeployments as progressing when there are still completedPods in the system. by @timuthy [#10728]🏃 Others
[OPERATOR]Fixed an issue that would cause the entry for themachine-statein theShootStateto be overwritten with nil data during control plane migration, if themigratephase errored and was retried after theMachineDeployment,MachineSetandMachineobjects were deleted, which would result in the Shoot's nodes to be recreated during Control Plane Migration. by @plkokanov [#10696][OPERATOR]IPv6 support fornode-local-dns. by @DockToFuture [#10708]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.2Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.2europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.2europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.2europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.2v1.105.1Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]An issue was fixed that causegardener-operatorto deploy thegardenletinto the runtime cluster instead of another intended remote cluster. by @timuthy [#10631][OPERATOR]Fix a bug where the shoot care controller cannot reconcile shoots withspec.maintenance.confineSpecUpdateRollout=trueand migrated betweensecretBindingNameandcredentialsBindingNameuntil the shoot is reconciled.. by @vpnachev [#10674]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.1Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.1europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.1europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.1europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.1europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.1v1.105.0Compare Source
[gardener/gardener]
📰 Noteworthy
[OPERATOR]TheVPAForETCDandVPAAndHPAForAPIServerfeature gates have been promoted to GA and locked totrue. by @plkokanov [#10599][USER]The limitation of having at maximum ~80 worker pools inShoots has been lifted. Much higher numbers should be possible now (concrete limit depends on the amount of configuration within the pools (e.g., labels, taints, annotations, etc.)). by @rfranzke [#10542]✨ New Features
[DEVELOPER]Add functionality for the determination of bastion VM parameters used by the extensions by @hebelsan [#10537][OPERATOR]gardener-operatoris now capable of deploying extension controllers to the garden runtime cluster viaoperator.gardener.cloud/v1alpha1.Extensionresources. Please visit this document for more information. by @timuthy [#10518][OPERATOR]gardenletnow performs garbage collection of stalePods in all namespaces (exceptkube-system) in the seed cluster. by @rfranzke [#10548]🐛 Bug Fixes
[OPERATOR]When checking whether aDeploymentrollout is complete, stalePods are now ignored and no longer counted. by @rfranzke [#10548]🏃 Others
[DEPENDENCY]Thequay.io/prometheus-operator/prometheus-config-reloaderimage has been updated tov0.77.0. by @gardener-ci-robot [#10547][DEPENDENCY]Thegardener/ingress-default-backendimage has been updated to0.20.0. Release Notes by @gardener-ci-robot [#10560][DEPENDENCY]Thegardener/etcd-druidimage has been updated tov0.22.7. Release Notes by @gardener-ci-robot [#10570][DEPENDENCY]Thegardener/etcd-druidimage has been updated tov0.22.6. Release Notes by @gardener-ci-robot [#10556][DEPENDENCY]Thegardener/gardener-discovery-serverimage has been updated tov0.2.0. Release Notes by @gardener-ci-robot [#10546][DEPENDENCY]Thequay.io/prometheus-operator/prometheus-config-reloaderimage has been updated tov0.77.1. by @gardener-ci-robot [#10573][DEPENDENCY]Thequay.io/kiwigrid/k8s-sidecarimage has been updated to1.28.0. by @gardener-ci-robot [#10591][DEPENDENCY]Theenvoyproxy/envoyimage has been updated tov1.31.2. Release Notes by @gardener-ci-robot [#10553][DEPENDENCY]Thegcr.io/istio-release/pilotimage has been updated to1.21.6. by @gardener-ci-robot [#10564][DEVELOPER]provider-extensions setup: Seed VPA is disabled by default to avoid two VPA deployments to act on the same cluster causing endless eviction loops. by @ialidzhikov [#10593][DEVELOPER]Correctly extract and install the go binaries in the remote local setup by @vicwicker [#10605][OPERATOR]Allow overlapping network ranges in case of single stack IPv6. by @axel7born [#10584][OPERATOR]Allow empty pod and service ranges in shoot spec for IPv6 single stack. by @axel7born [#10541][OPERATOR]TheTopologySpreadConstraintcalculation was improved for workload spread across multiple zones. This especially leads to a more balanced distribution ofkube-apiserverandistioreplicas in seed clusters. by @timuthy [#10608][OPERATOR]VPA resource settings are now adapted - memory limits are removed and initial resource requests are lowered. by @voelzmo [#10568]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.0Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.0v1.104.3Compare Source
[gardener/gardener]
🏃 Others
[OPERATOR]IPv6 support fornode-local-dns. by @DockToFuture [#10709]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.3Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.3europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.3europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.3europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.3europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.3europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.3europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.3europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.3v1.104.2Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]Fix a bug where the shoot care controller cannot reconcile shoots withspec.maintenance.confineSpecUpdateRollout=trueand migrated betweensecretBindingNameandcredentialsBindingNameuntil the shoot is reconciled.. by @vpnachev [#10675][OPERATOR]An issue was fixed that causegardener-operatorto deploy thegardenletinto the runtime cluster instead of another intended remote cluster. by @timuthy [#10628]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.2Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.2europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.2europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.2europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.2v1.104.1Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]Fix a regression that causedgardenletto not be able to migrate deprecatedfailure-domain.beta.kubernetes.iolabels totopology.kubernetes.iodue to a removed RBAC rule required to patchPersistentVolumes. by @plkokanov [#10578]🏃 Others
[OPERATOR]Thegardener/etcd-druidimage has been updated tov0.22.7. Release Notes by @ishan16696 [#10592]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.1Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.1europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.1europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.1europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.1europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.1v1.104.0Compare Source
[gardener/gardener]
[USER]A bug has been fixed which was allowing users to setShootoidc configurations for thekube-apiserverwithout setting theclientIDandissuerURLfields inspec.kubernetes.kubeAPIServer.oidcConfig, which would lead to thekube-apiserverstuck in aErrorstate. gardener-apiserver now requires bothclientIDandissuerURLfields to be set when thespec.kubernetes.kubeAPIServer.oidcConfigfield is specified. by @AleksandarSavchev [#10461][OPERATOR]credentialsBinding.credentialsRefis now an immutable field. by @dimityrmirchev [#10365]📰 Noteworthy
[USER]Users are allowed to changeshoot.spec.credentialsBindingNameand reference anotherCredentialsBindingonly if they have the permissions to read both the old and newly referenced credential. by @dimityrmirchev [#10365][USER]Users can migrate fromshoot.spec.secretBindingNametoshoot.spec.credentialsBindingNameonly if the referenced credential remains the same and is not changed during the process. by @dimityrmirchev [#10365][OPERATOR]Allow project users to readNamespacedCloudProfiles and for project admins to make adjustments to machine types and volume types. by @LucaBernstein [#10485][OPERATOR]Alerts based on theproposals_failed_totalmetric of the etcd cluster are not raised anymore. by @renormalize [#10524][DEVELOPER]A new predicateextensions/pkg/predicate.GardenSecurityProviderTypecan be used to select resources from thesecurity.gardener.cloudgroup that are related to the passed provider type. by @dimityrmirchev [#10499]✨ New Features
[OPERATOR]Thegardener-operatormetrics are now automatically scraped by thegardenPrometheus. by @maboehm [#10464][OPERATOR]Introduce custom RBAC verbs to allow for modification of.spec.{kubernetes,machineImages}inNamespacedCloudProfiles. by @LucaBernstein [#10485][OPERATOR]The feature gateNewVPNis introduced for thegardenletcomponent. If enabled, the new VPN implementation (Golang rewrite) is used for allShoots of the respectiveSeed. In this case, the old implementation can be disabled for a singleShootby annotating the shoot resource withalpha.control-plane.shoot.gardener.cloud/disable-new-vpn=true. ForSeeds with disabled feature gate, the new implementation can be enabled for a single shoot by annotating it withalpha.control-plane.shoot.gardener.cloud/disable-new-vpn=false. by @MartinWeindel [#9774]🐛 Bug Fixes
[USER]Fixed disk read/write panel in the shoot's etcd dashboards by @rickardsjp [#10493][DEVELOPER]An issue was fixed that rejected the creation of workerless shoots in the local setup. by @timuthy [#10498]🏃 Others
[DEPENDENCY]Thegardener/hvpa-controllerimage has been updated tov0.17.0. Release Notes by @gardener-ci-robot [#10508][DEPENDENCY]Thequay.io/prometheus-operator/prometheus-config-reloaderimage has been updated tov0.76.2. by @gardener-ci-robot [#10500][DEPENDENCY]Thegardener/machine-controller-managerimage has been updated tov0.54.0. Release Notes by @gardener-ci-robot [#10528][DEPENDENCY]Thegardener/alpine-conntrackimage has been updated to3.20.3. Release Notes by @gardener-ci-robot [#10487][DEPENDENCY]Theenvoyproxy/envoyimage has been updated tov1.31.1. Release Notes by @gardener-ci-robot [#10531][OPERATOR]Federate apiserver_total_request metric to the Prometheus longterm instance by @jguipi [#10457][OPERATOR]Allow emptynetworking.nodesin case of IPv6 only shoots. by @axel7born [#10533][OPERATOR]Improved node utilisation by reducing requests for etcd-druid managed pods. by @unmarshall [#10540][DEVELOPER]Install go in the remote local setup from the go download site instead of using the apk package manager. by @vicwicker [#10502]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.0Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.0v1.103.2Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]An issue was fixed that causegardener-operatorto deploy thegardenletinto the runtime cluster instead of another intended remote cluster. by @timuthy [#10624][OPERATOR]Fix a bug where the shoot care controller cannot reconcile shoots withspec.maintenance.confineSpecUpdateRollout=trueand migrated betweensecretBindingNameandcredentialsBindingNameuntil the shoot is reconciled.. by @vpnachev [#10676]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.103.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.103.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.103.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.103.2Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.103.2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.103.2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.103.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.103.2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.103.2europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.103.2europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.103.2europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.103.2v1.103.1Compare Source
[gardener/gardener]
🐛 Bug Fixes
[DEVELOPER]An issue was fixed that rejected the creation of workerless shoots in the local setup. by @timuthy [#10503][OPERATOR]Fix a regression that causedgardenletto not be able to migrate deprecatedfailure-domain.beta.kubernetes.iolabels totopology.kubernetes.iodue to a removed RBAC rule required to patchPersistentVolumes. by @plkokanov [[#10581](https://redirect.github.com/gardenerConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.