Update k8s packages (minor) #65

renovate · 2024-06-24T11:01:13Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/gardener/gardener	`v1.112.0` -> `v1.117.0`
github.com/gardener/gardener-extension-provider-openstack	`v1.41.2` -> `v1.47.0`
k8s.io/api	`v0.31.5` -> `v0.32.3`
k8s.io/apiextensions-apiserver	`v0.31.5` -> `v0.32.3`
k8s.io/apimachinery	`v0.31.5` -> `v0.32.3`
k8s.io/client-go	`v0.31.5` -> `v0.32.3`
k8s.io/code-generator	`v0.31.5` -> `v0.32.3`
k8s.io/component-base	`v0.31.5` -> `v0.32.3`
sigs.k8s.io/controller-runtime	`v0.19.5` -> `v0.20.4`

Release Notes

gardener/gardener (github.com/gardener/gardener)

`v1.117.0`

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

[USER] The VPA version is updated to 1.3.0. Upstream VPA 1.3.0 does no longer serve API version autoscaling.k8s.io/v1beta2. Gardener's VPA installation will continue to serve API version autoscaling.k8s.io/v1beta2 until Gardener v1.119.
In Gardener v1.119+, the API version autoscaling.k8s.io/v1beta2 will no longer be served.
Migrate your VerticalPodAutoscaler manifests to use API version autoscaling.k8s.io/v1. For more details, see Notice on switching to v1 version (0.4.X-1.2.X to >=1.3.X). by @ialidzhikov [#11774]
[DEVELOPER] The hack/generate-crds.sh script no longer accepts an optional -r <reason> argument. Previously, this argument was used to add the api-approved.kubernetes.io: "<reason>"annotation to the CRD. Instead, use the +kubebuilder:metadata:annotations kubebuilder tag to add this annotation natively with controller-gen. by @ialidzhikov [#11774]
[DEVELOPER] The extension heartbeat controller was changed so that the heartbeat lease it maintains is updated via the github.com/gardener/gardener/pkg/controllerutils.CreateOrGetAndMergePatch function. Extension controllers that enable the heartbeat controller must adapt the extension controller RBAC rules to allow patch of the gardener-extension-heartbeat lease. by @Kostov6 [#11337]
[OPERATOR] An update validation was added for Extensions to ensure the immutability of the field .spec.resources[].primary. Previously, changing this value caused reconciliation errors, which are now prevented by this validation.
In addition, the .spec.resources[].primary is now defaulted to true. by @timuthy [#11824]

✨ New Features

[OPERATOR] Add new monitoring dashboard panes for Etcd Compaction Job with detailed failure reasons and updated existing alerts and boards. by @anveshreddy18 [#11771]
[OPERATOR] The extension care controller has been introduced. It checks the status of controller installations, extension and extension admission deployments managed by the Extension. by @oliver-goetz [#11769]
[OPERATOR] L7 load balancing is supporting the SPDY protocol for streaming APIs too. by @oliver-goetz [#11807]
[OPERATOR] NamespacedCloudProfile.spec.limits.maxNodesTotal can now also be used to override the limit defined in the parent CloudProfile with an increased value. Increasing requires additional permissions granted by the custom verb raise-spec-limits. by @LucaBernstein [#11796]
[USER] L7 load balancing can now be enabled independently from the Kubernetes version of the shoot when IstioTLSTermination feature gate is enabled on the seed. by @oliver-goetz [#11807]
[USER] IPv4 or dual-stack shoots can now define IPv4 pod, service and node networks overlapping with networks of their seed. Currently, this works only for non-HA shoots. by @domdom82 [#11582]

🐛 Bug Fixes

[OPERATOR] When IstioTLSTermination feature gate is enabled the apiserver-proxy related EnvoyFilter is not deployed for the virtual-garden anymore. by @oliver-goetz [#11897]

🏃 Others

[OPERATOR] Update istio to version 1.25.1. by @DockToFuture [#11836]
[OPERATOR] gardener-operator automatically adds the networking.resources.gardener.cloud/to-virtual-garden-kube-apiserver-tcp-443: allowed label to the gardenlet deployment in case it is deployed to the garden runtime cluster.
Thus, it is not required anymore to configure this label in the Gardenlet resource. by @timuthy [#11855]
[OPERATOR] The images of the registry caches used in the local setups are now updated to distribution/[email protected]. by @dimitar-kostadinov [#11775]
[OPERATOR] When IstioTLSTermination feature gate is enabled, istio-ingress gateway pods request 500m CPUs now. by @oliver-goetz [#11866]
[OPERATOR] Remove wildcards * from RBAC roles for the kubelet, admin, administrators,viewer and viewers clusterRoles. by @AleksandarSavchev [#11754]
[OPERATOR] Fix an error message during the startup of the node exporter by @vicwicker [#11817]
[OPERATOR] Add support for single-stack to dual-stack networking migration. by @axel7born [#11893]
[OPERATOR] Deploy MCM with higher concurrent-syncs, kube-api-qps and kube-api-burst. by @hendrikKahl [#11879]
[DEPENDENCY] The following dependencies have been updated:
- gardener/etcd-druid from v0.28.0 to v0.29.0. Release Notes
- github.com/gardener/etcd-druid/api from v0.28.0 to v0.29.0. by @gardener-ci-robot [#11867]
[DEPENDENCY] The following dependencies have been updated:
- gardener/machine-controller-manager from v0.57.1 to v0.57.2. Release Notes
- github.com/gardener/machine-controller-manager from v0.57.1 to v0.57.2. by @gardener-ci-robot [#11857]
[DEPENDENCY] The following dependencies have been updated:
- gcr.io/istio-release/pilot from 1.25.1 to 1.25.2.
- gcr.io/istio-release/proxyv2 from 1.25.1 to 1.25.2.
- istio.io/api from v1.25.1 to v1.25.2. by @gardener-ci-robot [#11868]
[DEPENDENCY] The following dependencies have been updated:
- gcr.io/istio-release/pilot from 1.23.5 to 1.23.6.
- gcr.io/istio-release/proxyv2 from 1.23.5 to 1.23.6. by @gardener-ci-robot [#11829]
[DEPENDENCY] The following images have been updated:
- registry.k8s.io/autoscaling/vpa-admission-controller: 1.2.2 -> 1.3.0
- registry.k8s.io/autoscaling/vpa-recommender: 1.2.2 -> 1.3.0
- registry.k8s.io/autoscaling/vpa-updater: 1.2.2 -> 1.3.0
  VPA 1.3.0 Release Notes by @ialidzhikov [#11774]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.117.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.117.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.117.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.117.0

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.117.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.117.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.117.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.117.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.117.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.117.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.117.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.117.0

`v1.116.2`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[OPERATOR] When IstioTLSTermination feature gate is enabled the apiserver-proxy related EnvoyFilter is not deployed for the virtual-garden anymore. by @oliver-goetz [#11896]

🏃 Others

[OPERATOR] Shoots that are currently in deletion now get ignored by the RemoveAPIServerProxyLegacyPort feature gate validation. by @Wieneo [#11887]
[OPERATOR] Deploy MCM with higher concurrent-syncs, kube-api-qps and kube-api-burst. by @hendrikKahl [#11880]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.116.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.116.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.116.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.116.2

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.116.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.116.2
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.116.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.116.2
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.116.2
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.116.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.116.2
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.116.2

`v1.116.1`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[USER] An issue causing the cloudprovider Secret to contain both static credentials and workload identity config, which are mutually exclusive, when migrating to workload identity is now fixed. by @dimityrmirchev [#11847]
[DEVELOPER] Fix malformed file path error on go get github.com/gardener/[email protected] by @MartinWeindel [#11820]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.116.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.116.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.116.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.116.1

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.116.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.116.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.116.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.116.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.116.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.116.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.116.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.116.1

`v1.116.0`

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

[DEVELOPER] /hack/generate-crds.sh will no longer generate any CRDs with group=druid.gardener.cloud. One must use etcd-druid API to get the CRDs that serve as a single source of truth for all etcd-druid CRDs. by @unmarshall [#11545]
[DEVELOPER] The extension class field in the generic extension controller was removed. Please use the new field classes instead. by @timuthy [#11764]
[OPERATOR] The etcd-druid's GA-ed UseEtcdWrapper feature gate is removed. It is now unconditionally enabled. It should no longer be passed in gardenlet configuration. Before upgrading to this version of Gardener, check your gardenlet configuration and make sure that it does not specify the etcd-druid's UseEtcdWrapper feature gate. by @unmarshall [#11545]
[OPERATOR] The default etcd-main storage is increased from 10Gi to 25Gi. The etcd-main storage capacity is mutated by provider extensions. Before upgrading to this version of Gardener, make sure the provider extensions which you use mutate the etcd-main capacity. Otherwise, the default storage capacity change in Gardener could be unexpected or breaking. by @unmarshall [#11545]
[OPERATOR] Please note, if you configure spec.extensions in your Garden resource: gardener-operator adds a garden- prefix to all extension resources configured via the Garden. Existing extension resources (not prefixed) will be deleted automatically at the end of the reconciliation. Another, manually triggered Garden reconciliation might be required to reach the desired state of the extension again. by @timuthy [#11764]

📰 Noteworthy

[OPERATOR] NodeAgentAuthorizer feature gate has been promoted to beta and is now enabled by default. by @oliver-goetz [#11757]
[OPERATOR] The feature gate NewVPN has been graduated to GA. It was already enabled by default and can now no longer be turned off. The feature gate will be removed in a future release. by @domdom82 [#11714]

✨ New Features

[OPERATOR] Extensions can be configured for Seeds via spec.extensions to deploy extensions for the seed cluster. Before activating this configuration, please first confirm that the corresponding extension is compatible with the seed use-case. by @timuthy [#11764]

🐛 Bug Fixes

[OPERATOR] The NetworkPolicy controller part of gardener-resource-manager does no longer attempt to create resources in terminating namespaces. by @rfranzke [#11808]
[OPERATOR] An issue causing Shoot reconciliation to fail with no relationship found when the referenced SecretBinding/CredentialsBinding is forcefully deleted (its finalizer is removed by the end user) and then recreated with the same name is now fixed. gardener-admission-controller's authorisation graph is now updated for a Shoot after forceful deletion and recreation of the referenced Secretbinding/CredentialsBinding. by @MartinWeindel [#11461]
[OPERATOR] If the computed pod label selector contains keys exceeding 63 characters, the NetworkPolicy controller part of gardener-resource-manager does now shorten them to make sure they can actually get created. Previously, it failed trying to create them infinitely, resulting in high CPU load in large clusters. by @rfranzke [#11808]
[OPERATOR] Keep operator.gardener.cloud.Extension condition RequiredRuntime = true until deletion of extensions.gardener.cloud.Extensions has completed. by @MartinWeindel [#11696]
[OPERATOR] Fix a bug that appears when migrating a Shoot between Seeds by introducing a new controller, which manages a ShootState finalizer preventing early object deletions. by @vitanovs [#11491]

🏃 Others

[DEVELOPER] Remove the double maintenance of CRDs defined in etcd-druid. Now, gardenlet is using the etcd-druid CRD APIs to get the CRDs ensuring one single source of truth. by @unmarshall [#11545]
[DEVELOPER] Remove the dependency on the github.com/gardener/etcd-druid module and instead introduce dependency on github.com/gardener/etcd-druid/api module. by @unmarshall [#11545]
[OPERATOR] Add optional argument --custom-package <group>=<package> to generate-crds.sh script. by @MartinWeindel [#11702]
[OPERATOR] Remove unnecessary istio loadbalancer annotations from the ClusterIP kube-apiserver service. by @kon-angelo [#11728]
[OPERATOR] Increase VPA client-side rate limits to 200 qps and 250 burst. by @voelzmo [#11748]
[DEPENDENCY] The following dependencies have been updated:
- envoyproxy/envoy from v1.33.1 to v1.33.2. Release Notes by @gardener-ci-robot [#11751]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/prometheus/node-exporter from v1.9.0 to v1.9.1. by @gardener-ci-robot [#11784]
[DEPENDENCY] The following dependencies have been updated:
- gardener/etcd-druid from v0.27.0 to v0.28.0. Release Notes
- github.com/gardener/etcd-druid from v0.27.0 to v0.28.0. by @unmarshall [#11545]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/kiwigrid/k8s-sidecar from 1.30.2 to 1.30.3. by @gardener-ci-robot [#11766]
[DEPENDENCY] The following dependencies have been updated:
- envoyproxy/envoy from v1.33.0 to v1.33.1. Release Notes by @gardener-ci-robot [#11720]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/coreos/etcd from v3.4.36 to v3.5.20. by @gardener-ci-robot [#11756]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/coreos/etcd from v3.4.34 to v3.4.36. by @gardener-ci-robot [#11755]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.116.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.116.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.116.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.116.0

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.116.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.116.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.116.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.116.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.116.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.116.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.116.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.116.0

`v1.115.3`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[OPERATOR] When IstioTLSTermination feature gate is enabled the apiserver-proxy related EnvoyFilter is not deployed for the virtual-garden anymore. by @oliver-goetz [#11895]
[USER] An issue causing the cloudprovider Secret to contain both static credentials and workload identity config, which are mutually exclusive, when migrating to workload identity is now fixed. by @dimityrmirchev [#11848]

🏃 Others

[OPERATOR] Shoots that are currently in deletion now get ignored by the RemoveAPIServerProxyLegacyPort feature gate validation. by @Wieneo [#11888]
[OPERATOR] Deploy MCM with higher concurrent-syncs, kube-api-qps and kube-api-burst. by @hendrikKahl [#11881]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.115.3
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.115.3
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.115.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.115.3

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.115.3
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.115.3
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.115.3
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.115.3
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.115.3
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.115.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.115.3
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.115.3

`v1.115.2`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[DEVELOPER] An issue causing the Shoot logging test-machinery integration tests to fail is now fixed. by @ialidzhikov [#11798]
[OPERATOR] The step which deploys the source BackupEntry during the restore phase of control plane migration now depends on the successful deployment of the Shoot's control plane namespace. This fixes a potential race condition which could cause the source-etcd-backup Secret to not be deployed in the Shoot's control plane namespace and the subsequent step which copies etcd backups to time out. by @plkokanov [#11812]

🏃 Others

[DEVELOPER] An issue causing the should copy data to pod VPN tunnel test-machinery integration test to fail is now fixed. by @ialidzhikov [#11804]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.115.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.115.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.115.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.115.2

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.115.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.115.2
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.115.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.115.2
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.115.2
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.115.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.115.2
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.115.2

`v1.115.1`

Compare Source

[gardener/gardener]

🏃 Others

[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.12.0 to v1.12.1. by @gardener-ci-robot [#11739]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.11.4 to v1.11.5. by @gardener-ci-robot [#11737]
[DEPENDENCY] The following dependencies have been updated:
- gardener/machine-controller-manager from v0.57.0 to v0.57.1. Release Notes
- github.com/gardener/machine-controller-manager from v0.57.0 to v0.57.1. by @gardener-ci-robot [#11725]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.115.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.115.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.115.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.115.1

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.115.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.115.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.115.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.115.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.115.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.115.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.115.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.115.1

`v1.115.0`

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

[OPERATOR] PodTopologySpreadConstraints webhook in the gardener-resource-manager is disabled for seeds unconditionally and for shoots which doesn't disable kubernetes feature gate MatchLabelKeysInPodTopologySpread explicitly. by @shafeeqes [#11497]
[OPERATOR] TokenInvalidator controller and webhook in the gardener-resource-manager are removed. by @shafeeqes [#11497]
[DEVELOPER] The github.com/gardener/gardener/pkg/utils/gardener.ReconcileTopologyAwareRoutingMetadata func in deperecated in favor of github.com/gardener/gardener/pkg/utils/gardener.ReconcileTopologyAwareRoutingSettings. by @ialidzhikov [#11178]

📰 Noteworthy

[OPERATOR] The ServiceTrafficDistribution feature is being used on to make Services topology-aware when the runtime Kubernetes version is 1.31+. by @ialidzhikov [#11178]
[DEVELOPER] fluent-operator APIs and CRDs are updated from v2 to v3 by @nickytd [#11673]
[USER] The updateStrategy of existing machine images in a CloudProfile can now be overridden in a NamespacedCloudProfile. by @LucaBernstein [#11550]

✨ New Features

[OPERATOR] The injectGardenKubeconfig field is defaulted to true for extensions responsible for Worker resources when registered via the operator.gardener.cloud/v1alpha1.Extension API. by @rfranzke [#11658]
[OPERATOR] You can use .spec.virtualCluster.gardener.gardenerAPIServer.goAwayChance in the Garden API to specify the probability for randomly closing a connection (GOAWAY) in order to prevent HTTP/2 clients from getting stuck on a single gardener-apiserver. by @rfranzke [#11551]
[USER] NamespacedCloudProfile.spec.limits.maxNodesTotal can be used to override the limit of the maximum number of nodes a shoot can have during runtime, as defined in the parent CloudProfile. See the documentation for more details. by @LucaBernstein [#11647]
[USER] If the Gardener operator has defined a control plane wildcard certificate, the .status.advertisedAddresses of the Shoot contain an entry with an endpoint secured by this certificate. Note that this endpoint is specific to the seed cluster the Shoot is scheduled to. Read all about it in this document. by @rfranzke [#11612]
[USER] The feature gate NewVPN has been graduated to Beta and is now enabled by default. by @ScheererJ [#11693]

🐛 Bug Fixes

[USER] A bug causing race condition in the kube-proxy pod related to concurrent modifications of iptables rules was fixed. by @AleksandarSavchev [#11668]
[USER] Fix authentication panel in API server Plutono dashboard for Shoot clusters by @chrkl [#11667]

🏃 Others

[DEPENDENCY] The following dependencies have been updated:
- quay.io/kiwigrid/k8s-sidecar from 1.30.1 to 1.30.2. by @gardener-ci-robot [#11628]
[DEPENDENCY] The following dependencies have been updated:
- gardener/machine-controller-manager from v0.56.1 to v0.57.0. Release Notes
- github.com/gardener/machine-controller-manager from v0.56.1 to v0.57.0. by @gardener-ci-robot [#11620]
[DEPENDENCY] The following dependencies have been updated:
- credativ/vali from v2.2.21 to v2.2.22. Release Notes by @gardener-ci-robot [#11664]
[DEPENDENCY] The following dependencies have been updated:
- gardener/gardener-metrics-exporter from 0.36.0 to 0.37.0. Release Notes by @gardener-ci-robot [#11677]
[DEPENDENCY] The following dependencies have been updated:
- credativ/plutono from v7.5.36 to v7.5.37. Release Notes by @gardener-ci-robot [#11663]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/prometheus/alertmanager from v0.28.0 to v0.28.1. by @gardener-ci-robot [#11625]
[OPERATOR] Added field OCIRepository.PullSecretRef for pulling helm charts from repositories with access restrictions. by @MartinWeindel [#11324]
[OPERATOR] The ports used by provider-local can now be specified via helm values. by @ScheererJ [#11700]
[OPERATOR] CreateShoot testdefinition exposes minAllowed options for control plane by @hendrikKahl [#11637]
[OPERATOR] The gardener-node-agent is now able to deal with the new version v3 of containerd's configuration file /etc/containerd/config.toml. As this new version of the configuration file comes with a new structure of certain configuration options, gardener-node-agent must be able to write configuration changes to different locations within the file based on its version. If it detects this config file to be version 3, it will write all relevant configuration changes to the new config keys. In addition, for any plugins inserted through an OSC PluginConfiguration, it will check if its path matches a typical v2 compliant path prefix and will translate it to the equivalent v3 compliant path prefix. by @MrBatschner [#11623]
[OPERATOR] Upgrade Prometheus to v3.2 by @vicwicker [#11552]
[OPERATOR] Garden and Seed cluster component containers, which do not require privilege escalations, now forbid privilege escalation explicitly. by @georgibaltiev [#11519]
[OPERATOR] The gardener/autoscaler image has been updated to v1.31.0. Release Notes by @aaronfern [#11646]
[OPERATOR] Enable the VerticalPodAutoscalerCappedRecommendation alerts by @vicwicker [#11622]
[OPERATOR] gardener-apiserver is now deployed with a fixed number of replicas (HA configuration: 3, non-HA configuration: 2). It does not use HPA anymore. by @oliver-goetz [#11684]
[OPERATOR] gardener-operator rejects deletion requests for Extensions deemed required for the landscape. by @timuthy [#11606]
[DEVELOPER] The ObjectNames() function of github.com/gardener/gardener/test/utils/matchers can be used to modify object.Object lists to a []string with their name. This is useful in tests to avoid using gstruct matchers that bloat the test output. by @tobschli [#11616]
[DEVELOPER] The component checklist now recommends setting revisionHistoryLimit=2 for DaemonSets as well. by @rfranzke [#11659]
[DEVELOPER] Allow to configure bootstrapping control plane nodes with controller installations by setting hostNetwork, replicas, tolerations and usable ports. by @ScheererJ [#11527]
[DEVELOPER] An issue causing the VPN tunnel test-machinery integration test to fail is now fixed. by @ialidzhikov [#11716]

📖 Documentation

[USER] Add documentation on how to federate metrics from the shoot Prometheus into an external Prometheus instance by @vicwicker [#11609]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.115.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.115.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.115.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.115.0

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.115.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.115.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.115.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.115.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.115.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.115.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.115.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.115.0

`v1.114.3`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[OPERATOR] When IstioTLSTermination feature gate is enabled the apiserver-proxy related EnvoyFilter is not deployed for the virtual-garden anymore. by @oliver-goetz [#11894]
[USER] An issue causing the cloudprovider Secret to contain both static credentials and workload identity config, which are mutually exclusive, when migrating to workload identity is now fixed. by @dimityrmirchev [#11849]

🏃 Others

[OPERATOR] Shoots that are currently in deletion now get ignored by the RemoveAPIServerProxyLegacyPort feature gate validation. by @Wieneo [#11889]
[OPERATOR] Deploy MCM with higher concurrent-syncs, kube-api-qps and kube-api-burst. by @hendrikKahl [#11884]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.114.3
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.114.3
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.114.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.114.3

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.114.3
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.114.3
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.114.3
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.114.3
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.114.3
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.114.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.114.3
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.114.3

`v1.114.2`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[OPERATOR] The step which deploys the source BackupEntry during the restore phase of control plane migration now depends on the successful deployment of the Shoot's control plane namespace. This fixes a potential race condition which could cause the source-etcd-backup Secret to not be deployed in the Shoot's control plane namespace and the subsequent step which copies etcd backups to time out. by @plkokanov [#11813]

🏃 Others

[DEVELOPER] An issue causing the should copy data to pod VPN tunnel test-machinery integration test to fail is now fixed. by @ialidzhikov [#11805]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/kiwigrid/k8s-sidecar from 1.30.1 to 1.30.2. by @gardener-ci-robot [#11752]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.12.0 to v1.12.1. by @gardener-ci-robot [#11740]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.11.4 to v1.11.5. by @gardener-ci-robot [#11738]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.114.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.114.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.114.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.114.2

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.114.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.114.2
controller-manager: `europe-docker.pkg.dev/gardener-project/releas

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-03-21T11:37:50Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: module github.com/gardener/[email protected] requires go >= 1.24.0; switching to go1.24.2
go: downloading go1.24.2 (linux/amd64)
go: download go1.24.2: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off

timebertt · 2025-04-16T12:53:15Z

This PR is blocked by #112, as we need to update the go version first.

renovate · 2025-04-17T11:56:37Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Wieneo

LGTM

renovate bot added the dependencies Upgrade dependencies and tools label Jun 24, 2024

renovate bot force-pushed the renovate/k8s-go branch 29 times, most recently from 80e5f4e to 6632cbb Compare July 1, 2024 04:59

renovate bot force-pushed the renovate/k8s-go branch from 9752aae to 0add2af Compare February 24, 2025 09:52

renovate bot force-pushed the renovate/k8s-go branch 3 times, most recently from 0cf69dc to 4591193 Compare March 12, 2025 09:52

renovate bot force-pushed the renovate/k8s-go branch 2 times, most recently from 9dbd775 to fe2131e Compare March 21, 2025 11:37

renovate bot force-pushed the renovate/k8s-go branch 3 times, most recently from ad849b3 to 1ec851a Compare March 26, 2025 14:39

renovate bot force-pushed the renovate/k8s-go branch 2 times, most recently from c0cf111 to 140f16c Compare April 10, 2025 18:56

renovate bot force-pushed the renovate/k8s-go branch from 140f16c to 01d40ad Compare April 15, 2025 14:29

timebertt self-assigned this Apr 16, 2025

renovate bot force-pushed the renovate/k8s-go branch from 01d40ad to a4f0d39 Compare April 16, 2025 16:43

renovate bot and others added 3 commits April 17, 2025 13:44

Update k8s packages

ef4ef4d

make tidy

534d78e

Switch to ExtensionClasses

5d83666

timebertt force-pushed the renovate/k8s-go branch from a4f0d39 to 5d83666 Compare April 17, 2025 11:56

timebertt requested a review from Wieneo as a code owner April 17, 2025 11:56

timebertt enabled auto-merge (squash) April 17, 2025 11:56

Wieneo previously approved these changes Apr 17, 2025

View reviewed changes

Upgrade to golangci-lint v2

6402b79

timebertt dismissed Wieneo’s stale review via 6402b79 April 17, 2025 12:20

Wieneo approved these changes Apr 17, 2025

View reviewed changes

timebertt merged commit ccdb418 into main Apr 17, 2025
1 check passed

timebertt deleted the renovate/k8s-go branch April 17, 2025 12:29

timebertt mentioned this pull request Apr 17, 2025

Activate more linters #127

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update k8s packages (minor) #65

Update k8s packages (minor) #65

Uh oh!

renovate bot commented Jun 24, 2024 •

edited

Loading

Uh oh!

renovate bot commented Mar 21, 2025 •

edited

Loading

Uh oh!

timebertt commented Apr 16, 2025

Uh oh!

renovate bot commented Apr 17, 2025

Uh oh!

Wieneo left a comment

Uh oh!

Uh oh!

Uh oh!

Update k8s packages (minor) #65

Update k8s packages (minor) #65

Uh oh!

Conversation

renovate bot commented Jun 24, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

[gardener/gardener]

⚠️ Breaking Changes

✨ New Features

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

Helm Charts

Docker Images

[gardener/gardener]

⚠️ Breaking Changes

📰 Noteworthy

✨ New Features

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

⚠️ Breaking Changes

📰 Noteworthy

✨ New Features

🐛 Bug Fixes

🏃 Others

📖 Documentation

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

Configuration

Uh oh!

renovate bot commented Mar 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

timebertt commented Apr 16, 2025

Uh oh!

renovate bot commented Apr 17, 2025

Edited/Blocked Notification

Uh oh!

Wieneo left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

renovate bot commented Jun 24, 2024 •

edited

Loading

renovate bot commented Mar 21, 2025 •

edited

Loading