-
Notifications
You must be signed in to change notification settings - Fork 21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update dependencies (minor) #512
Merged
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
@gardener-ci-robot Thank you for your contribution. |
1f3950e
to
4561d4d
Compare
4561d4d
to
9160d54
Compare
9160d54
to
12effe0
Compare
12effe0
to
4c0de4b
Compare
4c0de4b
to
92f0bfe
Compare
92f0bfe
to
25c077c
Compare
25c077c
to
add94e5
Compare
5800fe3
to
4ff36ca
Compare
4ff36ca
to
2d70d3f
Compare
2d70d3f
to
a075ead
Compare
a075ead
to
79e763e
Compare
79e763e
to
6d22e2b
Compare
6d22e2b
to
f24270c
Compare
f24270c
to
8ae7c40
Compare
8ae7c40
to
e59a69d
Compare
petersutter
approved these changes
Feb 27, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
kind/enhancement
Enhancement, improvement, extension
needs/ok-to-test
Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD)
needs/review
Needs review
needs/second-opinion
Needs second review by someone else
size/l
Size of pull request is large (see gardener-robot robot/bots/size.py)
size/m
Size of pull request is medium (see gardener-robot robot/bots/size.py)
status/closed
Issue is closed (either delivered or triaged)
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.110.5
->v1.113.0
v1.44.1
->v1.46.0
v0.55.1
->v0.56.1
v1.8.1
->v1.9.1
v0.32.0
->v0.35.0
Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.113.0
Compare Source
[gardener/gardener]
[OPERATOR]
There is an incompatible change in theGarden
(gardens.operator.gardener.cloud
) custom resource: Fields.spec.runtimeCluster.networking.{nodes,pods,services}
and.spec.virtualCluster.networking.services
were changed from typestring
to type[]string
, e.g., in JSON format, replace"nodes": "10.0.0.0/16"
with"nodes": ["10.0.0.0/16"]
. by @ScheererJ [#11251]📰 Noteworthy
[OPERATOR]
Incoming reverse VPN connections no longer get authenticated by the reversed-vpn-auth-server as the authentication logic was moved to envoy itself. by @Wieneo [#11328][OPERATOR]
The apiserver-proxy component does not use the proxy protocol anymore, see GEP-30. by @Wieneo [#11364][OPERATOR]
Theshoot.gardener.cloud/managed-seed-api-server
annotation is deprecated and will be removed in a future release. Instead, consider enabling high availability for the ManagedSeed's Shoot control plane. by @ialidzhikov [#11372][OPERATOR]
Added a new feature gate called "RemoveAPIServerProxyLegacyPort", which disables the unused proxy port (8443) on the istio-ingressgateway Services. Operators can choose to remove the legacy apiserver-proxy port as soon as all shoots have switched to the new apiserver-proxy configuration. They might want to do so if they activate the ACL extension, which is vulnerable to proxy protocol headers of untrusted clients on the apiserver-proxy port. by @Wieneo [#11380]✨ New Features
[USER]
gardener-operator
maintains information about Gardener API Server configuration in the world readableConfigMap
gardener-info
in thegardener-system-public
Namespace
, read here for more details about the content of theConfigMap
. by @vpnachev [#11238][OPERATOR]
Enhance thegardener-operator
to allow specification of more than a single network range for.spec.runtimeCluster.networking.nodes
,.spec.runtimeCluster.networking.pods
,.spec.runtimeCluster.networking.services
, and.spec.virtualCluster.networking.services
, which also allows dual-stack configurations. by @ScheererJ [#11251][OPERATOR]
Introducesshoot_operation_duration_seconds
metric to recordShoot
operationCreate
andDelete
. by @simcod [#10971][OPERATOR]
Gardener can now support clusters with Kubernetes version 1.32. To allow creation/update of 1.32 clusters you will have to update the version of your provider extension(s) to a version that supports 1.32 as well. Please consult the respective releases and notes in the provider extension's repository. by @marc1404 [#11197][OPERATOR]
CloudProfile.spec.limits.maxNodesTotal
can be used to limit the maximum number of nodes a shoot can have during runtime. See the documentation for more details. by @timebertt [#11279][DEVELOPER]
Gardener can now support clusters with Kubernetes version 1.32. Extension developers have to prepare individual extensions as well to work with 1.32. by @marc1404 [#11197]🐛 Bug Fixes
[OPERATOR]
A bug which prevented usage of labels withseed.gardener.cloud/
prefix onSeed
,ManagedSeed
,BackupEntry
, andShoot
resources has been fixed. by @rfranzke [#11485][OPERATOR]
A misleading error message appearing when an operator has wrongly configured OIDC config for the Gardener Dashboard in the Garden resource was fixed. by @dimityrmirchev [#11432][USER]
The ETCD encryption config now properly configures a 32-byte key. by @dimityrmirchev [#11150]🏃 Others
[DEPENDENCY]
The following dependencies have been updated:gardener/dependency-watchdog
fromv1.3.0
tov1.4.0
. Release Notesgithub.com/gardener/dependency-watchdog
fromv1.3.0
tov1.4.0
. by @gardener-ci-robot [#11423][DEPENDENCY]
The following dependencies have been updated:quay.io/brancz/kube-rbac-proxy
fromv0.18.2
tov0.19.0
. by @gardener-ci-robot [#11419][DEPENDENCY]
The following dependencies have been updated:credativ/plutono
fromv7.5.35
tov7.5.36
. Release Notes by @gardener-ci-robot [#11316][DEPENDENCY]
The following dependencies have been updated:gardener/alpine-conntrack
from3.21.1
to3.21.3
. Release Notes by @gardener-ci-robot [#11409][DEPENDENCY]
The following dependencies have been updated:gardener/apiserver-proxy
fromv0.18.0
tov0.19.0
. Release Notes by @gardener-ci-robot [#11330][DEPENDENCY]
The following dependencies have been updated:gcr.io/istio-release/pilot
from1.23.4
to1.23.5
.gcr.io/istio-release/proxyv2
from1.23.4
to1.23.5
. by @gardener-ci-robot [#11371][DEPENDENCY]
The following dependencies have been updated:gardener/vpn2
from0.34.0
to0.35.0
. Release Notes by @gardener-ci-robot [#11348][DEPENDENCY]
The following dependencies have been updated:gardener/vpn2
from0.35.0
to0.36.0
. Release Notes by @gardener-ci-robot [#11438][DEPENDENCY]
The following dependencies have been updated:credativ/vali
fromv2.2.20
tov2.2.21
. Release Notes by @gardener-ci-robot [#11313][DEVELOPER]
The following dependencies are updated:k8s.io/*
:v0.31.6
->v0.32.2
sigs.k8s.io/controller-runtime
:v0.19.6
->v0.20.2
sigs.k8s.io/controller-tools
:v0.16.5
->v0.17.2
by @LucaBernstein [#11418][DEVELOPER]
github.com/gardener/gardener/pkg/utils/managedresources.{WaitUntilHealthy,WaitUntilHealthyAndNotProgressing}
funcs now accept aclient.Reader
instead of aclient.Client
. by @ialidzhikov [#11321][DEVELOPER]
golang-test
images for Go 1.24 are built now. Those for Go 1.22 are not built anymore because it is out of maintenance. by @oliver-goetz [#11369][OPERATOR]
Remove wildcards*
from RBAC roles for thecluster-autoscaler
,machine-controller-manager
andprometheus-operator
components. by @AleksandarSavchev [#11314][OPERATOR]
Shoot system and Shoot control plane containers, which do not require privilege escalations, now forbid privilege escalation explicitly. There is an issue in Kubernetes about the privilege escalation configuration beingtrue
by default. by @georgibaltiev [#11241][OPERATOR]
Fix theshoot-annotated-seed-service-endpoints
scrape configuration by adding the address port by @vicwicker [#11413][OPERATOR]
Revisit theVerticalPodAutoscalerCappedRecommendation
alert to fix a race condition and other small improvements by @vicwicker [#11325][OPERATOR]
Remove CPU as controlled resource from VPA for alertmanager and vpn-authzserver.Remove CPU requests from alertmanager and vpn-authzserver. by @voelzmo [#11366]
[OPERATOR]
Thegardener-resource-manager
no longer syncs all resources every minute for virtual garden and shoot clusters. It already watches its desired resources anyways, i.e., it already reacts instantly, so there is no need to additionally apply them every minute. by @rfranzke [#11394]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.113.0
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.113.0
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.113.0
v1.112.3
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
A bug which prevented usage of labels withseed.gardener.cloud/
prefix onSeed
,ManagedSeed
,BackupEntry
, andShoot
resources has been fixed. by @rfranzke [#11486]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.112.3
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.112.3
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.112.3
v1.112.2
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
An issue was fixed that caused a downtime of Gardener API services up to1m
every time thevirtual-garden-kube-controller-manager
changed its leader. by @plkokanov [#11454][OPERATOR]
Fixed a bug that caused the Gardenlet to crash when deleting a hibernated shoot if the NodeAgentAuthorizer feature gate was enabled by @Wieneo [#11415]🏃 Others
[DEPENDENCY]
The following dependencies have been updated:gardener/machine-controller-manager
fromv0.56.0
tov0.56.1
. Release Notesgithub.com/gardener/machine-controller-manager
fromv0.56.0
tov0.56.1
. by @plkokanov [#11451]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.112.2
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.112.2
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.112.2
v1.112.1
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
SpecifyingSeed
labels inManagedSeed.spec.gardenlet.config.seedConfig.metadata.labels
is fixed. by @timebertt [#11368]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.112.1
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.112.1
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.112.1
v1.112.0
Compare Source
[gardener/gardener]
[DEPENDENCY]
TheGarden.spec.virtualCluster.gardener.gardenerControllerManager.defaultProjectQuotas[].config
type has been changed fromruntime.RawExtension
tocorev1.ResourceQuota
. by @timebertt [#11098][DEPENDENCY]
The temporary helper functionsgithub.com/gardener/gardener/pkg/client/kubernetes.{ConvertClientConnectionConfigurationToExternal,RESTConfigFromInternalClientConnectionConfiguration}
have been removed. Please use the external version ofk8s.io/component-base/config.ClientConnectionConfiguration
directly. by @timebertt [#11243][USER]
Users are no longer able to modify shoot CA bundle configmaps. Such system resources are considered sensitive to modification because the data stored in them cannot be trusted unless its authenticity is guaranteed. by @dimityrmirchev [#11224][DEVELOPER]
The following functions are moved from thegithub.com/gardener/gardener/pkg/client/kubernetes
package to thegithub.com/gardener/gardener/pkg/utils/kubernetes
package:[DEVELOPER]
The following var is removed from thegithub.com/gardener/gardener/pkg/client/kubernetes
package:📰 Noteworthy
[OPERATOR]
The newCredentialsRotationWithoutWorkersRollout
feature gate should only be enabled when all registered Gardener provider extensions vendor at leastgardener/[email protected]+
. by @rfranzke [#11027][OPERATOR]
TheClientConnectionConfiguration
andLeaderElectionConfiguration
in the component config APIs are now validated. by @timebertt [#11254]✨ New Features
[USER]
AllSeed
s are now automatically labeled withseed.gardener.cloud/<name>=true
where<name>
is their own name, and (if applicable) the name of their parent seed in case they are managed seeds. This label can be used as selector for requests. by @rfranzke [#11062][USER]
The feature gateUseNamespacedCloudProfile
has been graduated toBeta
and is now enabled by default. by @LucaBernstein [#11289][USER]
It is now possible to specify the the priority of worker groups with theShoot.spec.provider.workers[].priority
field. When at least one priority is specified, the CA will respect this configuration before other expanders.WARNING: When using this feature, Gardener will overwrite existing configurations that were made manual beforehand. by @tobschli [#11045]
[USER]
NewShoot
operation annotationsrotate-{ca,serviceaccount-key,credentials}-start-without-workers-rollout
are being introduced in order to start a credentials rotation without causing an immediately rolling update of all worker nodes. Such rolling updates can later be triggered by the end-user at a time of their convenience with therotate-rollout-workers=<pool1-name>[,<pool2-name>,...]
operation annotation. Read all about it here. by @rfranzke [#11027][OPERATOR]
Introducesshoot_operation_duration_seconds
metric to recordShoot
operationCreate
andDelete
. by @simcod [#10971][OPERATOR]
Add VPA parametersmemoryAggregationInterval
andmemoryAggregationIntervalCount
to the Shoot spec. by @voelzmo [#11215][DEVELOPER]
A wrapper function forOperatingSystemConfig
provisioning bash script has been implemented. Using the wrapper ensures that the script exits early in case it has been executed successfully before. by @oliver-goetz [#11208]🐛 Bug Fixes
[OPERATOR]
A bug preventing the deletion of Shoots that previously failed to create due to an erroneouskube-apiserver
has been fixed. by @shafeeqes [#11284][OPERATOR]
Fixed checkingetcd
cluster readiness when rolling out spec changes. On rare occasions this led to failing credential rotations. by @timuthy [#11231][OPERATOR]
A bug which leads to a gardenlet nil pointer exception when running shoot deletion or migration flow for shoots whereshoot.status.networking == nil
has been fixed. by @oliver-goetz [#11304][OPERATOR]
A bug which might lead to duplicate config entries fornode-agent-authorizer
webhook has been fixed. by @oliver-goetz [#11281]🏃 Others
[OPERATOR]
Local dual-stack setup for development now running with IPv6 as primary address family. by @ScheererJ [#11226][OPERATOR]
An issue has been fixed that caused thegarden
reconciliation to stop when structured authentication was used in combination with the gardener-dashboardoidcConfig
. by @timuthy [#11230][OPERATOR]
Rewrite Setup Gardener document by @hendrikKahl [#11260][OPERATOR]
Disable default node range in test machinery tests for IPv6-only tests. by @ScheererJ [#11221][OPERATOR]
Deploy runtime extension in own namespace. by @MartinWeindel [#11204][OPERATOR]
Allow theapiserver_admission_webhook_request_total
metric in the shoot Prometheus by @vicwicker [#11225][DEPENDENCY]
Thegardener/dashboard
image has been updated to1.79.1
. Release Notes by @gardener-ci-robot [#11256][DEPENDENCY]
The following dependencies have been updated:credativ/plutono
fromv7.5.35
tov7.5.36
. Release Notes by @gardener-ci-robot [#11316][DEPENDENCY]
Thegardener/machine-controller-manager
image has been updated tov0.56.0
. Release Notes by @gardener-ci-robot [#11278][DEPENDENCY]
Thequay.io/kiwigrid/k8s-sidecar
image has been updated to1.30.0
. by @gardener-ci-robot [#11274][DEPENDENCY]
Thequay.io/kiwigrid/k8s-sidecar
image has been updated to1.29.1
. by @gardener-ci-robot [#11239][DEPENDENCY]
Theregistry.k8s.io/kube-state-metrics/kube-state-metrics
image has been updated tov2.15.0
. by @gardener-ci-robot [#11282][DEPENDENCY]
The following dependencies have been updated:credativ/vali
fromv2.2.20
tov2.2.21
. Release Notes by @gardener-ci-robot [#11313][DEPENDENCY]
Thegardener/autoscaler
image has been updated tov1.30.2
. Release Notes by @gardener-ci-robot [#11295][DEPENDENCY]
Thegardener/logging
image has been updated tov0.64.0
. Release Notes by @gardener-ci-robot [#11269][DEPENDENCY]
Theregistry.k8s.io/dns/k8s-dns-node-cache
image has been updated to1.25.0
. by @gardener-ci-robot [#11235][DEPENDENCY]
Thegardener/ingress-default-backend
image has been updated to0.22.0
. Release Notes by @gardener-ci-robot [#11265][DEPENDENCY]
Thegardener/gardener-metrics-exporter
image has been updated to0.34.0
. Release Notes by @gardener-ci-robot [#11300][DEVELOPER]
testing framework: The RootPodExecutor no longer requires output from command execution to interpret the command execution as successful. by @ialidzhikov [#11250]v1.111.3
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
Fixed a bug that caused the Gardenlet to crash when deleting a hibernated shoot if the NodeAgentAuthorizer feature gate was enabled by @Wieneo [#11424][OPERATOR]
A bug which prevented usage of labels withseed.gardener.cloud/
prefix onBackupEntry
, andShoot
resources has been fixed. by @plkokanov [#11492][OPERATOR]
An issue was fixed that caused a downtime of Gardener API services up to1m
every time thevirtual-garden-kube-controller-manager
changed its leader. by @plkokanov [#11453]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.111.3
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.111.3
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.111.3
v1.111.2
Compare Source
[gardener/gardener]
🐛 Bug Fixes
[OPERATOR]
A bug preventing the deletion of Shoots that previously failed to create due to an erroneouskube-apiserver
has been fixed. by @shafeeqes [#11296][OPERATOR]
A bug which leads to a gardenlet nil pointer exception when running shoot deletion or migration flow for shoots whereshoot.status.networking == nil
has been fixed. by @oliver-goetz [#11307][OPERATOR]
A bug which might lead to duplicate config entries fornode-agent-authorizer
webhook has been fixed. by @oliver-goetz [#11302]🏃 Others
[DEPENDENCY]
Thegardener/machine-controller-manager
image has been updated tov0.56.0
. Release Notes by @gardener-ci-robot [#11299][DEPENDENCY]
Thegardener/autoscaler
image has been updated tov1.30.2
. Release Notes by @gardener-ci-robot [#11298]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.111.2
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.111.2
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.111.2
v1.111.1
Compare Source
[gardener/gardener]
✨ New Features
[DEVELOPER]
A wrapper function forOperatingSystemConfig
provisioning bash script has been implemented. Using the wrapper ensures that the script exits early in case it has been executed successfully before. by @oliver-goetz [#11257]🏃 Others
[DEPENDENCY]
Thegardener/dashboard
image has been updated to1.79.1
. Release Notes by @gardener-ci-robot [#11262][OPERATOR]
An issue has been fixed that caused thegarden
reconciliation to stop when structured authentication was used in combination with the gardener-dashboardoidcConfig
. by @timuthy [#11233][DEVELOPER]
testing framework: The RootPodExecutor no longer requires output from command execution to interpret the command execution as successful. by @ialidzhikov [#11253]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.111.1
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.111.1
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.111.1
v1.111.0
Compare Source
[gardener/gardener]
[OPERATOR]
TheOperatorConfiguration
changed incompatibly:extensionRequired
was renamed toextensionRequiredRuntime
. by @timuthy [#11001][OPERATOR]
TheShootManagedIssuer
feature gate was removed. Enablement of the feature is now dependent on the existence of a secret in thegarden
namespace labeled withgardener.cloud/role: shoot-service-account-issuer
. by @dimityrmirchev [#11078][OPERATOR]
TheShootForceDeletion
feature gate has been graduated to GA and is locked totrue
. by @shafeeqes [#11107][OPERATOR]
This change applies to IPv4 clusters only.Gardener uses the CIDR range of 240.0.0.0/8 which is reserved as per IANA db to map the cluster ip of the kubernetes api-server in the seed to a different network range before exposing it to the shoot in the
kubernetes
service. This frees up address space in the shoot and removes potential clashes with shoot workload ips.Seed operators need to check if any of the following properties collide with the 240.0.0.0/8 range:
by @domdom82 [#10949]
[OPERATOR]
The wildcard TLS certificate for the runtime cluster must now be labelled withgardener.cloud/role=garden-cert
instead ofgardener.cloud/role=controlplane-cert
to avoid duplicate role assignments for runtime and seed certificate secrets if Gardener runtime and seed run on the same cluster.The old role name is deprecated for the runtime cluster. It will not be accepted anymore with the next Gardener release. by @MartinWeindel [#11113]
[DEPENDENCY]
Client-related functions have been adapted to use the external version ofk8s.io/component-base/config.ClientConnectionConfiguration
. If you need a helper function for transitioning to the external version, usepkg/client/kubernetes.ConvertClientConnectionConfigurationToExternal
. by @timebertt [#11052][DEPENDENCY]
The packagegithub.com/gardener/gardener/extensions/pkg/apis/config
has been dropped. Use the versioned variant of the package instead:github.com/gardener/gardener/extensions/pkg/apis/config/v1alpha1
. by @timebertt [#11056]📰 Noteworthy
[USER]
Expired versions from theNamespacedCloudProfile
are always dropped, except for already applied versions. by @LucaBernstein [#10910][OPERATOR]
Thevpa
field (ineffective sincev1.102
) has been removed from theManagedSeed
API. by @rfranzke [#11047][OPERATOR]
Now "vali" contains the managed control plane logs from the early stages of shoot reconcile. by @nickytd [#11082]✨ New Features
[OPERATOR]
Gardener-Operator handles generic Gardener extensions in the Garden-Runtime cluster (type:Extension
). Such extensions can be configured viaspec.extensions
in theGarden
resource. by @timuthy [#11192][OPERATOR]
gardener-node-agent
now persists its applied changes after each step when reconciling the OSC. This should avoid unnecessary work and systemd unit restarts. by @maboehm [#10969][OPERATOR]
Add vpa histogram decay half-life parameters to the Shoot spec. by @voelzmo [#10959][OPERATOR]
The Gardener Admission Controller now implements a handler that can prevent tampering with systemSecret
s andConfigMap
s if they are labeled withgardener.cloud/update-restriction=true
. by @dimityrmirchev [#11108][OPERATOR]
Add flow and flow task metrics for timing duration, delay and result count to gardenlet metrics. by @LucaBernstein [#10967][USER]
Gardener now allows to omit or to only partially define the machine image version inshoot.Spec.Provider.Workers[].Machine.Image.Version
. The version will automatically be defaulted to the latest minor/patch version found in the referencedCloudProfile
. by @LucaBernstein [#10954][DEVELOPER]
The extension library now supports adding watches viaWatchBuilder
for other resources in the generic extension controller. by @domdom82 [#11064][DEVELOPER]
Add option to register flow metrics on monitoring registry. by @LucaBernstein [#10967][DEVELOPER]
A local setup for trying out, developing, and testing the autonomous shoot cluster functionality ofgardenadm
has been introduced. You can find the documentation here. by @rfranzke [#10977]🐛 Bug Fixes
[OPERATOR]
Gardener can now delete and migrate shoots that use dynamic node network allocation, even if the infrastructure creation has never been successfully completed. by @timebertt [#11038][OPERATOR]
An issue was fixed ingardener-operator
that prevented configuring OIDC forgardener-dashboard
while using Structured Authentication. by @timuthy [#11080][OPERATOR]
gardener-node-agent
does not restartcontainerd.service
on every OSC reconciliation anymore. by @oliver-goetz [#11120][USER]
Fix theNamespacedCloudProfile
status mutation. by @LucaBernstein [#11036][DEVELOPER]
Avoid callingGetCluster
for non-shoot namespaces inshootNotFailedPredicate
anddnsrecord
controller. by @MartinWeindel [#11123][DEVELOPER]
gardener-node-agent
deletes unit files and drop-ins only if it created them previously. by @oliver-goetz [#11015]🏃 Others
[USER]
Custom machine images and machine types inNamespacedCloudProfile
are not interfered by later added conflicting entries in the parentCloudProfile
. by @LucaBernstein [#11093][DEPENDENCY]
Thequay.io/kiwigrid/k8s-sidecar
image has been updated to1.29.0
. by @gardener-ci-robot [#11138][DEPENDENCY]
Thegardener/etcd-druid
image has been updated tov0.26.1
. Release Notes by @gardener-ci-robot [#11202][DEPENDENCY]
Thegcr.io/istio-release/pilot
image has been updated to1.23.4
. by @gardener-ci-robot [#11071][DEPENDENCY]
Theenvoyproxy/envoy
image has been updated tov1.33.0
. Release Notes by @gardener-ci-robot [#11167][DEPENDENCY]
Theregistry.k8s.io/ingress-nginx/controller-chroot
image has been updated tov1.12.0
. by @gardener-ci-robot [#11087][DEPENDENCY]
Thequay.io/kiwigrid/k8s-sidecar
image has been updated to1.28.4
. by @gardener-ci-robot [#11053][DEPENDENCY]
Thegardener/logging
image has been updated tov0.63.0
. Release Notes by @gardener-ci-robot [#11195][DEPENDENCY]
Theregistry.k8s.io/dns/k8s-dns-node-cache
image has been updated to1.24.0
. by @gardener-ci-robot [#11032][DEPENDENCY]
Thegardener/alpine-conntrack
image has been updated to3.21.0
. Release Notes by @gardener-ci-robot [#11023][DEPENDENCY]
Thegardener/dashboard
image has been updated to1.79.0
. Release Notes by @gardener-ci-robot [#11199][DEPENDENCY]
Thequay.io/prometheus/alertmanager
image has been updated tov0.28.0
. by @gardener-ci-robot [#11176][DEPENDENCY]
Theenvoyproxy/envoy
image has been updated tov1.32.3
. Release Notes by @gardener-ci-robot [#11068][DEPENDENCY]
Thegardener/ingress-default-backend
image has been updated to0.21.0
. Release Notes by @gardener-ci-robot [#11046][DEPENDENCY]
Thegardener/terminal-controller-manager
image has been updated tov0.34.0
. Release Notes by @gardener-ci-robot [#11212][DEPENDENCY]
Thegardener/alpine-conntrack
image has been updated to3.21.1
. Release Notes by @gardener-ci-robot [#11151][DEVELOPER]
Fix malformed file path error ongo get github.com/gardener/gardener@master
by @MartinWeindel [#11145][DEVELOPER]
drop unused codepath from component_descriptor creation script. by @ccwienk [#11124][DEVELOPER]
The images of the registry caches used in the extensions local setup are now updated to distribution/[email protected] rc.2. by @ialidzhikov [#11079][OPERATOR]
Add additional context to shoot admission DNS errors so that it is more obvious what should be changed. by @ScheererJ [#11022][OPERATOR]
Allow specifying the IP families for the shoot creation tests. by @ScheererJ [#11135][OPERATOR]
Switchvpa-recommender
back to the image built from the vertical-pod-autoscaler upstream repo . by @plkokanov [#11122][OPERATOR]
Thegardener-dashboard
configuration was enhanced in thegarden
API with fieldsgardenerDashboard.oidcConfig.clientIDPublic
andgardenerDashboard.oidcConfig.issuerURL
.Those are required to switch from the deprecated
kubeAPIServer.oidcConfig
tokubeAPIServer.structuredAuthentication
. by @timuthy [#11080][OPERATOR]
gardener-operator
now maintains a new conditionRequiredVirtual
forExtension
resources. The new condition indicates whether the extension is related to requiredControllerInstallation
s in the virtual garden cluster. by @timuthy [#11001][OPERATOR]
Add alerts for capped VPA recommendations by @vicwicker [#11136][OPERATOR]
Retry failedCluster
resource sync after otherwise successfulShoot
reconciliation. by @LucaBernstein [#11144][OPERATOR]
gardener-operator
restarts itself when thegarden
resource is deleted. This is required to stop controllers gracefully that depend on the existence of a virtual garden cluster. by @timuthy [#11058]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.111.0
Docker Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.111.0
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.111.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.