fix(deps): update module github.com/gardener/gardener to v1.132.1 #658
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
Author
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
gardener-prow
bot
added
cla: yes
gardener-ci-robot
changed the title
gardener-ci-robot
deleted the
renovate/github.com-gardener-gardener-1.x
branch
gardener-ci-robot
changed the title
gardener-ci-robot
force-pushed
the
renovate/github.com-gardener-gardener-1.x
branch
2 times, most recently
from
525ae43 to
4a66e42
Compare
gardener-ci-robot
changed the title
gardener-ci-robot
changed the title
gardener-ci-robot
force-pushed
the
renovate/github.com-gardener-gardener-1.x
branch
2 times, most recently
from
4a66e42 to
46f56bf
Compare
gardener-ci-robot
changed the title
gardener-ci-robot
changed the title
gardener-ci-robot
force-pushed
the
renovate/github.com-gardener-gardener-1.x
branch
2 times, most recently
from
46f56bf to
51fc686
Compare
gardener-ci-robot
changed the title
gardener-ci-robot
force-pushed
the
renovate/github.com-gardener-gardener-1.x
branch
from
51fc686 to
9b56409
Compare
gardener-ci-robot
changed the title
gardener-ci-robot
changed the title
gardener-ci-robot
force-pushed
the
renovate/github.com-gardener-gardener-1.x
branch
2 times, most recently
from
9b56409 to
4203b6c
Compare
gardener-ci-robot
changed the title
gardener-ci-robot
changed the title
gardener-ci-robot
force-pushed
the
renovate/github.com-gardener-gardener-1.x
branch
2 times, most recently
from
4203b6c to
11f8759
Compare
gardener-ci-robot
changed the title
gardener-ci-robot
changed the title
gardener-ci-robot
force-pushed
the
renovate/github.com-gardener-gardener-1.x
branch
from
11f8759 to
d424574
Compare
|
@gardener-ci-robot: The following tests failed, say
Full PR test history. Your PR dashboard. Command help for this repository. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.131.0->v1.132.1Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.132.1Compare Source
[github.com/gardener/gardener:v1.132.1]
🐛 Bug Fixes
[OPERATOR]A bug which made istio-ingressgateway forwarding requests via HTTP1.1 only to kube-apiserver whenIstioTLSTerminationfeature gate is active has been fixed. Exhausted connection limits between istio-ingressgateway and kube-apiserver could be a consequence of this bug. by @oliver-goetz [#13467]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.132.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.132.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.132.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.132.1Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.132.1europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.132.1v1.132.0Compare Source
[github.com/gardener/gardener:v1.132.0]
[DEPENDENCY]The.gardener.autonomousShootClusteris no longer part of the Helm values when extension charts are rendered. The field has been renamed togardener.selfHostedShootCluster. In addition, the previous flag--autonomous-shoot-clusterhas been renamed to--self-hosted-shoot-cluster. Extension developers should adapt their Helm charts. by @rfranzke [#13273][DEVELOPER]"Autonomous Shoot Clusters" have been renamed to "Self-Hosted Shoot Clusters". The "medium-touch" scenario has been renamed to "managed infrastructure" scenario. The "high-touch" scenario has been renamed to "unmanaged infrastructure" scenario. by @rfranzke [#13273][DEVELOPER]Thegithub.com/gardener/gardener/pkg/controllerutils.GetMainReconciliationContextfunction is removed. Instead, use theReconciliationTimeoutfield of thesigs.k8s.io/controller-runtime/pkg/controller.Optionstype when registering the controller to the controller manager. by @ScheererJ [#13238]📰 Noteworthy
[DEVELOPER]A new document has been added describing the development tasks for removing support for a Kubernetes version. See Removing Support For a Kubernetes Version. by @RadaBDimitrova [#12859]✨ New Features
[OPERATOR]It is now possible to restrict the total count of objects for non-namespaced resources. You can set it through the admission controller configuration'sserver.resourceAdmissionConfiguration.limits[].countfield. by @tobschli [#12916][OPERATOR]Gardener can now support clusters with Kubernetes version 1.34. To allow creation/update of 1.34 clusters you will have to update the version of your provider extension(s) to a version that supports 1.34 as well. Please consult the respective releases and notes in the provider extension's repository. by @tobschli [#12883][USER]gardener-node-agentnow labels worker nodes in shoot clusters with thenode-role.kubernetes.io/worker=""label. by @rfranzke [#13387][USER]Individual worker pools can now be scheduled for manual rollout using a new annotation on the shoot:gardener.cloud/operation=rollout-workers=<pool1>,<pool2>,...,<poolN>. by @rrhubenov [#12829][OPERATOR]Operators can setSeed.spec.settings.loadBalancerServices.class(docs) and/orGardenletConfiguration.exposureClassHandlers[].loadBalancerService.class(docs) to specify a non-defaultloadBalancerClassfor the corresponding istio-ingressgateway services on seeds. by @timebertt [#13305][DEVELOPER]Gardener can now support clusters with Kubernetes version 1.34. Extension developers have to prepare individual extensions as well to work with 1.34. by @tobschli [#12883][DEVELOPER]Gardener container images now can be built for multiple platforms locally via the variableTARGET_PLATFORMS, e.g.make docker-images TARGET_PLATFORMS=linux/amd64,linux/arm64. If the variable is unset, the container images are built for the platformlinux/<host-arch>only. by @vpnachev [#13324]🐛 Bug Fixes
[OPERATOR]UnauthenticatedHTTP2DOSMitigationfeature gate is now always disabled for kube-apiservers whereIstioTLSTermination(aka L7 load-balancing) is activated. This prevents unwanted side-effects when unauthenticated requests are sent. HTTP/2 "Rapid Reset" DoS Vulnerability is mitigated by Envoy in this case. by @oliver-goetz [#13405][DEVELOPER]Fixmake kind-upcommand to work correctly with Docker>=v29.0.0. by @oliver-goetz [#13410][OPERATOR]Gardenlet's backupbucket and backupentry controllers are now unsetting all unknown labels and annotations on the extension secrets in the seed cluster, this fixes a bug that occurs after migration fromWorkloadIdentitytoSecretcredentials the workload identity annotations and labels were kept in the secrets causing other controllers to keep trying to use the WorkloadIdentity credentials. by @vpnachev [#13282][OPERATOR]Gardener no longer deploys thenode-exporterServiceMonitor in thekube-systemnamespace on unmanagedSeeds. by @rickardsjp [#13382][USER]The feature for supporting custom server blocks in node-local-dns is now reverted. by @Kostov6 [#13344][USER]An issue with the configuration for theOpenTelemetryCollectoron the nodes that leads to missing kernel logs inValiis now fixed. by @rrhubenov [#13328][OPERATOR]The Istio Gateway dashboard now correctly displays the total resource usage across pod restarts. by @rickardsjp [#13402][DEVELOPER]Backupentry generic actuator is fixed to clean all unknown annotations and labels from theetcd-backupsecret, this change fixes issues when the credentials are switched between static secret and workload identity. by @vpnachev [#13282]🏃 Others
[OPERATOR]gardener-resource-managernow useskubernetes.io/metadata.namelabel instead ofgardener.cloud/purposein its webhook namespace selectors. Thekubernetes.io/metadata.nameis added to all namespaces automatically by Kubernetes. by @shafeeqes [#13398][DEPENDENCY]Updated dependencycontainerdtov2.1.4(release notes). by @gardener-ci-robot [#13311][OPERATOR]Removed obsolete validation forshootDefaultsnetwork disjointedness withSeedNetworks. by @domdom82 [#13349][OPERATOR]The gardener-operator now does not wait forverticalpodautoscalercheckpoints.autoscaling.k8s.ioto be present when theGardens.spec.runtimeCluster.settings.verticalPodAutoscaler.enabledis false. This allows externally managed VPAs, that do not use the vpa checkpoint api, to be used with the gardener-operator. by @tobschli [#13314][OPERATOR]WhenIstioTLSTerminationis activememoryofistio-ingressgatewaysis now scaled by VPA instead of HPA. VPA usesupdateMode: Initialthat it does not evict pods but only sets reasonable memory requests when new pods are created. by @oliver-goetz [#13370][USER]The Shoot.spec.kubernetes.kubeAPIServer.serviceAccountConfig.{issuer,acceptedIssuers}fields are now validated against the OpenID Discovery 1.0 specification. by @acumino [#13325][OPERATOR]Logging stack has been upgraded to fluent-bit v4.1.1 and logging plugin v0.68.0. by @nickytd [#13358][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.1.1to2.1.2. by @gardener-ci-robot [#13384][OPERATOR]fluent-bitnow supports IPv6 as well. by @damyan [#12003][OPERATOR]Readiness probe was added to vpn-shoot tunnel-controller to improve VPN availability during shoot reconciliation. by @domdom82 [#13366][OPERATOR]gardener-admission-controller VerticalPodAutoscaler name is changed fromgardener-admission-controllertogardener-admission-controller-vpato fix an issue with duplicate VPA resources for the gardener-admission-controller Deployment. The VPA resource name with the deprecated controlplane chart wasgardener-controller-manager-vpa. Previously, switching to the gardener-operator created a VPA with namegardener-controller-managerthat targets the same Deployment. by @ialidzhikov [#13430][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/alertmanagerfromv0.28.1tov0.29.0. by @gardener-ci-robot [#13350][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.13.3tov1.13.4. by @gardener-ci-robot [#13318][DEPENDENCY]The following dependencies have been updated:gardener/vpn2from0.43.0to0.44.0. Release Notes by @gardener-ci-robot [#13339][OPERATOR]The following dependencies are updated:k8s.io/*:v0.33.5->v0.34.1sigs.k8s.io/controller-runtime:v0.21.0->v0.22.3sigs.k8s.io/controller-tools:v0.18.0->v0.19.0by @ScheererJ [#13238][OPERATOR]Defaulting of the Shoot Kubernetes versions (.spec.kubernetes.versionand.spec.provider.workers[].kubernetes.version) is moved from theShootValidatorto theShootMutatoradmission plugin. by @ialidzhikov [#13252][OPERATOR]Add system load average (1min avg) panel to the Node Details dashboard by @IndritFejza [#13280][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/node-exporterfromv1.9.1tov1.10.2. by @gardener-ci-robot [#13266][DEPENDENCY]The following dependencies have been updated:gardener/gardener-metrics-exporterfrom0.40.0to0.41.0. Release Notes by @gardener-ci-robot [#13291][DEPENDENCY]The following dependencies have been updated:fluent/fluent-operatorfromv3.3.0tov3.5.0(Release Notes). by @gardener-ci-robot [#13292][USER]It is possible now to create IPv6 workerless shoots without specifying a service range. by @axel7born [#13224][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom1.30.9to2.0.3. by @gardener-ci-robot [#13288][OPERATOR]Shoot api now supports configuring additional CA Flags for node group backoff namelyinitialNodeGroupBackoffDuration,maxNodeGroupBackoffDurationandnodeGroupBackoffResetTimeout. by @ashwani2k [#13403][OPERATOR]Defaulting of the Shoot networks is moved from theShootValidatorto theShootMutatoradmission plugin. by @ialidzhikov [#13207][OPERATOR]Support custom server blocks in node-local-dns. by @DockToFuture [#13375][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.0.3to2.1.1. by @gardener-ci-robot [#13374][OPERATOR]maxEmptyBulkDeleteis explicitly set to nil, since it can no longer be set for Kubernetes versions >= v1.33. by @RadaBDimitrova [#13054][OPERATOR]Migration from dual-stack [IPv4, IPv6] to [IPv4] networking is now allowed. by @axel7born [#12967][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.13.4tov1.14.0. by @gardener-ci-robot [#13319][OPERATOR]Increase client-side rate limits for kube-controller-manager to--kube-api-qps=100and--kube-api-burst=200by @voelzmo [#13251][OPERATOR]Additional input validations for the SecurityBinding and CredentialsBinding resources are now implemented. by @georgibaltiev [#13258][OPERATOR]NamespacedCloudprofilesare now compatible with parentCloudProfilesthat useMachineCapabilities. Read more about capabilities in GEP-33. by @Roncossek [#13138]📖 Documentation
[OPERATOR]Add disaster recovery guide for the garden cluster by @hendrikKahl [#13239]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.132.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.132.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.132.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.132.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.132.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.132.0v1.131.4Compare Source
[github.com/gardener/gardener:v1.131.4]
🐛 Bug Fixes
[OPERATOR]A bug which made istio-ingressgateway forwarding requests via HTTP1.1 only to kube-apiserver whenIstioTLSTerminationfeature gate is active has been fixed. Exhausted connection limits between istio-ingressgateway and kube-apiserver could be a consequence of this bug. by @oliver-goetz [#13466]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.131.4europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.131.4europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.131.4europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.131.4Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.131.4europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.131.4europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.131.4europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.131.4europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.131.4europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.131.4europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.131.4europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.131.4v1.131.3Compare Source
[github.com/gardener/gardener:v1.131.3]
🐛 Bug Fixes
[DEVELOPER]Fixmake kind-upcommand to work correctly with Docker>=v29.0.0. by @oliver-goetz [#13417][OPERATOR]UnauthenticatedHTTP2DOSMitigationfeature gate is now always disabled for kube-apiservers whereIstioTLSTermination(aka L7 load-balancing) is activated. This prevents unwanted side-effects when unauthenticated requests are sent. HTTP/2 "Rapid Reset" DoS Vulnerability is mitigated by Envoy in this case. by @oliver-goetz [#13425]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.131.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.131.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.131.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.131.3Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.131.3europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.131.3europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.131.3europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.131.3europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.131.3europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.131.3europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.131.3europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.131.3v1.131.2Compare Source
[github.com/gardener/gardener:v1.131.2]
🐛 Bug Fixes
[OPERATOR]Gardenlet's backupbucket and backupentry controllers are now unsetting all unknown labels and annotations on the extension secrets in the seed cluster, this fixes a bug that occurs after migration fromWorkloadIdentitytoSecretcredentials the workload identity annotations and labels were kept in the secrets causing other controllers to keep trying to use the WorkloadIdentity credentials. by @vpnachev [#13364][DEVELOPER]Backupentry generic actuator is fixed to clean all unknown annotations and labels from theetcd-backupsecret, this change fixes issues when the credentials are switched between static secret and workload identity. by @vpnachev [#13364]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.131.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.131.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.131.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.131.2Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.131.2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.131.2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.131.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.131.2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.131.2europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.131.2europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.131.2europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.131.2v1.131.1Compare Source
[github.com/gardener/gardener:v1.131.1]
🐛 Bug Fixes
[USER]The feature for supporting custom server blocks in node-local-dns is now reverted. by @Kostov6 [#13354][USER]An issue with the configuration for theOpenTelemetryCollectoron the nodes that leads to missing kernel logs inValiis now fixed. by @rrhubenov [#13330]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.131.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.131.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.131.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.131.1Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.131.1europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.131.1europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.131.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.131.1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.131.1europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.131.1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.131.1europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.131.1Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.