Update module github.com/gardener/gardener to v1.110.1 #137

23t-machine-user · 2024-11-04T08:36:41Z

This PR contains the following updates:

Package	Type	Update	Change
github.com/gardener/gardener	require	minor	`v1.106.1` -> `v1.110.1`

Release Notes

gardener/gardener (github.com/gardener/gardener)

`v1.110.1`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[USER] Fix initial scheduling of Shoot with NamespacedCloudProfile reference. by @LucaBernstein [#11076]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.110.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.110.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.110.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.110.1

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.110.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.110.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.110.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.110.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.110.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.110.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.110.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.110.1

`v1.110.0`

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

[DEVELOPER] The autoscaling.k8s.io/v1alpha1.Hvpa and autoscaling.k8s.io/v1alpha1.HvpaList resources were removed from the pkg/client/kubernetes.SeedScheme and pkg/operator/client.RuntimeScheme by @plkokanov [#10921]
[DEVELOPER] Extension webhooks need to remove the provider type Predicates and add an ObjectSelector against the object's provider type label instead. by @LucaBernstein [#10896]

✨ New Features

[OPERATOR] Secrets for the TokenRequestor can be additionally annotated with serviceaccount.resources.gardener.cloud/inject-ca-bundle=true to get the current CA bundle injected as well by @maboehm [#10988]

🐛 Bug Fixes

[OPERATOR] seed-authorizer and structured authorization webhooks of shoot kube-apiservers no longer use the default TTL for AuthorizedTTL and UnauthorizedTTL. by @oliver-goetz [#10703]
[OPERATOR] An issue was fixed in gardener-operator that led to an inactive Gardenlet controller after a certain period. Thus, the operator needed a restart to react on Gardenlet resources. by @timuthy [#10663]
[OPERATOR] Fixes the bug where ManagedResource were still in progressing phase because of Completed pods by @ary1992 [#10961]

🏃 Others

[OPERATOR] Fixes the calculation of the maximum number of nodes for cluster autoscaling for dual-stack shoots. by @axel7born [#10994]
[OPERATOR] RBAC rules related to HVPA resources have been removed from gardenlet and gardener-operator - they are no longer necessary. by @plkokanov [#10921]
[OPERATOR] The resource-manager is no longer HVPA-aware. by @ialidzhikov [#10860]
[OPERATOR] [NewVPN] Enable IPv6 for non-HA if needed. by @MartinWeindel [#10997]
[OPERATOR] Custom CAs are updated on existing nodes too. by @oliver-goetz [#10923]
[OPERATOR] Set env variables for dual-stack in kube-apiserver. by @axel7born [#10970]
[DEPENDENCY] The gardener/machine-controller-manager image has been updated to v0.55.1. Release Notes by @gardener-ci-robot [#10956]
[DEPENDENCY] The quay.io/brancz/kube-rbac-proxy image has been updated to v0.18.2. by @gardener-ci-robot [#10953]
[DEPENDENCY] The credativ/vali image has been updated to v2.2.20. Release Notes by @gardener-ci-robot [#10993]
[DEPENDENCY] The credativ/plutono image has been updated to v7.5.35. Release Notes by @gardener-ci-robot [#10995]
[DEPENDENCY] The quay.io/kiwigrid/k8s-sidecar image has been updated to 1.28.1. by @gardener-ci-robot [#10981]
[DEPENDENCY] The gardener/apiserver-proxy image has been updated to v0.18.0. Release Notes by @gardener-ci-robot [#10933]
[DEPENDENCY] The registry.k8s.io/coredns/coredns image has been updated to v1.12.0. by @gardener-ci-robot [#10909]
[DEPENDENCY] The gardener/vpn2 image has been updated to 0.33.0. Release Notes by @gardener-ci-robot [#10996]
[DEPENDENCY] The envoyproxy/envoy image has been updated to v1.32.2. Release Notes by @gardener-ci-robot [#11000]
[DEPENDENCY] The gardener/gardener-metrics-exporter image has been updated to 0.31.0. Release Notes by @gardener-ci-robot [#10941]
[DEPENDENCY] The gardener/gardener-metrics-exporter image has been updated to 0.33.0. Release Notes by @gardener-ci-robot [#10952]
[DEPENDENCY] The gardener/ext-authz-server image has been updated to 0.11.0. Release Notes by @gardener-ci-robot [#10935]
[DEVELOPER] The HVPA CRD has been removed from the codebase and is no longer generated. by @plkokanov [#10921]

📖 Documentation

[OPERATOR] Improve shoot credential rotation documentation. by @marc1404 [#10998]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.110.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.110.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.110.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.110.0

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.110.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.110.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.110.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.110.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.110.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.110.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.110.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.110.0

`v1.109.0`

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

[OPERATOR] The HVPA autoscaling option (which is unconditionally disabled since v1.105.0) is removed from the etcd component. Before updating to this version of Gardener, make sure that you upgraded to v1.106.0 and all Seed and Garden resources reconciled with that version. This is required to ensure that the HVPA component and its CRD were properly cleaned up. by @plkokanov [#10800]
[OPERATOR] The Baseline and HVPA autoscaling modes (which are unconditionally disabled since v1.105.0) are removed for {gardener,kube}-apiserver. Before updating to this version of Gardener, make sure that you upgraded to v1.106.0 and all Seed and Garden resources reconciled with that version. This is required to ensure that the HVPA component and its CRD were properly cleaned up. by @plkokanov [#10796]
[OPERATOR] The deprecated and unconditionally disabled HVPA and HVPAForShootedSeed feature gates are removed. The GA-ed and unconditionally enabled VPAForETCD and VPAAndHPAForAPIServer features gates are removed. If you have references to the feature gates, clean them up before upgrading to this version of Gardener. by @ialidzhikov [#10853]
[DEVELOPER] Rename the controlplane exposure webhook (ExposureWebhookName) to seed provider webhook (SeedProviderWebhookName). by @LucaBernstein [#10788]

📰 Noteworthy

[OPERATOR] The gardener-scheduler was improved to consider reconciliation backoffs. In the past, unassigned shoots were affected by frequent scheduler reconciliations and status updates which potentially strained the scheduler and etcd. by @timuthy [#10821]
[DEVELOPER] extension library: Provider extensions should rename control plane exposure webhook related packages to seed provider to reflect the naming change on their side (for example rename pkg/webhook/controlplaneexposure to pkg/webhook/seedprovider). by @LucaBernstein [#10788]

✨ New Features

[OPERATOR] NodeAgentAuthorizer feature gate was introduced. It allows a webhook based authorization of gardener-node-agents with reduced permissions.
❗ This feature gate requires changes in machine-controller-manager-provider-*. Please check that you run a supported version before activating it. ❗ by @oliver-goetz [#10781]
[USER] Allow dual-stack shoots creation. by @axel7born [#10803]
[USER] shoot spec.kubernetes.clusterAutoscaler: Add support for startupTaints and statusTaints by @dhague [#10858]

🐛 Bug Fixes

[USER] Fixed a bug where SSH key rotations for Shoots did not properly update the authorized keys on the worker nodes (hence, the new key was unusable until a node restart or rollout). by @tobschli [#10671]
[USER] On Shoot deletion, Gardener now properly skips certain validation checks that are only relevant for creations or updates of Shoot resources. by @rfranzke [#10902]
[OPERATOR] Fixed an error in BackupBucket reconciliation by replacing StrategicMergePatch with MergePatch to properly handle runtime.RawExtension fields. by @seshachalam-yv [#10904]

🏃 Others

[OPERATOR] update alpine to get latest security fixes by @DockToFuture [#10922]
[OPERATOR] Add support for node-local-dns in dual-stack cluster. by @axel7born [#10891]
[OPERATOR] Add dual stack support for VPN. by @DockToFuture [#10767]
[OPERATOR] Fix kubelet CSRs to allow IPv6 addresses to be used by @kron4eg [#10876]
[OPERATOR] Add dashboard for VPA admission-controller by @voelzmo [#10741]
[OPERATOR] The HVPA component is removed. Before updating to this version of Gardener, make sure that you upgraded to v1.106.0 and all Seed and Garden resources reconciled with that version. This is required to ensure that the HVPA component and its CRD were properly cleaned up. by @ialidzhikov [#10851]
[OPERATOR] Added validation for issuerURL in the OIDC configuration to reject URLs containing fragments. by @acumino [#10888]
[OPERATOR] The gardener/dependency-watchdog image has been updated to v1.3.0. Release Notes by @rishabh-11 [#10930]
[OPERATOR] Adapt configure-admission.sh for new extension releases with changed value names for Helm charts. by @MartinWeindel [#10877]
[DEPENDENCY] The registry.k8s.io/cpa/cluster-proportional-autoscaler image has been updated to v1.9.0. by @gardener-ci-robot [#10898]
[DEPENDENCY] The gardener/autoscaler image has been updated to v1.30.1. Release Notes by @gardener-ci-robot [#10914]
[DEPENDENCY] The gardener/vpn2 image has been updated to 0.30.0. Release Notes by @gardener-ci-robot [#10872]
[DEPENDENCY] The registry.k8s.io/coredns/coredns image has been updated to v1.11.4. by @gardener-ci-robot [#10856]
[DEPENDENCY] The gardener/gardener-discovery-server image has been updated to v0.3.0. Release Notes by @gardener-ci-robot [#10849]
[DEPENDENCY] The gardener/etcd-druid image has been updated to v0.25.0. Release Notes by @gardener-ci-robot [#10932]
[DEPENDENCY] The gardener/machine-controller-manager image has been updated to v0.55.0. Release Notes by @rishabh-11 [#10908]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.109.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.109.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.109.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.109.0

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.109.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.109.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.109.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.109.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.109.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.109.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.109.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.109.0

`v1.108.1`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[OPERATOR] The seed.gardener.cloud/eu-access=true label (in CloudProfiles and Seeds) or seed selector (in Shoots) is no longer removed when the eu-access-only restriction is removed from the .spec.accessRestrictions[] field. Similarly, the support.gardener.cloud/eu-access-for-cluster-{addons,nodes} annotations in Shoots are no longer removed when they are removed from the .spec.accessRestrictions[].options field. by @rfranzke [#10885]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.108.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.108.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.108.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.108.1

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.108.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.108.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.108.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.108.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.108.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.108.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.108.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.108.1

`v1.108.0`

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

[USER] The url annotation in <shoot-name>.monitoring secrets in the project namespace is deprecated and will be removed soon. Please use the plutono-url annotation instead. by @oliver-goetz [#10735]
[OPERATOR] There is an incompatible change in the Garden (gardens.operator.gardener.cloud) custom resource, which required manual action:
- Fields .spec.virtualCluster.dns.domains and .spec.runtimeCluster.ingress.domains were changed from type string to object with a field name and an optional field provider, e.g., in JSON format, replace "domains": ["domain1.example.com", "domain2.example.com"] with "domains": [{"name": "domain1.example.com"}, {"name": "domain2.example.com"}].
- .spec.runtimeCluster.ingress.domains is required now
- .spec.virtualCluster.dns.domains is required now by @MartinWeindel [#10645]
[OPERATOR] The optional deployment of cert-management component has been removed. As it was only introduced recently and probably not used, this change should have no impact typically. by @MartinWeindel [#10802]

📰 Noteworthy

[USER] Allow changing shoot.spec.cloudProfile between CloudProfile and its descendant NamespacedCloudProfiles. by @LucaBernstein [#10811]

✨ New Features

[USER] Allow for custom machine images in NamespacedCloudProfiles and add the spec.providerConfig field. by @LucaBernstein [#10629]
[USER] The URLs of Shoot plutono, prometheus and alertmanager are now stored as annotations in <shoot-name>.monitoring secret in the project namespace. by @oliver-goetz [#10735]
[OPERATOR] Enhance the gardener-operator to deploy DNSRecords and BackupBucket for the virtual garden resource.
DNSRecords are only deployed if at least one provider is specified at .spec.dns.providers in the Garden resource.
A BackupBucket is created if the .spec.virtualCluster.etcd.backup section is specified. An existing backup bucket on the infrastructure becomes automatically managed this way. by @MartinWeindel [#10645]
[DEVELOPER] gardener-apiserver: The ExtensionLabels admission plugin now also sets labels to WorkloadIdentitys. by @dimityrmirchev [#10786]

🐛 Bug Fixes

[DEVELOPER] gardener-node-agent applies inline files before applying containerd registries now. by @oliver-goetz [#10831]

🏃 Others

[DEPENDENCY] The registry.k8s.io/kube-state-metrics/kube-state-metrics image has been updated to v2.14.0. by @gardener-ci-robot [#10818]
[DEPENDENCY] The quay.io/prometheus/prometheus image has been updated to v2.55.1. by @gardener-ci-robot [#10804]
[DEPENDENCY] The gardener/etcd-druid image has been updated to v0.24.1. Release Notes by @gardener-ci-robot [#10843]
[OPERATOR] Fixed an issue that that could occur during control plane migration causing the core.gardener.cloud/v1beta1.BackupEntry to be reconciled after it was successfully migrated, but before it was restored. by @plkokanov [#10761]
[OPERATOR] The deployment of BackupBucket resource in the runtime cluster is skipped if no suitable operator extension is deployed. by @MartinWeindel [#10837]
[OPERATOR] Following components in gardener logging stack are updated: fluent-operator to v3.2.0, fluent-bit to v3.1.8, gardener/logging to v0.62.0 by @nickytd [#10790]
[OPERATOR] The following image has been updated:
- europe-docker.pkg.dev/gardener-project/releases/gardener/autoscaler/vertical-pod-autoscaler/vpa-recommender: 1.2.1 -> 1.2.1-gardener-build.3 (Release notes vpa-1.2.1-gardener-build.2 and Release notes vpa-1.2.1-gardener-build.3) by @ialidzhikov [#10785]
[DEVELOPER] The hack/sast.sh script accepts two new optional flags:
- --exclude-dirs: comma-separated list of dirs to exclude
- --report-dir: where to store the gosec report by @Kostov6 [#10766]
[DEVELOPER] The provider-local admission is now deployed with the local kind setup. by @LucaBernstein [#10629]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.108.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.108.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.108.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.108.0

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.108.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.108.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.108.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.108.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.108.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.108.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.108.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.108.0

`v1.107.3`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[OPERATOR] The seed.gardener.cloud/eu-access=true label (in CloudProfiles and Seeds) or seed selector (in Shoots) is no longer removed when the eu-access-only restriction is removed from the .spec.accessRestrictions[] field. Similarly, the support.gardener.cloud/eu-access-for-cluster-{addons,nodes} annotations in Shoots are no longer removed when they are removed from the .spec.accessRestrictions[].options field. by @rfranzke [#10884]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.3
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.3
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.3

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.3
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.3
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.3
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.3
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.3
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.3
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.3

`v1.107.2`

Compare Source

[gardener/gardener]

🏃 Others

[DEPENDENCY] The gardener/etcd-druid image has been updated to v0.23.3. Release Notes by @gardener-ci-robot [#10839]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.2

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.2
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.2
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.2
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.2
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.2

`v1.107.1`

Compare Source

[gardener/gardener]

🐛 Bug Fixes

[OPERATOR] Fixed an issue where the dashboard's service account lacked permission to create leases in the garden namespace when spec.virtualCluster.gardener.gardenerDashboard.gitHub was configured in the Garden resource. by @petersutter [#10835]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.1

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.1

`v1.107.0`

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

[DEVELOPER] The unused method WithShootCredentials have been removed from github.com/gardener/gardener/pkg/gardenlet/operation/shoot.Builder. by @vpnachev [#10672]
[DEVELOPER] In the local development setup, the images are pushed to garden.local.gardener.cloud:5001 instead of localhost:5001 now. Please add 127.0.0.1 garden.local.gardener.cloud to your /etc/hosts. by @rrhubenov [#10257]
[OPERATOR] Feature gate IPv6SingleStack has been removed. Infrastructure-specific validations will be added in parallel to the corresponding provider extensions. by @ScheererJ [#10716]

📰 Noteworthy

[OPERATOR] ManagedSeed's .spec.gardenlet.config.seedConfig.spec.ingress.controller.kind field is now defaulted to nginx when
.spec.gardenlet.config.seedConfig or .spec.gardenlet.config.seedConfig.spec.ingress is nil.
This allows the creation of ManagedSeed without specifying the .spec.gardenlet field. by @RadaBDimitrova [#10655]
[OPERATOR] A new required controller was added to gardener-operator. It maintains the RequiredRuntime condition for Extension resources to indicate that the extension deployment is required in the Garden-Runtime cluster. by @timuthy [#10650]
[OPERATOR] The gardener/controlplane Helm chart has been deprecated and will be removed after v1.135 has been released (around beginning of 2026). We urge you to switch to a gardener-operator-based installation. Read all about it here. by @rfranzke [#10706]
[DEVELOPER] .spec.gardenlet of ManagedSeed is now a required field. This was already the case from an API perspective, enforced by validation. by @RadaBDimitrova [#10648]
[USER] The spec.kubernetes.kubeAPIServer.oidcConfig field in the Shoot API is deprecated and will be removed after support for Kubernetes 1.31 is dropped. by @AleksandarSavchev [#10666]

✨ New Features

[OPERATOR] If an admission webhook which was deployed via Extension resource by gardener-operator is deleted again, its webhook configuration in the virtual-cluster is cleaned up automatically. by @oliver-goetz [#10585]
[OPERATOR] The CloudProfile, Seed, and Shoot APIs are now allowing to configure access restrictions (e.g., to enable "EU access"-only or similar policies). The legacy approach with the seed.gardener.cloud/eu-access labels is deprecated and will be removed in a future release. Make sure to adapt to the new APIs. Read all about it here. by @rfranzke [#10654]
[USER] The viewer kubeconfigs for shoot clusters now allow the pods/log subresource. by @rfranzke [#10711]
[USER] Service Account Managed Issuer can be now enabled for workerless shoot clusters. by @dimityrmirchev [#10689]
[USER] Structured authorization configuration can now be set by creating a ConfigMap with the AuthorizationConfiguration file set in the config.yaml data key and referencing it (in the Shoot via .spec.kubernetes.kubeAPIServer.structuredAuthorization, in the Garden via .spec.virtualCluster.kubernetes.kubeAPIServer.structuredAuthorization for Kubernetes versions >= v1.30. Read all about it here. by @rfranzke [#10682]
[USER] Gardener reports the cluster's egress CIDRs in Shoot.status.networking.egressCIDRs if supported by the used provider extension. by @timebertt [#10240]

🐛 Bug Fixes

[OPERATOR] Fix Prometheus rule shoot-kube-proxy. by @LucaBernstein [#10757]
[OPERATOR] The TopologySpreadConstraints calculation was improved for StatefulSets to always use a stable label selector. This led to issues in the past when shoots were upgraded to HA. by @timuthy [#10750]
[OPERATOR] valitail version is now pinned to v2.2.15 (depends on glibc 2.32). by @ialidzhikov [#10776]

🏃 Others

[DEPENDENCY] The credativ/plutono image has been updated to v7.5.34. Release Notes by @gardener-ci-robot [#10732]
[DEPENDENCY] The gardener/etcd-druid image has been updated to v0.23.2. Release Notes by @gardener-ci-robot [#10747]
[DEPENDENCY] The gardener/cert-management image has been updated to v0.16.0. Release Notes by @gardener-ci-robot [#10684]
[DEPENDENCY] The credativ/vali image has been updated to v2.2.19. Release Notes by @gardener-ci-robot [#10680]
[DEPENDENCY] The gcr.io/istio-release/pilot image has been updated to 1.23.3. by @gardener-ci-robot [#10725]
[DEPENDENCY] The quay.io/prometheus/prometheus image has been updated to v2.55.0. by @gardener-ci-robot [#10697]
[DEPENDENCY] The quay.io/prometheus-operator/prometheus-config-reloader image has been updated to v0.77.2. by @gardener-ci-robot [#10692]
[DEPENDENCY] The envoyproxy/envoy image has been updated to v1.32.1. Release Notes by @gardener-ci-robot [#10755]
[DEPENDENCY] The gardener/dashboard image has been updated to 1.78.0. Release Notes by @gardener-ci-robot [#10731]
[OPERATOR] The admission automatically adds the provider.extensions.gardener.cloud label to NamespacedCloudProfiles. by @LucaBernstein [#10742]
[OPERATOR] Add dual-stack support for coredns. by @DockToFuture [#10733]
[OPERATOR] Allow extensions to be scraped in garden runtime cluster even outside garden namespace by @ScheererJ [#10720]
[OPERATOR] Add label selector to ShootResourceReservation plugin to control for which Shoots the ShootResourceReservation Plugin sets kubeReserved according to the GKE formula when useGKEFormula: true is set. by @voelzmo [#10492]
[OPERATOR] Increase the readiness probe timeout for the gardener-metrics-exporter from 1s to 10s. by @vicwicker [#10771]
[OPERATOR] The gardener/etcd-druid image has been updated to v0.23.1. Release Notes v0.23.1, Release Notes v0.23.0 by @shreyas-s-rao [#10526]
[OPERATOR] The autoscaler/cluster-autoscaler image has been updated to v1.29.2 (for Kubernetes v1.29). Release Notes by @rishabh-11 [#10700]
[OPERATOR] Gardener API Server feature gate ShootCredentialsBinding has been promoted to beta and is enabled by default. by @dimityrmirchev [#10662]
[DEVELOPER] Add Make target make operator-seed-dev for local development of the gardenlet in the operator setup. by @marc1404 [#10710]
[DEVELOPER] Fix /etc/hosts configuration in the remote local setup by @vicwicker [#10744]
[DEVELOPER] The base image of the gardener-extension-provider-local-node image is now updated to kindest/[email protected]. by @ialidzhikov [#10688]
[DEVELOPER] local setup: The kind cluster's node image is now updated to kindest/[email protected]. by @ialidzhikov [#10723]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.0

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.0

`v1.106.2`

Compare Source

[gardener/gardener]

🏃 Others

[OPERATOR] Increase the readiness probe timeout for the gardener-metrics-exporter from 1s to 10s. by @vicwicker [#10769]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.106.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.106.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.106.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.106.2

Docker Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.106.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.106.2
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.106.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.106.2
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.106.2
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.106.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.106.2
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.106.2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

23t-machine-user · 2024-11-04T08:36:43Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

23 additional dependencies were updated

Details:

Package	Change
`github.com/BurntSushi/toml`	`v1.3.2` -> `v1.4.0`
`github.com/cyphar/filepath-securejoin`	`v0.3.1` -> `v0.3.4`
`github.com/emicklei/go-restful/v3`	`v3.11.0` -> `v3.12.1`
`github.com/fatih/color`	`v1.17.0` -> `v1.18.0`
`github.com/gardener/cert-management`	`v0.15.0` -> `v0.17.1`
`github.com/go-openapi/jsonreference`	`v0.20.2` -> `v0.21.0`
`github.com/gorilla/websocket`	`v1.5.0` -> `v1.5.1`
`github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring`	`v0.74.0` -> `v0.78.2`
`github.com/prometheus/common`	`v0.60.0` -> `v0.61.0`
`go.opentelemetry.io/otel`	`v1.28.0` -> `v1.29.0`
`go.opentelemetry.io/otel/trace`	`v1.28.0` -> `v1.29.0`
`golang.org/x/exp`	`v0.0.0-20241009180824-f66d83c29e7c` -> `v0.0.0-20241204233417-43b7b7cde48d`
`golang.org/x/oauth2`	`v0.23.0` -> `v0.24.0`
`golang.org/x/time`	`v0.7.0` -> `v0.8.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20240826202546-f6391c0de4c7` -> `v0.0.0-20241015192408-796eee8c2d53`
`google.golang.org/protobuf`	`v1.35.1` -> `v1.35.2`
`helm.sh/helm/v3`	`v3.16.2` -> `v3.16.3`
`istio.io/api`	`v1.23.2` -> `v1.23.3`
`istio.io/client-go`	`v1.23.2` -> `v1.23.3`
`k8s.io/kube-aggregator`	`v0.31.1` -> `v0.31.3`
`k8s.io/metrics`	`v0.31.1` -> `v0.31.3`
`sigs.k8s.io/controller-tools`	`v0.16.4` -> `v0.16.5`
`sigs.k8s.io/structured-merge-diff/v4`	`v4.4.2` -> `v4.4.3`

23t-machine-user added go module version-bump labels Nov 4, 2024

23t-machine-user assigned rhizoet Nov 4, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 4 times, most recently from ec96de9 to a377ff1 Compare November 6, 2024 23:32

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch from a377ff1 to 39888b8 Compare November 12, 2024 08:04

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.107.0~~ Update module github.com/gardener/gardener to v1.107.1 Nov 12, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 2 times, most recently from e6f0439 to ed6ed20 Compare November 12, 2024 17:21

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.107.1~~ Update module github.com/gardener/gardener to v1.107.2 Nov 12, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 3 times, most recently from cca06d6 to c830c62 Compare November 14, 2024 09:03

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.107.2~~ Update module github.com/gardener/gardener to v1.108.0 Nov 14, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 5 times, most recently from a94e78d to ca5869c Compare November 21, 2024 20:22

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.108.0~~ Update module github.com/gardener/gardener to v1.108.1 Nov 21, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 5 times, most recently from f3237d6 to bd63aac Compare November 28, 2024 10:49

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.108.1~~ Update module github.com/gardener/gardener to v1.109.0 Nov 28, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch from bd63aac to 3fb58f5 Compare December 2, 2024 12:05

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch from 3fb58f5 to ccc57d9 Compare December 2, 2024 17:35

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 4 times, most recently from f12c1d0 to b3f5aa6 Compare December 11, 2024 18:04

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.109.0~~ Update module github.com/gardener/gardener to v1.110.0 Dec 11, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 2 times, most recently from 0296c5b to 882d015 Compare December 17, 2024 15:35

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch from 882d015 to f9512dd Compare December 19, 2024 17:33

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.110.0~~ Update module github.com/gardener/gardener to v1.110.1 Dec 19, 2024

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch 2 times, most recently from b4ba8a9 to d644e02 Compare December 20, 2024 09:33

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.110.1~~ Update module github.com/gardener/gardener to v1.110.0 Dec 20, 2024

Update module github.com/gardener/gardener to v1.110.1

58fd361

23t-machine-user force-pushed the renovate/github.com-gardener-gardener-1.x branch from d644e02 to 58fd361 Compare December 20, 2024 11:32

23t-machine-user changed the title ~~Update module github.com/gardener/gardener to v1.110.0~~ Update module github.com/gardener/gardener to v1.110.1 Dec 20, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update module github.com/gardener/gardener to v1.110.1 #137

Update module github.com/gardener/gardener to v1.110.1 #137

23t-machine-user commented Nov 4, 2024 •

edited

Loading

23t-machine-user commented Nov 4, 2024 •

edited

Loading

Update module github.com/gardener/gardener to v1.110.1 #137

Are you sure you want to change the base?

Update module github.com/gardener/gardener to v1.110.1 #137

Conversation

23t-machine-user commented Nov 4, 2024 • edited Loading

Release Notes

[gardener/gardener]

🐛 Bug Fixes

Helm Charts

Docker Images

[gardener/gardener]

⚠️ Breaking Changes

✨ New Features

🐛 Bug Fixes

🏃 Others

📖 Documentation

Helm Charts

Docker Images

[gardener/gardener]

⚠️ Breaking Changes

📰 Noteworthy

✨ New Features

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

Helm Charts

Docker Images

[gardener/gardener]

⚠️ Breaking Changes

📰 Noteworthy

✨ New Features

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

Helm Charts

Docker Images

[gardener/gardener]

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🐛 Bug Fixes

Helm Charts

Docker Images

[gardener/gardener]

⚠️ Breaking Changes

📰 Noteworthy

✨ New Features

🐛 Bug Fixes

🏃 Others

Helm Charts

Docker Images

[gardener/gardener]

🏃 Others

Helm Charts

Docker Images

Configuration

23t-machine-user commented Nov 4, 2024 • edited Loading

ℹ Artifact update notice

File name: go.mod

23t-machine-user commented Nov 4, 2024 •

edited

Loading

23t-machine-user commented Nov 4, 2024 •

edited

Loading