Update gardener-controlplane to v1.109.1 (#1902)

Co-authored-by: 23t-machine-user <[email protected]>

configuration/configuration/images.yaml

@@ -640,7 +640,7 @@ gardenlet:
         name: vpa-admission-controller
         repository: registry.k8s.io/autoscaling/vpa-admission-controller
         sourceRepository: github.com/kubernetes/autoscaler
-        tag: 1.2.1
+        tag: 1.2.2
       - labels:
           - name: gardener.cloud/cve-categorisation
             value:
@@ -651,9 +651,9 @@ gardenlet:
               network_exposure: private
               user_interaction: gardener-operator
         name: vpa-recommender
-        repository: europe-docker.pkg.dev/gardener-project/releases/gardener/autoscaler/vertical-pod-autoscaler/vpa-recommender
-        sourceRepository: github.com/gardener/autoscaler
-        tag: 1.2.1-gardener-build.3
+        repository: registry.k8s.io/autoscaling/vpa-recommender
+        sourceRepository: github.com/kubernetes/autoscaler
+        tag: 1.2.2
       - labels:
           - name: gardener.cloud/cve-categorisation
             value:
@@ -666,7 +666,7 @@ gardenlet:
         name: vpa-updater
         repository: registry.k8s.io/autoscaling/vpa-updater
         sourceRepository: github.com/kubernetes/autoscaler
-        tag: 1.2.1
+        tag: 1.2.2
       - name: cluster-proportional-autoscaler
         repository: registry.k8s.io/cpa/cluster-proportional-autoscaler
         sourceRepository: https://github.com/kubernetes-sigs/cluster-proportional-autoscaler

docs/release-notes/next.md

@@ -941,4 +941,106 @@ no release notes available
 
 **Full Changelog**: https://github.com/gardener-community/cloudprofiles/compare/0.7.20...0.7.21
 
+</details>
+
+<details>
+<summary><b>Update gardener-controlplane to <code>1.109.1</code></b></summary>
+
+# [gardener/gardener]
+
+## 🐛 Bug Fixes
+
+- `[OPERATOR]` Fix bug where gardenlet was missing permissions to read `v1.Events` in the istio ingress namespace in the seed cluster. by @vpnachev [#11164]
+## 🏃 Others
+
+- `[OPERATOR]` Fix a bug in the gardener operator where the issuer URL domain for workload identity tokens was not prefixed with `discovery.` resulting in invalid OIDC tokens and discovery documents. by @vpnachev [#11159]
+- `[DEPENDENCY]` The following images have been updated:  
+  - `registry.k8s.io/autoscaling/vpa-admission-controller`: 1.2.1 -> 1.2.2  
+  - `registry.k8s.io/autoscaling/vpa-recommender`: 1.2.1 -> 1.2.2  
+  - `registry.k8s.io/autoscaling/vpa-updater`: 1.2.1 -> 1.2.2 by @ialidzhikov [#11180]
+
+## Helm Charts
+- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.109.1`
+- gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.109.1`
+- operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.109.1`
+- resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.109.1`
+## Docker Images
+- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.109.1`
+- apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.109.1`
+- controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.109.1`
+- gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.109.1`
+- node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.109.1`
+- operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.109.1`
+- resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.109.1`
+- scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.109.1`
+
+
+</details>
+
+<details>
+<summary><b>Update gardener-controlplane to <code>1.109.1</code></b></summary>
+
+# [gardener/gardener]
+
+## 🐛 Bug Fixes
+
+- `[OPERATOR]` Fix bug where gardenlet was missing permissions to read `v1.Events` in the istio ingress namespace in the seed cluster. by @vpnachev [#11164]
+## 🏃 Others
+
+- `[OPERATOR]` Fix a bug in the gardener operator where the issuer URL domain for workload identity tokens was not prefixed with `discovery.` resulting in invalid OIDC tokens and discovery documents. by @vpnachev [#11159]
+- `[DEPENDENCY]` The following images have been updated:  
+  - `registry.k8s.io/autoscaling/vpa-admission-controller`: 1.2.1 -> 1.2.2  
+  - `registry.k8s.io/autoscaling/vpa-recommender`: 1.2.1 -> 1.2.2  
+  - `registry.k8s.io/autoscaling/vpa-updater`: 1.2.1 -> 1.2.2 by @ialidzhikov [#11180]
+
+## Helm Charts
+- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.109.1`
+- gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.109.1`
+- operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.109.1`
+- resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.109.1`
+## Docker Images
+- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.109.1`
+- apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.109.1`
+- controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.109.1`
+- gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.109.1`
+- node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.109.1`
+- operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.109.1`
+- resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.109.1`
+- scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.109.1`
+
+
+</details>
+
+<details>
+<summary><b>Update gardenlet to <code>1.109.1</code></b></summary>
+
+# [gardener/gardener]
+
+## 🐛 Bug Fixes
+
+- `[OPERATOR]` Fix bug where gardenlet was missing permissions to read `v1.Events` in the istio ingress namespace in the seed cluster. by @vpnachev [#11164]
+## 🏃 Others
+
+- `[OPERATOR]` Fix a bug in the gardener operator where the issuer URL domain for workload identity tokens was not prefixed with `discovery.` resulting in invalid OIDC tokens and discovery documents. by @vpnachev [#11159]
+- `[DEPENDENCY]` The following images have been updated:  
+  - `registry.k8s.io/autoscaling/vpa-admission-controller`: 1.2.1 -> 1.2.2  
+  - `registry.k8s.io/autoscaling/vpa-recommender`: 1.2.1 -> 1.2.2  
+  - `registry.k8s.io/autoscaling/vpa-updater`: 1.2.1 -> 1.2.2 by @ialidzhikov [#11180]
+
+## Helm Charts
+- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.109.1`
+- gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.109.1`
+- operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.109.1`
+- resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.109.1`
+## Docker Images
+- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.109.1`
+- apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.109.1`
+- controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.109.1`
+- gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.109.1`
+- node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.109.1`
+- operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.109.1`
+- resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.109.1`
+- scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.109.1`
+
+
 </details>

gardener/gardener.yaml

@@ -16,7 +16,7 @@ spec:
   chart:
     spec:
       chart: gardener-controlplane
-      version: 1.109.0
+      version: 1.109.1
       sourceRef:
         kind: HelmRepository
         name: gardener-community-charts
@@ -117,7 +117,7 @@ spec:
   chart:
     spec:
       chart: gardener-controlplane
-      version: 1.109.0
+      version: 1.109.1
       sourceRef:
         kind: HelmRepository
         name: gardener-community-charts

gardener/gardenlet.yaml

@@ -16,7 +16,7 @@ spec:
   chart:
     spec:
       chart: gardenlet
-      version: 1.109.0
+      version: 1.109.1
       sourceRef:
         kind: HelmRepository
         name: gardener-community-charts