v1.110.2-0

Release Notes v1.110

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update external-dns-management to 0.22.2

[gardener/external-dns-management]

🐛 Bug Fixes

• [OPERATOR] Deletion of source DNSEntries must wait for completed deletion of target entries. by @MartinWeindel [#407]

🏃 Others

• [OPERATOR] introduce dns.gardener.cloud/target-hard-ignore annotation by @MartinWeindel [#404]
• [OPERATOR] Use AWS SDK v2 for the aws-route53 provider by @MartinWeindel [#400]
• [OPERATOR] Bumps golang from 1.23.3 to 1.23.4. by @dependabot[bot] [#401]
• [OPERATOR] Remove annotation gardener.cloud/operation=reconcile on reconciliation by @MartinWeindel [#406]

Helm Charts

• dns-controller-manager: europe-docker.pkg.dev/gardener-project/releases/charts/dns-controller-manager:v0.22.2

Docker Images

• dns-controller-manager: europe-docker.pkg.dev/gardener-project/releases/dns-controller-manager:v0.22.2

Update provider-aws to 1.59.2

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [USER] Fix the NamespacedCloudProfile status mutation. by @LucaBernstein [#1172]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.59.2
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.59.2
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.59.2

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.59.2
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.59.2

Update provider-azure to 1.49.2

[gardener/gardener-extension-provider-azure]

🐛 Bug Fixes

• [USER] Fix the NamespacedCloudProfile status mutation. by @LucaBernstein [#1041]

Helm Charts

• admission-azure-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-application:v1.49.2
• admission-azure-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-runtime:v1.49.2
• provider-azure: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-azure:v1.49.2

Docker Images

• gardener-extension-admission-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.49.2
• gardener-extension-provider-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.49.2

Update shoot-dns-service to 1.55.0

[gardener/gardener-extension-shoot-dns-service]

⚠️ Breaking Changes

• [OPERATOR] The following extension chart values are changed:

  • .dnsControllerManager.vpa.minAllowed -> .dnsControllerManager.vpa.resourcePolicy.minAllowed

  Make sure to adapt your values to the breaking change when upgrading to this version of the extension. by @ialidzhikov [#409]

🐛 Bug Fixes

• [OPERATOR] Ensure record for DNSEntries are left untouched during migration. by @MartinWeindel [#408]

🏃 Others

• [OPERATOR] Bumps github.com/gardener/gardener from 1.108.0 to 1.109.0. by @dependabot[bot] [#403]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.109.0 to 1.110.0. by @dependabot[bot] [#406]
• [OPERATOR] The extension Deployment does no longer specify memory limits. by @ialidzhikov [#409]
• [OPERATOR] Vertical scaling on CPU dropped in VPA resource by @MartinWeindel [#402]

[gardener/external-dns-management]

🐛 Bug Fixes

• [OPERATOR] Deletion of source DNSEntries must wait for completed deletion of target entries. by @MartinWeindel [gardener/external-dns-management#407]

🏃 Others

• [OPERATOR] Use AWS SDK v2 for the aws-route53 provider by @MartinWeindel [gardener/external-dns-management#400]
• [OPERATOR] Remove annotation gardener.cloud/operation=reconcile on reconciliation by @MartinWeindel [gardener/external-dns-management#406]
• [OPERATOR] Bumps golang from 1.23.3 to 1.23.4. by @dependabot[bot] [gardener/external-dns-management#401]
• [OPERATOR] introduce dns.gardener.cloud/target-hard-ignore annotation by @MartinWeindel [gardener/external-dns-management#404]

Helm Charts

• admission-shoot-dns-service-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-application:v1.55.0
• admission-shoot-dns-service-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-runtime:v1.55.0
• shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service:v1.55.0

Docker Images

• gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.55.0
• gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.55.0

Update provider-openstack to 1.44.1

[gardener/gardener-extension-provider-openstack]

🐛 Bug Fixes

• [USER] MCM update to v0.20.1: Increase VM status check timeout to 1200 seconds by @hebelsan [#939]

Helm Charts

• admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.44.1
• admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.44.1
• provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.44.1

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.44.1
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.44.1

Update gardener-controlplane to 1.110.1

[gardener/gardener]

🐛 Bug Fixes

• [USER] Fix initial scheduling of Shoot with NamespacedCloudProfile reference. by @LucaBernstein [#11076]

Update gardener-controlplane to 1.110.1

[gardener/gardener]

🐛 Bug Fixes

• [USER] Fix initial scheduling of Shoot with NamespacedCloudProfile reference. by @LucaBernstein [#11076]

Update gardenlet to 1.110.1

[gardener/gardener]

🐛 Bug Fixes

• [USER] Fix initial scheduling of Shoot with NamespacedCloudProfile reference. by @LucaBernstein [#11076]

Update shoot-flux to 0.13.0

What's Changed

• 🤖 Update module github.com/onsi/gomega to v1.36.1 by @renovate in stackitcloud/gardener-extension-shoot-flux#125
• Bump gardener to v1.107 by @Duciwuci in stackitcloud/gardener-extension-shoot-flux#127

Full Changelog: stackitcloud/gardener-extension-shoot-flux@v0.12.0...v0.13.0

Update provider-alicloud to 1.57.0

[gardener/gardener-extension-provider-alicloud]

⚠️ Breaking Changes

• [OPERATOR] The Helm charts for the application and runtime parts of the gardener-extension-admission-alicloud admission controller have been separated into standalone charts. These charts now assume a Garden setup with a virtual garden. Both charts must be deployed individually: the runtime chart on the Garden runtime cluster, and the application chart on the virtual garden. Additionally, the intermediate global level in the Helm values has been removed, so you may need to adjust your provided values accordingly. by @MartinWeindel [#746]

✨ New Features

• [OPERATOR] Adjustments for additional deployment of extension and admission controller on Garden runtime cluster by gardener-operator. by @MartinWeindel [#746]

🏃 Others

• [OPERATOR] Fixes Alicloud bastion instance CPU architecture not aligning with the image CPU architecture in certain conditions by @tedteng [#747]
• [OPERATOR] Remove the duplicate provider type check from the admission webhooks. by @LucaBernstein [#749]
• [OPERATOR] Bump gardener/gardener from v1.98.4 to v1.108.1. by @MartinWeindel [#746]

Helm Charts

• admission-alicloud-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-application:v1.57.0
• admission-alicloud-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-runtime:v1.57.0
• provider-alicloud: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-alicloud:v1.57.0

Docker Images

• gardener-extension-admission-alicloud: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-alicloud:v1.57.0
• gardener-extension-provider-alicloud: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-alicloud:v1.57.0

Update provider-gcp to 1.41.1

[gardener/gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] Disable --allocate-node-cidrs in kube-controller-manager for kubernetes >= 1.31 as cloud-controller-manager takes over this responsibility. by @hebelsan [#937]

Helm Charts

• admission-gcp-application: `eur...

v1.109.0-0

What's Changed

⬆ Updates

• Update Helm release external-dns-management to v0.22.1 (main) by @23t-machine-user in #1802
• Update docusaurus to v3.6.2 (main) by @23t-machine-user in #1803
• Update Helm release shoot-dns-service to v1.54.0 (main) by @23t-machine-user in #1804
• Update Helm release shoot-flux to v0.11.0 (main) by @23t-machine-user in #1805
• Update Helm release shoot-cert-service to v1.46.0 (main) by @23t-machine-user in #1806
• Update Helm release backup-s3 to v0.7.0 (main) by @23t-machine-user in #1807
• Update Helm release cert-manager to v1.16.2 (main) by @23t-machine-user in #1808
• Update dependency kubernetes/kubectl to v0.31.3 (main) by @23t-machine-user in #1809
• Update Helm release cloudprofiles to v0.7.20 (main) by @23t-machine-user in #1810
• Update Helm release provider-azure to v1.49.0 (main) by @23t-machine-user in #1811
• Update Helm release provider-openstack to v1.43.0 (main) by @23t-machine-user in #1812
• Update Helm release os-ubuntu to v1.26.0 (main) by @23t-machine-user in #1813
• Update gardener-controlplane to v1.108.1 (main) by @23t-machine-user in #1814
• Update Helm release shoot-oidc-service to v0.29.0 (main) by @23t-machine-user in #1815
• Update docusaurus to v3.6.3 (main) by @23t-machine-user in #1817
• Update Helm release velero to v8.1.0 (main) by @23t-machine-user in #1818
• Update Helm release os-gardenlinux to v0.25.0 (main) by @23t-machine-user in #1819
• Update Helm release os-ubuntu to v1.27.0 (main) by @23t-machine-user in #1820
• Update Helm release runtime-gvisor to v0.16.0 (main) by @23t-machine-user in #1821
• Update Helm release shoot-flux to v0.12.0 (main) by @23t-machine-user in #1822
• Update Helm release networking-calico to v1.44.0 (main) by @23t-machine-user in #1823
• Update dependency @easyops-cn/docusaurus-search-local to ^0.46.0 (main) by @23t-machine-user in #1824
• Update dependency @easyops-cn/docusaurus-search-local to v0.46.1 (main) by @23t-machine-user in #1825
• Update Helm release gardener-metrics-exporter to v0.31.0 (main) by @23t-machine-user in #1826
• Update gardener-controlplane to v1.109.0 (main) by @23t-machine-user in #1827
• Update Helm release gardener-metrics-exporter to v0.32.0 (main) by @23t-machine-user in #1828
• Update Helm release provider-aws to v1.59.0 (main) by @23t-machine-user in #1829
• Update Helm release gardener-metrics-exporter to v0.33.0 (main) by @23t-machine-user in #1830
• Update Helm release cert-management to v0.17.0 (main) by @23t-machine-user in #1831
• Update Helm release os-gardenlinux to v0.26.0 (main) by @23t-machine-user in #1832
• Update Helm release networking-cilium to v1.38.0 (main) by @23t-machine-user in #1833
• Update Helm release cert-management to v0.17.1 (main) by @23t-machine-user in #1834
• Update Helm release shoot-cert-service to v1.47.0 (main) by @23t-machine-user in #1835
• Update Helm release shoot-rsyslog-relp to v0.7.0 (main) by @23t-machine-user in #1836
• Update Helm release provider-openstack to v1.43.1 (main) by @23t-machine-user in #1837
• Update dependency mikefarah/yq to v4.44.6 (main) by @23t-machine-user in #1839
• Update dependency react to v19 (main) by @23t-machine-user in #1838
• Update Helm release provider-aws to v1.59.1 (main) by @23t-machine-user in #1841
• Update Helm release os-gardenlinux to v0.27.0 (main) by @23t-machine-user in #1842
• Update dependency react-dom to v19 (main) by @23t-machine-user in #1843
• Update Helm release provider-azure to v1.49.1 (main) by @23t-machine-user in #1844
• Update dependency kubernetes/kubectl to v0.31.4 (main) by @23t-machine-user in #1845
• Update Helm release cloudprofiles to v0.7.21 (main) by @23t-machine-user in #1846
• Update dependency prism-react-renderer to v2.4.1 (main) by @23t-machine-user in #1847

Full Changelog: v1.108.0-0...v1.109.0-0

v1.107.3-0

Release Notes v1.107

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update provider-hcloud to 0.6.32

[gardener-extension-provider-hcloud] v0.6.32

Update provider-aws to 1.58.0

[gardener/gardener-extension-provider-aws]

✨ New Features

• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#1047]
• [USER] Enable support for the field shoot.Spec.CloudProfile alongside cloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#1000]
• [USER] The provider-aws extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#1055]

🐛 Bug Fixes

• [OPERATOR] An issue causing Shoot force deletion to fail because the control plane webhook failing to get the Infrastructure object from the Seed cluster is now fixed. The control plane webhook now reads the infrastructureConfig from the Shoot spec in the Cluster resource. Previously, it was fetching the Infrastructure object from the Seed cluster and was reading the infrastructureConfig from there. by @Kostov6 [#1068]
• [USER] Fix cleanup of routing table associations by @hebelsan [#1083]

🏃 Others

• [OPERATOR] Create IPv6 ServiceCIDR and write IPv6 ranges to Infra.Status.Networking by @axel7born [#1081]
• [OPERATOR] The shoot-webhook that mutates the addons-nginx-ingress-controller ConfigMap does now specify object selector. The webhook will now intercept only requests for the addons-nginx-ingress-controller ConfigMap. by @ialidzhikov [#988]
• [OPERATOR] The aws-ipam-controller is enabled for IPv6 and dual stack shoot clusters. It replaces the IPAM of the cloud-controller-manager and kube-controller-manager and supports additionally prefix delegation in case of IPv6 or dual stack. by @DockToFuture [#984]
• [OPERATOR] Add ipv6 support to deploy IPv6 shoots. by @axel7born [#1024]
• [OPERATOR] Enable nat64 and dns64 for IPv6 shoot clusters. by @DockToFuture [#1082]
• [OPERATOR] Fix error classification when deleting DNS record sets by @hebelsan [#1033]
• [OPERATOR] The provider-aws extension no longer configures min/maxAllowed in any managed VPA resource. by @hebelsan [#1070]
• [OPERATOR] The following images are updated:
  registry.k8s.io/provider-aws/aws-ebs-csi-driver: v1.29.0 -> v1.35.0 by @scs-gardener-team-gitlab [#1080]
• [OPERATOR] aws-custom-route-controller is disabled for IPv6. by @DockToFuture [#1088]
• [OPERATOR] Update cloud-provider images including CSI driver images by @hebelsan [#1072]
• [OPERATOR] Add flow migration integration test by @kon-angelo [#1046]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#1049]

[gardener/machine-controller-manager-provider-aws]

🏃 Others

• [OPERATOR] InitializeMachine returns Uninitialized error code if VM is not found. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Set PrimaryIpv6 flag for instances with IPv6 addresses. by @axel7born [gardener/machine-controller-manager-provider-aws#174]
• [OPERATOR] Use ProviderID as a fallback for fetching the VM. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Golang version used upgraded to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-aws#166]
• [OPERATOR] Golangci-lint will now be used as the linter instead of the older golint. by @aaronfern [gardener/machine-controller-manager-provider-aws#168]

[gardener/machine-controller-manager]

✨ New Features

• [DEVELOPER] MCM adds the name of the machine to node.gardener.cloud/machine-name label of the corresponding node. by @oliver-goetz [gardener/machine-controller-manager#919]
• [DEVELOPER] MCM replaces the magic string <<MACHINE_NAME>> in user data with the name of the machine when it is bootstrapped. by @oliver-goetz [gardener/machine-controller-manager#919]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where failure of machine initialization caused label updates to not happen. by @thiyyakat [gardener/machine-controller-manager#940]
• [DEVELOPER] Fixed bug that removed the shoot-- prefix from control cluster namespace for integration tests using the gardener local setup case by @thiyyakat [gardener/machine-controller-manager#935]

🏃 Others

• [OPERATOR] getVMStatus always redirects to InitiateDrain. It also populates the node label on the machine object by checking node.gardener.cloud/machine-name label on the nodes. by @thiyyakat [gardener/machine-controller-manager#940]
• [OPERATOR] Drain timeout is now correctly honored for Pod eviction during Machine Drain by @sssash18 [gardener/machine-controller-manager#920]
• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] Golang version used is now upgraded to 1.22.5 by @aaronfern [gardener/machine-controller-manager#929]
• [DEVELOPER] The following dependencies are updated:
  • k8s.io/* : v0.29.3 -> v0.31.0 by @ary1992 [gardener/machine-controller-manager#938]

📖 Documentation

• [OPERATOR] Broken API doc links are now fixed by @rishabh-11 [gardener/machine-controller-manager#927]

Update provider-gcp to 1.39.1

[gardener/gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] Fix an issue where the firewall rules where created with the wrong priority when using the flow reconciler. by @kon-angelo [#873]

Helm Charts

• admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.39.1
• admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.39.1
• provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.39.1

Docker Images

• gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.39.1
• gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.39.1

Update cloudprofiles to 0.7.19

Full Changelog: gardener-community/cloudprofiles@0.7.18...0.7.19

Update backup-s3 to 0.6.0

General Changes

• Bump g/g to 1.95.6 (#9) @robertvolkmann
• Add Service in order to generate correct NetworkPolicies (#8) @maboehm

Update shoot-oidc-service to 0.28.0

[gardener/gardener-extension-shoot-oidc-service]

🏃 Others

• [OPERATOR] The extension and OWA do not set cpu and memory limits. VPA is utilised to set proper recommendations. by @dimityrmirchev [#243]

[gardener/oidc-webhook-authenticator]

🏃 Others

• [OPERATOR] OWA is now built with go version 1.23.1. by @dimityrmirchev [gardener/oidc-webhook-authenticator#160]
• [OPERATOR] OWA is now built using go version 1.23.2. by @dimityrmirchev [gardener/oidc-webhook-authenticator#162]

Helm Charts

• shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-oidc-service:v0.28.0

Docker Images

• gardener-extension-shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-oidc-service:v0.28.0

Update provider-aws to 1.58.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix flow: Ignore subnet not found in infra state while deleting routing table associations by @hebelsan [#1098]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.1

Update dashboard to 1.78.0

[gardener/dashboard]

⚠️ Breaking Changes

• [OPERATOR] Cost Object: You must migrate existing configurations to the new format. Previously, the configuration used Values.global.dashboard.frontendConfig.costObject. It should now be updated to Values.global.dashboard.frontendConfig.costObjects, which is a list of objects. Each object in this list must include a type property, alongside existing properties such as title, description, and regex. by @petersutter [#2102]
• [USER] Removed the ability for users to retrieve their token from the My Account page. by @petersutter [#2131]

✨ New Features

• [USER] Header warnings returned by the Kubernetes API server are now displayed as notifications in the Gardener dashboard. This includes important messages like deprecation warnings. Additionally, admission webhooks may provide custom warnings in the headers by @grolu [#2033]
• [USER] Upgraded the code editor from CodeMirror 5 to CodeMirror 6 to enhance performance, modernize the interface, and improve extensibility by @grolu [#2058]
• [USER] Support Azure Cloud Configurati...

v1.108.0-0

Release Notes v1.108

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update provider-gcp to 1.40.0

[gardener/gardener-extension-provider-gcp]

⚠️ Breaking Changes

• [USER] Remove redundant firewall rule *-allow-external-access that allowed traffic from all 0 by @kon-angelo [#876]

🏃 Others

• [OPERATOR] Check priority of firewall rules in integration tests by @kon-angelo [#877]
• [OPERATOR] Added validation to prevent IPv6-only/dual-stack clusters as they are not supported, yet. by @ScheererJ [#878]
• [OPERATOR] Update gardener/gardener to v1.105.0 by @hebelsan [#869]
• [OPERATOR] Updating CSI driver provisioner ClusterRole rules by @hebelsan [#867]
• [OPERATOR] Prevent unnecessary CNI side car containers for SNAT to upstream DNS servers by @ScheererJ [#868]

[gardener/machine-controller-manager]

✨ New Features

• [DEVELOPER] MCM replaces the magic string <<MACHINE_NAME>> in user data with the name of the machine when it is bootstrapped. by @oliver-goetz [gardener/machine-controller-manager#919]
• [DEVELOPER] MCM adds the name of the machine to node.gardener.cloud/machine-name label of the corresponding node. by @oliver-goetz [gardener/machine-controller-manager#919]

🐛 Bug Fixes

• [DEVELOPER] Fixed bug that removed the shoot-- prefix from control cluster namespace for integration tests using the gardener local setup case by @thiyyakat [gardener/machine-controller-manager#935]
• [OPERATOR] Fixed a bug where failure of machine initialization caused label updates to not happen. by @thiyyakat [gardener/machine-controller-manager#940]
• [OPERATOR] Fixed a bug where the Unitialised error code was blocking machine deletion by @rishabh-11 [gardener/machine-controller-manager#928]

🏃 Others

• [DEVELOPER] The following dependencies are updated:
  • k8s.io/* : v0.29.3 -> v0.31.0 by @ary1992 [gardener/machine-controller-manager#938]
• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] Drain timeout is now correctly honored for Pod eviction during Machine Drain by @sssash18 [gardener/machine-controller-manager#920]
• [OPERATOR] Golang version used is now upgraded to 1.22.5 by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] getVMStatus always redirects to InitiateDrain. It also populates the node label on the machine object by checking node.gardener.cloud/machine-name label on the nodes. by @thiyyakat [gardener/machine-controller-manager#940]

📖 Documentation

• [OPERATOR] Broken API doc links are now fixed by @rishabh-11 [gardener/machine-controller-manager#927]

[gardener/machine-controller-manager-provider-gcp]

🏃 Others

• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager-provider-gcp#127]
• [USER] Golang version updated to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-gcp#126]
• [DEVELOPER] MCM can now retrieve the project ID from a "projectID" data key, allowing support for credential configurations that do not directly contain the project ID. One such case is a workload identity credential configuration. by @dimityrmirchev [gardener/machine-controller-manager-provider-gcp#130]

Helm Charts

• admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.40.0
• admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.40.0
• provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.40.0

Docker Images

• gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.40.0
• gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.40.0

Update provider-aws to 1.58.3

[gardener/gardener-extension-provider-aws]

🏃 Others

• [OPERATOR] Ignore alreadyDetached errors when detaching instead of erroring out by @kon-angelo [#1118]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.3
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.3
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.3

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.3
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.3

Update gardener-controlplane to 1.107.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue where the dashboard's service account lacked permission to create leases in the garden namespace when spec.virtualCluster.gardener.gardenerDashboard.gitHub was configured in the Garden resource. by @petersutter [#10835]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.1

Update gardener-controlplane to 1.107.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue where the dashboard's service account lacked permission to create leases in the garden namespace when spec.virtualCluster.gardener.gardenerDashboard.gitHub was configured in the Garden resource. by @petersutter [#10835]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.1

Update gardenlet to 1.107.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue where the dashboard's service account lacked permission to create leases in the garden namespace when spec.virtualCluster.gardener.gardenerDashboard.gitHub was configured in the Garden resource. by @petersutter [#10835]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.1
• resource-manager: `europe-docker.pkg.dev/ga...

v1.107.2-0

Release Notes v1.107

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update provider-hcloud to 0.6.32

[gardener-extension-provider-hcloud] v0.6.32

Update provider-aws to 1.58.0

[gardener/gardener-extension-provider-aws]

✨ New Features

• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#1047]
• [USER] Enable support for the field shoot.Spec.CloudProfile alongside cloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#1000]
• [USER] The provider-aws extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#1055]

🐛 Bug Fixes

• [OPERATOR] An issue causing Shoot force deletion to fail because the control plane webhook failing to get the Infrastructure object from the Seed cluster is now fixed. The control plane webhook now reads the infrastructureConfig from the Shoot spec in the Cluster resource. Previously, it was fetching the Infrastructure object from the Seed cluster and was reading the infrastructureConfig from there. by @Kostov6 [#1068]
• [USER] Fix cleanup of routing table associations by @hebelsan [#1083]

🏃 Others

• [OPERATOR] Create IPv6 ServiceCIDR and write IPv6 ranges to Infra.Status.Networking by @axel7born [#1081]
• [OPERATOR] The shoot-webhook that mutates the addons-nginx-ingress-controller ConfigMap does now specify object selector. The webhook will now intercept only requests for the addons-nginx-ingress-controller ConfigMap. by @ialidzhikov [#988]
• [OPERATOR] The aws-ipam-controller is enabled for IPv6 and dual stack shoot clusters. It replaces the IPAM of the cloud-controller-manager and kube-controller-manager and supports additionally prefix delegation in case of IPv6 or dual stack. by @DockToFuture [#984]
• [OPERATOR] Add ipv6 support to deploy IPv6 shoots. by @axel7born [#1024]
• [OPERATOR] Enable nat64 and dns64 for IPv6 shoot clusters. by @DockToFuture [#1082]
• [OPERATOR] Fix error classification when deleting DNS record sets by @hebelsan [#1033]
• [OPERATOR] The provider-aws extension no longer configures min/maxAllowed in any managed VPA resource. by @hebelsan [#1070]
• [OPERATOR] The following images are updated:
  registry.k8s.io/provider-aws/aws-ebs-csi-driver: v1.29.0 -> v1.35.0 by @scs-gardener-team-gitlab [#1080]
• [OPERATOR] aws-custom-route-controller is disabled for IPv6. by @DockToFuture [#1088]
• [OPERATOR] Update cloud-provider images including CSI driver images by @hebelsan [#1072]
• [OPERATOR] Add flow migration integration test by @kon-angelo [#1046]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#1049]

[gardener/machine-controller-manager-provider-aws]

🏃 Others

• [OPERATOR] InitializeMachine returns Uninitialized error code if VM is not found. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Set PrimaryIpv6 flag for instances with IPv6 addresses. by @axel7born [gardener/machine-controller-manager-provider-aws#174]
• [OPERATOR] Use ProviderID as a fallback for fetching the VM. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Golang version used upgraded to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-aws#166]
• [OPERATOR] Golangci-lint will now be used as the linter instead of the older golint. by @aaronfern [gardener/machine-controller-manager-provider-aws#168]

[gardener/machine-controller-manager]

✨ New Features

• [DEVELOPER] MCM adds the name of the machine to node.gardener.cloud/machine-name label of the corresponding node. by @oliver-goetz [gardener/machine-controller-manager#919]
• [DEVELOPER] MCM replaces the magic string <<MACHINE_NAME>> in user data with the name of the machine when it is bootstrapped. by @oliver-goetz [gardener/machine-controller-manager#919]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where failure of machine initialization caused label updates to not happen. by @thiyyakat [gardener/machine-controller-manager#940]
• [DEVELOPER] Fixed bug that removed the shoot-- prefix from control cluster namespace for integration tests using the gardener local setup case by @thiyyakat [gardener/machine-controller-manager#935]

🏃 Others

• [OPERATOR] getVMStatus always redirects to InitiateDrain. It also populates the node label on the machine object by checking node.gardener.cloud/machine-name label on the nodes. by @thiyyakat [gardener/machine-controller-manager#940]
• [OPERATOR] Drain timeout is now correctly honored for Pod eviction during Machine Drain by @sssash18 [gardener/machine-controller-manager#920]
• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] Golang version used is now upgraded to 1.22.5 by @aaronfern [gardener/machine-controller-manager#929]
• [DEVELOPER] The following dependencies are updated:
  • k8s.io/* : v0.29.3 -> v0.31.0 by @ary1992 [gardener/machine-controller-manager#938]

📖 Documentation

• [OPERATOR] Broken API doc links are now fixed by @rishabh-11 [gardener/machine-controller-manager#927]

Update provider-gcp to 1.39.1

[gardener/gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] Fix an issue where the firewall rules where created with the wrong priority when using the flow reconciler. by @kon-angelo [#873]

Helm Charts

• admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.39.1
• admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.39.1
• provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.39.1

Docker Images

• gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.39.1
• gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.39.1

Update cloudprofiles to 0.7.19

Full Changelog: gardener-community/cloudprofiles@0.7.18...0.7.19

Update backup-s3 to 0.6.0

General Changes

• Bump g/g to 1.95.6 (#9) @robertvolkmann
• Add Service in order to generate correct NetworkPolicies (#8) @maboehm

Update shoot-oidc-service to 0.28.0

[gardener/gardener-extension-shoot-oidc-service]

🏃 Others

• [OPERATOR] The extension and OWA do not set cpu and memory limits. VPA is utilised to set proper recommendations. by @dimityrmirchev [#243]

[gardener/oidc-webhook-authenticator]

🏃 Others

• [OPERATOR] OWA is now built with go version 1.23.1. by @dimityrmirchev [gardener/oidc-webhook-authenticator#160]
• [OPERATOR] OWA is now built using go version 1.23.2. by @dimityrmirchev [gardener/oidc-webhook-authenticator#162]

Helm Charts

• shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-oidc-service:v0.28.0

Docker Images

• gardener-extension-shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-oidc-service:v0.28.0

Update provider-aws to 1.58.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix flow: Ignore subnet not found in infra state while deleting routing table associations by @hebelsan [#1098]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.1

Update dashboard to 1.78.0

[gardener/dashboard]

⚠️ Breaking Changes

• [OPERATOR] Cost Object: You must migrate existing configurations to the new format. Previously, the configuration used Values.global.dashboard.frontendConfig.costObject. It should now be updated to Values.global.dashboard.frontendConfig.costObjects, which is a list of objects. Each object in this list must include a type property, alongside existing properties such as title, description, and regex. by @petersutter [#2102]
• [USER] Removed the ability for users to retrieve their token from the My Account page. by @petersutter [#2131]

✨ New Features

• [USER] Header warnings returned by the Kubernetes API server are now displayed as notifications in the Gardener dashboard. This includes important messages like deprecation warnings. Additionally, admission webhooks may provide custom warnings in the headers by @grolu [#2033]
• [USER] Upgraded the code editor from CodeMirror 5 to CodeMirror 6 to enhance performance, modernize the interface, and improve extensibility by @grolu [#2058]
• [USER] Support Azure Cloud Configurati...

v1.107.1-0

Release Notes v1.107

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update provider-hcloud to 0.6.32

[gardener-extension-provider-hcloud] v0.6.32

Update provider-aws to 1.58.0

[gardener/gardener-extension-provider-aws]

✨ New Features

• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#1047]
• [USER] Enable support for the field shoot.Spec.CloudProfile alongside cloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#1000]
• [USER] The provider-aws extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#1055]

🐛 Bug Fixes

• [OPERATOR] An issue causing Shoot force deletion to fail because the control plane webhook failing to get the Infrastructure object from the Seed cluster is now fixed. The control plane webhook now reads the infrastructureConfig from the Shoot spec in the Cluster resource. Previously, it was fetching the Infrastructure object from the Seed cluster and was reading the infrastructureConfig from there. by @Kostov6 [#1068]
• [USER] Fix cleanup of routing table associations by @hebelsan [#1083]

🏃 Others

• [OPERATOR] Create IPv6 ServiceCIDR and write IPv6 ranges to Infra.Status.Networking by @axel7born [#1081]
• [OPERATOR] The shoot-webhook that mutates the addons-nginx-ingress-controller ConfigMap does now specify object selector. The webhook will now intercept only requests for the addons-nginx-ingress-controller ConfigMap. by @ialidzhikov [#988]
• [OPERATOR] The aws-ipam-controller is enabled for IPv6 and dual stack shoot clusters. It replaces the IPAM of the cloud-controller-manager and kube-controller-manager and supports additionally prefix delegation in case of IPv6 or dual stack. by @DockToFuture [#984]
• [OPERATOR] Add ipv6 support to deploy IPv6 shoots. by @axel7born [#1024]
• [OPERATOR] Enable nat64 and dns64 for IPv6 shoot clusters. by @DockToFuture [#1082]
• [OPERATOR] Fix error classification when deleting DNS record sets by @hebelsan [#1033]
• [OPERATOR] The provider-aws extension no longer configures min/maxAllowed in any managed VPA resource. by @hebelsan [#1070]
• [OPERATOR] The following images are updated:
  registry.k8s.io/provider-aws/aws-ebs-csi-driver: v1.29.0 -> v1.35.0 by @scs-gardener-team-gitlab [#1080]
• [OPERATOR] aws-custom-route-controller is disabled for IPv6. by @DockToFuture [#1088]
• [OPERATOR] Update cloud-provider images including CSI driver images by @hebelsan [#1072]
• [OPERATOR] Add flow migration integration test by @kon-angelo [#1046]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#1049]

[gardener/machine-controller-manager-provider-aws]

🏃 Others

• [OPERATOR] InitializeMachine returns Uninitialized error code if VM is not found. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Set PrimaryIpv6 flag for instances with IPv6 addresses. by @axel7born [gardener/machine-controller-manager-provider-aws#174]
• [OPERATOR] Use ProviderID as a fallback for fetching the VM. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Golang version used upgraded to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-aws#166]
• [OPERATOR] Golangci-lint will now be used as the linter instead of the older golint. by @aaronfern [gardener/machine-controller-manager-provider-aws#168]

[gardener/machine-controller-manager]

✨ New Features

• [DEVELOPER] MCM adds the name of the machine to node.gardener.cloud/machine-name label of the corresponding node. by @oliver-goetz [gardener/machine-controller-manager#919]
• [DEVELOPER] MCM replaces the magic string <<MACHINE_NAME>> in user data with the name of the machine when it is bootstrapped. by @oliver-goetz [gardener/machine-controller-manager#919]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where failure of machine initialization caused label updates to not happen. by @thiyyakat [gardener/machine-controller-manager#940]
• [DEVELOPER] Fixed bug that removed the shoot-- prefix from control cluster namespace for integration tests using the gardener local setup case by @thiyyakat [gardener/machine-controller-manager#935]

🏃 Others

• [OPERATOR] getVMStatus always redirects to InitiateDrain. It also populates the node label on the machine object by checking node.gardener.cloud/machine-name label on the nodes. by @thiyyakat [gardener/machine-controller-manager#940]
• [OPERATOR] Drain timeout is now correctly honored for Pod eviction during Machine Drain by @sssash18 [gardener/machine-controller-manager#920]
• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] Golang version used is now upgraded to 1.22.5 by @aaronfern [gardener/machine-controller-manager#929]
• [DEVELOPER] The following dependencies are updated:
  • k8s.io/* : v0.29.3 -> v0.31.0 by @ary1992 [gardener/machine-controller-manager#938]

📖 Documentation

• [OPERATOR] Broken API doc links are now fixed by @rishabh-11 [gardener/machine-controller-manager#927]

Update provider-gcp to 1.39.1

[gardener/gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] Fix an issue where the firewall rules where created with the wrong priority when using the flow reconciler. by @kon-angelo [#873]

Helm Charts

• admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.39.1
• admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.39.1
• provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.39.1

Docker Images

• gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.39.1
• gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.39.1

Update cloudprofiles to 0.7.19

Full Changelog: gardener-community/cloudprofiles@0.7.18...0.7.19

Update backup-s3 to 0.6.0

General Changes

• Bump g/g to 1.95.6 (#9) @robertvolkmann
• Add Service in order to generate correct NetworkPolicies (#8) @maboehm

Update shoot-oidc-service to 0.28.0

[gardener/gardener-extension-shoot-oidc-service]

🏃 Others

• [OPERATOR] The extension and OWA do not set cpu and memory limits. VPA is utilised to set proper recommendations. by @dimityrmirchev [#243]

[gardener/oidc-webhook-authenticator]

🏃 Others

• [OPERATOR] OWA is now built with go version 1.23.1. by @dimityrmirchev [gardener/oidc-webhook-authenticator#160]
• [OPERATOR] OWA is now built using go version 1.23.2. by @dimityrmirchev [gardener/oidc-webhook-authenticator#162]

Helm Charts

• shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-oidc-service:v0.28.0

Docker Images

• gardener-extension-shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-oidc-service:v0.28.0

Update provider-aws to 1.58.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix flow: Ignore subnet not found in infra state while deleting routing table associations by @hebelsan [#1098]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.1

Update dashboard to 1.78.0

[gardener/dashboard]

⚠️ Breaking Changes

• [OPERATOR] Cost Object: You must migrate existing configurations to the new format. Previously, the configuration used Values.global.dashboard.frontendConfig.costObject. It should now be updated to Values.global.dashboard.frontendConfig.costObjects, which is a list of objects. Each object in this list must include a type property, alongside existing properties such as title, description, and regex. by @petersutter [#2102]
• [USER] Removed the ability for users to retrieve their token from the My Account page. by @petersutter [#2131]

✨ New Features

• [USER] Header warnings returned by the Kubernetes API server are now displayed as notifications in the Gardener dashboard. This includes important messages like deprecation warnings. Additionally, admission webhooks may provide custom warnings in the headers by @grolu [#2033]
• [USER] Upgraded the code editor from CodeMirror 5 to CodeMirror 6 to enhance performance, modernize the interface, and improve extensibility by @grolu [#2058]
• [USER] Support Azure Cloud Configurati...

v1.107.0-0

Release Notes v1.107

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update provider-hcloud to 0.6.32

[gardener-extension-provider-hcloud] v0.6.32

Update provider-aws to 1.58.0

[gardener/gardener-extension-provider-aws]

✨ New Features

• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#1047]
• [USER] Enable support for the field shoot.Spec.CloudProfile alongside cloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#1000]
• [USER] The provider-aws extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#1055]

🐛 Bug Fixes

• [OPERATOR] An issue causing Shoot force deletion to fail because the control plane webhook failing to get the Infrastructure object from the Seed cluster is now fixed. The control plane webhook now reads the infrastructureConfig from the Shoot spec in the Cluster resource. Previously, it was fetching the Infrastructure object from the Seed cluster and was reading the infrastructureConfig from there. by @Kostov6 [#1068]
• [USER] Fix cleanup of routing table associations by @hebelsan [#1083]

🏃 Others

• [OPERATOR] Create IPv6 ServiceCIDR and write IPv6 ranges to Infra.Status.Networking by @axel7born [#1081]
• [OPERATOR] The shoot-webhook that mutates the addons-nginx-ingress-controller ConfigMap does now specify object selector. The webhook will now intercept only requests for the addons-nginx-ingress-controller ConfigMap. by @ialidzhikov [#988]
• [OPERATOR] The aws-ipam-controller is enabled for IPv6 and dual stack shoot clusters. It replaces the IPAM of the cloud-controller-manager and kube-controller-manager and supports additionally prefix delegation in case of IPv6 or dual stack. by @DockToFuture [#984]
• [OPERATOR] Add ipv6 support to deploy IPv6 shoots. by @axel7born [#1024]
• [OPERATOR] Enable nat64 and dns64 for IPv6 shoot clusters. by @DockToFuture [#1082]
• [OPERATOR] Fix error classification when deleting DNS record sets by @hebelsan [#1033]
• [OPERATOR] The provider-aws extension no longer configures min/maxAllowed in any managed VPA resource. by @hebelsan [#1070]
• [OPERATOR] The following images are updated:
  registry.k8s.io/provider-aws/aws-ebs-csi-driver: v1.29.0 -> v1.35.0 by @scs-gardener-team-gitlab [#1080]
• [OPERATOR] aws-custom-route-controller is disabled for IPv6. by @DockToFuture [#1088]
• [OPERATOR] Update cloud-provider images including CSI driver images by @hebelsan [#1072]
• [OPERATOR] Add flow migration integration test by @kon-angelo [#1046]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#1049]

[gardener/machine-controller-manager-provider-aws]

🏃 Others

• [OPERATOR] InitializeMachine returns Uninitialized error code if VM is not found. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Set PrimaryIpv6 flag for instances with IPv6 addresses. by @axel7born [gardener/machine-controller-manager-provider-aws#174]
• [OPERATOR] Use ProviderID as a fallback for fetching the VM. by @thiyyakat [gardener/machine-controller-manager-provider-aws#173]
• [OPERATOR] Golang version used upgraded to 1.22.5 by @rishabh-11 [gardener/machine-controller-manager-provider-aws#166]
• [OPERATOR] Golangci-lint will now be used as the linter instead of the older golint. by @aaronfern [gardener/machine-controller-manager-provider-aws#168]

[gardener/machine-controller-manager]

✨ New Features

• [DEVELOPER] MCM adds the name of the machine to node.gardener.cloud/machine-name label of the corresponding node. by @oliver-goetz [gardener/machine-controller-manager#919]
• [DEVELOPER] MCM replaces the magic string <<MACHINE_NAME>> in user data with the name of the machine when it is bootstrapped. by @oliver-goetz [gardener/machine-controller-manager#919]

🐛 Bug Fixes

• [OPERATOR] Fixed a bug where failure of machine initialization caused label updates to not happen. by @thiyyakat [gardener/machine-controller-manager#940]
• [DEVELOPER] Fixed bug that removed the shoot-- prefix from control cluster namespace for integration tests using the gardener local setup case by @thiyyakat [gardener/machine-controller-manager#935]

🏃 Others

• [OPERATOR] getVMStatus always redirects to InitiateDrain. It also populates the node label on the machine object by checking node.gardener.cloud/machine-name label on the nodes. by @thiyyakat [gardener/machine-controller-manager#940]
• [OPERATOR] Drain timeout is now correctly honored for Pod eviction during Machine Drain by @sssash18 [gardener/machine-controller-manager#920]
• [OPERATOR] golangci-lint will now be used as the linter instead of the older golint by @aaronfern [gardener/machine-controller-manager#929]
• [OPERATOR] Golang version used is now upgraded to 1.22.5 by @aaronfern [gardener/machine-controller-manager#929]
• [DEVELOPER] The following dependencies are updated:
  • k8s.io/* : v0.29.3 -> v0.31.0 by @ary1992 [gardener/machine-controller-manager#938]

📖 Documentation

• [OPERATOR] Broken API doc links are now fixed by @rishabh-11 [gardener/machine-controller-manager#927]

Update provider-gcp to 1.39.1

[gardener/gardener-extension-provider-gcp]

🏃 Others

• [OPERATOR] Fix an issue where the firewall rules where created with the wrong priority when using the flow reconciler. by @kon-angelo [#873]

Helm Charts

• admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.39.1
• admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.39.1
• provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.39.1

Docker Images

• gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.39.1
• gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.39.1

Update cloudprofiles to 0.7.19

Full Changelog: gardener-community/cloudprofiles@0.7.18...0.7.19

Update backup-s3 to 0.6.0

General Changes

• Bump g/g to 1.95.6 (#9) @robertvolkmann
• Add Service in order to generate correct NetworkPolicies (#8) @maboehm

Update shoot-oidc-service to 0.28.0

[gardener/gardener-extension-shoot-oidc-service]

🏃 Others

• [OPERATOR] The extension and OWA do not set cpu and memory limits. VPA is utilised to set proper recommendations. by @dimityrmirchev [#243]

[gardener/oidc-webhook-authenticator]

🏃 Others

• [OPERATOR] OWA is now built with go version 1.23.1. by @dimityrmirchev [gardener/oidc-webhook-authenticator#160]
• [OPERATOR] OWA is now built using go version 1.23.2. by @dimityrmirchev [gardener/oidc-webhook-authenticator#162]

Helm Charts

• shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-oidc-service:v0.28.0

Docker Images

• gardener-extension-shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-oidc-service:v0.28.0

Update provider-aws to 1.58.1

[gardener/gardener-extension-provider-aws]

🐛 Bug Fixes

• [OPERATOR] Fix flow: Ignore subnet not found in infra state while deleting routing table associations by @hebelsan [#1098]

Helm Charts

• admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.58.1
• admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.58.1
• provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.58.1

Docker Images

• gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.58.1
• gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.58.1

Update dashboard to 1.78.0

[gardener/dashboard]

⚠️ Breaking Changes

• [OPERATOR] Cost Object: You must migrate existing configurations to the new format. Previously, the configuration used Values.global.dashboard.frontendConfig.costObject. It should now be updated to Values.global.dashboard.frontendConfig.costObjects, which is a list of objects. Each object in this list must include a type property, alongside existing properties such as title, description, and regex. by @petersutter [#2102]
• [USER] Removed the ability for users to retrieve their token from the My Account page. by @petersutter [#2131]

✨ New Features

• [USER] Header warnings returned by the Kubernetes API server are now displayed as notifications in the Gardener dashboard. This includes important messages like deprecation warnings. Additionally, admission webhooks may provide custom warnings in the headers by @grolu [#2033]
• [USER] Upgraded the code editor from CodeMirror 5 to CodeMirror 6 to enhance performance, modernize the interface, and improve extensibility by @grolu [#2058]
• [USER] Support Azure Cloud Configurati...

v1.106.2-0

Release Notes v1.106

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update provider-gcp to 1.39.0

[gardener/gardener-extension-provider-gcp]

📰 Noteworthy

• [USER] In order to reduce log events, only the minimal required changes will be made when applying firewall rules using the flow-reconciler. This matches the behaviour of the Terraform-reconciler. by @AndreasBurger [#831]
• [OPERATOR] Switch to upstream CCM for kubernetes versions greater than 1.31.0 by @AndreasBurger [#842]

✨ New Features

• [USER] Enable support for the field shoot.Spec.CloudProfile alongside shoot.Spec.CloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#853]
• [USER] The provider-gcp extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#844]
• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#832]

🏃 Others

• [OPERATOR] The provider-gcp extension no longer configures min/maxAllowed in any managed VPA resource. by @AndreasBurger [#854]
• [OPERATOR] Update CCM and CSI-sidecar containers to latest version by @AndreasBurger [#816]
• [OPERATOR] Disable soft-delete for new GCP backupbuckets. by @kon-angelo [#834]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#841]

Helm Charts

• admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.39.0
• admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.39.0
• provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.39.0

Docker Images

• gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.39.0
• gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.39.0

Update shoot-networking-problemdetector to 0.25.0

[gardener/network-problem-detector]

📰 Noteworthy

• [OPERATOR] gosec was introduced for Static Application Security Testing (SAST). by @MartinWeindel [gardener/network-problem-detector#75]

✨ New Features

• [USER] Support tcp checks for ipv6 endpoints. by @DockToFuture [gardener/network-problem-detector#76]

🏃 Others

• [OPERATOR] Bumps golang from 1.22.6 to 1.23.0. by @dependabot[bot] [gardener/network-problem-detector#71]
• [OPERATOR] Bumps golang from 1.23.0 to 1.23.1. by @dependabot[bot] [gardener/network-problem-detector#73]
• [OPERATOR] Bumps golang from 1.22.5 to 1.22.6. by @dependabot[bot] [gardener/network-problem-detector#70]

[gardener/gardener-extension-shoot-networking-problemdetector]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#166]

🏃 Others

• [OPERATOR] Bumps github.com/gardener/gardener from 1.100.0 to 1.101.0. by @dependabot[bot] [#170]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.103.0 to 1.105.0. by @dependabot[bot] [#181]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.101.0 to 1.102.0. by @dependabot[bot] [#174]
• [OPERATOR] gosec was introduced for Static Application Security Testing (SAST). by @ScheererJ [#182]
• [OPERATOR] Bumps golang from 1.23.1 to 1.23.2. by @dependabot[bot] [#180]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.99.0 to 1.100.0. by @dependabot[bot] [#167]

Helm Charts

• shoot-networking-problemdetector: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-networking-problemdetector:v0.25.0

Docker Images

• gardener-extension-shoot-networking-problemdetector: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-problemdetector:v0.25.0

Update shoot-flux to 0.8.0

What's Changed

• Add extraSecrets option to create additional Secrets by @maboehm in stackitcloud/gardener-extension-shoot-flux#94
• 🤖 Update k8s.io/utils digest to 49e7df5 by @renovate in stackitcloud/gardener-extension-shoot-flux#90
• 🤖 Update module github.com/ironcore-dev/vgopath to v0.1.6 by @renovate in stackitcloud/gardener-extension-shoot-flux#91
• 🤖 Update module github.com/onsi/ginkgo/v2 to v2.20.2 by @renovate in stackitcloud/gardener-extension-shoot-flux#96
• 🤖 Update module github.com/onsi/gomega to v1.34.2 by @renovate in stackitcloud/gardener-extension-shoot-flux#92
• 🤖 Update module golang.org/x/tools to v0.26.0 by @renovate in stackitcloud/gardener-extension-shoot-flux#86
• 🤖 Update k8s and gardener packages (patch) by @renovate in stackitcloud/gardener-extension-shoot-flux#95
• bump Gardener to v1.99 by @Duciwuci in stackitcloud/gardener-extension-shoot-flux#97

New Contributors

• @Duciwuci made their first contribution in stackitcloud/gardener-extension-shoot-flux#97

Full Changelog: stackitcloud/gardener-extension-shoot-flux@v0.7.0...v0.8.0

Update gardener-controlplane to 1.105.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] An issue was fixed that cause gardener-operator to deploy the gardenlet into the runtime cluster instead of another intended remote cluster. by @timuthy [#10631]
• [OPERATOR] Fix a bug where the shoot care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and migrated between secretBindingName and credentialsBindingName until the shoot is reconciled.. by @vpnachev [#10674]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.1

Update gardener-controlplane to 1.105.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] An issue was fixed that cause gardener-operator to deploy the gardenlet into the runtime cluster instead of another intended remote cluster. by @timuthy [#10631]
• [OPERATOR] Fix a bug where the shoot care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and migrated between secretBindingName and credentialsBindingName until the shoot is reconciled.. by @vpnachev [#10674]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.1

Update gardenlet to 1.105.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] An issue was fixed that cause gardener-operator to deploy the gardenlet into the runtime cluster instead of another intended remote cluster. by @timuthy [#10631]
• [OPERATOR] Fix a bug where the shoot care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and migrated between secretBindingName and credentialsBindingName until the shoot is reconciled.. by @vpnachev [#10674]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.1
• gardenlet: `europe-docker.pkg.dev/gardener-proje...

v1.105.3-0

Release Notes v1.105

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update gardener-controlplane to 1.104.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] Fix a regression that caused gardenlet to not be able to migrate deprecated failure-domain.beta.kubernetes.io labels to topology.kubernetes.io due to a removed RBAC rule required to patch PersistentVolumes. by @plkokanov [#10578]

🏃 Others

• [OPERATOR] The gardener/etcd-druid image has been updated to v0.22.7. Release Notes by @ishan16696 [#10592]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.1

Update gardener-controlplane to 1.104.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] Fix a regression that caused gardenlet to not be able to migrate deprecated failure-domain.beta.kubernetes.io labels to topology.kubernetes.io due to a removed RBAC rule required to patch PersistentVolumes. by @plkokanov [#10578]

🏃 Others

• [OPERATOR] The gardener/etcd-druid image has been updated to v0.22.7. Release Notes by @ishan16696 [#10592]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.1

Update gardenlet to 1.104.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] Fix a regression that caused gardenlet to not be able to migrate deprecated failure-domain.beta.kubernetes.io labels to topology.kubernetes.io due to a removed RBAC rule required to patch PersistentVolumes. by @plkokanov [#10578]

🏃 Others

• [OPERATOR] The gardener/etcd-druid image has been updated to v0.22.7. Release Notes by @ishan16696 [#10592]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.1

Update networking-calico to 1.42.0

[gardener/gardener-extension-networking-calico]

🏃 Others

• [OPERATOR] Update calico to v3.28.2. by @DockToFuture [#492]
• [OPERATOR] Fix networkConfig for IPv6. by @axel7born [#486]
• [OPERATOR] In VPA autoscaling mode, calico-node should be disrupted less often as side car containers are no longer considered by VPA. Additionally, the minimum/maximum restriction are removed, which can lead to less memory consumption. by @ScheererJ [#489]
• [OPERATOR] The networking calico extension no longer configures min/maxAllowed in any managed VPA resource. by @ScheererJ [#491]

Helm Charts

• admission-calico-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-calico-application:v1.42.0
• admission-calico-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-calico-runtime:v1.42.0
• networking-calico: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/networking-calico:v1.42.0

Docker Images

• gardener-extension-admission-calico: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-calico:v1.42.0
• gardener-extension-networking-calico: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-calico:v1.42.0

Update networking-cilium to 1.37.0

[gardener/gardener-extension-networking-cilium]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#369]

🏃 Others

• [OPERATOR] A priorityClassName can now be set for the admission deployment via the gardener-extension-admission-cilium Helm chart. by @timuthy [#362]
• [OPERATOR] Update cilium to v1.16.1 and enable cilium-envoy to enable features like (Ingress, Gateway API, Network Policies with L7 functionality, L7 Protocol Visibility). by @DockToFuture [#409]
• [OPERATOR] The networking cilium extension no longer configures min/maxAllowed in any managed VPA resource. by @ScheererJ [#408]
• [OPERATOR] Update to cilium v1.16.2. by @DockToFuture [#411]

Helm Charts

• admission-cilium-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-application:v1.37.0
• admission-cilium-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-runtime:v1.37.0
• networking-cilium: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/networking-cilium:v1.37.0

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.37.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.37.0

Update provider-azure to 1.47.3

[gardener/gardener-extension-provider-azure]

🏃 Others

• [OPERATOR] Do not reconcile user-configured NAT Gateways in the gardener subnet. by @kon-angelo [#979]

Helm Charts

• admission-azure-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-application:v1.47.3
• admission-azure-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-runtime:v1.47.3
• provider-azure: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-azure:v1.47.3

Docker Images

• gardener-extension-admission-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.47.3
• gardener-extension-provider-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.47.3

Update gardener-controlplane to 1.105.0

[gardener/gardener]

📰 Noteworthy

• [OPERATOR] The VPAForETCD and VPAAndHPAForAPIServer feature gates have been promoted to GA and locked to true. by @plkokanov [#10599]
• [USER] The limitation of having at maximum ~80 worker pools in Shoots has been lifted. Much higher numbers should be possible now (concrete limit depends on the amount of configuration within the pools (e.g., lab...

v1.106.1-0

Release Notes v1.106

Yake release notes and upgrade guide

Related upstream release notes / changelogs

Update provider-gcp to 1.39.0

[gardener/gardener-extension-provider-gcp]

📰 Noteworthy

• [USER] In order to reduce log events, only the minimal required changes will be made when applying firewall rules using the flow-reconciler. This matches the behaviour of the Terraform-reconciler. by @AndreasBurger [#831]
• [OPERATOR] Switch to upstream CCM for kubernetes versions greater than 1.31.0 by @AndreasBurger [#842]

✨ New Features

• [USER] Enable support for the field shoot.Spec.CloudProfile alongside shoot.Spec.CloudProfileName and enable the future use of NamespacedCloudProfile. by @LucaBernstein [#853]
• [USER] The provider-gcp extension does now support shoot clusters with Kubernetes version 1.31. You should consider the Kubernetes release notes before upgrading to 1.31. by @ialidzhikov [#844]
• [USER] The admission webhook now validates CredentialsBindings. by @dimityrmirchev [#832]

🏃 Others

• [OPERATOR] The provider-gcp extension no longer configures min/maxAllowed in any managed VPA resource. by @AndreasBurger [#854]
• [OPERATOR] Update CCM and CSI-sidecar containers to latest version by @AndreasBurger [#816]
• [OPERATOR] Disable soft-delete for new GCP backupbuckets. by @kon-angelo [#834]
• [DEVELOPER] Update gardener/gardener to 1.103.0 and golang to 1.23.0 by @hebelsan [#841]

Helm Charts

• admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.39.0
• admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.39.0
• provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.39.0

Docker Images

• gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.39.0
• gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.39.0

Update shoot-networking-problemdetector to 0.25.0

[gardener/network-problem-detector]

📰 Noteworthy

• [OPERATOR] gosec was introduced for Static Application Security Testing (SAST). by @MartinWeindel [gardener/network-problem-detector#75]

✨ New Features

• [USER] Support tcp checks for ipv6 endpoints. by @DockToFuture [gardener/network-problem-detector#76]

🏃 Others

• [OPERATOR] Bumps golang from 1.22.6 to 1.23.0. by @dependabot[bot] [gardener/network-problem-detector#71]
• [OPERATOR] Bumps golang from 1.23.0 to 1.23.1. by @dependabot[bot] [gardener/network-problem-detector#73]
• [OPERATOR] Bumps golang from 1.22.5 to 1.22.6. by @dependabot[bot] [gardener/network-problem-detector#70]

[gardener/gardener-extension-shoot-networking-problemdetector]

✨ New Features

• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#166]

🏃 Others

• [OPERATOR] Bumps github.com/gardener/gardener from 1.100.0 to 1.101.0. by @dependabot[bot] [#170]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.103.0 to 1.105.0. by @dependabot[bot] [#181]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.101.0 to 1.102.0. by @dependabot[bot] [#174]
• [OPERATOR] gosec was introduced for Static Application Security Testing (SAST). by @ScheererJ [#182]
• [OPERATOR] Bumps golang from 1.23.1 to 1.23.2. by @dependabot[bot] [#180]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.99.0 to 1.100.0. by @dependabot[bot] [#167]

Helm Charts

• shoot-networking-problemdetector: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-networking-problemdetector:v0.25.0

Docker Images

• gardener-extension-shoot-networking-problemdetector: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-problemdetector:v0.25.0

Update shoot-flux to 0.8.0

What's Changed

• Add extraSecrets option to create additional Secrets by @maboehm in stackitcloud/gardener-extension-shoot-flux#94
• 🤖 Update k8s.io/utils digest to 49e7df5 by @renovate in stackitcloud/gardener-extension-shoot-flux#90
• 🤖 Update module github.com/ironcore-dev/vgopath to v0.1.6 by @renovate in stackitcloud/gardener-extension-shoot-flux#91
• 🤖 Update module github.com/onsi/ginkgo/v2 to v2.20.2 by @renovate in stackitcloud/gardener-extension-shoot-flux#96
• 🤖 Update module github.com/onsi/gomega to v1.34.2 by @renovate in stackitcloud/gardener-extension-shoot-flux#92
• 🤖 Update module golang.org/x/tools to v0.26.0 by @renovate in stackitcloud/gardener-extension-shoot-flux#86
• 🤖 Update k8s and gardener packages (patch) by @renovate in stackitcloud/gardener-extension-shoot-flux#95
• bump Gardener to v1.99 by @Duciwuci in stackitcloud/gardener-extension-shoot-flux#97

New Contributors

• @Duciwuci made their first contribution in stackitcloud/gardener-extension-shoot-flux#97

Full Changelog: stackitcloud/gardener-extension-shoot-flux@v0.7.0...v0.8.0

Update gardener-controlplane to 1.105.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] An issue was fixed that cause gardener-operator to deploy the gardenlet into the runtime cluster instead of another intended remote cluster. by @timuthy [#10631]
• [OPERATOR] Fix a bug where the shoot care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and migrated between secretBindingName and credentialsBindingName until the shoot is reconciled.. by @vpnachev [#10674]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.1

Update gardener-controlplane to 1.105.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] An issue was fixed that cause gardener-operator to deploy the gardenlet into the runtime cluster instead of another intended remote cluster. by @timuthy [#10631]
• [OPERATOR] Fix a bug where the shoot care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and migrated between secretBindingName and credentialsBindingName until the shoot is reconciled.. by @vpnachev [#10674]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.1

Update gardenlet to 1.105.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] An issue was fixed that cause gardener-operator to deploy the gardenlet into the runtime cluster instead of another intended remote cluster. by @timuthy [#10631]
• [OPERATOR] Fix a bug where the shoot care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and migrated between secretBindingName and credentialsBindingName until the shoot is reconciled.. by @vpnachev [#10674]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.1
• gardenlet: `europe-docker.pkg.dev/gardener-proje...