Update module github.com/gardener/gardener to v1.116.1

[gardener-ci-robot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/gardener/gardener	require	minor	v1.115.0 -> v1.116.1

---

Release Notes

gardener/gardener (github.com/gardener/gardener)

v1.116.1

Compare Source

[gardener/gardener]

🐛 Bug Fixes

• [USER] An issue causing the cloudprovider Secret to contain both static credentials and workload identity config, which are mutually exclusive, when migrating to workload identity is now fixed. by @​dimityrmirchev [#​11847]
• [DEVELOPER] Fix malformed file path error on go get github.com/gardener/[email protected] by @​MartinWeindel [#​11820]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.116.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.116.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.116.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.116.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.116.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.116.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.116.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.116.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.116.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.116.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.116.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.116.1

v1.116.0

Compare Source

[gardener/gardener]

⚠️ Breaking Changes

• [DEVELOPER] /hack/generate-crds.sh will no longer generate any CRDs with group=druid.gardener.cloud. One must use etcd-druid API to get the CRDs that serve as a single source of truth for all etcd-druid CRDs. by @​unmarshall [#​11545]
• [DEVELOPER] The extension class field in the generic extension controller was removed. Please use the new field classes instead. by @​timuthy [#​11764]
• [OPERATOR] The etcd-druid's GA-ed UseEtcdWrapper feature gate is removed. It is now unconditionally enabled. It should no longer be passed in gardenlet configuration. Before upgrading to this version of Gardener, check your gardenlet configuration and make sure that it does not specify the etcd-druid's UseEtcdWrapper feature gate. by @​unmarshall [#​11545]
• [OPERATOR] The default etcd-main storage is increased from 10Gi to 25Gi. The etcd-main storage capacity is mutated by provider extensions. Before upgrading to this version of Gardener, make sure the provider extensions which you use mutate the etcd-main capacity. Otherwise, the default storage capacity change in Gardener could be unexpected or breaking. by @​unmarshall [#​11545]
• [OPERATOR] Please note, if you configure spec.extensions in your Garden resource: gardener-operator adds a garden- prefix to all extension resources configured via the Garden. Existing extension resources (not prefixed) will be deleted automatically at the end of the reconciliation. Another, manually triggered Garden reconciliation might be required to reach the desired state of the extension again. by @​timuthy [#​11764]

📰 Noteworthy

• [OPERATOR] NodeAgentAuthorizer feature gate has been promoted to beta and is now enabled by default. by @​oliver-goetz [#​11757]
• [OPERATOR] The feature gate NewVPN has been graduated to GA. It was already enabled by default and can now no longer be turned off. The feature gate will be removed in a future release. by @​domdom82 [#​11714]

✨ New Features

• [OPERATOR] Extensions can be configured for Seeds via spec.extensions to deploy extensions for the seed cluster. Before activating this configuration, please first confirm that the corresponding extension is compatible with the seed use-case. by @​timuthy [#​11764]

🐛 Bug Fixes

• [OPERATOR] The NetworkPolicy controller part of gardener-resource-manager does no longer attempt to create resources in terminating namespaces. by @​rfranzke [#​11808]
• [OPERATOR] An issue causing Shoot reconciliation to fail with no relationship found when the referenced SecretBinding/CredentialsBinding is forcefully deleted (its finalizer is removed by the end user) and then recreated with the same name is now fixed. gardener-admission-controller's authorisation graph is now updated for a Shoot after forceful deletion and recreation of the referenced Secretbinding/CredentialsBinding. by @​MartinWeindel [#​11461]
• [OPERATOR] If the computed pod label selector contains keys exceeding 63 characters, the NetworkPolicy controller part of gardener-resource-manager does now shorten them to make sure they can actually get created. Previously, it failed trying to create them infinitely, resulting in high CPU load in large clusters. by @​rfranzke [#​11808]
• [OPERATOR] Keep operator.gardener.cloud.Extension condition RequiredRuntime = true until deletion of extensions.gardener.cloud.Extensions has completed. by @​MartinWeindel [#​11696]
• [OPERATOR] Fix a bug that appears when migrating a Shoot between Seeds by introducing a new controller, which manages a ShootState finalizer preventing early object deletions. by @​vitanovs [#​11491]

🏃 Others

• [DEVELOPER] Remove the double maintenance of CRDs defined in etcd-druid. Now, gardenlet is using the etcd-druid CRD APIs to get the CRDs ensuring one single source of truth. by @​unmarshall [#​11545]
• [DEVELOPER] Remove the dependency on the github.com/gardener/etcd-druid module and instead introduce dependency on github.com/gardener/etcd-druid/api module. by @​unmarshall [#​11545]
• [OPERATOR] Add optional argument --custom-package <group>=<package> to generate-crds.sh script. by @​MartinWeindel [#​11702]
• [OPERATOR] Remove unnecessary istio loadbalancer annotations from the ClusterIP kube-apiserver service. by @​kon-angelo [#​11728]
• [OPERATOR] Increase VPA client-side rate limits to 200 qps and 250 burst. by @​voelzmo [#​11748]
• [DEPENDENCY] The following dependencies have been updated:
  • envoyproxy/envoy from v1.33.1 to v1.33.2. Release Notes by @​gardener-ci-robot [#​11751]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/prometheus/node-exporter from v1.9.0 to v1.9.1. by @​gardener-ci-robot [#​11784]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/etcd-druid from v0.27.0 to v0.28.0. Release Notes
  • github.com/gardener/etcd-druid from v0.27.0 to v0.28.0. by @​unmarshall [#​11545]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/kiwigrid/k8s-sidecar from 1.30.2 to 1.30.3. by @​gardener-ci-robot [#​11766]
• [DEPENDENCY] The following dependencies have been updated:
  • envoyproxy/envoy from v1.33.0 to v1.33.1. Release Notes by @​gardener-ci-robot [#​11720]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/coreos/etcd from v3.4.36 to v3.5.20. by @​gardener-ci-robot [#​11756]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/coreos/etcd from v3.4.34 to v3.4.36. by @​gardener-ci-robot [#​11755]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.116.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.116.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.116.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.116.0

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.116.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.116.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.116.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.116.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.116.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.116.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.116.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.116.0

v1.115.2

Compare Source

[gardener/gardener]

🐛 Bug Fixes

• [DEVELOPER] An issue causing the Shoot logging test-machinery integration tests to fail is now fixed. by @​ialidzhikov [#​11798]
• [OPERATOR] The step which deploys the source BackupEntry during the restore phase of control plane migration now depends on the successful deployment of the Shoot's control plane namespace. This fixes a potential race condition which could cause the source-etcd-backup Secret to not be deployed in the Shoot's control plane namespace and the subsequent step which copies etcd backups to time out. by @​plkokanov [#​11812]

🏃 Others

• [DEVELOPER] An issue causing the should copy data to pod VPN tunnel test-machinery integration test to fail is now fixed. by @​ialidzhikov [#​11804]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.115.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.115.2
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.115.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.115.2

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.115.2
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.115.2
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.115.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.115.2
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.115.2
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.115.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.115.2
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.115.2

v1.115.1

Compare Source

[gardener/gardener]

🏃 Others

• [DEPENDENCY] The following dependencies have been updated:
  • registry.k8s.io/ingress-nginx/controller-chroot from v1.12.0 to v1.12.1. by @​gardener-ci-robot [#​11739]
• [DEPENDENCY] The following dependencies have been updated:
  • registry.k8s.io/ingress-nginx/controller-chroot from v1.11.4 to v1.11.5. by @​gardener-ci-robot [#​11737]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/machine-controller-manager from v0.57.0 to v0.57.1. Release Notes
  • github.com/gardener/machine-controller-manager from v0.57.0 to v0.57.1. by @​gardener-ci-robot [#​11725]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.115.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.115.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.115.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.115.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.115.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.115.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.115.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.115.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.115.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.115.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.115.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.115.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[gardener-ci-robot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
github.com/gardener/machine-controller-manager	v0.57.0 -> v0.57.1
istio.io/api	v1.24.3 -> v1.24.4
sigs.k8s.io/controller-tools	v0.17.2 -> v0.17.3

[gardener-robot]

@gardener-ci-robot Thank you for your contribution.