🤖 Update module github.com/gardener/gardener to v1.133.0 #212
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.132.1->v1.133.0Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.133.0Compare Source
[github.com/gardener/gardener:v1.133.0]
[OPERATOR][USER]The Shoot.spec.provider.workers[].sysctlsfield is now validated for valid sysctl keys and non-empty values. by @MrBatschner [#13435][DEVELOPER]Thegithub.com/prometheus-operator/prometheus-operator/pkg/apis/monitoringmodule is updated from v0.86.2 to v0.87.0. In the new version the type of the ServiceMonitor's.spec.endpoints[].schemefield is changed fromstringto*monitoringv1.Scheme. by @gardener-ci-robot [#13512][DEVELOPER]The types from the extension healthcheck package which perform health checks on Deployments, StatefulSets and DaemonSets have been renamed. The respective constructor functions now return the concrete types instead of an interface. The types still implement the interface that was returned before. We do not expect this change to affect existing code in the majority of cases. by @dimityrmirchev [#13329]📰 Noteworthy
[OPERATOR]TheShootCredentialsBindingfeature gate ofgardenletis promoted to GA and is unconditionally enabled. by @dimityrmirchev [#13530][OPERATOR]The.status.encryptedResourcesfield for Shoot and Garden resources has been deprecated in favour of the new.status.credentials.encryptionAtRest.resourcesfield. by @AleksandarSavchev [#12894][DEVELOPER]TheValidatingAdmissionPolicyadmission plugin is now enabled by default for the Gardener API server. If you already have the admission plugin enabled, you can remove the explicit enablement after upgrading to this version of Gardener as the plugin is now enabled by default. by @ScheererJ [#13487]✨ New Features
[OPERATOR]A newVPAInPlaceUpdatesfeature gate is introduced for gardenlet and gardener-operator. When enabled, the corresponding VerticalPodAutoscaler resources are mutated to perform in-place updates, (i.e mutated with.spec.updatePolicy.updateMode=InPlaceOrRecreate). For more information, see Enabling In-Place Updates of Pod Resources. by @vitanovs [#12940][OPERATOR]Thegardener.cloud/operationannotation for the Garden resource has been extended to allow specifying multiple operations to be run in parallel. by @AleksandarSavchev [#12717][USER]Thegardener.cloud/operationandmaintenance.gardener.cloud/operationShoot annotations have been extended to allow specifying multiple operations to be run in parallel. by @AleksandarSavchev [#12717]🐛 Bug Fixes
[OPERATOR]A bug where the Shoot relevant ClusterRoleBindings responsible for theAdminKubeconfigandViewerKubeconfigpermissions were deployed into the virtual Garden cluster has been fixed. by @vpnachev [#13492][OPERATOR]Add--skip-metadataflag toctr images pullin the node-agent init script for better container registry compatibility. by @Nuckal777 [#13265][OPERATOR]An issue wherePlutonowould not detect all fields when theOpenTelemetryCollectorfeature gate is enabled is now fixed. by @rrhubenov [#13531][OPERATOR]A bug which made istio-ingressgateway forwarding requests via HTTP1.1 only to kube-apiserver whenIstioTLSTerminationfeature gate is active has been fixed. Exhausted connection limits between istio-ingressgateway and kube-apiserver could be a consequence of this bug. by @oliver-goetz [#13459][OPERATOR]Gardener generally prefers thesshd.serviceunit when trying to enable/disable the SSH server on worker nodes and bastions. If thesshd.serviceunit doesn't exist, it falls back tossh.service. by @timebertt [#13456][OPERATOR]The server block import feature for node-local-dns is now behind a feature gate (CustomDNSServerInNodeLocalDNS). by @DockToFuture [#13511][USER]An issue causing vpa-updater RBAC resources for in-place updates not to be deployed when the VPAInPlaceOrRecreatefeature gate is not explicitly enabled is now fixed. The VPAInPlaceOrRecreatefeature gate is enabled by default with the VPA 1.5.1 version which is used by Gardener. That's why the needed in-place updates RBAC resources are now deployed unconditionally. by @vitanovs [#13499][DEVELOPER]Fixed a bug causing types part of the extension healthcheck package to be injected with clients that they do not actually use. by @dimityrmirchev [#13329]🏃 Others
[OPERATOR]Valican now ingest logs through the standard ingress in theShootcontrol plane even when theOpenTelemetryCollectorfeature gate is enabled. This allows other parties that rely on it to migrate at their pace while it matures. by @rrhubenov [#13446][OPERATOR]gardener-apiserver: TheShootValidatoradmission plugin's type is now changed from mutating to validating. All mutations that were previously performed by theShootValidatorwere extracted over time to the newShootMutatoradmission plugin. by @ialidzhikov [#13352][OPERATOR]Defaulting of the Shoot machine image version (.spec.provider.workers[].machine.image.{name,version}) is moved from theShootValidatorto theShootMutatoradmission plugin. by @ialidzhikov [#13351][OPERATOR]Logging stack components are updated from v0.69.0 to v0.70.0. Along the way, performance optimizations are applied. by @nickytd [#13563][OPERATOR]gardener-apiserver: The Shoot.spec.provider.workers[].machine.imagefield is now a required field. This change has impact only when theShootMutatoradmission plugin (which defaults the machine image) is disabled. The admission plugin is enabled by default. by @ialidzhikov [#13399][OPERATOR]A new fieldspec.resourceswas added to the Garden API. The field can be used by extensions to referenceSecrets andConfigMaps. See this documentation for more details. by @timuthy [#13464][OPERATOR]The Shoot.spec.kubernetes.kubeAPIServer.oidcConfigfield is now validated only in the storage layer. Previously, the required.spec.kubernetes.kubeAPIServer.{oidcConfig,issuerURL}fields were validated in theShootValidatoradmission plugin due to backwards-compatibility reasons. by @dimitar-kostadinov [#13505][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/dns/k8s-dns-node-cachefrom1.26.5to1.26.7. by @gardener-ci-robot [#13474][DEPENDENCY]The following dependencies have been updated:credativ/valifromv2.2.28tov2.2.29. Release Notes by @gardener-ci-robot [#13501][DEPENDENCY]The following dependencies have been updated:gardener/gardener-metrics-exporterfrom0.41.0to0.42.0. Release Notes by @gardener-ci-robot [#13455][DEPENDENCY]The following dependencies have been updated:quay.io/brancz/kube-rbac-proxyfromv0.20.0tov0.20.1. by @gardener-ci-robot [#13533][DEPENDENCY]The following dependencies have been updated:gardener/loggingfromv0.68.0tov0.69.0. Release Notes by @gardener-ci-robot [#13450][DEPENDENCY]The following dependencies have been updated:credativ/plutonofromv7.5.43tov7.5.44. Release Notes by @gardener-ci-robot [#13504][DEPENDENCY]The following dependencies have been updated:quay.io/cortexproject/cortexfromv1.19.1tov1.20.0. by @gardener-ci-robot [#13390]📖 Documentation
[OPERATOR]A new guide has been added containing instruction and information about how to upgrade a Gardener installation. by @rfranzke [#13401]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.133.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.133.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.133.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.133.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.133.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.133.0v1.132.2Compare Source
[github.com/gardener/gardener:v1.132.2]
🐛 Bug Fixes
[OPERATOR]The server block import feature for node-local-dns is now behind a feature gate (CustomDNSServerInNodeLocalDNS). by @ialidzhikov [#13523]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.132.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.132.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.132.2europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.132.2Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.132.2europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.132.2Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.