Skip to main content

Release Notes next

Yake release notes and upgrade guide​

Related upstream release notes / changelogs​

Update backup-s3 to 0.8.2

General Changes​

  • Check if S3 bucket exists before creation (#25) @Gerrit91
Update shoot-flux to 0.25.0

What's Changed​

This release officially supports fluxcd>2.8

Full Changelog: https://github.com/stackitcloud/gardener-extension-shoot-flux/compare/v0.24.1...v0.25.0

Update shoot-oidc-service to 0.37.0

[github.com/gardener/gardener-extension-shoot-oidc-service:v0.37.0]

⚠️ Breaking Changes​

  • [OPERATOR] The name of the validating webhook configuration has been updated from oidc-webhook-authenticator-shoot to oidc-webhook-authenticator for better consistency with other resources naming. by @theoddora [#433]
  • [DEVELOPER] The GOARCH makefile variable has been replaced by TARGET_PLATFORM. by @vpnachev [#427]

✨ New Features​

  • [DEVELOPER] Gardener extension shoot-oidc-service container image now can be built for multiple platforms locally via the variable TARGET_PLATFORMS, e.g. make docker-images TARGET_PLATFORMS=linux/amd64,linux/arm64. If the variable is unset, the container images are built for the platform linux/<host-arch> only. by @vpnachev [#427]

🐛 Bug Fixes​

  • [OPERATOR] Switch the default port for exposing the extension mutating webhook to 10250. Configure webhookConfig.serverPort through values.yaml if you require a different port number. by @theoddora [#439]

🏃 Others​

  • [OPERATOR] shoot-oidc-service extension binaries are now built with Go 1.26.0. by @dependabot[bot] [#440]

[github.com/gardener/oidc-webhook-authenticator:v0.42.0]

🏃 Others​

  • [OPERATOR] OWA is now built with Go 1.26.0 by @dependabot[bot] [#220]

Helm Charts​

  • shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-oidc-service:v0.37.0

Container (OCI) Images​

  • gardener-extension-shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-oidc-service:v0.37.0
Update provider-openstack to 1.53.0

[github.com/gardener/gardener-extension-provider-openstack:v1.53.0]

⚠️ Breaking Changes​

  • [DEVELOPER] The PLATFORM makefile variable has been replaced by TARGET_PLATFORM. by @wpross [#1272]

📰 Noteworthy​

  • [USER] virtualCapacities can now be added to worker.providerConfig.nodeTemplate and will be mapped to the machineclass nodeTemplate by @aaronfern [#1266]

✨ New Features​

  • [USER] This extension now supports shoot clusters with Kubernetes version 1.35. You should consider the Kubernetes release notes before upgrading to 1.35. by @rfranzke [#1256]
  • [DEVELOPER] Gardener extension provider-openstack container images now can be built for multiple platforms locally via the variable TARGET_PLATFORMS, e.g. make docker-images TARGET_PLATFORMS=linux/amd64,linux/arm64. If the variable is unset, the container images are built for the platform linux/<host-arch> only. by @wpross [#1272]

🐛 Bug Fixes​

  • [OPERATOR] fix verbosity flag in manila csi-provider chart by @AndreasBurger [#1277]
  • [OPERATOR] Fixed missing create event permissions in runtime cluster when publishing "became leader" event by @matthias-horne [#1275]
  • [OPERATOR] Fixed DNSRecords not reconciling in runtime cluster because of missing namespace permissions by @matthias-horne [#1275]
  • [USER] Fixed an issue, where a router was not always created in the correct floating pool subnet if it was specified with a wildcard *. by @matthias-horne [#1274]

🏃 Others​

  • [OPERATOR] export testresults as inlined ocm-resource second trial by @heldkat [#1265]
  • [OPERATOR] Allows to configure storage of etcd events in shoot cluster by @chungtd203338 [#1080]
  • [OPERATOR] Add input validation for primary DNS provider secret referenced in the shoot spec. by @wpross [#1259]
  • [OPERATOR] Fix cleanup logic when shoot is going to hibernation or waking up by @DockToFuture [#1284]
  • [OPERATOR] The .spec.trafficDistribution field of the topology-aware Services will be automatically switched from the deprecated PreferClose to the new PreferSameZone option for Kubernetes 1.34+. by @Kostov6 [#1270]
  • [OPERATOR] Prevent Calico from setting the NetworkUnavailable condition on nodes when overlay networking gets disabled, and ensures cleanup of existing Calico-set conditions. by @DockToFuture [#1279]
  • [USER] worker.providerConfig.nodeTemplate can now be specified without having to add all core resources by @aaronfern [#1266]
  • [DEPENDENCY] The following container images have been updated:
    • csi-attacher: v4.10.0 -> v4.11.0 (singleton)
    • csi-driver-nfs: v4.12.1 -> v4.13.1 (singleton)
    • csi-liveness-probe: v2.17.0 -> v2.18.0 (singleton)
    • csi-node-driver-registrar: v2.15.0 -> v2.16.0 (singleton)
    • csi-provisioner: v6.1.0 -> v6.1.1 (patch)
    • csi-resizer: v2.0.0 -> v2.1.0 (minor)
    • csi-snapshot-controller: v8.4.0 -> v8.5.0 (singleton)
    • csi-snapshotter: v8.4.0 -> v8.5.0 (singleton) by @gardener-github-actions[bot] [#1250]

Helm Charts​

  • admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.53.0
  • admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.53.0
  • provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.53.0

Container (OCI) Images​

  • gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.53.0
  • gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.53.0
Update shoot-networking-problemdetector to 0.32.1

[github.com/gardener/gardener-extension-shoot-networking-problemdetector:v0.32.1]

🐛 Bug Fixes​

  • [OPERATOR] Missing go.mod dependency for nwpd was fixed by @domdom82 [#342]

Helm Charts​

  • shoot-networking-problemdetector: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-networking-problemdetector:v0.32.1

Container (OCI) Images​

  • gardener-extension-shoot-networking-problemdetector: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-problemdetector:v0.32.1
Update shoot-networking-filter to 0.28.0

[github.com/gardener/gardener-extension-shoot-networking-filter:v0.28.0]

🏃 Others​

  • [OPERATOR] Filter list secrets can be read from secrets in the shoot cluster. by @axel7born [#335]
  • [OPERATOR] The .spec.trafficDistribution field of the topology-aware Services will be automatically switched from the deprecated PreferClose to the new PreferSameZone option for Kubernetes 1.34+. by @ialidzhikov [#325]
  • [OPERATOR] Hard resource limits are removed. by @domdom82 [#330]

Helm Charts​

  • runtime-networking-filter: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/runtime-networking-filter:v0.28.0
  • shoot-networking-filter-admission-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-networking-filter-admission-application:v0.28.0
  • shoot-networking-filter-admission-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-networking-filter-admission-runtime:v0.28.0
  • shoot-networking-filter: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-networking-filter:v0.28.0

Container (OCI) Images​

  • gardener-extension-shoot-networking-filter-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-filter-admission:v0.28.0
  • gardener-extension-shoot-networking-filter: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-filter:v0.28.0
  • gardener-runtime-networking-filter: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/runtime-networking-filter:v0.28.0
Update gardener-controlplane to 1.137.5

[github.com/gardener/gardener:v1.137.5]

🐛 Bug Fixes​

  • [OPERATOR] The per-worker-pool node-local-dns Daemonsets now also include the name of the worker in their label selector and in their Pods' labels. This resolves an issue where each of the corresponding VPAs targeted all node-cache containers from all of these Daemonsets resulting in incorrect resource recommendations. by @plkokanov [#14295]
  • [DEPENDENCY] Fixing an issue where CA scale-downs were getting stuck when MCD replicas was updated with stale cache value of worker-controller by @r4mek [#14293]

🏃 Others​

  • [OPERATOR] The following dependency has been updated:
    • golang.org/x/net from v0.50.0 to v0.51.0. by @ScheererJ [#14242]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.137.5
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.137.5
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.137.5
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.137.5

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.137.5
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.137.5
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.137.5
  • gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.137.5
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.137.5
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.137.5
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.137.5
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.137.5
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.137.5
Update gardener-controlplane to 1.137.5

[github.com/gardener/gardener:v1.137.5]

🐛 Bug Fixes​

  • [OPERATOR] The per-worker-pool node-local-dns Daemonsets now also include the name of the worker in their label selector and in their Pods' labels. This resolves an issue where each of the corresponding VPAs targeted all node-cache containers from all of these Daemonsets resulting in incorrect resource recommendations. by @plkokanov [#14295]
  • [DEPENDENCY] Fixing an issue where CA scale-downs were getting stuck when MCD replicas was updated with stale cache value of worker-controller by @r4mek [#14293]

🏃 Others​

  • [OPERATOR] The following dependency has been updated:
    • golang.org/x/net from v0.50.0 to v0.51.0. by @ScheererJ [#14242]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.137.5
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.137.5
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.137.5
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.137.5

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.137.5
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.137.5
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.137.5
  • gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.137.5
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.137.5
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.137.5
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.137.5
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.137.5
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.137.5
Update gardenlet to 1.137.5

[github.com/gardener/gardener:v1.137.5]

🐛 Bug Fixes​

  • [OPERATOR] The per-worker-pool node-local-dns Daemonsets now also include the name of the worker in their label selector and in their Pods' labels. This resolves an issue where each of the corresponding VPAs targeted all node-cache containers from all of these Daemonsets resulting in incorrect resource recommendations. by @plkokanov [#14295]
  • [DEPENDENCY] Fixing an issue where CA scale-downs were getting stuck when MCD replicas was updated with stale cache value of worker-controller by @r4mek [#14293]

🏃 Others​

  • [OPERATOR] The following dependency has been updated:
    • golang.org/x/net from v0.50.0 to v0.51.0. by @ScheererJ [#14242]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.137.5
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.137.5
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.137.5
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.137.5

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.137.5
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.137.5
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.137.5
  • gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.137.5
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.137.5
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.137.5
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.137.5
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.137.5
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.137.5