Release Notes v1.119
Yake release notes and upgrade guideβ
Related upstream release notes / changelogsβ
Update shoot-cert-service to 1.50.1
[gardener/gardener-extension-shoot-cert-service]
π Bug Fixesβ
[USER]Fix lookup of referenced secret for custom issuer in shoot manifest withprivateKeySecretNamespecified. byMartin Weindel <martin.weindel@sap.com>[$282b42a2fc03b79fa1161fd3ff5a31894f72a801]
Helm Chartsβ
- shoot-cert-service:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-cert-service:v1.50.1
Container (OCI) Imagesβ
- gardener-extension-shoot-cert-service:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service:v1.50.1
Update gardener-controlplane to 1.118.1
[gardener/gardener]
π Bug Fixesβ
[OPERATOR]Fix a regression that prevented the cache Prometheus in a Gardener managed seed from scraping the cadvisor and kubelet metrics of the seed nodes, and hence the shoot control plane Plutono dashboards could not show e.g. the CPU usage of the control plane components. (part 2) by @istvanballok [#12049][OPERATOR]An issue preventing vpa-updater to patch events when recording eviction event on VerticalPodAutoscaler resource is now fixed. by @ialidzhikov [#12035]
π Othersβ
[DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.0to1.80.1. Release Notes by @gardener-ci-robot [#12042]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.118.1 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.118.1 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.118.1 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.118.1
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.118.1 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.118.1 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.118.1 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.118.1 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.118.1 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.118.1 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.118.1 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.118.1
Update gardener-controlplane to 1.118.1
[gardener/gardener]
π Bug Fixesβ
[OPERATOR]Fix a regression that prevented the cache Prometheus in a Gardener managed seed from scraping the cadvisor and kubelet metrics of the seed nodes, and hence the shoot control plane Plutono dashboards could not show e.g. the CPU usage of the control plane components. (part 2) by @istvanballok [#12049][OPERATOR]An issue preventing vpa-updater to patch events when recording eviction event on VerticalPodAutoscaler resource is now fixed. by @ialidzhikov [#12035]
π Othersβ
[DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.0to1.80.1. Release Notes by @gardener-ci-robot [#12042]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.118.1 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.118.1 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.118.1 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.118.1
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.118.1 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.118.1 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.118.1 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.118.1 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.118.1 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.118.1 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.118.1 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.118.1
Update gardenlet to 1.118.1
[gardener/gardener]
π Bug Fixesβ
[OPERATOR]Fix a regression that prevented the cache Prometheus in a Gardener managed seed from scraping the cadvisor and kubelet metrics of the seed nodes, and hence the shoot control plane Plutono dashboards could not show e.g. the CPU usage of the control plane components. (part 2) by @istvanballok [#12049][OPERATOR]An issue preventing vpa-updater to patch events when recording eviction event on VerticalPodAutoscaler resource is now fixed. by @ialidzhikov [#12035]
π Othersβ
[DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.0to1.80.1. Release Notes by @gardener-ci-robot [#12042]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.118.1 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.118.1 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.118.1 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.118.1
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.118.1 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.118.1 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.118.1 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.118.1 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.118.1 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.118.1 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.118.1 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.118.1
Update shoot-networking-problemdetector to 0.27.0
[gardener/gardener-extension-shoot-networking-problemdetector]
β¨ New Featuresβ
[USER]Containers, which do not require privilege escalations, now forbid privilege escalations explicitly. by @georgibaltiev [#209]
π Othersβ
[OPERATOR]Bumps github.com/gardener/gardener from 1.106.0 to 1.107.0. by @dependabot[bot] [#192][OPERATOR]Addpatchverb for thegardener-extension-heartbeatresource in the RBAC rules by @MartinWeindel [#234][OPERATOR]Dashboard shows now additional IPv6 metrics for dual-stack clusters. by @axel7born [#240][OPERATOR]RBACresources now explicitly stateresourcesandverbs, replaced use of wildcards*. by @georgibaltiev [#228][OPERATOR]Bumps github.com/gardener/gardener from 1.109.0 to 1.110.0. by @dependabot[bot] [#200][OPERATOR]Update base image fromdebian11todebian12. by @MartinWeindel [#230][OPERATOR]The legacy method of providing monitoring configuration viaConfigMaps labeled withextensions.gardener.cloud/configuration=monitoringhas been removed. The extension does now only uses the new contract for providing monitoring configuration. Before upgrading to this version of the extension, make sure that the deployed Gardener version supports the new monitoring contract. by @RadaBDimitrova [#232][OPERATOR]Bumps github.com/gardener/gardener from 1.107.0 to 1.108.0. by @dependabot[bot] [#196][OPERATOR]extension-shoot-netwroking-problemdetectorno longer supports Shoots with Πubernetes version <= 1.26. by @RadaBDimitrova [#190][OPERATOR]Bumps github.com/gardener/gardener from 1.108.0 to 1.109.0. by @dependabot[bot] [#198][OPERATOR]The health check controller was previously checking the health of ManagedResourcesextension-shoot-networking-problemdetector-controller-shootandextension-shoot-networking-problemdetector-agent-shoot. This was redundant as gardenlet already checks and reports the health of ManagedResources with classshoot- see https://github.com/gardener/gardener/pull/7462. The health check controller of the extension is adapted to check the health of ManagedResourceextension-shoot-networking-problemdetector-controller-seed. by @RadaBDimitrova [#214][OPERATOR]Bumps golang from 1.23.2 to 1.23.3. by @dependabot[bot] [#193]
Helm Chartsβ
- shoot-networking-problemdetector:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-networking-problemdetector:v0.27.0
Container (OCI) Imagesβ
- gardener-extension-shoot-networking-problemdetector:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-problemdetector:v0.27.0
Update provider-azure to 1.52.3
[gardener/machine-controller-manager]
β¨ New Featuresβ
[OPERATOR]Machine Controller Manager now supports a new machine deployment strategy called InPlaceUpdate. by @acumino [gardener/machine-controller-manager#973]
π Bug Fixesβ
[OPERATOR]A new termination queue to handle machines scheduled for deletion introduced to separate creation requests from deletion by @takoverflow [gardener/machine-controller-manager#964][OPERATOR]machine-controller-manager version, and build information are printed at startup. by @renormalize [gardener/machine-controller-manager#985]
π Othersβ
[OPERATOR]Integration test framework enhancements for resource and process cleanup by @takoverflow [gardener/machine-controller-manager#968][OPERATOR]Resource exhaustion on machine creation results in a longer retry period by @takoverflow [gardener/machine-controller-manager#981]
Helm Chartsβ
- admission-azure-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-application:v1.52.3 - admission-azure-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-runtime:v1.52.3 - provider-azure:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-azure:v1.52.3
Container (OCI) Imagesβ
- gardener-extension-admission-azure:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.52.3 - gardener-extension-provider-azure:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.52.3
Update provider-gcp to 1.43.3
[gardener/machine-controller-manager]
β¨ New Featuresβ
[OPERATOR]Machine Controller Manager now supports a new machine deployment strategy called InPlaceUpdate. by @acumino [gardener/machine-controller-manager#973]
π Bug Fixesβ
[OPERATOR]A new termination queue to handle machines scheduled for deletion introduced to separate creation requests from deletion by @takoverflow [gardener/machine-controller-manager#964][OPERATOR]machine-controller-manager version, and build information are printed at startup. by @renormalize [gardener/machine-controller-manager#985]
π Othersβ
[OPERATOR]Integration test framework enhancements for resource and process cleanup by @takoverflow [gardener/machine-controller-manager#968][OPERATOR]Resource exhaustion on machine creation results in a longer retry period by @takoverflow [gardener/machine-controller-manager#981]
[gardener/machine-controller-manager-provider-gcp]
π° Noteworthyβ
[DEVELOPER]Golang version updated to1.24.1by @aaronfern [gardener/machine-controller-manager-provider-gcp#145][OPERATOR]Thegardener/machine-controller-managerdependency has been updated tov0.57.1. Release Notes by @aaronfern [gardener/machine-controller-manager-provider-gcp#144]
Helm Chartsβ
- admission-gcp-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.43.3 - admission-gcp-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.43.3 - provider-gcp:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.43.3
Container (OCI) Imagesβ
- gardener-extension-admission-gcp:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.43.3 - gardener-extension-provider-gcp:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.43.3
Update provider-aws to 1.61.2
[gardener/machine-controller-manager]
β¨ New Featuresβ
[OPERATOR]Machine Controller Manager now supports a new machine deployment strategy called InPlaceUpdate. by @acumino [gardener/machine-controller-manager#973]
π Bug Fixesβ
[OPERATOR]machine-controller-manager version, and build information are printed at startup. by @renormalize [gardener/machine-controller-manager#985][OPERATOR]A new termination queue to handle machines scheduled for deletion introduced to separate creation requests from deletion by @takoverflow [gardener/machine-controller-manager#964]
π Othersβ
[OPERATOR]Resource exhaustion on machine creation results in a longer retry period by @takoverflow [gardener/machine-controller-manager#981][OPERATOR]Integration test framework enhancements for resource and process cleanup by @takoverflow [gardener/machine-controller-manager#968]
Helm Chartsβ
- admission-aws-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.61.2 - admission-aws-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.61.2 - provider-aws:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.61.2
Container (OCI) Imagesβ
- gardener-extension-admission-aws:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.61.2 - gardener-extension-provider-aws:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.61.2
Update external-dns-management to 0.24.0
[gardener/external-dns-management]
π Othersβ
[OPERATOR]DNSOwnerresources are now completely ignored by @MartinWeindel [#446]
Helm Chartsβ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/dns-controller-manager:v0.24.0
Container (OCI) Imagesβ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/dns-controller-manager:v0.24.0
Update shoot-rsyslog-relp to 0.9.0
[gardener/gardener-extension-shoot-rsyslog-relp]
β οΈ Breaking Changesβ
[OPERATOR]The type of theimageVectorOverwritevalue is changed from string to object. by @ialidzhikov [#260]
π Othersβ
[OPERATOR]Update base image fromdebian11todebian12. by @MartinWeindel [#264][OPERATOR]The RBAC is now reduced to only the required resources and verbs. by @plkokanov [#266]
Helm Chartsβ
- shoot-rsyslog-relp-admission-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-rsyslog-relp-admission-application:v0.9.0 - shoot-rsyslog-relp-admission-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-rsyslog-relp-admission-runtime:v0.9.0 - shoot-rsyslog-relp:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-rsyslog-relp:v0.9.0
Container (OCI) Imagesβ
- gardener-extension-shoot-rsyslog-relp-admission:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp-admission:v0.9.0 - gardener-extension-shoot-rsyslog-relp:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp:v0.9.0
Update provider-alicloud to 1.61.1
[gardener/gardener-extension-provider-alicloud]
π Bug Fixesβ
[OPERATOR]A bug was fixed which causedBackupBuckets to fail in reconciliation when the referenced secret did not contain acredentialsFilefield. by @ialidzhikov [#789]
Helm Chartsβ
- admission-alicloud-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-application:v1.61.1 - admission-alicloud-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-runtime:v1.61.1 - provider-alicloud:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-alicloud:v1.61.1
Container (OCI) Imagesβ
- gardener-extension-admission-alicloud:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-alicloud:v1.61.1 - gardener-extension-provider-alicloud:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-alicloud:v1.61.1
Update dashboard to 1.80.2
[gardener/dashboard]
π Bug Fixesβ
[USER]Lazy rendering was not functioning correctly in some scenarios, leading to performance issues with large cluster lists by @grolu [#2442]
Container (OCI) Imagesβ
- gardener-dashboard:
europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.80.2
Update dashboard to 1.80.2
[gardener/dashboard]
π Bug Fixesβ
[USER]Lazy rendering was not functioning correctly in some scenarios, leading to performance issues with large cluster lists by @grolu [#2442]
Container (OCI) Imagesβ
- gardener-dashboard:
europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.80.2
Update cloudprofiles to 0.7.26
Update gardener-controlplane to 1.118.2
[gardener/gardener]
π Bug Fixesβ
[OPERATOR]A bug preventing thesystem:serviceaccount:kube-system:gardener-internalservice account, used bygardener-operator, to label restricted resources was fixed. by @dimityrmirchev [#12063]
π Othersβ
[OPERATOR]Annotations and labels are now ignored when creating referenced resources in the shoot control plane namespaces in seed clusters. by @rfranzke [#12064][OPERATOR]Set minAllowed CPU to150mfor prometheus-shoot to avoid frequent evictions by @voelzmo [#12069][OPERATOR]A new check ensures that only owners and project members with a UAM role are allowed to modify the project owner. by @timuthy [#12082][OPERATOR]It is now ensured that extension admission webhooks have validatedWorkloadIdentitys/Secrets referenced inShoots. by @rfranzke [#12075][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.1to1.80.2. Release Notes by @gardener-ci-robot [#12120]
[DEVELOPER]Theadmission-localdeployment was fixed to work with KinD based test setup. by @timuthy [#12106]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.118.2 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.118.2 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.118.2 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.118.2
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.118.2 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.118.2 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.118.2 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.118.2 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.118.2 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.118.2 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.118.2 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.118.2
Update gardener-controlplane to 1.118.2
[gardener/gardener]
π Bug Fixesβ
[OPERATOR]A bug preventing thesystem:serviceaccount:kube-system:gardener-internalservice account, used bygardener-operator, to label restricted resources was fixed. by @dimityrmirchev [#12063]
π Othersβ
[OPERATOR]Annotations and labels are now ignored when creating referenced resources in the shoot control plane namespaces in seed clusters. by @rfranzke [#12064][OPERATOR]Set minAllowed CPU to150mfor prometheus-shoot to avoid frequent evictions by @voelzmo [#12069][OPERATOR]A new check ensures that only owners and project members with a UAM role are allowed to modify the project owner. by @timuthy [#12082][OPERATOR]It is now ensured that extension admission webhooks have validatedWorkloadIdentitys/Secrets referenced inShoots. by @rfranzke [#12075][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.1to1.80.2. Release Notes by @gardener-ci-robot [#12120]
[DEVELOPER]Theadmission-localdeployment was fixed to work with KinD based test setup. by @timuthy [#12106]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.118.2 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.118.2 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.118.2 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.118.2
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.118.2 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.118.2 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.118.2 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.118.2 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.118.2 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.118.2 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.118.2 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.118.2
Update gardenlet to 1.118.2
[gardener/gardener]
π Bug Fixesβ
[OPERATOR]A bug preventing thesystem:serviceaccount:kube-system:gardener-internalservice account, used bygardener-operator, to label restricted resources was fixed. by @dimityrmirchev [#12063]
π Othersβ
[OPERATOR]Annotations and labels are now ignored when creating referenced resources in the shoot control plane namespaces in seed clusters. by @rfranzke [#12064][OPERATOR]Set minAllowed CPU to150mfor prometheus-shoot to avoid frequent evictions by @voelzmo [#12069][OPERATOR]A new check ensures that only owners and project members with a UAM role are allowed to modify the project owner. by @timuthy [#12082][OPERATOR]It is now ensured that extension admission webhooks have validatedWorkloadIdentitys/Secrets referenced inShoots. by @rfranzke [#12075][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.1to1.80.2. Release Notes by @gardener-ci-robot [#12120]
[DEVELOPER]Theadmission-localdeployment was fixed to work with KinD based test setup. by @timuthy [#12106]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.118.2 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.118.2 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.118.2 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.118.2
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.118.2 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.118.2 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.118.2 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.118.2 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.118.2 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.118.2 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.118.2 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.118.2
Update garden-kube-apiserver to 5.7.0
Update gardener-controlplane to 1.119.0
[gardener/gardener]
β οΈ Breaking Changesβ
[OPERATOR]The already deprecatedautoscaling.k8s.io/v1beta2API version is no longer served. Before upgrading to this version of Gardener, make sure that all components use theautoscaling.k8s.io/v1API version for managing VerticalPodAutoscaler resources. by @ialidzhikov [#11840][OPERATOR]The support for the already deprecatedshoot.gardener.cloud/managed-seed-api-serverannotation is now removed. Instead, consider enabling high availability for the ManagedSeed's Shoot control plane. by @ialidzhikov [#11838][USER]The already deprecatedautoscaling.k8s.io/v1beta2API version is no longer served. Instead, use theautoscaling.k8s.io/v1API version for managing VerticalPodAutoscaler resources. by @ialidzhikov [#11840]
π° Noteworthyβ
[USER]Thespec.kubernetes.kubeAPIServer.enableAnonymousAuthenticationfield in theShootAPI is deprecated and will be removed in a future release. Before removal, it will be forbidden to set the field when using a future Kubernetes version that graduates the feature gateAnonymousAuthConfigurableEndpoints. by @marc1404 [#11984][OPERATOR]TheRemoveAPIServerProxyLegacyPortfeature gate has been promoted to beta and is now turned on by default. by @Wieneo [#11902]
β¨ New Featuresβ
[OPERATOR]Garden.spec.virtualCluster.gardener.gardenerDashboard.ingress.enabledcan now be used to control whether thegardener-operatorshould deploy aIngressresource for the dashboard. by @Wieneo [#12002][OPERATOR]Garden.spec.virtualCluster.gardener.gardenerDashboard.oidcConfig.certificateAuthoritySecretRefcan now be used to specify a secret containing a custom CA certificate for talking to the OIDC endpoint. The certificate must be stored under theca.crtkey. by @Wieneo [#11967][OPERATOR]Gardener supports gardener-node-agent images built by ko. by @timebertt [#12021][OPERATOR]It is now possible forcinggardener-operatorto re-deploygardenlets by annotating the responsibleseedmanagement.gardener.cloud/v1alpha1.Gardenletresource withgardener.cloud/operation=force-redeploy. Read all about it here. by @rfranzke [#11972]
π Bug Fixesβ
[OPERATOR]gardenlet's shoot-care controller : An issue causing gardenlet to report a misleading reason (NodesScalingDown) during rolling update of Shoot Nodes is now fixed. by @RadaBDimitrova [#11869][DEVELOPER]Fix extension webhook registration for autonomous shoot clusters. by @ScheererJ [#12040]
π Othersβ
[OPERATOR]The utilization of the VPN containers running in the seed is now improved by adapting their initial/static requests and by changing the corresponding VPA configuration:- autoscaling is disabled for the
vpn-seed-serverandopenvpn-exportercontainers - initial/static resource requests are reduced
- limits are removed
minAllowedfor theenvoy-proxycontainer is removed by @axel7born [#12023]
- autoscaling is disabled for the
[OPERATOR]Remove sum for VPA Pod metrics in 'recommendations' dashboard by @voelzmo [#12057][OPERATOR]Spreading Istio ingress-gateway pods across hosts is enforced only for zonal Istio deployments now. by @oliver-goetz [#12007][OPERATOR]kube-proxyno longer fails its readiness probe in case the node is about to be deleted bycluster-autoscaler. by @ScheererJ [#12015][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.25.2to1.25.3.gcr.io/istio-release/proxyv2from1.25.2to1.25.3.istio.io/apifromv1.25.2tov1.25.3. by @gardener-ci-robot [#12074]
[DEPENDENCY]The following dependencies have been updated:envoyproxy/envoyfromv1.34.0tov1.34.1. Release Notes by @gardener-ci-robot [#12024]
π Documentationβ
[USER]Dual-Stack Migration documentation now clearly states the precondition of overlay removal. by @ScheererJ [#12053]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.119.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.119.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.119.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.119.0
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.119.0 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.119.0 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.119.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.119.0 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.119.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.119.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.119.0 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.119.0
Update gardener-controlplane to 1.119.0
[gardener/gardener]
β οΈ Breaking Changesβ
[OPERATOR]The already deprecatedautoscaling.k8s.io/v1beta2API version is no longer served. Before upgrading to this version of Gardener, make sure that all components use theautoscaling.k8s.io/v1API version for managing VerticalPodAutoscaler resources. by @ialidzhikov [#11840][OPERATOR]The support for the already deprecatedshoot.gardener.cloud/managed-seed-api-serverannotation is now removed. Instead, consider enabling high availability for the ManagedSeed's Shoot control plane. by @ialidzhikov [#11838][USER]The already deprecatedautoscaling.k8s.io/v1beta2API version is no longer served. Instead, use theautoscaling.k8s.io/v1API version for managing VerticalPodAutoscaler resources. by @ialidzhikov [#11840]
π° Noteworthyβ
[USER]Thespec.kubernetes.kubeAPIServer.enableAnonymousAuthenticationfield in theShootAPI is deprecated and will be removed in a future release. Before removal, it will be forbidden to set the field when using a future Kubernetes version that graduates the feature gateAnonymousAuthConfigurableEndpoints. by @marc1404 [#11984][OPERATOR]TheRemoveAPIServerProxyLegacyPortfeature gate has been promoted to beta and is now turned on by default. by @Wieneo [#11902]
β¨ New Featuresβ
[OPERATOR]Garden.spec.virtualCluster.gardener.gardenerDashboard.ingress.enabledcan now be used to control whether thegardener-operatorshould deploy aIngressresource for the dashboard. by @Wieneo [#12002][OPERATOR]Garden.spec.virtualCluster.gardener.gardenerDashboard.oidcConfig.certificateAuthoritySecretRefcan now be used to specify a secret containing a custom CA certificate for talking to the OIDC endpoint. The certificate must be stored under theca.crtkey. by @Wieneo [#11967][OPERATOR]Gardener supports gardener-node-agent images built by ko. by @timebertt [#12021][OPERATOR]It is now possible forcinggardener-operatorto re-deploygardenlets by annotating the responsibleseedmanagement.gardener.cloud/v1alpha1.Gardenletresource withgardener.cloud/operation=force-redeploy. Read all about it here. by @rfranzke [#11972]
π Bug Fixesβ
[OPERATOR]gardenlet's shoot-care controller : An issue causing gardenlet to report a misleading reason (NodesScalingDown) during rolling update of Shoot Nodes is now fixed. by @RadaBDimitrova [#11869][DEVELOPER]Fix extension webhook registration for autonomous shoot clusters. by @ScheererJ [#12040]
π Othersβ
[OPERATOR]The utilization of the VPN containers running in the seed is now improved by adapting their initial/static requests and by changing the corresponding VPA configuration:- autoscaling is disabled for the
vpn-seed-serverandopenvpn-exportercontainers - initial/static resource requests are reduced
- limits are removed
minAllowedfor theenvoy-proxycontainer is removed by @axel7born [#12023]
- autoscaling is disabled for the
[OPERATOR]Remove sum for VPA Pod metrics in 'recommendations' dashboard by @voelzmo [#12057][OPERATOR]Spreading Istio ingress-gateway pods across hosts is enforced only for zonal Istio deployments now. by @oliver-goetz [#12007][OPERATOR]kube-proxyno longer fails its readiness probe in case the node is about to be deleted bycluster-autoscaler. by @ScheererJ [#12015][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.25.2to1.25.3.gcr.io/istio-release/proxyv2from1.25.2to1.25.3.istio.io/apifromv1.25.2tov1.25.3. by @gardener-ci-robot [#12074]
[DEPENDENCY]The following dependencies have been updated:envoyproxy/envoyfromv1.34.0tov1.34.1. Release Notes by @gardener-ci-robot [#12024]
π Documentationβ
[USER]Dual-Stack Migration documentation now clearly states the precondition of overlay removal. by @ScheererJ [#12053]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.119.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.119.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.119.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.119.0
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.119.0 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.119.0 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.119.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.119.0 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.119.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.119.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.119.0 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.119.0
Update gardenlet to 1.119.0
[gardener/gardener]
β οΈ Breaking Changesβ
[OPERATOR]The already deprecatedautoscaling.k8s.io/v1beta2API version is no longer served. Before upgrading to this version of Gardener, make sure that all components use theautoscaling.k8s.io/v1API version for managing VerticalPodAutoscaler resources. by @ialidzhikov [#11840][OPERATOR]The support for the already deprecatedshoot.gardener.cloud/managed-seed-api-serverannotation is now removed. Instead, consider enabling high availability for the ManagedSeed's Shoot control plane. by @ialidzhikov [#11838][USER]The already deprecatedautoscaling.k8s.io/v1beta2API version is no longer served. Instead, use theautoscaling.k8s.io/v1API version for managing VerticalPodAutoscaler resources. by @ialidzhikov [#11840]
π° Noteworthyβ
[USER]Thespec.kubernetes.kubeAPIServer.enableAnonymousAuthenticationfield in theShootAPI is deprecated and will be removed in a future release. Before removal, it will be forbidden to set the field when using a future Kubernetes version that graduates the feature gateAnonymousAuthConfigurableEndpoints. by @marc1404 [#11984][OPERATOR]TheRemoveAPIServerProxyLegacyPortfeature gate has been promoted to beta and is now turned on by default. by @Wieneo [#11902]
β¨ New Featuresβ
[OPERATOR]Garden.spec.virtualCluster.gardener.gardenerDashboard.ingress.enabledcan now be used to control whether thegardener-operatorshould deploy aIngressresource for the dashboard. by @Wieneo [#12002][OPERATOR]Garden.spec.virtualCluster.gardener.gardenerDashboard.oidcConfig.certificateAuthoritySecretRefcan now be used to specify a secret containing a custom CA certificate for talking to the OIDC endpoint. The certificate must be stored under theca.crtkey. by @Wieneo [#11967][OPERATOR]Gardener supports gardener-node-agent images built by ko. by @timebertt [#12021][OPERATOR]It is now possible forcinggardener-operatorto re-deploygardenlets by annotating the responsibleseedmanagement.gardener.cloud/v1alpha1.Gardenletresource withgardener.cloud/operation=force-redeploy. Read all about it here. by @rfranzke [#11972]
π Bug Fixesβ
[OPERATOR]gardenlet's shoot-care controller : An issue causing gardenlet to report a misleading reason (NodesScalingDown) during rolling update of Shoot Nodes is now fixed. by @RadaBDimitrova [#11869][DEVELOPER]Fix extension webhook registration for autonomous shoot clusters. by @ScheererJ [#12040]
π Othersβ
[OPERATOR]The utilization of the VPN containers running in the seed is now improved by adapting their initial/static requests and by changing the corresponding VPA configuration:- autoscaling is disabled for the
vpn-seed-serverandopenvpn-exportercontainers - initial/static resource requests are reduced
- limits are removed
minAllowedfor theenvoy-proxycontainer is removed by @axel7born [#12023]
- autoscaling is disabled for the
[OPERATOR]Remove sum for VPA Pod metrics in 'recommendations' dashboard by @voelzmo [#12057][OPERATOR]Spreading Istio ingress-gateway pods across hosts is enforced only for zonal Istio deployments now. by @oliver-goetz [#12007][OPERATOR]kube-proxyno longer fails its readiness probe in case the node is about to be deleted bycluster-autoscaler. by @ScheererJ [#12015][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.25.2to1.25.3.gcr.io/istio-release/proxyv2from1.25.2to1.25.3.istio.io/apifromv1.25.2tov1.25.3. by @gardener-ci-robot [#12074]
[DEPENDENCY]The following dependencies have been updated:envoyproxy/envoyfromv1.34.0tov1.34.1. Release Notes by @gardener-ci-robot [#12024]
π Documentationβ
[USER]Dual-Stack Migration documentation now clearly states the precondition of overlay removal. by @ScheererJ [#12053]
Helm Chartsβ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.119.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.119.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.119.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.119.0
Container (OCI) Imagesβ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.119.0 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.119.0 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.119.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.119.0 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.119.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.119.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.119.0 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.119.0
Update backup-s3 to 0.7.2
General Changesβ
- Release Helm OCI artifacts and revendor g/g v1.113. (#15) @Gerrit91
Update external-dns-management to 0.25.0
[gardener/external-dns-management]
β¨ New Featuresβ
[USER][alicloud-dns] Add support for weighted routing policy. More details see https://github.com/gardener/external-dns-management/tree/master/docs/alicloud-dns#routing-policy by @MartinWeindel [#461]
π Bug Fixesβ
[USER]Fix update of status for sourceDNSEntriesif they are very old, as the heuristics for old entries withoutgenerateNamefield did not work. by @MartinWeindel [#466]
π Othersβ
[DEVELOPER]cleanup: drop unused (and outdated) script by @ccwienk [#465]
Helm Chartsβ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/dns-controller-manager:v0.25.0
Container (OCI) Imagesβ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/dns-controller-manager:v0.25.0
Update gardener-metrics-exporter to 0.39.0
Update gardener-metrics-exporter to 0.39.0
Update provider-aws to 1.62.1
[gardener/gardener-extension-provider-aws]
π Othersβ
[OPERATOR]Fixesmake verifyand switches the building pipelines to GHA by @kon-angelo [#1343]
Update provider-gcp to 1.44.0
[gardener/gardener-extension-provider-gcp]
π° Noteworthyβ
[OPERATOR]Usecloud-controller-manager@v32.2.2for Kubernetes >= v1.32 by @marc1404 [#990]
π Othersβ
[OPERATOR]Improved credentials configuration validation. by @dimityrmirchev [#1061][OPERATOR]Thecsi-snapshot-webhook-vpaVerticalPodAutoscaler and thecsi-snapshot-validationPodDisruptionBudget are now also cleaned up during the deletion of the legacycsi-snapshot-validationresources. by @ialidzhikov [#1068][OPERATOR]Add support for single-stack to dual-stack network migration. by @DockToFuture [#1010][OPERATOR]The legacy method of providing monitoring configuration viaConfigMaps labeled withextensions.gardener.cloud/configuration=monitoringhas been removed. The extension does now only uses the new contract for providing monitoring configuration. Before upgrading to this version of the extension, make sure that the deployed Gardener version supports the new monitoring contract. by @RadaBDimitrova [#1032][OPERATOR]Update base image fromdebian11todebian12. by @MartinWeindel [#1031][OPERATOR]Update CSI driver from v1.15.4 to v1.17.12 by @hebelsan [#1062][OPERATOR]Update gardener/gardener to v1.118.0. by @ScheererJ [#1057][OPERATOR]Updategardener/gardenertov1.117.0Release Notes. by @acumino [#1042][OPERATOR]In dual-stack clusters, services of typeLoadBalancerwill automatically created as dual-stack load balancers. by @ScheererJ [#1001][OPERATOR]Obsolete ClusterRoles and ClusterRoleBindings that were leftovers from the machine-controller-manager component are now cleaned up. by @georgibaltiev [#1064][OPERATOR]RBACresources now explicitly stateresourcesandverbs, replaced use of wildcards*. by @georgibaltiev [#989][OPERATOR]provider-gcpno longer supports Shoots with Πubernetes version <= 1.26. by @RadaBDimitrova [#879][OPERATOR]Include errors related to locating user-managed resources in the known error set. by @hebelsan [#1044][OPERATOR]Remove thepodAntiAffinityin the deployment in favor of onlyTopologySpreadConstraints. by @LucaBernstein [#1052][OPERATOR]The images built by the GCP provider-extension are now multiarch-images, supporting x86_64 and arm64 by @AndreasBurger [#1037][OPERATOR]Add missing list permissions for the vpa. by @kon-angelo [#1075][OPERATOR]TheServiceTrafficDistributionfeature is being used on to make Services topology-aware when the runtime Kubernetes version is 1.31+. by @ialidzhikov [#949][DEPENDENCY]Update csi images:
csi-attacher: v4.8.0 -> v4.8.1
csi-resizer: v1.13.1 -> v1.13.2
csi-snapshotter: v8.2.0 -> v8.2.1
csi-snapshot-controller: v8.2.0 -> v8.2.1 by @hebelsan [#1072]
[gardener/terraformer]
π Othersβ
[OPERATOR]Update gardener to v1.117.0 by @hebelsan [gardener/terraformer#162][OPERATOR]Update fsnotify to v1.9.0 by @hebelsan [gardener/terraformer#162][OPERATOR]Update aws-sdk-go to v1.55.7 by @hebelsan [gardener/terraformer#162]
Helm Chartsβ
- admission-gcp-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.44.0 - admission-gcp-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.44.0 - provider-gcp:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.44.0
Container (OCI) Imagesβ
- gardener-extension-admission-gcp:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.44.0 - gardener-extension-provider-gcp:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.44.0
Update shoot-dns-service to 1.64.0
[gardener/gardener-extension-shoot-dns-service]
π Othersβ
[OPERATOR]Drop handling of DNSOwner by @MartinWeindel [#474]
[gardener/external-dns-management]
β¨ New Featuresβ
[USER][alicloud-dns] Add support for weighted routing policy. More details see https://github.com/gardener/external-dns-management/tree/master/docs/alicloud-dns#routing-policy by @MartinWeindel [gardener/external-dns-management#461]
π Bug Fixesβ
[USER]Fix update of status for sourceDNSEntriesif they are very old, as the heuristics for old entries withoutgenerateNamefield did not work. by @MartinWeindel [gardener/external-dns-management#466]
π Othersβ
[DEVELOPER]cleanup: drop unused (and outdated) script by @ccwienk [gardener/external-dns-management#465]
Helm Chartsβ
- admission-shoot-dns-service-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-application:v1.64.0 - admission-shoot-dns-service-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-runtime:v1.64.0 - shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service:v1.64.0
Container (OCI) Imagesβ
- gardener-extension-admission-shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.64.0 - gardener-extension-shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.64.0