Release Notes v1.121
Yake release notes and upgrade guideâ
Related upstream release notes / changelogsâ
Update shoot-flux to 0.19.0
What's Changedâ
- renovate: disable semantic commits by @timebertt in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/152
- đ¤ Update module github.com/ironcore-dev/vgopath to v0.1.8 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/147
- đ¤ Update module golang.org/x/tools to v0.33.0 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/149
- đ¤ Update module github.com/go-logr/logr to v1.4.3 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/153
- đ¤ Update module github.com/onsi/gomega to v1.37.0 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/148
- đ¤ Update k8s.io/utils digest to 0f33e8f by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/145
- đ¤ Update module github.com/gardener/gardener to v1.120.0 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/150
- đ¤ Update module github.com/onsi/ginkgo/v2 to v2.23.4 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/146
- đ¤ Update module github.com/gardener/gardener to v1.120.1 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/143
- đ¤ Update fluxcd (minor) by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/154
Full Changelog: https://github.com/stackitcloud/gardener-extension-shoot-flux/compare/v0.18.0...v0.19.0
Update provider-alicloud to 1.62.0
[gardener/gardener-extension-provider-alicloud]
⨠New Featuresâ
[USER]This extension now supports in-place node updates. Read more about it here. by @ary1992 [#795]
đ Othersâ
[OPERATOR]Obsolete ClusterRoles and ClusterRoleBindings that were leftovers from the machine-controller-manager component are now cleaned up. by @georgibaltiev [#794][OPERATOR]Updategardener/gardenertov1.117.0Release Notes by @kevin-lacoo [#786]
Helm Chartsâ
- admission-alicloud-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-application:v1.62.0 - admission-alicloud-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-runtime:v1.62.0 - provider-alicloud:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-alicloud:v1.62.0
Container (OCI) Imagesâ
- gardener-extension-admission-alicloud:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-alicloud:v1.62.0 - gardener-extension-provider-alicloud:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-alicloud:v1.62.0
Update external-dns-management to 0.25.1
[gardener/external-dns-management]
đ Bug Fixesâ
[USER]Ensure ignored entries are not deleted on cleanup in an edge case. by @MartinWeindel [#505]
đ Othersâ
[USER][provider type openstack-designate] Allow secret keyauthURLas alias ofOS_AUTH_URLby @MartinWeindel [#504][OPERATOR]Bumpopenstack-designateprovider librarygophercloudfrom versionv0.24.0tov2.7.0. by @MartinWeindel [#481]
Helm Chartsâ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/dns-controller-manager:v0.25.1
Container (OCI) Imagesâ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/dns-controller-manager:v0.25.1
Update shoot-dns-service to 1.64.1
[gardener/external-dns-management]
đ Bug Fixesâ
[USER]Ensure ignored entries are not deleted on cleanup in an edge case. by @MartinWeindel [gardener/external-dns-management#505]
đ Othersâ
[USER][provider type openstack-designate] Allow secret keyauthURLas alias ofOS_AUTH_URLby @MartinWeindel [gardener/external-dns-management#504][OPERATOR]Bumpopenstack-designateprovider librarygophercloudfrom versionv0.24.0tov2.7.0. by @MartinWeindel [gardener/external-dns-management#481]
Helm Chartsâ
- admission-shoot-dns-service-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-application:v1.64.1 - admission-shoot-dns-service-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-runtime:v1.64.1 - shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service:v1.64.1
Container (OCI) Imagesâ
- gardener-extension-admission-shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.64.1 - gardener-extension-shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.64.1
Update acl to 1.7.0
What's Changedâ
â ī¸ Breaking Changesâ
- Drop support for Seeds with Kubernetes version <= 1.26 by @RadaBDimitrova in https://github.com/stackitcloud/gardener-extension-acl/pull/119
⨠Featuresâ
- Publish helm charts to ghcr.io by @oliver-goetz in https://github.com/stackitcloud/gardener-extension-acl/pull/114
- Use ServiceTrafficDistribution to make Services topology-aware when runtime Kubernetes >= 1.31 by @ialidzhikov in https://github.com/stackitcloud/gardener-extension-acl/pull/105
- Adapt admission controller helm charts for deployment by gardener-operator by @oliver-goetz in https://github.com/stackitcloud/gardener-extension-acl/pull/121
đ¤ Dependenciesâ
- Update dependency ko-build/ko to v0.17.1 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/84
- Update module github.com/spf13/cobra to v1.9.1 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/113
- Update module github.com/onsi/ginkgo/v2 to v2.23.4 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/116
- Update module github.com/tidwall/gjson to v1.18.0 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/103
- Update module golang.org/x/tools to v0.32.0 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/125
- Update module github.com/onsi/gomega to v1.37.0 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/124
- Update dependency go to v1.24.2 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/112
- Update k8s packages (minor) by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/65
âšī¸ Other Changesâ
- Forbid container privilege escalations for Gardener Extension ACL component containers by @georgibaltiev in https://github.com/stackitcloud/gardener-extension-acl/pull/117
New Contributorsâ
- @oliver-goetz made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/114
- @RadaBDimitrova made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/119
- @georgibaltiev made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/117
- @Wieneo made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/126
Full Changelog: https://github.com/stackitcloud/gardener-extension-acl/compare/v1.6.0...v1.7.0
Update acl to 1.9.0
What's Changedâ
âšī¸ Other Changesâ
- Allow setting image repository and tag independently by @Lappihuan in https://github.com/stackitcloud/gardener-extension-acl/pull/144
New Contributorsâ
- @Lappihuan made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/144
Full Changelog: https://github.com/stackitcloud/gardener-extension-acl/compare/v1.8.0...v1.9.0
Update gardener-controlplane to 1.121.0
[gardener/gardener]
â ī¸ Breaking Changesâ
[DEVELOPER]Movedextensions/pkg/predicatetopkg/controllerutils/predicate. Please adjust imports accordingly. by @Wieneo [#12026][DEVELOPER]TheMutatorWithShootClienthas been removed from Gardener. If your mutator requires a shoot client, it should implement the newWantsShootClientinterface instead. The corresponding client can be found in the passed context via theShootClientContextKey. by @timuthy [#12289][DEVELOPER]Movedextensions/pkg/util/cloudprofiletopkg/utils/gardener/cloudprofile. Please adjust imports accordingly. by @Wieneo [#12026][USER]The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDeletefield in the Shoot API is deprecated in favor of.spec.kubernetes.clusterAutoscaler.maxScaleDownParallelismand will be removed once gardener stops supporting kubernetesv1.32. Please adapt your Shoot manifests accordingly. by @takoverflow [#12115][OPERATOR]gardenlet no longer deploys ControlPlane resources with.spec.purpose=exposurefor Shoots usingunmanagedDNS provider. gardenlet will now cleanup any ControlPlane exposure resource as part of the reconciliation and deletion flows for such Shoots. by @theoddora [#12162]
đ° Noteworthyâ
[OPERATOR]TheSeedbackup secret is no longer copied from theShootinfrastructure credentials in case an operator does not provide an existent backup secret andDoNotCopyBackupCredentialsfeature gate is enabled forgardenlet. If you configureseed.spec.backup.credentialsReforseed.spec.backup.secretRef, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeedbackup andShootinfrastructure. by @dimityrmirchev [#12168][OPERATOR]TheCredentialsRotationWithoutWorkersRolloutfeature gate has been promoted to beta and is now enabled by default. by @rfranzke [#12236]
⨠New Featuresâ
[DEVELOPER]Extension mutators or validators can now retrieve a correspondingClusterobject from the passedcontext.Context. The [WantsClusterObject(https://github.com/gardener/gardener/blob/70168f44c8b12541ea31cb688a7a7e18757e847f/extensions/pkg/webhook/handler.go#L285) interface must be implemented for this functionality. by @timuthy [#12289][USER]Concurrent drain and deletion of nodes that require drain can now be configured forcluster-autoscalervia the field.spec.kubernetes.clusterAutoscaler.maxDrainParallelismin the Shoot API. by @takoverflow [#12115][OPERATOR]gardenletnow doesn't scale up deployments duringShootreconciliation if they havedependency-watchdog.gardener.cloud/meltdown-protection-activeannotation on them. by @ashwani2k [#12314]
đ Bug Fixesâ
[USER]A bug causing thekube-apiserverto crash when anonymous authentication is configured viaStructuredAuthenticationwas fixed. by @dimityrmirchev [#12198][OPERATOR]An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12306]
đ Othersâ
[OPERATOR]Enhance DualStack migration docs with knowledge about manual reconciliation. by @adenitiu [#12246][OPERATOR]gardenadmis now published as a container image in release and snapshot builds. by @timebertt [#12294][OPERATOR]Introduce theperses-operatortoGardenandSeedclusters. by @rickardsjp [#12084][OPERATOR]Clarified and enforced policy in the Kubernetes version support process to retain only the latest 5 minor versions, improving security by dropping older, unpatched versions more consistently. by @vlerenc [#12201][DEVELOPER]Added the helper functionCurrentLifecycleClassification(version)to evaluate the current classification of a givenExpirableVersion. by @LucaBernstein [#12298][DEVELOPER]Introduced new version classificationsunavailableandexpired. They are not meant to be set manually but should act as computed classification states. by @LucaBernstein [#12298][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.2to1.80.3. Release Notes by @gardener-ci-robot [#12227]
[DEPENDENCY]The following dependencies have been updated:gardener/dependency-watchdogfromv1.4.0tov1.5.0. Release Notesgithub.com/gardener/dependency-watchdogfromv1.4.0tov1.5.0. by @ashwani2k [#12314]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controllerfrom1.4.0to1.4.1.registry.k8s.io/autoscaling/vpa-recommenderfrom1.4.0to1.4.1.registry.k8s.io/autoscaling/vpa-updaterfrom1.4.0to1.4.1. by @gardener-ci-robot [#12239]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.12.2tov1.12.3. by @gardener-ci-robot [#12258]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controllerfrom1.3.1to1.4.0.registry.k8s.io/autoscaling/vpa-recommenderfrom1.3.1to1.4.0.registry.k8s.io/autoscaling/vpa-updaterfrom1.3.1to1.4.0. by @gardener-ci-robot [#12167]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.11.6tov1.11.7. by @gardener-ci-robot [#12257]
Helm Chartsâ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.0
Container (OCI) Imagesâ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.0 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.0 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.0 - gardenadm:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.0 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.0 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.0
Update gardener-controlplane to 1.121.0
[gardener/gardener]
â ī¸ Breaking Changesâ
[DEVELOPER]Movedextensions/pkg/predicatetopkg/controllerutils/predicate. Please adjust imports accordingly. by @Wieneo [#12026][DEVELOPER]TheMutatorWithShootClienthas been removed from Gardener. If your mutator requires a shoot client, it should implement the newWantsShootClientinterface instead. The corresponding client can be found in the passed context via theShootClientContextKey. by @timuthy [#12289][DEVELOPER]Movedextensions/pkg/util/cloudprofiletopkg/utils/gardener/cloudprofile. Please adjust imports accordingly. by @Wieneo [#12026][USER]The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDeletefield in the Shoot API is deprecated in favor of.spec.kubernetes.clusterAutoscaler.maxScaleDownParallelismand will be removed once gardener stops supporting kubernetesv1.32. Please adapt your Shoot manifests accordingly. by @takoverflow [#12115][OPERATOR]gardenlet no longer deploys ControlPlane resources with.spec.purpose=exposurefor Shoots usingunmanagedDNS provider. gardenlet will now cleanup any ControlPlane exposure resource as part of the reconciliation and deletion flows for such Shoots. by @theoddora [#12162]
đ° Noteworthyâ
[OPERATOR]TheSeedbackup secret is no longer copied from theShootinfrastructure credentials in case an operator does not provide an existent backup secret andDoNotCopyBackupCredentialsfeature gate is enabled forgardenlet. If you configureseed.spec.backup.credentialsReforseed.spec.backup.secretRef, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeedbackup andShootinfrastructure. by @dimityrmirchev [#12168][OPERATOR]TheCredentialsRotationWithoutWorkersRolloutfeature gate has been promoted to beta and is now enabled by default. by @rfranzke [#12236]
⨠New Featuresâ
[DEVELOPER]Extension mutators or validators can now retrieve a correspondingClusterobject from the passedcontext.Context. The [WantsClusterObject(https://github.com/gardener/gardener/blob/70168f44c8b12541ea31cb688a7a7e18757e847f/extensions/pkg/webhook/handler.go#L285) interface must be implemented for this functionality. by @timuthy [#12289][USER]Concurrent drain and deletion of nodes that require drain can now be configured forcluster-autoscalervia the field.spec.kubernetes.clusterAutoscaler.maxDrainParallelismin the Shoot API. by @takoverflow [#12115][OPERATOR]gardenletnow doesn't scale up deployments duringShootreconciliation if they havedependency-watchdog.gardener.cloud/meltdown-protection-activeannotation on them. by @ashwani2k [#12314]
đ Bug Fixesâ
[USER]A bug causing thekube-apiserverto crash when anonymous authentication is configured viaStructuredAuthenticationwas fixed. by @dimityrmirchev [#12198][OPERATOR]An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12306]
đ Othersâ
[OPERATOR]Enhance DualStack migration docs with knowledge about manual reconciliation. by @adenitiu [#12246][OPERATOR]gardenadmis now published as a container image in release and snapshot builds. by @timebertt [#12294][OPERATOR]Introduce theperses-operatortoGardenandSeedclusters. by @rickardsjp [#12084][OPERATOR]Clarified and enforced policy in the Kubernetes version support process to retain only the latest 5 minor versions, improving security by dropping older, unpatched versions more consistently. by @vlerenc [#12201][DEVELOPER]Added the helper functionCurrentLifecycleClassification(version)to evaluate the current classification of a givenExpirableVersion. by @LucaBernstein [#12298][DEVELOPER]Introduced new version classificationsunavailableandexpired. They are not meant to be set manually but should act as computed classification states. by @LucaBernstein [#12298][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.2to1.80.3. Release Notes by @gardener-ci-robot [#12227]
[DEPENDENCY]The following dependencies have been updated:gardener/dependency-watchdogfromv1.4.0tov1.5.0. Release Notesgithub.com/gardener/dependency-watchdogfromv1.4.0tov1.5.0. by @ashwani2k [#12314]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controllerfrom1.4.0to1.4.1.registry.k8s.io/autoscaling/vpa-recommenderfrom1.4.0to1.4.1.registry.k8s.io/autoscaling/vpa-updaterfrom1.4.0to1.4.1. by @gardener-ci-robot [#12239]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.12.2tov1.12.3. by @gardener-ci-robot [#12258]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controllerfrom1.3.1to1.4.0.registry.k8s.io/autoscaling/vpa-recommenderfrom1.3.1to1.4.0.registry.k8s.io/autoscaling/vpa-updaterfrom1.3.1to1.4.0. by @gardener-ci-robot [#12167]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.11.6tov1.11.7. by @gardener-ci-robot [#12257]
Helm Chartsâ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.0
Container (OCI) Imagesâ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.0 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.0 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.0 - gardenadm:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.0 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.0 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.0
Update gardenlet to 1.121.0
[gardener/gardener]
â ī¸ Breaking Changesâ
[DEVELOPER]Movedextensions/pkg/predicatetopkg/controllerutils/predicate. Please adjust imports accordingly. by @Wieneo [#12026][DEVELOPER]TheMutatorWithShootClienthas been removed from Gardener. If your mutator requires a shoot client, it should implement the newWantsShootClientinterface instead. The corresponding client can be found in the passed context via theShootClientContextKey. by @timuthy [#12289][DEVELOPER]Movedextensions/pkg/util/cloudprofiletopkg/utils/gardener/cloudprofile. Please adjust imports accordingly. by @Wieneo [#12026][USER]The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDeletefield in the Shoot API is deprecated in favor of.spec.kubernetes.clusterAutoscaler.maxScaleDownParallelismand will be removed once gardener stops supporting kubernetesv1.32. Please adapt your Shoot manifests accordingly. by @takoverflow [#12115][OPERATOR]gardenlet no longer deploys ControlPlane resources with.spec.purpose=exposurefor Shoots usingunmanagedDNS provider. gardenlet will now cleanup any ControlPlane exposure resource as part of the reconciliation and deletion flows for such Shoots. by @theoddora [#12162]
đ° Noteworthyâ
[OPERATOR]TheSeedbackup secret is no longer copied from theShootinfrastructure credentials in case an operator does not provide an existent backup secret andDoNotCopyBackupCredentialsfeature gate is enabled forgardenlet. If you configureseed.spec.backup.credentialsReforseed.spec.backup.secretRef, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeedbackup andShootinfrastructure. by @dimityrmirchev [#12168][OPERATOR]TheCredentialsRotationWithoutWorkersRolloutfeature gate has been promoted to beta and is now enabled by default. by @rfranzke [#12236]
⨠New Featuresâ
[DEVELOPER]Extension mutators or validators can now retrieve a correspondingClusterobject from the passedcontext.Context. The [WantsClusterObject(https://github.com/gardener/gardener/blob/70168f44c8b12541ea31cb688a7a7e18757e847f/extensions/pkg/webhook/handler.go#L285) interface must be implemented for this functionality. by @timuthy [#12289][USER]Concurrent drain and deletion of nodes that require drain can now be configured forcluster-autoscalervia the field.spec.kubernetes.clusterAutoscaler.maxDrainParallelismin the Shoot API. by @takoverflow [#12115][OPERATOR]gardenletnow doesn't scale up deployments duringShootreconciliation if they havedependency-watchdog.gardener.cloud/meltdown-protection-activeannotation on them. by @ashwani2k [#12314]
đ Bug Fixesâ
[USER]A bug causing thekube-apiserverto crash when anonymous authentication is configured viaStructuredAuthenticationwas fixed. by @dimityrmirchev [#12198][OPERATOR]An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12306]
đ Othersâ
[OPERATOR]Enhance DualStack migration docs with knowledge about manual reconciliation. by @adenitiu [#12246][OPERATOR]gardenadmis now published as a container image in release and snapshot builds. by @timebertt [#12294][OPERATOR]Introduce theperses-operatortoGardenandSeedclusters. by @rickardsjp [#12084][OPERATOR]Clarified and enforced policy in the Kubernetes version support process to retain only the latest 5 minor versions, improving security by dropping older, unpatched versions more consistently. by @vlerenc [#12201][DEVELOPER]Added the helper functionCurrentLifecycleClassification(version)to evaluate the current classification of a givenExpirableVersion. by @LucaBernstein [#12298][DEVELOPER]Introduced new version classificationsunavailableandexpired. They are not meant to be set manually but should act as computed classification states. by @LucaBernstein [#12298][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.80.2to1.80.3. Release Notes by @gardener-ci-robot [#12227]
[DEPENDENCY]The following dependencies have been updated:gardener/dependency-watchdogfromv1.4.0tov1.5.0. Release Notesgithub.com/gardener/dependency-watchdogfromv1.4.0tov1.5.0. by @ashwani2k [#12314]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controllerfrom1.4.0to1.4.1.registry.k8s.io/autoscaling/vpa-recommenderfrom1.4.0to1.4.1.registry.k8s.io/autoscaling/vpa-updaterfrom1.4.0to1.4.1. by @gardener-ci-robot [#12239]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.12.2tov1.12.3. by @gardener-ci-robot [#12258]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controllerfrom1.3.1to1.4.0.registry.k8s.io/autoscaling/vpa-recommenderfrom1.3.1to1.4.0.registry.k8s.io/autoscaling/vpa-updaterfrom1.3.1to1.4.0. by @gardener-ci-robot [#12167]
[DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.11.6tov1.11.7. by @gardener-ci-robot [#12257]
Helm Chartsâ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.0
Container (OCI) Imagesâ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.0 - apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.0 - controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.0 - gardenadm:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.0 - gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.0 - node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.0 - operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.0 - resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.0 - scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.0
Update provider-azure to 1.53.0
[gardener/gardener-extension-provider-azure]
đ Bug Fixesâ
[USER]Fixed a bug which was causing theremedy-controllerto not be able to create and patcheventsby @AleksandarSavchev [#1196]
đ Othersâ
[DEPENDENCY]Update csi-driver-disk from v1.31.2 to v1.32.4 by @hebelsan [#1158][DEPENDENCY]Patch csi-resizer, csi-snapshot-controller, csi-snapshotter and csi-attacher by @hebelsan [#1158][DEPENDENCY]Patch versions of cloud-controller-manager by @hebelsan [#1158][DEPENDENCY]Patch versions of cloud-node-manager by @hebelsan [#1158][DEPENDENCY]Update csi-driver-file from v1.31.2 to v1.32.1 by @hebelsan [#1158][OPERATOR]Obsolete ClusterRoles and ClusterRoleBindings that were leftovers from the machine-controller-manager component are now cleaned up. by @georgibaltiev [#1176][OPERATOR]The images built by the Azure provider-extension are now multiarch-images, supporting x86_64 and arm64 by @AndreasBurger [#1118][OPERATOR]Update base image fromdebian11todebian12. by @MartinWeindel [#1140][OPERATOR]Update gardener/gardener to v1.118.0. by @ScheererJ [#1170][OPERATOR]Remove thepodAntiAffinityin the deployment in favor of onlyTopologySpreadConstraints. by @LucaBernstein [#1165][OPERATOR]Thecsi-snapshot-webhook-vpaVerticalPodAutoscaler and thecsi-snapshot-validationPodDisruptionBudget are now also cleaned up during the deletion of the legacycsi-snapshot-validationresources. by @ialidzhikov [#1177][OPERATOR]TheServiceTrafficDistributionfeature is being used on to make Services topology-aware when the runtime Kubernetes version is 1.31+. by @ialidzhikov [#1070][OPERATOR]RBACresources now explicitly stateresourcesandverbs, replaced use of wildcards*. by @georgibaltiev [#1108][OPERATOR]The legacy method of providing monitoring configuration viaConfigMaps labeled withextensions.gardener.cloud/configuration=monitoringhas been removed. The extension does now only uses the new contract for providing monitoring configuration. Before upgrading to this version of the extension, make sure that the deployed Gardener version supports the new monitoring contract. by @RadaBDimitrova [#1142][OPERATOR]Updategardener/gardenertov1.117.0Release Notes. by @acumino [#1150][DEVELOPER]replace/remove github.com/Azure/go-autorest/autorest by @hebelsan [#1160]
[gardener/terraformer]
đ Othersâ
[OPERATOR]Update gardener to v1.117.0 by @hebelsan [gardener/terraformer#162][OPERATOR]Update aws-sdk-go to v1.55.7 by @hebelsan [gardener/terraformer#162][OPERATOR]Update fsnotify to v1.9.0 by @hebelsan [gardener/terraformer#162]
Helm Chartsâ
- admission-azure-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-application:v1.53.0 - admission-azure-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-runtime:v1.53.0 - provider-azure:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-azure:v1.53.0
Container (OCI) Imagesâ
- gardener-extension-admission-azure:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.53.0 - gardener-extension-provider-azure:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.53.0