Release Notes v1.121
Yake release notes and upgrade guideâ
Related upstream release notes / changelogsâ
Update shoot-flux to 0.19.0
What's Changedâ
- renovate: disable semantic commits by @timebertt in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/152
- đ¤ Update module github.com/ironcore-dev/vgopath to v0.1.8 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/147
- đ¤ Update module golang.org/x/tools to v0.33.0 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/149
- đ¤ Update module github.com/go-logr/logr to v1.4.3 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/153
- đ¤ Update module github.com/onsi/gomega to v1.37.0 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/148
- đ¤ Update k8s.io/utils digest to 0f33e8f by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/145
- đ¤ Update module github.com/gardener/gardener to v1.120.0 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/150
- đ¤ Update module github.com/onsi/ginkgo/v2 to v2.23.4 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/146
- đ¤ Update module github.com/gardener/gardener to v1.120.1 by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/143
- đ¤ Update fluxcd (minor) by @renovate in https://github.com/stackitcloud/gardener-extension-shoot-flux/pull/154
Full Changelog: https://github.com/stackitcloud/gardener-extension-shoot-flux/compare/v0.18.0...v0.19.0
Update provider-alicloud to 1.62.0
[gardener/gardener-extension-provider-alicloud]
⨠New Featuresâ
[USER]
This extension now supports in-place node updates. Read more about it here. by @ary1992 [#795]
đ Othersâ
[OPERATOR]
Obsolete ClusterRoles and ClusterRoleBindings that were leftovers from the machine-controller-manager component are now cleaned up. by @georgibaltiev [#794][OPERATOR]
Updategardener/gardener
tov1.117.0
Release Notes by @kevin-lacoo [#786]
Helm Chartsâ
- admission-alicloud-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-application:v1.62.0
- admission-alicloud-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-alicloud-runtime:v1.62.0
- provider-alicloud:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-alicloud:v1.62.0
Container (OCI) Imagesâ
- gardener-extension-admission-alicloud:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-alicloud:v1.62.0
- gardener-extension-provider-alicloud:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-alicloud:v1.62.0
Update external-dns-management to 0.25.1
[gardener/external-dns-management]
đ Bug Fixesâ
[USER]
Ensure ignored entries are not deleted on cleanup in an edge case. by @MartinWeindel [#505]
đ Othersâ
[USER]
[provider type openstack-designate] Allow secret keyauthURL
as alias ofOS_AUTH_URL
by @MartinWeindel [#504][OPERATOR]
Bumpopenstack-designate
provider librarygophercloud
from versionv0.24.0
tov2.7.0
. by @MartinWeindel [#481]
Helm Chartsâ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/dns-controller-manager:v0.25.1
Container (OCI) Imagesâ
- dns-controller-manager:
europe-docker.pkg.dev/gardener-project/releases/dns-controller-manager:v0.25.1
Update shoot-dns-service to 1.64.1
[gardener/external-dns-management]
đ Bug Fixesâ
[USER]
Ensure ignored entries are not deleted on cleanup in an edge case. by @MartinWeindel [gardener/external-dns-management#505]
đ Othersâ
[USER]
[provider type openstack-designate] Allow secret keyauthURL
as alias ofOS_AUTH_URL
by @MartinWeindel [gardener/external-dns-management#504][OPERATOR]
Bumpopenstack-designate
provider librarygophercloud
from versionv0.24.0
tov2.7.0
. by @MartinWeindel [gardener/external-dns-management#481]
Helm Chartsâ
- admission-shoot-dns-service-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-application:v1.64.1
- admission-shoot-dns-service-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-runtime:v1.64.1
- shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service:v1.64.1
Container (OCI) Imagesâ
- gardener-extension-admission-shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.64.1
- gardener-extension-shoot-dns-service:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.64.1
Update acl to 1.7.0
What's Changedâ
â ī¸ Breaking Changesâ
- Drop support for Seeds with Kubernetes version <= 1.26 by @RadaBDimitrova in https://github.com/stackitcloud/gardener-extension-acl/pull/119
⨠Featuresâ
- Publish helm charts to ghcr.io by @oliver-goetz in https://github.com/stackitcloud/gardener-extension-acl/pull/114
- Use ServiceTrafficDistribution to make Services topology-aware when runtime Kubernetes >= 1.31 by @ialidzhikov in https://github.com/stackitcloud/gardener-extension-acl/pull/105
- Adapt admission controller helm charts for deployment by gardener-operator by @oliver-goetz in https://github.com/stackitcloud/gardener-extension-acl/pull/121
đ¤ Dependenciesâ
- Update dependency ko-build/ko to v0.17.1 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/84
- Update module github.com/spf13/cobra to v1.9.1 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/113
- Update module github.com/onsi/ginkgo/v2 to v2.23.4 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/116
- Update module github.com/tidwall/gjson to v1.18.0 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/103
- Update module golang.org/x/tools to v0.32.0 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/125
- Update module github.com/onsi/gomega to v1.37.0 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/124
- Update dependency go to v1.24.2 by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/112
- Update k8s packages (minor) by @renovate in https://github.com/stackitcloud/gardener-extension-acl/pull/65
âšī¸ Other Changesâ
- Forbid container privilege escalations for Gardener Extension ACL component containers by @georgibaltiev in https://github.com/stackitcloud/gardener-extension-acl/pull/117
New Contributorsâ
- @oliver-goetz made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/114
- @RadaBDimitrova made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/119
- @georgibaltiev made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/117
- @Wieneo made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/126
Full Changelog: https://github.com/stackitcloud/gardener-extension-acl/compare/v1.6.0...v1.7.0
Update acl to 1.9.0
What's Changedâ
âšī¸ Other Changesâ
- Allow setting image repository and tag independently by @Lappihuan in https://github.com/stackitcloud/gardener-extension-acl/pull/144
New Contributorsâ
- @Lappihuan made their first contribution in https://github.com/stackitcloud/gardener-extension-acl/pull/144
Full Changelog: https://github.com/stackitcloud/gardener-extension-acl/compare/v1.8.0...v1.9.0
Update gardener-controlplane to 1.121.0
[gardener/gardener]
â ī¸ Breaking Changesâ
[DEVELOPER]
Movedextensions/pkg/predicate
topkg/controllerutils/predicate
. Please adjust imports accordingly. by @Wieneo [#12026][DEVELOPER]
TheMutatorWithShootClient
has been removed from Gardener. If your mutator requires a shoot client, it should implement the newWantsShootClient
interface instead. The corresponding client can be found in the passed context via theShootClientContextKey
. by @timuthy [#12289][DEVELOPER]
Movedextensions/pkg/util/cloudprofile
topkg/utils/gardener/cloudprofile
. Please adjust imports accordingly. by @Wieneo [#12026][USER]
The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDelete
field in the Shoot API is deprecated in favor of.spec.kubernetes.clusterAutoscaler.maxScaleDownParallelism
and will be removed once gardener stops supporting kubernetesv1.32
. Please adapt your Shoot manifests accordingly. by @takoverflow [#12115][OPERATOR]
gardenlet no longer deploys ControlPlane resources with.spec.purpose=exposure
for Shoots usingunmanaged
DNS provider. gardenlet will now cleanup any ControlPlane exposure resource as part of the reconciliation and deletion flows for such Shoots. by @theoddora [#12162]
đ° Noteworthyâ
[OPERATOR]
TheSeed
backup secret is no longer copied from theShoot
infrastructure credentials in case an operator does not provide an existent backup secret andDoNotCopyBackupCredentials
feature gate is enabled forgardenlet
. If you configureseed.spec.backup.credentialsRef
orseed.spec.backup.secretRef
, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeed
backup andShoot
infrastructure. by @dimityrmirchev [#12168][OPERATOR]
TheCredentialsRotationWithoutWorkersRollout
feature gate has been promoted to beta and is now enabled by default. by @rfranzke [#12236]
⨠New Featuresâ
[DEVELOPER]
Extension mutators or validators can now retrieve a correspondingCluster
object from the passedcontext.Context
. The [WantsClusterObject
(https://github.com/gardener/gardener/blob/70168f44c8b12541ea31cb688a7a7e18757e847f/extensions/pkg/webhook/handler.go#L285) interface must be implemented for this functionality. by @timuthy [#12289][USER]
Concurrent drain and deletion of nodes that require drain can now be configured forcluster-autoscaler
via the field.spec.kubernetes.clusterAutoscaler.maxDrainParallelism
in the Shoot API. by @takoverflow [#12115][OPERATOR]
gardenlet
now doesn't scale up deployments duringShoot
reconciliation if they havedependency-watchdog.gardener.cloud/meltdown-protection-active
annotation on them. by @ashwani2k [#12314]
đ Bug Fixesâ
[USER]
A bug causing thekube-apiserver
to crash when anonymous authentication is configured viaStructuredAuthentication
was fixed. by @dimityrmirchev [#12198][OPERATOR]
An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12306]
đ Othersâ
[OPERATOR]
Enhance DualStack migration docs with knowledge about manual reconciliation. by @adenitiu [#12246][OPERATOR]
gardenadm
is now published as a container image in release and snapshot builds. by @timebertt [#12294][OPERATOR]
Introduce theperses-operator
toGarden
andSeed
clusters. by @rickardsjp [#12084][OPERATOR]
Clarified and enforced policy in the Kubernetes version support process to retain only the latest 5 minor versions, improving security by dropping older, unpatched versions more consistently. by @vlerenc [#12201][DEVELOPER]
Added the helper functionCurrentLifecycleClassification(version)
to evaluate the current classification of a givenExpirableVersion
. by @LucaBernstein [#12298][DEVELOPER]
Introduced new version classificationsunavailable
andexpired
. They are not meant to be set manually but should act as computed classification states. by @LucaBernstein [#12298][DEPENDENCY]
The following dependencies have been updated:gardener/dashboard
from1.80.2
to1.80.3
. Release Notes by @gardener-ci-robot [#12227]
[DEPENDENCY]
The following dependencies have been updated:gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. Release Notesgithub.com/gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. by @ashwani2k [#12314]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-recommender
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-updater
from1.4.0
to1.4.1
. by @gardener-ci-robot [#12239]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.12.2
tov1.12.3
. by @gardener-ci-robot [#12258]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-recommender
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-updater
from1.3.1
to1.4.0
. by @gardener-ci-robot [#12167]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.11.6
tov1.11.7
. by @gardener-ci-robot [#12257]
Helm Chartsâ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.0
Container (OCI) Imagesâ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.0
- apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.0
- controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.0
- gardenadm:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.0
- node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.0
- scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.0
Update gardener-controlplane to 1.121.0
[gardener/gardener]
â ī¸ Breaking Changesâ
[DEVELOPER]
Movedextensions/pkg/predicate
topkg/controllerutils/predicate
. Please adjust imports accordingly. by @Wieneo [#12026][DEVELOPER]
TheMutatorWithShootClient
has been removed from Gardener. If your mutator requires a shoot client, it should implement the newWantsShootClient
interface instead. The corresponding client can be found in the passed context via theShootClientContextKey
. by @timuthy [#12289][DEVELOPER]
Movedextensions/pkg/util/cloudprofile
topkg/utils/gardener/cloudprofile
. Please adjust imports accordingly. by @Wieneo [#12026][USER]
The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDelete
field in the Shoot API is deprecated in favor of.spec.kubernetes.clusterAutoscaler.maxScaleDownParallelism
and will be removed once gardener stops supporting kubernetesv1.32
. Please adapt your Shoot manifests accordingly. by @takoverflow [#12115][OPERATOR]
gardenlet no longer deploys ControlPlane resources with.spec.purpose=exposure
for Shoots usingunmanaged
DNS provider. gardenlet will now cleanup any ControlPlane exposure resource as part of the reconciliation and deletion flows for such Shoots. by @theoddora [#12162]
đ° Noteworthyâ
[OPERATOR]
TheSeed
backup secret is no longer copied from theShoot
infrastructure credentials in case an operator does not provide an existent backup secret andDoNotCopyBackupCredentials
feature gate is enabled forgardenlet
. If you configureseed.spec.backup.credentialsRef
orseed.spec.backup.secretRef
, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeed
backup andShoot
infrastructure. by @dimityrmirchev [#12168][OPERATOR]
TheCredentialsRotationWithoutWorkersRollout
feature gate has been promoted to beta and is now enabled by default. by @rfranzke [#12236]
⨠New Featuresâ
[DEVELOPER]
Extension mutators or validators can now retrieve a correspondingCluster
object from the passedcontext.Context
. The [WantsClusterObject
(https://github.com/gardener/gardener/blob/70168f44c8b12541ea31cb688a7a7e18757e847f/extensions/pkg/webhook/handler.go#L285) interface must be implemented for this functionality. by @timuthy [#12289][USER]
Concurrent drain and deletion of nodes that require drain can now be configured forcluster-autoscaler
via the field.spec.kubernetes.clusterAutoscaler.maxDrainParallelism
in the Shoot API. by @takoverflow [#12115][OPERATOR]
gardenlet
now doesn't scale up deployments duringShoot
reconciliation if they havedependency-watchdog.gardener.cloud/meltdown-protection-active
annotation on them. by @ashwani2k [#12314]
đ Bug Fixesâ
[USER]
A bug causing thekube-apiserver
to crash when anonymous authentication is configured viaStructuredAuthentication
was fixed. by @dimityrmirchev [#12198][OPERATOR]
An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12306]
đ Othersâ
[OPERATOR]
Enhance DualStack migration docs with knowledge about manual reconciliation. by @adenitiu [#12246][OPERATOR]
gardenadm
is now published as a container image in release and snapshot builds. by @timebertt [#12294][OPERATOR]
Introduce theperses-operator
toGarden
andSeed
clusters. by @rickardsjp [#12084][OPERATOR]
Clarified and enforced policy in the Kubernetes version support process to retain only the latest 5 minor versions, improving security by dropping older, unpatched versions more consistently. by @vlerenc [#12201][DEVELOPER]
Added the helper functionCurrentLifecycleClassification(version)
to evaluate the current classification of a givenExpirableVersion
. by @LucaBernstein [#12298][DEVELOPER]
Introduced new version classificationsunavailable
andexpired
. They are not meant to be set manually but should act as computed classification states. by @LucaBernstein [#12298][DEPENDENCY]
The following dependencies have been updated:gardener/dashboard
from1.80.2
to1.80.3
. Release Notes by @gardener-ci-robot [#12227]
[DEPENDENCY]
The following dependencies have been updated:gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. Release Notesgithub.com/gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. by @ashwani2k [#12314]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-recommender
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-updater
from1.4.0
to1.4.1
. by @gardener-ci-robot [#12239]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.12.2
tov1.12.3
. by @gardener-ci-robot [#12258]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-recommender
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-updater
from1.3.1
to1.4.0
. by @gardener-ci-robot [#12167]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.11.6
tov1.11.7
. by @gardener-ci-robot [#12257]
Helm Chartsâ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.0
Container (OCI) Imagesâ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.0
- apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.0
- controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.0
- gardenadm:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.0
- node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.0
- scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.0
Update gardenlet to 1.121.0
[gardener/gardener]
â ī¸ Breaking Changesâ
[DEVELOPER]
Movedextensions/pkg/predicate
topkg/controllerutils/predicate
. Please adjust imports accordingly. by @Wieneo [#12026][DEVELOPER]
TheMutatorWithShootClient
has been removed from Gardener. If your mutator requires a shoot client, it should implement the newWantsShootClient
interface instead. The corresponding client can be found in the passed context via theShootClientContextKey
. by @timuthy [#12289][DEVELOPER]
Movedextensions/pkg/util/cloudprofile
topkg/utils/gardener/cloudprofile
. Please adjust imports accordingly. by @Wieneo [#12026][USER]
The.spec.kubernetes.clusterAutoscaler.maxEmptyBulkDelete
field in the Shoot API is deprecated in favor of.spec.kubernetes.clusterAutoscaler.maxScaleDownParallelism
and will be removed once gardener stops supporting kubernetesv1.32
. Please adapt your Shoot manifests accordingly. by @takoverflow [#12115][OPERATOR]
gardenlet no longer deploys ControlPlane resources with.spec.purpose=exposure
for Shoots usingunmanaged
DNS provider. gardenlet will now cleanup any ControlPlane exposure resource as part of the reconciliation and deletion flows for such Shoots. by @theoddora [#12162]
đ° Noteworthyâ
[OPERATOR]
TheSeed
backup secret is no longer copied from theShoot
infrastructure credentials in case an operator does not provide an existent backup secret andDoNotCopyBackupCredentials
feature gate is enabled forgardenlet
. If you configureseed.spec.backup.credentialsRef
orseed.spec.backup.secretRef
, make sure that the referred credential already exists. For production setups, it is advised that operators configure a separate set of credentials forSeed
backup andShoot
infrastructure. by @dimityrmirchev [#12168][OPERATOR]
TheCredentialsRotationWithoutWorkersRollout
feature gate has been promoted to beta and is now enabled by default. by @rfranzke [#12236]
⨠New Featuresâ
[DEVELOPER]
Extension mutators or validators can now retrieve a correspondingCluster
object from the passedcontext.Context
. The [WantsClusterObject
(https://github.com/gardener/gardener/blob/70168f44c8b12541ea31cb688a7a7e18757e847f/extensions/pkg/webhook/handler.go#L285) interface must be implemented for this functionality. by @timuthy [#12289][USER]
Concurrent drain and deletion of nodes that require drain can now be configured forcluster-autoscaler
via the field.spec.kubernetes.clusterAutoscaler.maxDrainParallelism
in the Shoot API. by @takoverflow [#12115][OPERATOR]
gardenlet
now doesn't scale up deployments duringShoot
reconciliation if they havedependency-watchdog.gardener.cloud/meltdown-protection-active
annotation on them. by @ashwani2k [#12314]
đ Bug Fixesâ
[USER]
A bug causing thekube-apiserver
to crash when anonymous authentication is configured viaStructuredAuthentication
was fixed. by @dimityrmirchev [#12198][OPERATOR]
An issue causing the Shoot credentials rotation status not to correctly get updated, after all the manual in-place pending workers are updated, is now fixed. by @shafeeqes [#12306]
đ Othersâ
[OPERATOR]
Enhance DualStack migration docs with knowledge about manual reconciliation. by @adenitiu [#12246][OPERATOR]
gardenadm
is now published as a container image in release and snapshot builds. by @timebertt [#12294][OPERATOR]
Introduce theperses-operator
toGarden
andSeed
clusters. by @rickardsjp [#12084][OPERATOR]
Clarified and enforced policy in the Kubernetes version support process to retain only the latest 5 minor versions, improving security by dropping older, unpatched versions more consistently. by @vlerenc [#12201][DEVELOPER]
Added the helper functionCurrentLifecycleClassification(version)
to evaluate the current classification of a givenExpirableVersion
. by @LucaBernstein [#12298][DEVELOPER]
Introduced new version classificationsunavailable
andexpired
. They are not meant to be set manually but should act as computed classification states. by @LucaBernstein [#12298][DEPENDENCY]
The following dependencies have been updated:gardener/dashboard
from1.80.2
to1.80.3
. Release Notes by @gardener-ci-robot [#12227]
[DEPENDENCY]
The following dependencies have been updated:gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. Release Notesgithub.com/gardener/dependency-watchdog
fromv1.4.0
tov1.5.0
. by @ashwani2k [#12314]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-recommender
from1.4.0
to1.4.1
.registry.k8s.io/autoscaling/vpa-updater
from1.4.0
to1.4.1
. by @gardener-ci-robot [#12239]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.12.2
tov1.12.3
. by @gardener-ci-robot [#12258]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-recommender
from1.3.1
to1.4.0
.registry.k8s.io/autoscaling/vpa-updater
from1.3.1
to1.4.0
. by @gardener-ci-robot [#12167]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.11.6
tov1.11.7
. by @gardener-ci-robot [#12257]
Helm Chartsâ
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.121.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.121.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.121.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.121.0
Container (OCI) Imagesâ
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.121.0
- apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.121.0
- controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.121.0
- gardenadm:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.121.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.121.0
- node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.121.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.121.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.121.0
- scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.121.0
Update provider-azure to 1.53.0
[gardener/gardener-extension-provider-azure]
đ Bug Fixesâ
[USER]
Fixed a bug which was causing theremedy-controller
to not be able to create and patchevents
by @AleksandarSavchev [#1196]
đ Othersâ
[DEPENDENCY]
Update csi-driver-disk from v1.31.2 to v1.32.4 by @hebelsan [#1158][DEPENDENCY]
Patch csi-resizer, csi-snapshot-controller, csi-snapshotter and csi-attacher by @hebelsan [#1158][DEPENDENCY]
Patch versions of cloud-controller-manager by @hebelsan [#1158][DEPENDENCY]
Patch versions of cloud-node-manager by @hebelsan [#1158][DEPENDENCY]
Update csi-driver-file from v1.31.2 to v1.32.1 by @hebelsan [#1158][OPERATOR]
Obsolete ClusterRoles and ClusterRoleBindings that were leftovers from the machine-controller-manager component are now cleaned up. by @georgibaltiev [#1176][OPERATOR]
The images built by the Azure provider-extension are now multiarch-images, supporting x86_64 and arm64 by @AndreasBurger [#1118][OPERATOR]
Update base image fromdebian11
todebian12
. by @MartinWeindel [#1140][OPERATOR]
Update gardener/gardener to v1.118.0. by @ScheererJ [#1170][OPERATOR]
Remove thepodAntiAffinity
in the deployment in favor of onlyTopologySpreadConstraints
. by @LucaBernstein [#1165][OPERATOR]
Thecsi-snapshot-webhook-vpa
VerticalPodAutoscaler and thecsi-snapshot-validation
PodDisruptionBudget are now also cleaned up during the deletion of the legacycsi-snapshot-validation
resources. by @ialidzhikov [#1177][OPERATOR]
TheServiceTrafficDistribution
feature is being used on to make Services topology-aware when the runtime Kubernetes version is 1.31+. by @ialidzhikov [#1070][OPERATOR]
RBAC
resources now explicitly stateresources
andverbs
, replaced use of wildcards*
. by @georgibaltiev [#1108][OPERATOR]
The legacy method of providing monitoring configuration viaConfigMap
s labeled withextensions.gardener.cloud/configuration=monitoring
has been removed. The extension does now only uses the new contract for providing monitoring configuration. Before upgrading to this version of the extension, make sure that the deployed Gardener version supports the new monitoring contract. by @RadaBDimitrova [#1142][OPERATOR]
Updategardener/gardener
tov1.117.0
Release Notes. by @acumino [#1150][DEVELOPER]
replace/remove github.com/Azure/go-autorest/autorest by @hebelsan [#1160]
[gardener/terraformer]
đ Othersâ
[OPERATOR]
Update gardener to v1.117.0 by @hebelsan [gardener/terraformer#162][OPERATOR]
Update aws-sdk-go to v1.55.7 by @hebelsan [gardener/terraformer#162][OPERATOR]
Update fsnotify to v1.9.0 by @hebelsan [gardener/terraformer#162]
Helm Chartsâ
- admission-azure-application:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-application:v1.53.0
- admission-azure-runtime:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-runtime:v1.53.0
- provider-azure:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-azure:v1.53.0
Container (OCI) Imagesâ
- gardener-extension-admission-azure:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.53.0
- gardener-extension-provider-azure:
europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.53.0