Skip to main content

Release Notes v1.129

Yake release notes and upgrade guide​

Related upstream release notes / changelogs​

Update shoot-dns-service to 1.70.0

[github.com/gardener/gardener-extension-shoot-dns-service:v1.70.0]

πŸƒ Others​

  • [OPERATOR] Fix admission helm chart OCI repository paths after renaming. by @MartinWeindel [#549]

Helm Charts​

  • shoot-dns-service-admission-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service-admission-application:v1.70.0
  • shoot-dns-service-admission-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service-admission-runtime:v1.70.0
  • shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service:v1.70.0

Container (OCI) Images​

  • gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.70.0
  • gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.70.0
Update gardener-controlplane to 1.128.1

[github.com/gardener/gardener:v1.128.1]

πŸ› Bug Fixes​

  • [OPERATOR] Fixed the alertmanager-garden peer discovery service port names by @gardener-ci-robot [#12991]

πŸƒ Others​

  • [USER] Gardener API server now serves the OpenAPI v2 schema ( /openapi/v2 endpoint) again and will keep on serving it until Gardener v1.160. In Gardener v1.127.0, the support for OpenAPI v2 schemas was removed. However, terraform-provider-kubernetes does not yet support OpenAPI v3 schema. by @gardener-ci-robot [#12992]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.1

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.1
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.1
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.1
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.1
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.1
Update gardener-controlplane to 1.128.1

[github.com/gardener/gardener:v1.128.1]

πŸ› Bug Fixes​

  • [OPERATOR] Fixed the alertmanager-garden peer discovery service port names by @gardener-ci-robot [#12991]

πŸƒ Others​

  • [USER] Gardener API server now serves the OpenAPI v2 schema ( /openapi/v2 endpoint) again and will keep on serving it until Gardener v1.160. In Gardener v1.127.0, the support for OpenAPI v2 schemas was removed. However, terraform-provider-kubernetes does not yet support OpenAPI v3 schema. by @gardener-ci-robot [#12992]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.1

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.1
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.1
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.1
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.1
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.1
Update gardenlet to 1.128.1

[github.com/gardener/gardener:v1.128.1]

πŸ› Bug Fixes​

  • [OPERATOR] Fixed the alertmanager-garden peer discovery service port names by @gardener-ci-robot [#12991]

πŸƒ Others​

  • [USER] Gardener API server now serves the OpenAPI v2 schema ( /openapi/v2 endpoint) again and will keep on serving it until Gardener v1.160. In Gardener v1.127.0, the support for OpenAPI v2 schemas was removed. However, terraform-provider-kubernetes does not yet support OpenAPI v3 schema. by @gardener-ci-robot [#12992]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.1

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.1
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.1
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.1
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.1
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.1
Update os-coreos to 1.26.0

[github.com/gardener/gardener-extension-os-coreos:v1.26.0]

πŸƒ Others​

  • [OPERATOR] Add missing securityContext controls in order to comply with the restricted Pod Security Standards policy. by @mstueer [#224]
  • [DEVELOPER] migrate pipeline to GitHub-Actions by @ccwienk [#187]
  • [OPERATOR] An example Extension manifest for extension registration has been added. It can be found at example/extension.yaml by @timuthy [#219]

Helm Charts​

  • os-coreos: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/os-coreos:v1.26.0

Container (OCI) Images​

  • gardener-extension-os-coreos: europe-docker.pkg.dev/gardener-project/releases/extensions/os-coreos:v1.26.0
Update provider-azure to 1.55.0

[github.com/gardener/gardener-extension-provider-azure:v1.55.0]

⚠️ Breaking Changes​

  • [OPERATOR] Refactor Feature Gates specification for the provider-extesion helm chart. Operators need to specify their deployed feature gates with their canonical name. by @kon-angelo [#1301]

✨ New Features​

  • [OPERATOR] This extension now supports WorkloadIdentitys as credentials for etcd backup. by @vpnachev [#1265]

πŸƒ Others​

  • [OPERATOR] Update RBAC for extensions running in the runtime cluster. by @hebelsan [#1266]
  • [OPERATOR] Fix a bug that disabled subnet's default outbound access. by @kon-angelo [#1290]
  • [OPERATOR] Add advanced shoot input validation by @kon-angelo [#1295]

Helm Charts​

  • admission-azure-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-application:v1.55.0
  • admission-azure-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-runtime:v1.55.0
  • provider-azure: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-azure:v1.55.0

Container (OCI) Images​

  • gardener-extension-admission-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.55.0
  • gardener-extension-provider-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.55.0
Update dashboard to 1.82.2

[github.com/gardener/dashboard:1.82.2]

πŸ› Bug Fixes​

  • [USER] Resolved a server error that occurred when retrieving information in the About dialog by @gardener-github-actions[bot] [#2645]
  • [USER] Fixed an issue where supported regions were not correctly identified as recommended regions. This caused invalid defaulting of regions, and in cases where seedCandidateDeterminationStrategy was set to SameRegion, the region list could incorrectly be empty by @gardener-github-actions[bot] [#2646]

Container (OCI) Images​

  • gardener-dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.82.2
Update dashboard to 1.82.2

[github.com/gardener/dashboard:1.82.2]

πŸ› Bug Fixes​

  • [USER] Resolved a server error that occurred when retrieving information in the About dialog by @gardener-github-actions[bot] [#2645]
  • [USER] Fixed an issue where supported regions were not correctly identified as recommended regions. This caused invalid defaulting of regions, and in cases where seedCandidateDeterminationStrategy was set to SameRegion, the region list could incorrectly be empty by @gardener-github-actions[bot] [#2646]

Container (OCI) Images​

  • gardener-dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.82.2
Update provider-gcp to 1.46.0

[github.com/gardener/gardener-extension-provider-gcp:v1.46.0]

✨ New Features​

  • [OPERATOR] This extension now supports WorkloadIdentitys as credentials for etcd backup. by @vpnachev [#1151]

πŸ› Bug Fixes​

  • [OPERATOR] A bug in the admission-gcp component, which was causing a nil-pointer exception in case a new in-place worker is added, is now fixed. by @shafeeqes [#1169]
  • [OPERATOR] A bug preventing all obsolete machine-controller-manager ClusterRoles and ClusterRoleBindings to be deleted on extension startup has been fixed. by @georgibaltiev [#1137]

πŸƒ Others​

  • [OPERATOR] Remove unused terraformer image by @kon-angelo [#1181]
  • [OPERATOR] Update GHA for new release options by @kon-angelo [#1131]
  • [OPERATOR] Update RBAC for extensions running in the runtime cluster. by @kon-angelo [#1155]
  • [OPERATOR] Upgrade gardener dependency to v1.122.1 by @plkokanov [#1122]
  • [OPERATOR] provider-gcp no longer supports Shoots with Кubernetes version <= 1.28. by @georgibaltiev [#1123]
  • [OPERATOR] Improve user input validation for provider related fields. by @kon-angelo [#1173]
  • [OPERATOR] Upgrade gardener/gardener to v1.125.0 by @hebelsan [#1142]
  • [OPERATOR] Upgrade gardener dependency to v1.123.1 by @theoddora [#1132]
  • [OPERATOR] Deprecate obsolete role, rolebinding and serviceaccounts from terraformer by @kon-angelo [#1136]
  • [DEVELOPER] migrate CICD-Pipeline to GitHub-Actions by @ccwienk [#1121]
  • [OPERATOR] An example Extension manifest for extension registration has been added. It can be found at example/extension.yaml by @timuthy [#1154]
  • [OPERATOR] Update csi driver filestore image from v1.10.1 to v1.11.0 by @hebelsan [#1124]
  • [OPERATOR] Add missing securityContext controls in order to comply with the restricted Pod Security Standards policy. by @mstueer [#1165]
  • [OPERATOR] Increase node controller workers for cloud-controller-manager by @kon-angelo [#1138]
  • [OPERATOR] Update gardener/gardener to v1.127.1 by @hebelsan [#1172]

Helm Charts​

  • admission-gcp-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-application:v1.46.0
  • admission-gcp-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-gcp-runtime:v1.46.0
  • provider-gcp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-gcp:v1.46.0

Container (OCI) Images​

  • gardener-extension-admission-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-gcp:v1.46.0
  • gardener-extension-provider-gcp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-gcp:v1.46.0
Update provider-openstack to 1.49.0

[github.com/gardener/gardener-extension-provider-openstack:v1.49.0]

⚠️ Breaking Changes​

  • [OPERATOR] Update the defaults for the infrastructure controller. Unless opted out per shoot or per seed, the infrastructure controller will now by default reconcile using the flow implementation. In future release v1.50.0 we will disable reconciliation via terraform. by @kon-angelo [#1114]

πŸ› Bug Fixes​

  • [OPERATOR] A bug preventing all obsolete machine-controller-manager ClusterRoles and ClusterRoleBindings to be deleted on extension startup has been fixed. by @georgibaltiev [#1116]

πŸƒ Others​

  • [OPERATOR] Remove deprecated storage class nfs-constraint- for manila-csi-driver by @hebelsan [#1131]
  • [OPERATOR] provider-openstack no longer supports Shoots with Кubernetes version <= 1.28. by @RadaBDimitrova [#1101]
  • [OPERATOR] Update non-gardener dependencies & gardener/gardener to v1.125.1 by @hebelsan [#1127]
  • [DEVELOPER] migrate CICD-Pipeline to GitHub-Actions by @ccwienk [#1090]
  • [OPERATOR] Upgrade gardener dependency to v1.123.1 by @theoddora [#1113]
  • [OPERATOR] Upgrade gardener dependency to v1.122.1 by @plkokanov [#1100]
  • [OPERATOR] export testresults as inlined ocm-resource by @heldkat [#1107]
  • [OPERATOR] An example Extension manifest for extension registration has been added. It can be found at example/extension.yaml by @timuthy [#1136]
  • [DEVELOPER] Separate bastion reconcile and delete options by @hebelsan [#1108]
  • [OPERATOR] Add shoot input validation by @kon-angelo [#1155]
  • [OPERATOR] Update RBAC for extensions running in the runtime cluster. by @hebelsan [#1139]

Helm Charts​

  • admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.49.0
  • admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.49.0
  • provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.49.0

Container (OCI) Images​

  • gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.49.0
  • gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.49.0
Update gardener-controlplane to 1.128.2

[github.com/gardener/gardener:v1.128.2]

πŸ› Bug Fixes​

  • [DEVELOPER] The Priority field for the MachineDeployment API is optional instead of required again. by @gardener-ci-robot [#13016]

πŸƒ Others​

  • [DEVELOPER] The optimistic defaulting of priorities for MachineDeployments was introduced again. by @gardener-ci-robot [#13016]
  • [DEPENDENCY] The following dependencies have been updated:

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.2

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.2
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.2
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.2
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.2
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.2
Update gardener-controlplane to 1.128.2

[github.com/gardener/gardener:v1.128.2]

πŸ› Bug Fixes​

  • [DEVELOPER] The Priority field for the MachineDeployment API is optional instead of required again. by @gardener-ci-robot [#13016]

πŸƒ Others​

  • [DEVELOPER] The optimistic defaulting of priorities for MachineDeployments was introduced again. by @gardener-ci-robot [#13016]
  • [DEPENDENCY] The following dependencies have been updated:

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.2

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.2
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.2
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.2
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.2
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.2
Update gardenlet to 1.128.2

[github.com/gardener/gardener:v1.128.2]

πŸ› Bug Fixes​

  • [DEVELOPER] The Priority field for the MachineDeployment API is optional instead of required again. by @gardener-ci-robot [#13016]

πŸƒ Others​

  • [DEVELOPER] The optimistic defaulting of priorities for MachineDeployments was introduced again. by @gardener-ci-robot [#13016]
  • [DEPENDENCY] The following dependencies have been updated:

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.2

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.2
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.2
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.2
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.2
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.2
Update provider-aws to 1.64.0

[github.com/gardener/gardener-extension-provider-aws:v1.64.0]

✨ New Features​

  • [OPERATOR] Admission controller now allows seed.spec.backup.credentialsRef and backupBucket.spec.credentialsRef to use credentials of either v1.Secret or security.gardener.cloud/v1alpha1.WorkloadIdentity by @vpnachev [#1461]

πŸƒ Others​

  • [OPERATOR] Update RBAC for extensions running in the runtime cluster. by @hebelsan [#1460]
  • [OPERATOR] LoadBalancer services in IPv6 and dual-stack clusters can now opt out of automatic dual-stack annotations using extensions.gardener.cloud/ignore-load-balancer: "true". by @axel7born [#1459]
  • [OPERATOR] AMI selection for workers' MachineClass supports Cloudprofiles with Capabilities. by @Roncossek [#1458]
  • [OPERATOR] Adopts Gardener MachineImage Capabilities and introduces CapabilitySets to the providerConfig. by @Roncossek [#1306]
  • [OPERATOR] Migration from dual-stack [IPv4, IPv6] to [IPv4] networking is now allowed. by @axel7born [#1481]
  • [OPERATOR] Input validation for shoot fields by @kon-angelo [#1479]
  • [OPERATOR] An example Extension manifest for extension registration has been added. It can be found at example/extension.yaml by @timuthy [#1454]
  • [OPERATOR] Remove CPU requests for aws-extension components in Shoot and Seed. by @voelzmo [#1448]
  • [OPERATOR] Update mcm AWS image from v0.25.0 to v0.26.0 by @hebelsan [#1478]

Helm Charts​

  • admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.64.0
  • admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.64.0
  • provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.64.0

Container (OCI) Images​

  • gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.64.0
  • gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.64.0
Update gardener-controlplane to 1.128.3

[github.com/gardener/gardener:v1.128.3]

πŸƒ Others​

  • [OPERATOR] Revert server block import of coredns-custom configmap for node-local-dns. by @gardener-ci-robot [#13038]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.3
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.3
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.3
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.3

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.3
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.3
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.3
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.3
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.3
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.3
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.3
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.3
Update gardener-controlplane to 1.128.3

[github.com/gardener/gardener:v1.128.3]

πŸƒ Others​

  • [OPERATOR] Revert server block import of coredns-custom configmap for node-local-dns. by @gardener-ci-robot [#13038]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.3
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.3
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.3
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.3

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.3
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.3
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.3
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.3
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.3
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.3
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.3
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.3
Update gardenlet to 1.128.3

[github.com/gardener/gardener:v1.128.3]

πŸƒ Others​

  • [OPERATOR] Revert server block import of coredns-custom configmap for node-local-dns. by @gardener-ci-robot [#13038]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.3
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.3
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.3
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.3

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.3
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.3
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.3
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.3
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.3
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.3
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.3
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.3
Update provider-openstack to 1.49.1

Helm Charts​

  • admission-openstack-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.49.1
  • admission-openstack-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.49.1
  • provider-openstack: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.49.1

Container (OCI) Images​

  • gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.49.1
  • gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.49.1
Update shoot-rsyslog-relp to 0.10.1

[github.com/gardener/gardener-extension-shoot-rsyslog-relp:v0.10.1]

πŸ› Bug Fixes​

  • [OPERATOR] Fix casing of role in ScrapeConfig. by @gardener-ci-robot [#314]

Helm Charts​

  • shoot-rsyslog-relp-admission-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-rsyslog-relp-admission-application:v0.10.1
  • shoot-rsyslog-relp-admission-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-rsyslog-relp-admission-runtime:v0.10.1
  • shoot-rsyslog-relp: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-rsyslog-relp:v0.10.1

Container (OCI) Images​

  • gardener-extension-shoot-rsyslog-relp-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp-admission:v0.10.1
  • gardener-extension-shoot-rsyslog-relp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp:v0.10.1
Update acl to 1.12.0

What's Changed​

⚠️ Breaking Changes​

  • Drop special handling for provider-openstack by @timebertt in https://github.com/stackitcloud/gardener-extension-acl/pull/173
    • Operators should ensure that the provider-openstack version is recent enough to publish Infrastructure.status.egressCIDRs for all clusters before upgrading to this version of this extension.

πŸ€– Dependencies​

New Contributors​

Full Changelog: https://github.com/stackitcloud/gardener-extension-acl/compare/v1.11.0...v1.12.0

Update provider-aws to 1.64.1

Helm Charts​

  • admission-aws-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-application:v1.64.1
  • admission-aws-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-aws-runtime:v1.64.1
  • provider-aws: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-aws:v1.64.1

Container (OCI) Images​

  • gardener-extension-admission-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-aws:v1.64.1
  • gardener-extension-provider-aws: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-aws:v1.64.1
Update dashboard to 1.82.3

[github.com/gardener/dashboard:1.82.3]

πŸ› Bug Fixes​

  • [USER] Added the missing cloudflare-dns provider to the list of supported DNS providers by @gardener-github-actions[bot] [#2667]

Container (OCI) Images​

  • gardener-dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.82.3
Update dashboard to 1.82.3

[github.com/gardener/dashboard:1.82.3]

πŸ› Bug Fixes​

  • [USER] Added the missing cloudflare-dns provider to the list of supported DNS providers by @gardener-github-actions[bot] [#2667]

Container (OCI) Images​

  • gardener-dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.82.3
Update gardener-controlplane to 1.128.4

[github.com/gardener/gardener:v1.128.4]

πŸ› Bug Fixes​

  • [DEVELOPER] An issue preventing extensions.gardener.cloud/v1alpha1.Bastions to be listed due to missing json tags is now fixed. by @gardener-ci-robot [#13063]
  • [USER] A bug causing finalizers to not be removed from Secrets when such are deleted and referenced by both a CredentialsBinding and a SecretBinding is fixed. by @gardener-ci-robot [#13074]
  • [OPERATOR] A bug in the gardenletdeployer unable to handle backup credentials of type WorkloadIdentity has been fixed. by @vpnachev [#13088]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.4
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.4
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.4
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.4

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.4
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.4
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.4
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.4
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.4
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.4
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.4
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.4
Update gardener-controlplane to 1.128.4

[github.com/gardener/gardener:v1.128.4]

πŸ› Bug Fixes​

  • [DEVELOPER] An issue preventing extensions.gardener.cloud/v1alpha1.Bastions to be listed due to missing json tags is now fixed. by @gardener-ci-robot [#13063]
  • [USER] A bug causing finalizers to not be removed from Secrets when such are deleted and referenced by both a CredentialsBinding and a SecretBinding is fixed. by @gardener-ci-robot [#13074]
  • [OPERATOR] A bug in the gardenletdeployer unable to handle backup credentials of type WorkloadIdentity has been fixed. by @vpnachev [#13088]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.4
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.4
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.4
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.4

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.4
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.4
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.4
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.4
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.4
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.4
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.4
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.4
Update gardenlet to 1.128.4

[github.com/gardener/gardener:v1.128.4]

πŸ› Bug Fixes​

  • [DEVELOPER] An issue preventing extensions.gardener.cloud/v1alpha1.Bastions to be listed due to missing json tags is now fixed. by @gardener-ci-robot [#13063]
  • [USER] A bug causing finalizers to not be removed from Secrets when such are deleted and referenced by both a CredentialsBinding and a SecretBinding is fixed. by @gardener-ci-robot [#13074]
  • [OPERATOR] A bug in the gardenletdeployer unable to handle backup credentials of type WorkloadIdentity has been fixed. by @vpnachev [#13088]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.128.4
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.128.4
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.128.4
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.128.4

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.128.4
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.128.4
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.128.4
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.128.4
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.128.4
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.128.4
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.128.4
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.128.4
Update gardener-controlplane to 1.129.0

[github.com/gardener/gardener:v1.129.0]

⚠️ Breaking Changes​

  • [OPERATOR] The GA-ed and unconditionally enabled UseNamespacedCloudProfile feature gates is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @LucaBernstein [#13020]
  • [OPERATOR] It is not allowed anymore to specify the following characters: [, #], as well as capitalized letters, within the entries of the Garden's .spec.virtualCluster.Gardener.apiServer.watchCacheSizes.resources[].apiGroup field. Please update your Gardens accordingly. by @tobschli [#12839]
  • [USER] It is not allowed anymore to specify the following characters: [, #], as well as capitalized letters, within the entries of the Shoot's .spec.kubernetes.kubeAPIServer.watchCacheSizes.resources[].apiGroup field. Please update your Shoots accordingly. by @tobschli [#12839]
  • [OPERATOR] The GA-ed and unconditionally enabled CredentialsRotationWithoutWorkersRollout feature gates is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @rfranzke [#13041]
  • [OPERATOR] It is not allowed anymore to specify the following characters: [,. #], as well as capitalized letters, within the entries of the Garden's .spec.virtualCluster.Gardener.apiServer.watchCacheSizes.resources[].resource field. Please update your Gardens accordingly. by @tobschli [#12839]
  • [USER] The .status.credentials.rotation.kubeconfig field in the Shoot API is removed. This field has been deprecated since Gardener v1.114.0. by @shafeeqes [#13037]
  • [USER] It is not allowed anymore to specify the following characters: [,. #], as well as capitalized letters, within the entries of the Shoot's .spec.kubernetes.kubeAPIServer.watchCacheSizes.resources[].resource field. Please update your Shoots accordingly. by @tobschli [#12839]

πŸ“° Noteworthy​

  • [USER] ViewerKubeconfig is no longer using solely the group gardener.cloud:system:viewers to grant viewer access to the shoot cluster, instead it is now granted only to Gardener system viewer users. Project Viewer users are granted viewer access to the shoot cluster via the group gardener.cloud:project:viewers. by @vpnachev [#12674]
  • [USER] AdminKubeconfig is no longer using the group system:masters to grant admin access to the shoot cluster, instead it is now using the groups gardener.cloud:system:admins granted to Gardener system admins and gardener.cloud:project:admins granted to Gardener Project admins. by @vpnachev [#12674]

✨ New Features​

  • [OPERATOR] gardener-admission-controller now supports enabling the OwnerReferencesPermissionEnforcement admission plugin for the virtual kube-apiserver. Previously, it was rejecting requests from gardenlet because the shoots/finalizers and backupbuckets/finalizers subresources were not allowed. by @gardener-ci-robot [#13059]
  • [OPERATOR] The OperatingSystemConfig containerd config was enhanced to specify the override_path option which is respected when generating the hosts.toml file for the respective upstream config. by @timuthy [#13002]

πŸ› Bug Fixes​

  • [USER] A bug causing finalizers to not be removed from Secrets when such are deleted and referenced by both a CredentialsBinding and a SecretBinding is fixed. by @gardener-ci-robot [#13075]
  • [OPERATOR] Fixed an issue that caused Machines to be duplicated when being saved in the ShootState. This caused the ShootState to grow exponentially large and fail to be created. The issue could occur when there are multiple MachineDeployments created for the Shoot. by @gardener-ci-robot [#13089]
  • [OPERATOR] A bug in the gardenletdeployer unable to handle backup credentials of type WorkloadIdentity has been fixed. by @gardener-ci-robot [#13087]
  • [OPERATOR] Fixed the alertmanager-garden peer discovery service port names by @rickardsjp [#12988]
  • [DEVELOPER] An issue preventing extensions.gardener.cloud/v1alpha1.Bastions to be listed due to missing json tags is now fixed. by @gardener-ci-robot [#13062]
  • [DEVELOPER] The Priority field for the MachineDeployment API is optional instead of required again. by @tobschli [#13014]

πŸƒ Others​

  • [DEPENDENCY] The following dependencies have been updated:
  • [OPERATOR] Revert server block import of coredns-custom configmap for node-local-dns. by @DockToFuture [#13028]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • quay.io/brancz/kube-rbac-proxy from v0.19.1 to v0.20.0. by @gardener-ci-robot [#12980]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • registry.k8s.io/ingress-nginx/controller-chroot from v1.13.2 to v1.13.3. by @gardener-ci-robot [#13047]
  • [DEPENDENCY] The following dependencies have been updated:
    • fluent/fluent-operator from v3.2.5 to v4.0.9 by @nickytd [#12998]
  • [DEVELOPER] An issue with the ssh tunnel in the extensions setup is fixed. by @axel7born [#13019]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEVELOPER] The optimistic defaulting of priorities for MachineDeployments was introduced again. by @tobschli [#13014]
  • [OPERATOR] Remove migration code to clean up obsolete Prometheus volumes by @vicwicker [#13021]
  • [USER] Gardener API server now serves the OpenAPI v2 schema ( /openapi/v2 endpoint) again and will keep on serving it until Gardener v1.160. In Gardener v1.127.0, the support for OpenAPI v2 schemas was removed. However, terraform-provider-kubernetes does not yet support OpenAPI v3 schema. by @shafeeqes [#12987]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.0

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.0
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.0
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.0
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.0
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.0
Update gardener-controlplane to 1.129.0

[github.com/gardener/gardener:v1.129.0]

⚠️ Breaking Changes​

  • [OPERATOR] The GA-ed and unconditionally enabled UseNamespacedCloudProfile feature gates is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @LucaBernstein [#13020]
  • [OPERATOR] It is not allowed anymore to specify the following characters: [, #], as well as capitalized letters, within the entries of the Garden's .spec.virtualCluster.Gardener.apiServer.watchCacheSizes.resources[].apiGroup field. Please update your Gardens accordingly. by @tobschli [#12839]
  • [USER] It is not allowed anymore to specify the following characters: [, #], as well as capitalized letters, within the entries of the Shoot's .spec.kubernetes.kubeAPIServer.watchCacheSizes.resources[].apiGroup field. Please update your Shoots accordingly. by @tobschli [#12839]
  • [OPERATOR] The GA-ed and unconditionally enabled CredentialsRotationWithoutWorkersRollout feature gates is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @rfranzke [#13041]
  • [OPERATOR] It is not allowed anymore to specify the following characters: [,. #], as well as capitalized letters, within the entries of the Garden's .spec.virtualCluster.Gardener.apiServer.watchCacheSizes.resources[].resource field. Please update your Gardens accordingly. by @tobschli [#12839]
  • [USER] The .status.credentials.rotation.kubeconfig field in the Shoot API is removed. This field has been deprecated since Gardener v1.114.0. by @shafeeqes [#13037]
  • [USER] It is not allowed anymore to specify the following characters: [,. #], as well as capitalized letters, within the entries of the Shoot's .spec.kubernetes.kubeAPIServer.watchCacheSizes.resources[].resource field. Please update your Shoots accordingly. by @tobschli [#12839]

πŸ“° Noteworthy​

  • [USER] ViewerKubeconfig is no longer using solely the group gardener.cloud:system:viewers to grant viewer access to the shoot cluster, instead it is now granted only to Gardener system viewer users. Project Viewer users are granted viewer access to the shoot cluster via the group gardener.cloud:project:viewers. by @vpnachev [#12674]
  • [USER] AdminKubeconfig is no longer using the group system:masters to grant admin access to the shoot cluster, instead it is now using the groups gardener.cloud:system:admins granted to Gardener system admins and gardener.cloud:project:admins granted to Gardener Project admins. by @vpnachev [#12674]

✨ New Features​

  • [OPERATOR] gardener-admission-controller now supports enabling the OwnerReferencesPermissionEnforcement admission plugin for the virtual kube-apiserver. Previously, it was rejecting requests from gardenlet because the shoots/finalizers and backupbuckets/finalizers subresources were not allowed. by @gardener-ci-robot [#13059]
  • [OPERATOR] The OperatingSystemConfig containerd config was enhanced to specify the override_path option which is respected when generating the hosts.toml file for the respective upstream config. by @timuthy [#13002]

πŸ› Bug Fixes​

  • [USER] A bug causing finalizers to not be removed from Secrets when such are deleted and referenced by both a CredentialsBinding and a SecretBinding is fixed. by @gardener-ci-robot [#13075]
  • [OPERATOR] Fixed an issue that caused Machines to be duplicated when being saved in the ShootState. This caused the ShootState to grow exponentially large and fail to be created. The issue could occur when there are multiple MachineDeployments created for the Shoot. by @gardener-ci-robot [#13089]
  • [OPERATOR] A bug in the gardenletdeployer unable to handle backup credentials of type WorkloadIdentity has been fixed. by @gardener-ci-robot [#13087]
  • [OPERATOR] Fixed the alertmanager-garden peer discovery service port names by @rickardsjp [#12988]
  • [DEVELOPER] An issue preventing extensions.gardener.cloud/v1alpha1.Bastions to be listed due to missing json tags is now fixed. by @gardener-ci-robot [#13062]
  • [DEVELOPER] The Priority field for the MachineDeployment API is optional instead of required again. by @tobschli [#13014]

πŸƒ Others​

  • [DEPENDENCY] The following dependencies have been updated:
  • [OPERATOR] Revert server block import of coredns-custom configmap for node-local-dns. by @DockToFuture [#13028]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • quay.io/brancz/kube-rbac-proxy from v0.19.1 to v0.20.0. by @gardener-ci-robot [#12980]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • registry.k8s.io/ingress-nginx/controller-chroot from v1.13.2 to v1.13.3. by @gardener-ci-robot [#13047]
  • [DEPENDENCY] The following dependencies have been updated:
    • fluent/fluent-operator from v3.2.5 to v4.0.9 by @nickytd [#12998]
  • [DEVELOPER] An issue with the ssh tunnel in the extensions setup is fixed. by @axel7born [#13019]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEVELOPER] The optimistic defaulting of priorities for MachineDeployments was introduced again. by @tobschli [#13014]
  • [OPERATOR] Remove migration code to clean up obsolete Prometheus volumes by @vicwicker [#13021]
  • [USER] Gardener API server now serves the OpenAPI v2 schema ( /openapi/v2 endpoint) again and will keep on serving it until Gardener v1.160. In Gardener v1.127.0, the support for OpenAPI v2 schemas was removed. However, terraform-provider-kubernetes does not yet support OpenAPI v3 schema. by @shafeeqes [#12987]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.0

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.0
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.0
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.0
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.0
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.0
Update gardenlet to 1.129.0

[github.com/gardener/gardener:v1.129.0]

⚠️ Breaking Changes​

  • [OPERATOR] The GA-ed and unconditionally enabled UseNamespacedCloudProfile feature gates is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @LucaBernstein [#13020]
  • [OPERATOR] It is not allowed anymore to specify the following characters: [, #], as well as capitalized letters, within the entries of the Garden's .spec.virtualCluster.Gardener.apiServer.watchCacheSizes.resources[].apiGroup field. Please update your Gardens accordingly. by @tobschli [#12839]
  • [USER] It is not allowed anymore to specify the following characters: [, #], as well as capitalized letters, within the entries of the Shoot's .spec.kubernetes.kubeAPIServer.watchCacheSizes.resources[].apiGroup field. Please update your Shoots accordingly. by @tobschli [#12839]
  • [OPERATOR] The GA-ed and unconditionally enabled CredentialsRotationWithoutWorkersRollout feature gates is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @rfranzke [#13041]
  • [OPERATOR] It is not allowed anymore to specify the following characters: [,. #], as well as capitalized letters, within the entries of the Garden's .spec.virtualCluster.Gardener.apiServer.watchCacheSizes.resources[].resource field. Please update your Gardens accordingly. by @tobschli [#12839]
  • [USER] The .status.credentials.rotation.kubeconfig field in the Shoot API is removed. This field has been deprecated since Gardener v1.114.0. by @shafeeqes [#13037]
  • [USER] It is not allowed anymore to specify the following characters: [,. #], as well as capitalized letters, within the entries of the Shoot's .spec.kubernetes.kubeAPIServer.watchCacheSizes.resources[].resource field. Please update your Shoots accordingly. by @tobschli [#12839]

πŸ“° Noteworthy​

  • [USER] ViewerKubeconfig is no longer using solely the group gardener.cloud:system:viewers to grant viewer access to the shoot cluster, instead it is now granted only to Gardener system viewer users. Project Viewer users are granted viewer access to the shoot cluster via the group gardener.cloud:project:viewers. by @vpnachev [#12674]
  • [USER] AdminKubeconfig is no longer using the group system:masters to grant admin access to the shoot cluster, instead it is now using the groups gardener.cloud:system:admins granted to Gardener system admins and gardener.cloud:project:admins granted to Gardener Project admins. by @vpnachev [#12674]

✨ New Features​

  • [OPERATOR] gardener-admission-controller now supports enabling the OwnerReferencesPermissionEnforcement admission plugin for the virtual kube-apiserver. Previously, it was rejecting requests from gardenlet because the shoots/finalizers and backupbuckets/finalizers subresources were not allowed. by @gardener-ci-robot [#13059]
  • [OPERATOR] The OperatingSystemConfig containerd config was enhanced to specify the override_path option which is respected when generating the hosts.toml file for the respective upstream config. by @timuthy [#13002]

πŸ› Bug Fixes​

  • [USER] A bug causing finalizers to not be removed from Secrets when such are deleted and referenced by both a CredentialsBinding and a SecretBinding is fixed. by @gardener-ci-robot [#13075]
  • [OPERATOR] Fixed an issue that caused Machines to be duplicated when being saved in the ShootState. This caused the ShootState to grow exponentially large and fail to be created. The issue could occur when there are multiple MachineDeployments created for the Shoot. by @gardener-ci-robot [#13089]
  • [OPERATOR] A bug in the gardenletdeployer unable to handle backup credentials of type WorkloadIdentity has been fixed. by @gardener-ci-robot [#13087]
  • [OPERATOR] Fixed the alertmanager-garden peer discovery service port names by @rickardsjp [#12988]
  • [DEVELOPER] An issue preventing extensions.gardener.cloud/v1alpha1.Bastions to be listed due to missing json tags is now fixed. by @gardener-ci-robot [#13062]
  • [DEVELOPER] The Priority field for the MachineDeployment API is optional instead of required again. by @tobschli [#13014]

πŸƒ Others​

  • [DEPENDENCY] The following dependencies have been updated:
  • [OPERATOR] Revert server block import of coredns-custom configmap for node-local-dns. by @DockToFuture [#13028]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • quay.io/brancz/kube-rbac-proxy from v0.19.1 to v0.20.0. by @gardener-ci-robot [#12980]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • registry.k8s.io/ingress-nginx/controller-chroot from v1.13.2 to v1.13.3. by @gardener-ci-robot [#13047]
  • [DEPENDENCY] The following dependencies have been updated:
    • fluent/fluent-operator from v3.2.5 to v4.0.9 by @nickytd [#12998]
  • [DEVELOPER] An issue with the ssh tunnel in the extensions setup is fixed. by @axel7born [#13019]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEVELOPER] The optimistic defaulting of priorities for MachineDeployments was introduced again. by @tobschli [#13014]
  • [OPERATOR] Remove migration code to clean up obsolete Prometheus volumes by @vicwicker [#13021]
  • [USER] Gardener API server now serves the OpenAPI v2 schema ( /openapi/v2 endpoint) again and will keep on serving it until Gardener v1.160. In Gardener v1.127.0, the support for OpenAPI v2 schemas was removed. However, terraform-provider-kubernetes does not yet support OpenAPI v3 schema. by @shafeeqes [#12987]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.0

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.0
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.0
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.0
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.0
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.0
Update shoot-oidc-service to 0.33.0

[github.com/gardener/gardener-extension-shoot-oidc-service:v0.33.0]

✨ New Features​

  • [USER] shoot-oidc-service no longer supports Shoots with Кubernetes version <= 1.28. by @georgibaltiev [#340]

πŸƒ Others​

  • [DEVELOPER] migrate CICD-Pipeline to GitHub-Actions by @ccwienk [#333]
  • [OPERATOR] An example Extension manifest for extension registration has been added. It can be found at example/extension.yaml by @timuthy [#353]
  • [OPERATOR] Migrate the extension VPAs from the deprecated update mode Auto to its only fallback strategy - update mode Recreate. by @vitanovs [#365]
  • [OPERATOR] Test results are now exported as inlined ocm-resource. by @heldkat [#342]

Helm Charts​

  • shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-oidc-service:v0.33.0

Container (OCI) Images​

  • gardener-extension-shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-oidc-service:v0.33.0
Update shoot-flux to 0.23.0

What's Changed​

Full Changelog: https://github.com/stackitcloud/gardener-extension-shoot-flux/compare/v0.22.0...v0.23.0

Update acl to 1.13.0

What's Changed​

πŸ€– Dependencies​

ℹ️ Other Changes​

New Contributors​

Full Changelog: https://github.com/stackitcloud/gardener-extension-acl/compare/v1.12.0...v1.13.0

Update gardener-controlplane to 1.129.1

[github.com/gardener/gardener:v1.129.1]

πŸ› Bug Fixes​

  • [OPERATOR] A bug has been fixed which prevented L7 load-balancing for kube-apiservers to work correctly on Seeds/Gardens where topology-aware-routing is activated. by @@oliver-goetz [#13142]

πŸƒ Others​

  • [OPERATOR] Logging stack configuration is now tuned for high-throughput scenarios. It brings changes in local file system resource utilization, addressing potential node disk pressure occurrences. by @@nickytd [#13139]
  • [DEPENDENCY] The following dependencies have been updated:
    • registry.k8s.io/node-problem-detector/node-problem-detector from v0.8.21 to v0.8.22. by @@gardener-ci-robot [#13099]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.1

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.1
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.1
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.1
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.1
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.1
Update gardener-controlplane to 1.129.1

[github.com/gardener/gardener:v1.129.1]

πŸ› Bug Fixes​

  • [OPERATOR] A bug has been fixed which prevented L7 load-balancing for kube-apiservers to work correctly on Seeds/Gardens where topology-aware-routing is activated. by @@oliver-goetz [#13142]

πŸƒ Others​

  • [OPERATOR] Logging stack configuration is now tuned for high-throughput scenarios. It brings changes in local file system resource utilization, addressing potential node disk pressure occurrences. by @@nickytd [#13139]
  • [DEPENDENCY] The following dependencies have been updated:
    • registry.k8s.io/node-problem-detector/node-problem-detector from v0.8.21 to v0.8.22. by @@gardener-ci-robot [#13099]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.1

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.1
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.1
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.1
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.1
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.1
Update gardenlet to 1.129.1

[github.com/gardener/gardener:v1.129.1]

πŸ› Bug Fixes​

  • [OPERATOR] A bug has been fixed which prevented L7 load-balancing for kube-apiservers to work correctly on Seeds/Gardens where topology-aware-routing is activated. by @@oliver-goetz [#13142]

πŸƒ Others​

  • [OPERATOR] Logging stack configuration is now tuned for high-throughput scenarios. It brings changes in local file system resource utilization, addressing potential node disk pressure occurrences. by @@nickytd [#13139]
  • [DEPENDENCY] The following dependencies have been updated:
    • registry.k8s.io/node-problem-detector/node-problem-detector from v0.8.21 to v0.8.22. by @@gardener-ci-robot [#13099]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.1

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.1
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.1
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.1
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.1
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.1
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.1
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.1
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.1
Update runtime-gvisor to 0.25.0

[github.com/gardener/gardener-extension-runtime-gvisor:v0.25.0]

πŸƒ Others​

  • [OPERATOR] Updated gVisor binaries to 20251006.0. by @gardener-github-actions[bot] [#297]
  • [OPERATOR] It is now possible to specify runsc's panic-signal setting through the gVisor providerConfig. by @MrBatschner [#296]

πŸƒ Others​

  • [OPERATOR] Migrate the extension VPAs from the deprecated update mode Auto to its only fallback strategy - update mode Recreate. by @vitanovs [#290]

Helm Charts​

  • runtime-gvisor: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/runtime-gvisor:v0.25.0

Container (OCI) Images​

  • gardener-extension-runtime-gvisor-installation: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/runtime-gvisor-installation:v0.25.0
  • gardener-extension-runtime-gvisor: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/runtime-gvisor:v0.25.0
Update shoot-cert-service to 1.54.0

[github.com/gardener/gardener-extension-shoot-cert-service:v1.54.0]

✨ New Features​

  • [USER] Validation for secrets of ACME issuers specified in shoot manifest is performed on reconciling the extension. Both the privateKey secret of the ACME issuer and the optional external account binding secret are validated for the allowed data keys and values. by @MartinWeindel [#458]

πŸ› Bug Fixes​

  • [OPERATOR] Add networking policy label to allow access to virtual garden if the controlplane-cert-service extension is enabled and Garden runtime cluster and soil are the same. by @MartinWeindel [#469]

πŸƒ Others​

  • [OPERATOR] Migrate the extension VPAs from the deprecated update mode Auto to its only fallback strategy - update mode Recreate. by @vitanovs [#470]

Helm Charts​

  • shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-cert-service:v1.54.0

Container (OCI) Images​

  • gardener-extension-shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service:v1.54.0
Update dashboard to 1.82.4

Container (OCI) Images​

  • gardener-dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.82.4
Update dashboard to 1.82.4

Container (OCI) Images​

  • gardener-dashboard: europe-docker.pkg.dev/gardener-project/releases/gardener/dashboard:1.82.4
Update external-dns-management to 0.29.0

[github.com/gardener/external-dns-management:v0.29.0]

⚠️ Breaking Changes​

  • [USER] The infoblox-dns provider is deprecated and will be removed end of 2025. by @MartinWeindel [#645]
  • [OPERATOR] The infoblox-dns provider is deprecated and will be removed end of 2025. by @MartinWeindel [#645]

✨ New Features​

  • [OPERATOR] Support command line option --kubeconfig.crds-shoot-no-cleanup-label to allow to set the label shoot.gardener.cloud/no-cleanup=true for deployed CRDs. by @MartinWeindel [#674]

πŸ› Bug Fixes​

  • [OPERATOR] [netlify-dns] Allow underscore character on validating the API token for netlify. by @MartinWeindel [#644]

πŸƒ Others​

  • [OPERATOR] Migrate the workload VPA from the deprecated update mode Auto to its only fallback strategy - update mode Recreate. by @vitanovs [#671]
  • [OPERATOR] Update cloudflare-dns to use the Version 6 of github.com/cloudflare/cloudflare-go/v6. by @MartinWeindel [#640]
  • [OPERATOR] Aligned zone metrics handling in Azure DNS and Azure Private DNS providers with all other DNS providers. by @marc1404 [#667]
  • [OPERATOR] Simplify build workflow, drop redundant check step. by @MartinWeindel [#658]

Helm Charts​

  • dns-controller-manager: europe-docker.pkg.dev/gardener-project/releases/charts/dns-controller-manager:v0.29.0

Container (OCI) Images​

  • dns-controller-manager: europe-docker.pkg.dev/gardener-project/releases/dns-controller-manager:v0.29.0
Update os-gardenlinux to 0.34.0

[github.com/gardener/gardener-extension-os-gardenlinux:v0.34.0]

πŸƒ Others​

  • [OPERATOR] Migrate the extension VPAs from the deprecated update mode Auto to its only fallback strategy - update mode Recreate. by @vitanovs [#301]

Helm Charts​

  • os-gardenlinux: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/os-gardenlinux:v0.34.0

Container (OCI) Images​

  • gardener-extension-os-gardenlinux: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/os-gardenlinux:v0.34.0
Update os-ubuntu to 1.33.0

[github.com/gardener/gardener-extension-os-ubuntu:v1.33.0]

πŸƒ Others​

  • [OPERATOR] Add missing securityContext controls in order to comply with the restricted Pod Security Standards policy. by @mstueer [#251]
  • [OPERATOR] Migrate the extension VPAs from the deprecated update mode Auto to its only fallback strategy - update mode Recreate. by @vitanovs [#247]

Helm Charts​

  • os-ubuntu: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/os-ubuntu:v1.33.0

Container (OCI) Images​

  • gardener-extension-os-ubuntu: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/os-ubuntu:v1.33.0
Update provider-azure to 1.55.1

[github.com/gardener/gardener-extension-provider-azure:v1.55.1]

πŸ› Bug Fixes​

  • [OPERATOR] Update mcm image to v0.17.1 by @hebelsan [#1324]

Helm Charts​

  • admission-azure-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-application:v1.55.1
  • admission-azure-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-azure-runtime:v1.55.1
  • provider-azure: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-azure:v1.55.1

Container (OCI) Images​

  • gardener-extension-admission-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-azure:v1.55.1
  • gardener-extension-provider-azure: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-azure:v1.55.1
Update gardener-controlplane to 1.129.2

[github.com/gardener/gardener:v1.129.2]

πŸ› Bug Fixes​

  • [OPERATOR] A bug which deactivates topology aware routing for kube-apiservers when l7 load-balancing is not active has been fixed. by @oliver-goetz [#13186]
  • [USER] An upstream issue causing kube-proxy to log thousands of log entries per second is now mitigated by reducing the kube-proxy verbosity level when running an affected Kubernetes version in the range [1.33.0, 1.33.6). For more details, see http://issues.k8s.io/132678. by @ialidzhikov [#13193]
  • [OPERATOR] The quay.io/kiwigrid/k8s-sidecar image is downgraded to v1.30.9 to prevent a regression that causes Plutono dashboards to not be loaded. by @rickardsjp [#13199]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.2

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.2
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.2
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.2
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.2
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.2
Update gardener-controlplane to 1.129.2

[github.com/gardener/gardener:v1.129.2]

πŸ› Bug Fixes​

  • [OPERATOR] A bug which deactivates topology aware routing for kube-apiservers when l7 load-balancing is not active has been fixed. by @oliver-goetz [#13186]
  • [USER] An upstream issue causing kube-proxy to log thousands of log entries per second is now mitigated by reducing the kube-proxy verbosity level when running an affected Kubernetes version in the range [1.33.0, 1.33.6). For more details, see http://issues.k8s.io/132678. by @ialidzhikov [#13193]
  • [OPERATOR] The quay.io/kiwigrid/k8s-sidecar image is downgraded to v1.30.9 to prevent a regression that causes Plutono dashboards to not be loaded. by @rickardsjp [#13199]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.2

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.2
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.2
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.2
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.2
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.2
Update gardenlet to 1.129.2

[github.com/gardener/gardener:v1.129.2]

πŸ› Bug Fixes​

  • [OPERATOR] A bug which deactivates topology aware routing for kube-apiservers when l7 load-balancing is not active has been fixed. by @oliver-goetz [#13186]
  • [USER] An upstream issue causing kube-proxy to log thousands of log entries per second is now mitigated by reducing the kube-proxy verbosity level when running an affected Kubernetes version in the range [1.33.0, 1.33.6). For more details, see http://issues.k8s.io/132678. by @ialidzhikov [#13193]
  • [OPERATOR] The quay.io/kiwigrid/k8s-sidecar image is downgraded to v1.30.9 to prevent a regression that causes Plutono dashboards to not be loaded. by @rickardsjp [#13199]

Helm Charts​

  • controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.129.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.129.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.129.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.129.2

Container (OCI) Images​

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.129.2
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.129.2
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.129.2
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.129.2
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.129.2
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.129.2
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.129.2
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.129.2