Open
Conversation
renovate
Bot
requested review from
hown3d,
maboehm,
robinschneider and
timebertt
as code owners
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
Bot
force-pushed
the
renovate/k8s-go
branch
from
44399a3 to
632ae06
Compare
renovate
Bot
force-pushed
the
renovate/k8s-go
branch
from
632ae06 to
b76e6c1
Compare
renovate
Bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.140.2→v1.141.0v1.140.2→v1.141.0v0.35.4→v0.36.0v0.35.4→v0.36.0v0.35.4→v0.36.0v0.35.4→v0.36.0v0.35.4→v0.36.0v0.35.4→v0.36.0Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.141.0Compare Source
[github.com/gardener/gardener:v1.141.0]
[OPERATOR]TheNewWorkerPoolHashfeature gate has been promoted to GA and can no longer be disabled. by @timuthy [#14531][OPERATOR][USER]Newly createdShoots now have a set period of28dfor etcd encryption key rotation. by @AleksandarSavchev [#14034][DEVELOPER]make gardenadm-up SCENARIO=connectnow deploys the Gardener (gardener-operatorandGardenresource) directly into the self-hosted shoot. Previously, it was deploying them next to the machine pods of the self-hosted shoot in the kind cluster. Usemake gardenadm-up SCENARIO=connect-kindfor the out-of-self-hosted-shoot deployment mode. by @rfranzke [#14387][DEPENDENCY]The obsoleteProviderfield was removed from theextensionswebhook.Webhookstruct. The field can be removed without substitution. by @timuthy [#14460]📰 Noteworthy
[OPERATOR]Thegardener-resource-managerHA config webhook now usesScheduleAnywayinstead ofDoNotSchedulefor the hostname topology spread constraint when there is at most one node in the cluster. A newnode-high-availability-configcontroller re-triggers the webhook when the node count crosses this threshold. by @rfranzke [#14595][OPERATOR]machine-controller-manager's RBAC permissions for the source cluster have been reduced to follow the principle of least privilege. by @dimityrmirchev [#14372][DEVELOPER]Added panic recovery toflow.Taskto prevent a single task failure from crashing the entire controller. If you previously implemented custom panic recovery within your tasks, you can consider removing that custom panic recovery. by @dergeberl [#14606][DEVELOPER]The local setup now includes acloud-controller-manager-local, which is deployed for kind clusters (in thekube-systemnamespace) and for shoot clusters (in the control plane namespace). The cloud-controller-manager implementsServicesof typeLoadBalancerby creating dedicated Docker containers listening on external IPs (automatically added to the host's loopback interface on kind cluster creation). This replaces previous hacks for implementing load balancers in provider-local and supports load balancers in shoot clusters for the first time. by @timebertt [#14415][DEPENDENCY]Extension charts deployed on self-hosted shoot clusters may not receive.Values.gardener.seedwhen the shoot has not yet been promoted to aSeed. Charts should guard Seed-dependent values with{{ if .Values.gardener.seed }}. by @rfranzke [#14395][DEPENDENCY]A new helper functionBuildExtensionTypeNamespaceSelectorhas been introduced. It builds proper namespaces selectors for extension webhooks, based on the extensiontypeandclassattributes. by @timuthy [#14460]✨ New Features
[OPERATOR]Addedspec.runtimeCluster.settings.loadBalancerServices.proxyProtocol.allowedandspec.runtimeCluster.settings.loadBalancerServices.externalTrafficPolicyto theGardenresource. When Allowed set totrue,gardener-operatorconfigures the Istio ingress gateway to terminate PROXY protocol, enabling preservation of the original client IP address for load balancers that use PROXY protocol. The explicit nature of the setting allows a seamless migration while enforcing a good security posture.ExternalTrafficPolicyallows configuring the Gateway either asCluster(default) orLocal, similar to the Seed. by @jamand [#14420][OPERATOR]Thegardener-node-agentnow monitors the health of systemd units declared in theOperatingSystemConfigand reports aSystemdUnitsReadycondition on theNode. Unhealthy units are surfaced on theShootvia theEveryNodeReadycondition. by @rfranzke [#14496][USER]TheShootspec fieldspec.kubernetes.kubeAPIServer.encryptionConfig.provider.typenow supports theaesgcmandsecretboxencryption provider types. The field is immutable. by @AleksandarSavchev [#14034][USER]TheGardenspec fieldsspec.virtualCluster.kubernetes.kubeAPIServer.encryptionConfig.provider.typeandspec.virtualCluster.gardener.gardenerAPIServer.encryptionConfig.provider.typenow support theaesgcmandsecretboxencryption provider types. The fields are immutable. by @AleksandarSavchev [#14034]🐛 Bug Fixes
[OPERATOR]The garbage collection logic now also deletes pods that are stuck due to preemption by the kubelet or scheduler. by @rfranzke [#14519][OPERATOR]The observability setup is deleted as late as possible so that, in case an error occurs during the deletion of any components, there is still enough information available to investigate the issue. by @iypetrov [#14475][OPERATOR]A bug was fixed wheregardenadm initcould fail due to a transient error while fetching theshoot-gardener-node-agentManagedResource when the Kubernetes API server is temporarily unavailable due to static pod rollout. by @ialidzhikov [#14601][OPERATOR]A bug has been fixed that caused unintentionalShootStatecreations forShoots running on managed seed clusters (those backed byManagedSeedobjects). The affectedShootStateresources are automatically cleaned up bygardenletduring start-up. by @plkokanov [#14666][USER]Cluster-proportional autoscaling of coredns now works with Kubernetes >= 1.33 by @ScheererJ [#14638][DEPENDENCY]Thegolangci-lintmakefile install recipe can be used in Gardener extensions again. by @timebertt [#14555]🏃 Others
[OPERATOR]Gardener Discovery Server is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14587][OPERATOR]Alertmanager is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14575][OPERATOR]Vali is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14567][OPERATOR]OpenTelemetry Collector is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14585][OPERATOR]UseInfologging for admission denials instead ofErrorso that the full stack trace to every denial log entry does not get logged by @DockToFuture [#14561][OPERATOR]Apiserver-Proxy uses a dedicated network interfaceapiserver-proxyfor its advertised IP address. Requests from nodes such as kubelet probes will use the proper IP as per the route table again. by @domdom82 [#14440][OPERATOR]Shoot advertised addresses are now configurable by extension components for Shoot VirtualService resources. by @ScheererJ [#14534][OPERATOR]DuringShootreconciliationMachineDeployments are now deployed in parallel. This should speed up the reconciliation of theWorkerresource. by @plkokanov [#14220][OPERATOR]Resource limits have been removed for node-problem-detector by @domdom82 [#14450][OPERATOR]Prometheus is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14573][OPERATOR]Additional per nodegroup metrics can be exposed bycluster-autoscalervia the field.spec.kubernetes.clusterAutoscaler.emitPerNodeGroupMetricsin theShootAPI . by @aaronfern [#14557][OPERATOR]Gardener Dashboard is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14586][OPERATOR]Patchis now used to label allMachines withforce-deletion: Trueinstead ofUpdatewhen theShootis being hibernated or deleted. Additionally, the function used to do this during the reconciliation of theWorkerresource is now only executed once instead of for eachMachineDeployment. by @plkokanov [#14220][OPERATOR]Thegardenadm initflow now determines Pod network availability by checking the Node'sNetworkUnavailablecondition instead of theshoot-core-corednsManagedResource health. This is a prerequisite improvement for the control plane Node restoration feature. by @ialidzhikov [#14523][OPERATOR]The following dependencies have been updated:gardener/etcd-druidfromv0.36.2tov0.36.3. Release Notesgithub.com/gardener/etcd-druid/apifromv0.36.2tov0.36.3. by @Shreyas-s14 [#14661][OPERATOR]cluster-autoscaler now supports a new expanderleast-nodesfrom v1.31 onwards by @aaronfern [#14558][OPERATOR]Plutono is now exposed directly via istio instead of nginx-ingress by @ScheererJ [#14142][USER]VPN-related dashboards now show a shared crosshair on all panels. by @domdom82 [#14576][DEVELOPER]The DinD version used in the remote local setup has been updated to v29. by @vicwicker [#14644][DEVELOPER]make seed-downandmake garden-downcleanup additional resources by @matthias-horne [#14547][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/node-exporterfromv1.10.2tov1.11.1. by @gardener-ci-robot [#14508][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.29.1to1.29.2.gcr.io/istio-release/proxyv2from1.29.1to1.29.2.istio.io/apifromv1.29.1tov1.29.2. by @gardener-ci-robot [#14582][DEPENDENCY]Update kindest/node image to v1.35.1 (Kubernetes v1.35.1, containerd v2.2.1). by @LucaBernstein [#14421][DEPENDENCY]The following dependencies have been updated:credativ/valifromv2.2.31tov2.2.32. Release Notes by @gardener-ci-robot [#14611][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.5.5to2.6.0. by @gardener-ci-robot [#14537][DEPENDENCY]The following dependencies have been updated:gardener/etcd-druidfromv0.36.1tov0.36.2. Release Notesgithub.com/gardener/etcd-druid/apifromv0.36.1tov0.36.2. by @gardener-ci-robot [#14579][DEPENDENCY]The following dependencies have been updated:credativ/plutonofromv7.5.46tov7.5.47. Release Notes by @gardener-ci-robot [#14613][DEPENDENCY]The following dependencies have been updated:gardener/gardener-discovery-serverfromv0.9.0tov0.10.0. Release Notes by @gardener-ci-robot [#14600][DEPENDENCY]The following dependencies have been updated:gardener/coredns-config-adapterfromv0.5.0tov0.6.0. Release Notes by @gardener-ci-robot [#14605][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/alertmanagerfromv0.31.1tov0.32.0. by @gardener-ci-robot [#14538][DEPENDENCY]The following dependencies have been updated:envoyproxy/envoyfromdistroless-v1.37.0tov1.37.2. Release Notes by @gardener-ci-robot [#14563]application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:4c0764b6cbd79bea391de905c444e8901f3ef901c9cc601a5b8fcf66394aa40aeurope-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:a4bed35099c21fb59a719a718afc1f83040d4746a7dfaf81c4442e09725bf0abeurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:549aafc0b61b16d9e7d6fa1ab0bd95bd68f0d7dfac77989be541e9551f4dc726europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b0675085cef3786d983b6a751cff7820b6dd896e55afccd99e07cefa2891f161europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:3757e8e04a1e555abbe832c72932211b4fb766ee8f3d6ded15c9acd6a14adde9europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:68bc182b3b1cbfcbbdb26bcb9b0ac5a182e0de0b1ae785c7f0fd9947e9653ccdeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:558ae9de4cfffe41cce57e22bc8505c9f38d54e0fb8feea7b06754970b9090a3europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:ca399bfd9253860c2a8f5287aec8ecdd90b8b4fa96e8694dede72a05f0fbe263europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:47b8d427ac8f6deee19004e196c2a3396edd5010293bb1272abd7aaa2d385daeeurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:88953b01d223307b0ea3e05c8df24eeb1f08e5c1883b85be42b5e5da7a2f5af3europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:97bbf8d719ee9a6a441aee3ea1690bcb054eaf5ee23b3e98ee7ba580e5732a80europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:b40af8512c84cb32e56541716cba9036152e4393e9c810d0ea109d9e89f3abe7europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:b687d0080c773f8b51d7e7fe262bd38774cace83dc175bd59e86b38d4378fa89europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:de2bed5eedb5348fb5399b7ade0ec3569a247f75a6ea532b1365cab8c84cba59europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:127276658aff87d975ce690a0a862c0073d1c119028110d0a4dcb1a71e281c50europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:637b96ae9ddebe86ce4b36cb9a275b88a5dcd6cc7a7c1ac3993d7d93c0b89374europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:118cf6da60ad6930362891b741ab79a4d596a5fc8933c2cef7f8cb9fe75653f8europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:f9aa546df5d17ae6fe8510da46bb403de6d5a594febec773258cf79886257ec6Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.141.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.141.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.141.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.141.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.141.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.141.0kubernetes/api (k8s.io/api)
v0.36.0Compare Source
kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)
v0.36.0Compare Source
kubernetes/apimachinery (k8s.io/apimachinery)
v0.36.0Compare Source
kubernetes/client-go (k8s.io/client-go)
v0.36.0Compare Source
kubernetes/code-generator (k8s.io/code-generator)
v0.36.0Compare Source
kubernetes/component-base (k8s.io/component-base)
v0.36.0Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.