Update module github.com/gardener/gardener to v1.136.0#685
Update module github.com/gardener/gardener to v1.136.0#685gardener-ci-robot wants to merge 1 commit intomainfrom
Conversation
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
gardener-prow
bot
added
cla: yes
|
@gardener-ci-robot: The following test failed, say
Full PR test history. Your PR dashboard. Command help for this repository. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
1 participant
This PR contains the following updates:
v1.135.1→v1.136.0Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.136.0Compare Source
[github.com/gardener/gardener:v1.136.0]
[OPERATOR]The Garden's.spec.virtualCluster.kubernetes.kubeAPIServer.eventTTLfield's valid values range is restricted from[0, 168h]to[0, 24h]. The new range is imposed for new Garden creations and for field value updates. Already existing Gardens which specify invalid values (more than24h) are not affected. by @ialidzhikov [#13830][OPERATOR]The ManagedSeedSet's.spec.shootTemplate.spec.kubernetes.kubeAPIServer.eventTTLfield's valid values range is restricted from[0, 168h]to[0, 24h]. The new range is imposed for new ManagedSeedSet creations and for field value updates. Already existing ManagedSeedSets which specify invalid values (more than24h) are not affected. by @ialidzhikov [#13830][USER]Shoot addons (.spec.addons) have been deprecated and will be forbidden starting with Kubernetes1.35. Their usage was already discouraged for productive clusters, as they now only include unmaintained components (Kubernetes dashboard and Ingress NGINX Controller). by @timuthy [#13845][USER]The shoot field.spec.kubernetes.kubeScheduler.kubeMaxPDVolshas been deprecated and will be forbidden starting with Kubernetes1.35. The maximum number of attachable volumes is maintained by the respective CSI plugin. by @timuthy [#13845][USER]The Shoot's.spec.kubernetes.kubeAPIServer.eventTTLfield's valid values range is restricted from[0, 168h]to[0, 24h]. The new range is imposed for new Shoots creations and for field value updates. Already existing Shoots which specify invalid values (more than24h) are not affected. by @ialidzhikov [#13830][USER]Downgrading the machine image version (.spec.provider.workers[].machine.image.version) is not allowed for worker pools using theAutoInPlaceUpdateorManualInPlaceUpdatestrategy, as Gardener does not support machine image downgrades for any operating system currently. ForAutoRollingUpdate, the entire node is replaced, so this limitation does not apply. by @shafeeqes [#13828][USER]The shoot field.spec.kubernetes.kubeAPIServer.watchCacheSizes.defaulthas been deprecated and will be forbidden starting with Kubernetes1.35. Watch cache sizes are automatically sized by Kubernetes. by @timuthy [#13845][USER]Setting.spec.kubernetes.kubeAPIServer.enableAnonymousAuthenticationin theShootspec is forbidden for clusters with Kubernetes version >= 1.35. Users that enable anonymous authentication should use Structured Authentication with anonymous authenticator instead. by @dimityrmirchev [#13707][DEVELOPER]The healthcheck controller now supports thegardenextension class. Health check client interfaces have been renamed fromSeedClient/ShootClienttoSourceClient/TargetClientfor better abstraction across extension classes. ThePreCheckFuncmethod signature has been changed to acceptanyfor cluster or garden object. by @theoddora [#13789]📰 Noteworthy
[OPERATOR]New health and readiness checks have been added to vpn-seed-server to improve availability and reduce log clutter. by @domdom82 [#13802][OPERATOR]TheShootspec has a new fieldspec.kubernetes.kubeAPIServer.encryptionConfig.provider.type, which currently can only be set toaescbc. by @AleksandarSavchev [#13732][OPERATOR]For Kubernetes virtual clusters>= 1.33, we now deploy bothEndpointsandEndpointSliceresources for the APIService connection between virtual-garden-kube-apiserver and gardener-apiserver. by @acumino [#14041][OPERATOR]TheGardenspec has 2 new fieldsspec.virtualCluster.kubernetes.kubeAPIServer.encryptionConfig.provider.typeandspec.virtualCluster.gardener.gardenerAPIServer.encryptionConfig.provider.type, which currently can only be set toaescbc. by @AleksandarSavchev [#13732][OPERATOR]TheOpenTelemetryCollectorfeature gate has been promoted to Beta and is enabled by default. by @rrhubenov [#13851][USER]The field.spec.kubernetes.kubeAPIServer.enableAnonymousAuthenticationin theShootspec will be automatically set tonilif users set itfalseas these two are equivalent across the codebase. The field is deprecated and users that enable anonymous authentication should migrate to Structured Authentication with anonymous authenticator instead. by @dimityrmirchev [#13707][USER]It is now explicitly supported to use short worker OS image versions in theCloudProfile, which are not defaulted when creating or updating theShootspec. by @Gerrit91 [#13785][USER]The shoot deletion flow has been enhanced to tolerate leftover resources in the following situations:✨ New Features
[OPERATOR]Gardener now supports pulling Helm charts from OCI registries that use custom or self-signed TLS certificates. This is particularly useful for air-gapped environments or when using private container registries with custom certificate authorities.A new
caBundleSecretReffield has been added to theociRepositoryconfiguration in the following resources:core.gardener.cloud/v1.ControllerDeployment:.helm.ociRepository.caBundleSecretRefcore.gardener.cloud/v1beta1.ControllerDeployment:.helm.ociRepository.caBundleSecretRefoperator.gardener.cloud/v1alpha1.Extension:.spec.deployment.{admission.{runtimeCluster,virtualCluster},extension}.helm.ociRepository.caBundleSecretRefThe field references a secret in the
gardennamespace containing a PEM-encoded CA certificate bundle (data key:bundle.crt). For gardenlet usage, the secret must be labeled withgardener.cloud/role=oci-ca-bundle. by @shafeeqes [#13868][OPERATOR]Thegardener-controller-managernow increases allResourceQuotas in project namespaces when a Gardener update leads to Gardener creating more resources in them. This was introduced to prevent failing Shoot reconciliations whenResourceQuotas of projects are near their limit. by @tobschli [#13850][OPERATOR]Introduce fluent-bit-plugin v1 with OTLP support behind the OpenTelemetryCollector feature gate and adjust fluent-bit resources to select OTLP. by @nickytd [#13961][OPERATOR]Introduced the Victoria Operator as a component to Seed & Garden Clusters. by @rrhubenov [#13708][OPERATOR]When configuring a custom CNI path for containerd, GNA will now - in addition to checking the version of the config.toml config file - query containerd for its version and use thebin_dirspath with a string array if the config file version is 3 and containerd >= 2.2 is detected. by @MrBatschner [#13826][OPERATOR]An instance ofOpenTelemetry Collectoris now deployed to thegardennamespace of bothGardenandSeedclusters. by @rrhubenov [#13481][OPERATOR]Gardener can now support clusters with Kubernetes version 1.35. To allow creation/update of 1.35 clusters you will have to update the version of your provider extension(s) to a version that supports 1.35 as well. Please consult the respective releases and notes in the provider extension's repository. by @timuthy [#13845][USER]TheShootfield.spec.seedSelectorcan now be adjusted for already scheduled shoots, as long as the new selector still selects the assigned seed. by @timuthy [#13920][DEVELOPER]gardenctl in local setup by @hown3d [#13842][DEVELOPER]Gardener can now support clusters with Kubernetes version1.35. Extension developers have to prepare individual extensions as well to work with1.35. by @timuthy [#13845][DEVELOPER]Environment variableMAX_PARALLEL_WORKERScan now be used to control the number of parallel workers that are spawned during the call to themake generatetarget. by @rrhubenov [#13903]🐛 Bug Fixes
[OPERATOR]An issue causing unwanted reconciliations of Secrets and other objects due to cache resyncs in the project activity reconciler is now fixed. by @shafeeqes [#13945][OPERATOR]This PR fixes webhook certificate reconciliation to properly apply changes in webhook configurations. by @acumino [#13971][OPERATOR]Fixes a bug when feature gate UseUnifiedHTTPProxyPort was used in conjunction with a seed load balancer using proxy protocol. by @maboehm [#13832][OPERATOR]Fixes a bug in theUsesUnifiedHTTPProxyPortconstraint, when feature gateUseUnifiedHTTPProxyPortwas used and then disabled again by @maboehm [#13844][USER]gardener-apiserver: An issue in gardener-apiserver v1.135.0 causingkubectl applyfor a Shoot to be wrongly rejected with "spec.dns.providers[0]: Required value: non-primary DNS providers must specifytypeandcredentialsRef" in some cases is now fixed. by @ialidzhikov [#13861][DEVELOPER]Enable MCM (cluster-autoscaler) to scaleprovider-localNodes. by @LucaBernstein [#13804]🏃 Others
[OPERATOR]Audit policy configmap for the gardener API server referenced in the garden resource is now validated. by @acumino [#13478][OPERATOR]Upon gardenlet start all existing opentelemetry collector pipelines in shoot control planes will be migrated to the expected content. by @nickytd [#14054][OPERATOR]The mutatingShootDNSadmission plugin is now also a validating one. Validations which are executed by this admission plugin during the mutation phase are now moved to the validatingShootDNSadmission plugin. by @ialidzhikov [#13910][OPERATOR]Add Prometheus health check rule in the cache Prometheus to ensure the presence ofkubeletvolume stats metrics. by @vicwicker [#13855][OPERATOR]Federateshoot:node_operating_system:sumtime series from the garden to the longterm Prometheus. by @vicwicker [#13805][OPERATOR]Fix flaky test for latest MCM release v0.61.x by @r4mek [#13916][OPERATOR]The majority of the VerticalPodAutoscaler resources managed by Gardener are enhanced to define an explicit container policy for all containers that need to be auto-scaled and to have acatch-allcontainer policy (containerName: '*'andmode: Off) always. by @voelzmo [#13819][OPERATOR]The following dependencies have been updated:gardener/machine-controller-managerfromv0.60.2tov0.61.1. Release Notes by @aaronfern [#13865][OPERATOR]The existingTooManyEtcdSnapshotCompactionJobsFailingalert has been renamed toEtcdSnapshotCompactionJobsFailingForSeedand its expression has been fixed to correctly measure the fraction of namespaces with failures.Two new per-namespace alerts (
EtcdSnapshotCompactionJobsFailingForNamespaceandEtcdFullSnapshotsFailingForNamespace) have been added to help operators identify specific shoot clusters where compaction jobs or full snapshots are failing above the 10% threshold. by @anveshreddy18 [#14053][OPERATOR]Use Kubernetes 1.34.3 in the local setup. by @vicwicker [#13855][USER]AllowNamespacedCloudProfile.spec.limitsto be decreased. by @LucaBernstein [#13724][DEVELOPER]The component checklist rule for Define aVerticalPodAutoscaleris enhanced with the convention that a VPA should define an explicit container policy for all containers that need to be auto-scaled and should have acatch-allcontainer policy (containerName: '*'andmode: Off) always. For more details, refer to theComponent Checklist. by @voelzmo [#13819][DEVELOPER]The TM tests are now adapted to run against Kubernetes 1.35. by @ialidzhikov [#13995][DEPENDENCY]The following dependencies have been updated:gardener/etcd-druidfromv0.34.0tov0.35.0. Release Notesgithub.com/gardener/etcd-druid/apifromv0.34.0tov0.35.0. by @renormalize [#13950][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.3to1.83.4. Release Notes by @gardener-ci-robot [#13970][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.14.1tov1.14.2. by @gardener-ci-robot [#13880][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.4to1.83.5. Release Notes by @gardener-ci-robot [#13983][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/cpa/cluster-proportional-autoscalerfromv1.9.0tov1.10.3. by @gardener-ci-robot [#13905][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.27.5to1.27.6.gcr.io/istio-release/proxyv2from1.27.5to1.27.6.istio.io/apifromv1.27.5tov1.27.6. by @gardener-ci-robot [#13986][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.2to1.83.3. Release Notes by @gardener-ci-robot [#13917][DEPENDENCY]The following dependencies have been updated:gardener/terminal-controller-managerfromv0.34.0tov0.35.0. Release Notes by @gardener-ci-robot [#13953][DEPENDENCY]The following dependencies have been updated:gardener/vpn2from0.46.1to0.46.2. Release Notes by @gardener-ci-robot [#13959][DEPENDENCY]The following dependencies have been updated:quay.io/prometheus/alertmanagerfromv0.30.1tov0.31.0. by @gardener-ci-robot [#13931][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/metrics-server/metrics-serverfromv0.8.0tov0.8.1. by @gardener-ci-robot [#13912][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.14.2tov1.14.3. by @gardener-ci-robot [#13940][DEPENDENCY]The following dependencies have been updated:gardener/alpine-conntrackfrom3.23.2to3.23.3. Release Notes by @gardener-ci-robot [#13948][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.4.0to2.5.0. by @gardener-ci-robot [#13839]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.136.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.136.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.136.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.136.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.136.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.136.0Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.