Open
Conversation
Contributor
Author
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.139.1→v1.140.0v1.139.1→v1.140.0Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.140.0Compare Source
[github.com/gardener/gardener:v1.140.0]
[OPERATOR]TheUseUnifiedHTTPProxyPortfeature gate has been promoted to Beta and is enabled by default. If using the Gardener ACL Extension you need make sure that at least versionv1.15.0is installed and allShootsare reconciled before the upgrade. by @jamand [#14422][DEVELOPER]Thegenerate-admin-kubeconf.shscript has been renamed togenerate-kubeconfig.sh. It now supports generating both admin (default) and viewer kubeconfigs. by @timuthy [#14464][DEVELOPER]Thegardenadmmachine pods have their state persisted in a unified PVC. Existing localgardenadmsetups need to be recreated. To reset a local machine pod, delete both the pod and its corresponding PVC. by @LucaBernstein [#14359][DEVELOPER]GEN_CRD_API_REFERENCE_DOCSmake command has been replaced withCRD_REF_DOCS. by @acumino [#14324][DEPENDENCY]Thepkg/utils/timepackage is now removed. Usek8s.io/utils/clock.Clockinstead. by @shafeeqes [#14515]📰 Noteworthy
[OPERATOR]TheSeedAuthorizernow enforces field/label selectors forgardenletlist/watchrequests onControllerInstallation,Bastion,Gardenlet,Seed,Shoot, andManagedSeedresources, restricting each gardenlet to only observe resources belonging to its own seed. by @rfranzke [#14452][OPERATOR]Thegardener-resource-manager'sNetworkPolicycontroller now only creates policies in namespaces that have pods with matchingto-*labels, significantly reducing the number ofNetworkPolicyobjects on seeds. by @rfranzke [#14410][OPERATOR]RemoveValiFeatureGate has been introduced. When enabled, everyValiinstance will be removed. This feature gate is available for both thegardenletand thegardener-operator. by @rrhubenov [#14279][DEVELOPER]Thesastandsast-reportchecks have been removed fromverifyandverify-extendedmake targets. Please call them explicitly when required. by @oliver-goetz [#14443]✨ New Features
[OPERATOR]TheProjectAPI now has a.status.conditionsfield for allowing controllers to report conditions onProjectobjects. by @jamand [#14403][DEVELOPER]The local setup has been augmented to make the self-hosted shoot's API server directly accessible from the host machine withoutkubectl port-forward. A new unifiedhack/usage/generate-admin-kubeconfig-local.shscript supports generating kubeconfigs for both the virtual garden and the self-hosted shoot. by @rfranzke [#14370]🐛 Bug Fixes
[OPERATOR]The formatting of event-logger logs when theOpenTelemetryCollectorfeature gate is enabled is now partially fixed. The event-logger logs are now properly structured with fields as attributes, but to make them searchable with theunpackfeature a change in the fluent-bit output plugin is required. by @iypetrov [#14423][OPERATOR]Thegardenletreconciler in thegardener-operatornow uses the virtual cluster client to fetch the pull secret and CA bundle secret. It was wrongly using the runtime cluster client earlier. by @shafeeqes [#14331][OPERATOR]Fix a bug where theshoot-carecontroller cannot reconcile shoots withspec.maintenance.confineSpecUpdateRollout=trueand updated DNS credentials, i.e.shoot.spec.dns.providers[].credentialsRef, until the shoot is reconciled. by @vpnachev [#14397][USER]FixedEveryNodeReadyshoot condition incorrectly reportingNodeAgentUnhealthyfor nodes not managed by MCM. by @acumino [#14509][DEVELOPER]Pull secrets in the remote setup are labeled correctly to be automatically propagated by @matthias-horne [#14502][DEPENDENCY]Extension shoot webhook configs are now always produced even whenmergeShootWebhooksIntoSeedWebhooksistrue, so that a self-hostedShootpromoted to aSeedhas the correct shoot webhooks registered. by @rfranzke [#14389]🏃 Others
[OPERATOR]FixKubePodNotReadyControlPlanealert to not trigger for pods inCompletedstate. by @adenitiu [#14404][OPERATOR]Create pull secret in garden namespace of virtual garden for remote setup. by @DockToFuture [#14449][OPERATOR]Introduce seed reconciliation alerts. by @adenitiu [#14441][OPERATOR]Enable notification flexibility ofEtcdDbSizeLimitApproachingandEtcdDbSizeLimitCrossedalert for seeds by @adenitiu [#14384][OPERATOR]The following dependencies have been updated:gardener/autoscalerfromv1.34.0tov1.34.1. Release Notesgardener/autoscalerfromv1.33.0tov1.33.1. Release Notesgardener/autoscalerfromv1.32.2tov1.32.3. Release Notesgardener/autoscalerfromv1.31.0tov1.31.1. Release Notesgardener/autoscalerfromv1.30.2tov1.30.3. Release Notes by @aaronfern [#14479][OPERATOR]There is nowmaxConnectionDurationof 1 day for connections to kube-apiserver endpoints. TheirmaxConnectionslimit has been removed. by @oliver-goetz [#14463][DEVELOPER]The default shoot for test machinery tests was adjusted to work with Kubernetes 1.35. by @timuthy [#14439][DEVELOPER]In the remote setup Kyverno now always adds imagePullSecret for images in the remote registry. by @matthias-horne [#14478][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controllerfrom1.5.1to1.6.0.registry.k8s.io/autoscaling/vpa-recommenderfrom1.5.1to1.6.0.registry.k8s.io/autoscaling/vpa-updaterfrom1.5.1to1.6.0. by @gardener-ci-robot [#14036][DEPENDENCY]The following dependencies have been updated:gardener/machine-controller-managerfromv0.61.2tov0.61.3. Release Notesgithub.com/gardener/machine-controller-managerfromv0.61.2tov0.61.3. by @gardener-ci-robot [#14453][DEPENDENCY]Istio charts and images are updated to v1.29.1 by @axel7born [#14454][DEPENDENCY]The following dependencies have been updated:gardener/gardener-metrics-exporterfrom0.43.0to0.44.0. Release Notes by @gardener-ci-robot [#14486][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.5.0to2.5.5. by @gardener-ci-robot [#14480][DEPENDENCY]The following dependencies have been updated:gardener/coredns-config-adapterfromv0.4.0tov0.5.0. Release Notes by @DockToFuture [#14490]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.140.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.140.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.140.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.140.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.140.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.140.0Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.