Update module github.com/gardener/gardener to v1.104.0

gardener-ci-robot commented 1 month ago

This PR contains the following updates:

Package	Type	Update	Change
github.com/gardener/gardener	require	minor	`v1.103.0` -> `v1.104.0`

Release Notes

gardener/gardener (github.com/gardener/gardener)

### [`v1.104.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.104.0) [Compare Source](https://redirect.github.com/gardener/gardener/compare/v1.103.0...v1.104.0) ### \[gardener/gardener] #### ⚠️ Breaking Changes - `[USER]` A bug has been fixed which was allowing users to set `Shoot` oidc configurations for the `kube-apiserver` without setting the `clientID` and `issuerURL` fields in `spec.kubernetes.kubeAPIServer.oidcConfig`, which would lead to the `kube-apiserver` stuck in a `Error` state. gardener-apiserver now requires both `clientID` and `issuerURL` fields to be set when the `spec.kubernetes.kubeAPIServer.oidcConfig` field is specified. by [@AleksandarSavchev](https://redirect.github.com/AleksandarSavchev) \[[#10461](https://redirect.github.com/gardener/gardener/issues/10461)] - `[OPERATOR]` `credentialsBinding.credentialsRef` is now an immutable field. by [@dimityrmirchev](https://redirect.github.com/dimityrmirchev) \[[#10365](https://redirect.github.com/gardener/gardener/issues/10365)] #### 📰 Noteworthy - `[USER]` Users are allowed to change `shoot.spec.credentialsBindingName` and reference another `CredentialsBinding` only if they have the permissions to read both the old and newly referenced credential. by [@dimityrmirchev](https://redirect.github.com/dimityrmirchev) \[[#10365](https://redirect.github.com/gardener/gardener/issues/10365)] - `[USER]` Users can migrate from `shoot.spec.secretBindingName` to `shoot.spec.credentialsBindingName` only if the referenced credential remains the same and is not changed during the process. by [@dimityrmirchev](https://redirect.github.com/dimityrmirchev) \[[#10365](https://redirect.github.com/gardener/gardener/issues/10365)] - `[OPERATOR]` Allow project users to read `NamespacedCloudProfile`s and for project admins to make adjustments to machine types and volume types. by [@LucaBernstein](https://redirect.github.com/LucaBernstein) \[[#10485](https://redirect.github.com/gardener/gardener/issues/10485)] - `[OPERATOR]` Alerts based on the `proposals_failed_total` metric of the etcd cluster are not raised anymore. by [@renormalize](https://redirect.github.com/renormalize) \[[#10524](https://redirect.github.com/gardener/gardener/issues/10524)] - `[DEVELOPER]` A new predicate `extensions/pkg/predicate.GardenSecurityProviderType` can be used to select resources from the `security.gardener.cloud` group that are related to the passed provider type. by [@dimityrmirchev](https://redirect.github.com/dimityrmirchev) \[[#10499](https://redirect.github.com/gardener/gardener/issues/10499)] #### ✨ New Features - `[OPERATOR]` The `gardener-operator` metrics are now automatically scraped by the `garden` Prometheus. by [@maboehm](https://redirect.github.com/maboehm) \[[#10464](https://redirect.github.com/gardener/gardener/issues/10464)] - `[OPERATOR]` Introduce custom RBAC verbs to allow for modification of `.spec.{kubernetes,machineImages}` in `NamespacedCloudProfile`s. by [@LucaBernstein](https://redirect.github.com/LucaBernstein) \[[#10485](https://redirect.github.com/gardener/gardener/issues/10485)] - `[OPERATOR]` The feature gate `NewVPN` is introduced for the `gardenlet` component. If enabled, the new VPN implementation (Golang rewrite) is used for all `Shoot`s of the respective `Seed`. In this case, the old implementation can be disabled for a single `Shoot` by annotating the shoot resource with `alpha.control-plane.shoot.gardener.cloud/disable-new-vpn=true`. For `Seed`s with disabled feature gate, the new implementation can be enabled for a single shoot by annotating it with `alpha.control-plane.shoot.gardener.cloud/disable-new-vpn=false`. by [@MartinWeindel](https://redirect.github.com/MartinWeindel) \[[#9774](https://redirect.github.com/gardener/gardener/issues/9774)] #### 🐛 Bug Fixes - `[USER]` Fixed disk read/write panel in the shoot's etcd dashboards by [@rickardsjp](https://redirect.github.com/rickardsjp) \[[#10493](https://redirect.github.com/gardener/gardener/issues/10493)] - `[DEVELOPER]` An issue was fixed that rejected the creation of workerless shoots in the local setup. by [@timuthy](https://redirect.github.com/timuthy) \[[#10498](https://redirect.github.com/gardener/gardener/issues/10498)] #### 🏃 Others - `[DEPENDENCY]` The `gardener/hvpa-controller` image has been updated to `v0.17.0`. [Release Notes](https://redirect.github.com/gardener/hvpa-controller/releases/tag/v0.17.0) by [@gardener-ci-robot](https://redirect.github.com/gardener-ci-robot) \[[#10508](https://redirect.github.com/gardener/gardener/issues/10508)] - `[DEPENDENCY]` The `quay.io/prometheus-operator/prometheus-config-reloader` image has been updated to `v0.76.2`. by [@gardener-ci-robot](https://redirect.github.com/gardener-ci-robot) \[[#10500](https://redirect.github.com/gardener/gardener/issues/10500)] - `[DEPENDENCY]` The `gardener/machine-controller-manager` image has been updated to `v0.54.0`. [Release Notes](https://redirect.github.com/gardener/machine-controller-manager/releases/tag/v0.54.0) by [@gardener-ci-robot](https://redirect.github.com/gardener-ci-robot) \[[#10528](https://redirect.github.com/gardener/gardener/issues/10528)] - `[DEPENDENCY]` The `gardener/alpine-conntrack` image has been updated to `3.20.3`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.20.3) by [@gardener-ci-robot](https://redirect.github.com/gardener-ci-robot) \[[#10487](https://redirect.github.com/gardener/gardener/issues/10487)] - `[DEPENDENCY]` The `envoyproxy/envoy` image has been updated to `v1.31.1`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.31.1) by [@gardener-ci-robot](https://redirect.github.com/gardener-ci-robot) \[[#10531](https://redirect.github.com/gardener/gardener/issues/10531)] - `[OPERATOR]` Federate apiserver_total_request metric to the Prometheus longterm instance by [@jguipi](https://redirect.github.com/jguipi) \[[#10457](https://redirect.github.com/gardener/gardener/issues/10457)] - `[OPERATOR]` Allow empty `networking.nodes` in case of IPv6 only shoots. by [@axel7born](https://redirect.github.com/axel7born) \[[#10533](https://redirect.github.com/gardener/gardener/issues/10533)] - `[OPERATOR]` Improved node utilisation by reducing requests for etcd-druid managed pods. by [@unmarshall](https://redirect.github.com/unmarshall) \[[#10540](https://redirect.github.com/gardener/gardener/issues/10540)] - `[DEVELOPER]` Install go in the remote local setup from the go download site instead of using the apk package manager. by [@vicwicker](https://redirect.github.com/vicwicker) \[[#10502](https://redirect.github.com/gardener/gardener/issues/10502)] #### Helm Charts - controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.104.0` - gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.104.0` - operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.104.0` - resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.104.0` #### Docker Images - admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.104.0` - apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.104.0` - controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.104.0` - gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.104.0` - node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.104.0` - operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.104.0` - resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.104.0` - scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.104.0`

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

gardener-ci-robot commented 1 month ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

19 additional dependencies were updated

Details:

Package	Change
`k8s.io/api`	`v0.29.8` -> `v0.29.9`
`k8s.io/apimachinery`	`v0.29.8` -> `v0.29.9`
`k8s.io/apiserver`	`v0.29.8` -> `v0.29.9`
`k8s.io/client-go`	`v0.29.8` -> `v0.29.9`
`k8s.io/component-base`	`v0.29.8` -> `v0.29.9`
`k8s.io/pod-security-admission`	`v0.29.8` -> `v0.29.9`
`github.com/gardener/hvpa-controller/api`	`v0.16.0` -> `v0.17.0`
`github.com/prometheus/common`	`v0.58.0` -> `v0.59.1`
`golang.org/x/crypto`	`v0.26.0` -> `v0.27.0`
`golang.org/x/exp`	`v0.0.0-20240823005443-9b4947da3948` -> `v0.0.0-20240909161429-701f63a606c0`
`golang.org/x/mod`	`v0.20.0` -> `v0.21.0`
`golang.org/x/net`	`v0.28.0` -> `v0.29.0`
`golang.org/x/sys`	`v0.24.0` -> `v0.25.0`
`golang.org/x/term`	`v0.23.0` -> `v0.24.0`
`golang.org/x/tools`	`v0.24.0` -> `v0.25.0`
`k8s.io/apiextensions-apiserver`	`v0.29.8` -> `v0.29.9`
`k8s.io/code-generator`	`v0.29.8` -> `v0.29.9`
`k8s.io/kube-aggregator`	`v0.29.8` -> `v0.29.9`
`k8s.io/metrics`	`v0.29.8` -> `v0.29.9`

gardener-robot commented 1 month ago

@gardener-ci-robot Thank you for your contribution.

gardener-ci-robot commented 1 month ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

gardener / diki