Bump github.com/gardener/gardener from 1.93.0 to 1.94.0

[dependabot[bot]]

Bumps github.com/gardener/gardener from 1.93.0 to 1.94.0.

Release notes

Sourced from github.com/gardener/gardener's releases.

v1.94.0

[gardener/gardener]

📰 Noteworthy

• [OPERATOR] Five minutes Infrastructure Cleanup Wait Period during shoot deletion was removed. Shoot annotation shoot.gardener.cloud/infrastructure-cleanup-wait-period-seconds which could be used to configure this period was removed, too. by @​oliver-goetz #9632
• [DEVELOPER] The tools installed via the tools.mk make file are now by default installed in an OS and arch specific folder to allow running make targets from different platforms sharing the same source code.
  The previous behavior can be achieved by setting the variable TOOLS_BIN_DIR to hack/tools/bin to any make target. by @​vpnachev #9589
• [DEVELOPER] Today's method of providing Plutono dashboards for garden or shoot clusters is deprecated and will be removed in a future release. Migrate to the new approach (see this document) for details. by @​rfranzke #9624

✨ New Features

• [OPERATOR] gardener-operator is now managing the Gardener Dashboard web terminal controller manager when .spec.virtualCluster.gardener.gardenerDashboard.terminal is set in the Garden resource. Read more about it here by @​rfranzke #9646
• [OPERATOR] gardener-node-agent no longer watches all Nodes in the cluster but restricts to only the Node it is responsible for (with the help of label/field selectors). This should lead to a significant reduction of network I/O, especially for shoot clusters with many nodes. by @​rfranzke #9672
• [OPERATOR] gardener-operator now deploys two more Prometheus replicas into the garden namespace for storing long-term metrics. Read more about it here. by @​rfranzke #9606
• [OPERATOR] A new feature gate named VPAForETCD is now introduced for gardenlet and gardener-operator. When enabled, VPA for etcd is used, regardless of the HVPA feature gate setting. The new VPA limits scaling down to a Shoot's maintenance window or even entirely based on the ShootClass in the same way as it is currently done for HVPA. by @​voelzmo #8984
• [OPERATOR] gardener-operator is now managing the Gardener Dashboard when .spec.virtualCluster.gardener.gardenerDashboard is set in the Garden resource. Read more about it here by @​rfranzke #9583
• [USER] It is now possible to define a higher number of maximum worker count in a shoot than pods and nodes networks allow. cluster-autoscaler ensures that not more nodes than the networking settings allow will be created. by @​oliver-goetz #9599

🐛 Bug Fixes

• [OPERATOR] gardener-operator is now capable of reconciling shoot cluster-specific NetworkPolicys in case the garden cluster is a seed cluster at the same time. by @​rfranzke #9658
• [OPERATOR] Fixed prometheus alerting rules for Seeds with unhealthy control-planes by @​voelzmo #9692
• [OPERATOR] In the migrate flow of control plane migration the Deleting extensions before kube-apiserver task now depends on the Waiting until extension resources have been deleted task. by @​plkokanov #9651
• [OPERATOR] Only update network policy allow-to-runtime-apiserver after resolver has been synced. by @​MartinWeindel #9644

🏃 Others

• [OPERATOR] Updated VPA to 1.1.1 by @​voelzmo #8984
• [OPERATOR] If a previous file copy attempt failed gardener-node-agent now deletes leftover *.tmp files instead of returning an error. by @​oliver-goetz #9630
• [OPERATOR] extension library: An issue causing the backup.gardener.cloud/created-by annotation not being added on existing etcd-backup Secrets is now fixed. by @​ialidzhikov #9613
• [OPERATOR] Added a cleanup function to gardenlet which is executed at startup and deletes orphaned VPAs with label role: vali-vpa that were previously managed by the HVPA deployed for vali. by @​plkokanov #9681
• [OPERATOR] The gardenlet now runs as nonroot user and group 65532. by @​AleksandarSavchev #9669
• [OPERATOR] A new plutono dashboard named Resource usage by container is added to garden/plutono. It shows aggregated CPU/memory usage vs requests/limits and utilization per container (currently only metrics for kube-apiserver containers are federated). by @​ialidzhikov #9643
• [OPERATOR] Containers, configured to run as non-root, are now validated to start with non-root user by the kubelet. by @​AleksandarSavchev #9640
• [OPERATOR] The fluent-operator component now runs as nonroot user and group 65532. by @​AleksandarSavchev #9640
• [OPERATOR] The kube-controller-manager's (H)VPA minAllowed memory is reduced from 100Mi to 50Mi. The kube-apiserver's HVPA minAllowed memory is reduced from 400M to 200M. by @​ialidzhikov #9654

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.94.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.94.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.94.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.94.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.94.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.94.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.94.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.94.0

Commits

• a571429 Release v1.94.0
• d46022a Switch from purpose to is_seed for Seed alerts (#9692)
• e292c80 chore(deps): update quay.io/prometheus/node-exporter docker tag to v1.8.0 (#9...
• 0bd94a8 No longer make Plutono dashboard ConfigMap unique (#9683)
• e8454f0 Delete orphaned vali VPAs (#9681)
• f82a1e6 [node-agent] Restrict Node watches via label/field selector to prevent watc...
• 1cc8af5 Add "Resource usage by container" dashboard to garden/plutono (#9643)
• 901e117 Fix various typos in markdown files (#9679)
• 975985f make repo reuse compliant (#9676)
• 7977304 chore(deps): update dependency kyverno/kyverno to v1.12.0 (#9675)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[gardener-prow[bot]]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Once this PR has been reviewed and has the lgtm label, please assign ialidzhikov for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/gardener/gardener-extension-registry-cache/blob/main/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

[gardener-prow[bot]]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-gardener-extension-registry-cache-unit	faf62363d24f1ffda5d8bbefd463b7dbf2faae69	link	true	/test pull-gardener-extension-registry-cache-unit
pull-gardener-extension-registry-cache-e2e-kind	faf62363d24f1ffda5d8bbefd463b7dbf2faae69	link	true	/test pull-gardener-extension-registry-cache-e2e-kind

Full PR test history. Your PR dashboard. Command help for this repository. Please help us cut down on flakes by linking this test failure to an open flake report or filing a new flake report if you can't find an existing one. Also see our testing guideline for how to avoid and hunt flakes.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).

[dependabot[bot]]

Superseded by #189.