[OPERATOR]kubeletCSRApprover controller in gardener-resource-manager Helm chart has been renamed to csrApprover. by @oliver-goetz#10549
[OPERATOR] The HVPA and HVPAForShootedSeed feature gates have been deprecated and locked to false. Disable the HVPA and HVPAForShootedSeed feature gates if you have them enabled before upgrading to this version of Gardener. by @plkokanov#10659
📰 Noteworthy
[USER] For Kubernetes 1.31+ Shoot clusters, the kubelet and containerd cgroup driver is set to systemd. Previously, the used cgroup driver was cgroupfs. Find more details in the cgroup driver section. by @ialidzhikov#10472
[OPERATOR] The gardener operator chart (charts/gardener/operator) does no longer enable the HVPA feature gate in its default values.yaml. by @ialidzhikov#10566
✨ New Features
[DEVELOPER] Allow gosec to be consumed from gardener/gardener by @ScheererJ#10642
[DEVELOPER] Gardener can now support clusters with Kubernetes version 1.31. Extension developers have to prepare individual extensions as well to work with 1.31. by @ialidzhikov#10472
[OPERATOR] Adds CloudProfile validation for the recently introduced .spec.bastion section. by @hebelsan#10318
[OPERATOR] Gardener can now support clusters with Kubernetes version 1.31. To allow creation/update of 1.31 clusters you will have to update the version of your provider extension(s) to a version that supports 1.31 as well. Please consult the respective releases and notes in the provider extension's repository. by @ialidzhikov#10472
[OPERATOR] Added an alert for the Garden resource's conditions, along with a dashboard that also displays the resource's last operation. by @rickardsjp#10562
🐛 Bug Fixes
[OPERATOR] Fixes an issue with the network metrics relabeling config that caused the Node Details dashboard to not display data for AWS nodes. by @rickardsjp#10625
🏃 Others
[DEPENDENCY] The registry.k8s.io/ingress-nginx/controller-chroot image has been updated to v1.11.3. by @gardener-ci-robot#10626
[OPERATOR] Gardener generated certificates are valid 1 minute before issuance to handle some amount of clock skew. by @ScheererJ#10603
[OPERATOR] Metrics for vpa-recommenders are now collected in separate prometheus instances depending on where the vpa-recommender pods are deployed. Metrics for the vpa-recommender in the garden namespace are collected in prometheus-seed. Metrics for the vpa-recommender in the shoot control plane namespaces are collected in the corresponding prometheus-shoot. Additionally, the VPA Recommender plutono dashboard is separately deployed for seeds in the garden namespace and shoots in their control plane namespaces. by @plkokanov#10517
[OPERATOR] Clean up migration code from the monitoring component by @vicwicker#10597
[DEVELOPER] The following dependencies are updated:
k8s.io/* : v0.29.8 -> v0.31.0
sigs.k8s.io/controller-runtime: v0.17.5 -> v0.19.0 by @ary1992#10459
[DEVELOPER] The HVPA features gates (HVPA and HVPAForShootedSeed) are no longer enabled in local setups. by @ialidzhikov#10566
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github.com/gardener/gardener from 1.101.0 to 1.106.0.
Release notes
Sourced from github.com/gardener/gardener's releases.
... (truncated)
Commits
697ed41Release v1.106.0ede44a4[release-v1.106] [GEP-26] Fix bug where shoot care controller uses outdated c...b209951chore(deps): update registry.k8s.io/node-problem-detector/node-problem-detect...662a919chore(deps): update quay.io/cortexproject/cortex docker tag to v1.18.1 (#10657)008c4b4DeprecateHVPAandHVPAForShootedSeedfeature gates (#10659)299e688Updated file name for "High Availability of Deployed Components" topic (#10658)be5fae8chore(deps): update dependency envoyproxy/envoy to v1.32.0 (#10656)6e96a7cfix(deps): update module sigs.k8s.io/controller-tools to v0.16.4 (#10638)9cea75e[node-agent-authorizer] auto-approvegardener-node-agentCSRs in `gardener-...bbbc6b7Move usage content into a designated place (2/3) (#10436)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show