Open
Conversation
renovate
bot
requested review from
hown3d,
maboehm,
robinschneider and
timebertt
as code owners
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
bot
force-pushed
the
renovate/k8s-go
branch
from
6890ea2 to
2dbbbde
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.138.1→v1.139.0v1.138.1→v1.139.0Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.139.0Compare Source
[github.com/gardener/gardener:v1.139.0]
[OPERATOR]The type of the Gardenlet's configuration field.controllers.tokenRequestorWorkloadIdentity.tokenExpirationDurationhas been changed fromtime.Durationtok8s.io/apimachinery/pkg/apis/meta/v1.Duration. by @vpnachev [#14333][OPERATOR]Garden.status.encryptedResourcesfield is removed, use Garden.status.credentials.encryptionAtRest.resourcesinstead. by @iypetrov [#14354][OPERATOR]Theraise-spec-limitsverb has been removed forNamespacedCloudProfiles because it is no-longer needed. by @mimiteto [#14344][USER].spec.dns.providers[].secretNamehas been forbidden for clusters running on Kubernetes version v1.35.0 or higher. Please, use.spec.dns.providers[].credentialsRefinstead. by @vpnachev [#14309][USER]Shoot.status.encryptedResourcesfield is removed, use Shoot.status.credentials.encryptionAtRest.resourcesinstead. by @iypetrov [#14354][DEVELOPER]A default reconciliation timeout of 20 minutes has been set for the extension controllers:
Extension developers can define own reconciliation timeout via the
sigs.k8s.io/controller-runtime/pkg/controller.Optionsprovided to the respective controller. by @vpnachev [#14105][DEVELOPER]secretRefinspec.dns.providerhas been removed, usecredentialsRefinstead. by @vpnachev [#14308]📰 Noteworthy
[OPERATOR]AdminKubeconfigRequestnow uses the static username prefixgardener.cloud:admin:, andViewerKubeconfigRequestusesgardener.cloud:viewer:to generate the username for the resulting kubeconfig. Previously, this prefix was randomized." by @timuthy [#14252][DEVELOPER]gardenadmbootstrap etcd version is updated fromv3.4.34tov3.5.27. by @LucaBernstein [#14352][DEPENDENCY]During theShootreconciliation, control plane and extension readiness is waited for before further system components are reconciled. by @LucaBernstein [#14338]✨ New Features
[OPERATOR]Deletion of theGardenCRD installed via the gardener-operator Helm chart is now prevented unless annotated withconfirmation.gardener.cloud/deletion=trueby @maboehm [#14373][OPERATOR]A newspec.settings.zoneSelectionfield onSeedresources allows operators to configure whether the control plane namespace of non-HAShoots (or those with failure tolerance typenode) is placed in the same availability zone as the shoot's worker nodes (Prefer) or strictly required to match (Enforce). by @rfranzke [#14238][OPERATOR]Theistio-ingressgatewaynow uses a dual autoscaling approach with bothVPA(VerticalPodAutoscaler) andHPA(HorizontalPodAutoscaler) working together without causing pod-thrashing. by @oliver-goetz [#14313][OPERATOR]The Gardener Dashboard RBAC now allows listing and watching ManagedSeeds to support newer dashboard functionality around ManagedSeed-related Shoot information. by @petersutter [#14321][DEVELOPER]gardener-node-agentcan now resolve.spec.files[].content.secretReffromSecrets inkube-system, enablingOperatingSystemConfigfiles to reference secrets instead of requiring inlined content. by @rfranzke [#14319]🐛 Bug Fixes
[OPERATOR]A bug causing the nil pointer panic in gardenlet config validation whenstaleExtensionHealthChecks.thresholdis nil is fixed. by @acumino [#14317][OPERATOR]An issue preventing theshootstate-controllerof gardenlet to populate all required states to the ShootState for a self-hosted Shoot is now fixed. by @ialidzhikov [#14339][OPERATOR]An issue causinggardener-operatorto fail to create resourceeventsin API groupevents.k8s.iois now fixed. by @shafeeqes [#14327][OPERATOR]A bug causing thegardenletto crash during startup was fixed. Earlier, the startup procedure occasionally failed on large-scale seed clusters due to cache sync timeouts. by @timuthy [#14408][DEVELOPER]ThenodePortauto-remediation in the local setup service controller no longer incorrectly targetsClusterIPservices. by @rfranzke [#14390]🏃 Others
[OPERATOR]The.spec.trafficDistributionfield of the topology-awareetcd-{events,main}-clientServices will be automatically switched from the deprecatedPreferCloseto the newPreferSameZoneoption for Kubernetes 1.34+. by @ialidzhikov [#14278][OPERATOR]The following dependencies have been updated:gardener/etcd-druidfromv0.35.1tov0.36.1. Release Notesgithub.com/gardener/etcd-druid/apifromv0.35.1tov0.36.1. by @Shreyas-s14 [#14341][OPERATOR]Status updates forShootresources during reconciliation are now minimized when the associatedSeedis not ready. Previously, this could lead to excessive growth of the gardener's etcd key space. by @timuthy [#14377][OPERATOR]Opentelemetry collector migration implemented in gardener - v1.136.0 is no longer needed. by @nickytd [#14138][OPERATOR]During therestorephase of control plane migration,MachinesandMachineSetsare now deployed in parallel across 10 go routines. Additionally, the restoration logic now checks if aMachineorMachineSetalready exists, and if that is the case, it does not attempt to create it. This should speed up the restoration of theWorkerresource. by @plkokanov [#14219][OPERATOR]Now victorialogs streams follow opentelemetry semantic convention fields. by @nickytd [#14381][OPERATOR]victoria-logspods are now labeled according oidc-apps semantic. by @nickytd [#14325][OPERATOR]Unused bootstrap secrets from thegardener-resource-managerare cleaned up properly. Earlier, the shoot reconciliation left a considerable amount of unused secrets in the control-plane, if the GRM bootstrap procedure was stuck. by @timuthy [#14343][OPERATOR]Fix Istio Gateway metric retention and reenable metric scraping. by @Bobi-Wan [#14337][OPERATOR]apiserver-proxy connection for shoots with legacy single-dash namespace format has been fixed. by @axel7born [#14406][OPERATOR]Timeout for credentials renewal during rotation ofGardensecrets was increased to 10 minutes. by @dimityrmirchev [#14433][OPERATOR]Thev1alpha1perses CRDs are deleted and replaced withv1alpha2versions during reconciliation. by @rickardsjp [#14264][USER]VPN Dashboard now displays the pod name in the legend for the VPN Shoot Network I/O panel by @domdom82 [#14393][DEVELOPER]The remote local setup has been updated to the latest changes in Gardener. by @vicwicker [#14289][DEVELOPER]Addedhack/generate-renovate-ignore-deps.shto generate the renovateignoreDepssection from the intersection of a downstream repo'sgo.modandgardener/gardener'sgo.mod. Downstream repos can now remove their local copies and call the script from$GARDENER_HACK_DIR. by @LucaBernstein [#14425][DEVELOPER]Remote setup garden template has been updated with gardenerDiscoveryServer configuration by @domdom82 [#14306][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.15.0tov1.15.1. by @gardener-ci-robot [#14363][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.14.3tov1.15.0. by @gardener-ci-robot [#14267][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/coredns/corednsfromv1.14.1tov1.14.2. by @gardener-ci-robot [#14290][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.8to1.83.9. Release Notes by @gardener-ci-robot [#14312][DEPENDENCY]The following dependencies have been updated:quay.io/brancz/kube-rbac-proxyfromv0.21.0tov0.21.1. by @gardener-ci-robot [#14332][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.9to1.83.10. Release Notes by @gardener-ci-robot [#14380][DEPENDENCY]The following dependencies have been updated:europe-docker.pkg.dev/gardener-project/releases/gardener/fluent-bit-pluginfromv1.2.0tov1.4.0. by @nickytd [#14357][DEPENDENCY]The following dependencies have been updated:quay.io/brancz/kube-rbac-proxyfromv0.21.1tov0.21.2. by @gardener-ci-robot [#14382][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.14.4tov1.14.5. by @gardener-ci-robot [#14362][DEPENDENCY]The following dependencies have been updated:gardener/vpn2from0.47.0to0.48.0. Release Notes by @gardener-ci-robot [#14374][DEPENDENCY]The following dependencies have been updated:perses/persesfromv0.53.0tov0.53.1. Release Notes by @gardener-ci-robot [#14307][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.10to1.83.11. Release Notes by @gardener-ci-robot [#14438][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.27.7to1.27.8.gcr.io/istio-release/proxyv2from1.27.7to1.27.8.istio.io/apifromv1.27.7tov1.27.8. by @gardener-ci-robot [#14280]📖 Documentation
[DEPENDENCY]Extension admission components deployed viagardener-operatorshould set the--webhook-config-owner-namespaceflag to preventValidatingWebhookConfigurationresources from leaking in the virtual garden cluster upon uninstall. by @theoddora [#14360]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.139.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.139.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.139.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.139.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.139.0Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.