v1.118.0
·
136 commits
to master
since this release
[gardener/gardener]
⚠️ Breaking Changes
[OPERATOR]
TheSeed
API fieldspec.backup.secretRef
has been deprecated and will be removed in a future version of Gardener in favor ofspec.backup.credentialsRef
, please adapt your seed manifests to use the newcredentialsRef
field. by @vpnachev [#11583][OPERATOR]
Gardener no longer sets the flags--audit-log-(path|maxsize|maxbackups)
on shootkube-apiserver
s,gardener-apiserver
or Garden'svirtual-garden-kube-apiserver
. If you rely on the audit logs being available in the file/tmp/audit/audit.log
in the container's file system, please follow controlplane-webhooks and set the required flags via mutating webhook. by @vpnachev [#11935][OPERATOR]
TheManagedSeed
API fieldspec.gardenlet.config.seedConfig.spec.backup.secretRef
has been deprecated and will be removed in a future version of Gardener in favor ofspec.gardenlet.config.seedConfig.spec.backup.credentialsRef
, please adapt your managedseed manifests to use the newcredentialsRef
field. by @vpnachev [#11583][OPERATOR]
The legacysupport.gardener.cloud/eu-access*
labels and annotations onCloudProfile
s andSeed
s are no longer synced automatically. You have to use the new API established in Gardener v1.107 (released in 11/2024). Read more about it here. Please make sure to manually remove these labels and annotations from yourCloudProfile
s andSeed
s! by @rfranzke [#11913][OPERATOR]
TheGardenlet
API fieldspec.config.seedConfig.spec.backup.secretRef
has been deprecated and will be removed in a future version of Gardener in favor ofspec.config.seedConfig.spec.backup.credentialsRef
, please adapt your gardenlet manifests to use the newcredentialsRef
field. by @vpnachev [#11583][OPERATOR]
TheGardenletConfiguration
configuration file fieldseedConfig.spec.backup.secretRef
has been deprecated and will be removed in future version of Gardener in favor ofseedConfig.spec.backup.credentialsRef
, please adapt yourGardenletConfiguration
configuration files to use the newcredentialsRef
field. by @vpnachev [#11583][USER]
The legacysupport.gardener.cloud/eu-access*
labels and annotations onShoot
s are no longer synced automatically. You have to use the new API established in Gardener v1.107 (released in 11/2024). Read more about it here. Please make sure to manually remove these labels and annotations from yourShoot
s! by @rfranzke [#11913]
📰 Noteworthy
[USER]
The CA bundle of the kubelet is now available via aConfigMap
the project's namespace, called<shoot-name>.ca-kubelet
. by @tobschli [#11916]
✨ New Features
[USER]
The Stale Project Controller now also considersWorkloadIdentity
resources when deciding if aProject
is stale or not. by @dimityrmirchev [#11962][OPERATOR]
Gardener core components are automatically restarted (due to a failing liveness probe) in case their Kubernetes API server watch caches do not sync for3m
. by @rfranzke [#11966][OPERATOR]
TheSeed
API feature new fieldspec.backup.credentialsRef
, it is of typecorev1.ObjectReference
and is allowed to refer to aSecret
. by @vpnachev [#11583][OPERATOR]
Add alpha feature gateCloudProfileCapabilities
to enable usage ofarchitecture
capability instead of current architecture fields in machine images and types. by @LucaBernstein [#11736][OPERATOR]
TheGardenletConfiguration
configuration file feature new fieldseedConfig.spec.backup.credentialsRef
, it is of typecorev1.ObjectReference
and is allowed to refer to aSecret
. by @vpnachev [#11583][OPERATOR]
TheManagedSeed
API feature new fieldspec.gardenlet.config.seedConfig.spec.backup.credentialsRef
, it is of typecorev1.ObjectReference
and is allowed to refer to aSecret
. by @vpnachev [#11583][OPERATOR]
TheGardenlet
API feature new fieldspec.config.seedConfig.spec.backup.credentialsRef
, it is of typecorev1.ObjectReference
and is allowed to refer to aSecret
. by @vpnachev [#11583]
🐛 Bug Fixes
[OPERATOR]
The gardenlet deployer would not try to copy the shoot infrastructure secret for seed backup credentials if the shoot uses workload identity. by @dimityrmirchev [#11983][DEVELOPER]
TheDumpLogsForPodsWithLabelsInNamespace
function in the test framework now supports dumping pods with multiple containers. by @domdom82 [#11878]
🏃 Others
[OPERATOR]
Virtual extended resources can now be set on the NodeTemplate without triggering rollout by @elankath [#11809][OPERATOR]
Thegardener/autoscaler
image has been updated tov1.32.0
. Release Notes by @marc1404 [#11903][OPERATOR]
The etcd-druid component no longer defines resource limits. by @ialidzhikov [#11973][OPERATOR]
Fixed an issue, where IPv6 shoots without configured pod and service ranges can't be scheduled on seeds without configured shootDefaults. by @axel7born [#11955][DEPENDENCY]
The following dependencies have been updated:quay.io/brancz/kube-rbac-proxy
fromv0.19.0
tov0.19.1
. by @gardener-ci-robot [#11941]
[DEPENDENCY]
The following dependencies have been updated:gardener/etcd-druid
fromv0.29.0
tov0.29.1
. Release Notesgithub.com/gardener/etcd-druid/api
fromv0.29.0
tov0.29.1
. by @gardener-ci-robot [#11940]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.12.1
tov1.12.2
. by @gardener-ci-robot [#11981]
[DEPENDENCY]
The following dependencies have been updated:gardener/dashboard
from1.79.1
to1.80.0
. Release Notes by @gardener-ci-robot [#11976]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chroot
fromv1.11.5
tov1.11.6
. by @gardener-ci-robot [#11968]
[DEPENDENCY]
The following dependencies have been updated:gardener/ingress-default-backend
from0.22.0
to0.23.0
. Release Notes by @gardener-ci-robot [#11948]
[DEPENDENCY]
The following dependencies have been updated:gardener/machine-controller-manager
fromv0.57.2
tov0.58.0
. Release Notesgithub.com/gardener/machine-controller-manager
fromv0.57.2
tov0.58.0
. by @gardener-ci-robot [#11963]
[DEPENDENCY]
The following dependencies have been updated:envoyproxy/envoy
fromv1.33.2
tov1.34.0
. Release Notes by @gardener-ci-robot [#11883]
[DEPENDENCY]
The following dependencies have been updated:registry.k8s.io/autoscaling/vpa-admission-controller
from1.3.0
to1.3.1
.registry.k8s.io/autoscaling/vpa-recommender
from1.3.0
to1.3.1
.registry.k8s.io/autoscaling/vpa-updater
from1.3.0
to1.3.1
. by @gardener-ci-robot [#11985]
[DEPENDENCY]
The following dependencies have been updated:quay.io/prometheus/prometheus
fromv3.2.1
tov3.3.0
. by @gardener-ci-robot [#11877]
[DEPENDENCY]
The following dependencies have been updated:gardener/gardener-metrics-exporter
from0.37.0
to0.38.0
. Release Notes by @gardener-ci-robot [#11905]
[DEVELOPER]
Thehack/tools/extension-generator
tool now automatically sets the.spec.deployment.extension.injectGardenKubeconfig: true
field in the generated providerExtension
resources . by @plkokanov [#11837][DEVELOPER]
A new flag-i|--inject-garden-kubeconfig
was added to thehack/generate-controller-registration.sh
script. When the flag is set, theinjectGardenKubeconfig: true
field is added to the generatedControllerDeployment
. by @plkokanov [#11837]
Helm Charts
- controlplane:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.118.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.118.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.118.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.118.0
Docker Images
- admission-controller:
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.118.0
- apiserver:
europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.118.0
- controller-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.118.0
- gardenlet:
europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.118.0
- node-agent:
europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.118.0
- operator:
europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.118.0
- resource-manager:
europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.118.0
- scheduler:
europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.118.0