gardenlet-1.84.3

[gardener/gardener]

🏃 Others

• [OPERATOR] Allow the dependency-watchdog-prober to patch "deployments" and "deployments/scale" resources. by @aaronfern [#9042]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.84.3
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.84.3
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.84.3
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.84.3
• node-agent: eu.gcr.io/gardener-project/gardener/node-agent:v1.84.3
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.84.3
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.84.3
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.84.3

gardenlet-1.84.2

[gardener/gardener]

🐛 Bug Fixes

• [DEPENDENCY] extension library: An issue causing the Worker restore operation to fail for hibernated Shoots is now fixed. by @ialidzhikov [#8950]

🏃 Others

• [DEVELOPER] Add support for optional SCRIPT_ROOT environment var in vgopath enabled hack scripts by @afritzler [#8944]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.84.2
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.84.2
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.84.2
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.84.2
• node-agent: eu.gcr.io/gardener-project/gardener/node-agent:v1.84.2
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.84.2
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.84.2
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.84.2

gardenlet-1.84.1

[gardener/gardener]

🏃 Others

• [OPERATOR] Updated alpine image to version 3.18.4. by @plkokanov [#8858]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.84.1
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.84.1
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.84.1
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.84.1
• node-agent: eu.gcr.io/gardener-project/gardener/node-agent:v1.84.1
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.84.1
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.84.1
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.84.1

gardenlet-1.84.0

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [OPERATOR] Removes node.machine.sapcloud.io/not-managed-by-mcm annotation from nodes managed by the MCM. by @elankath [gardener/machine-controller-manager#866]

🏃 Others

• [OPERATOR] The default machine-safety-orphan-vms-period has been reduced from 30m to 15m. by @elankath [gardener/machine-controller-manager#866]

[gardener/gardener]

⚠️ Breaking Changes

• [DEVELOPER] New Secrets referenced in ManagedResources will no longer be patched with the label resources.gardener.cloud/garbage-collectable-reference when the ManagedResource is reconciled. Secrets which already exist in the ManagedResource specification will still be patched if necessary. by @dimityrmirchev [#8788]
• [OPERATOR] ⚠️ The deprecated fields spec.settings.dependencyWatchdog.endpoint and spec.settings.dependencyWatchdog.probe have been removed from the Seed API. Please check your Seeds and remove any usage before upgrading to this Gardener version. by @himanshu-kun [#8747]
• [USER] A validation rule was added that forbids changing the primary DNS provider in .spec.dns.providers as soon as the shoot was scheduled. by @timuthy [#8761]

📰 Noteworthy

• [DEVELOPER] The Secret reconciler in gardener-resource-manager will now always remove its finalizer (if present). by @Kostov6 [#8745]
• [DEVELOPER] Vendoring has been removed from the project, i.e., there is no vendor folder anymore. by @afritzler [#8775]

✨ New Features

• [OPERATOR] The deltaSnapshotRetentionPeriod parameter has been introduced in the etcdConfig section of the GardenletConfiguration. This new feature allows users to configure the retention period for delta snapshots in the ETCD component. By making the delta snapshot retention period configurable, we provide a more flexible debugging experience. Delta snapshots can now be retained for a user-defined duration, offering a valuable window for reviewing changes in case of any issues. by @seshachalam-yv [#8659]
• [OPERATOR] Enabled the node-exporter's textfile collector. It will parse files matching the *.prom glob in the /var/lib/node-exporter/textfile-collector directory and load metrics from them so that they can be scraped by prometheus. by @plkokanov [#8721]
• [OPERATOR] Condition handling was improved for Shoots of ManagedSeeds. Earlier, when unknown conditions were removed from seeds (e.g. maintained by third-party components), the affected condition was still present in the shoot's conditions. by @timuthy [#8736]
• [USER] The kube-controller-manager controllers are now disabled based on disabled APIs, which can be configured with spec.kubernetes.kubeAPIServer.runtimeConfig field in the Shoot API. All controllers are enabled by default for Shoot with workers. For workerless Shoots, some non-required APIs are disabled by default, which can be overridden by the above configuration. by @shafeeqes [#8763]
• [DEVELOPER] Use ginkgolinter instead of self baked gomegacheck by @afritzler [#8769]

🐛 Bug Fixes

• [DEVELOPER] A bug causing the crd generation for druid.gardener.cloud group to fail in extensions is now fixed. by @shafeeqes [#8789]
• [OPERATOR] During the restore phase of control plane migration, the machine-controller-manager is deployed with 0 replicas if it did not exist before or if it existed and was not scaled up yet. This fixes an issue that could cause the Shoot's nodes to get recreated during control plane migration. by @plkokanov [#8742]

🏃 Others

• [OPERATOR] Control plane components kube-apiserver, kube-controller-manager and kube-scheduler now run as nonroot user and group 65532. by @AleksandarSavchev [#8690]
• [OPERATOR] The credentials (CA) rotation has been made more robust. In some cases, the Shoot reconciliation stuck at Deploying main and events etcd when the rotation was in Preparing phase. by @timuthy [#8795]
• [OPERATOR] Control plane components kube-apiserver, kube-controller-manager and kube-scheduler now mount key files with DefaultMode set to 416(0640 permissions). by @AleksandarSavchev [#8790]
• [OPERATOR] Plutono is updated to v7.5.26.
  Vali is updated to v2.2.11.
  Kube-rbac-proxy is updated to v0.15.0. by @nickytd [#8799]
• [OPERATOR] The registry of the prometheus-operator image is switched from ghcr (ghcr.io/prometheus-operator/prometheus-config-reloader) to quay.io (quay.io/prometheus-operator/prometheus-config-reloader) because the ghcr does not support image pulls over IPv6. by @ialidzhikov [#8751]
• [OPERATOR] gardener-apiserver and gardener-admission-controller now mount key files with DefaultMode set to 416(0640 permissions). by @AleksandarSavchev [#8790]
• [OPERATOR] NewClientForShoot creates a client with a rest mapper using LazyDiscovery. by @acumino [#8781]
• [OPERATOR] Shoot control plane prometheus is now scraping kubelet volume metrics (kubelet_volume_stats_available_bytes, kubelet_volume_stats_capacity_bytes and kubelet_volume_stats_used_bytes) from the kube-system namespace. This allows Gardener extensions deploying PVCs to the Shoot's kube-system namespace (such as the registry-cache extension) to build alerting and plutono dashboard panels using these kubelet volume metrics. by @ialidzhikov [#8798]
• [OPERATOR] Prepare shared component_descriptor script for migration from GCR to Artifact Registry. by @ccwienk [#8755]
• [OPERATOR] metrics exposed by cluster autoscaler now scraped by prometheus by @aaronfern [#8750]
• [DEVELOPER] The component checklist is enhanced with 2 new rules for container images:
  • Do not use container images from registries that don't support IPv6 - registries such as GHCR, ECR, MCR don't support image pulls over IPv6
  • Do not use Shoot container images that are not multi-arch by @ialidzhikov [#8770]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.84.0
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.84.0
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.84.0
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.84.0
• node-agent: eu.gcr.io/gardener-project/gardener/node-agent:v1.84.0
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.84.0
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.84.0
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.84.0

gardenlet-1.83.3

[gardener/gardener]

🐛 Bug Fixes

• [DEPENDENCY] extension library: An issue causing the Worker restore operation to fail for hibernated Shoots is now fixed. by @ialidzhikov [#8951]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.83.3
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.83.3
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.83.3
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.83.3
• node-agent: eu.gcr.io/gardener-project/gardener/node-agent:v1.83.3
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.83.3
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.83.3
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.83.3

gardenlet-1.83.2

[gardener/gardener]

🐛 Bug Fixes

• [DEVELOPER] A bug causing the crd generation for druid.gardener.cloud group to fail in extensions is now fixed. by @shafeeqes [#8789]

🏃 Others

• [OPERATOR] NewClientForShoot creates a client with a rest mapper using LazyDiscovery. by @acumino [#8781]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.83.2
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.83.2
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.83.2
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.83.2
• node-agent: eu.gcr.io/gardener-project/gardener/node-agent:v1.83.2
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.83.2
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.83.2
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.83.2

gardenlet-1.83.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] machine-controller-manager RBAC in the Shoot cluster does now allow MCM to delete volumeattachments. MCM provider extensions vendoring machine-controller-manager >= v0.50.0 (ref gardener/machine-controller-manager#839) need to delete volumeattachments. by @ialidzhikov [#8774]

Docker Images

admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.83.1
apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.83.1
controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.83.1
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.83.1
node-agent: eu.gcr.io/gardener-project/gardener/node-agent:v1.83.1
operator: eu.gcr.io/gardener-project/gardener/operator:v1.83.1
resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.83.1
scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.83.1

gardenlet-1.82.3

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] machine-controller-manager RBAC in the Shoot cluster does now allow MCM to delete volumeattachments. MCM provider extensions vendoring machine-controller-manager >= v0.50.0 (ref gardener/machine-controller-manager#839) need to delete volumeattachments. by @ialidzhikov [#8774]
• [DEVELOPER] A bug causing the crd generation for druid.gardener.cloud group to fail in extensions is now fixed. by @shafeeqes [#8789]

🏃 Others

• [OPERATOR] NewClientForShoot creates a client with a rest mapper using LazyDiscovery. by @acumino [#8781]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.82.3
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.82.3
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.82.3
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.82.3
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.82.3
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.82.3
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.82.3

gardenlet-1.81.7

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] machine-controller-manager RBAC in the Shoot cluster does now allow MCM to delete volumeattachments. MCM provider extensions vendoring machine-controller-manager >= v0.50.0 (ref gardener/machine-controller-manager#839) need to delete volumeattachments. by @ialidzhikov [#8774]

🏃 Others

• [OPERATOR] NewClientForShoot creates a client with a rest mapper using LazyDiscovery. by @acumino [#8781]

Docker Images

• admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.81.7
• apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.81.7
• controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.81.7
• gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.81.7
• operator: eu.gcr.io/gardener-project/gardener/operator:v1.81.7
• resource-manager: eu.gcr.io/gardener-project/gardener/resource-manager:v1.81.7
• scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.81.7

gardener-metrics-exporter-0.29.0

[gardener/gardener-metrics-exporter]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references.
  by @ccwienk [#92]

🐛 Bug Fixes

• [OPERATOR] Helm chart upgrades no longer fail due to the immutable Deployment.spec.selector field. In order to upgrade to this version, the gardener-metrics-exporter Deployment needs to be deleted first. by @timebertt [#94]

🏃 Others

• [OPERATOR] Upgrade dependencies
  Upgrade golang to 1.22 by @rickardsjp [#96]
• [OPERATOR] Upgrade go to 1.22, update base image to distroless based on Debian 12, and exchange the linter. by @rickardsjp [#97]
• [OPERATOR] Adds: garden_shoot_worker_node_max_total and garden_shoot_worker_node_min_total. Also gives insight into the worker type (for example for OpenStack the Flavor name). by @Sinscerly [#95]

Docker Images

• metrics-exporter: europe-docker.pkg.dev/gardener-project/releases/gardener/metrics-exporter:0.29.0