v1.109.0

[gardener/gardener]

⚠️ Breaking Changes

• [OPERATOR] The HVPA autoscaling option (which is unconditionally disabled since v1.105.0) is removed from the etcd component. Before updating to this version of Gardener, make sure that you upgraded to v1.106.0 and all Seed and Garden resources reconciled with that version. This is required to ensure that the HVPA component and its CRD were properly cleaned up. by @plkokanov [#10800]
• [OPERATOR] The Baseline and HVPA autoscaling modes (which are unconditionally disabled since v1.105.0) are removed for {gardener,kube}-apiserver. Before updating to this version of Gardener, make sure that you upgraded to v1.106.0 and all Seed and Garden resources reconciled with that version. This is required to ensure that the HVPA component and its CRD were properly cleaned up. by @plkokanov [#10796]
• [OPERATOR] The deprecated and unconditionally disabled HVPA and HVPAForShootedSeed feature gates are removed. The GA-ed and unconditionally enabled VPAForETCD and VPAAndHPAForAPIServer features gates are removed. If you have references to the feature gates, clean them up before upgrading to this version of Gardener. by @ialidzhikov [#10853]
• [DEVELOPER] Rename the controlplane exposure webhook (ExposureWebhookName) to seed provider webhook (SeedProviderWebhookName). by @LucaBernstein [#10788]

📰 Noteworthy

• [OPERATOR] The gardener-scheduler was improved to consider reconciliation backoffs. In the past, unassigned shoots were affected by frequent scheduler reconciliations and status updates which potentially strained the scheduler and etcd. by @timuthy [#10821]
• [DEVELOPER] extension library: Provider extensions should rename control plane exposure webhook related packages to seed provider to reflect the naming change on their side (for example rename pkg/webhook/controlplaneexposure to pkg/webhook/seedprovider). by @LucaBernstein [#10788]

✨ New Features

• [OPERATOR] NodeAgentAuthorizer feature gate was introduced. It allows a webhook based authorization of gardener-node-agents with reduced permissions.
  ❗ This feature gate requires changes in machine-controller-manager-provider-*. Please check that you run a supported version before activating it. ❗ by @oliver-goetz [#10781]
• [USER] Allow dual-stack shoots creation. by @axel7born [#10803]
• [USER] shoot spec.kubernetes.clusterAutoscaler: Add support for startupTaints and statusTaints by @dhague [#10858]

🐛 Bug Fixes

• [USER] Fixed a bug where SSH key rotations for Shoots did not properly update the authorized keys on the worker nodes (hence, the new key was unusable until a node restart or rollout). by @tobschli [#10671]
• [USER] On Shoot deletion, Gardener now properly skips certain validation checks that are only relevant for creations or updates of Shoot resources. by @rfranzke [#10902]
• [OPERATOR] Fixed an error in BackupBucket reconciliation by replacing StrategicMergePatch with MergePatch to properly handle runtime.RawExtension fields. by @seshachalam-yv [#10904]

🏃 Others

• [OPERATOR] update alpine to get latest security fixes by @DockToFuture [#10922]
• [OPERATOR] Add support for node-local-dns in dual-stack cluster. by @axel7born [#10891]
• [OPERATOR] Add dual stack support for VPN. by @DockToFuture [#10767]
• [OPERATOR] Fix kubelet CSRs to allow IPv6 addresses to be used by @kron4eg [#10876]
• [OPERATOR] Add dashboard for VPA admission-controller by @voelzmo [#10741]
• [OPERATOR] The HVPA component is removed. Before updating to this version of Gardener, make sure that you upgraded to v1.106.0 and all Seed and Garden resources reconciled with that version. This is required to ensure that the HVPA component and its CRD were properly cleaned up. by @ialidzhikov [#10851]
• [OPERATOR] Added validation for issuerURL in the OIDC configuration to reject URLs containing fragments. by @acumino [#10888]
• [OPERATOR] The gardener/dependency-watchdog image has been updated to v1.3.0. Release Notes by @rishabh-11 [#10930]
• [OPERATOR] Adapt configure-admission.sh for new extension releases with changed value names for Helm charts. by @MartinWeindel [#10877]
• [DEPENDENCY] The registry.k8s.io/cpa/cluster-proportional-autoscaler image has been updated to v1.9.0. by @gardener-ci-robot [#10898]
• [DEPENDENCY] The gardener/autoscaler image has been updated to v1.30.1. Release Notes by @gardener-ci-robot [#10914]
• [DEPENDENCY] The gardener/vpn2 image has been updated to 0.30.0. Release Notes by @gardener-ci-robot [#10872]
• [DEPENDENCY] The registry.k8s.io/coredns/coredns image has been updated to v1.11.4. by @gardener-ci-robot [#10856]
• [DEPENDENCY] The gardener/gardener-discovery-server image has been updated to v0.3.0. Release Notes by @gardener-ci-robot [#10849]
• [DEPENDENCY] The gardener/etcd-druid image has been updated to v0.25.0. Release Notes by @gardener-ci-robot [#10932]
• [DEPENDENCY] The gardener/machine-controller-manager image has been updated to v0.55.0. Release Notes by @rishabh-11 [#10908]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.109.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.109.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.109.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.109.0

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.109.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.109.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.109.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.109.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.109.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.109.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.109.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.109.0

v1.107.3

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] The seed.gardener.cloud/eu-access=true label (in CloudProfiles and Seeds) or seed selector (in Shoots) is no longer removed when the eu-access-only restriction is removed from the .spec.accessRestrictions[] field. Similarly, the support.gardener.cloud/eu-access-for-cluster-{addons,nodes} annotations in Shoots are no longer removed when they are removed from the .spec.accessRestrictions[].options field. by @rfranzke [#10884]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.3
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.3
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.3
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.3

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.3
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.3
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.3
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.3
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.3
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.3
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.3
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.3

v1.108.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] The seed.gardener.cloud/eu-access=true label (in CloudProfiles and Seeds) or seed selector (in Shoots) is no longer removed when the eu-access-only restriction is removed from the .spec.accessRestrictions[] field. Similarly, the support.gardener.cloud/eu-access-for-cluster-{addons,nodes} annotations in Shoots are no longer removed when they are removed from the .spec.accessRestrictions[].options field. by @rfranzke [#10885]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.108.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.108.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.108.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.108.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.108.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.108.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.108.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.108.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.108.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.108.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.108.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.108.1

v1.108.0

[gardener/gardener]

⚠️ Breaking Changes

• [USER] The url annotation in <shoot-name>.monitoring secrets in the project namespace is deprecated and will be removed soon. Please use the plutono-url annotation instead. by @oliver-goetz [#10735]
• [OPERATOR] There is an incompatible change in the Garden (gardens.operator.gardener.cloud) custom resource, which required manual action:
  • Fields .spec.virtualCluster.dns.domains and .spec.runtimeCluster.ingress.domains were changed from type string to object with a field name and an optional field provider, e.g., in JSON format, replace "domains": ["domain1.example.com", "domain2.example.com"] with "domains": [{"name": "domain1.example.com"}, {"name": "domain2.example.com"}].
  • .spec.runtimeCluster.ingress.domains is required now
  • .spec.virtualCluster.dns.domains is required now by @MartinWeindel [#10645]
• [OPERATOR] The optional deployment of cert-management component has been removed. As it was only introduced recently and probably not used, this change should have no impact typically. by @MartinWeindel [#10802]

📰 Noteworthy

• [USER] Allow changing shoot.spec.cloudProfile between CloudProfile and its descendant NamespacedCloudProfiles. by @LucaBernstein [#10811]

✨ New Features

• [USER] Allow for custom machine images in NamespacedCloudProfiles and add the spec.providerConfig field. by @LucaBernstein [#10629]
• [USER] The URLs of Shoot plutono, prometheus and alertmanager are now stored as annotations in <shoot-name>.monitoring secret in the project namespace. by @oliver-goetz [#10735]
• [OPERATOR] Enhance the gardener-operator to deploy DNSRecords and BackupBucket for the virtual garden resource.
  DNSRecords are only deployed if at least one provider is specified at .spec.dns.providers in the Garden resource.
  A BackupBucket is created if the .spec.virtualCluster.etcd.backup section is specified. An existing backup bucket on the infrastructure becomes automatically managed this way. by @MartinWeindel [#10645]
• [DEVELOPER] gardener-apiserver: The ExtensionLabels admission plugin now also sets labels to WorkloadIdentitys. by @dimityrmirchev [#10786]

🐛 Bug Fixes

• [DEVELOPER] gardener-node-agent applies inline files before applying containerd registries now. by @oliver-goetz [#10831]

🏃 Others

• [DEPENDENCY] The registry.k8s.io/kube-state-metrics/kube-state-metrics image has been updated to v2.14.0. by @gardener-ci-robot [#10818]
• [DEPENDENCY] The quay.io/prometheus/prometheus image has been updated to v2.55.1. by @gardener-ci-robot [#10804]
• [DEPENDENCY] The gardener/etcd-druid image has been updated to v0.24.1. Release Notes by @gardener-ci-robot [#10843]
• [OPERATOR] Fixed an issue that that could occur during control plane migration causing the core.gardener.cloud/v1beta1.BackupEntry to be reconciled after it was successfully migrated, but before it was restored. by @plkokanov [#10761]
• [OPERATOR] The deployment of BackupBucket resource in the runtime cluster is skipped if no suitable operator extension is deployed. by @MartinWeindel [#10837]
• [OPERATOR] Following components in gardener logging stack are updated: fluent-operator to v3.2.0, fluent-bit to v3.1.8, gardener/logging to v0.62.0 by @nickytd [#10790]
• [OPERATOR] The following image has been updated:
  • europe-docker.pkg.dev/gardener-project/releases/gardener/autoscaler/vertical-pod-autoscaler/vpa-recommender: 1.2.1 -> 1.2.1-gardener-build.3 (Release notes vpa-1.2.1-gardener-build.2 and Release notes vpa-1.2.1-gardener-build.3) by @ialidzhikov [#10785]
• [DEVELOPER] The hack/sast.sh script accepts two new optional flags:
  • --exclude-dirs: comma-separated list of dirs to exclude
  • --report-dir: where to store the gosec report by @Kostov6 [#10766]
• [DEVELOPER] The provider-local admission is now deployed with the local kind setup. by @LucaBernstein [#10629]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.108.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.108.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.108.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.108.0

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.108.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.108.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.108.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.108.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.108.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.108.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.108.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.108.0

v1.107.2

[gardener/gardener]

🏃 Others

• [DEPENDENCY] The gardener/etcd-druid image has been updated to v0.23.3. Release Notes by @gardener-ci-robot [#10839]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.2
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.2

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.2
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.2
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.2
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.2
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.2
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.2

v1.107.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue where the dashboard's service account lacked permission to create leases in the garden namespace when spec.virtualCluster.gardener.gardenerDashboard.gitHub was configured in the Garden resource. by @petersutter [#10835]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.1

v1.107.0

[gardener/gardener]

⚠️ Breaking Changes

• [DEVELOPER] The unused method WithShootCredentials have been removed from github.com/gardener/gardener/pkg/gardenlet/operation/shoot.Builder. by @vpnachev [#10672]
• [DEVELOPER] In the local development setup, the images are pushed to garden.local.gardener.cloud:5001 instead of localhost:5001 now. Please add 127.0.0.1 garden.local.gardener.cloud to your /etc/hosts. by @rrhubenov [#10257]
• [OPERATOR] Feature gate IPv6SingleStack has been removed. Infrastructure-specific validations will be added in parallel to the corresponding provider extensions. by @ScheererJ [#10716]

📰 Noteworthy

• [OPERATOR] ManagedSeed's .spec.gardenlet.config.seedConfig.spec.ingress.controller.kind field is now defaulted to nginx when
  .spec.gardenlet.config.seedConfig or .spec.gardenlet.config.seedConfig.spec.ingress is nil.
  This allows the creation of ManagedSeed without specifying the .spec.gardenlet field. by @RadaBDimitrova [#10655]
• [OPERATOR] A new required controller was added to gardener-operator. It maintains the RequiredRuntime condition for Extension resources to indicate that the extension deployment is required in the Garden-Runtime cluster. by @timuthy [#10650]
• [OPERATOR] The gardener/controlplane Helm chart has been deprecated and will be removed after v1.135 has been released (around beginning of 2026). We urge you to switch to a gardener-operator-based installation. Read all about it here. by @rfranzke [#10706]
• [DEVELOPER] .spec.gardenlet of ManagedSeed is now a required field. This was already the case from an API perspective, enforced by validation. by @RadaBDimitrova [#10648]
• [USER] The spec.kubernetes.kubeAPIServer.oidcConfig field in the Shoot API is deprecated and will be removed after support for Kubernetes 1.31 is dropped. by @AleksandarSavchev [#10666]

✨ New Features

• [OPERATOR] If an admission webhook which was deployed via Extension resource by gardener-operator is deleted again, its webhook configuration in the virtual-cluster is cleaned up automatically. by @oliver-goetz [#10585]
• [OPERATOR] The CloudProfile, Seed, and Shoot APIs are now allowing to configure access restrictions (e.g., to enable "EU access"-only or similar policies). The legacy approach with the seed.gardener.cloud/eu-access labels is deprecated and will be removed in a future release. Make sure to adapt to the new APIs. Read all about it here. by @rfranzke [#10654]
• [USER] The viewer kubeconfigs for shoot clusters now allow the pods/log subresource. by @rfranzke [#10711]
• [USER] Service Account Managed Issuer can be now enabled for workerless shoot clusters. by @dimityrmirchev [#10689]
• [USER] Structured authorization configuration can now be set by creating a ConfigMap with the AuthorizationConfiguration file set in the config.yaml data key and referencing it (in the Shoot via .spec.kubernetes.kubeAPIServer.structuredAuthorization, in the Garden via .spec.virtualCluster.kubernetes.kubeAPIServer.structuredAuthorization for Kubernetes versions >= v1.30. Read all about it here. by @rfranzke [#10682]
• [USER] Gardener reports the cluster's egress CIDRs in Shoot.status.networking.egressCIDRs if supported by the used provider extension. by @timebertt [#10240]

🐛 Bug Fixes

• [OPERATOR] Fix Prometheus rule shoot-kube-proxy. by @LucaBernstein [#10757]
• [OPERATOR] The TopologySpreadConstraints calculation was improved for StatefulSets to always use a stable label selector. This led to issues in the past when shoots were upgraded to HA. by @timuthy [#10750]
• [OPERATOR] valitail version is now pinned to v2.2.15 (depends on glibc 2.32). by @ialidzhikov [#10776]

🏃 Others

• [DEPENDENCY] The credativ/plutono image has been updated to v7.5.34. Release Notes by @gardener-ci-robot [#10732]
• [DEPENDENCY] The gardener/etcd-druid image has been updated to v0.23.2. Release Notes by @gardener-ci-robot [#10747]
• [DEPENDENCY] The gardener/cert-management image has been updated to v0.16.0. Release Notes by @gardener-ci-robot [#10684]
• [DEPENDENCY] The credativ/vali image has been updated to v2.2.19. Release Notes by @gardener-ci-robot [#10680]
• [DEPENDENCY] The gcr.io/istio-release/pilot image has been updated to 1.23.3. by @gardener-ci-robot [#10725]
• [DEPENDENCY] The quay.io/prometheus/prometheus image has been updated to v2.55.0. by @gardener-ci-robot [#10697]
• [DEPENDENCY] The quay.io/prometheus-operator/prometheus-config-reloader image has been updated to v0.77.2. by @gardener-ci-robot [#10692]
• [DEPENDENCY] The envoyproxy/envoy image has been updated to v1.32.1. Release Notes by @gardener-ci-robot [#10755]
• [DEPENDENCY] The gardener/dashboard image has been updated to 1.78.0. Release Notes by @gardener-ci-robot [#10731]
• [OPERATOR] The admission automatically adds the provider.extensions.gardener.cloud label to NamespacedCloudProfiles. by @LucaBernstein [#10742]
• [OPERATOR] Add dual-stack support for coredns. by @DockToFuture [#10733]
• [OPERATOR] Allow extensions to be scraped in garden runtime cluster even outside garden namespace by @ScheererJ [#10720]
• [OPERATOR] Add label selector to ShootResourceReservation plugin to control for which Shoots the ShootResourceReservation Plugin sets kubeReserved according to the GKE formula when useGKEFormula: true is set. by @voelzmo [#10492]
• [OPERATOR] Increase the readiness probe timeout for the gardener-metrics-exporter from 1s to 10s. by @vicwicker [#10771]
• [OPERATOR] The gardener/etcd-druid image has been updated to v0.23.1. Release Notes v0.23.1, Release Notes v0.23.0 by @shreyas-s-rao [#10526]
• [OPERATOR] The autoscaler/cluster-autoscaler image has been updated to v1.29.2 (for Kubernetes v1.29). Release Notes by @rishabh-11 [#10700]
• [OPERATOR] Gardener API Server feature gate ShootCredentialsBinding has been promoted to beta and is enabled by default. by @dimityrmirchev [#10662]
• [DEVELOPER] Add Make target make operator-seed-dev for local development of the gardenlet in the operator setup. by @marc1404 [#10710]
• [DEVELOPER] Fix /etc/hosts configuration in the remote local setup by @vicwicker [#10744]
• [DEVELOPER] The base image of the gardener-extension-provider-local-node image is now updated to kindest/node@v1.31.1. by @ialidzhikov [#10688]
• [DEVELOPER] local setup: The kind cluster's node image is now updated to kindest/node@v1.31.1. by @ialidzhikov [#10723]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.107.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.107.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.107.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.107.0

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.107.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.107.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.107.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.107.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.107.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.107.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.107.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.107.0

v1.106.2

[gardener/gardener]

🏃 Others

• [OPERATOR] Increase the readiness probe timeout for the gardener-metrics-exporter from 1s to 10s. by @vicwicker [#10769]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.106.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.106.2
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.106.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.106.2

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.106.2
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.106.2
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.106.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.106.2
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.106.2
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.106.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.106.2
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.106.2

v1.105.3

[gardener/gardener]

🏃 Others

• [OPERATOR] Increase the readiness probe timeout for the gardener-metrics-exporter from 1s to 10s. by @vicwicker [#10770]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.105.3
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.105.3
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.105.3
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.105.3

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.105.3
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.105.3
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.105.3
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.105.3
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.105.3
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.105.3
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.105.3
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.105.3

v1.106.1

[gardener/gardener]

🐛 Bug Fixes

• [OPERATOR] The gardener-resource-manager does not mark Deployments as progressing when there are still completed Pods in the system. by @timuthy [#10727]

🏃 Others

• [OPERATOR] IPv6 support for node-local-dns. by @DockToFuture [#10707]
• [OPERATOR] Fixed an issue that would cause the entry for the machine-state in the ShootState to be overwritten with nil data during control plane migration, if the migrate phase errored and was retried after the MachineDeployment, MachineSet and Machine objects were deleted, which would result in the Shoot's nodes to be recreated during Control Plane Migration. by @plkokanov [#10695]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.106.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.106.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.106.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.106.1

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.106.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.106.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.106.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.106.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.106.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.106.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.106.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.106.1