Skip to content

v1.146.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jul 15:36
v1.146.0
3fc1d0b

[github.com/gardener/gardener:v1.146.0]

⚠️ Breaking Changes

  • [DEVELOPER] The WorkerPoolHashV1 function used for worker pool hash calculation is dropped now that NewWorkerPoolHash is removed in an earlier gardener version. by @shafeeqes [#14918]

📰 Noteworthy

  • [OPERATOR] The CloudProfileCapabilities feature gate has been promoted to Beta and is now enabled by default. by @Roncossek [#15043]
  • [DEPENDENCY] Dependencies from hack/tools.mk are built using go tool. Existing entries to _ "github.com/gardener/gardener/hack", e.g., in hack/tools.go files, should be removed. by @LucaBernstein [#14861]

✨ New Features

  • [OPERATOR] In shoots using HA control planes, a new watchdog component will observe the VPN connection and trigger a reconnect of vpn-shoot clients if necessary. by @domdom82 [#15054]
  • [OPERATOR] A custom domain and TLS secret for the gardener-dashboard can now be configured via .spec.virtualCluster.gardener.gardenerDashboard.{domain,tlsSecretName} in the Garden resource. The existing .spec.virtualCluster.gardener.gardenerDashboard.ingress field is deprecated and will be removed in a future version. by @timebertt [#15015]

🐛 Bug Fixes

  • [OPERATOR] The admission-controller's seed-restriction webhook now performs additional authorization checks when gardenlets request bootstrap tokens. by @rfranzke [#15105]
  • [OPERATOR] Fixed a bug in the shoot-state controller where periodic ShootState backups would fail with unable to find api field in struct RawExtension for the json field "data" when a persisted secret's data had been modified. by @plkokanov [#15169]
  • [OPERATOR] The helper script hack/usage/rebootstrap-gardenlet.sh was fixed to handle cases where the bootstrap token content is automatically generated. by @timuthy [#15114]
  • [OPERATOR] Replacing a CloudProfile with its legacy form by removing MachineCapabilities is now allowed when no NamespacedCloudProfile references a capability other than architecture. Errors reported when capability removal is rejected are now aggregated to one message per capability per NamespacedCloudProfile. by @Roncossek [#15084]
  • [OPERATOR] Fixed an issue where no logs were ingested in VictoriaLogs when OpenTelemetryCollector & VictoriaLogsBackend feature flags were enabled. To facilitate the fix, the OpenTelemetryCollector feature flag is now also defined on the gardener-operator and enabled by default. by @iypetrov [#14950]
  • [OPERATOR] The gardenadm version output for binaries attached to GitHub releases has been fixed. Earlier, the -dev version of the corresponding release was printed. by @timuthy [#15127]
  • [USER] Vali datasource is remove from Plutono, when RemoveVali feature gate is set to true. by @iypetrov [#15097]
  • [USER] Validate shoot network overlap during admission and not during scheduling by @hown3d [#15025]
  • [USER] Fix an edge case where node status was reported as "too many worker nodes" while the cluster was still scaling up. by @matthias-horne [#14817]
  • [DEVELOPER] A bug has been fixed where the structured authentication configuration validation did not consider the service account issuer from shoot.status.advertisedAddresses as a disallowed issuer, allowing configurations that would cause the kube-apiserver to enter CrashLoopBackOff. by @AleksandarSavchev [#14977]
  • [DEVELOPER] Revert gind-machine containerd configuration change that broke make gind-up on Mac by setting an AppArmor profile in cri-base.json on kernels without AppArmor support. by @axel7born [#15133]
  • [DEVELOPER] provider-local: configure machine node containerd to run nested containers with seccomp and AppArmor unconfined, fixing unkillable processes in deeply nested CI environments by @axel7born [#15082]

🏃 Others

  • [OPERATOR] VirtualServices with basic authentication are now labeled with reference.gardener.cloud/basic-auth-server-name to reference the istio-basic-auth-server that configures them. by @vicwicker [#15083]
  • [OPERATOR] A new optional shoot constraint HasIgnoredManagedResources has been introduced. It surfaces in .status.constraints when one or more ManagedResources in the shoot's control plane namespace have been annotated with resources.gardener.cloud/ignore=true, listing their names so operators are immediately aware of resources whose reconciliation has been disabled. by @adenitiu [#15023]
  • [OPERATOR] The shoot deletion flow was changed to deploy the control-plane after the kube-apiserver and gardener-resource-manager. In the past, a cyclic dependency between the controlplane reconciliation and the gardener-resource-manager potentially blocked the shoot deletion. by @timuthy [#15066]
  • [OPERATOR] The VPAInPlaceUpdates feature gate has graduated to GA and cannot be disabled anymore. The feature gate can be removed from your gardenlet and gardener-operator component configurations. by @ialidzhikov [#15098]
  • [OPERATOR] The gardener-operator now grants the terminal-controller-manager read access to Shoot resources. by @petersutter [#15137]
  • [DEVELOPER] Support cilium self hosted shoots in local setup by @hown3d [#15005]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • gcr.io/istio-release/pilot from 1.29.4 to 1.29.5.
    • gcr.io/istio-release/proxyv2 from 1.29.4 to 1.29.5.
    • istio.io/api from v1.29.4 to v1.29.5. by @gardener-ci-robot [#15134]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:

application/spdx+json

  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:2cb68a7625fe2123f96d76578a300281679f7bd9447e209dff0d552966644c13
  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:3cd455c4ae775c89e99fd6afcb93238e1237427b5f902c2a09d2ee4233acd3c4
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:6c2ea8ee37bff6c5a1c26e24ef1bbca4b153e3a3983d0e5993a5fad0c4fdc39e
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:9f995cf5d8fbf26ee5d2955d90f08d9236bde4bcf4c2c5b3fc2d0dc4940e68ac
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:10f9ea3e0885e1d90a1694f7f924281f8a1ea153267dcf8644b248dc45d4f10f
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:f68a5a4de2a56852dc0011e73d55d186643a48a4932f369ad72091a33d53664a
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:106511e0bca06bfe76682c32001e71ce335ec99f4c3a75e357cf398ba3855299
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:92aa239c7f0a0dd29991bc4717c211b453c8e4c15ef53116dd8bbfdfe0726b5f
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:c5a0dec4891f2e544ea802dfd81f5ff35c770e60ec40f2f9ca9fe86a932ab2c6
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:ca8e700600902ffb22bf0334f0505e14ae1bcf907e7dbecc499ef3db8376d128
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:659965632785e830ba86fdfa0abe578b169fc2835a3f980f20e199c20ff230ec
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:e18115855e2a9da671d9170ceb8c9342ef2ab893d18465c1af6c8157a5a16107
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:0d4e5815ed1046d525d73000e6e553fa1070e40a2da4c2df038839948d7412b3
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:ad454ed944dc5a055ed4234ba7fae9024448c2990358864c8b8072d2373ccf3d
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:1e47df395291c9e8787ba722d96eb8b2df2bc948eba319ecc589371eb9cac3bc
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:9ed62fb1aaf0bbe87f4198625f5342b13f82cf88d309f6c299823e10e1737a6c
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:02c88ac7139e2312dfb708172092f9628ff80d45c2f2751b49e7ca50fddc0da4
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:3059fabecb8fcc7dd1b0ab98890477c4f251de4059aa835bc438ff52cf6f9215

application/vnd.cyclonedx+json

  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:2987c88f23cd8e894d32833f8a22e69772fa984cb92886898563168058d0c772
  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:dcff802c141c2742578cf7d705d16a14a0786cc29c939cfb22296d4085d1e469
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:8692ff9611ac86a0f365605a4f014453dd1712f5682acc069bd76a01fdeca36d
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:daea7014043530ec7ef6dff81c2f8db148a0cf515e961c16307faa41f50d39b6
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:a3f260ccd444d6242732f86183e634e2c57411bf92df97269133e2ea913fa31a
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:bbac7653619dc9a2deee862bd2b92c3da8c12193c3f37973a3a1ff9e14e425f4
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:5da12031b2b48d344fc79aea4c50e2ce4aab4c199801f389c211e06d47d74144
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:726cd6fb8e0cad13357acd91635a874fe54ffdb8ee2d270cd0ac02e4095cdb45
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:6f36b5359ab608ad6a226a70650d4e334ebba655159797d001279a6efa044c89
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:c7e1d0e72c6c6026f39915ba53a95f0149462032d595ee1f98c4156de6ae1586
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:2bdb44b6fb9124a5f6c54ed47ad4a14b9de8e07b8bd2df10f34fd729c2735320
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:eb74f04d00630bdb21e7ccfc961208b21e2e12968b9054eaf29e7ca97c501e56
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:89d702b16ad5bcf18b3401e8d219791d8cacb238d0a98761ddbc6b1e80c2aa62
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:8b723844fa666a18007e6ff01649e84d550062fcdc52aaa112e974ecf6fa7113
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:55dbda9439587545baf522f3850802a1b993d0d29a0aa9353743f4dc069c7a68
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:c383b36bad49e3e9f17b7f56f84b3c645e931b79e012eccc9a58c87618091cf6
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:d5ad3e94386e008a5ec21d78645596f5204f9eb5f754c3a4038968dbcfa32eba
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:dbe92ef718052023ae54565cf8bfb3498997f121cc7ef58fc9d1f585d5327394

Helm Charts

  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.146.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.146.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.146.0

Container (OCI) Images

  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.146.0
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.146.0
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.146.0
  • gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.146.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.146.0
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.146.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.146.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.146.0
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.146.0

Contributors

domdom82, vicwicker, and 16 other contributors
Assets 9
Loading