shoot-rsyslog-relp-0.5.2

[gardener/gardener-extension-shoot-rsyslog-relp]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue that caused the -a exit,always -F arch=b64 -S mount_setattr -F auid!=-1 -F key=privileged_special audit rule to not get correctly applied. by @plkokanov [#151]

Docker Images

• gardener-extension-shoot-rsyslog-relp-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp-admission:v0.5.2
• gardener-extension-shoot-rsyslog-relp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp:v0.5.2

shoot-rsyslog-relp-0.5.1

[gardener/gardener-extension-shoot-rsyslog-relp]

🏃 Others

• [OPERATOR] The memory of the rsyslog.service systemd unit is now limited via a drop-in config. The following configurations are used: MemoryMin=15M, MemoryHigh=150M, MemoryMax=300M, MemorySwapMax=0 by @plkokanov [#139]

Docker Images

• gardener-extension-shoot-rsyslog-relp-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp-admission:v0.5.1
• gardener-extension-shoot-rsyslog-relp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp:v0.5.1

shoot-rsyslog-relp-0.5.0

[gardener/gardener-extension-shoot-rsyslog-relp]

⚠️ Breaking Changes

• [USER] When changing referenced TLS secret in shoot.spec.resources[] the user should provide only immutable secret by @Kostov6 [#76]

🐛 Bug Fixes

• [OPERATOR] Fixed an issue that caused audit logs to be duplicated in journald if the system-journald-audit socket was enabled. Now if the system-journald-audit socket exists on the node, it is disabled and stopped when this extension is used. by @plkokanov [#104]
• [USER] Rsyslog processes logs on nodes with os suse-chost 15 SP3 by @Kostov6 [#123]

🏃 Others

• [OPERATOR] Errors that can occur when loading audit rules are now ignored and reported as warnings. This allows all correct audit rules to be loaded. by @plkokanov [#128]
• [OPERATOR] The rsyslog-relp action which is used to forward logs to a RELP server now uses a separate in-memory queue of 100000 messages. Additionally, it also uses a disk queue of max 48 MiB which is used to store messages after the in-memory queue is exhausted or to save the current messages in the in-memory queue when the rsyslog service is restarted. by @plkokanov [#115]
• [OPERATOR] This extension is now using the new way of providing monitoring configuration (ref GEP-19) in case a shoot cluster's Prometheus has been migrated to management via prometheus-operator. by @rfranzke [#99]

Docker Images

• gardener-extension-shoot-rsyslog-relp-admission: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp-admission:v0.5.0
• gardener-extension-shoot-rsyslog-relp: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-rsyslog-relp:v0.5.0

shoot-oidc-service-0.27.0

[gardener/gardener-extension-shoot-oidc-service]

✨ New Features

• [OPERATOR] The extension mutating webhook now uses object selector to reduce the number of calls. by @dimityrmirchev [#224]
• [OPERATOR] Helm charts of extension and admission controller are published as OCI artifacts now. by @oliver-goetz [#222]

🏃 Others

• [DEPENDENCY] The extension is now built using go version 1.22.5. by @dimityrmirchev [#220]

[gardener/oidc-webhook-authenticator]

🏃 Others

• [DEVELOPER] The following dependencies have been updated:
  • github.com/coreos/go-oidc/v3 v3.1.0 -> v3.10.0
  • golang.org/x/time v0.3.0 -> v0.5.0
  • k8s.io/* v0.27.9 -> v0.30.1
  • sigs.k8s.io/controller-runtime v0.15.3 -> v0.18.4
  • golang.org/x/crypto v0.21.0 -> v0.24.0
  • golang.org/x/net v0.23.0 -> v0.26.0 by @vpnachev [gardener/oidc-webhook-authenticator#157]
• [DEPENDENCY] OWA is now built using go version 1.22.5. by @dimityrmirchev [gardener/oidc-webhook-authenticator#158]

Helm Charts

• shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-oidc-service:v0.27.0

Docker Images

• gardener-extension-shoot-oidc-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-oidc-service:v0.27.0

shoot-networking-problemdetector-0.24.0

[gardener/network-problem-detector]

🏃 Others

• [OPERATOR] Bumps golang from 1.22.3 to 1.22.4. by @dependabot[bot] [gardener/network-problem-detector#67]
• [OPERATOR] Bumps golang from 1.22.4 to 1.22.5. by @dependabot[bot] [gardener/network-problem-detector#69]

[gardener/gardener-extension-shoot-networking-problemdetector]

🏃 Others

• [OPERATOR] Bumps github.com/gardener/gardener from 1.98.0 to 1.99.0. by @dependabot[bot] [#162]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.96.1 to 1.97.0. by @dependabot[bot] [#155]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.95.0 to 1.96.1. by @dependabot[bot] [#151]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.97.0 to 1.98.0. by @dependabot[bot] [#158]

Docker Images

• gardener-extension-shoot-networking-problemdetector: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-problemdetector:v0.24.0

shoot-networking-filter-0.19.0

[gardener/gardener-extension-shoot-networking-filter]

🏃 Others

• [OPERATOR] Bumps golang from 1.22.1 to 1.22.2. by @dependabot[bot] [#132]
• [OPERATOR] Bumps golang from 1.22.3 to 1.22.4. by @dependabot[bot] [#146]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.97.1 to 1.98.0. by @dependabot[bot] [#153]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.96.1 to 1.97.0. by @dependabot[bot] [#150]
• [OPERATOR] Bumps golang from 1.22.2 to 1.22.3. by @dependabot[bot] [#139]
• [OPERATOR] Bumps golang from 1.22.4 to 1.22.5. by @dependabot[bot] [#156]
• [OPERATOR] The resources.requests.cpu and resources.requests.memory of the egress-filter-applier container have been reduced to 5m and 20Mi, respectively. by @plkokanov [#160]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.93.0 to 1.94.0. by @dependabot[bot] [#137]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.98.0 to 1.99.0. by @dependabot[bot] [#158]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.94.0 to 1.95.0. by @dependabot[bot] [#140]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.92.0 to 1.93.0. by @dependabot[bot] [#135]
• [OPERATOR] Bumps github.com/gardener/gardener from 1.95.0 to 1.96.1. by @dependabot[bot] [#145]
• [OPERATOR] Add OCM-Component-Descriptor-Labels required for ImageVector-Generation. by @ccwienk [#154]

[gardener/egress-filter-refresher]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references.
  by @ccwienk [gardener/egress-filter-refresher#25]

Docker Images

• gardener-extension-shoot-networking-filter: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-networking-filter:v0.19.0
• gardener-runtime-networking-filter: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/runtime-networking-filter:v0.19.0

shoot-flux-0.7.0

What's Changed

• Add ability to add args/env to deployment by @maboehm in stackitcloud/gardener-extension-shoot-flux#93

Full Changelog: stackitcloud/gardener-extension-shoot-flux@v0.6.1...v0.7.0

shoot-flux-0.6.1

What's Changed

• 🐛 Fix reconcile order for new Shoots by @maboehm in stackitcloud/gardener-extension-shoot-flux#84

Full Changelog: stackitcloud/gardener-extension-shoot-flux@v0.6.0...v0.6.1

shoot-flux-0.6.0

What's Changed

• Bump Gardener, Fix Kustomization, Set AfterWorker by @maboehm in stackitcloud/gardener-extension-shoot-flux#69
• Allow code generation to run outside of GOPATH by @afritzler in stackitcloud/gardener-extension-shoot-flux#71
• 🤖 Update module github.com/ironcore-dev/vgopath to v0.1.5 by @renovate in stackitcloud/gardener-extension-shoot-flux#72
• 🤖 Update module sigs.k8s.io/controller-runtime to v0.17.5 by @renovate in stackitcloud/gardener-extension-shoot-flux#68
• 📄 Reporting Security Issues by @robinschneider in stackitcloud/gardener-extension-shoot-flux#78
• 🤖 Update module github.com/onsi/ginkgo/v2 to v2.19.0 by @renovate in stackitcloud/gardener-extension-shoot-flux#75
• 🤖 Update module github.com/go-logr/logr to v1.4.2 by @renovate in stackitcloud/gardener-extension-shoot-flux#74
• 🤖 Update module github.com/spf13/cobra to v1.8.1 by @renovate in stackitcloud/gardener-extension-shoot-flux#77
• 🤖 Update module golang.org/x/tools to v0.23.0 by @renovate in stackitcloud/gardener-extension-shoot-flux#76
• 🤖 Update k8s.io/utils digest to 18e509b by @renovate in stackitcloud/gardener-extension-shoot-flux#79
• 🤖 Update k8s and gardener packages (patch) by @renovate in stackitcloud/gardener-extension-shoot-flux#73
• 🤖 Update fluxcd (minor) by @renovate in stackitcloud/gardener-extension-shoot-flux#62
• 🤖 Update module github.com/onsi/gomega to v1.34.1 by @renovate in stackitcloud/gardener-extension-shoot-flux#82
• 🤖 Update module github.com/onsi/ginkgo/v2 to v2.19.1 by @renovate in stackitcloud/gardener-extension-shoot-flux#83
• 🤖 Update k8s and gardener packages (patch) by @renovate in stackitcloud/gardener-extension-shoot-flux#80
• Add option to sync additional Secrets by @maboehm in stackitcloud/gardener-extension-shoot-flux#81

New Contributors

• @afritzler made their first contribution in stackitcloud/gardener-extension-shoot-flux#71

Full Changelog: stackitcloud/gardener-extension-shoot-flux@v0.5.0...v0.6.0

shoot-dns-service-1.52.1

[gardener/external-dns-management]

🐛 Bug Fixes

• [OPERATOR] Fix NPE if DNSEntry contains invalid domain name by @MartinWeindel [gardener/external-dns-management@7a7b7d6]

Helm Charts

• admission-shoot-dns-service-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-application:v1.52.1
• admission-shoot-dns-service-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-shoot-dns-service-runtime:v1.52.1
• shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-dns-service:v1.52.1

Docker Images

• gardener-extension-admission-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-shoot-dns-service:v1.52.1
• gardener-extension-shoot-dns-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-dns-service:v1.52.1