fix(deps): update module github.com/gardener/gardener/pkg/apis to v1.149.0 - #250
Open
renovate[bot] wants to merge 1 commit into
Open
fix(deps): update module github.com/gardener/gardener/pkg/apis to v1.149.0#250renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/github.com-gardener-gardener-pkg-apis-1.x
branch
from
August 16, 2026 14:40
26d266c to
c1922c2
Compare
renovate
Bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.148.2→v1.149.0Release Notes
gardener/gardener (github.com/gardener/gardener/pkg/apis)
v1.149.0Compare Source
[github.com/gardener/gardener:v1.149.0]
[DEPENDENCY]Thegithub.com/gardener/gardener/pkg/utils/imagevectorfunctionsRead,ReadFile, andWithEnvOverridenow return an additional*CABundlevalue. Additionally, theWithEnvOverridefunction accepts a newcaBundle *CABundleparameter. Extensions using these functions must update on their side accordingly. by @shafeeqes [#15150]📰 Noteworthy
[OPERATOR]The initial PVC size forVictoriaLogsis now reduced to5Gifor Seed and Shoot control plane instances when the PVC autoscaler is enabled. by @RadaBDimitrova [#15385][OPERATOR]TheDisableNginxIngressInGardenandDisableNginxIngressInSeedfeature gates have been promoted to beta. by @ScheererJ [#15325]✨ New Features
[OPERATOR]HSTS (Strict-Transport-Security: max-age=31536000) response header is now injected for all Istio-managed ingress endpoints (kube-apiserver, Gardener Dashboard, Plutono, Prometheus, Alertmanager, Vali, OTel Collector) via dedicated Envoy filters. by @marc1404 [#15377][OPERATOR]Operators can now configure a custom registry CA bundle by adding acaBundle.inlinefield (PEM-encoded) to the gardenlet image vector overwrite file (IMAGEVECTOR_OVERWRITE). Gardenlet distributes this CA to the worker nodes of all its shoots, enabling containerd to trust private registries. The samecaBundlefield is supported inIMAGEVECTOR_OVERWRITE_CHARTSfor both gardenlet and gardener-operator to secure OCI Helm chart pulls from private registries. See image vector documentation for details. by @shafeeqes [#15150][OPERATOR]OpenTelemetry Collectorinstances in theSeedandGardenclusters can now scale vertically by usingVPA. by @TeodorDichev [#15319][OPERATOR]Encrypt traffic between theIstio ingress gatewayand theOpenTelemetry collectorby enabling TLS on thekube-rbac-proxysidecars (both theValiandOTLPreceiver endpoints) and configuring Istio'sDestinationRuleto use TLS termination with CA verification. by @TeodorDichev [#15394][OPERATOR]A new--backup-data-pathflag is introduced togardenadm init. It loads the etcd snapshot data from a local path on the host into the bootstrap etcd. The flag will be used in future self-hosted Shoot cluster disaster recovery scenarios. by @Kostov6 [#14993][USER]Users can now configure the minimum TLS version for the kube-apiserver in the Shoot spec. Supported values:VersionTLS12,VersionTLS13. by @mahmud2011 [#15356][USER]The kubelet configuration in theShootAPI (.spec.kubernetes.kubeletand.spec.provider.workers[].kubernetes.kubelet) now supports the fieldsimagePullCredentialsVerificationPolicyandpreloadedImagesVerificationAllowlistto control credential verification for container images already present on a Node. Both of the newly introduced fields can only be specified for Shoot clusters with Kubernetes 1.35+. by @dimitar-kostadinov [#15327]🐛 Bug Fixes
[OPERATOR]The logrotate service now correctly enforces 14-day log retention:notifemptyhas been removed so pruning always runs, and afindcommand cleans up kubelet size-rotated log files (*.log.*) that logrotate cannot prune itself. by @marc1404 [#15384][OPERATOR]The logrotate systemd service now restarts automatically on failure, preventing missed log rotations after transient errors. by @marc1404 [#15376][OPERATOR]Missingget,list,watchpermissions forinternalsecretsandshootstateshave been granted togardener-admission-controller. by @oliver-goetz [#15478][OPERATOR]TheIstioTLSTerminationfeature gate can now be disabled safely, fixing the issues reported in gardener/gardener#15103. by @hammadzf [#15317][OPERATOR]A race condition during the global observability ingress secret rotation has been fixed. by @vicwicker [#15437][OPERATOR]FixedMaintenanceTimeWindowvalidation pattern to correctly allow negative UTC offsets (e.g.-0700) and all positive offsets up to+1400. The pattern now accurately reflects the valid UTC offset range (-12:00 to +14:00). Affects CRD-based consumers such as theGardenoperator resource and downstream projects embeddingShootTemplate. by @marc1404 [#15388][USER]Worker nodes no longer risk joining the cluster with a stale CA duringRotationPreparing— the gardenlet now waits until allkube-root-ca.crtConfigMaps contain the new CA bundle before rolling worker pools. by @rfranzke [#15430][USER]Fixed a bug where thedeployInfrastructuretask annotation on aShootwas incorrectly removed when theShootspec was changed by an external actor while the infrastructure was being reconciled, causing the Infrastructure extension to never pick up the new generation. by @rfranzke [#15456][USER]A bug preventing Shoot creation when the etcd-druid'sUpgradeEtcdVersionfeature gate is disabled (not explicitly enabled) has been fixed. by @acumino [#15445]🏃 Others
[OPERATOR]HTTP keep-alive inistio-ingressgatewayis now disabled when the CPU utilization of its Nodes exceeds 85%. by @oliver-goetz [#15417][OPERATOR]Remove deprecatedVM_ENABLEDPROMETHEUSCONVERTER_*environment variables from thevictoria_operatorand migrate to the--controller.disableReconcileForflag, as required by VictoriaMetrics operator v0.69+. by @TeodorDichev [#15391][OPERATOR]Add plutono dashboard forMutatingAdmissionPoliciesandValidatingAdmissionPoliciesby @voelzmo [#15323][OPERATOR]VPN watchdog threshold has been reduced to 8 (from 10) to improve reaction time under bad network conditions. by @domdom82 [#15396][DEVELOPER]VictoriaLogs ServiceMonitor excludes any additional services managed by the operator, avoiding duplicate metrics. by @nickytd [#15398][DEVELOPER]Replaced deprecatedhubCLI withghinhack/cherry-pick-pull.shand improved patch detection to exit early when a patch is already applied to the target branch. by @DobromirNPeev [#15433][DEPENDENCY]The following dependencies have been updated:perses/persesfromv0.53.1tov0.54.0. Release Notes by @gardener-ci-robot [#15392][DEPENDENCY]The following dependencies have been updated:gardener/vpn2from0.51.0to0.52.0. Release Notes by @gardener-ci-robot [#15429][DEPENDENCY]The following dependencies have been updated:quay.io/kiwigrid/k8s-sidecarfrom2.10.0to2.10.1. by @gardener-ci-robot [#15427][DEPENDENCY]The following dependencies have been updated:gardener/terminal-controller-managerfromv0.37.0tov0.38.0. Release Notesgithub.com/gardener/terminal-controller-managerfromv0.37.0tov0.38.0. by @gardener-ci-robot [#15414]application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:ca07aba22e1771bb2de08251be6f461b0232c24775e60f850b437d995f7a29aceurope-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:ccc36531d18d0ef7c95a49c2645ac00363bda379fbf6517a932209b2037056dceurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:8e98927e33aa247529eea3d1db2e4568b4cc8bf6a1f4938ef4cb25fc61663d42europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b504036216246624844d555a2e7cac98ac2f77a08c26a6446245b38deff1558aeurope-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:a4555c6e5196a55317fd3619e774c4b953342416c564864eda5c3bb282323d47europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:dba2be75f8f9cff6e71e61e89328c0565de7fc8f7c46717fce1bf87f794c3c64europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:271dc6c18cb938d6aa14f7675b9efb799343caeb0e53318d0e2f686748f9b499europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:f0b4464fc017279671045596047ed28838b902bce0f6333c6a017650cfd1ec9feurope-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:019e35db818fb653963b1323d2f00989a40dfb192eb3ebc480bc3e7c6d3c6a86europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:7aacf6ba7b26ad7217243c9be38b06ee5b4a3cb59ad1af8c7fc240699c734ae1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:a2c87e56e00888fbbb5cc5ccb5d9ca7ed843aa9092679cace144cc9ba4c3aff2europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:fe9acca52c6f61de4c6470d0f17b7af3baab6f24dcf8ef413e807a512113dc81europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:2689106dbaec31470f33359774973546af862ce4aba13128c7ae31c72c77fcb7europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:274a3075be6cf73248cd5a05aac6cd79de4f79df38a7741241464c519cf42681europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:53a0ba8c7310c565b8b03b0d3173396a9d099e30efb6d05d4db0e7d1f6f0cf0feurope-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:d089eeacc90fb21b3cb7ee29cbb872175fb4ce711b105de83bf7ad36ef2d4d77europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:8186952d9e6b0b6cec00c1f168d368fe4089172cd9e3c24651fa1a9be309753deurope-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:bcac5c634a89a6e117a23bb3eac68975ce865e1dbd0c007a754ab5a4c92032eaapplication/vnd.cyclonedx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:b36964128fba2988bdd211c9e266c68164b457ebb56332f9b0bdef148d283ffbeurope-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:effe0a6a5f55a984a7c14a68bbf93874504cfb6870809ed5eb2d0e587f030540europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:78bb8a9b09f71e55313f3a39be79a08aaf0f9d4eff1664cbe68d701dc20d4062europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:c2c43fedeb23f8f81b803ea9db0fd225cb6749d0ea44209fd93292c7fa51b2e9europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:3d1a422bed49111fdd8be94a3f9a1a836a4fb84a86d1ddc68e25bb8d1416b95ceurope-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:a2e83e2b7b5e37e17ffb85da40f00389e27dfa2a2f7a6f1c366c8d857ba110e7europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:1efbdfd1111ec71bb95232b5a9bf666131d742334208970e700841e358f60b39europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:ecf7efd597647368f3dab4f7d61d7b21a6394e38507d889daebd86c9131ea2b8europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:cd5e0faf396c98238c1100c5c469784fa47982e159a5606f220d747d59e61923europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:db03987ba6dee653b9f6b41d3f94aa0cfdff3610528b07b0f1c8b81602075010europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:32b0763e66eb53ab0202971ad7676481fee5c7a2fa3625d121f9c935e64d117beurope-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:862f374f765d04d17ac5bd805a73df45a462000f3bd67cc54ea629e535dbd1a2europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:33fffdadb410ecde8908d66ac6465aac228298299741be73020e36c0a3dc5f61europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:a782d583b9a3ca324139545aad72d7badff1cfc3c2b400928eb2ddfb8239fb16europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:01b6c183223786746a426202dabd985ae330a822e42e4d7837939fa226b5205deurope-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:5877981b24936e45ee434937dd781b667eac0921017dabc6f6916eb414afd60beurope-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:211450ca9606478c7fbe566a1332f2af8e33b2ae3867215c7299a7e6b3d1581feurope-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:98109453e411761283416b5fb435ce934d13b81e147809b6e55c43895726873eHelm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.149.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.149.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.149.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.149.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.149.0v1.148.3Compare Source
[github.com/gardener/gardener:v1.148.3]
🐛 Bug Fixes
[USER]Fixed a bug where thedeployInfrastructuretask annotation on aShootwas incorrectly removed when theShootspec was changed by an external actor while the infrastructure was being reconciled, causing the Infrastructure extension to never pick up the new generation. by @rfranzke [#15475]application/spdx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:170f3a1970b5e6ef4b046eafe0c3faa859fda226c5b6e6cd52e1aaaad910d828europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:25fa9a24f149dcf8df499b20a5439066948d12258bb508621f24a02e19f7a4e2europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:ca534d2bcd99ae25b25d70f517f5a5b085b05baa39734feb56e4267f5d6b5442europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:f97d90018a1bd30787820d02ae5d97627135e06b7a03ab8140a0cf16ba0b1feceurope-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:58419ddb2c9b335bfb0f5dfce9ea2407ca03121fece7d453be5efb56ee6b09eaeurope-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:957c698e02657817bf197201fb4119186bd1b8f146829cda9978d120f8557d15europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:82e96a085bb9eebbf8692f5cf208f08b29fd0cb068895561c6fdefaca809c481europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:f132e52dee80248ec9df63a1341c9ca30f81b6ced1ae000311dd4fd40f1749e1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:7a32c8cfd96a5a682204f195db955b409f52d3f45aa04a160578590107b00001europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:fe6d0ac97d85b2902c0e96f9bce057712097439315c8fca62c67ef2b0734d927europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:1b45d2576f2061a703c2a3730bcfa065f2116af8c33d6fd368b84896ea4bbe7feurope-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:84a79ab4a347250000e7f02554117a4f9b97534d302e1b127fb7fdb34c4568a6europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:2f12f89e87f64c6096d9e98a0a98553d90b00d6b0b9ebd685d12ef05f8945fbeeurope-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:94056f4d5ccbf310e8f002317e03c3fd748377c34de96f26b5468d7cf4b62ef3europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:31560ce792dd6f5a1c77fd483c389ee860b13dd7e7f05f34300ad2b8a57d746ceurope-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:b3d560a625c1117ba13b8f6d4dc1d3a257de5bae3196429d167eb87367b3a262europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:0a8f3e40be89c2ee389fbe4a64064cb23e5c27a648994a5e4c371eef914ebbe9europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:90995de437625ac07388ed0337367266e27741ef8c9157bb303d3916ec0d02c9application/vnd.cyclonedx+json
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:bfd6928b5c4e106b5e28a901786a4871ce2b569685c13c660044a3d8f0e73f45europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:c4ae04385441ead6332001c25cefed45fdcc6835a8002f25d8704c0b39946ccbeurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:a1a3a70eb88b6bf39a960e1ff90f90f30453f859f4d9de7bf18b672c51259f5aeurope-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:ebb3d7f4dc2075c8ab0feac4e7b766c36201bb10172ad03c1c43d80312462075europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:045ea90585cd6df2921455072d284160883071e1e8362027ae5e737b5b25709beurope-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:09f8fadcc2360addb97f7683475725cd235c0104ab40f303abe0f9cb9e3cfc3deurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:b9a5b8f31d3d604bfe4b12fbf6b8570240f63e79179835c771d42f93c216a25deurope-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:e358e93992876def1a0223da7e640d3343aa460afb2e129316c32ec6f0423386europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:32aba1e386995d8b0de9b60543a6375495accede1d4eed6726625025a1b450b1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:c861acf55bb8351735f4d695f23fc1a73fae28e2345586681f691553e4ba543beurope-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:23f76c0a9ccb71ef8cb77088781fc82d53b0f055ec510658614fef3f820b8f94europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:e7e8c29ad0c96a89227c74a5a9479a7a8a135e3615a2c849944b90ff2a085439europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:243c07bc02dbfd59efc7b36799770884d52e783a7c3052252bc1f03d57255ec1europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:31ac227ef2954239bbc62091156e863712212cd339ab2b69c59d437530c69577europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:2e987fa0546767bfb8a5fc52d5b6b257cd4b0f8d096561444319efb63d4d8982europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:c8c5ac8455fb1e26ad9d564693e8f3ff3858e45eb8482579a272105888f89f10europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:0876a8486407c0a5d387e327764b10dc42eb1f9d4377ad33e1d0497ae7bced88europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:102f78adb46f4537b542c9101214fba759a61aa5b97c081f6d88925c1aa3e03eHelm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.3europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.3Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.3europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.3Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.