🤖 Update gardener/gardener to v1.139.1 (minor)#73
Merged
ske-prow[bot] merged 1 commit intomainfrom Apr 10, 2026
Merged
Conversation
ske-renovate-ce
bot
added
the
kind/upgrade
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
ske-prow
bot
added
the
size/L
ske-renovate-ce
bot
force-pushed
the
renovate/gardenergardener
branch
2 times, most recently
from
8860f01 to
4b1c57f
Compare
Member
|
/retest |
ske-renovate-ce
bot
force-pushed
the
renovate/gardenergardener
branch
from
4b1c57f to
7ba9807
Compare
ske-renovate-ce
bot
changed the title
ske-renovate-ce
bot
force-pushed
the
renovate/gardenergardener
branch
from
7ba9807 to
b805c54
Compare
ske-renovate-ce
bot
changed the title
ske-renovate-ce
bot
force-pushed
the
renovate/gardenergardener
branch
2 times, most recently
from
d894dda to
202b824
Compare
ske-renovate-ce
bot
force-pushed
the
renovate/gardenergardener
branch
from
202b824 to
7d2c47f
Compare
ske-renovate-ce
bot
force-pushed
the
renovate/gardenergardener
branch
from
7d2c47f to
15ca305
Compare
dergeberl
approved these changes
Apr 10, 2026
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: dergeberl The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
LGTM label has been added. DetailsGit tree hash: b03b9ce8064bac9899f75f3ff3a6f4bc20c3cb2e |
ske-prow
bot
added
the
approved
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.138.2→v1.139.1v1.138.2→v1.139.1Release Notes
gardener/gardener (github.com/gardener/gardener)
v1.139.1Compare Source
[github.com/gardener/gardener:v1.139.1]
🐛 Bug Fixes
[OPERATOR]Fix a bug where theshoot-carecontroller cannot reconcile shoots withspec.maintenance.confineSpecUpdateRollout=trueand updated DNS credentials, i.e.shoot.spec.dns.providers[].credentialsRef, until the shoot is reconciled. by @vpnachev [#14444]🏃 Others
[OPERATOR]There is nowmaxConnectionDurationof 1 day for connections to kube-apiserver endpoints. TheirmaxConnectionslimit has been removed. by @oliver-goetz [#14471][OPERATOR]The following dependencies have been updated:gardener/autoscalerfromv1.34.0tov1.34.1. Release Notesgardener/autoscalerfromv1.33.0tov1.33.1. Release Notesgardener/autoscalerfromv1.32.2tov1.32.3. Release Notesgardener/autoscalerfromv1.31.0tov1.31.1. Release Notesgardener/autoscalerfromv1.30.2tov1.30.3. Release Notes by @aaronfern [#14500][DEPENDENCY]The following dependencies have been updated:gardener/machine-controller-managerfromv0.61.2tov0.61.3. Release Notesgithub.com/gardener/machine-controller-managerfromv0.61.2tov0.61.3. by @gardener-ci-robot [#14485]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.139.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.139.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.139.1europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.139.1Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.139.1europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.139.1v1.139.0Compare Source
[github.com/gardener/gardener:v1.139.0]
[OPERATOR]The type of the Gardenlet's configuration field.controllers.tokenRequestorWorkloadIdentity.tokenExpirationDurationhas been changed fromtime.Durationtok8s.io/apimachinery/pkg/apis/meta/v1.Duration. by @vpnachev [#14333][OPERATOR]Garden.status.encryptedResourcesfield is removed, use Garden.status.credentials.encryptionAtRest.resourcesinstead. by @iypetrov [#14354][OPERATOR]Theraise-spec-limitsverb has been removed forNamespacedCloudProfiles because it is no-longer needed. by @mimiteto [#14344][USER].spec.dns.providers[].secretNamehas been forbidden for clusters running on Kubernetes version v1.35.0 or higher. Please, use.spec.dns.providers[].credentialsRefinstead. by @vpnachev [#14309][USER]Shoot.status.encryptedResourcesfield is removed, use Shoot.status.credentials.encryptionAtRest.resourcesinstead. by @iypetrov [#14354][DEVELOPER]A default reconciliation timeout of 20 minutes has been set for the extension controllers:
Extension developers can define own reconciliation timeout via the
sigs.k8s.io/controller-runtime/pkg/controller.Optionsprovided to the respective controller. by @vpnachev [#14105][DEVELOPER]secretRefinspec.dns.providerhas been removed, usecredentialsRefinstead. by @vpnachev [#14308]📰 Noteworthy
[OPERATOR]AdminKubeconfigRequestnow uses the static username prefixgardener.cloud:admin:, andViewerKubeconfigRequestusesgardener.cloud:viewer:to generate the username for the resulting kubeconfig. Previously, this prefix was randomized." by @timuthy [#14252][DEVELOPER]gardenadmbootstrap etcd version is updated fromv3.4.34tov3.5.27. by @LucaBernstein [#14352][DEPENDENCY]During theShootreconciliation, control plane and extension readiness is waited for before further system components are reconciled. by @LucaBernstein [#14338]✨ New Features
[OPERATOR]Deletion of theGardenCRD installed via the gardener-operator Helm chart is now prevented unless annotated withconfirmation.gardener.cloud/deletion=trueby @maboehm [#14373][OPERATOR]A newspec.settings.zoneSelectionfield onSeedresources allows operators to configure whether the control plane namespace of non-HAShoots (or those with failure tolerance typenode) is placed in the same availability zone as the shoot's worker nodes (Prefer) or strictly required to match (Enforce). by @rfranzke [#14238][OPERATOR]Theistio-ingressgatewaynow uses a dual autoscaling approach with bothVPA(VerticalPodAutoscaler) andHPA(HorizontalPodAutoscaler) working together without causing pod-thrashing. by @oliver-goetz [#14313][OPERATOR]The Gardener Dashboard RBAC now allows listing and watching ManagedSeeds to support newer dashboard functionality around ManagedSeed-related Shoot information. by @petersutter [#14321][DEVELOPER]gardener-node-agentcan now resolve.spec.files[].content.secretReffromSecrets inkube-system, enablingOperatingSystemConfigfiles to reference secrets instead of requiring inlined content. by @rfranzke [#14319]🐛 Bug Fixes
[OPERATOR]A bug causing the nil pointer panic in gardenlet config validation whenstaleExtensionHealthChecks.thresholdis nil is fixed. by @acumino [#14317][OPERATOR]An issue preventing theshootstate-controllerof gardenlet to populate all required states to the ShootState for a self-hosted Shoot is now fixed. by @ialidzhikov [#14339][OPERATOR]An issue causinggardener-operatorto fail to create resourceeventsin API groupevents.k8s.iois now fixed. by @shafeeqes [#14327][OPERATOR]A bug causing thegardenletto crash during startup was fixed. Earlier, the startup procedure occasionally failed on large-scale seed clusters due to cache sync timeouts. by @timuthy [#14408][DEVELOPER]ThenodePortauto-remediation in the local setup service controller no longer incorrectly targetsClusterIPservices. by @rfranzke [#14390]🏃 Others
[OPERATOR]The.spec.trafficDistributionfield of the topology-awareetcd-{events,main}-clientServices will be automatically switched from the deprecatedPreferCloseto the newPreferSameZoneoption for Kubernetes 1.34+. by @ialidzhikov [#14278][OPERATOR]The following dependencies have been updated:gardener/etcd-druidfromv0.35.1tov0.36.1. Release Notesgithub.com/gardener/etcd-druid/apifromv0.35.1tov0.36.1. by @Shreyas-s14 [#14341][OPERATOR]Status updates forShootresources during reconciliation are now minimized when the associatedSeedis not ready. Previously, this could lead to excessive growth of the gardener's etcd key space. by @timuthy [#14377][OPERATOR]Opentelemetry collector migration implemented in gardener - v1.136.0 is no longer needed. by @nickytd [#14138][OPERATOR]During therestorephase of control plane migration,MachinesandMachineSetsare now deployed in parallel across 10 go routines. Additionally, the restoration logic now checks if aMachineorMachineSetalready exists, and if that is the case, it does not attempt to create it. This should speed up the restoration of theWorkerresource. by @plkokanov [#14219][OPERATOR]Now victorialogs streams follow opentelemetry semantic convention fields. by @nickytd [#14381][OPERATOR]victoria-logspods are now labeled according oidc-apps semantic. by @nickytd [#14325][OPERATOR]Unused bootstrap secrets from thegardener-resource-managerare cleaned up properly. Earlier, the shoot reconciliation left a considerable amount of unused secrets in the control-plane, if the GRM bootstrap procedure was stuck. by @timuthy [#14343][OPERATOR]Fix Istio Gateway metric retention and reenable metric scraping. by @Bobi-Wan [#14337][OPERATOR]apiserver-proxy connection for shoots with legacy single-dash namespace format has been fixed. by @axel7born [#14406][OPERATOR]Timeout for credentials renewal during rotation ofGardensecrets was increased to 10 minutes. by @dimityrmirchev [#14433][OPERATOR]Thev1alpha1perses CRDs are deleted and replaced withv1alpha2versions during reconciliation. by @rickardsjp [#14264][USER]VPN Dashboard now displays the pod name in the legend for the VPN Shoot Network I/O panel by @domdom82 [#14393][DEVELOPER]The remote local setup has been updated to the latest changes in Gardener. by @vicwicker [#14289][DEVELOPER]Addedhack/generate-renovate-ignore-deps.shto generate the renovateignoreDepssection from the intersection of a downstream repo'sgo.modandgardener/gardener'sgo.mod. Downstream repos can now remove their local copies and call the script from$GARDENER_HACK_DIR. by @LucaBernstein [#14425][DEVELOPER]Remote setup garden template has been updated with gardenerDiscoveryServer configuration by @domdom82 [#14306][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.15.0tov1.15.1. by @gardener-ci-robot [#14363][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.14.3tov1.15.0. by @gardener-ci-robot [#14267][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/coredns/corednsfromv1.14.1tov1.14.2. by @gardener-ci-robot [#14290][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.8to1.83.9. Release Notes by @gardener-ci-robot [#14312][DEPENDENCY]The following dependencies have been updated:quay.io/brancz/kube-rbac-proxyfromv0.21.0tov0.21.1. by @gardener-ci-robot [#14332][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.9to1.83.10. Release Notes by @gardener-ci-robot [#14380][DEPENDENCY]The following dependencies have been updated:europe-docker.pkg.dev/gardener-project/releases/gardener/fluent-bit-pluginfromv1.2.0tov1.4.0. by @nickytd [#14357][DEPENDENCY]The following dependencies have been updated:quay.io/brancz/kube-rbac-proxyfromv0.21.1tov0.21.2. by @gardener-ci-robot [#14382][DEPENDENCY]The following dependencies have been updated:registry.k8s.io/ingress-nginx/controller-chrootfromv1.14.4tov1.14.5. by @gardener-ci-robot [#14362][DEPENDENCY]The following dependencies have been updated:gardener/vpn2from0.47.0to0.48.0. Release Notes by @gardener-ci-robot [#14374][DEPENDENCY]The following dependencies have been updated:perses/persesfromv0.53.0tov0.53.1. Release Notes by @gardener-ci-robot [#14307][DEPENDENCY]The following dependencies have been updated:gardener/dashboardfrom1.83.10to1.83.11. Release Notes by @gardener-ci-robot [#14438][DEPENDENCY]The following dependencies have been updated:gcr.io/istio-release/pilotfrom1.27.7to1.27.8.gcr.io/istio-release/proxyv2from1.27.7to1.27.8.istio.io/apifromv1.27.7tov1.27.8. by @gardener-ci-robot [#14280]📖 Documentation
[DEPENDENCY]Extension admission components deployed viagardener-operatorshould set the--webhook-config-owner-namespaceflag to preventValidatingWebhookConfigurationresources from leaking in the virtual garden cluster upon uninstall. by @theoddora [#14360]Helm Charts
europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.139.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.139.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.139.0europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.139.0Container (OCI) Images
europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.139.0europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.139.0Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.