Bump github.com/gardener/gardener from 1.95.2 to 1.98.0

[dependabot]

Bumps github.com/gardener/gardener from 1.95.2 to 1.98.0.

Release notes

Sourced from github.com/gardener/gardener's releases.

v1.98.0

[gardener/gardener]

⚠️ Breaking Changes

• [DEPENDENCY] The Registry in pkg/utils/managedresources/registry.go was changed to return all objects as a compressed data chunk.
  As soon as you update the github.com/gardener/gardener dependency to this version, ManagedResource secrets will be rewritten in a Brotli compressed format (combined under data key data.yaml.br). by @​timuthy #9964
• [DEPENDENCY] The github.com/gardener/gardener/extensions/pkg/webhook/cloudprovider.Args#EnableObjectSelector field is now removed. The corresponding webhook's object selector is now enforced unconditionally. by @​ialidzhikov #10027
• [OPERATOR] Provider extensions specifying a "controlplane" mutating webhook ObjectSelector are incompatible with gardenlet < v1.98.0. by @​LucaBernstein #9981
• [OPERATOR] The Resource Size Validator of the gardener-admission-controller ignores status subresource and metadata.managedFields for resource size limits. Please consider adjusting your configuration if you already increased the limits because of these now ignored sections. by @​LucaBernstein #10011
• [USER] Separately configuring resource reservations for system processes via shoot.spec.kubernetes.kubelet.systemReserved or spec.provider.workers[].kubernetes.kubelet.systemReserved is deprecated in Gardener and will be removed in a future release. Please merge existing resource reservations into the corresponding kubeReserved field. by @​MichaelEischer #9985
• [DEVELOPER] The function github.com/gardener/gardener/extensions/pkg/controller/worker/WorkerPoolHash now expects separate additional data for version 1 and 2 of the hash calculation. Version 2 does not include extension provider specific fields by default. Add those to the additional data for version 2 if necessary. by @​MichaelEischer #9865

📰 Noteworthy

• [DEVELOPER] The resources mutated by the "controlplane" mutating webhooks are labeled with provider.extensions.gardener.cloud/mutated-by-controlplane-webhook: true by gardenlet. The provider extensions can add an object selector to their "controlplane" mutating webhooks to do not intercept requests for unrelated objects. by @​LucaBernstein #9981

✨ New Features

• [OPERATOR] Version 2 of the WorkerPoolHash calculation now takes the current name of the OperatingSystemConfig into account. Its usage is controlled by the gardenlet feature gate NewWorkerPoolHash. All provider extension must be upgraded before enabling this feature gate. The new calculation also ensures that changes of the fields kubeReserved, evictionHard and cpuManagerPolicy in the kubelet config of a worker pool result in node rolls. by @​MichaelEischer #9865
• [OPERATOR] Failure of snapshot compaction jobs at a rate greater than 10% of shoots in a seed will raise alerts now. by @​renormalize #9739
• [DEVELOPER] gosec was introduced for Static Application Security Testing (SAST). by @​oliver-goetz #9959
• [USER] A new field .spec.CredentialsBindingName referencing a CredentialsBinding was introduced to shoot specification. It is meant to replace the existing SecretBindingName. As of now the field is guarded by a feature gate called AllowCredentialsBinding. by @​dimityrmirchev #9853

🐛 Bug Fixes

• [OPERATOR] Fix a bug where the Reversed VPN OpenVPN Server (HA) doesn't display any data. by @​axel7born #10035

🏃 Others

• [DEPENDENCY] The envoyproxy/envoy image has been updated to v1.30.3. Release Notes by @​gardener-ci-robot #10031
• [DEPENDENCY] The gardener/alpine-conntrack image has been updated to 3.20.1. Release Notes by @​gardener-ci-robot #10010
• [DEPENDENCY] The gcr.io/istio-release/pilot image has been updated to 1.21.3. by @​gardener-ci-robot #9914
• [DEPENDENCY] extensions lib: The shoot webhook does now support specifying an object selector. by @​ialidzhikov #10026
• [DEPENDENCY] The credativ/vali image has been updated to v2.2.16. Release Notes by @​gardener-ci-robot #9976
• [DEPENDENCY] The credativ/plutono image has been updated to v7.5.31. Release Notes by @​gardener-ci-robot #9978
• [DEVELOPER] The "remote local setup" is enhanced e.g. to support multiple scenarios. by @​istvanballok #9980
• [OPERATOR] machine-controller-manager-provider-xxx container now exposes metrics that prometheus can scrapes by @​aaronfern #9933
• [OPERATOR] kube-apiserver HPA's max replicas count from 3 to 6 in VPAAndHPA autoscaling mode to support very large control planes. by @​ialidzhikov #9971
• [OPERATOR] Gardener Enhancement Proposal for a bastion section in the CloudProfile by @​hebelsan #9935
• [OPERATOR] Introduce the operator Extension type. An Extension is responsible for installing the ControllerRegistration and ControllerRuntime in the garden cluster and also install any extensions necessary to manage infrastructure resources in the runtime cluster. This release contains the API only, further functionality will be released in future Gardener versions. by @​kon-angelo #9924
• [OPERATOR] The data in ManagedResource secrets is now compressed with Brotli and stored under a single data key data.yaml.br. by @​timuthy #9964

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.98.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.98.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.98.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.98.0

Docker Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.98.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.98.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.98.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.98.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.98.0

... (truncated)

Commits

• 957e4c7 Release v1.98.0
• 7737b4a Revert "chore(deps): update dependency gardener/logging to v0.55.7 (#9993)" (...
• b43f7ae Fix regex for service discovery of vpn-seedserver. (#10035)
• a2ee41a chore(deps): update quay.io/kiwigrid/k8s-sidecar docker tag to v1.27.4 (#10032)
• 0921e6e chore(deps): update dependency gardener/logging to v0.55.7 (#9993)
• f63d51f chore(deps): update dependency envoyproxy/envoy to v1.30.3 (#10031)
• cabc318 chore(deps): update dependency protocolbuffers/protobuf to v27.2 (#10028)
• 27ee197 cloudprovider webhook: Enforce object selector unconditionally (#10027)
• bfa8059 Mark shoot.spec.kubernetes.kubelet.systemReserved as deprecated (#9985)
• f138274 Ignore status subresources and metadata.managedFields for resource size l...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[gardener-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign kostov6 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[gardener-robot-ci-2]

Thank you @dependabot[bot] for your contribution. Before I can start building your PR, a member of the organization must set the required label(s) {'reviewed/ok-to-test'}. Once started, you can check the build status in the PR checks section below.

[gardener-prow]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-gardener-extension-shoot-rsyslog-relp-image-build	00a3297	link	true	/test pull-gardener-extension-shoot-rsyslog-relp-image-build
pull-gardener-extension-shoot-rsyslog-relp-unit	00a3297	link	true	/test pull-gardener-extension-shoot-rsyslog-relp-unit
pull-gardener-extension-shoot-rsyslog-relp-integration	00a3297	link	true	/test pull-gardener-extension-shoot-rsyslog-relp-integration
pull-gardener-extension-shoot-rsyslog-relp-e2e-kind	00a3297	link	true	/test pull-gardener-extension-shoot-rsyslog-relp-e2e-kind

Full PR test history. Your PR dashboard. Command help for this repository.
Please help us cut down on flakes by linking this test failure to an open flake report or filing a new flake report if you can't find an existing one. Also see our testing guideline for how to avoid and hunt flakes.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[dependabot]

Superseded by #132.