Update module github.com/gardener/gardener to v1.130.0

[gardener-ci-robot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gardener/gardener	v1.129.2 -> v1.130.0

---

Release Notes

gardener/gardener (github.com/gardener/gardener)

v1.130.0

Compare Source

[github.com/gardener/gardener:v1.130.0]

⚠️ Breaking Changes

• [OPERATOR] The following Shoot fields are now validated:
  • .spec.kubernetes.verticalPodAutoscaler.evictionRateBurst must be non-negative.
  • .spec.kubernetes.verticalPodAutoscaler.evictionTolerance is limited in [0, 1) interval.
  • .spec.kubernetes.verticalPodAutoscaler.recommendationMarginFraction is limited in [0, 1) interval.
  • .spec.kubernetes.kubeScheduler.kubeMaxPDVols must be a positive number.
  • .spec.tolerations[] key and value are validated similar to Kubernetes Tolerations.
  • .spec.schedulerName must comply with RFC 1123 Label Names.
  • .spec.extensions[].type must comply with RFC 1123 Label Names.
  • .spec.provider.type must comply with RFC 1123 Label Names. by @​dimitar-kostadinov [#​12844]

📰 Noteworthy

• [DEVELOPER] The Gardener reviewer groups have been refined and can be found in the OWNERS_ALIASES file. This will serve as the foundation for finding appropriate reviewers for the respective areas in the future. by @​timuthy [#​13024]

✨ New Features

• [DEVELOPER] Shoot advertised addresses are now configurable by extension components for Shoot Ingress resources. For more details, see Shoot Advertised Addresses. by @​dnaeon [#​13043]
• [OPERATOR] gardener-operator now prevents deletion of the garden namespace in the runtime cluster while operator.gardener.cloud/v1alpha1.Garden resources still exist. by @​rfranzke [#​13101]

🐛 Bug Fixes

• [OPERATOR] The quay.io/kiwigrid/k8s-sidecar image is downgraded to v1.30.9 to prevent a regression that causes Plutono dashboards to not be loaded. by @​rickardsjp [#​13187]
• [OPERATOR] A bug which deactivates topology aware routing for kube-apiservers when l7 load-balancing is not active has been fixed. by @​oliver-goetz [#​13185]
• [USER] Fixes an issue where connecting to the kube-apiserver via the seed ingress URL did not work when the shoot used an exposure class. by @​axel7born [#​13055]
• [USER] An upstream issue causing kube-proxy to log thousands of log entries per second is now mitigated by reducing the kube-proxy verbosity level when running an affected Kubernetes version in the range [1.33.0, 1.33.6). For more details, see http://issues.k8s.io/132678. by @​ialidzhikov [#​13192]
• [DEVELOPER] In the local setup, the hosts file entry for garden.local.gardener.cloud is written again upon node reboot. by @​LucaBernstein [#​13132]
• [OPERATOR] A bug has been fixed which prevented L7 load-balancing for kube-apiservers to work correctly on Seeds/Gardens where topology-aware-routing is activated. by @​oliver-goetz [#​13081]
• [DEVELOPER] A default KUBECONFIG is now set when running make seed-{up|down}. by @​oliver-goetz [#​13071]
• [DEVELOPER] The testmachinery tests for control plane migration were fixed so that the checks if nodes are kept after control plane migration are executed. by @​plkokanov [#​13057]
• [OPERATOR] The worker-pools-operatingsystemconfig-hashes secret is now restored in the Shoot's control plane during the restore phase of control plane migration. This fixes an issue which caused node rollouts to happen during control plane migration when the NewWorkerPoolHash feature gate is enabled. by @​plkokanov [#​13056]

🏃 Others

• [OPERATOR] Use aggregate Prometheus internal service for federation from the garden Prometheus when the runtime cluster is a seed by @​vicwicker [#​13066]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/dashboard from 1.82.3 to 1.82.4. Release Notes by @​gardener-ci-robot [#​13157]
• [DEPENDENCY] The following dependencies have been updated:
  • registry.k8s.io/node-problem-detector/node-problem-detector from v0.8.21 to v0.8.22. by @​gardener-ci-robot [#​13032]
• [OPERATOR] Introduces feature gate UseUnifiedHTTPProxy for unified HTTP proxy infrastructure. by @​hown3d [#​13003]
• [DEVELOPER] The custom client certificate parsing in IstioTLSTermination lua scripts was replaced with parsedSubjectPeerCertificate() envoy function. by @​oliver-goetz [#​13128]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/cortexproject/cortex from v1.19.0 to v1.19.1. by @​gardener-ci-robot [#​13148]
• [OPERATOR] The following kube-apiserver metrics are now collected, which might be handy to optimize Priority and Fairness usage:
  • apiserver_flowcontrol_current_inqueue_requests
  • apiserver_flowcontrol_current_executing_requests
  • apiserver_flowcontrol_current_executing_seats
  • apiserver_flowcontrol_request_wait_duration_seconds
  • apiserver_flowcontrol_nominal_limit_seats
  • apiserver_flowcontrol_request_concurrency_in_use
  • apiserver_flowcontrol_priority_level_request_utilization
  • apiserver_flowcontrol_priority_level_seat_utilization by @​dimakow [#​13000]
• [OPERATOR] Add support for gzip compression to metrics endpoint of istio ingress gateway. by @​ScheererJ [#​13137]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/dependency-watchdog from v1.5.0 to v1.6.0. Release Notes
  • github.com/gardener/dependency-watchdog from v1.5.0 to v1.6.0. by @​ashwani2k [#​13127]
• [OPERATOR] gardener-node-agent-init now outputs logs to journal and console (/dev/console). by @​RAPSNX [#​12822]
• [DEPENDENCY] The following dependencies have been updated:
  • gcr.io/istio-release/pilot from 1.27.1 to 1.27.2.
  • gcr.io/istio-release/proxyv2 from 1.27.1 to 1.27.2. by @​gardener-ci-robot [#​13151]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/dashboard from 1.82.2 to 1.82.3. Release Notes by @​gardener-ci-robot [#​13069]
• [OPERATOR] The following dependencies have been updated:
  • gardener/etcd-druid from v0.32.0 to v0.33.0. Release Notes by @​shreyas-s-rao [#​13172]
• [DEPENDENCY] The following dependencies have been updated:
  • registry.k8s.io/autoscaling/vpa-admission-controller from 1.4.2 to 1.5.1.
  • registry.k8s.io/autoscaling/vpa-recommender from 1.4.2 to 1.5.1.
  • registry.k8s.io/autoscaling/vpa-updater from 1.4.2 to 1.5.1. by @​gardener-ci-robot [#​13095]
• [DEPENDENCY] The following dependencies have been updated:
  • gcr.io/istio-release/pilot from 1.27.0 to 1.27.1.
  • gcr.io/istio-release/proxyv2 from 1.27.0 to 1.27.1. by @​axel7born [#​13004]
• [OPERATOR] New panels added in VPA Recommendations Plutono dashboard to track number of pods with deviations from their CPU recommendation. by @​RadaBDimitrova [#​12898]
• [OPERATOR] VerticalPodAutoscaler resources, deployed by Gardener, are now instrumented to switch from the deprecated update mode Auto to its only fallback strategy - update mode Recreate. by @​vitanovs [#​13046]
• [DEPENDENCY] The following dependencies have been updated:
  • open-telemetry/opentelemetry-operator from v0.129.1 to v0.136.0. Release Notes by @​rrhubenov [#​13106]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/kiwigrid/k8s-sidecar from 1.30.10 to 1.30.11. by @​gardener-ci-robot [#​13149]
• [OPERATOR] Logging stack configuration is now tuned for high-throughput scenarios. It brings changes in local file system resource utilization, addressing potential node disk pressure occurrences. by @​nickytd [#​13116]
• [OPERATOR] Add IOPS metrics to etcd dashboard by @​voelzmo [#​13146]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.130.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.130.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.130.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.130.0

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.130.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.130.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.130.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.130.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.130.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.130.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.130.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.130.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[gardener-ci-robot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 16 additional dependencies were updated

Details:

Package	Change
github.com/gardener/etcd-druid/api	v0.32.0 -> v0.33.0
github.com/open-telemetry/opentelemetry-operator	v0.135.0 -> v0.136.0
github.com/prometheus/common	v0.66.1 -> v0.67.1
go.yaml.in/yaml/v2	v2.4.2 -> v2.4.3
golang.org/x/crypto	v0.42.0 -> v0.43.0
golang.org/x/exp	v0.0.0-20250911091902-df9299821621 -> v0.0.0-20251009144603-d2f985daa21b
golang.org/x/mod	v0.28.0 -> v0.29.0
golang.org/x/net	v0.44.0 -> v0.46.0
golang.org/x/oauth2	v0.30.0 -> v0.31.0
golang.org/x/sys	v0.36.0 -> v0.37.0
golang.org/x/telemetry	v0.0.0-20250908211612-aef8a434d053 -> v0.0.0-20251008203120-078029d740a8
golang.org/x/term	v0.35.0 -> v0.36.0
golang.org/x/text	v0.29.0 -> v0.30.0
golang.org/x/time	v0.13.0 -> v0.14.0
golang.org/x/tools	v0.37.0 -> v0.38.0
google.golang.org/protobuf	v1.36.8 -> v1.36.10

[gardener-ci-robot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[AleksandarSavchev]

/lgtm
/approve

[gardener-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: AleksandarSavchev

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [AleksandarSavchev]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[gardener-prow]

LGTM label has been added.

Details

Git tree hash: 2256c41f7ef9f50c73d2b4ae2cb924b8537cb815