Update module github.com/gardener/gardener to v1.131.1

[gardener-ci-robot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gardener/gardener	v1.130.1 -> v1.131.1

---

Release Notes

gardener/gardener (github.com/gardener/gardener)

v1.131.1

Compare Source

[github.com/gardener/gardener:v1.131.1]

🐛 Bug Fixes

• [USER] The feature for supporting custom server blocks in node-local-dns is now reverted. by @​Kostov6 [#​13354]
• [USER] An issue with the configuration for the OpenTelemetryCollector on the nodes that leads to missing kernel logs in Vali is now fixed. by @​rrhubenov [#​13330]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.131.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.131.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.131.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.131.1

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.131.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.131.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.131.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.131.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.131.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.131.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.131.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.131.1

v1.131.0

Compare Source

[github.com/gardener/gardener:v1.131.0]

📰 Noteworthy

• [OPERATOR] On startup gardenlets will configure .spec.dns.defaults settings for its respective Seed. Operators should adapt their Seed manifests to explicitly configure default DNS as .spec.dns.defaults will become a mandatory configuration after release v1.131.0. by @​dimityrmirchev [#​12884]

✨ New Features

• [OPERATOR] Valitail is now replaced with an instance of OpenTelemetry Collector. by @​rrhubenov [#​12846]
• [OPERATOR] Introduced spec.settings.loadBalancerServices.zonalIngress.enabled in the Seed API. When disabled, zonal istio ingress gateways are removed and the global istio ingress gateway is used instead. by @​cerealsnow [#​12956]
• [OPERATOR] gardenlet now evaluates extension health conditions first when computing the conditions of a Shoot. by @​rfranzke [#​13231]
• [USER] The KubeApiServerTooManyAuditlogFailures alert is now sent also to the shoot owners. by @​vpnachev [#​13177]
• [OPERATOR] The Seed spec was extended to allow explicit configuration for default DNS settings. Operators can configure these by setting .spec.dns.defaults. The implicit configuration that involved selecting a DNS secrets from the Garden cluster based on labels will be eventually removed. Operators should adapt their Seed manifests to explicitly configure default DNS. by @​dimityrmirchev [#​12884]

🐛 Bug Fixes

• [OPERATOR] An issue has been fixed which was preventing gardenlet from registering its Gardenlet resource when selfUpgrade was set in its Helm chart values. by @​rfranzke [#​13241]
• [OPERATOR] A bug causing gardenlet to panic during CoreDNS migration check if the Shoot is hibernated is now fixed. by @​shafeeqes [#​13302]
• [USER] The early access (before the cluster creation is completed) to a Shoot cluster via AdminKubeconfig credentials is restored now when dedicated groups gardener.cloud:system:admins and gardener.cloud:project:admins are used for authorization. by @​vpnachev [#​13299]

🏃 Others

• [DEPENDENCY] The following dependencies have been updated:
  • envoyproxy/envoy from distroless-v1.35.4 to v1.36.1. Release Notes by @​gardener-ci-robot [#​13170]
• [DEPENDENCY] The following dependencies have been updated:
  • envoyproxy/envoy from distroless-v1.35.3 to v1.35.4. Release Notes by @​gardener-ci-robot [#​13159]
• [DEPENDENCY] The following dependencies have been updated:
  • gcr.io/istio-release/pilot from 1.27.2 to 1.27.3.
  • gcr.io/istio-release/proxyv2 from 1.27.2 to 1.27.3.
  • istio.io/api from v1.27.2 to v1.27.3. by @​gardener-ci-robot [#​13235]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/machine-controller-manager from v0.60.0 to v0.60.1. Release Notes
  • github.com/gardener/machine-controller-manager from v0.60.0 to v0.60.1. by @​gardener-ci-robot [#​13181]
• [OPERATOR] Increase client-side rate limits for provider-specific container in machine-controller-manager to --kube-api-qps=100 and --kube-api-burst=200 by @​voelzmo [#​13254]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/vpn2 from 0.42.0 to 0.43.0. Release Notes by @​gardener-ci-robot [#​13176]
• [DEPENDENCY] The following dependencies have been updated:
  • credativ/vali from v2.2.27 to v2.2.28. Release Notes by @​gardener-ci-robot [#​13197]
• [OPERATOR] Report Gardener Operator Extension conditions as metrics by @​hown3d [#​13015]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/coredns-config-adapter from v0.2.0 to v0.3.0. Release Notes by @​DockToFuture [#​13277]
• [OPERATOR] Mutation of the Shoot metadata annotations such as shoot.gardener.cloud/tasks and maintenance.shoot.gardener.cloud/needs-retry-operation is moved from the ShootValidator to the ShootMutator admission plugin. by @​ialidzhikov [#​13171]
• [DEPENDENCY] The following dependencies have been updated:
  • credativ/plutono from v7.5.42 to v7.5.43. Release Notes by @​gardener-ci-robot [#​13202]
• [OPERATOR] The local multi-node setup no longer relies on externalTrafficPolicy: Local and forcing traffic through a pod on the control plane node. by @​ScheererJ [#​13182]
• [OPERATOR] Add support for scraping metrics for OpenTelemetry collector on nodes by @​dnaeon [#​13228]
• [OPERATOR] Support custom server blocks in node-local-dns. by @​DockToFuture [#​13160]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/prometheus/prometheus from v3.7.1 to v3.7.2. by @​gardener-ci-robot [#​13253]
• [OPERATOR] Fixed an issue that caused the worker-pools-operatingsystemconfig-hashes secret to be created as immutable during the restore phase of control plane migration. by @​plkokanov [#​13263]
• [OPERATOR] A new mutating admission plugin is introduced - ShootMutator. It is enabled by default. For more details, see the ShootMutator admission plugin docs. by @​ialidzhikov [#​13156]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/machine-controller-manager from v0.60.1 to v0.60.2. Release Notes
  • github.com/gardener/machine-controller-manager from v0.60.1 to v0.60.2. by @​gardener-ci-robot [#​13267]
• [OPERATOR] The NodeNotHealthy and SeedNodeNotHealthy alerts are now removed. by @​vicwicker [#​13150]
• [OPERATOR] ScrapeConfigs & PrometheusRules of blackbox-exporter are now deployed as managed-resource when type is shoot by @​oliver-goetz [#​13178]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/autoscaler from v1.32.1 to v1.32.2. Release Notes by @​gardener-ci-robot [#​13240]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/dashboard from 1.82.4 to 1.82.5. Release Notes by @​gardener-ci-robot [#​13250]
• [DEPENDENCY] The following dependencies have been updated:
  • envoyproxy/envoy from distroless-v1.36.1 to v1.36.2. Release Notes by @​gardener-ci-robot [#​13225]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.131.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.131.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.131.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.131.0

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.131.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.131.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.131.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.131.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.131.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.131.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.131.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.131.0

v1.130.2

Compare Source

[github.com/gardener/gardener:v1.130.2]

🐛 Bug Fixes

• [USER] The early access (before the cluster creation is completed) to a Shoot cluster via AdminKubeconfig credentials is restored now when dedicated groups gardener.cloud:system:admins and gardener.cloud:project:admins are used for authorization. by @​vpnachev [#​13298]
• [OPERATOR] A bug causing gardenlet to panic during CoreDNS migration check if the Shoot is hibernated is now fixed. by @​shafeeqes [#​13303]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.130.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.130.2
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.130.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.130.2

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.130.2
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.130.2
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.130.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.130.2
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.130.2
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.130.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.130.2
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.130.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[gardener-ci-robot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
github.com/gardener/machine-controller-manager	v0.60.0 -> v0.60.2
github.com/open-telemetry/opentelemetry-operator	v0.136.0 -> v0.137.0
github.com/prometheus/common	v0.67.1 -> v0.67.2
golang.org/x/exp	v0.0.0-20251009144603-d2f985daa21b -> v0.0.0-20251023183803-a4bb9ffd2546
golang.org/x/oauth2	v0.31.0 -> v0.32.0
istio.io/api	v1.25.5 -> v1.27.3
istio.io/client-go	v1.25.1 -> v1.27.2

[AleksandarSavchev]

/lgtm

[gardener-prow]

LGTM label has been added.

Details

Git tree hash: 23c4de52b36cd9e69219870a484681853fe0fe26

[gardener-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: AleksandarSavchev

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [AleksandarSavchev]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment