Bump github.com/gardener/gardener from 1.121.2 to 1.122.1

[dependabot]

Bumps github.com/gardener/gardener from 1.121.2 to 1.122.1.

Release notes

Sourced from github.com/gardener/gardener's releases.

v1.122.1

[gardener/gardener]

🐛 Bug Fixes

• [USER] An issue causing gardenlet to panic during the migration from single-stack IPv4 to dual-stack IPv4, IPv6 when the Shoot is hibernated is now fixed. by @​DockToFuture #12435
• [USER] A bug causing the maxSurge and maxUnavailable fields for worker pools with update strategy ManualInPlaceUpdate always getting overwritten is now fixed. by @​shafeeqes #12454
• [DEVELOPER] An issue causing reporting data generated by the testframework to be incompatible with recent elasticsearch/opensearch versions is now fixed. by @​dguendisch #12462
• [OPERATOR] Fixed an error in BackupBucket reconciliation by replacing StrategicMergePatch with MergePatch to properly handle runtime.RawExtension fields. by @​shafeeqes #12461

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.122.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.122.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.122.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.122.1

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.122.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.122.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.122.1
• gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.122.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.122.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.122.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.122.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.122.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.122.1

v1.122.0

[gardener/gardener]

⚠️ Breaking Changes

• [DEPENDENCY] The Workload Identity secrets will no longer set the config data key (with value "null") when the workloadIdentity.spec.targetSystem.providerConfig is nil. by @​vpnachev #12372
• [OPERATOR] If an operator configures serviceAccountConfig.issuer for the virtual cluster in a Garden resource and that issuer matches a hostname of the virtual kube-apiserver then the --external-hostname flag of the virtual kube-apiserver will be set to that hostname instead of the first domain set in the virtualCluster.dns.domains[] field. by @​dimityrmirchev #12351
• [USER] The .spec.kubernetes.enableStaticTokenKubeconfig field in the Shoot API is removed. This field has been deprecated since Gardener v1.114.0. Adapt your manifests and machinery to no longer specify this field. Otherwise, CREATE/UPDATE requests for Shoot will be rejected due to unknown field. by @​shafeeqes #12284

📰 Noteworthy

• [OPERATOR] The RemoveAPIServerProxyLegacyPort feature gate has been promoted to GA and is now unconditionally enabled. by @​Wieneo #12341

✨ New Features

• [DEVELOPER] Gardener can now support clusters with Kubernetes version 1.33. Extension developers have to prepare individual extensions as well to work with 1.33. by @​RadaBDimitrova #12216
• [OPERATOR] Gardener can now support clusters with Kubernetes version 1.33. To allow creation/update of 1.33 clusters you will have to update the version of your provider extension(s) to a version that supports 1.33 as well. Please consult the respective releases and notes in the provider extension's repository. by @​RadaBDimitrova #12216
• [OPERATOR] The JWTs issued on behalf of WorkloadIdentity now have the jti claim set. Already issued tokens will get the jti claim next time when they are renewed. by @​vpnachev #12353
• [USER] Support defaulting machine image versions from version prefix on Shoot spec update. by @​LucaBernstein #12374

🐛 Bug Fixes

• [USER] A regression causing the gardenlet to fail to decode the referenced AuthenticationConfiguration while deploying the kube-apiserver when the API version is not apiserver.config.k8s.io/v1beta1 is now fixed. by @​AleksandarSavchev #12399

🏃 Others

• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/persesdev/perses from v0.50.3 to v0.51.0. by @​gardener-ci-robot #12237

... (truncated)

Commits

• 167c19e Release v1.122.1
• a37c05e Remove field "_type" from bulk requests as it is rejected by Elasticsearch 8 ...
• d292e98 [release-v1.122] Fix BackupBucket reconciliation error by replacing `Strategi...
• efd8c1e Improve defaulting of maxSurge and maxUnavailable fields of in-place upda...
• 41b7275 fix nil pointer dereference in CheckPodCIDRsInNodes when shoot is hibernated ...
• 8ea6c08 Prepare next Development Cycle v1.122.1-dev
• e79e750 Release v1.122.0
• 687f54e [release-v1.122] Fix bug with AuthenticationConfiguration conversion to `v1...
• 9d5930b Fix gardenadm e2e test flakes by waiting for static pods to be rolled out (...
• 032c6a1 Update nginx Docker tag to v1.29.0 (#12388)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

The following third party dependencies have been updated:
-	github.com/gardener/gardener v1.121.2 -> v1.122.1
-	k8s.io/api v0.32.5 -> v0.33.2
-	k8s.io/apimachinery v0.32.5 -> v0.33.2
-	k8s.io/autoscaler/vertical-pod-autoscaler v1.3.1 -> v1.4.1
-	k8s.io/client-go v0.32.5 -> v0.33.2
-	k8s.io/code-generator v0.32.5 -> v0.33.2
-	k8s.io/component-base v0.32.5 -> v0.33.2
-	k8s.io/apiserver v0.32.5  -> v0.33.2
-	sigs.k8s.io/controller-runtime v0.20.4 -> v0.21.0
-	sigs.k8s.io/controller-tools v0.17.3 -> v0.18.0
-	helm.sh/helm/v3 v3.17.3 -> v3.18.3

[gardener-robot-ci-2]

Thank you @dependabot[bot] for your contribution. Before I can start building your PR, a member of the organization must set the required label(s) {'reviewed/ok-to-test'}. Once started, you can check the build status in the PR checks section below.

[vpnachev]

/lgtm
/reviewed ok-to-test