Workload cluster release aws-32.0.0 for CAPA

WARNING: With Flatcar 4230.2.0, cgroups v1 backwards compatibility has been removed. This means that enabling legacy cgroups v1 is no longer supported and nodes still using them will fail to update.

Changes compared to v31.1.2

Components

  • cluster-aws from v3.6.2 to v5.0.0
  • Flatcar from v4152.2.3 to v4230.2.2
  • Kubernetes from v1.31.11 to v1.32.9

cluster-aws v3.6.2…v5.0.0

Added

  • Add global.connectivity.network.nodePortIngressRuleCidrBlocks value to allow configuring the CIDRs in the NodePort security group ingress rules.
  • Expose new machinepool values to configure the karpenter node pools:
  • consolidateAfter
  • consolidationBudgets
  • consolidationPolicy

Changed

  • Chart: Update cluster to v3.0.1.
    • BREAKING CHANGE: Cgroups v1 is not supported anymore. The .internal.advancedConfiguration.cgroupsv1 and .global.nodePools.().cgroupsv1 flags have been removed.
    • Chart: Simplify containerd configuration by using a single config file for both control-plane and worker nodes.
  • Chart: Update cluster to v2.6.2.
  • Chart: Update cluster to v2.6.1.

Fixed

  • Add cluster chart nodepool fields to the schema.

Removed

  • Remove Helm chart that creates karpenter node pools, because they will be created by a kubernetes controller running in the management cluster.

Apps

  • capi-node-labeler from v1.1.2 to v1.1.3
  • cert-exporter from v2.9.8 to v2.9.9
  • cert-manager from v3.9.1 to v3.9.2
  • cilium from v1.2.2 to v1.3.0
  • cloud-provider-aws from v1.31.5-gs1 to v1.32.3
  • cluster-autoscaler from v1.31.3-gs1 to v1.32.2-gs1
  • coredns from v1.26.0 to v1.27.0
  • etcd-defrag from v1.0.6 to v1.0.8
  • etcd-k8s-res-count-exporter from v1.10.6 to v1.10.7
  • k8s-audit-metrics from v0.10.5 to v0.10.6
  • k8s-dns-node-cache from v2.9.0 to v2.9.1
  • karpenter-bundle from v2.1.0 to v2.2.0
  • metrics-server from v2.6.0 to v2.7.0
  • node-exporter from v1.20.4 to v1.20.5
  • observability-bundle from v2.0.0 to v2.2.2
  • vertical-pod-autoscaler from v5.5.1 to v6.0.1
  • vertical-pod-autoscaler-crd from v3.3.1 to v4.0.1

capi-node-labeler v1.1.2…v1.1.3

Changed

  • Go: Update dependencies.

cert-exporter v2.9.8…v2.9.9

Changed

  • Go: Update dependencies.

cert-manager v3.9.1…v3.9.2

Changed

  • Add alloy ingress rules for cainjector metrics ingestion.

cilium v1.2.2…v1.3.0

Changed

  • Upgrade Cilium to v1.18.1.
  • Improve the k8s service host autodiscovery mechanism
  • Upgrade Cilium to v1.17.7.

cloud-provider-aws v1.31.5-gs1…v1.32.3

Changed

  • Chart: Update to upstream v1.32.3.
  • Chart: Update to upstream v1.32.3.

cluster-autoscaler v1.31.3-gs1…v1.32.2-gs1

Changed

  • Chart: Update to upstream v1.32.2.

coredns v1.26.0…v1.27.0

Changed

  • Updated E2E tests to use apptest-framework v1.14.0
  • Update coredns image to 1.12.3.

etcd-defrag v1.0.6…v1.0.8

Changed

  • Chart: Update dependency ahrtr/etcd-defrag to v0.31.0. (#52)
  • Chart: Update dependency ahrtr/etcd-defrag to v0.30.0. (#46)

etcd-k8s-res-count-exporter v1.10.6…v1.10.7

Changed

  • Go: Update dependencies.

k8s-audit-metrics v0.10.5…v0.10.6

Changed

  • Go: Update dependencies.

k8s-dns-node-cache v2.9.0…v2.9.1

Changed

  • Update PolicyException apiVersion to v2.

karpenter-bundle v2.1.0…v2.2.0

Changed

  • Change karpenter to it’s own namespace.
  • Bump karpenter to v1.6.3.
  • Allow changing karpenter app versions.

metrics-server v2.6.0…v2.7.0

Changed

  • Chart: Update PolicyExceptions to v2.

node-exporter v1.20.4…v1.20.5

Changed

  • Go: Update dependencies.

observability-bundle v2.0.0…v2.2.2

Added

  • Add KSM metrics for IRSAClaim objects

Changed

  • Upgrade kube-prometheus-stack-app to 18.1.0
    • Add relabeling rules from cluster-api-monitoring-app so that cluster_id label points to the workload cluster name as expected in some alert definitions
  • Upgrade kube-prometheus-stack to 77.0.1
    • Bumps prometheus-operator and CRDs to 0.85.0
  • Update alloy-app to 0.13.0
  • Upgrade kube-prometheus-stack to 76.4.0
    • Bumps prometheus-operator and CRDs to 0.84.1
    • Bumps prometheus to 3.5.0
  • Update alloy-app to 0.12.1
    • Bumps alloy to 1.10.1

vertical-pod-autoscaler v5.5.1…v6.0.1

Changed

  • Chart: Update Helm release vertical-pod-autoscaler to v11.0.1. (#370)
  • Chart: Update Helm release vertical-pod-autoscaler to v11.0.0. (#362)

vertical-pod-autoscaler-crd v3.3.1…v4.0.1

Changed

  • Chart: Sync to upstream. (#162)
  • Chart: Sync to upstream. (#154)