Workload cluster release cloud-director-33.0.0 for CAPVCD

WARNING: This release enables the OwnerReferencesPermissionEnforcement admission controller by default. This means that only users with delete permission to an object can change its metadata.ownerReferences, and only users with update permission to the finalizers subresource of the referenced owner can change metadata.ownerReferences[x].blockOwnerDeletion. If you have workloads that need to modify these fields, please ensure that the necessary RBAC permissions are in place before upgrading to this release.

Example:

- apiGroups: ["<group>"]
  resources: ["<resource>", "<resource>/finalizers"]
  verbs: ["delete", "..."]  # Add any additional verbs your use case requires

Changes compared to v32.0.0

Components

  • cluster-cloud-director from v1.0.0 to v2.2.0
  • Flatcar from v4230.2.2 to v4230.2.3
  • Kubernetes from v1.32.9 to v1.33.5

cluster-cloud-director v1.0.0…v2.2.0

Changed

  • Chart: Update cluster to v4.2.0.
  • Chart: Update cluster to v4.1.0.
  • Chart: Update cluster to v4.0.3.
  • Chart: Update cluster to v4.0.2.
  • Chart: Update cluster to v4.0.1.

Apps

  • cert-exporter from v2.9.9 to v2.9.12
  • cert-manager from v3.9.2 to v3.9.3
  • cilium from v1.3.0 to v1.3.1
  • coredns from v1.27.0 to v1.28.2
  • etcd-defrag from v1.0.8 to v1.2.1
  • etcd-k8s-res-count-exporter from v1.10.7 to v1.10.9
  • k8s-audit-metrics from v0.10.6 to v0.10.8
  • node-exporter from v1.20.5 to v1.20.7
  • observability-bundle from v2.2.2 to v2.3.2
  • vertical-pod-autoscaler from v6.0.1 to v6.1.1
  • vertical-pod-autoscaler-crd from v4.0.1 to v4.1.1

cert-exporter v2.9.9…v2.9.12

Changed

  • Go: Update dependencies.
  • Chart: Add value to toggle creation of Daemonset resources.
  • Go: Update dependencies.

cert-manager v3.9.2…v3.9.3

Changed

  • Fix missing targetPort in cainjector-service

cilium v1.3.0…v1.3.1

Changed

coredns v1.27.0…v1.28.2

Changed

  • Update coredns image to 1.13.1.
  • Add value to toggle creation of controlplane deployment.
  • Update coredns image to 1.13.0.

etcd-defrag v1.0.8…v1.2.1

Changed

  • Chart: Update dependency ahrtr/etcd-defrag to v0.34.0. (#62)
  • Chart: Update dependency ahrtr/etcd-defrag to v0.33.0. (#60)
  • Update Kyverno API to v2 for policy exceptions
  • Chart: Update dependency ahrtr/etcd-defrag to v0.32.0. (#57)

etcd-k8s-res-count-exporter v1.10.7…v1.10.9

Changed

  • Go: Update dependencies.
  • Update Kyverno API to v2 for policy exceptions
  • Go: Update dependencies.

k8s-audit-metrics v0.10.6…v0.10.8

Changed

  • Go: Update dependencies.
  • Update Kyverno API to v2 for policy exceptions
  • Go: Update dependencies.

node-exporter v1.20.5…v1.20.7

Changed

  • Go: Update dependencies.
  • Update Kyverno API to v2 for policy exceptions
  • Go: Update dependencies.

observability-bundle v2.2.2…v2.3.2

Added

  • Add KSM metrics for cloudnative-pg Cluster objects

Changed

  • Update alloy-app to 0.15.0
    • Bumps alloy to 1.11.0

Fixed

  • Update alloy-app to 0.15.1
    • Bumps alloy to 1.11.2

vertical-pod-autoscaler v6.0.1…v6.1.1

Changed

  • Chart: Update Helm release vertical-pod-autoscaler to v11.1.1. (#375)
  • Chart: Update Helm release vertical-pod-autoscaler to v11.1.0. (#372)

vertical-pod-autoscaler-crd v4.0.1…v4.1.1

Changed

  • Chart: Sync to upstream. (#166)
  • Chart: Sync to upstream. (#164)