Workload cluster release cloud-director-33.1.0 for CAPVCD

Update Kubernetes to v1.33.6, Flatcar to v4459.2.1 and various component upgrades.

Changes compared to v33.0.1

Components

  • cluster-cloud-director from v2.2.0 to v2.4.0
  • Flatcar from v4230.2.3 to v4459.2.1
  • Kubernetes from v1.33.5 to v1.33.6
  • os-tooling from v1.26.1 to v1.26.2

cluster-cloud-director v2.2.0…v2.4.0

Changed

  • Chart: Update cluster to v4.4.0.
  • Chart: Update cluster to v4.3.0.

Apps

  • cert-exporter from v2.9.12 to v2.9.14
  • cert-manager from v3.9.3 to v3.9.4
  • cilium from v1.3.1 to v1.3.2
  • etcd-defrag from v1.2.1 to v1.2.3
  • etcd-k8s-res-count-exporter from v1.10.9 to v1.10.11
  • k8s-audit-metrics from v0.10.8 to v0.10.10
  • node-exporter from v1.20.7 to v1.20.9
  • observability-policies from v0.0.2 to v0.0.3
  • security-bundle from v1.13.1 to v1.15.0
  • teleport-kube-agent from v0.10.6 to v0.10.7

cert-exporter v2.9.12…v2.9.14

Changed

  • Go: Update dependencies.
  • Go: Update dependencies.

cert-manager v3.9.3…v3.9.4

Added

  • Add E2E tests using apptest-framework for automated PR testing across multiple providers (CAPA, CAPV, CAPZ, CAPVCD).
    • Basic test suite: Validates fresh installations
    • Upgrade test suite: Tests upgrade scenarios and certificate reconciliation
  • Add certificate issuance integration test to cluster-test-suites.

Changed

  • Upgrade cert-manager to v1.18.2.

cilium v1.3.1…v1.3.2

Changed

etcd-defrag v1.2.1…v1.2.3

Changed

  • Chart: Update dependency ahrtr/etcd-defrag to v0.36.0. (#69)
  • Chart: Update dependency ahrtr/etcd-defrag to v0.35.0. (#64)

etcd-k8s-res-count-exporter v1.10.9…v1.10.11

Changed

  • Go: Update dependencies.
  • Go: Update dependencies.

k8s-audit-metrics v0.10.8…v0.10.10

Changed

  • Go: Update dependencies.
  • Go: Update dependencies.

node-exporter v1.20.7…v1.20.9

Changed

  • Go: Update dependencies.
  • Go: Update dependencies.

observability-policies v0.0.2…v0.0.3

Fixed

  • Missing RBAC for kyverno-report-controller

security-bundle v1.13.1…v1.15.0

Added

  • Add kubescape (app) version v0.0.4.

Changed

  • Update kyverno (app) to v0.21.1.
  • Update kyverno-crds (app) to v1.15.0.
  • Update kyverno (app) to v0.20.1.
  • Update kyverno-crds (app) to v1.14.0.
  • Update kyverno-policies (app) to v0.24.0.
  • Update reports-server (app) to v0.0.3.

teleport-kube-agent v0.10.6…v0.10.7

Added

  • Add ephemeral-storage requests and limits to satisfy Kyverno policy require-emptydir-requests-and-limits.

Changed

  • Enable upstream-provided Prometheus PodMonitor to scrape metrics from Teleport Kube Agent pods.