Workload cluster release azure-31.1.1 for CAPZ

Changes compared to v30.1.4

Components

• cluster-azure from v2.1.2 to v2.3.1
• Flatcar from v4152.2.1 to v4152.2.3
• Kubernetes from v1.30.11 to v1.31.11
• os-tooling from v1.24.0 to v1.26.1

cluster-azure v2.1.2…v2.3.1

Changed

• Chart: Update cluster to v2.5.2.
• Chart: Update Cilium configuration.
• Chart: Update cluster to v2.5.0.
• Chart: Update cluster to v2.4.0.

Apps

• azure-cloud-controller-manager from v1.30.14-gs1 to v1.31.8-gs1
• azure-cloud-node-manager from v1.30.14-gs1 to v1.31.8-gs1
• azuredisk-csi-driver from v1.30.12-gs1 to v1.31.11-gs1
• azurefile-csi-driver from v1.30.10-gs1 to v1.31.7-gs1
• capi-node-labeler from v1.0.2 to v1.1.2
• cert-exporter from v2.9.5 to v2.9.8
• cert-manager from v3.9.0 to v3.9.1
• cilium from v0.31.5 to v1.2.2
• coredns from v1.24.0 to v1.26.0
• etcd-defrag from v1.0.2 to v1.0.6
• etcd-k8s-res-count-exporter from v1.10.3 to v1.10.6
• k8s-audit-metrics from v0.10.2 to v0.10.5
• k8s-dns-node-cache from v2.8.1 to v2.9.0
• net-exporter from v1.22.0 to v1.23.0
• node-exporter from v1.20.2 to v1.20.4
• observability-bundle from v1.11.0 to v2.0.0
• observability-policies from v0.0.1 to v0.0.2
• security-bundle from v1.10.1 to v1.12.0
• teleport-kube-agent from v0.10.4 to v0.10.6
• vertical-pod-autoscaler from v5.4.0 to v5.5.1
• vertical-pod-autoscaler-crd from v3.2.0 to v3.3.1

azure-cloud-controller-manager v1.30.14-gs1…v1.31.8-gs1

Changed

• Chart: Update to upstream v1.31.8. (#112)

azure-cloud-node-manager v1.30.14-gs1…v1.31.8-gs1

Changed

• Chart: Update to upstream v1.31.8. (#105)
• Update PolicyExceptions apiVersion to v2.

azuredisk-csi-driver v1.30.12-gs1…v1.31.11-gs1

Changed

• Chart: Update to upstream v1.31.11.

azurefile-csi-driver v1.30.10-gs1…v1.31.7-gs1

Changed

• Chart: Update to upstream v1.31.7.

capi-node-labeler v1.0.2…v1.1.2

Changed

• Go: Update dependencies.
• Go: Update dependencies.
• Improve Control Plane node detection.
• Taint Control Plane nodes if not already tainted.
• Go: Update dependencies.

cert-exporter v2.9.5…v2.9.8

Changed

• Go: Update dependencies.
• Go: Update dependencies.
• Fix linting issues.
• Go: Update dependencies.

cert-manager v3.9.0…v3.9.1

Added

• Added Vertical Pod Autoscaler support for controller pods.
• Added renovate configutarion

Removed

• Removed dependabot configuration

cilium v0.31.5…v1.2.2

Changed

• Upgrade Cilium to v1.17.6.
• Updated E2E tests to use apptest-framework v1.14.0
• Increase Cilium operator resource limits.
• Enable conntrack accounting in Cilium agent by default.
• Re-enable Cilium agent and operator metrics port.
• Add resource requests and limits to Hubble UI and Relay.
• Add resource requests and limits to Cilium Operator.
• Upgrade Cilium to v1.17.4.
• Cilium v1.17.4 disables kubernetes api connectivity check for liveness probes. (Upstream PR: https://github.com/cilium/cilium/pull/38703)
• Upgrade Cilium to v1.17.3.
• Upgrade Cilium to v1.17.0.
• Use upstream default value for prometheus.metrics.
• Enable Envoy Proxy in standalone DaemonSet.

Removed

• Remove deprecated “partial” mode from Kube Proxy Replacement options.

coredns v1.24.0…v1.26.0

Changed

• Update coredns image to 1.12.2.
• Update coredns image to 1.12.1.

etcd-defrag v1.0.2…v1.0.6

Changed

• Chart: Update dependency ahrtr/etcd-defrag to v0.29.0. (#43)
• Chart: Update dependency ahrtr/etcd-defrag to v0.28.0. (#34)
• Chart: Update dependency ahrtr/etcd-defrag to v0.27.0. (#29)
• Chart: Update dependency ahrtr/etcd-defrag to v0.26.0. (#22)

etcd-k8s-res-count-exporter v1.10.3…v1.10.6

Changed

• Go: Update dependencies.
• Go: Update dependencies.

Fixed

• Fix linting issues.
• Go: Update dependencies.

k8s-audit-metrics v0.10.2…v0.10.5

Changed

• Go: Update dependencies.
• Go: Update dependencies.

Fixed

• Fix linting issues.
• Go: Update dependencies.

k8s-dns-node-cache v2.8.1…v2.9.0

Changed

• Upgrade application to version 1.26.4 (includes coredns 1.11.3)
• Increase ServiceMonitor’s scrapping interval to 1m.
• Remove obsolete PSPs

net-exporter v1.22.0…v1.23.0

Changed

• Check for errors when closing connections.
• Switch from Endpoints to EndpointSlices for neighbors discovery.

node-exporter v1.20.2…v1.20.4

Changed

• Go: Update to v1.24.5.
• Go: Update dependencies.

observability-bundle v1.11.0…v2.0.0

Added

• Add support for enabling pre-configured custom resources in KSM
• Add metrics containing labels for Crossplane resources

Changed

• Upgrade alloy-app from 0.10.0 to 0.11.0
• This bumps the version of Alloy from 1.8.3 to 1.9.0
• Upgrade alloy-app from 0.9.0 to 0.10.0
  • This bumps the version of Alloy from 1.7.1 to 1.8.3
• Reconfigure Flux-related part of the KSM to use wildcards instead of hardcoded versions.
• Rename Flux-related metrics produced by the KSM.
• Upgrade kube-prometheus-stack to 72.3.0
  • Bumps prometheus-operator to 0.82.0
  • Bumps prometheus-operator CRDs to 0.82.0
• Upgrade kube-prometheus-stack to 72.3.0
  • Bumps prometheus-operator to 0.82.0
• Upgrade kube-prometheus-stack from 69.5.1 to 70.1.1
  • Bumps prometheus-operator to 0.81.0
  • Bumps prometheus to 3.2.1

Fixed

• Fix catalog for alloy apps as it is now pushed to the default catalog.

Removed

• Clean up old and deprecated telemetry collectors:
  • promtail
  • grafana-agent
  • promtheus-agent
• Disable PodSecurityPolicies by default as PodSecurityPolicies are deprecated and removed in Kubernetes v1.25+ clusters

observability-policies v0.0.1…v0.0.2

Changed

• Add Cluster Role to allow latest Kyverno versions to work (https://github.com/giantswarm/giantswarm/issues/33416)
• Switch .Values.disabled to .Values.enabled to follow best practices.

security-bundle v1.10.1…v1.12.0

Added

• Add policy-api-crds app to manage Policy API CRDs.

Changed

• Update trivy-operator (app) to v0.11.1.
• Update trivy (app) to v0.14.0.
• Update falco (app) to v0.10.1.
• Update cloudnative-pg (app) to v0.0.10.
• Update starboard-exporter (app) to v0.8.2.
• Updated E2E tests to use apptest-framework v1.14.0
• Update trivy (app) to v0.13.4.
• Update cloudnative-pg (app) to v0.0.7.
• Update starboard-exporter (app) to v0.8.1.
• Update kyverno-policy-operator (app) to v0.0.11.
• Update cloudnative-pg (app) to v0.0.9.

teleport-kube-agent v0.10.4…v0.10.6

Added

• Set Home URL in chart metadata.

Changed

• AppVersion upgrade to 17.5.4

vertical-pod-autoscaler v5.4.0…v5.5.1

Changed

• Chart: Update Helm release vertical-pod-autoscaler to v10.2.1. (#355)
• Chart: Update Helm release vertical-pod-autoscaler to v10.1.0. (#350)
• Chart: Update Helm release vertical-pod-autoscaler to v10.2.0. (#351)
• Chart: Update Helm release vertical-pod-autoscaler to v10.0.1. (#346)

vertical-pod-autoscaler-crd v3.2.0…v3.3.1

Changed

• Chart: Sync to upstream. (#146)
• Chart: Sync to upstream. (#140)
• Chart: Sync to upstream. (#136)