Update Helm release provider-openstack to v1.44.0 (#1850)

Co-authored-by: 23t-machine-user <[email protected]>

Author: 23t-machine-user

configuration/configuration/images.yaml

@@ -853,7 +853,7 @@ provider-openstack:
         name: cloud-controller-manager
         repository: registry.k8s.io/provider-os/openstack-cloud-controller-manager
         sourceRepository: github.com/kubernetes/cloud-provider-openstack
-        tag: v1.30.1
+        tag: v1.30.2
         targetVersion: 1.30.x
       - labels:
           - name: gardener.cloud/cve-categorisation
@@ -867,7 +867,7 @@ provider-openstack:
         name: cloud-controller-manager
         repository: registry.k8s.io/provider-os/openstack-cloud-controller-manager
         sourceRepository: github.com/kubernetes/cloud-provider-openstack
-        tag: v1.31.1
+        tag: v1.31.2
         targetVersion: '>= 1.31'
       - labels:
           - name: gardener.cloud/cve-categorisation
@@ -964,8 +964,22 @@ provider-openstack:
         name: csi-driver-cinder
         repository: registry.k8s.io/provider-os/cinder-csi-plugin
         sourceRepository: github.com/kubernetes/cloud-provider-openstack
-        tag: v1.30.1
-        targetVersion: '>= 1.30'
+        tag: v1.30.2
+        targetVersion: 1.30.x
+      - labels:
+          - name: gardener.cloud/cve-categorisation
+            value:
+              authentication_enforced: false
+              availability_requirement: low
+              confidentiality_requirement: high
+              integrity_requirement: high
+              network_exposure: protected
+              user_interaction: end-user
+        name: csi-driver-cinder
+        repository: registry.k8s.io/provider-os/cinder-csi-plugin
+        sourceRepository: github.com/kubernetes/cloud-provider-openstack
+        tag: v1.31.2
+        targetVersion: '>= 1.31'
       - labels:
           - name: gardener.cloud/cve-categorisation
             value:
@@ -1048,7 +1062,7 @@ provider-openstack:
         name: csi-driver-manila
         repository: registry.k8s.io/provider-os/manila-csi-plugin
         sourceRepository: github.com/kubernetes/cloud-provider-openstack
-        tag: v1.30.1
+        tag: v1.30.2
         targetVersion: 1.30.x
       - labels:
           - name: gardener.cloud/cve-categorisation
@@ -1062,7 +1076,7 @@ provider-openstack:
         name: csi-driver-manila
         repository: registry.k8s.io/provider-os/manila-csi-plugin
         sourceRepository: github.com/kubernetes/cloud-provider-openstack
-        tag: v1.31.1
+        tag: v1.31.2
         targetVersion: '>= 1.31'
       - labels:
           - name: gardener.cloud/cve-categorisation

configuration/configuration/templates/extensions.yaml

@@ -62,7 +62,7 @@ stringData:
 {{- end }}
 
     provider-openstack:
-      version: 1.43.1
+      version: 1.44.0
       admission:
         enabled: true
 {{- if .Values.registryOverwrite }}

docs/release-notes/next.md

@@ -1121,4 +1121,36 @@ no release notes available
 - scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.110.0`
 
 
+</details>
+
+<details>
+<summary><b>Update provider-openstack to <code>1.44.0</code></b></summary>
+
+# [gardener/gardener-extension-provider-openstack]
+
+## ⚠️ Breaking Changes
+
+- `[OPERATOR]` The Helm charts for the `application` and `runtime` parts of the gardener-extension-admission-openstack admission controller have been separated into standalone charts. These charts now assume a Garden setup with a virtual garden. Both charts must be deployed individually: the `runtime` chart on the Garden runtime cluster, and the `application` chart on the virtual garden. Additionally, the intermediate `global` level in the Helm values has been removed, so you may need to adjust your provided values accordingly. by @MartinWeindel [#901]
+## ✨ New Features
+
+- `[OPERATOR]` Adjustments for additional deployment of extension and admission controller on Garden runtime cluster by gardener-operator. by @MartinWeindel [#901]
+## 🐛 Bug Fixes
+
+- `[OPERATOR]` management of the router interface missed some of openstack's owner labels assigned to the routers network interface causing the infrastructure conciliation to fail due to dublicated router network interfaces by @crigertg [#917]
+## 🏃 Others
+
+- `[OPERATOR]` Update Cinder CSI `v1.30.1` -> `v1.31.2` for shoots on v1.31.x by @kon-angelo [#915]
+- `[OPERATOR]` Add `NamespacedCloudProfile` admission mutation and validation to support custom machine images and types. by @LucaBernstein [#911]
+- `[OPERATOR]` Update Cinder CSI `v1.30.1` -> `v1.30.2` for shoots on v1.30.x by @kon-angelo [#915]
+- `[USER]` Shoots with NodeLocalDNS enabled will use UDP instead of TCP for upstream DNS queries by default to avoid performance issues on OpenStack. by @domdom82 [#925]
+
+## Helm Charts
+- admission-openstack-application: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.44.0`
+- admission-openstack-runtime: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.44.0`
+- provider-openstack: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.44.0`
+## Docker Images
+- gardener-extension-admission-openstack: `europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.44.0`
+- gardener-extension-provider-openstack: `europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.44.0`
+
+
 </details>

helmcharts/provider-openstack/Chart.yaml

@@ -3,9 +3,6 @@ dependencies:
 - condition: controller.enabled
   name: controller
   repository: ""
-- condition: gardener-extension-admission-openstack.enabled
-  name: gardener-extension-admission-openstack
-  repository: ""
 description: A helmchart for provider-openstack
 name: provider-openstack
-version: 1.43.1
+version: 1.44.0

helmcharts/provider-openstack/RELEASE.md

@@ -1,13 +1,25 @@
 # [gardener/gardener-extension-provider-openstack]
 
+## ⚠️ Breaking Changes
+
+- `[OPERATOR]` The Helm charts for the `application` and `runtime` parts of the gardener-extension-admission-openstack admission controller have been separated into standalone charts. These charts now assume a Garden setup with a virtual garden. Both charts must be deployed individually: the `runtime` chart on the Garden runtime cluster, and the `application` chart on the virtual garden. Additionally, the intermediate `global` level in the Helm values has been removed, so you may need to adjust your provided values accordingly. by @MartinWeindel [#901]
+## ✨ New Features
+
+- `[OPERATOR]` Adjustments for additional deployment of extension and admission controller on Garden runtime cluster by gardener-operator. by @MartinWeindel [#901]
+## 🐛 Bug Fixes
+
+- `[OPERATOR]` management of the router interface missed some of openstack's owner labels assigned to the routers network interface causing the infrastructure conciliation to fail due to dublicated router network interfaces by @crigertg [#917]
 ## 🏃 Others
 
-- `[OPERATOR]` Fix an issue where the CSI-Provisioner was missing 'patch' permissions on PVs by @AndreasBurger [#924]
+- `[OPERATOR]` Update Cinder CSI `v1.30.1` -> `v1.31.2` for shoots on v1.31.x by @kon-angelo [#915]
+- `[OPERATOR]` Add `NamespacedCloudProfile` admission mutation and validation to support custom machine images and types. by @LucaBernstein [#911]
+- `[OPERATOR]` Update Cinder CSI `v1.30.1` -> `v1.30.2` for shoots on v1.30.x by @kon-angelo [#915]
+- `[USER]` Shoots with NodeLocalDNS enabled will use UDP instead of TCP for upstream DNS queries by default to avoid performance issues on OpenStack. by @domdom82 [#925]
 
 ## Helm Charts
-- admission-openstack-application: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.43.1`
-- admission-openstack-runtime: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.43.1`
-- provider-openstack: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.43.1`
+- admission-openstack-application: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-application:v1.44.0`
+- admission-openstack-runtime: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-openstack-runtime:v1.44.0`
+- provider-openstack: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/provider-openstack:v1.44.0`
 ## Docker Images
-- gardener-extension-admission-openstack: `europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.43.1`
-- gardener-extension-provider-openstack: `europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.43.1`
+- gardener-extension-admission-openstack: `europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.44.0`
+- gardener-extension-provider-openstack: `europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.44.0`

helmcharts/provider-openstack/charts/controller/Chart.yaml

@@ -1,4 +1,4 @@
 apiVersion: v2
 description: Helmchart for controllerregistration of provider-openstack
 name: controller
-version: 1.43.1
+version: 1.44.0