Update to github.com/gardener/gardener@v1.101.0

cmd/gardener-extension-provider-ironcore/app/app.go

@@ -214,11 +214,11 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 			bastionCtrlOpts.Completed().Apply(&bastioncontroller.DefaultAddOptions.Controller)
 			backupBucketCtrlOpts.Completed().Apply(&backupbucketcontroller.DefaultAddOptions.Controller)
 			backupEntryCtrlOpts.Completed().Apply(&backupentrycontroller.DefaultAddOptions.Controller)
-			reconcileOpts.Completed().Apply(&bastioncontroller.DefaultAddOptions.IgnoreOperationAnnotation)
-			reconcileOpts.Completed().Apply(&infrastructurecontroller.DefaultAddOptions.IgnoreOperationAnnotation)
-			reconcileOpts.Completed().Apply(&workercontroller.DefaultAddOptions.IgnoreOperationAnnotation)
-			reconcileOpts.Completed().Apply(&backupbucketcontroller.DefaultAddOptions.IgnoreOperationAnnotation)
-			reconcileOpts.Completed().Apply(&backupentrycontroller.DefaultAddOptions.IgnoreOperationAnnotation)
+			reconcileOpts.Completed().Apply(&bastioncontroller.DefaultAddOptions.IgnoreOperationAnnotation, nil)
+			reconcileOpts.Completed().Apply(&infrastructurecontroller.DefaultAddOptions.IgnoreOperationAnnotation, nil)
+			reconcileOpts.Completed().Apply(&workercontroller.DefaultAddOptions.IgnoreOperationAnnotation, nil)
+			reconcileOpts.Completed().Apply(&backupbucketcontroller.DefaultAddOptions.IgnoreOperationAnnotation, nil)
+			reconcileOpts.Completed().Apply(&backupentrycontroller.DefaultAddOptions.IgnoreOperationAnnotation, nil)
 			workercontroller.DefaultAddOptions.GardenCluster = gardenCluster
 
 			if _, err := webhookOptions.Completed().AddToManager(ctx, mgr, nil); err != nil {

example/20-crd-extensions.gardener.cloud_backupbuckets.yaml

@@ -61,6 +61,13 @@ spec:
               Specification of the BackupBucket.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               providerConfig:
                 description: ProviderConfig is the provider specific configuration.
                 type: object

example/20-crd-extensions.gardener.cloud_backupentries.yaml

@@ -75,6 +75,13 @@ spec:
                 description: BucketName is the name of backup bucket for this Backup
                   Entry.
                 type: string
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               providerConfig:
                 description: ProviderConfig is the provider specific configuration.
                 type: object

example/20-crd-extensions.gardener.cloud_bastions.yaml

@@ -56,6 +56,13 @@ spec:
               Spec is the specification of this Bastion.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               ingress:
                 description: Ingress controls from where the created bastion host
                   should be reachable.

example/20-crd-extensions.gardener.cloud_containerruntimes.yaml

@@ -61,6 +61,13 @@ spec:
                 description: BinaryPath is the Worker's machine path where container
                   runtime extensions should copy the binaries to.
                 type: string
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               providerConfig:
                 description: ProviderConfig is the provider specific configuration.
                 type: object

example/20-crd-extensions.gardener.cloud_controlplanes.yaml

@@ -60,6 +60,13 @@ spec:
               Specification of the ControlPlane.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               infrastructureProviderStatus:
                 description: |-
                   InfrastructureProviderStatus contains the provider status that has

example/20-crd-extensions.gardener.cloud_dnsrecords.yaml

@@ -62,6 +62,13 @@ spec:
               Specification of the DNSRecord.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               name:
                 description: Name is the fully qualified domain name, e.g. "api.<shoot
                   domain>". This field is immutable.

example/20-crd-extensions.gardener.cloud_extensions.yaml

@@ -56,6 +56,13 @@ spec:
               Specification of the Extension.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               providerConfig:
                 description: ProviderConfig is the provider specific configuration.
                 type: object

example/20-crd-extensions.gardener.cloud_infrastructures.yaml

@@ -60,6 +60,13 @@ spec:
               Specification of the Infrastructure.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               providerConfig:
                 description: ProviderConfig is the provider specific configuration.
                 type: object
@@ -207,6 +214,26 @@ spec:
                 - state
                 - type
                 type: object
+              networking:
+                description: Networking contains information about cluster networking
+                  such as CIDRs.
+                properties:
+                  nodes:
+                    description: Nodes are the CIDRs of the node network.
+                    items:
+                      type: string
+                    type: array
+                  pods:
+                    description: Pods are the CIDRs of the pod network.
+                    items:
+                      type: string
+                    type: array
+                  services:
+                    description: Services are the CIDRs of the service network.
+                    items:
+                      type: string
+                    type: array
+                type: object
               nodesCIDR:
                 description: |-
                   NodesCIDR is the CIDR of the node network that was optionally created by the acting extension controller.

example/20-crd-extensions.gardener.cloud_networks.yaml

@@ -62,6 +62,13 @@ spec:
               Specification of the Network.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               ipFamilies:
                 description: |-
                   IPFamilies specifies the IP protocol versions to use for shoot networking. This field is immutable.

example/20-crd-extensions.gardener.cloud_operatingsystemconfigs.yaml

@@ -61,14 +61,95 @@ spec:
               Specification of the OperatingSystemConfig.
               If the object's deletion timestamp is set, this field is immutable.
             properties:
+              class:
+                description: Class holds the extension class used to control the responsibility
+                  for multiple provider extensions.
+                type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               criConfig:
                 description: CRI config is a structure contains configurations of
                   the CRI library
                 properties:
+                  containerd:
+                    description: |-
+                      ContainerdConfig is the containerd configuration.
+                      Only to be set for OperatingSystemConfigs with purpose 'reconcile'.
+                    properties:
+                      registries:
+                        description: Registries configures the registry hosts for
+                          containerd.
+                        items:
+                          description: RegistryConfig contains registry configuration
+                            options.
+                          properties:
+                            hosts:
+                              description: |-
+                                Hosts are the registry hosts.
+                                It corresponds to the host fields in the `hosts.toml` file, see https://github.com/containerd/containerd/blob/c51463010e0682f76dfdc10edc095e6596e2764b/docs/hosts.md#host-fields-in-the-toml-table-format for more information.
+                              items:
+                                description: RegistryHost contains configuration values
+                                  for a registry host.
+                                properties:
+                                  caCerts:
+                                    description: CACerts are paths to public key certificates
+                                      used for TLS.
+                                    items:
+                                      type: string
+                                    type: array
+                                  capabilities:
+                                    description: |-
+                                      Capabilities determine what operations a host is
+                                      capable of performing. Defaults to
+                                       - pull
+                                       - resolve
+                                    items:
+                                      description: RegistryCapability specifies an
+                                        action a client can perform against a registry.
+                                      type: string
+                                    type: array
+                                  url:
+                                    description: URL is the endpoint address of the
+                                      registry mirror.
+                                    type: string
+                                required:
+                                - url
+                                type: object
+                              type: array
+                            readinessProbe:
+                              description: ReadinessProbe determines if host registry
+                                endpoints should be probed before they are added to
+                                the containerd config.
+                              type: boolean
+                            server:
+                              description: |-
+                                Server is the URL to registry server of this upstream.
+                                It corresponds to the server field in the `hosts.toml` file, see https://github.com/containerd/containerd/blob/c51463010e0682f76dfdc10edc095e6596e2764b/docs/hosts.md#server-field for more information.
+                              type: string
+                            upstream:
+                              description: Upstream is the upstream name of the registry.
+                              type: string
+                          required:
+                          - upstream
+                          type: object
+                        type: array
+                      sandboxImage:
+                        description: SandboxImage configures the sandbox image for
+                          containerd.
+                        type: string
+                    required:
+                    - sandboxImage
+                    type: object
                   name:
                     description: Name is a mandatory string containing the name of
                       the CRI library. Supported values are `containerd`.
+                    enum:
+                    - containerd
                     type: string
+                    x-kubernetes-validations:
+                    - message: Value is immutable
+                      rule: self == oldSelf
                 required:
                 - name
                 type: object
@@ -141,7 +222,7 @@ spec:
                     permissions:
                       description: |-
                         Permissions describes with which permissions the file should get written to the file system.
-                        Should be defaulted to octal 0644.
+                        If no permissions are set, the operating system's defaults are used.
                       format: int32
                       type: integer
                   required:
@@ -157,17 +238,9 @@ spec:
                 description: |-
                   Purpose describes how the result of this OperatingSystemConfig is used by Gardener. Either it
                   gets sent to the `Worker` extension controller to bootstrap a VM, or it is downloaded by the
-                  cloud-config-downloader script already running on a bootstrapped VM.
+                  gardener-node-agent already running on a bootstrapped VM.
                   This field is immutable.
                 type: string
-              reloadConfigFilePath:
-                description: |-
-                  ReloadConfigFilePath is the path to the generated operating system configuration. If set, controllers
-                  are asked to use it when determining the .status.command of this resource. For example, if for CoreOS
-                  the reload-path might be "/var/lib/config"; then the controller shall set .status.command to
-                  "/usr/bin/coreos-cloudinit --from-file=/var/lib/config".
-                  TODO(rfranzke): Deprecate this field once UseGardenerNodeAgent feature gate is promoted to GA.
-                type: string
               type:
                 description: Type contains the instance of the resource's kind.
                 type: string
@@ -249,13 +322,6 @@ spec:
                 required:
                 - secretRef
                 type: object
-              command:
-                description: |-
-                  Command is the command whose execution renews/reloads the cloud config on an existing VM, e.g.
-                  "/usr/bin/reload-cloud-config -from-file=<path>". The <path> is optionally provided by Gardener
-                  in the .spec.reloadConfigFilePath field.
-                  TODO(rfranzke): Deprecate this field once UseGardenerNodeAgent feature gate is promoted to GA.
-                type: string
               conditions:
                 description: Conditions represents the latest available observations
                   of a Seed's current state.
@@ -370,7 +436,7 @@ spec:
                     permissions:
                       description: |-
                         Permissions describes with which permissions the file should get written to the file system.
-                        Should be defaulted to octal 0644.
+                        If no permissions are set, the operating system's defaults are used.
                       format: int32
                       type: integer
                   required:
@@ -426,14 +492,6 @@ spec:
                   - name
                   type: object
                 type: array
-              files:
-                description: |-
-                  Files is a list of file paths that are part of the generated Cloud Config and shall be
-                  written to the host's file system.
-                  TODO(rfranzke): Deprecate this field once UseGardenerNodeAgent feature gate is promoted to GA.
-                items:
-                  type: string
-                type: array
               lastError:
                 description: LastError holds information about the last occurred error
                   during an operation.
@@ -537,14 +595,6 @@ spec:
                   what ever data it needs.
                 type: object
                 x-kubernetes-preserve-unknown-fields: true
-              units:
-                description: |-
-                  Units is a list of systemd unit names that are part of the generated Cloud Config and shall be
-                  restarted when a new version has been downloaded.
-                  TODO(rfranzke): Deprecate this field once UseGardenerNodeAgent feature gate is promoted to GA.
-                items:
-                  type: string
-                type: array
             type: object
         required:
         - spec