chore(deps): bump github.com/gardener/gardener from 1.122.3 to 1.127.1

[dependabot]

Bumps github.com/gardener/gardener from 1.122.3 to 1.127.1.

Release notes

Sourced from github.com/gardener/gardener's releases.

v1.127.1

[github.com/gardener/gardener:v1.127.1]

🐛 Bug Fixes

• [OPERATOR] A bug in the gardenlet start-up migration of the Admin and Viewer Kubeconfig ClusterRoleBindings where a ManagedResource secret could be deleted leading to gardenlet being unable to startup is fixed. by @​gardener-ci-robot [#12928]

🏃 Others

• [OPERATOR] Monitoring the Istio Ingress Gateways is temporarily disabled to mitigate a metric leak issue. This does not affect the monitoring of the shoot control planes where these metrics are not used. by @​gardener-ci-robot [#12935]

Helm Charts

• controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.127.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.127.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.127.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.127.1

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.127.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.127.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.127.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.127.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.127.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.127.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.127.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.127.1

v1.127.0

[github.com/gardener/gardener:v1.127.0]

⚠️ Breaking Changes

• [OPERATOR] The ProjectValidator admission plugin is now renamed to ProjectMutator. If you have references to the old name of the admission plugin, make sure to adapt them before upgrading to this version of Gardener. by @​georgibaltiev [#12818]

• [OPERATOR] ⚠️ Gardener does no longer support garden, seed, or shoot clusters with Kubernetes versions <= 1.28. Make sure to upgrade all existing clusters before upgrading to this Gardener version. by @​seshachalam-yv [#12486]

• [USER] It is not allowed anymore to specify a comma ",", as well as duplicate values, within the entries of theShoot.spec.kubernetes.kubeAPIServer.apiAudiences[]. Please update your Shoots accordingly. by @​tobschli [#12788]

• [DEVELOPER] The Priority field for the MachineDeployment API is now required instead of optional. Provider extensions need to make sure that the MachineDeployments they generate specify this field. by @​tobschli [#12742]

• [OPERATOR] The CredentialsRotationWithoutWorkersRollout feature gate has been promoted to GA and is enabled unconditionally. by @​rfranzke [#12857]

• [OPERATOR] The GA-ed and unconditionally enabled NewVPN feature gates is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @​ialidzhikov [#12807]

• [OPERATOR] A Project resource's .spec.namespace field is now validated in the storage layer. It was previously validated in the ProjectValidator admission plugin due to backwards-compatibility reasons. With this change, gardener-apiserver unconditionally accepts only garden and values with prefix garden- as valid Project namespaces. by @​georgibaltiev [#12784]

• [USER] gardener-apiserver no longer serves the /openapi/v2 endpoint. kubectl < 1.27 relies on this endpoint. Make sure to use kubectl 1.27+ against this version of gardener-apiserver. by @​seshachalam-yv [#12486]

• [USER] The spec.seedSelector field in the Shoot API is now validated for invalid label values. by @​shafeeqes [#12708]

• [OPERATOR] The following fields of resources in the core.gardener.cloud group are now validated for invalid label values:

  • spec.seedSelector in the CloudProfile API
  • spec.deployment.seedSelector in the ControllerRegistration API
  • scheduling.seedSelector in the ExposureClass API

  The following fields of resources in the operator.gardener.cloud group are now validated for invalid label values:

  • spec.virtualCluster.gardener.gardenerControllerManager.defaultProjectQuotas.projectSelector in the Garden API

  The following fields of resources in the controllermanager.config.gardener.cloud group are now validated for invalid label values:

  • controllers.project.quotas[].projectSelector

  The following fields of resources in the seedmanagement.gardener.cloud group are now validated for invalid label values:

... (truncated)

Commits

• 4aac742 release v1.127.1
• 8c4ace6 [release-v1.127] Temporarily disable monitoring for Istio Ingress Gateways (#...
• 8c698ec Skip (Admin|Viewer)Kubeconfig migration when MR secret is not found (#12928)
• 6821dba next version: v1.127.1-dev
• dfbd4d5 release v1.127.0
• 8c9a280 provider-local: fix NetworkPolicy for coredns ingress on nodePort (#12891)
• d51a36a Change image source of envoyproxy/envoy (#12868)
• a6be446 Update module k8s.io/autoscaler/vertical-pod-autoscaler to v1.4.2 (#12877)
• 6c54684 Add missing configmaps resource to seed-restriction webhook config (#12858)
• b35aa8a Update module github.com/spf13/pflag to v1.0.10 (#12876)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like github.com/gardener/gardener is no longer being updated by Dependabot, so this is no longer needed.