[gardener]

🐛 Bug Fixes

• [USER] A potential nil pointer exception in the Shoot validation (leading to 503 responses from gardener-apiserver) when validating PID reservations (e.g., in kubeReserved or systemReserved) has been fixed. (#3635, @ialidzhikov)
• [OPERATOR] The istiod deployment in the istio-system namespace now has replicas set to 2 and can be properly scaled by its corresponding VPA. (#3694, @ialidzhikov)
• [OPERATOR] Added resource requests and limits to the apiserver-proxy-pod-mutator container which should allow the corresponding HPA to properly read CPU metrics from the kube-apiserver when SNI is enabled. (#3694, @ialidzhikov)

🏃 Others

• [OPERATOR] istio-ingressgateway memory limit is increased to 2048Mi (#3736, @vpnachev)
• [OPERATOR] VPA minAllowed configuration for metrics-server. (#3698, @vpnachev)
• [OPERATOR] istiod is now scaled automatically by VerticalPodAutoscaler instead of HorizontalPodAutoscaler. This fixes OOMKilled issues on big Seed clusters. (#3639, @mvladev)

Docker Images

gardener-apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.16.5
gardener-controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.16.5
gardener-scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.16.5
gardener-admission-controller: eu.gcr.io/gardener-project/gardener/admission-controller:v1.16.5
gardener-seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.16.5
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.16.5