[gardener]

Improvements

• [OPERATOR] Fixed a bug where istiod cannot listen on 443 due to insufficient privileges. (#2616, @mvladev)
• [OPERATOR] An issue causing the seed controller to delete VPA RBAC for ShootedSeed is now fixed. (f5ff014)
• [OPERATOR] Fixes a bug in the maintenance controller that could lead to machine images to not be updated if the Shoot has multiple worker pools. (715e5da)
• [OPERATOR] During deletion of a Shoot, the gardenlet does not redeploy the Worker extension resource anymore, as this sometimes caused leaking resources that blocked the deletion of the Shoot's namespace. (9d111b2)
• [OPERATOR] A bug has been fixed that could cause the gardener-controller-manager to panic if it tries to maintain a Shoot whose .metadata.annotations=nil. (6dd8803)
• [OPERATOR] The gardenlet's /healthz endpoint has been improved to be more stable under certain circumstances like CPU throttling. (5e2718a)
• [OPERATOR] The VPA for shoots running in the seed is now correctly scaled down when the shoot is being hibernated. (09e8306)
• [OPERATOR] Fix a bug where creation of a shoot with ingress addon might fail because of still not created worker. (672ebba)

Docker Images

gardener-apiserver: eu.gcr.io/gardener-project/gardener/apiserver:v1.7.3
gardener-controller-manager: eu.gcr.io/gardener-project/gardener/controller-manager:v1.7.3
gardener-scheduler: eu.gcr.io/gardener-project/gardener/scheduler:v1.7.3
seed-admission-controller: eu.gcr.io/gardener-project/gardener/seed-admission-controller:v1.7.3
gardenlet: eu.gcr.io/gardener-project/gardener/gardenlet:v1.7.3