New MRs

CAPD

• MR: Enable prevent-mgmt-cluster policy only if kyverno is enabled ~CI-breakage ~capd
  
• MR: Set metallb ignoreexcludelb for cabpk deployed cluster ~capd ~kubeadm
  
• MR: Update gcr.io/k8s-staging-cluster-api/capd-manager docker tag to v1.6.5 ~capd ~renovate
  
• MR: Cleanup for the patches of all controllers ~capd ~kubeadm
  
• MR: Solve proxy issue for capd+rke2 deployment ~capd ~rke2
  

CAPM3

• MR: Capm3: enable longhorn unit in workload cluster ~baremetal
  
• MR: Do no set automatedcleaningmode in baremetalhosts ~baremetal ~longhorn
  
• MR: Enabling longhorn in any case with capm3 libvirt-metal ~baremetal ~capm3 ~longhorn
  
• MR: Fix baremetal operator replicas setting ~CI-breakage ~baremetal ~update
  
• MR: Inject mtu for capm3 infra ~capm3
  
• MR: Kyverno-policies from bootstrap.values must use _components from values.yaml ~baremetal
  
• MR: Set metal3machines automatedcleaningmode to disabled ~CI-breakage ~baremetal ~update
  
• MR: Typo fix in metal3 doc ~baremetal ~docs ~type::cleanup
  
• MR: Update helm release metal3 to v0.6.5 ~baremetal ~renovate
  
• MR: Update helm release metal3 to v0.7.0 ~baremetal ~renovate
  
• MR: Update helm release metal3 to v0.7.2 ~baremetal ~renovate
  
• MR: Update helm release prometheus-snmp-exporter to v5.2.0 ~baremetal ~monitoring ~renovate
  
• MR: [workaround] bypass runner-aas-interface ~CI-breakage ~baremetal
  
• MR: Add kyverno policy to clear cisnetworkpolicy node finalizer set by rke2 ~CI-breakage ~baremetal ~rke2
  
• MR: Cleanup metal3-suse against metal3 ~baremetal ~type::cleanup
  
• MR: Have harbor storage default to readwriteonce ~CI-breakage ~capm3
  
• MR: Metal3: revert override of mariadb container image ~baremetal
  
• MR: Only deploy patch-bond kyverno policy if capm3 is enabled ~baremetal
  
• MR: Remove metal3 provider from schema ~baremetal ~type::cleanup
  
• MR: Upgrade os-image-server from 2.0.0 to 2.0.1 ~baremetal
  

CAPV

• MR: Align vsphere-cpi to k8s version ~capv
  
• MR: Update dependency kubernetes-sigs/cluster-api-provider-vsphere to v1.10.0 ~capv ~renovate
  
• MR: Update dependency kubernetes-sigs/cluster-api-provider-vsphere to v1.10.1 ~capv ~renovate
  
• MR: Update dependency kubernetes-sigs/cluster-api-provider-vsphere to v1.9.3 ~capv ~renovate
  
• MR: Update dependency kubernetes-sigs/vsphere-csi-driver to v3.2.0 ~capv ~renovate
  
• MR: Update dependency kubernetes-sigs/vsphere-csi-driver to v3.3.0 ~capv ~renovate
  

Features

• MR: Introduce template for enforcing immutability of s-u values ~cluster-lifecycle ~type::feature
  

Bug Fixes

• MR: Fix the env variables added by the keycloak components ~type::bug
  
• MR: Don't include 'previous_values' in sylva-units-values secret ~type::bug
  
• MR: Fix- bug in "push-helm-artifacts.sh" ~oci ~type::bug
  
• MR: Os-images-info: add job to healthchecks ~type::bug ~update
  

Documentation

• MR: Read doc: correction from capo to capm3 ~docs
  
• MR: Hotfix: mdx interpreter sees wrongfully placed html/custom tag ~docs
  
• MR: Remove migrated docs ~docs ~docs::migration
  

Monitoring & logging

• MR: Add alertmanager configuration management ~monitoring
  
• MR: Add jiralert webhook for alertmanager ~monitoring
  
• MR: Add prometheus persistent storage ~monitoring
  
• MR: Add minio tenant monitoring ~monitoring
  
• MR: Add prometheus pushgateway and corresponding prometheus target config ~monitoring
  
• MR: Cleanup loki unnecessary values ~logging ~type::cleanup
  
• MR: Cleanup unnecessary thanos values ~monitoring ~type::cleanup
  
• MR: Enable longhorn service monitor and grafana dashboard ~longhorn ~monitoring
  
• MR: Enable thanos ruler component ~monitoring
  
• MR: Fix thanos ui unauthorized error message ~monitoring
  
• MR: Fix thanos servicemonitor auth ~monitoring
  
• MR: Have longhorn servicemonitor be deployed only when monitoring (crd) unit is enabled ~monitoring
  
• MR: Logs do not reach loki due to bad loki_url passed to fluentd ~logging
  
• MR: Revert "support external certificates for grafana (!2394)" ~monitoring
  
• MR: Update helm release prometheus-pushgateway to v2.13.0 ~monitoring ~renovate
  
• MR: Update helm release prometheus-snmp-exporter to v5.1.1 ~monitoring ~renovate
  
• MR: Update helm release prometheus-snmp-exporter to v5.4.0 ~monitoring ~renovate
  
• MR: Update helm release thanos to v12.23.2 ~monitoring ~renovate
  
• MR: Update helm release thanos to v15 ~monitoring ~renovate
  
• MR: Update helm release thanos to v15.7.2 ~monitoring ~renovate
  
• MR: Update helm release thanos to v15.7.3 ~monitoring ~renovate
  
• MR: Update helm release thanos to v15.7.8 ~monitoring ~renovate
  
• MR: Update thanos datasource in grafana ~monitoring
  
• MR: Update dependency https://github.com/grafana/loki.git to v2.9.7 ~logging ~renovate
  
• MR: Update dependency https://github.com/minio/operator.git to v5.0.14 ~monitoring ~renovate
  
• MR: Update dependency https://github.com/minio/operator.git to v5.0.15 ~monitoring ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-alertmanager-resources.git to v0.0.2 ~monitoring ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-dashboards.git to v0.0.7 ~monitoring ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-prometheus-rules.git to v0.0.10 ~monitoring ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-snmp-resources.git to v0.0.7 ~monitoring ~renovate
  
• MR: Update prometheus-rules ~monitoring
  
• MR: Update rancher-logging to v103.1.1+up4.4.0 (minor) ~logging ~renovate
  
• MR: Update rancher-monitoring to v103.1.0+up45.31.1 (minor) ~monitoring ~renovate
  
• MR: Update rancher-monitoring to v103.1.1+up45.31.1 (patch) ~monitoring ~renovate
  
• MR: Have mgmt cluster fluentd push logs to loki directly via local loki service ~logging
  
• MR: Have mgmt cluster prometheus push metrics to thanos directly via the local thanos-receive service ~monitoring
  
• MR: Move eso-grafana-oidc to conditional component ~monitoring
  

Storage

• MR: Set datalocality settings to best-efforts for all longhorn storage classes including default one ~longhorn
  
• MR: Set node drainpolicy for longhorn storage class single-replica-storageclass ~longhorn
  
• MR: Update longhorn to v103.2.3+up1.5.5 (patch) ~longhorn ~renovate
  
• MR: [debug_on_exit.sh] dump some longhorn custom resources ~longhorn
  
• MR: Correct the name of parameter nodedrainpolicy for longhorn ~longhorn
  
• MR: Cronjob to delete left-over longhorn instance-managers ~longhorn
  

Security

• MR: Integrate keycloak with grafana ~logging ~monitoring ~security
  
• MR: Refresh user info in rancher ~security
  
• MR: Sign sylva-units pushed in the oci registry ~security ~security::supply-chain
  
• MR: Support external certificates for grafana ~monitoring ~security ~security::certificates
  
• MR: Update helm release cert-manager to v1.14.4 ~renovate ~security
  
• MR: Update helm release kyverno to v3.1.5 ~renovate ~security
  
• MR: Update helm release vault-config-operator to v0.8.27 ~renovate ~security
  
• MR: Update helm release vault-config-operator to v0.8.28 ~renovate ~security
  
• MR: Update dependency https://github.com/bank-vaults/vault-operator.git to v1.22.2 ~renovate ~security
  
• MR: Update dependency keycloak/keycloak-k8s-resources to v23.0.7 ~renovate ~security
  
• MR: Update rancher-cis-benchmark to v5 (major) ~renovate ~security ~security::supply-chain
  
• MR: Avoid "set -x" on cluster-creator-login/cluster-creator-login.sh script ~security
  
• MR: Remove an echo in keycloak-add-realm-role to avoid leak ~security
  

CI

• MR: Add the values file to the deployment artifacts ~CI
  
• MR: Adding new variables of ci for branching info display ~CI
  
• MR: Allow testing the default rolling upgrade in mr based on label ~CI
  
• MR: Allow to auto start some deployments via cross repo pipelines ~CI
  
• MR: Allow to delay capo cleanup based on label ~CI ~capo
  
• MR: Allow to manually run a pipeline even with a mr open ~CI
  
• MR: Avoid downloading artifacts in delete stage ~CI
  
• MR: Bump ci image version ~CI ~CI-breakage
  
• MR: Ci: add an option to pass a gitlab api authentication header in the capo scheduled cleanup ~CI ~capo
  
• MR: Ci: allow to override the authentication header for gitlab artifact api ~CI
  
• MR: Ci: increase default timeout used during rolling upgrades ~CI ~CI-breakage ~CI-bugs
  
• MR: Ci: debug-on-exit.sh improvements ~CI
  
• MR: Check kyverno policies status in ci ~CI ~Test ~monitoring ~security
  
• MR: Check schedule pipelines status ~CI
  
• MR: Create less stages in child pipelines to better overview ~CI
  
• MR: Display dump machine logs in a collapsed section ~CI
  
• MR: Dump node logs via http ~CI ~logging
  
• MR: Enable capo-cloud-config unit in capo-misc ~CI ~CI-breakage
  
• MR: Enable standalone use of debug-on-exit ~CI
  
• MR: Enabling kubevirt and dependent units in capm3 libvirt-metal ci ~CI ~baremetal ~kubevirt
  
• MR: Ensure status key exist during runner creation ~CI ~CI-bugs ~capm3
  
• MR: Exclude single node deployments (capd/capm3) for rolling upgrade rules ~CI ~CI-bugs
  
• MR: Fix capo scheduled cleanup logic ~CI ~CI-bugs ~capo
  
• MR: Fix dump of workload cluster nodes in ci ~CI ~CI-bugs
  
• MR: Fix generate_external_units_version_maturity() function in generate_units_documentation.py ~CI ~docs
  
• MR: Fix machine log dump ~CI-bugs
  
• MR: Fix minor syntax issue in ci report script ~CI
  
• MR: Fix missing kubeconfig for capo delayed cleanup ~CI ~CI-bugs ~capo ~type::cleanup
  
• MR: Fix schedule pipeline report ~CI
  
• MR: Fix scheduled report display ~CI
  
• MR: Fix typo in ci displayed info ~CI ~CI-bugs
  
• MR: Fix typo in scheduled cleanup ~CI ~CI-breakage ~capo
  
• MR: Fix wrong artifacts path for workload clusters in ci ~CI ~CI-bugs
  
• MR: Gather cis scan result if available ~CI ~security
  
• MR: Generate ci test artifacts in ${ci_project_dir} ~CI
  
• MR: Improve workload cluster deletion log and logic ~CI
  
• MR: Increase ci timeout for metal3 management cluster ~CI ~CI-breakage ~baremetal
  
• MR: Increase cluster updates timeout for capm3 ~CI ~CI-breakage ~capm3
  
• MR: Increase cpu number for single node capm3 jobs ~CI
  
• MR: Increment service port dump_machine_logs ~CI
  
• MR: Introduce login test for grafana sso ~CI ~Test
  
• MR: Login test for gitea ~CI ~Test
  
• MR: Make miniserve url configurable ~CI
  
• MR: Manage capd-preview as a child pipeline ~CI ~CI-breakage
  
• MR: Minor cleanup on capm3 kubeadm ci job ~CI ~type::cleanup
  
• MR: Retrieve kubeconfig from gitlab api ~CI
  
• MR: Sso script add retry in rancher test case ~CI ~CI-breakage
  
• MR: Sanitize sylva_core_repo in ci ~CI ~security
  
• MR: Security tests: running kube-score on cluster dump ~CI ~kubescore ~security
  
• MR: Skip miniserve init for old release versions ~CI-breakage ~CI-bugs
  
• MR: Suspend capo-cloud-config kustomization in capo delay cleanup ~CI ~CI-bugs ~capo
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/container-images/libvirt-metal.git to v0.1.13 ~CI ~baremetal ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.171.0 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.195.3 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.209.0 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.219.1 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.226.10 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.235.2 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.237.0 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.248.6 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.258.2 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.263.1 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.270.2 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.274.0 ~CI ~renovate
  
• MR: Update dependency renovate-bot/renovate-runner to v17.280.2 ~CI ~renovate
  
• MR: Update dependency to-be-continuous/gitleaks to v2.5.2 ~CI ~renovate
  
• MR: Update docker docker tag to v26 ~CI ~renovate
  
• MR: Update registry.gitlab.com/gitlab-org/cli docker tag to v1.39.0 ~CI ~renovate
  
• MR: Update rules priority related to mr labels ~CI ~CI-breakage
  
• MR: Use default ci variables instead of hardcoded values ~CI
  
• MR: Use remote ci values ~CI
  
• MR: Use the same k8s versions in all rules ~CI ~CI-bugs
  
• MR: [1313] switch all the capm3 jobs to ha ~CI ~CI-breakage ~baremetal ~capm3
  
• MR: [1389] increase apply.sh timeout ~CI
  
• MR: [ci] fix k8s upgrade by serving 1.27 image in management cluster ~CI
  
• MR: Homogenize pipeline name to specify os type used ~CI ~type::cleanup
  
• MR: Kyverno: need to prevent the use of images with main tag ~CI ~security
  
• MR: Minor: fix a 'bootstrap' typo ~CI
  
• MR: More debug-on-exit resources (roles+bindings+serviceaccounts and flux ocirepos) ~CI
  
• MR: Sylva-units: add pre-delete hook to handle ordered deletion of kustomisations ~CI ~cluster-lifecycle
  

Cleanup

• MR: Clean thanos-query tls host ~type::cleanup
  
• MR: Fix doc errors ~docs ~type::cleanup
  
• MR: Improve mgmt-cluster-ready dependency declaration ~type::cleanup
  
• MR: Minor: fix a comment in sylva-units/values.yaml ~docs ~type::cleanup
  
• MR: Optimize sylva-units 'interpret-inner-gotpl' template ~type::cleanup
  
• MR: Remove cluster-ready sleep job ~type::cleanup
  
• MR: Revert workaround for ingress-nginx crash on libvirt-metal ~type::cleanup
  

Other

• MR: *.sh scripts / let reconcile_sylva_units use "sylvactl watch" with "--reconcile"
  
• MR: Add calico autodetection method for kubeadm ~kubeadm ~type::enhancement
  
• MR: Add dependency in cluster-creator-login ~CI-breakage
  
• MR: Add depends_on in calico-depends-on-cluster-machines-ready unit template ~CI-breakage
  
• MR: Add first commit message to mr template
  
• MR: Add platform_tag external label to prometheus
  
• MR: Also prevent node providerid reuse on node updates ~CI-breakage
  
• MR: Avoid any remote pruning in sylva-units delete hook
  
• MR: Avoid expiration of the kubeconfig of the cluster-creator user ~type::enhancement
  
• MR: Blacklist nodes with a providerid that has already been used ~CI-breakage
  
• MR: Bump oci-tools version
  
• MR: Change the default location of local-path-provisioner
  
• MR: Check current sylvactl version before downloading it
  
• MR: Ensure that helmreleases honor unit dependencies
  
• MR: Ensure that merge-append preserves copied values
  
• MR: Fix harbor storageclass and updatestrategy
  
• MR: Fix workload cluster deletion: improve jq query to target only kustomization/helmrelease on workload cluster ~cluster-lifecycle
  
• MR: Fix calico configuration on kubeadm ~kubeadm
  
• MR: Fix ingress-nginx configuration ~CI-breakage
  
• MR: Fix ingress-nginx upgrades ~CI-breakage ~update
  
• MR: Fix race between rancher-webhook-replicas and pdb-minavailable-check kyverno policies ~CI-breakage ~bug-reproducibility::randomly
  
• MR: Have cluster-creator-login use clusterip rancher service
  
• MR: Immutability check not required for bootstrap cluster ~CI-breakage
  
• MR: Improve node_class documentation ~docs::enhancement
  
• MR: Improve ready conditions of md and cp in cluster-machines-ready script
  
• MR: Increase libvirt metal vm resources
  
• MR: Kyverno policy to ensure pdb minreplicas
  
• MR: Minor fix - enable flux-webui-init only if flux-webui is enabled
  
• MR: Mutualize cni related values under a common key
  
• MR: Overwrite cp_node_label_value in bootstrap value ~CI-breakage
  
• MR: Restrict tigera-operator tolerations
  
• MR: Revert "enabling kubevirt and dependent units in capm3 libvirt-metal ci" ~CI-breakage
  
• MR: Revert "merge branch 'renovate/harbor-1.14.x' into 'main'"
  
• MR: Revert "[workaround] bypass runner-aas-interface"
  
• MR: Revert "sync multus version with rke2"
  
• MR: Revert mr 2396
  
• MR: Revert rke2 upgrades to 1.28.9, 1.27.13, 1.26.15 ~rke2
  
• MR: Small improvements in kyverno policies
  
• MR: Suffix kube-job clusterrole(binding) with namespace
  
• MR: Switch calico autodetection method to nodeinternalip for kubeadm ~CI-breakage ~kubeadm
  
• MR: The bootstrap-secret should depends on rancher unit
  
• MR: Track oci-tools container image version patch with renovate ~renovate
  
• MR: Update helm release cert-manager to v1.14.5 ~renovate
  
• MR: Update helm release cert-manager to v1.14.6 ~renovate
  
• MR: Update helm release external-secrets to v0.9.16 ~renovate
  
• MR: Update helm release external-secrets to v0.9.17 ~renovate
  
• MR: Update helm release external-secrets to v0.9.18 ~renovate
  
• MR: Update helm release external-secrets to v0.9.19 ~renovate
  
• MR: Update helm release harbor to v1.14.2 ~renovate
  
• MR: Update helm release harbor to v1.14.2 ~renovate
  
• MR: Update helm release kubevirt to v0.2.4 ~renovate
  
• MR: Update helm release postgresql to v14.3.3 ~renovate
  
• MR: Update bitnami/configmap-reload docker tag to v0.13.1 ~renovate
  
• MR: Update dependency https://github.com/rancher/local-path-provisioner.git to v0.0.27 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/container-images/libvirt-metal.git to v0.1.14 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/container-images/libvirt-metal.git to v0.1.15 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.15 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.16 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.17 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.18 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.21 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.22 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.23 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.24 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.26 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.27 ~renovate
  
• MR: Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.2.28 ~renovate
  
• MR: Update dependency kubernetes-sigs/cluster-api to v1.6.4 ~renovate
  
• MR: Update dependency sylva-projects/sylva-elements/diskimage-builder to v0.2.8 ~renovate
  
• MR: Update dependency sylva-projects/sylva-elements/diskimage-builder to v0.2.9 ~renovate
  
• MR: Update docker docker tag to v24.0.9 ~renovate
  
• MR: Update docker docker tag to v26.1.3 ~renovate
  
• MR: Update docker docker tag to v26.1.4 ~renovate
  
• MR: Update pod-security in cattle-fleet-system namespace ~bug-workaround::identified
  
• MR: Update registry.gitlab.com/gitlab-org/cli docker tag to v1.40.0 ~renovate
  
• MR: Update registry.gitlab.com/gitlab-org/cli docker tag to v1.41.0 ~renovate
  
• MR: Update registry.gitlab.com/gitlab-org/cli docker tag to v1.42.0 ~renovate
  
• MR: Update registry.gitlab.com/gitlab-org/cli docker tag to v1.43.0 ~renovate
  
• MR: Update registry.gitlab.com/sylva-projects/sylva-elements/container-images/oci-tools docker tag to v0.0.12 ~renovate
  
• MR: Update registry.gitlab.com/sylva-projects/sylva-elements/container-images/oci-tools docker tag to v0.0.13 ~renovate
  
• MR: Update registry.gitlab.com/sylva-projects/sylva-elements/container-images/sylva-toolbox docker tag to v0.4.0 ~renovate
  
• MR: Update renovate configuration to group sylva-toolbox & ci-image updates ~renovate
  
• MR: Update sylva-projects/sylva-elements/container-images/ci-image docker tag to v1.0.23 ~renovate
  
• MR: Update sylva-projects/sylva-elements/container-images/ci-image docker tag to v1.0.25 ~renovate
  
• MR: Update sylva-projects/sylva-elements/container-images/ci-image docker tag to v1.0.26 ~renovate
  
• MR: Update sylva-projects/sylva-elements/container-images/ci-image docker tag to v1.0.32 ~renovate
  
• MR: Update sylva-projects/sylva-elements/container-images/ci-image docker tag to v1.0.35 ~renovate
  
• MR: Update sylva-projects/sylva-elements/container-images/ci-image docker tag to v1.0.36 ~renovate
  
• MR: Update sylva-toolbox & ci-image to v0.5.2 (patch) ~renovate
  
• MR: Update sylva-toolbox to v0.3.14 ~renovate
  
• MR: Update sylva-toolbox to v0.3.15 (patch)
  
• MR: Update sylva-toolbox to v0.4.2 (patch) ~renovate
  
• MR: Update sylva-toolbox to v0.4.3 (patch) ~renovate
  
• MR: Update sylva-toolbox to v0.4.6 (patch) ~renovate
  
• MR: Update sylva-toolbox to v0.4.7 (patch) ~CI-breakage ~renovate
  
• MR: Update sylva-toolbox to v0.4.8 (patch) ~renovate
  
• MR: Update sylva-toolbox to v0.5.0 (minor) ~renovate
  
• MR: Update sylva-toolbox to v0.5.1 (patch) ~CI-breakage ~renovate
  
• MR: Update sylvactl download url
  
• MR: Updated scripts that define helm as a function to call the which command by absolute path
  
• MR: Use healthchecks on synchronize-secrets
  
• MR: Added sample value to define users with kubeadm ~kubeadm
  
• MR: Allow semver prerelease in kubernetes version
  
• MR: Bootstrap/pivot: wait for all machines to be ready before triggering pivot
  
• MR: Bump multus version
  
• MR: Compute pods replica based on ha mode
  
• MR: Debug-on-exit.sh: add rke2 node-password secrets
  
• MR: Debug-on-exit.sh: improve event log tools/shell-lib/debug-on-exit.sh
  
• MR: Deploy most units after 'cluster-machines-ready' unit
  
• MR: Effectively set the dependency on 'cluster-machines-ready' unit, for relevant units
  
• MR: Enable 'cluster-machines-ready' unit for workload clusters
  
• MR: Enable the management-cluster-only kyverno policies component only in mgmt cluster
  
• MR: Ensure that cluster api keeps retrying to delete nodes ~CI-breakage
  
• MR: Fix cluster-rke2-finalizer-fix dependency ~CI-breakage ~bug-reproducibility::always
  
• MR: Fix debug-on-exit typo
  
• MR: Fix obscure failure when depending on a non-existing unit
  
• MR: Fix os_images_info_input_hash to ensure that os-images-info is updated after os_images_info_input_hash upgrade ~bug-reproducibility::always ~update
  
• MR: Fix regression in apply-workload-cluster.sh causing it to always timeout ~CI-breakage
  
• MR: Fix test-login failure in ci ~CI-breakage
  
• MR: Improve apply scripts on validation and triggering reconciliation of the helmrelease
  
• MR: Improve root-dependency wait checks
  
• MR: Kyverno policies: split the 'avoid-delete-mgmt-resources' policy into its own unit
  
• MR: Minor: improve how "sylvactl watch" is run, target specific helmrelease and ns
  
• MR: Minor: tools/generate_units_documentation.py: fix regex to search for versions
  
• MR: Refine the cluster-machines-ready machine readiness criteria, take status.noderef into account ~update
  
• MR: Remove sylva_diskimagebuilder_version from shared_workload_clusters_values
  
• MR: Rename rancher bootstrap secret / fix interference with the one managed by rancher chart ~CI-breakage
  
• MR: Rework cluster-machines-ready to fix kubeadm/calico issue for workload clusters
  
• MR: Root-dependency / avoid kube-job (cluster)role/(cluster)rolebinding names collisions ~CI-breakage
  
• MR: Root-dependency job should not kubectl-wait on root-dependency-* kustomizations
  
• MR: Simplify the root-dependency check to cope with suspended or failed kustomizations
  
• MR: Split and migrate sylva-core/readme into documentation portal
  
• MR: Sylva-units: delete-workload-cluster fixes ~CI-breakage
  
• MR: Sylva-units: introduce globally versioned kustomization dependencies
  
• MR: Sylva-units: introduce versioned-dependency kustomizations
  
• MR: Sylva-units: refactor how uninterpreted unit_templates is preserved for unit-def-from-templates
  
• MR: Sync multus version with rke2
  
• MR: Tools/oci/push-helm-charts-artifacts.sh: detail diff when artifact mismatch
  
• MR: Upgrade kubernetes patch versions 1.28.9, 1.27.13, 1.26.15
  
• MR: Workload clusters: properly depend on mgmt-cluster-ready kustomization
  

Contributors

Francois Eleouet, Jianzhu Zhang, Renovate Bot, Sakshi Choudhary, Cristian Manda, Bogdan Antohe, Médéric de Verdilhac, Bogdan-Adrian Burciu, Remi Le Trocquer, manik bindlish, Ghost User, Thomas Morin, Daniel Anton, Federico Cicchiello, Sylva Renovate bot, Alain Thioliere, Pierrick Seite, Antoine Monlong, Alin H, Alexandre Seitz, Zaharia Mihai, Mohan Sharma, François-Régis Menguy, Samuel Bartel, Loic Nicolle, Akshay yadav, Priya Goyal, Thomas Monguillon, francois klieber, Bogdan Arvunescu, Marc Bailly, Chris Wheeler