Merge Requests integrated in this release

Security

• Update dependency keycloak/keycloak-k8s-resources to v26.0.5 !3136 ~"renovate"
  

CAPV

• fix a typo in the example rke2-capv environment values !3351 ~"docs" ~"rke2"
  

RKE2

• improve robustness of metallb-rke2-chart-cleanup unit !3372
  
• fix rke2-helmchart-prevent-uninstall Kyverno policy (make it effective for MetalLB) !3381
  

Documentation

• Replace the usage of some characters in units descriptions that might break the mdx compiler !3312
  
• minor update on unit documentation !3367
  
• unit doc generation tool: split units lists into 3 separate tables !3373
  

CI

• Update python Docker tag to v3.13.0 !2841
  
• Update dependency renovate-bot/renovate-runner to v19.19.0 !3350 ~"renovate"
  
• Update dependency sylva-projects/sylva-elements/ci-tooling/ci-templates to v1.0.30 !3377 ~"renovate"
  
• CI: add login tests for thanos and kubevirt !3313
  
• sylva-units: rework and add test-values to test upgrades for both mgmt and workload, on both cabpr and cabpk !3340
  

Cleanups

• rancher: don't use 'debug' log level by default !3386
  

Other

• Prevent RKE2 from removing critical charts !3338
  
• refine sylva-units-status annotation to reflect migrations !3339
  
• cluster-rke2-migrate-legacy-etcd-certs.sh: add safeguard to migrate_cluster !3321
  
• apply scripts: wait for root-dependency to be ready before looking at all units !3337
  
• Fix thanos upgrades from 1.1.1 !3336
  
• improve how we prevent unit HelmRelease from reconciling with old state !3318
  
• Enable ValidatingAdmissionPolicy featureGate by default !3349
  
• fix cleanup_bootstrap_cluster occasional error (check pivot Job completion instead of unit readiness) !3366
  
• fix unwanted removal of last root-dependency HelmRelease !3369 ~"bug-reproducibility::always"
  
• Fix minio and thanos upgrade jobs !3365
  
• clean solution to avoid sylvactl premature stops on HelmReleases (avoids ignoring exit conditions) !3326
  
• set clean remediation settings on sylva-units HelmRelease when upgrading from 1.1.1 !3371
  
• avoid huge Kyverno load due to calico PDBs (disable pdb-unhealthy-pod-eviction-check webhook in calico-system namespace) !3361
  
• Fix unit description script !3391
  
• Check the presence of metallb helmchart instead of configmap !3389
  
• Fix sylva-units delete hook !3390
  
• fix cleanup_bootstrap_cluster when run from apply.sh !3392
  

Other dependency upgrades

• Update Helm release redis-cluster to v11.0.8 !3004
  

• Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.4.4

  • Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.4.3 !3344

  • Update dependency https://gitlab.com/sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster.git to v0.4.4 !3375