Merge Requests integrated in this release

41 merge requests were integrated in this repo between 1.6.24 and 1.6.25.
These notes don't account for the MRs merged in secondary repos.

Kubernetes

[backport-1.6] pin coredns version on first-node installation !8159 ~"rke2" (issues: #4173)

[backport 1.6] Protect sylva-units HelmRelease from accidental deletion on management clusters !8122 ~"backport" ~"cluster-lifecycle" (issues: #4149)
[backport-1.6] ensure that unit Kustomization can't be ready if the unit HelmRelease is suspended (+required code cleanup) !8258 (issues: #3381)
[Backport 1.6] Enable Rancher auditLog sidecar when audit_log.level is set !8521 (issues: #4358)

[backport-1.6]: exit the backup scripts in case of errors with any backup tasks (except failure to send stats to pushgateway) !8233 ~"backport" (issues: #3734)
[backport-1.6]: add size parameters and validate the backed up data stored in s3 bucket !8230 ~"backport" (issues: #3849)

[backport-1.6] Preserve SR-IOV CRDs from deletion when upgrading from Sylva 1.4 !8438 (issues: #4321)

Update Sylva Helm chart sylva-prometheus-rules to v0.2.7 !8054 ~"area:observability" ~"renovate"

[release-1.6]: increase unit-timeout for neuvector unit !8211 ~"backport" ~"type::bug" (issues: #4133, #4207)
[backport-1.6] increase NeuVector limits and requests to avoid OOMKilled !8548 ~"backport"
[backport-1.6]: Fix kustomize units signature !8203 ~"backport" ~"type::bug" (issues: #4201)

[backport-1.6] pin coredns version on first-node installation !8159 ~"area:kubernetes-core" (issues: #4173)

[backport-1.6] Change Whereabouts RKE2 image !8034 (issues: #3814)
[backport-1.6] copy management shared settings to team namespaces !8167 (issues: #4177)
[backport-1.6] multus-cleanup: priority-class and terminationGracePeriodSeconds !8321 (issues: #4236)
[backport-1.6] Small fixes and cleanup in values.yaml for UIs and minio-operator !8327
[backport-1.6] allow user to pass s3 cert as raw pem for backup !8404 (issues: #4266)
[backport-1.6] Ensure the OpenBao resources land in vault ns even in Workload ClusterUpdate !8496
[backport-1.6] feat: apply working in OCI mode with commit substitution !7925 ~"backport"
[backport-1.6] Reduce CVE for postgresql deployed by CNPG-operator !8565 (issues: #4361)
[release-1.6] postgres container image: keep 18.1 and don't use a rolling tag !8598 (issues: #4398, #4397)
[backport-1.6]: [release-1.7] clear kubeconfig for the sriov unit in workload context !8602
[release-1.6] revert of postgres image change (edit: bogus MR) !8614 ~"CNPG" ~"area:misc" (issues: #4398)
[release-1.6] revert bogus dummy commit !8621
[release-1.6] revert of postgres image change !8622 ~"CNPG" ~"area:misc" (issues: #4398)

[release-1.6] CI fix: emulate ensure_sylva_toolbox script !8059
[Backport-1.6] Properly handle workload cluster namespace in CI !8146 ~"backport"
Fix wrong backport on delete workload cluster job !8180 ~"type::bug"
[Backport 1.6] Run publish-sylva-units-artifact in ensure mode for child pipelines from MR !8139 ~"backport" ~"type::bug" (issues: #4106)
[Backport-1.6] Backport edit_host_file relocation and improvement !8196 ~"backport"
[backport-1.6] Check for thanos_query_url existence before running tests !8228 ~"backport"
[Backport 1.6] Fix intermittent bin/env failures in delete-workload-cluster !8301 ~"type::bug"
[backport-1.6] use ci-deployment-values with revisited "ha" option !8419
[Backport 1.6] Change downstream pipeline strategy from depend to mirror !8447
Remove leaseweb scheduled pipeline for release-1.6 !8451
[backport-1.6] increase sylvactl timeout for ceph-rbd-csi unit !8664 ~"ceph-csi"
[release-1.6] check-sylva-units-k8s-versions.py: ability to check multus Helm chart !8675

15 people contributed.