Merge Requests integrated in this release

40 merge requests were integrated in this repo between 1.7.0 and 1.7.1.
These notes don't account for the MRs merged in secondary repos.

Sylva-units framework

[Backport 1.7] Add upgrade job to run flux migrate for stale SSA managedFields across Flux CRs !8455 (issues: #4330)
[backport-1.7] Enable Rancher auditLog sidecar when audit_log.level is set !8526 ~"backport" (issues: #4357)
[backport-1.7] Add cluster-* healthCheckExpr !8572 ~"backport"
[backport-1.7] properly handle inexisting fields in healthCheckExprs !8514 ~"backport"

Update Sylva Helm chart sylva-capi-cluster to v0.14.31 ~"renovate" !8493 !8605 !8667
[backport-1.7] fix rke2-capd deployments stuck on the cluster unit !8659 ~"backport" ~"capd" ~"rke2"

[backport-1.7] fix rke2-capd deployments stuck on the cluster unit !8659 ~"area:capi" ~"backport" ~"rke2"

[backport-1.7] metal3: inject oci_registry_extra_ca_certs in ipa-downloader for IPA image OCI artifact download (fix air-gapped use-case) !8492 (issues: #4342)

Update Sylva Helm chart sylva-dashboards to v0.3.10 !8564 ~"area:observability" ~"renovate"

[backport-1.7] fix log drops !8550 ~"area:observability" ~"backport" ~"type::bug"

[backport-1.7] increase NeuVector limits and requests to avoid OOMKilled !8543 ~"backport"
[backport-1.7] harbor: avoid use of hardcoded admin password when harbor is deployed in workload context !8663 ~"backport" ~"harbor" (issues: #4412)

[backport-1.7] fix rke2-capd deployments stuck on the cluster unit !8659 ~"area:capi" ~"backport" ~"capd"

[backport-1.7] Fix cluster and cluster-ready healthChecks. !8444
[backport-1.7] Force flux UI pod recreation on upgrades from previous releases !8458
[backport-1.7] prevent namespace defined outside of namespace-defs unit to be pruned by Flux !8472
[backport-1.7] Use short DNS name for various service to improve DNS resolution efficiency !8468 (issues: #4325)
[backport-1.7] Ensure the OpenBao resources land in vault ns even in Workload Cluster !8432
[backport 1.7] Update define-source script: do not override source branch if already provided !8524
[backport-1.7] Reduce CVE for postgresql deployed by CNPG-operator !8558 (issues: #4360)
[release-1.7] clear kubeconfig for the sriov unit in workload context !8589
[backport-1.7] increase sylvactl timeout for ceph-rbd-csi unit !8618
[backport-1.7] update k8s: 1.35.6+rke2r1, 1.34.9+rke2r1, 1.33.13+rke2r1 + related calico, ingress-nginx, coredns upgrades !8591
[backport-1.7] CNPG postgres image: don't use a floating tag (fix pinning) !8599 ~"CNPG" ~"area:misc" (issues: #4396)
[backport-1.7] harbor, fix admin authentication !8674 ~"area:misc" ~"harbor" (issues: #4417)

Update pre-commit hook sylva-projects/sylva-elements/ci-tooling/sylva-test-framework to v1.1.7 !8412 !8442 !8461
Update sylva-elements/ci-tooling/ci-deployment-values to v0.6.7 !8437 !8519
Update dependency sylva-projects/sylva-elements/ci-tooling/ci-templates to v1.1.3 !8562
Update Sylva Helm chart workload-team-defs to v0.7.10 !8570
Update sylva-elements/container-images/helm-toolbox container to v1.2.3 !8413
Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 !8652

[backport-1.7] use ci-deployment-values with revisited "ha" option !8418
[Backport 1.7] Change downstream pipeline strategy from depend to mirror !8446
Remove some leaseweb scheduled pipeline for release-1.7 !8452
[release-1.7] Use ensure-sylva-toolbox instead of downloading version file from deployment jobs !8450

13 people contributed.