CAPZ: Release v29.3.0. (#1493)

README.md

@@ -301,6 +301,8 @@ to all Giant Swarm installations.
 ## Azure
 
 - v29
+  - v29.3
+    - [v29.3.0](https://github.com/giantswarm/releases/tree/master/azure/v29.3.0)
   - v29.2
     - [v29.2.0](https://github.com/giantswarm/releases/tree/master/azure/v29.2.0)
   - v29.1

azure/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
 - v29.0.0
 - v29.1.0
 - v29.2.0
+- v29.3.0
 
 commonAnnotations:
   giantswarm.io/docs: https://docs.giantswarm.io/use-the-api/management-api/crd/releases.release.giantswarm.io

azure/releases.json

@@ -48,6 +48,13 @@
       "releaseTimestamp": "2024-09-30 12:00:00 +0000 UTC",
       "changelogUrl": "https://github.com/giantswarm/releases/blob/master/azure/v29.2.0/README.md",
       "isStable": true
+    },
+    {
+      "version": "29.3.0",
+      "isDeprecated": false,
+      "releaseTimestamp": "2024-11-13 12:00:00 +0000 UTC",
+      "changelogUrl": "https://github.com/giantswarm/releases/blob/master/azure/v29.3.0/README.md",
+      "isStable": true
     }
   ],
   "sourceUrl": "https://github.com/giantswarm/releases",

azure/v29.3.0/README.md

@@ -0,0 +1,45 @@
+# :zap: Giant Swarm Release v29.3.0 for Azure :zap:
+
+## Changes compared to v29.2.0
+
+### Components
+
+- cluster-azure from v1.3.0 to v1.4.0
+- Flatcar from v3975.2.1 to [v3975.2.2](https://www.flatcar.org/releases#release-3975.2.2)
+- Kubernetes from v1.29.9 to [v1.29.10](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#changelog-since-v1299)
+
+### cluster-azure [v1.3.0...v1.4.0](https://github.com/giantswarm/cluster-azure/compare/v1.3.0...v1.4.0)
+
+#### Changed
+
+- Make `external-dns-private` app depend on the `prometheus-operator-crd` app, because it uses `ServiceMonitors`.
+
+### Apps
+
+- cert-exporter from v2.9.2 to v2.9.3
+- observability-bundle from v1.6.2 to v1.8.0
+
+### cert-exporter [v2.9.2...v2.9.3](https://github.com/giantswarm/cert-exporter/compare/v2.9.2...v2.9.3)
+
+#### Changed
+
+- Chart: Enable `global.podSecurityStandards.enforced`. ([#420](https://github.com/giantswarm/cert-exporter/pull/420))
+
+### observability-bundle [v1.6.2...v1.8.0](https://github.com/giantswarm/observability-bundle/compare/v1.6.2...v1.8.0)
+
+#### Changed
+
+- Upgrade `prometheus-agent` from v0.6.9 to v0.7.0.
+  - Adds extraArgs to be able to use nice features like wal truncation
+- upgrade `kube-prometheus-stack` from 61.0.0 to 65.1.1
+  - prometheus-operator CRDs from 0.73.0 to 0.75.0
+  - prometheus-operator from 0.75.0 to 0.77.1
+  - prometheus upgraded from 2.53.0 to 2.54.1
+  - grafana from 8.2.0 to 8.5.0
+  - thanos ruler upgraded from 0.35.1 to 0.36.1
+  - prometheus-node-exporter upgraded from 1.8.1 to 1.8.2
+- Add missing depends on annotation on alloy-metrics and alloy-logs to make sure they are deployed after the prometheus-operator-crds.
+- Upgrade `alloyLogs` to v0.6.1
+  - Allow passing PodLogs via helm chart values
+  - Upgrade to Alloy v1.4.2 which fixes a bug with component reload/evaluation and keeping Alloy up-to-date
+  - Fixes an issue with CiliumNetworkPolicy preventing Alloy to run in clustering mode

azure/v29.3.0/announcement.md

@@ -0,0 +1,3 @@
+**Workload cluster release v29.3.0 for Azure is available**. This release updates Kubernetes to v1.29.10, Flatcar to v3975.2.2 and several apps and components to their latest minor releases.
+
+Further details can be found in the [release notes](https://docs.giantswarm.io/changes/workload-cluster-releases-azure/releases/azure-29.3.0).

azure/v29.3.0/kustomization.yaml

@@ -0,0 +1,19 @@
+resources:
+- release.yaml
+
+replacements:
+- source:
+    group: release.giantswarm.io
+    kind: Release
+    fieldPath: metadata.name
+    options:
+      delimiter: "-"
+      index: 1
+  targets:
+  - select:
+      group: release.giantswarm.io
+      kind: Release
+    fieldPaths:
+    - metadata.annotations.[giantswarm.io/release-notes]
+    options:
+      create: true

azure/v29.3.0/release.diff

@@ -0,0 +1,118 @@
+apiVersion: release.giantswarm.io/v1alpha1				apiVersion: release.giantswarm.io/v1alpha1
+kind: Release								kind: Release
+metadata:								metadata:
+  name: azure-29.2.0						|         name: azure-29.3.0
+spec:									spec:
+  apps:									  apps:
+  - name: azure-cloud-controller-manager				  - name: azure-cloud-controller-manager
+    version: 1.29.8-gs1							    version: 1.29.8-gs1
+    dependsOn:								    dependsOn:
+    - vertical-pod-autoscaler-crd					    - vertical-pod-autoscaler-crd
+  - name: azure-cloud-node-manager					  - name: azure-cloud-node-manager
+    version: 1.29.8-gs1							    version: 1.29.8-gs1
+    dependsOn:								    dependsOn:
+    - vertical-pod-autoscaler-crd					    - vertical-pod-autoscaler-crd
+  - name: azuredisk-csi-driver						  - name: azuredisk-csi-driver
+    version: 1.30.2-gs2							    version: 1.30.2-gs2
+    dependsOn:								    dependsOn:
+    - azure-cloud-controller-manager					    - azure-cloud-controller-manager
+    - azure-cloud-node-manager						    - azure-cloud-node-manager
+  - name: azurefile-csi-driver						  - name: azurefile-csi-driver
+    version: 1.30.2-gs1							    version: 1.30.2-gs1
+    dependsOn:								    dependsOn:
+    - azure-cloud-controller-manager					    - azure-cloud-controller-manager
+    - azure-cloud-node-manager						    - azure-cloud-node-manager
+  - name: capi-node-labeler						  - name: capi-node-labeler
+    version: 0.5.0							    version: 0.5.0
+  - name: cert-exporter							  - name: cert-exporter
+    version: 2.9.2						|           version: 2.9.3
+    dependsOn:								    dependsOn:
+    - kyverno-crds							    - kyverno-crds
+  - name: cert-manager							  - name: cert-manager
+    version: 3.8.1							    version: 3.8.1
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: chart-operator-extensions					  - name: chart-operator-extensions
+    version: 1.1.2							    version: 1.1.2
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: cilium							  - name: cilium
+    version: 0.25.1							    version: 0.25.1
+  - name: cilium-servicemonitors					  - name: cilium-servicemonitors
+    version: 0.1.2							    version: 0.1.2
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: coredns							  - name: coredns
+    version: 1.22.0							    version: 1.22.0
+    dependsOn:								    dependsOn:
+    - cilium								    - cilium
+  - name: etcd-k8s-res-count-exporter					  - name: etcd-k8s-res-count-exporter
+    version: 1.10.0							    version: 1.10.0
+    dependsOn:								    dependsOn:
+    - kyverno-crds							    - kyverno-crds
+  - name: external-dns							  - name: external-dns
+    version: 3.1.0							    version: 3.1.0
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: k8s-audit-metrics						  - name: k8s-audit-metrics
+    version: 0.10.0							    version: 0.10.0
+    dependsOn:								    dependsOn:
+    - kyverno-crds							    - kyverno-crds
+  - name: k8s-dns-node-cache						  - name: k8s-dns-node-cache
+    version: 2.8.1							    version: 2.8.1
+    dependsOn:								    dependsOn:
+    - kyverno-crds							    - kyverno-crds
+  - name: metrics-server						  - name: metrics-server
+    version: 2.4.2							    version: 2.4.2
+    dependsOn:								    dependsOn:
+    - kyverno-crds							    - kyverno-crds
+  - name: net-exporter							  - name: net-exporter
+    version: 1.21.0							    version: 1.21.0
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: network-policies						  - name: network-policies
+    catalog: cluster							    catalog: cluster
+    version: 0.1.1							    version: 0.1.1
+    dependsOn:								    dependsOn:
+    - cilium								    - cilium
+  - name: node-exporter							  - name: node-exporter
+    version: 1.20.0							    version: 1.20.0
+    dependsOn:								    dependsOn:
+    - kyverno-crds							    - kyverno-crds
+  - name: observability-bundle						  - name: observability-bundle
+    version: 1.6.2						|           version: 1.8.0
+    dependsOn:								    dependsOn:
+    - coredns								    - coredns
+  - name: observability-policies					  - name: observability-policies
+    version: 0.0.1							    version: 0.0.1
+    dependsOn:								    dependsOn:
+    - kyverno-crds							    - kyverno-crds
+  - name: prometheus-blackbox-exporter					  - name: prometheus-blackbox-exporter
+    version: 0.4.2							    version: 0.4.2
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: security-bundle						  - name: security-bundle
+    catalog: giantswarm							    catalog: giantswarm
+    version: 1.8.2							    version: 1.8.2
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: teleport-kube-agent						  - name: teleport-kube-agent
+    version: 0.10.3							    version: 0.10.3
+  - name: vertical-pod-autoscaler					  - name: vertical-pod-autoscaler
+    version: 5.3.0							    version: 5.3.0
+    dependsOn:								    dependsOn:
+    - prometheus-operator-crd						    - prometheus-operator-crd
+  - name: vertical-pod-autoscaler-crd					  - name: vertical-pod-autoscaler-crd
+    version: 3.1.1							    version: 3.1.1
+  components:								  components:
+  - name: cluster-azure							  - name: cluster-azure
+    catalog: cluster							    catalog: cluster
+    version: 1.3.0						|           version: 1.4.0
+  - name: flatcar							  - name: flatcar
+    version: 3975.2.1						|           version: 3975.2.2
+  - name: kubernetes							  - name: kubernetes
+    version: 1.29.9						|           version: 1.29.10
+  - name: os-tooling							  - name: os-tooling
+    version: 1.20.0						|           version: 1.20.1
+  date: "2024-09-30T12:00:00Z"					|         date: "2024-11-13T12:00:00Z"
+  state: active								  state: active

azure/v29.3.0/release.yaml

@@ -0,0 +1,118 @@
+apiVersion: release.giantswarm.io/v1alpha1
+kind: Release
+metadata:
+  name: azure-29.3.0
+spec:
+  apps:
+  - name: azure-cloud-controller-manager
+    version: 1.29.8-gs1
+    dependsOn:
+    - vertical-pod-autoscaler-crd
+  - name: azure-cloud-node-manager
+    version: 1.29.8-gs1
+    dependsOn:
+    - vertical-pod-autoscaler-crd
+  - name: azuredisk-csi-driver
+    version: 1.30.2-gs2
+    dependsOn:
+    - azure-cloud-controller-manager
+    - azure-cloud-node-manager
+  - name: azurefile-csi-driver
+    version: 1.30.2-gs1
+    dependsOn:
+    - azure-cloud-controller-manager
+    - azure-cloud-node-manager
+  - name: capi-node-labeler
+    version: 0.5.0
+  - name: cert-exporter
+    version: 2.9.3
+    dependsOn:
+    - kyverno-crds
+  - name: cert-manager
+    version: 3.8.1
+    dependsOn:
+    - prometheus-operator-crd
+  - name: chart-operator-extensions
+    version: 1.1.2
+    dependsOn:
+    - prometheus-operator-crd
+  - name: cilium
+    version: 0.25.1
+  - name: cilium-servicemonitors
+    version: 0.1.2
+    dependsOn:
+    - prometheus-operator-crd
+  - name: coredns
+    version: 1.22.0
+    dependsOn:
+    - cilium
+  - name: etcd-k8s-res-count-exporter
+    version: 1.10.0
+    dependsOn:
+    - kyverno-crds
+  - name: external-dns
+    version: 3.1.0
+    dependsOn:
+    - prometheus-operator-crd
+  - name: k8s-audit-metrics
+    version: 0.10.0
+    dependsOn:
+    - kyverno-crds
+  - name: k8s-dns-node-cache
+    version: 2.8.1
+    dependsOn:
+    - kyverno-crds
+  - name: metrics-server
+    version: 2.4.2
+    dependsOn:
+    - kyverno-crds
+  - name: net-exporter
+    version: 1.21.0
+    dependsOn:
+    - prometheus-operator-crd
+  - name: network-policies
+    catalog: cluster
+    version: 0.1.1
+    dependsOn:
+    - cilium
+  - name: node-exporter
+    version: 1.20.0
+    dependsOn:
+    - kyverno-crds
+  - name: observability-bundle
+    version: 1.8.0
+    dependsOn:
+    - coredns
+  - name: observability-policies
+    version: 0.0.1
+    dependsOn:
+    - kyverno-crds
+  - name: prometheus-blackbox-exporter
+    version: 0.4.2
+    dependsOn:
+    - prometheus-operator-crd
+  - name: security-bundle
+    catalog: giantswarm
+    version: 1.8.2
+    dependsOn:
+    - prometheus-operator-crd
+  - name: teleport-kube-agent
+    version: 0.10.3
+  - name: vertical-pod-autoscaler
+    version: 5.3.0
+    dependsOn:
+    - prometheus-operator-crd
+  - name: vertical-pod-autoscaler-crd
+    version: 3.1.1
+  components:
+  - name: cluster-azure
+    catalog: cluster
+    version: 1.4.0
+  - name: flatcar
+    version: 3975.2.2
+  - name: kubernetes
+    version: 1.29.10
+  - name: os-tooling
+    version: 1.20.1
+  date: "2024-11-13T12:00:00Z"
+  state: active