Update capi modules

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
sigs.k8s.io/cluster-api	v1.8.3 -> v1.8.5
sigs.k8s.io/cluster-api-provider-aws/v2	v2.6.1 -> v2.7.1

---

Release Notes

kubernetes-sigs/cluster-api (sigs.k8s.io/cluster-api)

v1.8.5

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.27.x -> v1.31.x
• Workload Cluster: v1.25.x -> v1.31.x

More information about version support can be found here

Changes since v1.8.4

📈 Overview

• 9 new commits merged
• 2 bugs fixed 🐛

🐛 Bug Fixes

• KCP: Consider all machines for setting .status.version (#​11306)
• Testing: Fix: incorrect name used in kustomize path (#​11307)

🌱 Others

• clusterctl: Bump cert-manager to 1.16.1 (#​11323)
• Dependency: Bump Go to v1.22.8 version (#​11359)
• e2e: Remove json logging replacement in e2e test config (#​11321)
• e2e: Test: add PreWaitForControlplaneToBeUpgraded to ClusterUpgradeConformanceSpec (#​11303)
• KCP: Skip validation if CoreDNS migration library supports an upgrade if the library is not used (#​11325)
• Testing: Test/framework: allow to include arbitrary types when dumping resources (#​11310)

📖 Additionally, there has been 1 contribution to our documentation and book. (#​11294)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.8.4

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.27.x -> v1.31.x
• Workload Cluster: v1.25.x -> v1.31.x

More information about version support can be found here

Changes since v1.8.3

📈 Overview

• 15 new commits merged
• 2 bugs fixed 🐛

🐛 Bug Fixes

• CI: Hack: fix the shell used when running pr-verify (#​11170)
• ClusterClass: Fix nil pointer for empty workers in webhook (#​11198)

🌱 Others

• CI: Pr-verify: use env var for passing the PR title (#​11230)
• CI: Replace kubebuilder-release-tools with new workflow (#​11167)
• CI: Switch to using ECR mirror for trivy DB repo in weekly security scan (#​11261)
• ClusterCacheTracker: Add cacheSyncPeriod option to ClusterCacheTracker (#​11249)
• clusterctl: Add vultr infrastructure provider (#​11217)
• clusterctl: Bump cert manager to v1.16.0 (#​11264)
• clusterctl: Update RKE2 provider URL (#​11225)
• e2e: Test/e2e: decrease concurrency (#​11222)
• Logging: Reduce verbosity of logs when calling Runtime Extensions (#​11200)
• Machine: Prevent error spamming for NodeOutdatedTaint if objects are not found (#​11199)
• Testing: Test/framework: allow users to modify cache.Options (#​11203)
• Testing: Test/framework: GetCAPIResources should warn on rbac issues (#​11206)

📖 Additionally, there has been 1 contribution to our documentation and book. (#​11177)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

kubernetes-sigs/cluster-api-provider-aws (sigs.k8s.io/cluster-api-provider-aws/v2)

v2.7.1

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.7.1

Documentation

Changelog since v2.6.1

NOTE: there is no v2.7.0 release available due to an issue encountered during the release process.

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• A new community owned AWS account is now being used for publishing AMIs. The old account owner by a company is no longer accessible and the images are being automatically deleted by AWS. Support for ubuntu 18.04 & 20.04 has been dropped and ubuntu 24.04 is now the default OS if no OS is supplied. (#​5133, @​richardcase)
• View the projects policy on publishing AMIs here.
• There is known issue creating clusters with Kubernetes v1.30 or greater when the load balancer is an ELB (which is the default). Its recommended for new clusters that you use an NLB instead, See #​5139 for further details.

Changes by Kind

Support

• Add issue templates for reviewer and maintainer changes (#​5079, @​richardcase)
• Bump CAPI to v1.8.4 (#​5061, @​damdo)
• Switch PodDisruptionBudget in templates to policy/v1 (#​5102, @​AndiDog)
• Templates: align cluster-template.yaml and cluster-template-machinepool.yaml, use external cloud controller and CSI (#​5136, @​AndiDog)
• Update metadata file for v2.7.0 release. (#​5187, @​richardcase)

Feature

• Add NonRootVolumes to AWSMachinePool launch template. (#​4954, @​mnitchev)
• Add ROSA Control plane registry configuration. (#​5132, @​serngawy)
• Change prevenet deletion label to be specific to CAPA. (#​5072, @​richardcase)
• Feat: add support for additionalControlPlaneIngressRules in AWSManagedControlPlane (#​4783, @​fad3t)
• New AMI building workflow that allows a packer vars file to be passed in. (#​5152, @​richardcase)
• New AWSCluster.spec.network.NodePortIngressRuleCidrBlocks parameter which allows to specify IPv4 CIDR blocks for Security group rule "Node Port Services" instead of default 0.0.0.0/. (#​5147, @​krasoffski)
• New workflow to publish CAPA AMIs (#​5138, @​richardcase)
• Support adding custom secondary VPC CIDR blocks in AWSCluster (#​4898, @​AndiDog)
• Support setting maxHealthyPercentage to configure ASG instance refresh (#​5140, @​fiunchinho)

Bug or Regression

• A missing permission needed for using nlbs (#​5154, @​richardcase)
• Check for the LB "active" status instead of trying to resolve the DNS name to validate the LB is ready. (#​5093, @​r4f4)
• Fix duplicated/leaked EIP when using BYO IPv4 on Machines. (#​5039, @​mtulio)
• Fix kustomize issue with e2e tests. (#​5167, @​richardcase)
• Fix: do not attach security groups for Network Load Balancers in secret regions. (#​5030, @​r4f4)
• Mark S3BucketCreated condition ready after successful reconciliation (#​5089, @​AndiDog)
• Updates EKS e2e tests after recent bumping of EKS versions. (#​5185, @​richardcase)

Uncategorized

• Add versionGate Acknowledgement for upgrading ROSA-HCP y-stream versions (#​5166, @​serngawy)
• Fix: Fargate: Standardize cluster name in role names to avoid errors on mismatch between Cluster CR and EKS cluster name (#​5111, @​alam0rt)
• Update Flatcar template to use external CCM. (#​5099, @​ader1990)

The images for this release are:

registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.7.1

Thanks to all our contributors.

v2.7.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/google/gnostic-models	v0.6.8 -> v0.6.9-0.20230804172637-c7be7c783f49