all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-jammy:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe81:532
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: a497548d-9a42-447c-a77a-9b34a0257188
        host_id: 9a3b43c52073b98876da7433cf53a5f9772104a91b94e1d0ef2a8e4f
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe81:532
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 10.128.0.99
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.195
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe81:532
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: YAKEcloud/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job flake8 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#32>'
      - '<Job flake8 explicit: None implied: None source: YAKEcloud/yake-ansible/.zuul.yaml@main#82>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: ecae1cfc56c342629970dbf8b4e774f7
      build_refs:
      - branch: main
        change: '471'
        change_message: "chore(deps): update dependency gardener/gardener to v1.135.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
          | `1.134.2` \u2192 `1.135.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
          (gardener/gardener)</summary>\n\n### [`v1.135.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.135.0)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.134.3...v1.135.0)\n\n###
          \\[github.com/gardener/gardener:v1.135.0]\n\n#### \u26A0\uFE0F Breaking
          Changes\n\n- `[OPERATOR]` Internal dns configuration for seeds `.spec.dns.internal`
          is now required. Make sure to set this field in your templates before upgrading
          Gardener to the current version. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13529](https://redirect.github.com/gardener/gardener/pull/13529)]\n-
          `[OPERATOR]` gardener-resource-manager now enforces the desired OwnerReferences
          for objects it manages. Previously, it set OwnerReferences only when creating
          objects and did not update them afterwards. by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz)
          \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
          `[USER]` :warning: The Seed API field `spec.dns.provider.secretRef` has
          been deprecated in favor of `spec.dns.provider.credentialsRef`. The `secretRef`
          field will be removed in Gardener version `>= v1.139.0`, until then - please
          consider migrating to the new `credentialsRef` field.\n  - :info: Gardener
          takes care to keep both fields in sync when the configured credentials is
          of type `Secret`. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
          `[USER]` :warning: The Shoot API field `spec.dns.providers.secretName` has
          been deprecated in favor of `spec.dns.providers.credentialsRef`. The `secretName`
          field will be disallowed to be used by shoots running on Kubernetes 1.35
          or newer, until then - please consider migrating to the new `credentialsRef`
          field.\n  - Gardener API server takes care to keep both fields in sync when
          `Secret` is the type of the configured credentials. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` Change the registry port in the local setup to `:5001`. by
          [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13661](https://redirect.github.com/gardener/gardener/pull/13661)]\n-
          `[DEVELOPER]` The `extension-class` flag has been renamed to `extension-classes`
          to support multiple extension classes per controller deployment. If the
          extension depends on [`cmd.ReconcilerOptions`](https://redirect.github.com/gardener/gardener/blob/master/extensions/pkg/controller/cmd/reconciler_options.go),
          the renaming will automatically take effect. Please adjust your deployment
          manifest to reflect this change. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13718](https://redirect.github.com/gardener/gardener/pull/13718)]\n-
          `[DEVELOPER]` The `SecretData` field has been removed from the `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.Values`
          struct, use `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.CredentialsDeployFunc`
          instead to deploy secret data into a secret. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/gardener.GenerateDNSProviderName`
          has been removed. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderSecretNamesEqual`
          has been removed, use `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderCredentialsRefsEqual`
          instead. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` The `SecretData` field of the `github.com/gardener/gardener/pkg/utils/gardener.Domain`
          struct has been replaced with `Credentials` field of type `sigs.k8s.io/controller-runtime/pkg/client.Object`.
          by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[DEPENDENCY]` The naming logic for automatically generated webhooks has
          changed. If the extension name passed to [`extensionscmdwebhook.NewAddToManagerOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/webhook/cmd/options.go#L203)
          starts with `gardener-`, the extension's webhook names are no longer prefixed
          with `gardener-extension-`. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
          \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` Adapted the policy in the Kubernetes
          version support process to retain only the latest 4 minor versions, improving
          security by dropping older, unpatched versions. Additionally, a minimum
          period of 14 months has been added, during which Gardener will maintain
          support for any given Kubernetes version before removing it again. by [@&#8203;marc1404](https://redirect.github.com/marc1404)
          \\[[#&#8203;13471](https://redirect.github.com/gardener/gardener/pull/13471)]\n-
          `[USER]` The order of entries in the `NamespacedCloudProfile.Status.CloudProfileSpec`
          is now the same as in the parent `CloudProfile.Spec`. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13772](https://redirect.github.com/gardener/gardener/pull/13772)]\n-
          `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/kubernetes.GetCredentialsByObjectReference`
          has been changed to accept `client.Reader` instead of `client.Client`. by
          [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` The script `hack/vgopath-setup.sh` and `hack/tools.mk` entry
          for `$(VGOPATH)` are deprecated and will be removed after `gardener/gardener@v1.142`
          has been released. It is recommended that consumers stop using them from
          the `gardener/gardener` repository. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
          `[DEVELOPER]` Source code changes that break various aspects of the monitoring
          stack in ways that were previously unnoticed are now detected during pull
          request validation. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
          `[DEVELOPER]` The generic actuator of the control plane now wraps seed-related
          charts into `ManagedResource`s . Any imperative logic in your provider extension
          that does not consider management through the gardener-resource-manager
          can potentially be cleaned up. by [@&#8203;kon-angelo](https://redirect.github.com/kon-angelo)
          \\[[#&#8203;13585](https://redirect.github.com/gardener/gardener/pull/13585)]\n-
          `[DEVELOPER]` The usages of `VGOPATH` have been removed. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
          `[DEVELOPER]` A new rule was added to the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md)
          - `Drop unutilised capabilities`. Additionally, the `Do not run containers
          as root` rule was extended. For more details, check the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md).
          by [@&#8203;mstueer](https://redirect.github.com/mstueer) \\[[#&#8203;13204](https://redirect.github.com/gardener/gardener/pull/13204)]\n-
          `[DEPENDENCY]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
          resources. Provider extensions should start validating them similar to references
          for `v1.Secret` resources. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n\n####
          \u2728 New Features\n\n- `[OPERATOR]` A new `VPNBondingModeRoundRobin` feature
          gate is introduced for gardenlet. When enabled, HA VPN uses round-robin
          bonding mode to increase availability under network degradation. by [@&#8203;domdom82](https://redirect.github.com/domdom82)
          \\[[#&#8203;13649](https://redirect.github.com/gardener/gardener/pull/13649)]\n-
          `[OPERATOR]` `gardenlet` can now propagate static manifests stored in the
          seed cluster's `garden` namespace to all shoot namespaces. Read all about
          it [here](https://redirect.github.com/gardener/gardener/tree/master/docs/extensions/static-manifests.md).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13614](https://redirect.github.com/gardener/gardener/pull/13614)]\n-
          `[OPERATOR]` Support replacement of individual assets for the gardener dashboard
          ([gardener/dashboard#2687](https://redirect.github.com/gardener/dashboard/pull/2687))
          by [@&#8203;grolu](https://redirect.github.com/grolu) \\[[#&#8203;13640](https://redirect.github.com/gardener/gardener/pull/13640)]\n-
          `[OPERATOR]` Extend `gardener-operator` and `gardenlet` care controllers
          to query the Prometheus instances for health checks of the monitoring components.
          If the new health checks fail, they are reflected in the status condition
          of the `Shoot`, `Seed` or `Garden` resources. These health checks are introduced
          behind a feature gate `PrometheusHealthChecks` that is disabled by default.
          by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
          `[OPERATOR]` It is now possible to configure custom namespaces in the virtual
          cluster that the `virtual-garden-gardener-resource-manager` should handle.
          Use `.spec.virtualCluster.gardener.gardenerResourceManager.additionalTargetNamespaces`
          in `Garden` resource. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13761](https://redirect.github.com/gardener/gardener/pull/13761)]\n-
          `[OPERATOR]` WorkloadIdentity credentials are now allowed to be used for
          Shoot DNS domains, Seed ingress, default and internal DNS domains. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[OPERATOR]` Add new `Plutono` dashboard for monitoring `VPA Updater` operations
          across `Shoot`, `Seed` and `Garden` clusters. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
          \\[[#&#8203;13477](https://redirect.github.com/gardener/gardener/pull/13477)]\n-
          `[USER]` Rotation for the ssh keypair for worker nodes, observability passwords
          and etcd encryption key can now be done in the maintenance window via the
          `.spec.maitenance.autoRotation.credentials` field of a `Shoot`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
          `[USER]` A new Seed API field `credentialsRef` has been introduced in `spec.dns.provider`
          structure. It is designed to support diverse types of credentials, as of
          now `v1.Secrets` and `security.gardener.cloud/v1alpha1.WorkloadIdentity`
          are allowed, but only `Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
          `[USER]` You can now specify `nftables` as proxy mode implementation of
          `kube-proxy` in the `Shoot` spec like so if your Kubernetes version is `>=
          1.31`: `.spec.kubernetes.kubeProxy.mode=NFTables`, please consult <https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/>
          for all glory details. by [@&#8203;majst01](https://redirect.github.com/majst01)
          \\[[#&#8203;13558](https://redirect.github.com/gardener/gardener/pull/13558)]\n-
          `[USER]` A new optional Shoot API field `credentialsRef` has been introduced
          in `spec.dns.providers` structure. It is designed to support diverse types
          of credentials. As of now only `v1.Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[USER]` The Shoot resource does now support configuring the vpa-recommender
          concurrent workers to update VerticalPodAutoscalers and VerticalPodAutoscalerCheckpoints
          via the new `.spec.kubernetes.verticalPodAutoscaler.recommenderUpdateWorkerCount`
          field. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13591](https://redirect.github.com/gardener/gardener/pull/13591)]\n-
          `[DEVELOPER]` `Shoot`s and `Seed`s are now allowed to reference `WorkloadIdentity`
          resources via their respective field `spec.resources`, extensions can leverage
          this mechanism in order to use workload identity credentials for authentication
          with external services supporting trust based authentication. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13469](https://redirect.github.com/gardener/gardener/pull/13469)]\n-
          `[DEVELOPER]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
          resources. This can be beneficial if shoot credentials are not managed directly
          by end-users but by the service provider/Gardener operators. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n-
          `[DEVELOPER]` It is now possible to create a `SecretsManager` based on a
          `Garden` resource. Extensions can, for instance, manage certificates for
          webhooks in the garden runtime cluster while leveraging Gardener's certificate
          automation features (such as CA rotation, renewal, etc.). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13662](https://redirect.github.com/gardener/gardener/pull/13662)]\n-
          `[DEPENDENCY]` The certificate library for extension webhooks now supports
          skipping the component name prefixing with `gardener-extension` when `DoNotPrefixComponentName`
          is set to `true`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13765](https://redirect.github.com/gardener/gardener/pull/13765)]\n-
          `[DEPENDENCY]` [`extensionscmdcontroller.GeneralOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/controller/cmd/options.go#L479)
          can now be shared between controllers and webhooks. It contains general
          deployment information that are relevant to both. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
          \U0001F41B Bug Fixes\n\n- `[OPERATOR]` Refactor the collector `journald`
          receiver to capture kernel logs via a more stable method. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13664](https://redirect.github.com/gardener/gardener/pull/13664)]\n-
          `[OPERATOR]` An issue causing credentials rotation for the Garden resource
          to fail is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13735](https://redirect.github.com/gardener/gardener/pull/13735)]\n-
          `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
          in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13858](https://redirect.github.com/gardener/gardener/pull/13858)]\n-
          `[OPERATOR]` A bug has been fixed which was preventing removing image vector
          overwrite configurations from `gardenlet`s deployed via `seedmanagement.gardener.cloud/v1alpha1.Gardenlet`
          resources (even though `.spec.deployment.{imageVectorOverwrite,componentImageVectorOverwrite}`
          was removed). by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13646](https://redirect.github.com/gardener/gardener/pull/13646)]\n-
          `[OPERATOR]` The token requestor will check the UID of a referenced `ServiceAccount`
          and request a new token before the former one issued for a different UID
          expired. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13630](https://redirect.github.com/gardener/gardener/pull/13630)]\n-
          `[USER]` A bug has been fixed which was causing invalid high-availability
          configuration for system components in case a `Shoot` was configured with
          a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13873](https://redirect.github.com/gardener/gardener/pull/13873)]\n-
          `[USER]` Project admins are allowed to set ownerReference with `kind: Shoot`
          and `blockOwnerDeletion: true` for Secrets/ConfigMaps when the [`OwnerReferencesPermissionEnforcement`](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement)
          admission plugin is enabled for the virtual kube-apiserver. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13743](https://redirect.github.com/gardener/gardener/pull/13743)]\n-
          `[USER]` Fix a bug that prevents updating expiration dates of overridden
          machine image versions in `NamespacedCloudProfile`s. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13754](https://redirect.github.com/gardener/gardener/pull/13754)]\n-
          `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
          only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13670](https://redirect.github.com/gardener/gardener/pull/13670)]\n-
          `[USER]` A bug causing `Shoot` clusters to not be reconciled during their
          maintenance window when the `Shoot` does not enable `ssh` and has `rotate-ssh-keypair`
          operation configured for maintenance window was fixed. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
          `[DEPENDENCY]` extension library: An issue causing deletions of `extensions.BackupEntry`
          to be stuck due to conflicts while removing the finalizer from the BackupEntry
          Secret is now fixed. This mostly affected the deletion of the source `BackupEntry`
          during the `restore` phase of control plane migration. by [@&#8203;plkokanov](https://redirect.github.com/plkokanov)
          \\[[#&#8203;13775](https://redirect.github.com/gardener/gardener/pull/13775)]\n\n####
          \U0001F3C3 Others\n\n- `[OPERATOR]` Set static cpu requests for fluent-operator.
          by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13788](https://redirect.github.com/gardener/gardener/pull/13788)]\n-
          `[OPERATOR]` OwnerReferences now ensure that no orphan EnvoyFilters and
          Secrets remain in istio-ingressgateway namespaces when a shoot was purged
          manually. by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz)
          \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
          `[OPERATOR]` Allow scraping `kube_node_created` from kube-state-metrics
          by adding it to the metric allowlist. by [@&#8203;jguipi](https://redirect.github.com/jguipi)
          \\[[#&#8203;13683](https://redirect.github.com/gardener/gardener/pull/13683)]\n-
          `[OPERATOR]` Add Plutono dashboard for shoot control plane cost calculation
          by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13605](https://redirect.github.com/gardener/gardener/pull/13605)]\n-
          `[OPERATOR]` Refactor node local dns tests to avoid duplications and simplify
          structure. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13694](https://redirect.github.com/gardener/gardener/pull/13694)]\n-
          `[OPERATOR]` gardenlet now adds labels for `DNSRecord` resources created
          for `Shoot` control planes. This allows using label selectors to target
          `DNSRecord`s used for `Shoot` control plane components. by [@&#8203;hown3d](https://redirect.github.com/hown3d)
          \\[[#&#8203;13444](https://redirect.github.com/gardener/gardener/pull/13444)]\n-
          `[OPERATOR]` Updates on old `Shoots`, `ManagedSeedSets`, and `Garden` are
          now allowed if invalid accepted issuers are unchanged. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13514](https://redirect.github.com/gardener/gardener/pull/13514)]\n-
          `[OPERATOR]` On starup, gardenlet and gardener-operator now patch the needed
          VerticalPodAutoscaler resources depending on the `VPAInPlaceUpdates` feature
          gate value. This is needed to ensure that all VerticalPodAutoscaler resources
          will be updated immediately with the desired update mode when the `VPAInPlaceUpdates`
          feature gate is enabled or disabled. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
          \\[[#&#8203;13573](https://redirect.github.com/gardener/gardener/pull/13573)]\n-
          `[OPERATOR]` Set static cpu requests for node-exporter by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
          \\[[#&#8203;13790](https://redirect.github.com/gardener/gardener/pull/13790)]\n-
          `[OPERATOR]` A link to the `Seed`-specific dashboard has been added to the
          annotations of `Seed`-related alerts. This allows operators to quickly navigate
          from an alert to the relevant monitoring dashboard for faster troubleshooting.
          by [@&#8203;cathyzhang05](https://redirect.github.com/cathyzhang05) \\[[#&#8203;13555](https://redirect.github.com/gardener/gardener/pull/13555)]\n-
          `[OPERATOR]` Change metrics port for OTel collector on the nodes from 8888
          to 18888. by [@&#8203;dnaeon](https://redirect.github.com/dnaeon) \\[[#&#8203;13798](https://redirect.github.com/gardener/gardener/pull/13798)]\n-
          `[OPERATOR]` Extended RBAC rules for `gardener-metrics-exporter` to cover
          `Gardenlet` resources as well. by [@&#8203;RaphSku](https://redirect.github.com/RaphSku)
          \\[[#&#8203;13806](https://redirect.github.com/gardener/gardener/pull/13806)]\n-
          `[OPERATOR]` Update gardenlets values.yaml template to include the internal
          DNS secret for the local extension setup. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13679](https://redirect.github.com/gardener/gardener/pull/13679)]\n-
          `[OPERATOR]` The Kubernetes version check can now be explicitly disabled
          by setting the environment variable `EXPERIMENTAL_DISABLE_KUBERNETES_VERSION_CHECK`
          to `true`. This is intended for specific experimental or troubleshooting
          scenarios where temporarily bypassing the version validation is necessary.
          by [@&#8203;majst01](https://redirect.github.com/majst01) \\[[#&#8203;13221](https://redirect.github.com/gardener/gardener/pull/13221)]\n-
          `[OPERATOR]` The mutating `ManagedSeed` admission plugin is now also a validating
          one. Validations which are executed by this admission plugin during the
          mutation phase will be gradually moved to the validating `ManagedSeed` admission
          plugin. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13621](https://redirect.github.com/gardener/gardener/pull/13621)]\n-
          `[USER]` The `.spec.kubernetes.kubeAPIServer.requests.max{Non}MutatingInflight`
          flags can now be increased to `5000` (non-mutating) / `2500` (mutating).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13877](https://redirect.github.com/gardener/gardener/pull/13877)]\n-
          `[DEVELOPER]` The `CloudProfile` for the local dev setup was updated from
          Kubernetes version 1.34.0 to 1.34.3. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13874](https://redirect.github.com/gardener/gardener/pull/13874)]\n-
          `[DEVELOPER]` The kubectl apply command for the `00-namespace-garden.yaml`
          resource now includes the `--force-conflicts flag`. This enhancement resolves
          conflicts that previously caused errors during the local extension setup,
          ensuring a smoother and more reliable deployment process. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13676](https://redirect.github.com/gardener/gardener/pull/13676)]\n-
          `[DEVELOPER]` Add permissions to read and watch `NamespacedCloudProfile`s
          for the dashboard. by [@&#8203;klocke-io](https://redirect.github.com/klocke-io)
          \\[[#&#8203;13500](https://redirect.github.com/gardener/gardener/pull/13500)]\n-
          `[DEVELOPER]` The generic control-plane webhook is now capable of ensuring
          the `kube-apiserver` and `kube-controller-manager` deployments, as well
          as `etcd`s, of the virtual garden cluster. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13635](https://redirect.github.com/gardener/gardener/pull/13635)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.30.0` to `v0.30.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13779](https://redirect.github.com/gardener/gardener/pull/13779)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
          from `3.21.3` to `3.23.2`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13744](https://redirect.github.com/gardener/gardener/pull/13744)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/kube-state-metrics/kube-state-metrics`
          from `v2.17.0` to `v2.18.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13808](https://redirect.github.com/gardener/gardener/pull/13808)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.29.0` to `v0.30.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13663](https://redirect.github.com/gardener/gardener/pull/13663)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/vali`
          from `v2.2.29` to `v2.2.30`. [Release Notes](https://redirect.github.com/credativ/vali/releases/tag/v2.2.30)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13689](https://redirect.github.com/gardener/gardener/pull/13689)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.1.4` to `2.2.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13726](https://redirect.github.com/gardener/gardener/pull/13726)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
          from `distroless-v1.36.4` to `v1.37.0`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.37.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13781](https://redirect.github.com/gardener/gardener/pull/13781)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
          from `1.27.4` to `1.27.5`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.4`
          to `1.27.5`.\n  - `istio.io/api` from `v1.27.4` to `v1.27.5`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13711](https://redirect.github.com/gardener/gardener/pull/13711)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
          from `v0.8.22` to `v0.8.24`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13716](https://redirect.github.com/gardener/gardener/pull/13716)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/gardener-metrics-exporter`
          from `0.42.0` to `0.43.0`. [Release Notes](https://redirect.github.com/gardener/gardener-metrics-exporter/releases/tag/0.43.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13760](https://redirect.github.com/gardener/gardener/pull/13760)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
          from `v1.34.0` to `v1.34.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13717](https://redirect.github.com/gardener/gardener/pull/13717)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
          from `0.44.0` to `0.45.0`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.45.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13677](https://redirect.github.com/gardener/gardener/pull/13677)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/brancz/kube-rbac-proxy`
          from `v0.20.1` to `v0.20.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13782](https://redirect.github.com/gardener/gardener/pull/13782)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/logging`
          from `v0.70.0` to `v0.71.0`. [Release Notes](https://redirect.github.com/gardener/logging/releases/tag/v0.71.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13741](https://redirect.github.com/gardener/gardener/pull/13741)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.1` to `1.83.2`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13884](https://redirect.github.com/gardener/gardener/pull/13884)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/apiserver-proxy`
          from `v0.19.0` to `v0.20.0`. [Release Notes](https://redirect.github.com/gardener/apiserver-proxy/releases/tag/v0.20.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13749](https://redirect.github.com/gardener/gardener/pull/13749)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/plutono`
          from `v7.5.44` to `v7.5.45`. [Release Notes](https://redirect.github.com/credativ/plutono/releases/tag/v7.5.45)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13690](https://redirect.github.com/gardener/gardener/pull/13690)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
          from `distroless-v1.36.3` to `v1.36.4`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.36.4)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13629](https://redirect.github.com/gardener/gardener/pull/13629)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.0` to `1.83.1`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.1)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13836](https://redirect.github.com/gardener/gardener/pull/13836)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.2.3` to `2.4.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13787](https://redirect.github.com/gardener/gardener/pull/13787)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.135.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.135.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.135.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.135.0`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.135.0`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.135.0`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.135.0`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.135.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.135.0`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.135.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.135.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.135.0`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.135.0`\n\n###
          [`v1.134.3`](https://redirect.github.com/gardener/gardener/releases/tag/v1.134.3)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.134.2...v1.134.3)\n\n###
          \\[github.com/gardener/gardener:v1.134.3]\n\n#### \U0001F41B Bug Fixes\n\n-
          `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
          in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13860](https://redirect.github.com/gardener/gardener/pull/13860)]\n-
          `[USER]` A bug has been fixed which was causing invalid high-availability
          configuration for system components in case a `Shoot` was configured with
          a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13870](https://redirect.github.com/gardener/gardener/pull/13870)]\n-
          `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
          only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13813](https://redirect.github.com/gardener/gardener/pull/13813)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.134.3`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.134.3`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.134.3`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.134.3`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.134.3`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.134.3`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.134.3`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.134.3`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.134.3`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.134.3`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.134.3`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.134.3`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.134.3`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/471
        commit_id: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
        patchset: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      buildset: 276aa808dca14894bd34039af9a73db2
      buildset_refs:
      - branch: main
        change: '471'
        change_message: "chore(deps): update dependency gardener/gardener to v1.135.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
          | `1.134.2` \u2192 `1.135.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
          (gardener/gardener)</summary>\n\n### [`v1.135.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.135.0)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.134.3...v1.135.0)\n\n###
          \\[github.com/gardener/gardener:v1.135.0]\n\n#### \u26A0\uFE0F Breaking
          Changes\n\n- `[OPERATOR]` Internal dns configuration for seeds `.spec.dns.internal`
          is now required. Make sure to set this field in your templates before upgrading
          Gardener to the current version. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13529](https://redirect.github.com/gardener/gardener/pull/13529)]\n-
          `[OPERATOR]` gardener-resource-manager now enforces the desired OwnerReferences
          for objects it manages. Previously, it set OwnerReferences only when creating
          objects and did not update them afterwards. by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz)
          \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
          `[USER]` :warning: The Seed API field `spec.dns.provider.secretRef` has
          been deprecated in favor of `spec.dns.provider.credentialsRef`. The `secretRef`
          field will be removed in Gardener version `>= v1.139.0`, until then - please
          consider migrating to the new `credentialsRef` field.\n  - :info: Gardener
          takes care to keep both fields in sync when the configured credentials is
          of type `Secret`. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
          `[USER]` :warning: The Shoot API field `spec.dns.providers.secretName` has
          been deprecated in favor of `spec.dns.providers.credentialsRef`. The `secretName`
          field will be disallowed to be used by shoots running on Kubernetes 1.35
          or newer, until then - please consider migrating to the new `credentialsRef`
          field.\n  - Gardener API server takes care to keep both fields in sync when
          `Secret` is the type of the configured credentials. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` Change the registry port in the local setup to `:5001`. by
          [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13661](https://redirect.github.com/gardener/gardener/pull/13661)]\n-
          `[DEVELOPER]` The `extension-class` flag has been renamed to `extension-classes`
          to support multiple extension classes per controller deployment. If the
          extension depends on [`cmd.ReconcilerOptions`](https://redirect.github.com/gardener/gardener/blob/master/extensions/pkg/controller/cmd/reconciler_options.go),
          the renaming will automatically take effect. Please adjust your deployment
          manifest to reflect this change. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13718](https://redirect.github.com/gardener/gardener/pull/13718)]\n-
          `[DEVELOPER]` The `SecretData` field has been removed from the `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.Values`
          struct, use `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.CredentialsDeployFunc`
          instead to deploy secret data into a secret. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/gardener.GenerateDNSProviderName`
          has been removed. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderSecretNamesEqual`
          has been removed, use `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderCredentialsRefsEqual`
          instead. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` The `SecretData` field of the `github.com/gardener/gardener/pkg/utils/gardener.Domain`
          struct has been replaced with `Credentials` field of type `sigs.k8s.io/controller-runtime/pkg/client.Object`.
          by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[DEPENDENCY]` The naming logic for automatically generated webhooks has
          changed. If the extension name passed to [`extensionscmdwebhook.NewAddToManagerOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/webhook/cmd/options.go#L203)
          starts with `gardener-`, the extension's webhook names are no longer prefixed
          with `gardener-extension-`. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
          \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` Adapted the policy in the Kubernetes
          version support process to retain only the latest 4 minor versions, improving
          security by dropping older, unpatched versions. Additionally, a minimum
          period of 14 months has been added, during which Gardener will maintain
          support for any given Kubernetes version before removing it again. by [@&#8203;marc1404](https://redirect.github.com/marc1404)
          \\[[#&#8203;13471](https://redirect.github.com/gardener/gardener/pull/13471)]\n-
          `[USER]` The order of entries in the `NamespacedCloudProfile.Status.CloudProfileSpec`
          is now the same as in the parent `CloudProfile.Spec`. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13772](https://redirect.github.com/gardener/gardener/pull/13772)]\n-
          `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/kubernetes.GetCredentialsByObjectReference`
          has been changed to accept `client.Reader` instead of `client.Client`. by
          [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` The script `hack/vgopath-setup.sh` and `hack/tools.mk` entry
          for `$(VGOPATH)` are deprecated and will be removed after `gardener/gardener@v1.142`
          has been released. It is recommended that consumers stop using them from
          the `gardener/gardener` repository. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
          `[DEVELOPER]` Source code changes that break various aspects of the monitoring
          stack in ways that were previously unnoticed are now detected during pull
          request validation. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
          `[DEVELOPER]` The generic actuator of the control plane now wraps seed-related
          charts into `ManagedResource`s . Any imperative logic in your provider extension
          that does not consider management through the gardener-resource-manager
          can potentially be cleaned up. by [@&#8203;kon-angelo](https://redirect.github.com/kon-angelo)
          \\[[#&#8203;13585](https://redirect.github.com/gardener/gardener/pull/13585)]\n-
          `[DEVELOPER]` The usages of `VGOPATH` have been removed. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
          `[DEVELOPER]` A new rule was added to the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md)
          - `Drop unutilised capabilities`. Additionally, the `Do not run containers
          as root` rule was extended. For more details, check the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md).
          by [@&#8203;mstueer](https://redirect.github.com/mstueer) \\[[#&#8203;13204](https://redirect.github.com/gardener/gardener/pull/13204)]\n-
          `[DEPENDENCY]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
          resources. Provider extensions should start validating them similar to references
          for `v1.Secret` resources. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n\n####
          \u2728 New Features\n\n- `[OPERATOR]` A new `VPNBondingModeRoundRobin` feature
          gate is introduced for gardenlet. When enabled, HA VPN uses round-robin
          bonding mode to increase availability under network degradation. by [@&#8203;domdom82](https://redirect.github.com/domdom82)
          \\[[#&#8203;13649](https://redirect.github.com/gardener/gardener/pull/13649)]\n-
          `[OPERATOR]` `gardenlet` can now propagate static manifests stored in the
          seed cluster's `garden` namespace to all shoot namespaces. Read all about
          it [here](https://redirect.github.com/gardener/gardener/tree/master/docs/extensions/static-manifests.md).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13614](https://redirect.github.com/gardener/gardener/pull/13614)]\n-
          `[OPERATOR]` Support replacement of individual assets for the gardener dashboard
          ([gardener/dashboard#2687](https://redirect.github.com/gardener/dashboard/pull/2687))
          by [@&#8203;grolu](https://redirect.github.com/grolu) \\[[#&#8203;13640](https://redirect.github.com/gardener/gardener/pull/13640)]\n-
          `[OPERATOR]` Extend `gardener-operator` and `gardenlet` care controllers
          to query the Prometheus instances for health checks of the monitoring components.
          If the new health checks fail, they are reflected in the status condition
          of the `Shoot`, `Seed` or `Garden` resources. These health checks are introduced
          behind a feature gate `PrometheusHealthChecks` that is disabled by default.
          by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
          `[OPERATOR]` It is now possible to configure custom namespaces in the virtual
          cluster that the `virtual-garden-gardener-resource-manager` should handle.
          Use `.spec.virtualCluster.gardener.gardenerResourceManager.additionalTargetNamespaces`
          in `Garden` resource. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13761](https://redirect.github.com/gardener/gardener/pull/13761)]\n-
          `[OPERATOR]` WorkloadIdentity credentials are now allowed to be used for
          Shoot DNS domains, Seed ingress, default and internal DNS domains. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[OPERATOR]` Add new `Plutono` dashboard for monitoring `VPA Updater` operations
          across `Shoot`, `Seed` and `Garden` clusters. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
          \\[[#&#8203;13477](https://redirect.github.com/gardener/gardener/pull/13477)]\n-
          `[USER]` Rotation for the ssh keypair for worker nodes, observability passwords
          and etcd encryption key can now be done in the maintenance window via the
          `.spec.maitenance.autoRotation.credentials` field of a `Shoot`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
          `[USER]` A new Seed API field `credentialsRef` has been introduced in `spec.dns.provider`
          structure. It is designed to support diverse types of credentials, as of
          now `v1.Secrets` and `security.gardener.cloud/v1alpha1.WorkloadIdentity`
          are allowed, but only `Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
          `[USER]` You can now specify `nftables` as proxy mode implementation of
          `kube-proxy` in the `Shoot` spec like so if your Kubernetes version is `>=
          1.31`: `.spec.kubernetes.kubeProxy.mode=NFTables`, please consult <https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/>
          for all glory details. by [@&#8203;majst01](https://redirect.github.com/majst01)
          \\[[#&#8203;13558](https://redirect.github.com/gardener/gardener/pull/13558)]\n-
          `[USER]` A new optional Shoot API field `credentialsRef` has been introduced
          in `spec.dns.providers` structure. It is designed to support diverse types
          of credentials. As of now only `v1.Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[USER]` The Shoot resource does now support configuring the vpa-recommender
          concurrent workers to update VerticalPodAutoscalers and VerticalPodAutoscalerCheckpoints
          via the new `.spec.kubernetes.verticalPodAutoscaler.recommenderUpdateWorkerCount`
          field. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13591](https://redirect.github.com/gardener/gardener/pull/13591)]\n-
          `[DEVELOPER]` `Shoot`s and `Seed`s are now allowed to reference `WorkloadIdentity`
          resources via their respective field `spec.resources`, extensions can leverage
          this mechanism in order to use workload identity credentials for authentication
          with external services supporting trust based authentication. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13469](https://redirect.github.com/gardener/gardener/pull/13469)]\n-
          `[DEVELOPER]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
          resources. This can be beneficial if shoot credentials are not managed directly
          by end-users but by the service provider/Gardener operators. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n-
          `[DEVELOPER]` It is now possible to create a `SecretsManager` based on a
          `Garden` resource. Extensions can, for instance, manage certificates for
          webhooks in the garden runtime cluster while leveraging Gardener's certificate
          automation features (such as CA rotation, renewal, etc.). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13662](https://redirect.github.com/gardener/gardener/pull/13662)]\n-
          `[DEPENDENCY]` The certificate library for extension webhooks now supports
          skipping the component name prefixing with `gardener-extension` when `DoNotPrefixComponentName`
          is set to `true`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13765](https://redirect.github.com/gardener/gardener/pull/13765)]\n-
          `[DEPENDENCY]` [`extensionscmdcontroller.GeneralOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/controller/cmd/options.go#L479)
          can now be shared between controllers and webhooks. It contains general
          deployment information that are relevant to both. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
          \U0001F41B Bug Fixes\n\n- `[OPERATOR]` Refactor the collector `journald`
          receiver to capture kernel logs via a more stable method. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13664](https://redirect.github.com/gardener/gardener/pull/13664)]\n-
          `[OPERATOR]` An issue causing credentials rotation for the Garden resource
          to fail is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13735](https://redirect.github.com/gardener/gardener/pull/13735)]\n-
          `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
          in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13858](https://redirect.github.com/gardener/gardener/pull/13858)]\n-
          `[OPERATOR]` A bug has been fixed which was preventing removing image vector
          overwrite configurations from `gardenlet`s deployed via `seedmanagement.gardener.cloud/v1alpha1.Gardenlet`
          resources (even though `.spec.deployment.{imageVectorOverwrite,componentImageVectorOverwrite}`
          was removed). by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13646](https://redirect.github.com/gardener/gardener/pull/13646)]\n-
          `[OPERATOR]` The token requestor will check the UID of a referenced `ServiceAccount`
          and request a new token before the former one issued for a different UID
          expired. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13630](https://redirect.github.com/gardener/gardener/pull/13630)]\n-
          `[USER]` A bug has been fixed which was causing invalid high-availability
          configuration for system components in case a `Shoot` was configured with
          a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13873](https://redirect.github.com/gardener/gardener/pull/13873)]\n-
          `[USER]` Project admins are allowed to set ownerReference with `kind: Shoot`
          and `blockOwnerDeletion: true` for Secrets/ConfigMaps when the [`OwnerReferencesPermissionEnforcement`](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement)
          admission plugin is enabled for the virtual kube-apiserver. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13743](https://redirect.github.com/gardener/gardener/pull/13743)]\n-
          `[USER]` Fix a bug that prevents updating expiration dates of overridden
          machine image versions in `NamespacedCloudProfile`s. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13754](https://redirect.github.com/gardener/gardener/pull/13754)]\n-
          `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
          only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13670](https://redirect.github.com/gardener/gardener/pull/13670)]\n-
          `[USER]` A bug causing `Shoot` clusters to not be reconciled during their
          maintenance window when the `Shoot` does not enable `ssh` and has `rotate-ssh-keypair`
          operation configured for maintenance window was fixed. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
          `[DEPENDENCY]` extension library: An issue causing deletions of `extensions.BackupEntry`
          to be stuck due to conflicts while removing the finalizer from the BackupEntry
          Secret is now fixed. This mostly affected the deletion of the source `BackupEntry`
          during the `restore` phase of control plane migration. by [@&#8203;plkokanov](https://redirect.github.com/plkokanov)
          \\[[#&#8203;13775](https://redirect.github.com/gardener/gardener/pull/13775)]\n\n####
          \U0001F3C3 Others\n\n- `[OPERATOR]` Set static cpu requests for fluent-operator.
          by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13788](https://redirect.github.com/gardener/gardener/pull/13788)]\n-
          `[OPERATOR]` OwnerReferences now ensure that no orphan EnvoyFilters and
          Secrets remain in istio-ingressgateway namespaces when a shoot was purged
          manually. by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz)
          \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
          `[OPERATOR]` Allow scraping `kube_node_created` from kube-state-metrics
          by adding it to the metric allowlist. by [@&#8203;jguipi](https://redirect.github.com/jguipi)
          \\[[#&#8203;13683](https://redirect.github.com/gardener/gardener/pull/13683)]\n-
          `[OPERATOR]` Add Plutono dashboard for shoot control plane cost calculation
          by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13605](https://redirect.github.com/gardener/gardener/pull/13605)]\n-
          `[OPERATOR]` Refactor node local dns tests to avoid duplications and simplify
          structure. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13694](https://redirect.github.com/gardener/gardener/pull/13694)]\n-
          `[OPERATOR]` gardenlet now adds labels for `DNSRecord` resources created
          for `Shoot` control planes. This allows using label selectors to target
          `DNSRecord`s used for `Shoot` control plane components. by [@&#8203;hown3d](https://redirect.github.com/hown3d)
          \\[[#&#8203;13444](https://redirect.github.com/gardener/gardener/pull/13444)]\n-
          `[OPERATOR]` Updates on old `Shoots`, `ManagedSeedSets`, and `Garden` are
          now allowed if invalid accepted issuers are unchanged. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13514](https://redirect.github.com/gardener/gardener/pull/13514)]\n-
          `[OPERATOR]` On starup, gardenlet and gardener-operator now patch the needed
          VerticalPodAutoscaler resources depending on the `VPAInPlaceUpdates` feature
          gate value. This is needed to ensure that all VerticalPodAutoscaler resources
          will be updated immediately with the desired update mode when the `VPAInPlaceUpdates`
          feature gate is enabled or disabled. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
          \\[[#&#8203;13573](https://redirect.github.com/gardener/gardener/pull/13573)]\n-
          `[OPERATOR]` Set static cpu requests for node-exporter by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
          \\[[#&#8203;13790](https://redirect.github.com/gardener/gardener/pull/13790)]\n-
          `[OPERATOR]` A link to the `Seed`-specific dashboard has been added to the
          annotations of `Seed`-related alerts. This allows operators to quickly navigate
          from an alert to the relevant monitoring dashboard for faster troubleshooting.
          by [@&#8203;cathyzhang05](https://redirect.github.com/cathyzhang05) \\[[#&#8203;13555](https://redirect.github.com/gardener/gardener/pull/13555)]\n-
          `[OPERATOR]` Change metrics port for OTel collector on the nodes from 8888
          to 18888. by [@&#8203;dnaeon](https://redirect.github.com/dnaeon) \\[[#&#8203;13798](https://redirect.github.com/gardener/gardener/pull/13798)]\n-
          `[OPERATOR]` Extended RBAC rules for `gardener-metrics-exporter` to cover
          `Gardenlet` resources as well. by [@&#8203;RaphSku](https://redirect.github.com/RaphSku)
          \\[[#&#8203;13806](https://redirect.github.com/gardener/gardener/pull/13806)]\n-
          `[OPERATOR]` Update gardenlets values.yaml template to include the internal
          DNS secret for the local extension setup. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13679](https://redirect.github.com/gardener/gardener/pull/13679)]\n-
          `[OPERATOR]` The Kubernetes version check can now be explicitly disabled
          by setting the environment variable `EXPERIMENTAL_DISABLE_KUBERNETES_VERSION_CHECK`
          to `true`. This is intended for specific experimental or troubleshooting
          scenarios where temporarily bypassing the version validation is necessary.
          by [@&#8203;majst01](https://redirect.github.com/majst01) \\[[#&#8203;13221](https://redirect.github.com/gardener/gardener/pull/13221)]\n-
          `[OPERATOR]` The mutating `ManagedSeed` admission plugin is now also a validating
          one. Validations which are executed by this admission plugin during the
          mutation phase will be gradually moved to the validating `ManagedSeed` admission
          plugin. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13621](https://redirect.github.com/gardener/gardener/pull/13621)]\n-
          `[USER]` The `.spec.kubernetes.kubeAPIServer.requests.max{Non}MutatingInflight`
          flags can now be increased to `5000` (non-mutating) / `2500` (mutating).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13877](https://redirect.github.com/gardener/gardener/pull/13877)]\n-
          `[DEVELOPER]` The `CloudProfile` for the local dev setup was updated from
          Kubernetes version 1.34.0 to 1.34.3. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13874](https://redirect.github.com/gardener/gardener/pull/13874)]\n-
          `[DEVELOPER]` The kubectl apply command for the `00-namespace-garden.yaml`
          resource now includes the `--force-conflicts flag`. This enhancement resolves
          conflicts that previously caused errors during the local extension setup,
          ensuring a smoother and more reliable deployment process. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13676](https://redirect.github.com/gardener/gardener/pull/13676)]\n-
          `[DEVELOPER]` Add permissions to read and watch `NamespacedCloudProfile`s
          for the dashboard. by [@&#8203;klocke-io](https://redirect.github.com/klocke-io)
          \\[[#&#8203;13500](https://redirect.github.com/gardener/gardener/pull/13500)]\n-
          `[DEVELOPER]` The generic control-plane webhook is now capable of ensuring
          the `kube-apiserver` and `kube-controller-manager` deployments, as well
          as `etcd`s, of the virtual garden cluster. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13635](https://redirect.github.com/gardener/gardener/pull/13635)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.30.0` to `v0.30.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13779](https://redirect.github.com/gardener/gardener/pull/13779)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
          from `3.21.3` to `3.23.2`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13744](https://redirect.github.com/gardener/gardener/pull/13744)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/kube-state-metrics/kube-state-metrics`
          from `v2.17.0` to `v2.18.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13808](https://redirect.github.com/gardener/gardener/pull/13808)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.29.0` to `v0.30.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13663](https://redirect.github.com/gardener/gardener/pull/13663)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/vali`
          from `v2.2.29` to `v2.2.30`. [Release Notes](https://redirect.github.com/credativ/vali/releases/tag/v2.2.30)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13689](https://redirect.github.com/gardener/gardener/pull/13689)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.1.4` to `2.2.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13726](https://redirect.github.com/gardener/gardener/pull/13726)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
          from `distroless-v1.36.4` to `v1.37.0`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.37.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13781](https://redirect.github.com/gardener/gardener/pull/13781)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
          from `1.27.4` to `1.27.5`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.4`
          to `1.27.5`.\n  - `istio.io/api` from `v1.27.4` to `v1.27.5`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13711](https://redirect.github.com/gardener/gardener/pull/13711)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
          from `v0.8.22` to `v0.8.24`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13716](https://redirect.github.com/gardener/gardener/pull/13716)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/gardener-metrics-exporter`
          from `0.42.0` to `0.43.0`. [Release Notes](https://redirect.github.com/gardener/gardener-metrics-exporter/releases/tag/0.43.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13760](https://redirect.github.com/gardener/gardener/pull/13760)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
          from `v1.34.0` to `v1.34.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13717](https://redirect.github.com/gardener/gardener/pull/13717)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
          from `0.44.0` to `0.45.0`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.45.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13677](https://redirect.github.com/gardener/gardener/pull/13677)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/brancz/kube-rbac-proxy`
          from `v0.20.1` to `v0.20.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13782](https://redirect.github.com/gardener/gardener/pull/13782)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/logging`
          from `v0.70.0` to `v0.71.0`. [Release Notes](https://redirect.github.com/gardener/logging/releases/tag/v0.71.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13741](https://redirect.github.com/gardener/gardener/pull/13741)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.1` to `1.83.2`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13884](https://redirect.github.com/gardener/gardener/pull/13884)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/apiserver-proxy`
          from `v0.19.0` to `v0.20.0`. [Release Notes](https://redirect.github.com/gardener/apiserver-proxy/releases/tag/v0.20.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13749](https://redirect.github.com/gardener/gardener/pull/13749)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/plutono`
          from `v7.5.44` to `v7.5.45`. [Release Notes](https://redirect.github.com/credativ/plutono/releases/tag/v7.5.45)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13690](https://redirect.github.com/gardener/gardener/pull/13690)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
          from `distroless-v1.36.3` to `v1.36.4`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.36.4)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13629](https://redirect.github.com/gardener/gardener/pull/13629)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.0` to `1.83.1`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.1)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13836](https://redirect.github.com/gardener/gardener/pull/13836)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.2.3` to `2.4.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13787](https://redirect.github.com/gardener/gardener/pull/13787)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.135.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.135.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.135.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.135.0`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.135.0`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.135.0`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.135.0`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.135.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.135.0`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.135.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.135.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.135.0`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.135.0`\n\n###
          [`v1.134.3`](https://redirect.github.com/gardener/gardener/releases/tag/v1.134.3)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.134.2...v1.134.3)\n\n###
          \\[github.com/gardener/gardener:v1.134.3]\n\n#### \U0001F41B Bug Fixes\n\n-
          `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
          in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13860](https://redirect.github.com/gardener/gardener/pull/13860)]\n-
          `[USER]` A bug has been fixed which was causing invalid high-availability
          configuration for system components in case a `Shoot` was configured with
          a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13870](https://redirect.github.com/gardener/gardener/pull/13870)]\n-
          `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
          only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13813](https://redirect.github.com/gardener/gardener/pull/13813)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.134.3`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.134.3`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.134.3`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.134.3`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.134.3`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.134.3`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.134.3`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.134.3`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.134.3`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.134.3`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.134.3`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.134.3`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.134.3`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/471
        commit_id: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
        patchset: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      change: '471'
      change_message: "chore(deps): update dependency gardener/gardener to v1.135.0\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
        | `1.134.2` \u2192 `1.135.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
        (gardener/gardener)</summary>\n\n### [`v1.135.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.135.0)\n\n[Compare
        Source](https://redirect.github.com/gardener/gardener/compare/v1.134.3...v1.135.0)\n\n###
        \\[github.com/gardener/gardener:v1.135.0]\n\n#### \u26A0\uFE0F Breaking Changes\n\n-
        `[OPERATOR]` Internal dns configuration for seeds `.spec.dns.internal` is
        now required. Make sure to set this field in your templates before upgrading
        Gardener to the current version. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
        \\[[#&#8203;13529](https://redirect.github.com/gardener/gardener/pull/13529)]\n-
        `[OPERATOR]` gardener-resource-manager now enforces the desired OwnerReferences
        for objects it manages. Previously, it set OwnerReferences only when creating
        objects and did not update them afterwards. by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz)
        \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
        `[USER]` :warning: The Seed API field `spec.dns.provider.secretRef` has been
        deprecated in favor of `spec.dns.provider.credentialsRef`. The `secretRef`
        field will be removed in Gardener version `>= v1.139.0`, until then - please
        consider migrating to the new `credentialsRef` field.\n  - :info: Gardener
        takes care to keep both fields in sync when the configured credentials is
        of type `Secret`. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
        `[USER]` :warning: The Shoot API field `spec.dns.providers.secretName` has
        been deprecated in favor of `spec.dns.providers.credentialsRef`. The `secretName`
        field will be disallowed to be used by shoots running on Kubernetes 1.35 or
        newer, until then - please consider migrating to the new `credentialsRef`
        field.\n  - Gardener API server takes care to keep both fields in sync when
        `Secret` is the type of the configured credentials. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
        `[DEVELOPER]` Change the registry port in the local setup to `:5001`. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
        \\[[#&#8203;13661](https://redirect.github.com/gardener/gardener/pull/13661)]\n-
        `[DEVELOPER]` The `extension-class` flag has been renamed to `extension-classes`
        to support multiple extension classes per controller deployment. If the extension
        depends on [`cmd.ReconcilerOptions`](https://redirect.github.com/gardener/gardener/blob/master/extensions/pkg/controller/cmd/reconciler_options.go),
        the renaming will automatically take effect. Please adjust your deployment
        manifest to reflect this change. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13718](https://redirect.github.com/gardener/gardener/pull/13718)]\n-
        `[DEVELOPER]` The `SecretData` field has been removed from the `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.Values`
        struct, use `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.CredentialsDeployFunc`
        instead to deploy secret data into a secret. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
        `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/gardener.GenerateDNSProviderName`
        has been removed. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
        `[DEVELOPER]` `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderSecretNamesEqual`
        has been removed, use `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderCredentialsRefsEqual`
        instead. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
        `[DEVELOPER]` The `SecretData` field of the `github.com/gardener/gardener/pkg/utils/gardener.Domain`
        struct has been replaced with `Credentials` field of type `sigs.k8s.io/controller-runtime/pkg/client.Object`.
        by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
        `[DEPENDENCY]` The naming logic for automatically generated webhooks has changed.
        If the extension name passed to [`extensionscmdwebhook.NewAddToManagerOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/webhook/cmd/options.go#L203)
        starts with `gardener-`, the extension's webhook names are no longer prefixed
        with `gardener-extension-`. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
        \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` Adapted the policy in the Kubernetes
        version support process to retain only the latest 4 minor versions, improving
        security by dropping older, unpatched versions. Additionally, a minimum period
        of 14 months has been added, during which Gardener will maintain support for
        any given Kubernetes version before removing it again. by [@&#8203;marc1404](https://redirect.github.com/marc1404)
        \\[[#&#8203;13471](https://redirect.github.com/gardener/gardener/pull/13471)]\n-
        `[USER]` The order of entries in the `NamespacedCloudProfile.Status.CloudProfileSpec`
        is now the same as in the parent `CloudProfile.Spec`. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
        \\[[#&#8203;13772](https://redirect.github.com/gardener/gardener/pull/13772)]\n-
        `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/kubernetes.GetCredentialsByObjectReference`
        has been changed to accept `client.Reader` instead of `client.Client`. by
        [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
        `[DEVELOPER]` The script `hack/vgopath-setup.sh` and `hack/tools.mk` entry
        for `$(VGOPATH)` are deprecated and will be removed after `gardener/gardener@v1.142`
        has been released. It is recommended that consumers stop using them from the
        `gardener/gardener` repository. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
        \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
        `[DEVELOPER]` Source code changes that break various aspects of the monitoring
        stack in ways that were previously unnoticed are now detected during pull
        request validation. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
        \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
        `[DEVELOPER]` The generic actuator of the control plane now wraps seed-related
        charts into `ManagedResource`s . Any imperative logic in your provider extension
        that does not consider management through the gardener-resource-manager can
        potentially be cleaned up. by [@&#8203;kon-angelo](https://redirect.github.com/kon-angelo)
        \\[[#&#8203;13585](https://redirect.github.com/gardener/gardener/pull/13585)]\n-
        `[DEVELOPER]` The usages of `VGOPATH` have been removed. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
        \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
        `[DEVELOPER]` A new rule was added to the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md)
        - `Drop unutilised capabilities`. Additionally, the `Do not run containers
        as root` rule was extended. For more details, check the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md).
        by [@&#8203;mstueer](https://redirect.github.com/mstueer) \\[[#&#8203;13204](https://redirect.github.com/gardener/gardener/pull/13204)]\n-
        `[DEPENDENCY]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
        resources. Provider extensions should start validating them similar to references
        for `v1.Secret` resources. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
        \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n\n####
        \u2728 New Features\n\n- `[OPERATOR]` A new `VPNBondingModeRoundRobin` feature
        gate is introduced for gardenlet. When enabled, HA VPN uses round-robin bonding
        mode to increase availability under network degradation. by [@&#8203;domdom82](https://redirect.github.com/domdom82)
        \\[[#&#8203;13649](https://redirect.github.com/gardener/gardener/pull/13649)]\n-
        `[OPERATOR]` `gardenlet` can now propagate static manifests stored in the
        seed cluster's `garden` namespace to all shoot namespaces. Read all about
        it [here](https://redirect.github.com/gardener/gardener/tree/master/docs/extensions/static-manifests.md).
        by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13614](https://redirect.github.com/gardener/gardener/pull/13614)]\n-
        `[OPERATOR]` Support replacement of individual assets for the gardener dashboard
        ([gardener/dashboard#2687](https://redirect.github.com/gardener/dashboard/pull/2687))
        by [@&#8203;grolu](https://redirect.github.com/grolu) \\[[#&#8203;13640](https://redirect.github.com/gardener/gardener/pull/13640)]\n-
        `[OPERATOR]` Extend `gardener-operator` and `gardenlet` care controllers to
        query the Prometheus instances for health checks of the monitoring components.
        If the new health checks fail, they are reflected in the status condition
        of the `Shoot`, `Seed` or `Garden` resources. These health checks are introduced
        behind a feature gate `PrometheusHealthChecks` that is disabled by default.
        by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
        `[OPERATOR]` It is now possible to configure custom namespaces in the virtual
        cluster that the `virtual-garden-gardener-resource-manager` should handle.
        Use `.spec.virtualCluster.gardener.gardenerResourceManager.additionalTargetNamespaces`
        in `Garden` resource. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
        \\[[#&#8203;13761](https://redirect.github.com/gardener/gardener/pull/13761)]\n-
        `[OPERATOR]` WorkloadIdentity credentials are now allowed to be used for Shoot
        DNS domains, Seed ingress, default and internal DNS domains. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
        `[OPERATOR]` Add new `Plutono` dashboard for monitoring `VPA Updater` operations
        across `Shoot`, `Seed` and `Garden` clusters. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
        \\[[#&#8203;13477](https://redirect.github.com/gardener/gardener/pull/13477)]\n-
        `[USER]` Rotation for the ssh keypair for worker nodes, observability passwords
        and etcd encryption key can now be done in the maintenance window via the
        `.spec.maitenance.autoRotation.credentials` field of a `Shoot`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
        \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
        `[USER]` A new Seed API field `credentialsRef` has been introduced in `spec.dns.provider`
        structure. It is designed to support diverse types of credentials, as of now
        `v1.Secrets` and `security.gardener.cloud/v1alpha1.WorkloadIdentity` are allowed,
        but only `Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
        `[USER]` You can now specify `nftables` as proxy mode implementation of `kube-proxy`
        in the `Shoot` spec like so if your Kubernetes version is `>= 1.31`: `.spec.kubernetes.kubeProxy.mode=NFTables`,
        please consult <https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/>
        for all glory details. by [@&#8203;majst01](https://redirect.github.com/majst01)
        \\[[#&#8203;13558](https://redirect.github.com/gardener/gardener/pull/13558)]\n-
        `[USER]` A new optional Shoot API field `credentialsRef` has been introduced
        in `spec.dns.providers` structure. It is designed to support diverse types
        of credentials. As of now only `v1.Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
        `[USER]` The Shoot resource does now support configuring the vpa-recommender
        concurrent workers to update VerticalPodAutoscalers and VerticalPodAutoscalerCheckpoints
        via the new `.spec.kubernetes.verticalPodAutoscaler.recommenderUpdateWorkerCount`
        field. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13591](https://redirect.github.com/gardener/gardener/pull/13591)]\n-
        `[DEVELOPER]` `Shoot`s and `Seed`s are now allowed to reference `WorkloadIdentity`
        resources via their respective field `spec.resources`, extensions can leverage
        this mechanism in order to use workload identity credentials for authentication
        with external services supporting trust based authentication. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
        \\[[#&#8203;13469](https://redirect.github.com/gardener/gardener/pull/13469)]\n-
        `[DEVELOPER]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
        resources. This can be beneficial if shoot credentials are not managed directly
        by end-users but by the service provider/Gardener operators. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
        \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n-
        `[DEVELOPER]` It is now possible to create a `SecretsManager` based on a `Garden`
        resource. Extensions can, for instance, manage certificates for webhooks in
        the garden runtime cluster while leveraging Gardener's certificate automation
        features (such as CA rotation, renewal, etc.). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13662](https://redirect.github.com/gardener/gardener/pull/13662)]\n-
        `[DEPENDENCY]` The certificate library for extension webhooks now supports
        skipping the component name prefixing with `gardener-extension` when `DoNotPrefixComponentName`
        is set to `true`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
        \\[[#&#8203;13765](https://redirect.github.com/gardener/gardener/pull/13765)]\n-
        `[DEPENDENCY]` [`extensionscmdcontroller.GeneralOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/controller/cmd/options.go#L479)
        can now be shared between controllers and webhooks. It contains general deployment
        information that are relevant to both. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
        \U0001F41B Bug Fixes\n\n- `[OPERATOR]` Refactor the collector `journald` receiver
        to capture kernel logs via a more stable method. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
        \\[[#&#8203;13664](https://redirect.github.com/gardener/gardener/pull/13664)]\n-
        `[OPERATOR]` An issue causing credentials rotation for the Garden resource
        to fail is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
        \\[[#&#8203;13735](https://redirect.github.com/gardener/gardener/pull/13735)]\n-
        `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
        in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
        by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13858](https://redirect.github.com/gardener/gardener/pull/13858)]\n-
        `[OPERATOR]` A bug has been fixed which was preventing removing image vector
        overwrite configurations from `gardenlet`s deployed via `seedmanagement.gardener.cloud/v1alpha1.Gardenlet`
        resources (even though `.spec.deployment.{imageVectorOverwrite,componentImageVectorOverwrite}`
        was removed). by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
        \\[[#&#8203;13646](https://redirect.github.com/gardener/gardener/pull/13646)]\n-
        `[OPERATOR]` The token requestor will check the UID of a referenced `ServiceAccount`
        and request a new token before the former one issued for a different UID expired.
        by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13630](https://redirect.github.com/gardener/gardener/pull/13630)]\n-
        `[USER]` A bug has been fixed which was causing invalid high-availability
        configuration for system components in case a `Shoot` was configured with
        a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
        \\[[#&#8203;13873](https://redirect.github.com/gardener/gardener/pull/13873)]\n-
        `[USER]` Project admins are allowed to set ownerReference with `kind: Shoot`
        and `blockOwnerDeletion: true` for Secrets/ConfigMaps when the [`OwnerReferencesPermissionEnforcement`](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement)
        admission plugin is enabled for the virtual kube-apiserver. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
        \\[[#&#8203;13743](https://redirect.github.com/gardener/gardener/pull/13743)]\n-
        `[USER]` Fix a bug that prevents updating expiration dates of overridden machine
        image versions in `NamespacedCloudProfile`s. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
        \\[[#&#8203;13754](https://redirect.github.com/gardener/gardener/pull/13754)]\n-
        `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
        only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
        \\[[#&#8203;13670](https://redirect.github.com/gardener/gardener/pull/13670)]\n-
        `[USER]` A bug causing `Shoot` clusters to not be reconciled during their
        maintenance window when the `Shoot` does not enable `ssh` and has `rotate-ssh-keypair`
        operation configured for maintenance window was fixed. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
        \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
        `[DEPENDENCY]` extension library: An issue causing deletions of `extensions.BackupEntry`
        to be stuck due to conflicts while removing the finalizer from the BackupEntry
        Secret is now fixed. This mostly affected the deletion of the source `BackupEntry`
        during the `restore` phase of control plane migration. by [@&#8203;plkokanov](https://redirect.github.com/plkokanov)
        \\[[#&#8203;13775](https://redirect.github.com/gardener/gardener/pull/13775)]\n\n####
        \U0001F3C3 Others\n\n- `[OPERATOR]` Set static cpu requests for fluent-operator.
        by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13788](https://redirect.github.com/gardener/gardener/pull/13788)]\n-
        `[OPERATOR]` OwnerReferences now ensure that no orphan EnvoyFilters and Secrets
        remain in istio-ingressgateway namespaces when a shoot was purged manually.
        by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz) \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
        `[OPERATOR]` Allow scraping `kube_node_created` from kube-state-metrics by
        adding it to the metric allowlist. by [@&#8203;jguipi](https://redirect.github.com/jguipi)
        \\[[#&#8203;13683](https://redirect.github.com/gardener/gardener/pull/13683)]\n-
        `[OPERATOR]` Add Plutono dashboard for shoot control plane cost calculation
        by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13605](https://redirect.github.com/gardener/gardener/pull/13605)]\n-
        `[OPERATOR]` Refactor node local dns tests to avoid duplications and simplify
        structure. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
        \\[[#&#8203;13694](https://redirect.github.com/gardener/gardener/pull/13694)]\n-
        `[OPERATOR]` gardenlet now adds labels for `DNSRecord` resources created for
        `Shoot` control planes. This allows using label selectors to target `DNSRecord`s
        used for `Shoot` control plane components. by [@&#8203;hown3d](https://redirect.github.com/hown3d)
        \\[[#&#8203;13444](https://redirect.github.com/gardener/gardener/pull/13444)]\n-
        `[OPERATOR]` Updates on old `Shoots`, `ManagedSeedSets`, and `Garden` are
        now allowed if invalid accepted issuers are unchanged. by [@&#8203;acumino](https://redirect.github.com/acumino)
        \\[[#&#8203;13514](https://redirect.github.com/gardener/gardener/pull/13514)]\n-
        `[OPERATOR]` On starup, gardenlet and gardener-operator now patch the needed
        VerticalPodAutoscaler resources depending on the `VPAInPlaceUpdates` feature
        gate value. This is needed to ensure that all VerticalPodAutoscaler resources
        will be updated immediately with the desired update mode when the `VPAInPlaceUpdates`
        feature gate is enabled or disabled. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
        \\[[#&#8203;13573](https://redirect.github.com/gardener/gardener/pull/13573)]\n-
        `[OPERATOR]` Set static cpu requests for node-exporter by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
        \\[[#&#8203;13790](https://redirect.github.com/gardener/gardener/pull/13790)]\n-
        `[OPERATOR]` A link to the `Seed`-specific dashboard has been added to the
        annotations of `Seed`-related alerts. This allows operators to quickly navigate
        from an alert to the relevant monitoring dashboard for faster troubleshooting.
        by [@&#8203;cathyzhang05](https://redirect.github.com/cathyzhang05) \\[[#&#8203;13555](https://redirect.github.com/gardener/gardener/pull/13555)]\n-
        `[OPERATOR]` Change metrics port for OTel collector on the nodes from 8888
        to 18888. by [@&#8203;dnaeon](https://redirect.github.com/dnaeon) \\[[#&#8203;13798](https://redirect.github.com/gardener/gardener/pull/13798)]\n-
        `[OPERATOR]` Extended RBAC rules for `gardener-metrics-exporter` to cover
        `Gardenlet` resources as well. by [@&#8203;RaphSku](https://redirect.github.com/RaphSku)
        \\[[#&#8203;13806](https://redirect.github.com/gardener/gardener/pull/13806)]\n-
        `[OPERATOR]` Update gardenlets values.yaml template to include the internal
        DNS secret for the local extension setup. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
        \\[[#&#8203;13679](https://redirect.github.com/gardener/gardener/pull/13679)]\n-
        `[OPERATOR]` The Kubernetes version check can now be explicitly disabled by
        setting the environment variable `EXPERIMENTAL_DISABLE_KUBERNETES_VERSION_CHECK`
        to `true`. This is intended for specific experimental or troubleshooting scenarios
        where temporarily bypassing the version validation is necessary. by [@&#8203;majst01](https://redirect.github.com/majst01)
        \\[[#&#8203;13221](https://redirect.github.com/gardener/gardener/pull/13221)]\n-
        `[OPERATOR]` The mutating `ManagedSeed` admission plugin is now also a validating
        one. Validations which are executed by this admission plugin during the mutation
        phase will be gradually moved to the validating `ManagedSeed` admission plugin.
        by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13621](https://redirect.github.com/gardener/gardener/pull/13621)]\n-
        `[USER]` The `.spec.kubernetes.kubeAPIServer.requests.max{Non}MutatingInflight`
        flags can now be increased to `5000` (non-mutating) / `2500` (mutating). by
        [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13877](https://redirect.github.com/gardener/gardener/pull/13877)]\n-
        `[DEVELOPER]` The `CloudProfile` for the local dev setup was updated from
        Kubernetes version 1.34.0 to 1.34.3. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13874](https://redirect.github.com/gardener/gardener/pull/13874)]\n-
        `[DEVELOPER]` The kubectl apply command for the `00-namespace-garden.yaml`
        resource now includes the `--force-conflicts flag`. This enhancement resolves
        conflicts that previously caused errors during the local extension setup,
        ensuring a smoother and more reliable deployment process. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
        \\[[#&#8203;13676](https://redirect.github.com/gardener/gardener/pull/13676)]\n-
        `[DEVELOPER]` Add permissions to read and watch `NamespacedCloudProfile`s
        for the dashboard. by [@&#8203;klocke-io](https://redirect.github.com/klocke-io)
        \\[[#&#8203;13500](https://redirect.github.com/gardener/gardener/pull/13500)]\n-
        `[DEVELOPER]` The generic control-plane webhook is now capable of ensuring
        the `kube-apiserver` and `kube-controller-manager` deployments, as well as
        `etcd`s, of the virtual garden cluster. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13635](https://redirect.github.com/gardener/gardener/pull/13635)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
        from `v0.30.0` to `v0.30.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13779](https://redirect.github.com/gardener/gardener/pull/13779)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
        from `3.21.3` to `3.23.2`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.2)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13744](https://redirect.github.com/gardener/gardener/pull/13744)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/kube-state-metrics/kube-state-metrics`
        from `v2.17.0` to `v2.18.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13808](https://redirect.github.com/gardener/gardener/pull/13808)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
        from `v0.29.0` to `v0.30.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13663](https://redirect.github.com/gardener/gardener/pull/13663)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/vali`
        from `v2.2.29` to `v2.2.30`. [Release Notes](https://redirect.github.com/credativ/vali/releases/tag/v2.2.30)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13689](https://redirect.github.com/gardener/gardener/pull/13689)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
        from `2.1.4` to `2.2.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13726](https://redirect.github.com/gardener/gardener/pull/13726)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
        from `distroless-v1.36.4` to `v1.37.0`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.37.0)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13781](https://redirect.github.com/gardener/gardener/pull/13781)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
        from `1.27.4` to `1.27.5`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.4`
        to `1.27.5`.\n  - `istio.io/api` from `v1.27.4` to `v1.27.5`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13711](https://redirect.github.com/gardener/gardener/pull/13711)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
        from `v0.8.22` to `v0.8.24`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13716](https://redirect.github.com/gardener/gardener/pull/13716)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/gardener-metrics-exporter`
        from `0.42.0` to `0.43.0`. [Release Notes](https://redirect.github.com/gardener/gardener-metrics-exporter/releases/tag/0.43.0)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13760](https://redirect.github.com/gardener/gardener/pull/13760)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
        from `v1.34.0` to `v1.34.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13717](https://redirect.github.com/gardener/gardener/pull/13717)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
        from `0.44.0` to `0.45.0`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.45.0)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13677](https://redirect.github.com/gardener/gardener/pull/13677)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/brancz/kube-rbac-proxy`
        from `v0.20.1` to `v0.20.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13782](https://redirect.github.com/gardener/gardener/pull/13782)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/logging`
        from `v0.70.0` to `v0.71.0`. [Release Notes](https://redirect.github.com/gardener/logging/releases/tag/v0.71.0)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13741](https://redirect.github.com/gardener/gardener/pull/13741)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
        from `1.83.1` to `1.83.2`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.2)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13884](https://redirect.github.com/gardener/gardener/pull/13884)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/apiserver-proxy`
        from `v0.19.0` to `v0.20.0`. [Release Notes](https://redirect.github.com/gardener/apiserver-proxy/releases/tag/v0.20.0)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13749](https://redirect.github.com/gardener/gardener/pull/13749)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/plutono`
        from `v7.5.44` to `v7.5.45`. [Release Notes](https://redirect.github.com/credativ/plutono/releases/tag/v7.5.45)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13690](https://redirect.github.com/gardener/gardener/pull/13690)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
        from `distroless-v1.36.3` to `v1.36.4`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.36.4)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13629](https://redirect.github.com/gardener/gardener/pull/13629)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
        from `1.83.0` to `1.83.1`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.1)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13836](https://redirect.github.com/gardener/gardener/pull/13836)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
        from `2.2.3` to `2.4.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13787](https://redirect.github.com/gardener/gardener/pull/13787)]\n\n####
        Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.135.0`\n-
        gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.135.0`\n-
        operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.135.0`\n-
        resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.135.0`\n\n####
        Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.135.0`\n-
        apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.135.0`\n-
        controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.135.0`\n-
        gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.135.0`\n-
        gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.135.0`\n-
        node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.135.0`\n-
        operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.135.0`\n-
        resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.135.0`\n-
        scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.135.0`\n\n###
        [`v1.134.3`](https://redirect.github.com/gardener/gardener/releases/tag/v1.134.3)\n\n[Compare
        Source](https://redirect.github.com/gardener/gardener/compare/v1.134.2...v1.134.3)\n\n###
        \\[github.com/gardener/gardener:v1.134.3]\n\n#### \U0001F41B Bug Fixes\n\n-
        `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
        in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
        by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13860](https://redirect.github.com/gardener/gardener/pull/13860)]\n-
        `[USER]` A bug has been fixed which was causing invalid high-availability
        configuration for system components in case a `Shoot` was configured with
        a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
        \\[[#&#8203;13870](https://redirect.github.com/gardener/gardener/pull/13870)]\n-
        `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
        only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
        \\[[#&#8203;13813](https://redirect.github.com/gardener/gardener/pull/13813)]\n\n####
        Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.134.3`\n-
        gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.134.3`\n-
        operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.134.3`\n-
        resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.134.3`\n\n####
        Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.134.3`\n-
        apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.134.3`\n-
        controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.134.3`\n-
        gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.134.3`\n-
        gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.134.3`\n-
        node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.134.3`\n-
        operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.134.3`\n-
        resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.134.3`\n-
        scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.134.3`\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/YAKEcloud/yake-ansible/pull/471
      child_jobs: []
      commit_id: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
      event_id: 608016c0-fbcd-11f0-806f-4952b4ce5d51
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/ecae1cfc56c342629970dbf8b4e774f7/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/ecae1cfc56c342629970dbf8b4e774f7/work/logs
        result_data_file: /var/lib/zuul/builds/ecae1cfc56c342629970dbf8b4e774f7/work/results.json
        src_root: /var/lib/zuul/builds/ecae1cfc56c342629970dbf8b4e774f7/work/src
        work_root: /var/lib/zuul/builds/ecae1cfc56c342629970dbf8b4e774f7/work
      include_vars: []
      items:
      - branch: main
        change: '471'
        change_message: "chore(deps): update dependency gardener/gardener to v1.135.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
          | `1.134.2` \u2192 `1.135.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
          (gardener/gardener)</summary>\n\n### [`v1.135.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.135.0)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.134.3...v1.135.0)\n\n###
          \\[github.com/gardener/gardener:v1.135.0]\n\n#### \u26A0\uFE0F Breaking
          Changes\n\n- `[OPERATOR]` Internal dns configuration for seeds `.spec.dns.internal`
          is now required. Make sure to set this field in your templates before upgrading
          Gardener to the current version. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13529](https://redirect.github.com/gardener/gardener/pull/13529)]\n-
          `[OPERATOR]` gardener-resource-manager now enforces the desired OwnerReferences
          for objects it manages. Previously, it set OwnerReferences only when creating
          objects and did not update them afterwards. by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz)
          \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
          `[USER]` :warning: The Seed API field `spec.dns.provider.secretRef` has
          been deprecated in favor of `spec.dns.provider.credentialsRef`. The `secretRef`
          field will be removed in Gardener version `>= v1.139.0`, until then - please
          consider migrating to the new `credentialsRef` field.\n  - :info: Gardener
          takes care to keep both fields in sync when the configured credentials is
          of type `Secret`. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
          `[USER]` :warning: The Shoot API field `spec.dns.providers.secretName` has
          been deprecated in favor of `spec.dns.providers.credentialsRef`. The `secretName`
          field will be disallowed to be used by shoots running on Kubernetes 1.35
          or newer, until then - please consider migrating to the new `credentialsRef`
          field.\n  - Gardener API server takes care to keep both fields in sync when
          `Secret` is the type of the configured credentials. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` Change the registry port in the local setup to `:5001`. by
          [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13661](https://redirect.github.com/gardener/gardener/pull/13661)]\n-
          `[DEVELOPER]` The `extension-class` flag has been renamed to `extension-classes`
          to support multiple extension classes per controller deployment. If the
          extension depends on [`cmd.ReconcilerOptions`](https://redirect.github.com/gardener/gardener/blob/master/extensions/pkg/controller/cmd/reconciler_options.go),
          the renaming will automatically take effect. Please adjust your deployment
          manifest to reflect this change. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13718](https://redirect.github.com/gardener/gardener/pull/13718)]\n-
          `[DEVELOPER]` The `SecretData` field has been removed from the `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.Values`
          struct, use `github.com/gardener/gardener/pkg/component/extensions/dnsrecord.CredentialsDeployFunc`
          instead to deploy secret data into a secret. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/gardener.GenerateDNSProviderName`
          has been removed. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderSecretNamesEqual`
          has been removed, use `github.com/gardener/gardener/pkg/apis/core/v1beta1/helper.ShootDNSProviderCredentialsRefsEqual`
          instead. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` The `SecretData` field of the `github.com/gardener/gardener/pkg/utils/gardener.Domain`
          struct has been replaced with `Credentials` field of type `sigs.k8s.io/controller-runtime/pkg/client.Object`.
          by [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[DEPENDENCY]` The naming logic for automatically generated webhooks has
          changed. If the extension name passed to [`extensionscmdwebhook.NewAddToManagerOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/webhook/cmd/options.go#L203)
          starts with `gardener-`, the extension's webhook names are no longer prefixed
          with `gardener-extension-`. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
          \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` Adapted the policy in the Kubernetes
          version support process to retain only the latest 4 minor versions, improving
          security by dropping older, unpatched versions. Additionally, a minimum
          period of 14 months has been added, during which Gardener will maintain
          support for any given Kubernetes version before removing it again. by [@&#8203;marc1404](https://redirect.github.com/marc1404)
          \\[[#&#8203;13471](https://redirect.github.com/gardener/gardener/pull/13471)]\n-
          `[USER]` The order of entries in the `NamespacedCloudProfile.Status.CloudProfileSpec`
          is now the same as in the parent `CloudProfile.Spec`. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13772](https://redirect.github.com/gardener/gardener/pull/13772)]\n-
          `[DEVELOPER]` The function `github.com/gardener/gardener/pkg/utils/kubernetes.GetCredentialsByObjectReference`
          has been changed to accept `client.Reader` instead of `client.Client`. by
          [@&#8203;vpnachev](https://redirect.github.com/vpnachev) \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[DEVELOPER]` The script `hack/vgopath-setup.sh` and `hack/tools.mk` entry
          for `$(VGOPATH)` are deprecated and will be removed after `gardener/gardener@v1.142`
          has been released. It is recommended that consumers stop using them from
          the `gardener/gardener` repository. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
          `[DEVELOPER]` Source code changes that break various aspects of the monitoring
          stack in ways that were previously unnoticed are now detected during pull
          request validation. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
          `[DEVELOPER]` The generic actuator of the control plane now wraps seed-related
          charts into `ManagedResource`s . Any imperative logic in your provider extension
          that does not consider management through the gardener-resource-manager
          can potentially be cleaned up. by [@&#8203;kon-angelo](https://redirect.github.com/kon-angelo)
          \\[[#&#8203;13585](https://redirect.github.com/gardener/gardener/pull/13585)]\n-
          `[DEVELOPER]` The usages of `VGOPATH` have been removed. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13556](https://redirect.github.com/gardener/gardener/pull/13556)]\n-
          `[DEVELOPER]` A new rule was added to the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md)
          - `Drop unutilised capabilities`. Additionally, the `Do not run containers
          as root` rule was extended. For more details, check the [Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.135.0/docs/development/component-checklist.md).
          by [@&#8203;mstueer](https://redirect.github.com/mstueer) \\[[#&#8203;13204](https://redirect.github.com/gardener/gardener/pull/13204)]\n-
          `[DEPENDENCY]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
          resources. Provider extensions should start validating them similar to references
          for `v1.Secret` resources. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n\n####
          \u2728 New Features\n\n- `[OPERATOR]` A new `VPNBondingModeRoundRobin` feature
          gate is introduced for gardenlet. When enabled, HA VPN uses round-robin
          bonding mode to increase availability under network degradation. by [@&#8203;domdom82](https://redirect.github.com/domdom82)
          \\[[#&#8203;13649](https://redirect.github.com/gardener/gardener/pull/13649)]\n-
          `[OPERATOR]` `gardenlet` can now propagate static manifests stored in the
          seed cluster's `garden` namespace to all shoot namespaces. Read all about
          it [here](https://redirect.github.com/gardener/gardener/tree/master/docs/extensions/static-manifests.md).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13614](https://redirect.github.com/gardener/gardener/pull/13614)]\n-
          `[OPERATOR]` Support replacement of individual assets for the gardener dashboard
          ([gardener/dashboard#2687](https://redirect.github.com/gardener/dashboard/pull/2687))
          by [@&#8203;grolu](https://redirect.github.com/grolu) \\[[#&#8203;13640](https://redirect.github.com/gardener/gardener/pull/13640)]\n-
          `[OPERATOR]` Extend `gardener-operator` and `gardenlet` care controllers
          to query the Prometheus instances for health checks of the monitoring components.
          If the new health checks fail, they are reflected in the status condition
          of the `Shoot`, `Seed` or `Garden` resources. These health checks are introduced
          behind a feature gate `PrometheusHealthChecks` that is disabled by default.
          by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13341](https://redirect.github.com/gardener/gardener/pull/13341)]\n-
          `[OPERATOR]` It is now possible to configure custom namespaces in the virtual
          cluster that the `virtual-garden-gardener-resource-manager` should handle.
          Use `.spec.virtualCluster.gardener.gardenerResourceManager.additionalTargetNamespaces`
          in `Garden` resource. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13761](https://redirect.github.com/gardener/gardener/pull/13761)]\n-
          `[OPERATOR]` WorkloadIdentity credentials are now allowed to be used for
          Shoot DNS domains, Seed ingress, default and internal DNS domains. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13720](https://redirect.github.com/gardener/gardener/pull/13720)]\n-
          `[OPERATOR]` Add new `Plutono` dashboard for monitoring `VPA Updater` operations
          across `Shoot`, `Seed` and `Garden` clusters. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
          \\[[#&#8203;13477](https://redirect.github.com/gardener/gardener/pull/13477)]\n-
          `[USER]` Rotation for the ssh keypair for worker nodes, observability passwords
          and etcd encryption key can now be done in the maintenance window via the
          `.spec.maitenance.autoRotation.credentials` field of a `Shoot`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
          `[USER]` A new Seed API field `credentialsRef` has been introduced in `spec.dns.provider`
          structure. It is designed to support diverse types of credentials, as of
          now `v1.Secrets` and `security.gardener.cloud/v1alpha1.WorkloadIdentity`
          are allowed, but only `Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13680](https://redirect.github.com/gardener/gardener/pull/13680)]\n-
          `[USER]` You can now specify `nftables` as proxy mode implementation of
          `kube-proxy` in the `Shoot` spec like so if your Kubernetes version is `>=
          1.31`: `.spec.kubernetes.kubeProxy.mode=NFTables`, please consult <https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/>
          for all glory details. by [@&#8203;majst01](https://redirect.github.com/majst01)
          \\[[#&#8203;13558](https://redirect.github.com/gardener/gardener/pull/13558)]\n-
          `[USER]` A new optional Shoot API field `credentialsRef` has been introduced
          in `spec.dns.providers` structure. It is designed to support diverse types
          of credentials. As of now only `v1.Secrets` are supported. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13552](https://redirect.github.com/gardener/gardener/pull/13552)]\n-
          `[USER]` The Shoot resource does now support configuring the vpa-recommender
          concurrent workers to update VerticalPodAutoscalers and VerticalPodAutoscalerCheckpoints
          via the new `.spec.kubernetes.verticalPodAutoscaler.recommenderUpdateWorkerCount`
          field. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13591](https://redirect.github.com/gardener/gardener/pull/13591)]\n-
          `[DEVELOPER]` `Shoot`s and `Seed`s are now allowed to reference `WorkloadIdentity`
          resources via their respective field `spec.resources`, extensions can leverage
          this mechanism in order to use workload identity credentials for authentication
          with external services supporting trust based authentication. by [@&#8203;vpnachev](https://redirect.github.com/vpnachev)
          \\[[#&#8203;13469](https://redirect.github.com/gardener/gardener/pull/13469)]\n-
          `[DEVELOPER]` `CredentialsBinding`s can now reference `core.gardener.cloud/v1beta1.InternalSecret`
          resources. This can be beneficial if shoot credentials are not managed directly
          by end-users but by the service provider/Gardener operators. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13759](https://redirect.github.com/gardener/gardener/pull/13759)]\n-
          `[DEVELOPER]` It is now possible to create a `SecretsManager` based on a
          `Garden` resource. Extensions can, for instance, manage certificates for
          webhooks in the garden runtime cluster while leveraging Gardener's certificate
          automation features (such as CA rotation, renewal, etc.). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13662](https://redirect.github.com/gardener/gardener/pull/13662)]\n-
          `[DEPENDENCY]` The certificate library for extension webhooks now supports
          skipping the component name prefixing with `gardener-extension` when `DoNotPrefixComponentName`
          is set to `true`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13765](https://redirect.github.com/gardener/gardener/pull/13765)]\n-
          `[DEPENDENCY]` [`extensionscmdcontroller.GeneralOptions`](https://redirect.github.com/gardener/gardener/blob/aae8c452607280e1008393519651bb66c282264c/extensions/pkg/controller/cmd/options.go#L479)
          can now be shared between controllers and webhooks. It contains general
          deployment information that are relevant to both. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13786](https://redirect.github.com/gardener/gardener/pull/13786)]\n\n####
          \U0001F41B Bug Fixes\n\n- `[OPERATOR]` Refactor the collector `journald`
          receiver to capture kernel logs via a more stable method. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13664](https://redirect.github.com/gardener/gardener/pull/13664)]\n-
          `[OPERATOR]` An issue causing credentials rotation for the Garden resource
          to fail is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13735](https://redirect.github.com/gardener/gardener/pull/13735)]\n-
          `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
          in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13858](https://redirect.github.com/gardener/gardener/pull/13858)]\n-
          `[OPERATOR]` A bug has been fixed which was preventing removing image vector
          overwrite configurations from `gardenlet`s deployed via `seedmanagement.gardener.cloud/v1alpha1.Gardenlet`
          resources (even though `.spec.deployment.{imageVectorOverwrite,componentImageVectorOverwrite}`
          was removed). by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13646](https://redirect.github.com/gardener/gardener/pull/13646)]\n-
          `[OPERATOR]` The token requestor will check the UID of a referenced `ServiceAccount`
          and request a new token before the former one issued for a different UID
          expired. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13630](https://redirect.github.com/gardener/gardener/pull/13630)]\n-
          `[USER]` A bug has been fixed which was causing invalid high-availability
          configuration for system components in case a `Shoot` was configured with
          a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13873](https://redirect.github.com/gardener/gardener/pull/13873)]\n-
          `[USER]` Project admins are allowed to set ownerReference with `kind: Shoot`
          and `blockOwnerDeletion: true` for Secrets/ConfigMaps when the [`OwnerReferencesPermissionEnforcement`](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement)
          admission plugin is enabled for the virtual kube-apiserver. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13743](https://redirect.github.com/gardener/gardener/pull/13743)]\n-
          `[USER]` Fix a bug that prevents updating expiration dates of overridden
          machine image versions in `NamespacedCloudProfile`s. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13754](https://redirect.github.com/gardener/gardener/pull/13754)]\n-
          `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
          only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13670](https://redirect.github.com/gardener/gardener/pull/13670)]\n-
          `[USER]` A bug causing `Shoot` clusters to not be reconciled during their
          maintenance window when the `Shoot` does not enable `ssh` and has `rotate-ssh-keypair`
          operation configured for maintenance window was fixed. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13493](https://redirect.github.com/gardener/gardener/pull/13493)]\n-
          `[DEPENDENCY]` extension library: An issue causing deletions of `extensions.BackupEntry`
          to be stuck due to conflicts while removing the finalizer from the BackupEntry
          Secret is now fixed. This mostly affected the deletion of the source `BackupEntry`
          during the `restore` phase of control plane migration. by [@&#8203;plkokanov](https://redirect.github.com/plkokanov)
          \\[[#&#8203;13775](https://redirect.github.com/gardener/gardener/pull/13775)]\n\n####
          \U0001F3C3 Others\n\n- `[OPERATOR]` Set static cpu requests for fluent-operator.
          by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13788](https://redirect.github.com/gardener/gardener/pull/13788)]\n-
          `[OPERATOR]` OwnerReferences now ensure that no orphan EnvoyFilters and
          Secrets remain in istio-ingressgateway namespaces when a shoot was purged
          manually. by [@&#8203;oliver-goetz](https://redirect.github.com/oliver-goetz)
          \\[[#&#8203;13606](https://redirect.github.com/gardener/gardener/pull/13606)]\n-
          `[OPERATOR]` Allow scraping `kube_node_created` from kube-state-metrics
          by adding it to the metric allowlist. by [@&#8203;jguipi](https://redirect.github.com/jguipi)
          \\[[#&#8203;13683](https://redirect.github.com/gardener/gardener/pull/13683)]\n-
          `[OPERATOR]` Add Plutono dashboard for shoot control plane cost calculation
          by [@&#8203;vicwicker](https://redirect.github.com/vicwicker) \\[[#&#8203;13605](https://redirect.github.com/gardener/gardener/pull/13605)]\n-
          `[OPERATOR]` Refactor node local dns tests to avoid duplications and simplify
          structure. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13694](https://redirect.github.com/gardener/gardener/pull/13694)]\n-
          `[OPERATOR]` gardenlet now adds labels for `DNSRecord` resources created
          for `Shoot` control planes. This allows using label selectors to target
          `DNSRecord`s used for `Shoot` control plane components. by [@&#8203;hown3d](https://redirect.github.com/hown3d)
          \\[[#&#8203;13444](https://redirect.github.com/gardener/gardener/pull/13444)]\n-
          `[OPERATOR]` Updates on old `Shoots`, `ManagedSeedSets`, and `Garden` are
          now allowed if invalid accepted issuers are unchanged. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13514](https://redirect.github.com/gardener/gardener/pull/13514)]\n-
          `[OPERATOR]` On starup, gardenlet and gardener-operator now patch the needed
          VerticalPodAutoscaler resources depending on the `VPAInPlaceUpdates` feature
          gate value. This is needed to ensure that all VerticalPodAutoscaler resources
          will be updated immediately with the desired update mode when the `VPAInPlaceUpdates`
          feature gate is enabled or disabled. by [@&#8203;vitanovs](https://redirect.github.com/vitanovs)
          \\[[#&#8203;13573](https://redirect.github.com/gardener/gardener/pull/13573)]\n-
          `[OPERATOR]` Set static cpu requests for node-exporter by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
          \\[[#&#8203;13790](https://redirect.github.com/gardener/gardener/pull/13790)]\n-
          `[OPERATOR]` A link to the `Seed`-specific dashboard has been added to the
          annotations of `Seed`-related alerts. This allows operators to quickly navigate
          from an alert to the relevant monitoring dashboard for faster troubleshooting.
          by [@&#8203;cathyzhang05](https://redirect.github.com/cathyzhang05) \\[[#&#8203;13555](https://redirect.github.com/gardener/gardener/pull/13555)]\n-
          `[OPERATOR]` Change metrics port for OTel collector on the nodes from 8888
          to 18888. by [@&#8203;dnaeon](https://redirect.github.com/dnaeon) \\[[#&#8203;13798](https://redirect.github.com/gardener/gardener/pull/13798)]\n-
          `[OPERATOR]` Extended RBAC rules for `gardener-metrics-exporter` to cover
          `Gardenlet` resources as well. by [@&#8203;RaphSku](https://redirect.github.com/RaphSku)
          \\[[#&#8203;13806](https://redirect.github.com/gardener/gardener/pull/13806)]\n-
          `[OPERATOR]` Update gardenlets values.yaml template to include the internal
          DNS secret for the local extension setup. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13679](https://redirect.github.com/gardener/gardener/pull/13679)]\n-
          `[OPERATOR]` The Kubernetes version check can now be explicitly disabled
          by setting the environment variable `EXPERIMENTAL_DISABLE_KUBERNETES_VERSION_CHECK`
          to `true`. This is intended for specific experimental or troubleshooting
          scenarios where temporarily bypassing the version validation is necessary.
          by [@&#8203;majst01](https://redirect.github.com/majst01) \\[[#&#8203;13221](https://redirect.github.com/gardener/gardener/pull/13221)]\n-
          `[OPERATOR]` The mutating `ManagedSeed` admission plugin is now also a validating
          one. Validations which are executed by this admission plugin during the
          mutation phase will be gradually moved to the validating `ManagedSeed` admission
          plugin. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13621](https://redirect.github.com/gardener/gardener/pull/13621)]\n-
          `[USER]` The `.spec.kubernetes.kubeAPIServer.requests.max{Non}MutatingInflight`
          flags can now be increased to `5000` (non-mutating) / `2500` (mutating).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13877](https://redirect.github.com/gardener/gardener/pull/13877)]\n-
          `[DEVELOPER]` The `CloudProfile` for the local dev setup was updated from
          Kubernetes version 1.34.0 to 1.34.3. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13874](https://redirect.github.com/gardener/gardener/pull/13874)]\n-
          `[DEVELOPER]` The kubectl apply command for the `00-namespace-garden.yaml`
          resource now includes the `--force-conflicts flag`. This enhancement resolves
          conflicts that previously caused errors during the local extension setup,
          ensuring a smoother and more reliable deployment process. by [@&#8203;DockToFuture](https://redirect.github.com/DockToFuture)
          \\[[#&#8203;13676](https://redirect.github.com/gardener/gardener/pull/13676)]\n-
          `[DEVELOPER]` Add permissions to read and watch `NamespacedCloudProfile`s
          for the dashboard. by [@&#8203;klocke-io](https://redirect.github.com/klocke-io)
          \\[[#&#8203;13500](https://redirect.github.com/gardener/gardener/pull/13500)]\n-
          `[DEVELOPER]` The generic control-plane webhook is now capable of ensuring
          the `kube-apiserver` and `kube-controller-manager` deployments, as well
          as `etcd`s, of the virtual garden cluster. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13635](https://redirect.github.com/gardener/gardener/pull/13635)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.30.0` to `v0.30.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13779](https://redirect.github.com/gardener/gardener/pull/13779)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
          from `3.21.3` to `3.23.2`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13744](https://redirect.github.com/gardener/gardener/pull/13744)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/kube-state-metrics/kube-state-metrics`
          from `v2.17.0` to `v2.18.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13808](https://redirect.github.com/gardener/gardener/pull/13808)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.29.0` to `v0.30.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13663](https://redirect.github.com/gardener/gardener/pull/13663)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/vali`
          from `v2.2.29` to `v2.2.30`. [Release Notes](https://redirect.github.com/credativ/vali/releases/tag/v2.2.30)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13689](https://redirect.github.com/gardener/gardener/pull/13689)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.1.4` to `2.2.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13726](https://redirect.github.com/gardener/gardener/pull/13726)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
          from `distroless-v1.36.4` to `v1.37.0`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.37.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13781](https://redirect.github.com/gardener/gardener/pull/13781)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
          from `1.27.4` to `1.27.5`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.4`
          to `1.27.5`.\n  - `istio.io/api` from `v1.27.4` to `v1.27.5`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13711](https://redirect.github.com/gardener/gardener/pull/13711)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
          from `v0.8.22` to `v0.8.24`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13716](https://redirect.github.com/gardener/gardener/pull/13716)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/gardener-metrics-exporter`
          from `0.42.0` to `0.43.0`. [Release Notes](https://redirect.github.com/gardener/gardener-metrics-exporter/releases/tag/0.43.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13760](https://redirect.github.com/gardener/gardener/pull/13760)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/node-problem-detector/node-problem-detector`
          from `v1.34.0` to `v1.34.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13717](https://redirect.github.com/gardener/gardener/pull/13717)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
          from `0.44.0` to `0.45.0`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.45.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13677](https://redirect.github.com/gardener/gardener/pull/13677)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/brancz/kube-rbac-proxy`
          from `v0.20.1` to `v0.20.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13782](https://redirect.github.com/gardener/gardener/pull/13782)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/logging`
          from `v0.70.0` to `v0.71.0`. [Release Notes](https://redirect.github.com/gardener/logging/releases/tag/v0.71.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13741](https://redirect.github.com/gardener/gardener/pull/13741)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.1` to `1.83.2`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13884](https://redirect.github.com/gardener/gardener/pull/13884)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/apiserver-proxy`
          from `v0.19.0` to `v0.20.0`. [Release Notes](https://redirect.github.com/gardener/apiserver-proxy/releases/tag/v0.20.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13749](https://redirect.github.com/gardener/gardener/pull/13749)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `credativ/plutono`
          from `v7.5.44` to `v7.5.45`. [Release Notes](https://redirect.github.com/credativ/plutono/releases/tag/v7.5.45)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13690](https://redirect.github.com/gardener/gardener/pull/13690)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `envoyproxy/envoy`
          from `distroless-v1.36.3` to `v1.36.4`. [Release Notes](https://redirect.github.com/envoyproxy/envoy/releases/tag/v1.36.4)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13629](https://redirect.github.com/gardener/gardener/pull/13629)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.0` to `1.83.1`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.1)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13836](https://redirect.github.com/gardener/gardener/pull/13836)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.2.3` to `2.4.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13787](https://redirect.github.com/gardener/gardener/pull/13787)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.135.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.135.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.135.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.135.0`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.135.0`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.135.0`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.135.0`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.135.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.135.0`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.135.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.135.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.135.0`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.135.0`\n\n###
          [`v1.134.3`](https://redirect.github.com/gardener/gardener/releases/tag/v1.134.3)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.134.2...v1.134.3)\n\n###
          \\[github.com/gardener/gardener:v1.134.3]\n\n#### \U0001F41B Bug Fixes\n\n-
          `[OPERATOR]` A bug has been fix which could lead to pending `ManagedResource`s
          in the shoot's control plane namespace (effectively, blocking `Shoot` deletion).
          by [@&#8203;rfranzke](https://redirect.github.com/rfranzke) \\[[#&#8203;13860](https://redirect.github.com/gardener/gardener/pull/13860)]\n-
          `[USER]` A bug has been fixed which was causing invalid high-availability
          configuration for system components in case a `Shoot` was configured with
          a worker pool with `maximum=0`. by [@&#8203;rfranzke](https://redirect.github.com/rfranzke)
          \\[[#&#8203;13870](https://redirect.github.com/gardener/gardener/pull/13870)]\n-
          `[USER]` Fixed an issue where the Manual Worker Pool Rollout feature worked
          only when there is only one machine deployment per worker. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13813](https://redirect.github.com/gardener/gardener/pull/13813)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.134.3`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.134.3`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.134.3`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.134.3`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.134.3`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.134.3`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.134.3`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.134.3`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.134.3`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.134.3`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.134.3`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.134.3`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.134.3`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/471
        commit_id: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
        patchset: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      job: flake8
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: f0ddc1e3499e7887c7bf8d4334c37d3334cae907
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_1/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/flake8/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/YAKEcloud/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/YAKEcloud/yake-ansible
        name: YAKEcloud/yake-ansible
        short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
      projects:
        github.com/YAKEcloud/yake-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          checkout: main
          checkout_description: zuul branch
          commit: 750d9ef9efd175cf975e77073e6feaa23b373e4c
          name: YAKEcloud/yake-ansible
          required: false
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
      ref: refs/pull/471/head
      resources: {}
      tenant: yakecloud
      timeout: 1800
      topic: null
      voting: true
