alpha to beta

cluster/manifests/event-logger/statefulset.yaml

@@ -30,7 +30,7 @@ spec:
       serviceAccountName: kubernetes-event-logger
       containers:
       - name: logger
-        image: container-registry.zalando.net/teapot/event-logger:master-10
+        image: container-registry.zalando.net/teapot/event-logger:master-11
         args:
             - --snapshot-namespace=kube-system
             - --snapshot-name=kubernetes-event-logger

cluster/manifests/flannel/daemonset.yaml

@@ -57,7 +57,7 @@ spec:
           failureThreshold: 30
           periodSeconds: 10
       - name: kube-flannel
-        image: container-registry.zalando.net/teapot/flannel:v0.24.3-master-21
+        image: container-registry.zalando.net/teapot/flannel:v0.24.4-master-22
         command:
         - /opt/bin/flanneld
         args:

cluster/manifests/kube-metrics-adapter/deployment.yaml

@@ -27,7 +27,7 @@ spec:
       serviceAccountName: custom-metrics-apiserver
       containers:
       - name: kube-metrics-adapter
-        image: container-registry.zalando.net/teapot/kube-metrics-adapter:v0.2.2-11-g91acacb
+        image: container-registry.zalando.net/teapot/kube-metrics-adapter:v0.2.2-17-gc973a9e
         env:
         - name: AWS_REGION
           value: {{ .Cluster.Region }}

cluster/manifests/kube-static-egress-controller/deployment.yaml

@@ -30,7 +30,7 @@ spec:
       serviceAccountName: kube-static-egress-controller
       containers:
       - name: controller
-        image: container-registry.zalando.net/teapot/kube-static-egress-controller:v0.2.13-master-44
+        image: container-registry.zalando.net/teapot/kube-static-egress-controller:v0.2.14-master-45
         args:
         - "--provider=aws"
         - "--vpc-id={{.Cluster.ConfigItems.vpc_id}}"

cluster/manifests/kubernetes-lifecycle-metrics/deployment.yaml

@@ -31,7 +31,7 @@ spec:
       serviceAccountName: kubernetes-lifecycle-metrics
       containers:
         - name: kubernetes-lifecycle-metrics
-          image: "container-registry.zalando.net/teapot/kubernetes-lifecycle-metrics:master-14"
+          image: "container-registry.zalando.net/teapot/kubernetes-lifecycle-metrics:master-16"
           ports:
             - containerPort: 9090
               protocol: TCP

cluster/manifests/pdb-controller/deployment.yaml

@@ -27,7 +27,7 @@ spec:
       serviceAccountName: pdb-controller
       containers:
       - name: pdb-controller
-        image: container-registry.zalando.net/teapot/pdb-controller:master-29
+        image: container-registry.zalando.net/teapot/pdb-controller:master-30
         args:
           - --debug
 {{- if .Cluster.ConfigItems.pdb_controller_non_ready_ttl }}

cluster/manifests/prometheus/statefulset.yaml

@@ -35,7 +35,7 @@ spec:
           value: "1"
       initContainers:
       - name: generate-config
-        image: container-registry.zalando.net/library/alpine-3:3-20240226
+        image: container-registry.zalando.net/library/alpine-3:3-20240325
         command:
         - /bin/sh
         args:
@@ -57,7 +57,7 @@ spec:
           mountPath: /prometheus
       containers:
       - name: prometheus
-        image: container-registry.zalando.net/teapot/prometheus:v2.50.1-master-53
+        image: container-registry.zalando.net/teapot/prometheus:v2.51.0-master-54
         args:
         - "--config.file=/prometheus/prometheus.yaml"
         - "--storage.tsdb.path=/prometheus/"

cluster/manifests/skipper/deployment.yaml

@@ -1,5 +1,5 @@
 {{ $internal_version := "v0.21.25-853" }}
-{{ $canary_internal_version := "v0.21.25-853" }}
+{{ $canary_internal_version := "v0.21.36-864" }}
 
 {{/* Optional canary arguments separated by "[cf724afc]" to allow whitespaces, e.g. "-foo=has a whitespace[cf724afc]-baz=qux" */}}
 {{ $canary_args := "" }}

cluster/manifests/z-karpenter/deployment.yaml

@@ -33,7 +33,10 @@ spec:
     spec:
       dnsPolicy: Default
       serviceAccountName: karpenter
+      securityContext:
+        fsGroup: 65536
       priorityClassName: "{{ .Cluster.ConfigItems.system_priority_class }}"
+      dnsPolicy: ClusterFirst
       containers:
         - name: controller
           securityContext:
@@ -47,53 +50,53 @@ spec:
               drop:
                 - ALL
             readOnlyRootFilesystem: true
-          image: "container-registry.zalando.net/teapot/karpenter:v0.34.1-main-18.custom"
+          image: "container-registry.zalando.net/teapot/karpenter:0.35.2-main-19.custom"
           imagePullPolicy: IfNotPresent
           env:
-            - name: ASSUME_ROLE_DURATION
-              value: 15m
+            - name: KUBERNETES_MIN_VERSION
+              value: 1.22.0-0
             - name: AWS_REGION
               value: "{{ .Cluster.Region }}"
-            - name: BATCH_IDLE_DURATION
-              value: 1s
-            - name: BATCH_MAX_DURATION
-              value: 10s
             - name: CLUSTER_ENDPOINT
               value: https://kubernetes.default.svc.cluster.local.
-            - name: CLUSTER_NAME
-              value: "{{.Cluster.ID}}"
             - name: ENABLE_PROFILING
               value: 'false'
-            - name: FEATURE_GATES
-              value: Drift=false
-            - name: HEALTH_PROBE_PORT
-              value: '8081'
             - name: INTERRUPTION_QUEUE
               value: "{{.Cluster.LocalID}}-karpenter-interruption-queue"
             - name: ISOLATED_VPC
               value: "false"
             - name: KARPENTER_SERVICE
               value: karpenter
-            - name: KUBERNETES_MIN_VERSION
-              value: 1.22.0-0
             - name: LOG_LEVEL
               value: {{ .Cluster.ConfigItems.karpenter_log_level }}
-            - name: MEMORY_LIMIT
-              valueFrom:
-                resourceFieldRef:
-                  containerName: controller
-                  divisor: '0'
-                  resource: limits.memory
             - name: METRICS_PORT
-              value: '8000'
-            - name: RESERVED_ENIS
-              value: '0'
+              value: "8000"
+            - name: HEALTH_PROBE_PORT
+              value: "8081"
             - name: SYSTEM_NAMESPACE
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
+            - name: MEMORY_LIMIT
+              valueFrom:
+                resourceFieldRef:
+                  containerName: controller
+                  divisor: "0"
+                  resource: limits.memory
+            - name: FEATURE_GATES
+              value: "Drift=false,SpotToSpotConsolidation=true"
+            - name: BATCH_MAX_DURATION
+              value: "10s"
+            - name: BATCH_IDLE_DURATION
+              value: "1s"
+            - name: ASSUME_ROLE_DURATION
+              value: "15m"
+            - name: CLUSTER_NAME
+              value: "{{.Cluster.ID}}"
             - name: VM_MEMORY_OVERHEAD_PERCENT
-              value: '0.075'
+              value: "0.075"
+            - name: RESERVED_ENIS
+              value: "0"
           ports:
             - name: http-metrics
               containerPort: 8000

cluster/node-pools/master-default/userdata.yaml

@@ -273,7 +273,7 @@ write_files:
             - mountPath: /etc/kubernetes/ssl
               name: ssl-certs-kubernetes
               readOnly: true
-        - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/k8s-authnz-webhook:master-127
+        - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/k8s-authnz-webhook:master-128
           name: webhook
           ports:
           - containerPort: 8081