☂️-Issue for "Support for Kubernetes v1.30”

[rfranzke]

/area open-source
/kind enhancement
/priority 3
/topology garden seed shoot

Kubernetes v1.30 is getting released on April 17th, you'll find the changelog here: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md
There is this guide for developers who want to work on adding support for a new Kubernetes version.

---

Tasks

Gardener

• gardener: Support for Kubernetes v1.30 #9689
  • Release-independent tasks
    • Allow instantiating v1.30 Kubernetes clients and update README.md and docs/usage/supported_k8s_versions.md
    • Update feature gates in https://github.com/gardener/gardener/blob/master/pkg/utils/validation/features/featuregates.go
    • Update admission plugins in https://github.com/gardener/gardener/blob/master/pkg/utils/kubernetes/admissionplugins.go
    • Update API groups in https://github.com/gardener/gardener/blob/master/pkg/utils/validation/apigroups/apigroups.go
    • Update KCM controllers in https://github.com/gardener/gardener/blob/master/pkg/utils/kubernetes/controllers.go
    • Update KCM controllers in https://github.com/gardener/gardener/blob/master/pkg/component/shootsystem/shootsystem.go
    • Bump used Kubernetes version for local shoot and local e2e test
    • Bump kubectl version in https://github.com/gardener/gardener/blob/master/hack/tools.mk#L69
  • Release-dependent tasks
    • In kubelet configuration, the .memorySwap.swapBehavior field now accepts a new value NoSwap, which becomes the default if unspecified. The previously accepted UnlimitedSwap value has been dropped.
      (#122745). See https://kubernetes.io/docs/concepts/architecture/nodes/#swap-memory.
  • "Good to know" changes / no action required
    • The deprecated SecurityContextDeny admission plugin, which has been deprecated since v1.27, has been removed. It is recommended to use the Pod Security Admission plugin instead, which has been available since v1.25. Refer to the Kubernetes documentation for more information.
    • Kubelet would fail if NodeSwap was used with LimitedSwap and cgroupv1 node.(#123738)
    • The StorageVersionMigration API, previously available as a Custom Resource Definition (CRD), is now a built-in API in Kubernetes.
    • Added the disable-force-detach CLI option for kube-controller-manager. By default, it's set to false. When enabled, it prevents force detaching volumes based on maximum unmount time and node status. If activated, the non-graceful node shutdown feature must be used to recover from node failure. Additionally, if a pod needs to be forcibly terminated at the risk of corruption, the appropriate VolumeAttachment object must be deleted. (#120344)
    • Alpha support for field selectors on custom resources has been added. With the CustomResourceFieldSelectors feature gate enabled, the CustomResourceDefinition API now allows specifying selectableFields. Listing a field there enables filtering custom resources for that CustomResourceDefinition in list or watch requests. (#122717)
    • Contextual logging is now in beta and enabled by default. Check out the KEP and official documentation for more details.

Cloud Controller Managers

• cloud-provider-gcp
  • Maintain legacy-cloud-providers and create release-v1.30 branch from it (update container images and revendor latest Kubernetes patch): Update k8s.io/legacy-cloud-providers to v1.30.0 cloud-provider-gcp#49
  • Maintain release-v1.29 branch (update container images and revendor latest Kubernetes patch): Update k8s.io/legacy-cloud-providers to v1.29.4 cloud-provider-gcp#48
  • Maintain release-v1.28 branch (update container images and revendor latest Kubernetes patch): Update k8s.io/legacy-cloud-providers to v1.28.9 cloud-provider-gcp#50
  • Maintain release-v1.27 branch (update container images and revendor latest Kubernetes patch): Update k8s.io/legacy-cloud-providers to v1.27.13 cloud-provider-gcp#51

Provider Extensions

• machine-controller-manager-provider-local: Update to kindest/node@v1.30.0 gardener-attic/machine-controller-manager-provider-local#40
  • Bump kindest/node version in node/Dockerfile (example)
• provider-alicloud: Support for Kubernetes v1.30 gardener-extension-provider-alicloud#722
  • Revendor gardener/gardener with support for 1.30 client creation
  • Update README.md with support for 1.30
• provider-aws: Support for Kubernetes v1.30 gardener-extension-provider-aws#942
  • Revendor gardener/gardener with support for 1.30 client creation
  • Update README.md with support for 1.30
  • Update cloud-controller-manager images
• provider-azure: Support for Kubernetes v1.30 gardener-extension-provider-azure#855
  • Revendor gardener/gardener with support for 1.30 client creation
  • Update README.md with support for 1.30
  • Update cloud-controller-manager and cloud-node-manager images
• provider-gcp: Support for Kubernetes v1.30 gardener-extension-provider-gcp#755
  • Revendor gardener/gardener with support for 1.30 client creation
  • Update README.md with support for 1.30
  • Update cloud-controller-manager images
• provider-openstack: Support for Kubernetes v1.30 gardener-extension-provider-openstack#770
  • Revendor gardener/gardener with support for 1.30 client creation
  • Update README.md with support for 1.30
  • Update cloud-controller-manager images
• provider-equinix-metal: Support for Kubernetes v1.30 gardener-extension-provider-equinix-metal#309
  • Revendor gardener/gardener with support for 1.30 client creation
  • Update README.md with support for 1.30

Test Infra

• Ensure test-infra compatibility with conformance tests (example):

Cluster Autoscaler

• Update cluster-autoscaler for K8s 1.30: Issue for - Sync with Upstream v1.30 autoscaler#304
  • Adaptation of gardener/autoscaler:
  • Integration into gardener/gardener:

Follow-up items

• Add K8s 1.30 support for Gardener to kubernetes/test-infra:
• Add K8s conformance badges to Gardener and extensions:
• Update the the conformance spreadsheet and reflect this update in our README.md:
• Adapt TODOs to update the kubernetes versions in e2e tests: Set e2e test shoot k8s version to v1.30.0 #9745
• Update kindest/node to v1.30.0: Set e2e test shoot k8s version to v1.30.0 #9745

[shafeeqes]

/assign