beta to stable

cluster/config-defaults.yaml

@@ -462,6 +462,7 @@ skipper_open_policy_agent_data_preprocessing_optimization_enabled: "true"
 skipper_open_policy_agent_preloading_enabled: "true"
 skipper_open_policy_agent_print_tracing_enabled: "true"
 skipper_open_policy_agent_decision_log_export_enabled: "false"
+skipper_open_policy_agent_prometheus_metrics_enabled: "true"
 skipper_open_policy_agent_console_logs_enabled: "false"
 skipper_open_policy_agent_decision_log_s3_endpoint: ""
 skipper_open_policy_agent_decision_log_s3_region: "eu-central-1"
@@ -622,6 +623,7 @@ kube_aws_iam_controller_mem: "50Mi"
 kube_state_metrics_cpu: "100m"
 kube_state_metrics_mem_max: "4Gi"
 kube_state_metrics_mem_min: "120Mi"
+kube_state_metrics_vpa_update_mode: "InPlaceOrRecreate"
 
 kubernetes_lifecycle_metrics_mem_max: "4Gi"
 kubernetes_lifecycle_metrics_mem_min: "120Mi"
@@ -1395,6 +1397,7 @@ aws_vpc_cni_network_policy_enforcing_mode: "standard"
 aws_load_balancer_controller_cpu: "100m"
 aws_load_balancer_controller_mem_max: "4Gi"
 aws_load_balancer_controller_default_target_type: "instance"
+aws_load_balancer_controller_vpa_update_mode: "InPlaceOrRecreate"
 
 # configure if sandbox-controller should be deployed
 sandbox_controller_enabled: "true"

cluster/manifests/02-admission-control/deployment.yaml

@@ -49,7 +49,7 @@ spec:
       priorityClassName: system-cluster-critical
       containers:
       - name: admission-controller
-        image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/admission-controller:master-308
+        image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/admission-controller:master-309
         lifecycle:
           preStop:
             exec:

cluster/manifests/02-scheduled-scaling-vpa/cronjob.yaml

@@ -33,5 +33,5 @@ spec:
           restartPolicy: Never
           containers:
           - name: main
-            image: container-registry.zalando.net/cloud-platform/scheduled-scaling-vpa:main-8
+            image: container-registry.zalando.net/cloud-platform/scheduled-scaling-vpa:main-9
 {{- end }}

cluster/manifests/03-skipper-validation-webhook/deployment.yaml

@@ -55,7 +55,7 @@ spec:
       serviceAccountName: skipper-validation-webhook
       containers:
       - name: valkey-sidecar
-        image: container-registry.zalando.net/library/valkey-9-alpine:9-alpine3.22-20260414
+        image: container-registry.zalando.net/library/valkey-9-alpine:9-alpine3.22-20260427
         args:
         - valkey-server
         - --save

cluster/manifests/audittrail-adapter/daemonset.yaml

@@ -34,7 +34,7 @@ spec:
       hostNetwork: true
       containers:
       - name: audittrail-adapter
-        image: container-registry.zalando.net/teapot/audittrail-adapter:master-109
+        image: container-registry.zalando.net/teapot/audittrail-adapter:master-110
         env:
           - name: AWS_REGION
             value: "{{ .Cluster.Region }}"

cluster/manifests/aws-load-balancer-controller/vpa.yaml

@@ -13,7 +13,7 @@ spec:
     kind: Deployment
     name: aws-load-balancer-controller
   updatePolicy:
-    updateMode: InPlaceOrRecreate
+    updateMode: {{ .Cluster.ConfigItems.aws_load_balancer_controller_vpa_update_mode }}
   resourcePolicy:
     containerPolicies:
     - containerName: controller

cluster/manifests/aws-node-decommissioner/cronjob.yaml

@@ -28,7 +28,7 @@ spec:
           restartPolicy: Never
           containers:
           - name: aws-node-decommissioner
-            image: container-registry.zalando.net/cloud-platform/aws-node-decommissioner:main-18
+            image: container-registry.zalando.net/cloud-platform/aws-node-decommissioner:main-19
             env:
             - name: AWS_REGION
               value: "{{.Cluster.Region}}"

cluster/manifests/cluster-lifecycle-controller/deployment.yaml

@@ -29,7 +29,7 @@ spec:
       serviceAccountName: cluster-lifecycle-controller
       containers:
       - name: cluster-lifecycle-controller
-        image: container-registry.zalando.net/teapot/cluster-lifecycle-controller:master-69
+        image: container-registry.zalando.net/teapot/cluster-lifecycle-controller:master-70
         args:
             - --drain-grace-period={{.Cluster.ConfigItems.drain_grace_period}}
             - --drain-min-pod-lifetime={{.Cluster.ConfigItems.drain_min_pod_lifetime}}

cluster/manifests/ingress-controller/deployment.yaml

@@ -1,4 +1,4 @@
-# {{ $image := "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/kube-ingress-aws-controller:v0.20.2" }}
+# {{ $image := "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/kube-ingress-aws-controller:v0.20.5" }}
 # {{ $version := index (split $image ":") 1 }}
 
 apiVersion: apps/v1

cluster/manifests/kube-state-metrics/vpa.yaml

@@ -12,7 +12,7 @@ spec:
     kind: Deployment
     name: kube-state-metrics
   updatePolicy:
-    updateMode: InPlaceOrRecreate
+    updateMode: {{.Cluster.ConfigItems.kube_state_metrics_vpa_update_mode}}
   resourcePolicy:
     containerPolicies:
     - containerName: kube-state-metrics

cluster/manifests/skipper/02-configmap-open-policy-agent.yaml

@@ -31,16 +31,18 @@ data:
             session_name: open-policy-agent-instance
       name: styra-bundles
       url: "{{ .Cluster.ConfigItems.skipper_open_policy_agent_bundles_url }}"
+    {{ if eq .Cluster.ConfigItems.skipper_open_policy_agent_prometheus_metrics_enabled "true" }}
+    status:
+      prometheus: true
+      # Setting empty status service name to avoid OPA trying to export metrics to Styra
+      service: ""
+    {{ end }}
     {{ if eq .Cluster.ConfigItems.skipper_open_policy_agent_decision_logs_buffer_type_event_enable "true" }}
     decision_logs:
       reporting:
         buffer_type: "event"
         buffer_size_limit_events: {{ .Cluster.ConfigItems.skipper_open_policy_agent_decision_logs_buffer_type_event_limit }}
     {{ else if eq .Cluster.ConfigItems.skipper_open_policy_agent_decision_log_export_enabled "true" }}
-    status:
-      prometheus: true
-      # Setting empty status service name to avoid OPA trying to export metrics to Styra
-      service: ""
     decision_logs:
       plugin: eopa_dl
     plugins:

cluster/manifests/skipper/deployment.yaml

@@ -1,6 +1,6 @@
 {{/* image-updater-bot detects *image variables so use name with suffix to disable it for the main image */}}
 
-{{ $main_image_updated_manually := "container-registry.zalando.net/teapot/skipper-internal:v0.24.74-1406" }}
+{{ $main_image_updated_manually := "container-registry.zalando.net/teapot/skipper-internal:v0.24.80-1412" }}
 {{ $canary_image := "container-registry.zalando.net/teapot/skipper-internal:v0.24.80-1412" }}
 
 {{/* Allow to override manually canary image by config item */}}
@@ -9,7 +9,7 @@
 {{ end }}
 
 {{/* Optional canary arguments separated by "[cf724afc]" to allow whitespaces, e.g. "-foo=has a whitespace[cf724afc]-baz=qux" */}}
-{{ $canary_args := "" }}
+{{ $canary_args := "-routes-urls=http://skipper-ingress-routesrv.kube-system.svc.cluster.local/routes" }}
 {{ if eq .Cluster.ConfigItems.skipper_ingress_zone_aware_routing_enabled "true" }}
 {{ $canary_args = "-routes-urls=http://skipper-ingress-routesrv.kube-system.svc.cluster.local/routes/$(KUBE_NODE_ZONE)" }}
 {{ end }}

cluster/manifests/skipper/skipper-valkey.yaml

@@ -1,4 +1,4 @@
-# {{ $image := "container-registry.zalando.net/library/valkey-9-alpine:9-alpine3.22-20260414" }}
+# {{ $image := "container-registry.zalando.net/library/valkey-9-alpine:9-alpine3.22-20260427" }}
 # {{ $version := index (split $image ":") 1 }}
 apiVersion: apps/v1
 kind: StatefulSet