chore(deps): Bump github.com/gardener/gardener from 1.85.0 to 1.86.1

[dependabot]

Bumps github.com/gardener/gardener from 1.85.0 to 1.86.1.

Release notes

Sourced from github.com/gardener/gardener's releases.

v1.86.1

[gardener/etcd-druid]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references. by @​shreyas-s-raogardener/etcd-druid#756

[gardener/etcd-backup-restore]

🏃 Others

• [OPERATOR] Dynamic loading of IaaS credentials is now optimized to make use of file system information instead of calculating a hash of the credentials to detect changes. by @​renormalizegardener/etcd-backup-restore#670
• [OPERATOR] A regression in chunk deletion behavior for openstack provider has now been fixed. by @​shreyas-s-raogardener/etcd-backup-restore#703
• [OPERATOR] Add unit tests for chunk deletion by @​anveshreddy18gardener/etcd-backup-restore#685
• [USER] Add support for overriding storage API endpoint for provider GCS, by setting environment variable GOOGLE_STORAGE_API_ENDPOINT, with the value in the format http[s]://host[:port]/storage/v1/. ⚠️ Note: GCS storage API endpoint will not be overridden for copy subcommand, since backup buckets may reside in different regions. by @​shreyas-s-raogardener/etcd-backup-restore#691

Docker Images

• admission-controller-linux-amd64: eu.gcr.io/gardener-project/gardener/admission-controller:v1.86.1
• apiserver-linux-amd64: eu.gcr.io/gardener-project/gardener/apiserver:v1.86.1
• controller-manager-linux-amd64: eu.gcr.io/gardener-project/gardener/controller-manager:v1.86.1
• gardenlet-linux-amd64: eu.gcr.io/gardener-project/gardener/gardenlet:v1.86.1
• node-agent-linux-amd64: eu.gcr.io/gardener-project/gardener/node-agent:v1.86.1
• operator-linux-amd64: eu.gcr.io/gardener-project/gardener/operator:v1.86.1
• resource-manager-linux-amd64: eu.gcr.io/gardener-project/gardener/resource-manager:v1.86.1
• scheduler-linux-amd64: eu.gcr.io/gardener-project/gardener/scheduler:v1.86.1

v1.86.0

[gardener/gardener]

⚠️ Breaking Changes

• [OPERATOR] All virtual garden access Secrets have to be labeled with with resources.gardener.cloud/class=shoot. Otherwise the virtual-GRM won't consider the Secrets and won't renew them. by @​rfranzke #8883
• [OPERATOR] The ContainerdRegistryHostsDir feature gate has been promoted to beta and is now turned on by default. by @​ialidzhikov #8873
• [DEVELOPER] Support for the deprecated NetworkPolicy annotations networking.resources.gardener.cloud/from-policy-allowed-ports and networking.resources.gardener.cloud/from-policy-pod-label-selector has been removed. Use networking.resources.gardener.cloud/from-<some-alias>-allowed-ports instead (documentation). by @​rfranzke #8883

📰 Noteworthy

• [DEVELOPER] The local Gardener environments for e2e tests running in Prow are now backed by the registry-cache extensions enabled in the Prow cluster. This should have a positive impact on the network I/O for image pulls and resulting costs. by @​oliver-goetz #8880
• [OPERATOR] The WorkerlessShoots has been promoted to GA and is now locked to "enabled by default". by @​acumino #8906

✨ New Features

• [USER] It is now possible to configure the resources encrypted in the ETCD for shoot clusters, see this document for more details. by @​shafeeqes #8842
• [USER] The shoots/viewerkubeconfig subresource now also restricts viewer access to resources which are specified in the spec.kubernetes.kubeAPIServer.encryptionConfig in the Shoot in addition to Secrets. by @​shafeeqes #8966
• [USER] It is now possible to request a kubeconfig with read-only access (all APIs except core/v1.Secret) for shoot clusters by using the new shoots/viewerkubeconfig subresource. Read all about it here. by @​rfranzke #8870
• [OPERATOR] The vpn-seed-server component now supports IPv4 seed clusters hosting IPv6 shoot clusters. by @​DockToFuture #8830
• [OPERATOR] It is now possible to configure the resources encrypted in the ETCD for the virtual garden cluster, see this document for more details. by @​shafeeqes #8842

🐛 Bug Fixes

• [DEPENDENCY] extension library: An issue causing the Worker restore operation to fail for hibernated Shoots is now fixed. by @​ialidzhikov #8943
• [OPERATOR] A bug causing the Shoot to use the wrong istio load balancer if the ExposureClass name and the exposureclass handler name are not the same is now fixed. by @​shafeeqes #8926
• [OPERATOR] Fixed a bug where a Shoot with an expired machine image or Kubernetes version could be created.
  For machine images: only allow updating to a higher expired machine image version for an existing worker pool

... (truncated)

Commits

• e129d31 Release v1.86.1
• 6ad4e85 Upgrade etcd-druid from v0.21.0 to v0.21.1 (#9034)
• 106445d Prepare next Dev Cycle v1.86.1-dev
• cee1201 Release v1.86.0
• 483cda3 [release-v1.86] Revert "Spread Istio Ingress Gateway pods across hosts if the...
• c75e3b6 [release-v1.86] Prevent reading encrypted resources with `shoots/viewerkubeco...
• 0a20f87 Delete MCM before deleting the MCM resources in the Shoot force deletion flow...
• e6f98fa egress cidrs (#8888)
• 9748682 Upgrade vpn-seed-server and vpn-shoot-client (#8958)
• f31674b typo (#8955)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)