S3 backend

.github/workflows/docker.yaml

@@ -31,15 +31,20 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v3
 
-    - name: Make tag
-      run: |
-        [ "${GITHUB_EVENT_NAME}" == 'pull_request' ] && echo "tag=${GITHUB_HEAD_REF##*/}" >> $GITHUB_ENV || true
-        [ "${GITHUB_EVENT_NAME}" == 'release' ] && echo "tag=${GITHUB_REF##*/}" >> $GITHUB_ENV || true
-        [ "${GITHUB_EVENT_NAME}" == 'push' ] && echo "tag=latest" >> $GITHUB_ENV || true
+    - name: Docker meta
+      id: meta
+      uses: docker/metadata-action@v5
+      with:
+        images: |
+          ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
 
     - name: Build and push image
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@v6
       with:
         context: .
         push: true
-        tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.tag }}
+        sbom: true
+        tags: ${{ steps.meta.outputs.tags }}

.github/workflows/helm.yaml

@@ -0,0 +1,58 @@
+---
+name: Helm Chart Release Action
+on:
+  pull_request:
+    branches:
+        - main
+  release:
+    types:
+        - published
+  push:
+    branches:
+        - main
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build:
+    name: Docker Build
+    runs-on: ubuntu-latest
+
+    steps:
+        - name: Checkout
+          uses: actions/checkout@v4
+
+        - name: Make tag
+          run: |
+            [ "${GITHUB_EVENT_NAME}" == 'pull_request' ] && echo "tag=v0.0.0-pull-request.${{ github.event.number }}" >> $GITHUB_ENV || true
+            [ "${GITHUB_EVENT_NAME}" == 'release' ] && echo "tag=${GITHUB_REF##*/}" >> $GITHUB_ENV || true
+            [ "${GITHUB_EVENT_NAME}" == 'push' ] && echo "tag=v0.0.0-${GITHUB_REF##*/}" >> $GITHUB_ENV || true
+
+        - name: Docker meta
+          id: meta
+          uses: docker/metadata-action@v5
+          with:
+            images: |
+              ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+        # the replacement can be checked with:
+        # helm show values oci://ghcr.io/metal-stack/charts/<chart>:<tag>
+        - name: Patch container image tags in values.yaml
+          uses: mikefarah/yq@v4
+          with:
+            cmd: yq e -i '.image.tag="${{ steps.meta.outputs.version }}"' charts/${{ github.event.repository.name }}/values.yaml
+
+        # we can replace this with the helm/chart-releaser-action after
+        # https://github.com/helm/chart-releaser-action/issues/107 was resolved
+        - name: Release Helm OCI Artifact
+          uses: appany/helm-oci-chart-releaser@v0.4.2
+          with:
+            name: ${{ github.event.repository.name }}
+            repository: ${{ github.repository_owner }}/charts
+            tag: ${{ env.tag }}
+            path: charts/${{ github.event.repository.name }}
+            registry: ${{ env.REGISTRY }}
+            registry_username: ${{ secrets.DOCKER_REGISTRY_USER }}
+            registry_password: ${{ secrets.DOCKER_REGISTRY_TOKEN }}

cmd/gardener-extension-audit/app/app.go

@@ -20,7 +20,7 @@ import (
 	logf "sigs.k8s.io/controller-runtime/pkg/log"
 	"sigs.k8s.io/controller-runtime/pkg/manager"
 
-	componentbaseconfig "k8s.io/component-base/config"
+	configv1alpha1 "k8s.io/component-base/config/v1alpha1"
 )
 
 var log = logf.Log.WithName("gardener-extension-audit")
@@ -53,7 +53,7 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 }
 
 func (o *Options) run(ctx context.Context) error {
-	util.ApplyClientConnectionConfigurationToRESTConfig(&componentbaseconfig.ClientConnectionConfiguration{
+	util.ApplyClientConnectionConfigurationToRESTConfig(&configv1alpha1.ClientConnectionConfiguration{
 		QPS:   100.0,
 		Burst: 130,
 	}, o.restOptions.Completed().Config)

example/10-s3-secret.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: s3-secret
+  namespace: garden-local
+stringData:
+  access_key_id: <aws-access-key-id>
+  secret_access_key: <aws-secret-access-key>

example/controller-registration.yaml

@@ -7,7 +7,7 @@ helm:
   rawChart: H4sIAAAAAAAAA+0ca2/bRjKf+SsWTIqmQEi9lYJA7s6x1dZIYguyL71DURgrciWxJrksH47dJP/9Zh+klg+Jku3Yl4YDA5KWO4/dnZmdmV16iSOHBCQyyHVCgtilgYFTx006T+4PugAvRyP+CVD+5N97g2GvP+qPx6y9NxyOu0/Q6B5l2AhpnOAIoScRpcm2fk3Pv1JYblr/wxWOEvMG+96debAFHg+HG9e/3+2V1n88eDl+grr3ML5G+MbXH4fuexKxdbfQVU/DYZj/1HtmV9ccEtuRGya86QD9Qjwf2Uw30IJGKFkRxPUF5fqjBdgnFtqkWNpVRr9rAgPtsSfgG4eN9u9Q21zSe+HRZP/DQb9k/6PRaNDa/0NAp7Ok1pJpAE4IilfIsJE+x/Dl2c8Hs6PJyWR28cvB4ZuLo+NZJ+tn2DRIIup5oDcRWbpxAq2gOiagCW9gomfPbQyfZgf+3k9mZ8enJz/In+Qa+6FHOpuosE0HTTJ9tDhFXdM6HTTF9iVeEumASIDnHolRYQRpGFLpnGSjGyy5n7JpFBE7QWu2qMBWC1Xq34hj2mj/CYE1ghmN7x4J7h//jYejcRv/PQTssP4XK+KFsGmbSXi7WLDB//f6vVFx/fvdly9ftv7/IeDjRwM5ZOEGBOkscNOR8fmztjF4Y91J4PBOmorr4TnxYhPiR/OS3Agq/Ec6J1FAQI9Ml3YYhwKNDSSusJdKUT5+RG5ge6mTC2giibhFkCpuWUBGxUIbekj+nFN1FG4AOhPYhKObM+IRHBPzBISrlSwXzfVhdxGSIcSeuAu0wvE0gufXSI9XuD8aW8D2PWMPrFh/M8FLlGOEkRskC6R/F//ru7jcMyIhjd2ERjfbSMAYSR1B69YEYbDKuMsL4pDQozc+CRIZ+efKEXcg41Cn67GN4RuEHfw/xEsLd+nj0OCLfwUxFI0MCqv5IXIT0lwjaIz/x4OS/x+NB63/fxCQbqhg3u/5Cp9mCyycYKFMcOkGjoUOuWK8w6HmkwQ7OMEWuASR/te77XoNkkgxxN81PpU3C28jPLRV49cZ+U/QCLqcoCHrnYnDOcYXRXW10CdGZOuoi+QU7/bYS3avsI/937Ya2GD//dFgXLL/3qDX5v8PAvdl2LmSfFFjFlxyE0YAhmHwT3UgXINNJrtn5nodmxI7U3nT9mjqQAyCvXCFe5xKPn5ZIRAzkYoKgVZylpKe7bkgKPQMwINANzE8ELbUbvFWkNS2ScjaQbDk/CYkMZ+niPyZuhFxkN5A36wSQG6c4+tN8tXhS5H5DGete0qlYO4njoqYy/FnuO+sAMZ+fBlCzm+eRnGyJ0eOsx9PgVKJlmu0CsJnnHrJa2xfQr9c0lKzxQkl9L+sZNZA4RMKpE2N6+L1CAdLgp7FxI5IgqxX28md8W5cLGaBtW5E9KnxIZKUMRe0DMHTgHmQ7M1AJlNlZ/LsNt7kWa03UcYMCeEL9IwnfWzgmRCsX5bm8E5Zyii7fkLz8ZAEdmk2v6pQYYf9f53A3TIA2L7/97r9fr+8/496bfz/IFDYNmVKLqz3KF/2naOAL7L3xyGxGeOIXLlMzl/cmFUk3rq+Cw67y5+EnmtjsWFkXks2HtI0SATTGGRhIb7Yh32c2Ku3u8kxFgQyk5AElEnh23oQ0ITHCXHWlFd5mtKrrLu9IvZlnPpKzs2tsT5vKizDc17JAQd5LqU0X8PET3GyQvpOKbz+Ax+yqEKBDKpcikvbIurW0PAWwjaIlSlRJlFAkg80AuWthHgJNSJQA9cnBuh7TCIYOKi759EPxNkN34FV3Q8jTOeggIbsszd25F6xk7ad0CMS0zSyQcGqhADNiFfgvGKDVTHXE2AkdmgMh4P7oCyU9AOZw8/LfFtnDPrdfnfNocHOfswWN7P5LCLFLnDOl9pockICuKpbSC8n+mpZEzb0ymNR3NSLdKap500pLOhNwcsIjDB/WLAQ6vsYPGneYKDOxsL6uo8hDeZVhyR2p36M0kY6Sj5UoODja0bFTqMI5tWICPvheiR+pci+Pgfl32Xns5vAjtVhMHorgr1kxU1+f9oKchMfdxnQiBg0JCLjMtZOdRN1gXKaYRzkCGXamXaKOTPyjerVln1qI7Y0IXbUrAome4ms0RSdpuw4ukTNcWN2dK2coxdmTz5ep6EseP+DugHSX+hlv6xsL7AlRa4d13GUj4w5mJqBHQcMO36l6v4G3BrPX2IqlreOp3iymWU9ZjPH3BXJA4Uy39zI5HN1arfh1nBm5Dy6NDzYMz2VDjS+ZW2wMDKbQbobLKheh72gEYQbJfSfeKOK/0fMDkcUfBJcqd5DeL3XB4dvJidHF2eTw9nk/OLk4N3kbHpwOMk7IsTTk58i6ltKI0ILl3jOjCyKrbKdbb5WHtSYuXk08Z/OJj8d/6fMfGOOVyH3dnJwNJldTN5ODs+PT08ebjx7hmaZvMfvDn6evAdhT2cXp+8ns19nx+cVWS3U4ZdIlLpzp7YQvU33mHOJq+ufeSLhXRTO+UbJLKqwS+3iloBfRBNqU89C54fTcq0rDwRUnLyRR9ClKsQaY1146HVLCXI+a9RLffKOBes1QxZOVxHVZx3FCjfvkndd8U1nFnXCVFZd6RcR7JwGHgQQSZSSzSvP1se1yYFtM8InzaHOU4QXCzdwkxsrb2Hq4xxAzHtQ8wjlFaujFALx5Rlszk7qwbdjvpvK5sk1sVO1cvlUzgsP3c4K6VT2kE8IS60m1yFz+Go6tO5hoEtys/H0PT+fr+AhJEID4IqOg5rH3PpqGDKWO5z1F9ESGlJw1DdvmKx68Q7AisYJXwiJIxS4EqKWNNDOCuuqy9q5rp6BdK3vqAN4w35XPtpLvXdT7v3lbTKWLbJ/NTWzvxPsUP8DRwIBaZTyO+Dz1FmSPQuBTef/o2G5/jcYDntt/e8hQDqNZYKes4pMXfXsB9QrXwEIebK7rhVOqXOUq8hrriL/H0VDSFb/HeAr7HosoeLk43TeONY7Fwu/Gn+2g/1HEMLf6UWgBvsfvBxU7n/2x639PwiUD+/4YuM0WdHI/Uvci7/8kUc869sBHswZiWbUI/sY+T7mG6Uei6Xkh8EO93+OaBry+MpAypl+sSypFXIS1tUWwsbwA6KRuWxl/okHsm4svnxgBl5lhB3f5TFs4UUBMSFVXn6a8LcNZLplq3cHdhOAfUtDmFAihIeUQX4N6wXcYybWXUs/O2ABSbq7gGFZ1IpUm6rGNVOGA4gXnbx1ZyGUqVEmbC2aA/67TjRdrwrBLrcDB3ZDlUfxtoddvySKoGezahw/yd+Nsih6iAnPI/nHGWS+x97SFOpoQqAfJCV622SuELUpjRw32G5WPBjYiUvTGPZjl7XzMKRkQ/LEA/o6bO/MlKIgoyIYm+SnyAnYVREbZIhBM4gPCSaaE4TZa0gyV/7nnUwcGEj6pZ/7mHhFAAj+bZbK3WycMoh0QgohVQxx1K76dad95zU0gKP9YtsPsJB1xWwutkio5dfGlI2xQR4IQv8AneGbW3ZZRq363E/MvMP+v0P8J+tRtw8Bm97/GY165fsf3e6wjf8eAjZc3OIrfv8pXOWOxC5HzYuI+gb08hyDHYzzqjj6/rePelaw1i39/HCqv9DZM93arfD9+ffv95OAHXdntXdQGfBrsSHPtR9FqHzGjSxXlRIoySrwLdUtCwciIKMgqn/+/KKCWOLHnCIg8BN/fS9JQ+oY3NXmkq5PX2EKXXZzpxCd3ibTT/iNVemCj6eFFH636z35eYvBv1poOBzwMRYPRnhlmK//Xucsj23oG2B3/4/FznSLbaCp/tcflv1/fzBq/f+DwDb/n8Uij1rJe+wJ+pvDRvsXJ2n38g+Amt7/6Q0q7/+37/89EIhLcjylyy7FWWi5sqMsWIBNO8H25babawleWojvFexXqNyUO16c0GQKgQG7RayphXYL9bR1Fok+ftY05TKUfNdHvSpmoRE0KnfJRAC5qVeUzAlORB94Sj4cBxAXgFKfsftqDnQcsLPHjbfHLLTAXkw0rXoXy0K//Z41/yp2fNEGKX7doSt7U4kdKYsLIBb/nh2/hjiNxTUwfnNDE0fPYlpm6oq4ySqdmzb1O+t4Tv069+i842MW/HTmqetB1MVId46ofUmihQspaXbyr1AVy7ykdOmRi/VFS4FrYN8ZDyUaX2N9wP4jlGjI/41Tz+z1zOuve1S9yqj0f7xiI+uLB6ZpalohurM0cVEju23DYkXNzh/Vv/tV9+YXDrlRsE4ddgEs0+r1W1i1Pfj7UZAm8x/y5SXwo5pW84pQpU2+vCOEepovm38jb2lp2S2I9f12MT3Qg1/cgE++P2j5f4qwNHXy9HbbbqGFFlpooYUWWmihhRZaaKGFFlpooYUWWmihhRZaaKGFFlpooYUWWmihhRZaaKGFLwj/A3RGleoAeAAA
   values:
     image:
-      tag: v0.1.10
+      tag: v0.1.12
 ---
 apiVersion: core.gardener.cloud/v1beta1
 kind: ControllerRegistration

example/shoot.yaml

@@ -33,12 +33,26 @@ spec:
         #   secretResourceName: splunk-secret
         #   tls: true
         #   tlshost: <hostname for splunk host if needed for tls sni|certificate verification>
+        # s3:
+        #   enabled: true
+        #   bucket: "my-audit-logs"
+        #   region: "eu-west-1"
+        #   prefix: "cluster-logs"  # optional
+        #   secretResourceName: s3-secret
+        #   filesystemBufferSize: "1G"  # optional
+        #   endpoint: "https://custom-s3-endpoint"  # optional, for S3-compatible storage
+        #   tlsEnabled: true  # optional
   # resources:
   #   - name: splunk-secret
   #     resourceRef:
   #       apiVersion: v1
   #       kind: Secret
   #       name: splunk-secret
+  #   - name: s3-secret
+  #     resourceRef:
+  #       apiVersion: v1
+  #       kind: Secret
+  #       name: s3-secret
   networking:
     type: calico
     nodes: 10.10.0.0/16

go.mod

@@ -4,21 +4,21 @@ go 1.24
 
 require (
 	github.com/ahmetb/gen-crd-api-reference-docs v0.3.0
-	github.com/gardener/gardener v1.108.2
+	github.com/gardener/gardener v1.113.2
 	github.com/go-logr/logr v1.4.2
 	github.com/golang/mock v1.6.0
 	github.com/metal-stack/metal-lib v0.20.2
 	github.com/onsi/ginkgo v1.16.5
 	github.com/spf13/cobra v1.9.1
 	github.com/spf13/pflag v1.0.6
 	github.com/stretchr/testify v1.10.0
-	k8s.io/api v0.31.2
-	k8s.io/apimachinery v0.31.2
-	k8s.io/client-go v0.31.2
-	k8s.io/code-generator v0.31.2
-	k8s.io/component-base v0.31.2
-	k8s.io/utils v0.0.0-20241104163129-6fe5fd82f078
-	sigs.k8s.io/controller-runtime v0.19.6
+	k8s.io/api v0.32.2
+	k8s.io/apimachinery v0.32.2
+	k8s.io/client-go v0.32.2
+	k8s.io/code-generator v0.32.2
+	k8s.io/component-base v0.32.2
+	k8s.io/utils v0.0.0-20241210054802-24370beab758
+	sigs.k8s.io/controller-runtime v0.20.2
 )
 
 replace k8s.io/code-generator => k8s.io/code-generator v0.29.5
@@ -27,25 +27,24 @@ require (
 	dario.cat/mergo v1.0.1 // indirect
 	github.com/BurntSushi/toml v1.4.0 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
-	github.com/Masterminds/semver/v3 v3.3.0 // indirect
+	github.com/Masterminds/semver/v3 v3.3.1 // indirect
 	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
 	github.com/andybalholm/brotli v1.1.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver/v4 v4.0.0 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
-	github.com/cyphar/filepath-securejoin v0.3.1 // indirect
+	github.com/cyphar/filepath-securejoin v0.3.6 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
-	github.com/evanphx/json-patch/v5 v5.9.0 // indirect
+	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/fluent/fluent-operator/v2 v2.9.0 // indirect
-	github.com/fsnotify/fsnotify v1.7.0 // indirect
+	github.com/fsnotify/fsnotify v1.8.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
-	github.com/gardener/cert-management v0.16.0 // indirect
-	github.com/gardener/etcd-druid v0.24.1 // indirect
-	github.com/gardener/hvpa-controller/api v0.17.0 // indirect
-	github.com/gardener/machine-controller-manager v0.54.0 // indirect
+	github.com/gardener/cert-management v0.17.5 // indirect
+	github.com/gardener/etcd-druid v0.27.0 // indirect
+	github.com/gardener/machine-controller-manager v0.56.1 // indirect
 	github.com/go-logr/zapr v1.3.0 // indirect
 	github.com/go-openapi/errors v0.22.0 // indirect
 	github.com/go-openapi/jsonpointer v0.21.0 // indirect
@@ -56,90 +55,91 @@ require (
 	github.com/gobuffalo/flect v1.0.3 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
-	github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 // indirect
+	github.com/google/btree v1.1.3 // indirect
+	github.com/google/gnostic-models v0.6.9 // indirect
 	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
-	github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db // indirect
+	github.com/google/pprof v0.0.0-20241210010833-40e02aabc2ad // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/gorilla/websocket v1.5.0 // indirect
+	github.com/gorilla/websocket v1.5.3 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
 	github.com/huandu/xstrings v1.5.0 // indirect
-	github.com/imdario/mergo v0.3.16 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/ironcore-dev/vgopath v0.1.5 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/compress v1.17.9 // indirect
+	github.com/klauspost/compress v1.17.11 // indirect
 	github.com/kubernetes-csi/external-snapshotter/client/v4 v4.2.0 // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mitchellh/copystructure v1.2.0 // indirect
 	github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
-	github.com/moby/spdystream v0.4.0 // indirect
+	github.com/moby/spdystream v0.5.0 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
 	github.com/nxadm/tail v1.4.8 // indirect
-	github.com/onsi/ginkgo/v2 v2.21.0 // indirect
+	github.com/onsi/ginkgo/v2 v2.22.1 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
-	github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.78.1 // indirect
+	github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.80.1 // indirect
 	github.com/prometheus/client_golang v1.20.5 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
-	github.com/prometheus/common v0.60.1 // indirect
+	github.com/prometheus/common v0.62.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/shopspring/decimal v1.4.0 // indirect
-	github.com/spf13/afero v1.11.0 // indirect
+	github.com/spf13/afero v1.12.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
 	github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
 	github.com/xeipuuv/gojsonschema v1.2.0 // indirect
+	go.opentelemetry.io/otel v1.32.0 // indirect
+	go.opentelemetry.io/otel/trace v1.32.0 // indirect
 	go.uber.org/mock v0.5.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/crypto v0.32.0 // indirect
-	golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f // indirect
-	golang.org/x/mod v0.22.0 // indirect
-	golang.org/x/net v0.34.0 // indirect
-	golang.org/x/oauth2 v0.25.0 // indirect
-	golang.org/x/sync v0.10.0 // indirect
-	golang.org/x/sys v0.29.0 // indirect
-	golang.org/x/term v0.28.0 // indirect
-	golang.org/x/text v0.21.0 // indirect
-	golang.org/x/time v0.8.0 // indirect
-	golang.org/x/tools v0.27.0 // indirect
+	golang.org/x/crypto v0.33.0 // indirect
+	golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa // indirect
+	golang.org/x/mod v0.23.0 // indirect
+	golang.org/x/net v0.35.0 // indirect
+	golang.org/x/oauth2 v0.26.0 // indirect
+	golang.org/x/sync v0.11.0 // indirect
+	golang.org/x/sys v0.30.0 // indirect
+	golang.org/x/term v0.29.0 // indirect
+	golang.org/x/text v0.22.0 // indirect
+	golang.org/x/time v0.10.0 // indirect
+	golang.org/x/tools v0.30.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20240903143218-8af14fe29dc1 // indirect
-	google.golang.org/protobuf v1.35.1 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576 // indirect
+	google.golang.org/protobuf v1.36.1 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	helm.sh/helm/v3 v3.16.2 // indirect
-	istio.io/api v1.23.3 // indirect
-	istio.io/client-go v1.23.2 // indirect
-	k8s.io/apiextensions-apiserver v0.31.2 // indirect
-	k8s.io/autoscaler/vertical-pod-autoscaler v1.2.1 // indirect
+	helm.sh/helm/v3 v3.17.1 // indirect
+	istio.io/api v1.24.3 // indirect
+	istio.io/client-go v1.24.2 // indirect
+	k8s.io/apiextensions-apiserver v0.32.2 // indirect
+	k8s.io/autoscaler/vertical-pod-autoscaler v1.2.2 // indirect
 	k8s.io/gengo v0.0.0-20230829151522-9cce18d56c01 // indirect
-	k8s.io/gengo/v2 v2.0.0-20240228010128-51d4e06bde70 // indirect
+	k8s.io/gengo/v2 v2.0.0-20240911193312-2b36238f13e9 // indirect
 	k8s.io/klog v1.0.0 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kube-aggregator v0.31.2 // indirect
-	k8s.io/kube-openapi v0.0.0-20240808142205-8e686545bdb8 // indirect
-	k8s.io/kubelet v0.31.2 // indirect
-	k8s.io/metrics v0.31.2 // indirect
+	k8s.io/kube-aggregator v0.32.2 // indirect
+	k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7 // indirect
+	k8s.io/kubelet v0.32.2 // indirect
+	k8s.io/metrics v0.32.2 // indirect
 	sigs.k8s.io/controller-runtime/tools/setup-envtest v0.0.0-20231015215740-bf15e44028f9 // indirect
-	sigs.k8s.io/controller-tools v0.16.5 // indirect
-	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
+	sigs.k8s.io/controller-tools v0.17.2 // indirect
+	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.5.0 // indirect
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )