chore(deps): update terraform hcloud-k8s/kubernetes/hcloud to v4 by renovate[bot] · Pull Request #411 · goingdark-social/IaC

renovate · 2026-05-05T21:57:33Z

This PR contains the following updates:

Package	Type	Update	Change
hcloud-k8s/kubernetes/hcloud (source)	module	major	`3.30.2` → `4.4.0`

Release Notes

hcloud-k8s/terraform-hcloud-kubernetes (hcloud-k8s/kubernetes/hcloud)

`v4.4.0`

Compare Source

What's Changed

chore(deps): update helm release cilium to v1.18.10 by @renovate[bot] in #406
chore(deps): update helm release hcloud-csi to v2.21.0 by @renovate[bot] in #409
chore(deps): update terraform http to ~> 3.6.0 by @renovate[bot] in #413
chore(deps): update terraform random to ~> 3.9.0 by @renovate[bot] in #414
chore(deps): update terraform tls to ~> 4.3.0 by @renovate[bot] in #415

Full Changelog: hcloud-k8s/terraform-hcloud-kubernetes@4.3.0...4.4.0

`v4.3.0`

Compare Source

What's Changed

chore(deps): update helm release hcloud-cloud-controller-manager to v1.31.0 by @renovate[bot] in #404
chore(deps): update dependency kubernetes/kubernetes to v1.33.12 by @renovate[bot] in #405

Full Changelog: hcloud-k8s/terraform-hcloud-kubernetes@4.2.0...4.3.0

`v4.2.0`

Compare Source

What's Changed

feat(hccm): use KubePrism for Kubernetes API access by @M4t7e in #402
feat(cluster-autoscaler): clean up orphaned Hetzner servers on destroy by @M4t7e in #403

Full Changelog: hcloud-k8s/terraform-hcloud-kubernetes@4.1.0...4.2.0

`v4.1.0`

Compare Source

What's Changed

chore(deps): update dependency kubernetes/kubernetes to v1.33.11 by @renovate[bot] in #387
chore(deps): update terraform hcloud to v1.62.0 by @renovate[bot] in #394
chore(deps): update helm release longhorn to v1.11.2 by @renovate[bot] in #398
feat: pre-provision private network manifests via user_data by @mlinares1998 in #399
chore(deps): update dependency prometheus-operator/prometheus-operator to v0.91.0 by @renovate[bot] in #401

Full Changelog: hcloud-k8s/terraform-hcloud-kubernetes@4.0.1...4.1.0

`v4.0.1`

Compare Source

What's Changed

fix(network): adjust service CIDR limit for Kubernetes 1.33+ by @M4t7e in #396
chore(deps): update helm release cilium to v1.18.9 by @renovate[bot] in #388

Full Changelog: hcloud-k8s/terraform-hcloud-kubernetes@4.0.0...4.0.1

`v4.0.0`

Compare Source

⚠️ Important Upgrade Notes

[!IMPORTANT]
Before upgrading to the next major version, ensure you are using the latest Hcloud Kubernetes v3 release.

The upgrade from Hcloud Kubernetes v3 to v4 introduces Talos configuration changes that require a reboot. For a seamless upgrade, set talos_machine_configuration_apply_mode to staged. This applies the configuration change in staged mode and performs a rolling reboot of all cluster nodes.

During the upgrade, errors like the following can occur and stop the upgrade procedure:

│ Error: Provider produced inconsistent final plan
│ 
│ When expanding the plan for module.kubernetes.talos_machine_configuration_apply.control_plane["k8s-control-1"] to include new values learned so far during apply, provider "registry.opentofu.org/siderolabs/talos" produced an invalid new value for .machine_configuration: inconsistent values for sensitive attribute.
│ 
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.

This is likely caused by a bug in the Talos Terraform provider upgrade and should be resolved by running the apply a second time.

After the entire upgrade procedure is finished, talos_machine_configuration_apply_mode can be removed. Some pods may remain marked as Failed or Succeeded. These leftovers can be cleaned up with:

kubectl delete pods --field-selector=status.phase==Failed -A
kubectl delete pods --field-selector=status.phase==Succeeded -A

What's Changed

chore(deps): update dependency siderolabs/talos to v1.12.6 by @renovate[bot] in #294
chore(deps): update dependency siderolabs/talos-cloud-controller-manager to v1.12.0 by @renovate[bot] in #301
chore(deps): update terraform talos to v0.10.1 by @renovate[bot] in #287
chore: add curl check to client prerequisites by @M4t7e in #371
feat(ingress-nginx): add deprecation acknowledgment variable by @M4t7e in #372
feat(talos): add automatic reboot for staged configuration by @M4t7e in #376
feat(talos): migrate Talos configuration to multi-document by @M4t7e in #379
chore(deps): update helm release cert-manager to v1.20.1 by @renovate[bot] in #375
feat: (v4) add support for TrustedRootsConfig CA certificates by @mlinares1998 in #377
fix: (v4) 0.0.0.0/0 route handling by @mlinares1998 in #381
Add talosconfig_machine_secrets to outputs by @jke-tapesandpips in #382
chore(deps): update helm release cert-manager to v1.20.2 by @renovate[bot] in #384
chore(deps): update terraform talos to v0.11.0 by @renovate[bot] in #392
chore(deps): update helm release hcloud-csi to v2.20.2 by @renovate[bot] in #386
chore(deps): update dependency siderolabs/talos to v1.12.7 by @renovate[bot] in #391
feat(cluster-autoscaler): enable discovery by default by @M4t7e in #395

New Contributors

@jke-tapesandpips made their first contribution in #382

Deprecations

Deprecated Ingress NGINX (See: Retirement in March 2026)

Full Changelog: hcloud-k8s/terraform-hcloud-kubernetes@3.30.2...4.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

goingdark-sync · 2026-05-21T08:46:01Z

Kubechecks Report

No changes

goingdark-sync · 2026-05-21T08:46:02Z

Kubechecks Report

No changes

goingdark-sync · 2026-05-21T08:46:03Z

Kubechecks Report

No changes

goingdark-sync · 2026-05-21T08:46:04Z