Cluster Autoscaler Patch Releases March 2024

[gjtempleton]

I'm planning to cut new Cluster Autoscaler patch releases for 1.26-29 at the end of this week/start of next week. If there are any bugfix cherry-picks you want included, please prepare the PRs and let me know in the comments.

We missed the promotion of 1.26.7, 1.27.6, 1.28.3, and 1.29.1 in the January release cycle, but will be promoting these images which were published to the staging repo 6 weeks ago at the same time.

This will now be the last round of patches for 1.26.

Tagging cloud provider owners for visibility:
@4ND3R50N
@7fELF
@alphajc
@andrewsykim
@Andrius521
@apricote
@ArturasRa
@arunmk
@avorima
@BigDarkClown
@cprivitere
@ctrox
@davidjumani
@dbonfigli
@deitch
@detiber
@displague
@d-mo
@dougsong
@drmorr0
@ellistarn
@elmiko
@enxebre
@ericrrath
@feiskyer
@gajicdev
@gandhipr
@gjtempleton
@happytreees
@hardikdr
@hello2mao
@jackfrancis
@jayantjain93
@jaypipes
@Jeffwan
@jlamillan
@johnl
@jtherin
@kevin-wangzefeng
@LKaemmerling
@louisportay
@MaciekPytel
@marwanad
@MorrisLaw
@mrajashree
@NeilW
@nilo19
@optik-aper
@OriHoch
@pawelkuc

[gjtempleton]

@PhilippeChepy
@piepmatz
@pierre-emmanuelJ
@RainbowMango
@remyleone
@ringtail
@schegi
@Sh4d1
@shysank
@sohan-oracle
@tallaxes
@tghartland
@thirdeyenick
@towca
@trungng92
@vishalanarase
@v-pap
@zalmarge

[avorima]

@gjtempleton is it possible to include backports of #6617 for 1.29 and 1.28?

#6629
#6630

[m-barthelemy]

Would this release include a fix for this HIGH severity finding? #6279

[gjtempleton]

Would this release include a fix for this HIGH severity finding? #6279

Short answer, unless we have information suggesting this is a high enough risk to work around the fact we vendor it from the upstream k/k repo and it's still to be patched there, no. I've put a bit more context in the original issue.

[gjtempleton]

Releases published and release notes published

/close

[k8s-ci-robot]

@gjtempleton: Closing this issue.

In response to this:

Releases published and release notes published

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.