Update Kubernetes from v1.32.0 to v1.32.1

* Enable the Kubernetes MutatingAdmissionPolicy alpha via feature gate
* Update CoreDNS from v1.11.4 to v1.12.0
* Update flannel from v0.26.2 to v0.26.3

Docs: https://kubernetes.io/docs/reference/access-authn-authz/mutating-admission-policy/

resources/static-manifests/kube-apiserver.yaml

@@ -30,9 +30,11 @@ spec:
     - --etcd-certfile=/etc/kubernetes/pki/etcd-client.crt
     - --etcd-keyfile=/etc/kubernetes/pki/etcd-client.key
     - --etcd-servers=${etcd_servers}
+    - --feature-gates=kube:MutatingAdmissionPolicy=true
     - --kubelet-client-certificate=/etc/kubernetes/pki/apiserver.crt
     - --kubelet-client-key=/etc/kubernetes/pki/apiserver.key
     - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname${aggregation_flags}
+    - --runtime-config=admissionregistration.k8s.io/v1alpha1=true
     - --secure-port=6443
     - --service-account-issuer=https://kubernetes.default.svc.cluster.local
     - --service-account-jwks-uri=https://kubernetes.default.svc.cluster.local/openid/v1/jwks

variables.tf

@@ -46,13 +46,13 @@ variable "container_images" {
   default = {
     cilium_agent            = "quay.io/cilium/cilium:v1.16.5"
     cilium_operator         = "quay.io/cilium/operator-generic:v1.16.5"
-    coredns                 = "registry.k8s.io/coredns/coredns:v1.11.4"
-    flannel                 = "docker.io/flannel/flannel:v0.26.2"
+    coredns                 = "registry.k8s.io/coredns/coredns:v1.12.0"
+    flannel                 = "docker.io/flannel/flannel:v0.26.3"
     flannel_cni             = "quay.io/poseidon/flannel-cni:v0.4.2"
-    kube_apiserver          = "registry.k8s.io/kube-apiserver:v1.32.0"
-    kube_controller_manager = "registry.k8s.io/kube-controller-manager:v1.32.0"
-    kube_scheduler          = "registry.k8s.io/kube-scheduler:v1.32.0"
-    kube_proxy              = "registry.k8s.io/kube-proxy:v1.32.0"
+    kube_apiserver          = "registry.k8s.io/kube-apiserver:v1.32.1"
+    kube_controller_manager = "registry.k8s.io/kube-controller-manager:v1.32.1"
+    kube_scheduler          = "registry.k8s.io/kube-scheduler:v1.32.1"
+    kube_proxy              = "registry.k8s.io/kube-proxy:v1.32.1"
   }
 }