v1.8.5 - 2024-12-23
Note: the v1.8.4 release has been abandoned due to an issue with the deprecated goreleaser
flags.
- Add
disable_auto_update
option to example Terraform configs for AWS, Azure, Equinix Metal, OpenStack, and vSphere, used to disable automatic updates for all Flatcar nodes (#3393, @xmudrii) - Update OpenStack CCM and CSI driver to v1.30.2, v1.29.1 and v1.28.3 (#3488, @rajaSahil)
- Use dedicated keyring for Docker repositories to solve
apt-key
deprecation warning upon installing/upgrading containerd (#3486, @kubermatic-bot)
v1.8.3 - 2024-09-17
- Fix vSphere CCM and CSI images. The CCM images for versions starting with v1.28.0 are pulled from the new community-owned image repository. The CCM images for versions prior to v1.28.0, and the CSI images, are pulled from the Kubermatic-managed mirror on
quay.io
. If you have a vSphere cluster, we strongly recommend upgrading to the latest KubeOne patch release and runningkubeone apply
as soon as possible, because the old image repository (gcr.io/cloud-provider-vsphere
) is not available anymore, hence it's not possible to pull the needed images from that repository (#3378, @xmudrii) - Example Terraform configs for Hetzner are now using
cx22
instead ofcx21
instance type by default. If you use the new Terraform configs with an existing cluster, make sure to override the instance type as needed, otherwise your instances/cluster will be destroyed (#3371, @kubermatic-bot)
v1.8.2 - 2024-08-08
- Allow the configuration of the upstream cluster-autoscaler flags
--enforce-node-group-min-size
and--balance-similar-node-groups
(#3306, @kubermatic-bot)
- Do not put multiple identical tolerations on the CoreDNS deployment (#3298, @kubermatic-bot)
- Use the RHEL-based upstream Docker package repository instead of the CentOS package repository as it's not maintained any longer (#3336, @kubermatic-bot)
- Update machine-controller to 1.59.3. This update includes support for IMDSv2 API on AWS for the worker nodes managed by machine-controller (#3323, @xrstf)
- Set
HttpPutResponseHopLimit
to 3 in the example Terraform configs for AWS for the control plane nodes and the static worker nodes in order to support the IMSD v2 API (#3329, @kubermatic-bot)
v1.8.1 - 2024-07-01
- Add support for Kubernetes 1.30 (#3215, @kubermatic-bot)
- Refactor the cluster upgrade process to adhere to the Kubernetes recommendations by updating ConfigMaps used by Kubeadm instead of providing the full config to Kubeadm itself. This change should not have any effect to cluster upgrades, but if you encounter any issue, please create an issue in the KubeOne repository (#3253, @kubermatic-bot)
- KubeOne now runs
kubeadm upgrade apply
without the--certificate-renewal=true
flag. This change should not have any effect to the upgrade process, but if you discover any issue, please create a new issue in the KubeOne repository (#3242, @kubermatic-bot) - Add default VolumeSnapshotClass for all supported providers as part of the
default-storage-class
addon (#3275, @kubermatic-bot)
- Fix snapshot-webhook admitting non-supported objects (
VolumeSnapshots
andVolumeSnapshotContents
). This fixes an issue that caused inability to create newVolumeSnapshots
(#3275, @kubermatic-bot) - Ensure
apparmor-utils
package is installed on Ubuntu as it's required forkubelet
to function properly (#3235, @kubermatic-bot) - Load the CA bundle before any addon installations to resolve issues with untrusted TLS connections in environments with self-signed certificates (#3247, @kubermatic-bot)
- Fix deletion issues for local Helm charts (#3268, @kubermatic-bot)
- Upgrade control plane components:
- Update NodeLocalDNS to v1.23.1
- Update AWS CCM to v1.30.1, v1.29.3, v1.28.6, and v1.27.7
- Update CSI snapshot controller and webhook to v8.0.1
- Update AWS EBS CSI driver to v1.31.0
- Update Azure CCM to v1.30.3 for Kubernetes 1.30 clusters
- Update AzureFile CSI driver to v1.30.2
- Update AzureDisk CSI driver to v1.30.1
- Update DigitalOcean CCM to v0.1.53
- Update DigitalOcean CSI to v4.10.0
- Update Hetzner CSI to v2.7.0
- Update OpenStack CCM and CSI to v1.30.0 for Kubernetes 1.30 clusters
- Update vSphere CCM to v1.30.1 for Kubernetes 1.30 clusters
- Update vSphere CSI driver to v3.2.0
- Update GCP Compute CSI driver to v1.13.2
- Update Cilium to v1.15.6
- Update cluster-autoscaler to v1.30.1, v1.29.3, v1.28.5, and v1.27.8 (#3214, @kubermatic-bot)
- Update GCP CCM to v30.0.0 (Kubernetes 1.30), v29.0.0 (Kubernetes 1.29), v28.2.1 (Kubernetes 1.28 and 1.27) (#3241, #3284, @kubermatic-bot)
- Update Canal CNI to v3.27.3 (#3200, @kubermatic-bot)
- Bind the
csi-snapshotter
image to v8.0.1 for all providers that are supporting snapshotting volumes (#3270, @kubermatic-bot)
- Fix the default Rocky Linux EC2 image filter query in the example Terraform configs for AWS (#3262, @kubermatic-bot)
- Add bastion host support to the example Terraform configs for VMware Virtual Cloud Director (VCD) (#3278, @kubermatic-bot)
v1.8.0 - 2024-05-14
We're happy to announce a new KubeOne minor release — KubeOne 1.8! Please consult the changelog below, as well as, the following two documents before upgrading:
- Refactor example Terraform configs for Hetzner to randomly generate the private network subnet in order to support creating multiple KubeOne clusters (#3152, @xmudrii)
- The example Terraform configs for Azure have been migrated to use the Standard SKU for IP addresses. This is a breaking change for existing setups; in which case you should continue using your current SKU. Manual migration is possible by dissociating IP from the VM and LB, the migrating it, and assigning it back, however please consider all potential risks before doing this migration (#3149, @kron4eg)
- Credentials defined in the credentials file now have precedence over credentials defined via environment variables. This change is made to match the behavior that's already documented in the KubeOne docs. If you use both the credentials file and the environment variables, we recommend double-checking your credentials file to make sure the credentials are up to date, as those credentials will be applied on the next
kubeone apply
run (#2991, @kron4eg) - kured has been removed, you have to re-enable it back in form of
helmRelease
(#3024, @kron4eg) - OSM: The latest Ubuntu 22.04 images on Azure have modified the configuration for
cloud-init
and how it accesses its datasource in Azure, in a breaking way. If you're having an Azure cluster, it's required to refresh your machines with the latest provided OSPs to ensure that a system-wide package update doesn't result in broken machines. (#3172, @xrstf) - Support for Docker is removed;
containerRuntime.docker
became a no-op. (#3008, @kron4eg)
- Set
cloudProvider.external
=true
by default for supported cloud providers in kubernetes 1.29+ (#3048, @kron4eg) - Check hostnames against Kubernetes node name requirements (#3091, @SimonTheLeg)
- Force
node-role.kubernetes.io/control-plane
label on control-plane Nodes (#3099, @kron4eg)
- Add support for Kubernetes 1.28 (#2948, @xmudrii)
- Add support for kubernetes 1.29 (#3048, @kron4eg)
- Make Kubernetes v1.29 the default stable Kubernetes version (#3073, @kron4eg)
- Add GCP CCM addon (#3038, @kron4eg)
- Add Nutanix CCM addon (#3034, @kron4eg)
- Add
certOption
to thehostConfig
API (#3020, @AhmadAlEdlbi) - Add a new API to configure TLS cipher suites for kube-apiserver, etcd and kubelet (#3081, @kron4eg)
- Add support for customizing
vAppName
for VMware Cloud Director CSI driver (#2932, @JamesClonk) - Add support for passing additional args to the kube-apiserver, kube-controller-manager, and kube-scheduler (#3162, @ahmedwaleedmalik)
- Allow setting
CCM_CONCURRENT_SERVICE_SYNCS
parameter on CCM addons to configure number of concurrentLoadBalancer
service reconciles (#2916, @embik) - Improve error messaging when working with remote files over SSH (#3052, @kron4eg)
- Canal CNI: Add
IFACE
andIFACE_REGEX
parameters to allow explicitly selecting network interface to be used for inter-node communication and VXLAN (#3152, @xmudrii) - Update to Go 1.22.1 (#3072, @xrstf)
- Escape the registry name when the registry is configured as a wildcard (#2927, @kron4eg)
- Bind
FLANNELD_IFACE
statically to status.hostIP (#3157, @kron4eg) - Clean yum cache upon configuring Kubernetes repos. This fixes an issue with cluster upgrades failing on nodes with an older yum version (#3146, @xmudrii)
- Deploy user defined addons before the external CCM initialization. This fixes an issue with cluster provisioning for users that use both external CCM and external CNI (#3065, @kron4eg)
- Don't use the deprecated path for GPG keys for Kubernetes and Docker repositories (#2919, @xmudrii)
- Download cri-tools from the Kubernetes repos instead of the Amazon Linux 2 repos on instances running Amazon Linux 2 (#2950, @xmudrii)
- Drop
containerRuntimeEndpoint
field from KubeletConfiguration to fix warning fromkubeadm init
andkubeadm join
for clusters running Kubernetes prior to 1.27 (#2939, @xmudrii) - Fix Helm deploying resources in the wrong namespace (#3000, @kron4eg)
- Fix a bug with the VMware Cloud Director CSI driver addon where it would crash if no
VCD_API_TOKEN
is set (#2932, @JamesClonk) - Fix a globbing issue for
apt-get install
causing KubeOne to install wrong Kubernetes version in some circumstances (#2958, @xmudrii) - Fix cluster upgrades on Debian hosts with deprecated Kubernetes repositories (#3076, @cnvergence)
- Fix file permissions setting on Flatcar (#3138, @kron4eg)
- Fix incorrect validation that made
VCD_API_TOKEN
unusable for VMware Cloud Director (#2945, @embik) - Fix indentation for manifests of csi-vsphere-ks addon (#2905, @ahmedwaleedmalik)
- Fix kubelet file permissions according to CIS 1.8 (#3100, @kron4eg)
- Fix support for Flatcar stable channel 3815.2.0 (#3040, @4ch3los)
- Propagate CA Bundle to vSphere CSI driver (#2906, @ahmedwaleedmalik)
registryConfiguration.OverrideRegistry
is correctly applied to the pause image configured in static nodes (control plane and static workers) (#2925, @embik)- Update CRDs for operating-system-manager addon (#2933, @ahmedwaleedmalik)
- Increase the memory requests and limits from 300Mi to 600Mi for cluster-autoscaler (#2978, @xmudrii)
- Extract csi-external-snapshotter into its own addon (#3016, @kron4eg)
- Replace JSON6902 with Strategic Merge in Nutanix CSI driver (#3035, @kron4eg)
- Use
DisableCloudProviders
feature gate as a replacement forInTreePluginXXXUnregister
for each former in-tree provider (#3075, @kron4eg)
- Update AWS CCM (#3056, @kron4eg)
- Update AWS CSI driver, add snapshot webhook (#3013, @kron4eg)
- Update Azure CCM (#3019, @kron4eg)
- Update AzureDrive CSI (#3019, @kron4eg)
- Update AzureFile CSI (#3019, @kron4eg)
- Update DigitalOcean CCM (#3027, @kron4eg)
- Update DigitalOcean CSI driver (#3026, @kron4eg)
- Update Equinix Metal CCM (#3028, @kron4eg)
- Update GCP CSI Driver (#3023, @kron4eg)
- Update Hetzner CCM & CSI (#3022, @kron4eg)
- Update Nutanix CSI (#3029, @kron4eg)
- Update OpenStack CCM / CSI driver versions, drop unsupported versions (#3014, @kron4eg)
- Update VMware Cloud Director CSI Driver to v1.6.0 (#3094, @ahmedwaleedmalik)
- Update vSphere CPI (CCM) (#3018, @kron4eg)
- Update vSphere CSI driver (#3018, @kron4eg)
- Update Canal / Calico VXLAN addon to v3.26.3 (#2949, @xmudrii)
- Update Canal CNI to v3.27.2 (#3055, @kron4eg)
- Update Cilium to v1.15 (#3089, @kron4eg)
- Update Flatcar Linux Update Operator (#3024, @kron4eg)
- Update Helm to v3.14.2 (#3045, @kron4eg)
- Update and kustomize csi-azuredisk addon (#3144, @kron4eg)
- Update and kustomize nodelocaldns (#3039, @kron4eg)
- Update backup-restic addon to use etcd 3.5.11 for creating etcd snapshots (#2981, @embik)
- Update cluster-autoscaler to v1.27.3, v1.26.4, v1.25.3, add support for v1.28 (#2949, @xmudrii)
- Update cluster-autoscaler with scale from zero instructions (#3086, @kron4eg)
- Update etcd to v3.5.10 (#3002, @kron4eg)
- Update Kubernetes libs to v0.29.2 (#3045, @kron4eg)
- Update metrics-server to v0.7.0 (#3046, @kron4eg)
- Update restic addon (#3025, @kron4eg)