kops

See the full kOps 1.37 release notes for details, including breaking changes and deprecations.

What's Changed

• docs: update 1.36 release notes by @hakman in https://github.com/kubernetes/kops/pull/18592
• fix: retry listing cloud resources in kops delete cluster by @hakman in https://github.com/kubernetes/kops/pull/18595
• hack: parallelize GitHub release promotion and add checksum validation by @hakman in https://github.com/kubernetes/kops/pull/18594
• feat(linode): Refactor VPC model into broader Network model, and add subnet task by @moshevayner in https://github.com/kubernetes/kops/pull/18590
• chore: Remove support for Kubernetes 1.31 by @hakman in https://github.com/kubernetes/kops/pull/18598
• docs: update 1.36 release notes post-release by @hakman in https://github.com/kubernetes/kops/pull/18599
• nodeup: don't mutate the cluster spec when clearing authenticator config by @hakman in https://github.com/kubernetes/kops/pull/18600
• azure: allow kindnet pod CIDR to reach the kube-apiserver by @hakman in https://github.com/kubernetes/kops/pull/18604
• Replace gsutil with gcloud storage by @hakman in https://github.com/kubernetes/kops/pull/18609
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/18611
• Adding suitable control plane machine for gce by @YahiaBadr in https://github.com/kubernetes/kops/pull/18612
• Allow specifying number of nodes that can be unready during validation by @Jefftree in https://github.com/kubernetes/kops/pull/18614
• chore(networking): bump aws-cni to v1.22.3 by @moshevayner in https://github.com/kubernetes/kops/pull/18615
• Tolerate unready nodes during scalability test validation by @Jefftree in https://github.com/kubernetes/kops/pull/18616
• aws: remove support for Classic Load Balancer for the API by @hakman in https://github.com/kubernetes/kops/pull/18617
• chore(channels): bump k8s and Ubuntu AMI versions in alpha channel by @moshevayner in https://github.com/kubernetes/kops/pull/18621
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/18626
• gce: open control-plane node-exporter port (tcp/9100) by @Jefftree in https://github.com/kubernetes/kops/pull/18620
• aws: add option for IP-based node names by @hakman in https://github.com/kubernetes/kops/pull/18632
• aws: allow shared subnets to omit the zone by @hakman in https://github.com/kubernetes/kops/pull/18630
• hetzner: Ignore WellKnownServices when comparing load balancers by @krillerdk in https://github.com/kubernetes/kops/pull/18631
• Enable nri mounting on kindnet in kops by @michaelasp in https://github.com/kubernetes/kops/pull/18635
• azure: support terraform provider azurerm v5 by @hakman in https://github.com/kubernetes/kops/pull/18636
• Update hcloud-go/v2 to latest version (v2.47.0) by @krillerdk in https://github.com/kubernetes/kops/pull/18638
• gce: download nodeup from private GCS buckets with curl by @hakman in https://github.com/kubernetes/kops/pull/18623
• aws: do not set the primary network interface to "Unmanaged=yes" by @hakman in https://github.com/kubernetes/kops/pull/18642
• rolling-update: restore 5s delay between pod eviction retries by @hakman in https://github.com/kubernetes/kops/pull/18641
• Remove support for gossip DNS by @hakman in https://github.com/kubernetes/kops/pull/18601
• etcd-manager: compute kops-utils-cp image at use time by @hakman in https://github.com/kubernetes/kops/pull/18645
• chore(channels): Promote alpha to stable channel by @moshevayner in https://github.com/kubernetes/kops/pull/18647
• aws: Default to AWS CCM v1.36.1 for all k8s versions by @rifelpet in https://github.com/kubernetes/kops/pull/18649
• chore(networking): bump aws-cni to version 1.22.4 by @moshevayner in https://github.com/kubernetes/kops/pull/18648
• Remove gossip leftovers by @hakman in https://gith

What's Changed

• Automated cherry pick of #18600: nodeup: don't mutate the cluster spec when clearing authenticator config by @rifelpet in https://github.com/kubernetes/kops/pull/18602
• Automated cherry pick of #18631: hetzner: Ignore WellKnownServices when comparing load balancers by @hakman in https://github.com/kubernetes/kops/pull/18633
• Release 1.36.1 by @hakman in https://github.com/kubernetes/kops/pull/18634

Full Changelog: https://github.com/kubernetes/kops/compare/v1.36.0...v1.36.1

See the full kOps 1.36 release notes for details, including breaking changes and deprecations.

Highlights

• Kubernetes 1.36 support and completion of the move away from the in-tree cloud providers
• Reworked addon management: kops-channels now runs as a static pod on control-plane nodes; the standalone channels binary is no longer distributed
• Hybrid bootstrap for gossip clusters: workers bootstrap directly against the API load balancer, easing migration off gossip DNS, which is deprecated
• Karpenter refresh: Karpenter v1.13.0 with kOps-managed EC2NodeClass and NodePool objects per instance group
• etcd-manager improvements: recovery of members with replaced data disks, membership changes resilient to unreachable members, a distroless image, and faster single-member cluster startup
• Expanded Azure support: cloud-controller-manager, Azure Disk CSI driver, and experimental Terraform target
• Hetzner Cluster Autoscaler support and groundwork for Linode (Akamai) as a new cloud provider
• Component updates: containerd v2.2.4, etcd-manager v3.0.20260707 with etcd 3.5.31/3.6.12, AWS Load Balancer Controller v3.3.0, Cilium tunables, CoreDNS v1.14.2, cluster-autoscaler v1.36.0
• Removed: support for Kubernetes 1.30, etcd 3.4, Amazon Linux 2, Ubuntu 20.04, and Debian 10

What's Changed

• Automated cherry pick of #18467: aws: Reconcile target group health check changes on existing target groups by @hakman in https://github.com/kubernetes/kops/pull/18469
• Automated cherry pick of #18484: gce: emit kops.k8s.io/instancegroup node label by @rifelpet in https://github.com/kubernetes/kops/pull/18488
• Automated cherry pick of #18478: nodeup: load ip_set module and disable firewalld on RHEL10 by @rifelpet in https://github.com/kubernetes/kops/pull/18492
• Automated cherry pick of #18498: Remove namespace from DO ClusterRole by @rifelpet in https://github.com/kubernetes/kops/pull/18499
• Automated cherry pick of #18511: Allow setting missing slice elements from the command line by @hakman in https://github.com/kubernetes/kops/pull/18512
• Automated cherry pick of ##18479: Upgrade Karpenter to v1.13.0 ##18486: Register Karpenter nodes with karpenter.sh/unregistered taint ##18487: Add missing EC2 read permissions to Karpenter IAM policy ##18497: Add managed Karpenter EC2NodeClass and NodePool by @hakman in https://github.com/kubernetes/kops/pull/18513
• Automated cherry pick of #18522: azure: Scope nodes-to-API NSG rules to the NAT gateway public IP by @hakman in https://github.com/kubernetes/kops/pull/18523
• Automated cherry pick of #18527: azure: Bump azuredisk-csi-driver to v1.34.4 by @hakman in https://github.com/kubernetes/kops/pull/18528
• Automated cherry pick of #18529: azure: Bump azure-cloud-controller-manager to v1.36.2 by @hakman in https://github.com/kubernetes/kops/pull/18531
• Automated cherry pick of #18533: azure: Grant control-plane VMSS Contributor instead of Owner by @hakman in https://github.com/kubernetes/kops/pull/18534
• Automated cherry pick of #18535: coredns: Honor node taints in hostname topologySpreadConstraint by @hakman in https://github.com/kubernetes/kops/pull/18536
• Automated cherry pick of #18538: hetzner: fix Cluster Autoscaler node group membership by @hakman in https://github.com/kubernetes/kops/pull/18539
• Automated cherry pick of #18541: Update cluster-autoscaler to v1.36.0 by @hakman in https://github.com/kubernetes/kops/pull/18542
• Automated cherry pick of #18543: gce: register all zonal MIGs of a multi-zone instance group with cluster-autoscaler by @hakman in https://github.com/kubernetes/kops/pull/18544
• Automated cherry pick of #18546: Update Go to 1.26.5 and bump golang.org/x modules by @hakman in https://github.com/kubernetes/kops/pull/18547
• Cherry pick of #18560: etcd-manager: upgrade to v3.0.20260707 by @hakman in https://github.com/kubernetes/kops/pull/18

What's Changed

• Support etcd 3.7.0-rc.0 and allow overriding the etcd version in the scalability scenario by @Jefftree in https://github.com/kubernetes/kops/pull/18458
• Enable misspell in golangci-lint by @ameukam in https://github.com/kubernetes/kops/pull/17578
• e2e: Filter random AZ selection by instance type availability by @rifelpet in https://github.com/kubernetes/kops/pull/18463
• azure: Use IMDS attested metadata document for node identity by @hakman in https://github.com/kubernetes/kops/pull/18163
• gce: fix backend service ownership filtering during delete by @carterpewpew in https://github.com/kubernetes/kops/pull/18460
• aws: Reconcile target group health check changes on existing target groups by @hakman in https://github.com/kubernetes/kops/pull/18467
• gce: Reconcile HTTP health check changes on existing health checks by @hakman in https://github.com/kubernetes/kops/pull/18468
• Improve Google Storage Bucket support. by @cheftako in https://github.com/kubernetes/kops/pull/18466
• Enable gosec and gocritic by @ameukam in https://github.com/kubernetes/kops/pull/18470
• Add serathius as scalability test owner by @Jefftree in https://github.com/kubernetes/kops/pull/18475
• feat(linode): implement SSH key management and associated tasks by @moshevayner in https://github.com/kubernetes/kops/pull/18383
• Added support for APIServer using LB by @cheftako in https://github.com/kubernetes/kops/pull/18459
• chore(channels): bump k8s versions in alpha channel by @moshevayner in https://github.com/kubernetes/kops/pull/18477
• Upgrade Karpenter to v1.13.0 by @hakman in https://github.com/kubernetes/kops/pull/18479
• scaletest: Report experiment variant into scalability run metadata by @Jefftree in https://github.com/kubernetes/kops/pull/18476
• channels: Add Kubernetes 1.36.0 support by @hakman in https://github.com/kubernetes/kops/pull/18480
• gce: emit kops.k8s.io/instancegroup node label by @rifelpet in https://github.com/kubernetes/kops/pull/18484
• e2e: Skip ImageVolume tests on COS 121 by @rifelpet in https://github.com/kubernetes/kops/pull/18483
• Register Karpenter nodes with karpenter.sh/unregistered taint by @hakman in https://github.com/kubernetes/kops/pull/18486
• Add missing EC2 read permissions to Karpenter IAM policy by @hakman in https://github.com/kubernetes/kops/pull/18487
• scaletest: report experiment variant after kubetest2 runs by @Jefftree in https://github.com/kubernetes/kops/pull/18485
• nodeup: load ip_set module and disable firewalld on RHEL10 by @rifelpet in https://github.com/kubernetes/kops/pull/18478
• API only CLI by @cheftako in https://github.com/kubernetes/kops/pull/18482
• Fixing LB behavior when you have both APIServer and Control Plane. by @cheftako in https://github.com/kubernetes/kops/pull/18496
• Remove namespace from DO ClusterRole by @rifelpet in https://github.com/kubernetes/kops/pull/18498
• chore(channels): promote to stable, bump node images, update recommended kOps versions by @hakman in https://github.com/kubernetes/kops/pull/18501
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/18505
• scaletest: bind etcd metrics to all interfaces by @Jefftree in https://github.com/kubernetes/kops/pull/18503
• e2e: test the PR's own channels, not master's by @hakman in https://github.com/kubernetes/kops/pull/18504
• tests/e2e: refine externalTrafficPolicy=Local and hostNetwork skips by @rifelpet in https://github.com/kubernetes/kops/pull/18509
• Allow setting missing slice elements from the command line by @hakman in https://github.com/kubernetes/kops/pull/18511
• Add managed Karpenter EC2NodeClass and NodePool by @hakman in https://github.com/kubernetes/kops/pull/18497
• tests/e2e: skip implement-NodePort ETP=Local test on more CNIs by @rifelpet in https://github.com/kubernetes/kops/pull/18515
• chore(channels): pin Azure noble image to a deployable version by @hakman in https://gi