v1.28.11+k0s.0

What's Changed

• [Backport release-1.28] Adding CLI args reference to the docs by @k0s-bot in #4502
• [Backport release-1.28] Fix ocibundle for 32bit arm by @k0s-bot in #4509
• [Backport release-1.28] Construct Helm actions using Helm env helpers by @k0s-bot in #4518
• [Backport release-1.28] Bump golangci-lint to v1.57.1 by @twz123 in #4593
• [Backport release-1.28] Make k0s reset fail if it can't reach containerd by @k0s-bot in #4590
• [Backport release-1.28] Fix docs link to manual k0s install by @k0s-bot in #4598
• [Backport release-1.28] Document constraints of dynamic config install by @k0s-bot in #4605
• [Backport release-1.28] Whitelist local IPv6 CIDRs when airgapping nodes by @k0s-bot in #4623
• [Backport release-1.28] Remove the wrong default timeout from the Helm docs by @k0s-bot in #4600
• [Backport release-1.28] Set correct version number in containerd CRI config by @k0s-bot in #4602
• [Backport release-1.28] Don't use the wrong PID in error strings by @k0s-bot in #4599
• [release-1.28] Bump Kubernetes to v1.28.11 by @twz123 in #4620
• [Backport release-1.28] Skip k0s VIP and calico CNI interfaces in address detection by @k0s-bot in #4640
• [Backport release-1.28] Use statically initialized runtime schemes by @k0s-bot in #4601

Full Changelog: v1.28.10+k0s.0...v1.28.11+k0s.0

v1.27.15+k0s.0

What's Changed

• [Backport release-1.27] Construct Helm actions using Helm env helpers by @k0s-bot in #4517
• [Backport release-1.27] Fix ocibundle for 32bit arm by @k0s-bot in #4521
• [Backport release-1.27] Bump golangci-lint to v1.57.1 by @twz123 in #4594
• [Backport release-1.27] Fix docs link to manual k0s install by @k0s-bot in #4611
• [Backport release-1.27] Document constraints of dynamic config install by @k0s-bot in #4604
• [Backport release-1.27] Remove the wrong default timeout from the Helm docs by @k0s-bot in #4633
• [Backport release-1.27] Whitelist local IPv6 CIDRs when airgapping nodes by @k0s-bot in #4632
• [Backport release-1.27] Make k0s reset fail if it can't reach containerd by @k0s-bot in #4606
• [release-1.27] Bump Kubernetes to v1.27.15 by @twz123 in #4621
• [Backport release-1.27] Don't use the wrong PID in error strings by @k0s-bot in #4642
• [Backport release-1.27] Set correct version number in containerd CRI config by @k0s-bot in #4639
• [Backport release-1.27] Skip k0s VIP and calico CNI interfaces in address detection by @k0s-bot in #4654
• [Backport release-1.27] Use statically initialized runtime schemes by @twz123 in #4657

Full Changelog: v1.27.14+k0s.0...v1.27.15+k0s.0

v1.30.1+k0s.0

What's Changed

• [Backport release-1.30] Bump kine to v0.11.9 by @k0s-bot in #4414
• [Backport release-1.30] Change kine metrics port from 8080 to 2380 by @k0s-bot in #4423
• [Backport release-1.30] Use a versioned worker config stack by @k0s-bot in #4440
• [Backport release-1.30] Introduce check-metricsscraper-singlenode by @k0s-bot in #4439
• [Backport release-1.30] Lessen the systemd RestartSec to 10 secs by @k0s-bot in #4446
• [Backport release-1.30] Bump Kubernetes to v1.30.1 by @k0s-bot in #4448
• [Backport release-1.30] Fix error handling in EtcdMemberReconciler by @k0s-bot in #4449
• [Backport release-1.30] Skip kube-bridge interface for api/etcd address by @k0s-bot in #4475
• [Backport release-1.30] Use dedicated leasepool for worker config component by @k0s-bot in #4463
• [Backport release-1.30] Add readinessProbe/minReadySeconds to kube-router by @k0s-bot in #4471
• [Backport release-1.30] Bump containerd to v1.7.17 by @k0s-bot in #4465

Full Changelog: v1.30.0+k0s.0...v1.30.1+k0s.0

v1.29.5+k0s.0

What's Changed

• [Backport release-1.29] Fixed Stop() for external etcd by @k0s-bot in #4330
• [Backport release-1.29] Fix build on armv8l by @k0s-bot in #4348
• [Backport release-1.29] Fix metadata test by @k0s-bot in #4367
• [Backport release-1.29] Bump kine to v0.11.8 by @k0s-bot in #4362
• [Backport release-1.29] Bump containerd to v1.7.16 by @twz123 in #4369
• [Backport release-1.29] Fix timing issue in ap-removedapis inttest by @k0s-bot in #4365
• [Backport release-1.29] Bump CoreDNS to v1.11.3 by @k0s-bot in #4366
• [release-1.29] Bump Go to v1.21.10 by @twz123 in #4390
• [Backport release-1.29] Bump kine to v0.11.9 by @k0s-bot in #4422
• [release-1.29] Bump Kubernetes to v1.29.5 by @twz123 in #4425
• [Backport release-1.29] Lessen the systemd RestartSec to 10 secs by @k0s-bot in #4445
• [Backport release-1.29] Use a versioned worker config stack by @k0s-bot in #4441
• [Backport release-1.29] Introduce check-metricsscraper-singlenode by @k0s-bot in #4442
• [Backport release-1.29] Skip kube-bridge interface for api/etcd address by @k0s-bot in #4474
• [Backport release-1.29] Add readinessProbe/minReadySeconds to kube-router by @k0s-bot in #4478
• [Backport release-1.29] Bump containerd to v1.7.17 by @twz123 in #4482
• [Backport release-1.29] feat: implement watcher for oci bundles by @ricardomaraschini in #4429
• [Backport release-1.29] Use dedicated leasepool for worker config component by @twz123 in #4488

Full Changelog: v1.29.4+k0s.0...v1.29.5+k0s.0

v1.28.10+k0s.0

What's Changed

• [Backport release-1.28] Fixed Stop() for external etcd by @k0s-bot in #4329
• [Backport release-1.28] Fix build on armv8l by @k0s-bot in #4347
• [Backport release-1.28] Fix timing issue in ap-removedapis inttest by @k0s-bot in #4372
• [Backport release-1.28] Bump CoreDNS to v1.11.3 by @k0s-bot in #4383
• [Backport release-1.28] Fix metadata test by @k0s-bot in #4368
• [Backport release-1.28] Bump Go to v1.21.10 by @k0s-bot in #4392
• [release-1.28] Bump Kubernetes to v1.28.10 by @twz123 in #4426
• [Backport release-1.28] Lessen the systemd RestartSec to 10 secs by @k0s-bot in #4444
• [Backport release-1.28] Skip kube-bridge interface for api/etcd address by @k0s-bot in #4473
• [Backport release-1.28] Introduce check-metricsscraper-singlenode by @k0s-bot in #4466
• [Backport release-1.28] Use a versioned worker config stack by @k0s-bot in #4464
• [Backport release-1.28] Add readinessProbe/minReadySeconds to kube-router by @k0s-bot in #4485
• [Backport release-1.28] feat: implement watcher for oci bundles by @ricardomaraschini in #4428
• [Backport release-1.28] Use dedicated leasepool for worker config component by @k0s-bot in #4494

Full Changelog: v1.28.9+k0s.0...v1.28.10+k0s.0

v1.27.14+k0s.0

What's Changed

• [Backport release-1.27] Fixed Stop() for external etcd by @k0s-bot in #4328
• [Backport release-1.27] Fix build on armv8l by @k0s-bot in #4346
• [Backport release-1.27] Fix timing issue in ap-removedapis inttest by @k0s-bot in #4382
• [Backport release-1.27] Bump Go to v1.21.10 by @twz123 in #4394
• [release-1.27] Bump Kubernetes to v1.27.14 by @twz123 in #4427
• [Backport release-1.27] Lessen the systemd RestartSec to 10 secs by @k0s-bot in #4443
• [Backport release-1.27] Skip kube-bridge interface for api/etcd address by @twz123 in #4476
• [Backport release-1.27] Use a versioned worker config stack by @twz123 in #4480
• [Backport release-1.27] Add readinessProbe/minReadySeconds to kube-router by @k0s-bot in #4486
• [Backport release-1.27] feat: implement watcher for oci bundles by @twz123 in #4489
• [Backport release-1.27] Use dedicated leasepool for worker config component by @jnummelin in #4495

Full Changelog: v1.27.13+k0s.0...v1.27.14+k0s.0

v1.30.0+k0s.0

Highlights

See the release blog post for more information. K0s now has built-in support for IPVS-based virtual IPs on control plane nodes and an etcd CRD that can be used to automatically scale k0s control plane nodes by removing them as etcd members:

• Manage Etcd peers using custom resources by @jnummelin in #4213
• Implement keepalived load balancer by @juanluisvaladas in #4344

What's Changed

• Bump mkdocs-material from 9.5.4 to 9.5.5 in /docs by @dependabot in #3975
• Bump shogo82148/actions-create-release from 1.5.2 to 1.7.0 by @dependabot in #3967
• Drop k0sctl integration test by @twz123 in #3960
• Bump zeebe-io/backport-action from 2.3.0 to 2.4.1 by @dependabot in #3973
• Bump google.golang.org/grpc from 1.60.1 to 1.61.0 by @dependabot in #3974
• Bump robinraju/release-downloader from 1.8 to 1.9 by @dependabot in #3980
• Bump mkdocs-material from 9.5.5 to 9.5.6 in /docs by @dependabot in #3979
• Install less packages in k0s Docker image by @twz123 in #3981
• Bump runc to v1.1.12 by @twz123 in #3987
• chore: remove "else if true" by @ricardomaraschini in #3984
• Pin markdownlint-cli version in GitHub Actions by @twz123 in #3991
• Bump libseccomp to v2.5.5 by @twz123 in #3988
• Bump containerd to v1.7.13 by @twz123 in #3989
• Bump certifi from 2023.11.17 to 2024.2.2 in /docs by @dependabot in #4009
• Bump etcd to v3.5.12 by @twz123 in #4018
• Bump kine to v0.11.4 by @twz123 in #4017
• Bump pip from 23.3.2 to 24.0 in /docs by @dependabot in #4022
• Bump mkdocs-material from 9.5.6 to 9.5.7 in /docs by @dependabot in #4023
• Bump markupsafe from 2.1.4 to 2.1.5 in /docs by @dependabot in #4024
• Refactor pre-shared token creation by @twz123 in #4025
• Overhaul shell completion docs by @twz123 in #3961
• Replace deprecated usages of k8s.io/utils/pointer by @twz123 in #4026
• Bump watchdog from 3.0.0 to 4.0.0 in /docs by @dependabot in #4035
• Bump mkdocs-material from 9.5.7 to 9.5.8 in /docs by @dependabot in #4036
• Replace x/exp/slices with standard slices by @twz123 in #4039
• Bump golang.org/x/mod from 0.14.0 to 0.15.0 by @dependabot in #4037
• Bump golang.org/x/sys from 0.16.0 to 0.17.0 by @dependabot in #4040
• Bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #4041
• Document NSS plugin limitations by @twz123 in #4034
• Bump sigs.k8s.io/controller-runtime from 0.17.0 to 0.17.1 by @dependabot in #4046
• Bump mkdocs-material from 9.5.8 to 9.5.9 in /docs by @dependabot in #4049
• Synchronize Windows and POSIX constants by @twz123 in #4043
• Bump golang.org/x/tools from 0.17.0 to 0.18.0 by @dependabot in #4053
• Use KUBERNETES_VERSION consistently by @twz123 in #3955
• Remove note about the 2023 user survey by @twz123 in #4038
• Bump github.com/go-playground/validator/v10 from 10.17.0 to 10.18.0 by @dependabot in #4050
• Bump github.com/opencontainers/runtime-spec from 1.1.0 to 1.2.0 by @dependabot in #4054
• Bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in #4055
• Bump Go to v1.21.7 by @twz123 in #4068
• Bump mkdocs-material from 9.5.9 to 9.5.10 in /docs by @dependabot in #4074
• Remove unused bootstrap-api-auth token usage by @twz123 in #4030
• Remove kubeconfig API endpoint by @twz123 in #4033
• Bump sigs.k8s.io/controller-runtime from 0.17.1 to 0.17.2 by @dependabot in #4072
• Bump github.com/cilium/ebpf from 0.12.3 to 0.13.0 by @dependabot in #4073
• Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1 by @dependabot in #4063
• Bump Kubernetes to v1.29.2 by @twz123 in #4067
• Remove some outdated bullet points from kube-router docs by @twz123 in #4086
• Fix availableComponents unit test by @twz123 in #4080
• Rename [Cc]ontainerD to containerd by @twz123 in #4044
• Bump cri-dockerd to v0.3.10 by @twz123 in #4079
• Error out when NLLB is enabled for a single-node cluster by @twz123 in #4087
• Bump cosign to v2.2.3 by @twz123 in #4083
• Bump troubleshoot to v0.83.0 by @twz123 in #4082
• Add windows-node to available components by @twz123 in #4032
• Don't cache embedded binaries twice by @twz123 in #3972
• Add progress=plain to all docker build commands by @twz123 in #3969
• Bump golangci-lint to v1.56.2 by @twz123 in #4078
• Bump go.uber.org/zap from 1.26.0 to 1.27.0 by @dependabot in #4103
• Bump shogo82148/actions-upload-release-asset from 1.7.2 to 1.7.3 by @dependabot in #4102
• Bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 by @dependabot in #4109
• Bump github.com/cilium/ebpf from 0.13.0 to 0.13.1 by @dependabot in #4113
• Bump github.com/cilium/ebpf from 0.13.1 to 0.13.2 by @dependabot in #4119
• Bump google.golang.org/grpc from 1.61.1 to 1.62.0 by @dependabot in #4110
• Bump shogo82148/actions-create-release from 1.7.0 to 1.7.1 by @dependabot in #4124
• Bump mkdocs-material from 9.5.10 to 9.5.11 in /docs by @dependabot in #4125
• Bump golang.org/x/crypto from 0.19.0 to 0.20.0 by @dependabot in #4126
• Remove the info about runtime dependencies of old k0s versions by @twz123 in #4116
• Bump mkdocs-material from 9.5.11 to 9.5.12 in /docs by @dependabot in #4127
• Harden etcd subcommand usage and validation by @twz123 in #4118
• Use the official musl domain for the git link by @twz123 in #4105
• Bump metrics-server to v0.7.0 by @twz123 in #4027
• Bump python-dateutil from 2.8.2 to 2.9.0 in /docs by @dependabot in #4130
• Move Containerd component into the containerd subpackage by @twz123 in #4120
• Bump Go to v1.22.0 by @twz123 in #4115
• Bump envoy to v1.29.1 by @twz123 in #4081
• bug: retry saving helm chart object status by @ricardomaraschini in #4064
• Bump pymdown-extensions from 10.7 to 10.7.1 in /docs by @dependabot in #4144
• Bump github.com/go-openapi/jsonpointer from 0.20.2 to 0.20.3 by @dependabot in #4138
• Bump shogo82148/actions-create-release from 1.7.1 to 1.7.2 by @dependabot in #4142
• Bump python-dateutil from 2.9.0 to 2.9.0.post0 in /docs by @dependabot in #4140
• Bump pyparsing from 3.1.1 to 3.1.2 in /docs by @dependabot in #4147
• Bump mkdocs-material from 9.5.12 to 9.5.13 in /docs by @dependabot in #4146
• Bump golang.org/x/mod from 0.15.0 to 0.16.0 by @dependabot in #4149
• Bump packaging from 23.2 to 24.0 in /docs by @dependabot in #4153
• Bump github.com/cloudflare/cfssl from 1.6.4 to 1.6.5 by @dependabot in #4152
• Revert "Bump github.com/cloudflare/cfssl from 1.6.4 to 1.6.5" by @twz123 in #4154
• Use unix build tag by @twz123 in #4042
• Bump wheel from 0.42.0 to 0.43.0 in /docs by @dependabot in #4157
• Bump kine to 0.11...

v1.29.4+k0s.0

What's Changed

• [Backport release-1.29] Bump etcd to v3.5.13 by @twz123 in #4250
• [Backport release-1.29] Fix CVE-2023-45288 by @twz123 in #4256
• [Backport release-1.29] Fix kind dsn leakage by @k0s-bot in #4276
• [Backport release-1.29] Fix kind credentials leakage in the logs (2) by @k0s-bot in #4286
• [Backport release-1.29] Ignore token-file argument when value not needed by @k0s-bot in #4292
• [Backport release-1.29] Bump containerd to v1.7.15 by @twz123 in #4307
• [Backport release-1.29] Bump Kubernetes to v1.29.4 by @twz123 in #4313
• [Backport release-1.29] Bump kube-router to v1.6.1 by @k0s-bot in #4314
• [Backport release-1.29] Remove binary before building it by @k0s-bot in #4309

Full Changelog: v1.29.3+k0s.0...v1.29.4+k0s.0

v1.28.9+k0s.0

What's Changed

• [Backport release-1.28] Fix CVE-2023-45288 by @twz123 in #4257
• [Backport release-1.28] Fix kind dsn leakage by @k0s-bot in #4275
• [Backport release-1.28] Fix kind credentials leakage in the logs (2) by @k0s-bot in #4285
• [Backport release-1.28] Ignore token-file argument when value not needed by @twz123 in #4293
• [release-1.28] Bump Kubernetes to v1.28.9 by @twz123 in #4302
• [Backport release-1.28] Bump kube-router to v1.6.1 by @k0s-bot in #4315

Full Changelog: v1.28.8+k0s.0...v1.28.9+k0s.0

v1.27.13+k0s.0

What's Changed

• [Backport release-1.27] Fix CVE-2023-45288 by @twz123 in #4258
• [Backport release-1.27] Fix kind dsn leakage by @k0s-bot in #4274
• [Backport release-1.27] Fix kind credentials leakage in the logs (2) by @k0s-bot in #4284
• [Backport release-1.27] Ignore token-file argument when value not needed by @twz123 in #4295
• [release-1.27] Bump Kubernetes to v1.27.13 by @twz123 in #4303

Full Changelog: v1.27.12+k0s.0...v1.27.13+k0s.0