v1.26.12+k0s.0

What's Changed

• [release-1.26] Bump containerd to v1.6.25 by @twz123 in #3751
• [Backport release-1.26] fetch node object from apiserver when (un)cordoning by @k0s-bot in #3803
• [Backport release-1.26] Add DefaultStorageExtension() and test by @twz123 in #3804
• [Backport release-1.26] Add ControlNode deletion to docs on how to remove a controller node by @k0s-bot in #3826
• [Backport release-1.26] Fix CVE-2023-48795 by @twz123 in #3837
• [release-1.26] Bump Kubernetes to v1.26.12 by @twz123 in #3872
• [Backport release-1.26] Bump Go to v1.20.12 by @twz123 in #3873
• [Backport release-1.26] Bump runc to v1.1.11 by @twz123 in #3881
• [Backport release-1.26]: Change AWS TF credentials by @k0s-bot in #3893

Full Changelog: v1.26.11+k0s.0...v1.26.12+k0s.0

v1.28.4+k0s.0

What's Changed

• [release-1.28] Bump github.com/docker/docker to v24.0.7+incompatible by @twz123 in #3694
• [Backport release-1.28] Bump Go to 1.20.11 by @k0s-bot in #3720
• [Backport release-1.28] Bump Kubernetes to v1.28.4 by @k0s-bot in #3724

Full Changelog: v1.28.3+k0s.0...v1.28.4+k0s.0

v1.27.8+k0s.0

What's Changed

• [release-1.27] Bump Kubernetes to v1.27.8 by @twz123 in #3717
• [Backport release-1.27] Bump Go to 1.20.11 by @twz123 in #3722

Full Changelog: v1.27.7+k0s.0...v1.27.8+k0s.0

v1.26.11+k0s.0

What's Changed

• [release-1.26] Bump Kubernetes to v1.26.11 by @twz123 in #3718
• [Backport release-1.26] Bump Go to 1.20.11 by @twz123 in #3725
• [Backport release-1.26] Test Autopilot updates for current and previous k0s minor versions by @k0s-bot in #3729

Full Changelog: v1.26.10+k0s.0...v1.26.11+k0s.0

v1.25.16+k0s.0

What's Changed

• [release-1.25] Bump Kubernetes to v1.25.16 by @twz123 in #3723
• [Backport release-1.25] Test Autopilot updates for current and previous k0s minor versions by @k0s-bot in #3728
• [Backport release-1.25] Bump Go to 1.20.11 by @k0s-bot in #3727

Full Changelog: v1.25.15+k0s.0...v1.25.16+k0s.0

v1.28.3+k0s.0

What's Changed

• [Backport release-1.28] Bump Go to v1.20.9 by @k0s-bot in #3561
• [Backport release-1.28] Reclaim GitHub Runner disk space by @k0s-bot in #3575
• [Backport release-1.28] Bump Go to v1.20.10 by @k0s-bot in #3590
• [Backport release-1.28] Remove remnants of latest k0s Docker image tags in docs by @k0s-bot in #3601
• [Backport release-1.28] Drop "multiarch manifest problem" mention from airgap doc by @k0s-bot in #3608
• [Backport release-1.28] documentation: fix bold text in documenatation and readme.md. by @k0s-bot in #3621
• [Backport release-1.28] Fixes for CVE-2023-44487 by @twz123 in #3576
• [Backport release-1.28] Add missing v prefix to k0s Docker tags in docs by @k0s-bot in #3619
• [Backport release-1.28] Add label selector also when watching by @k0s-bot in #3618
• [Backport release-1.28] Bump Kubernetes to v1.28.3 by @k0s-bot in #3626
• [Backport release-1.28] Bump containerd to 1.7.7 by @twz123 in #3645
• [Backport release-1.28] Fix "executable in PATH" sysprobe by @k0s-bot in #3643
• [Backport release-1.28] Fix helm race condition by @k0s-bot in #3649
• [Backport release-1.28] Make "k0s config validate" display errors by @k0s-bot in #3648
• [Backport release-1.28] Start konnectivity BEFORE api-server by @k0s-bot in #3653
• [Backport release-1.28] Bump etcd to v3.5.10 by @twz123 in #3663
• [Backport release-1.28] Only include envoy image in default config if images should be included by @k0s-bot in #3666
• [release-1.28] Bump Envoy to v1.24.12 by @twz123 in #3665
• [Backport release-1.28] Bump containerd to v1.7.8 by @twz123 in #3662
• [Backport release-1.28] Change wordings on CNI,CSI and CRI related pages to really mean k0s s… by @k0s-bot in #3667
• [Backport release-1.28] Bump runc to v1.1.10 by @twz123 in #3681

Full Changelog: v1.28.2+k0s.0...v1.28.3+k0s.0

v1.27.7+k0s.0

What's Changed

• [Backport release-1.27] Reclaim GitHub Runner disk space by @twz123 in #3580
• [Backport release-1.27] Remove remnants of latest k0s Docker image tags in docs by @k0s-bot in #3606
• [Backport release-1.27] Bump Go to v1.20.10 by @twz123 in #3571
• [Backport release-1.27] Drop "multiarch manifest problem" mention from airgap doc by @k0s-bot in #3610
• [Backport release-1.27] Add missing v prefix to k0s Docker tags in docs by @k0s-bot in #3623
• [Backport release-1.27] Fixes for CVE-2023-44487 by @twz123 in #3577
• [release-1.27] Bump Kubernetes to v1.27.7 by @twz123 in #3622
• [Backport release-1.27] Add label selector also when watching by @k0s-bot in #3624
• [Backport release-1.27] Fix helm race condition by @twz123 in #3650
• [Backport release-1.27] Bump containerd to 1.7.7 by @k0s-bot in #3647
• [Backport release-1.27] Bump containerd to v1.7.8 by @k0s-bot in #3670
• [Backport release-1.27] Bump Envoy to v1.24.12 by @k0s-bot in #3669
• [Backport release-1.27] Bump etcd to v3.5.10 by @twz123 in #3674
• [Backport release-1.27] Only include envoy image in default config if images should be included by @k0s-bot in #3668
• [Backport release-1.27] Bump runc to v1.1.10 by @twz123 in #3682

Full Changelog: v1.27.6+k0s.0...v1.27.7+k0s.0

v1.26.10+k0s.0

What's Changed

• [Backport release-1.26] Bump Go to v1.20.10 by @twz123 in #3614
• [Backport release-1.26] Drop "multiarch manifest problem" mention from airgap doc by @k0s-bot in #3613
• [Backport release-1.26] Reclaim GitHub Runner disk space by @k0s-bot in #3581
• [Backport release-1.26] Fixes for CVE-2023-44487 by @twz123 in #3635
• [release-1.26] Bump Kubernetes to v1.26.10 by @twz123 in #3638
• [Backport release-1.26] Remove remnants of latest k0s Docker image tags in docs by @k0s-bot in #3611
• [release-1.26] Bump Envoy to v1.24.12 by @twz123 in #3677
• [Backport release-1.26] Bump etcd to v3.5.10 by @twz123 in #3675
• [Backport release-1.26] Fix helm race condition by @juanluisvaladas in #3679
• [Backport release-1.26] Bump runc to v1.1.10 by @twz123 in #3683

Full Changelog: v1.26.9+k0s.0...v1.26.10+k0s.0

v1.25.15+k0s.0

What's Changed

• [Backport release-1.25] Drop "multiarch manifest problem" mention from airgap doc by @k0s-bot in #3627
• [Backport release-1.25] Bump Go to v1.20.10 by @k0s-bot in #3625
• [Backport release-1.25] Partial fixes for CVE-2023-44487 by @twz123 in #3637
• [Backport release-1.25] Reclaim GitHub Runner disk space by @k0s-bot in #3628
• [Backport release-1.25] Remove remnants of latest k0s Docker image tags in docs by @k0s-bot in #3655
• [release-1.25] Bump etcd binary to v3.5.10 by @twz123 in #3676
• [Backport release-1.25] Fix helm race condition by @k0s-bot in #3680
• [Backport release-1.25] Bump runc to v1.1.10 by @k0s-bot in #3684
• [release-1.25] Bump Kubernetes to v1.25.15 by @twz123 in #3690

Full Changelog: v1.25.14+k0s.0...v1.25.15+k0s.0

v1.28.2+k0s.0

What's Changed

This is the first release in 1.28 series. Below you'll find some highlights of the release, read more in our release blog post.

Kubernetes 1.28

k0s now builds with Kubernetes 1.28.2. All the Kubernetes are updated to 1.28.2.

Enhanced autopilot

k0s autopilot now allows the cluster to follow a specific update channel on an update server. The general idea is that each minor version will have it’s own dedicated update channel. That allows you to very easily keep up-to-date with frequent patch updates both upstream Kubernetes and k0s provides.

SBOM generation

We now generate full signed SBOM for each release going forward. You'll find the SPDX formatted SBOM in the release artefacts.

Extended OS testing matrix

We've extended our OS testing matrix to cover 22 OS and version combinations:

• Alpine: 3.17
• Centos: 7, 8 and 9
• Debian: 10, 11 and 12
• Fedora CoreOS: 38
• Fedora: 38
• Flatcar
• Oracle: 7.9, 8.7, 9.1
• RHEL: 7, 8 and 9
• Rocky: 8 and 9
• Ubuntu: 20.04, 22.04 and 23.04

Not only do we test different OS versions, but we also test different configurations of k0s. The matrix “dimensions” also cover different CNI providers and different kube-proxy modes (iptables vs. IPVS).

Component versions

• Kubernetes: 1.28.2
• ContainerD: 1.7.6
• RunC: 1.1.9
• Etcd: 3.5.9
• Kine: 0.10.3
• Konnectivity: 0.1.4
• Kube-router: 1.6.0
• Calico: 3.26.1
• CoreDNS: 1.11.1

All changes

• Bump github.com/otiai10/copy from 1.10.0 to 1.11.0 by @dependabot in #3021
• Add kubeproxy unittest file which was forgotten to merge with PR #2987 by @mikhail-sakhnov in #3023
• Bump pip from 23.1 to 23.1.1 in /docs by @dependabot in #3027
• Bump termcolor from 2.2.0 to 2.3.0 in /docs by @dependabot in #3028
• Bump mkdocs-material from 9.1.6 to 9.1.7 in /docs by @dependabot in #3026
• Add WaitForStatefulSet to inttest util by @juanluisvaladas in #3025
• Small improvements for k0s status client by @twz123 in #3030
• Bump mkdocs-material from 9.1.7 to 9.1.8 in /docs by @dependabot in #3033
• Bump controller-tools to v0.11.4 by @twz123 in #3034
• Let sysinfo look for more ipvs modules by @ncopa in #3031
• Bump pip from 23.1.1 to 23.1.2 in /docs by @dependabot in #3035
• Bump golangci-lint version from 1.51.1 to 1.52.2 by @juanluisvaladas in #3036
• Fix mkdoc-material to use custom colours from our CSS by @jnummelin in #3037
• Fix racy leader pool test by @twz123 in #3038
• Bump requests from 2.28.2 to 2.29.0 in /docs by @dependabot in #3043
• Unify clientset generation by @twz123 in #2851
• Use .DELETE_ON_ERROR in Makefile by @twz123 in #3046
• Bump github.com/urfave/cli from 1.22.12 to 1.22.13 by @dependabot in #3049
• Bump github.com/go-playground/validator/v10 from 10.12.0 to 10.13.0 by @dependabot in #3050
• Bump mkdocs-material from 9.1.8 to 9.1.9 in /docs by @dependabot in #3052
• Bump Go to v1.20.4 by @twz123 in #3058
• Bump mkdocs from 1.4.2 to 1.4.3 in /docs by @dependabot in #3062
• Bump regex from 2023.3.23 to 2023.5.4 in /docs by @dependabot in #3063
• Let addons inttest respect the suite's context by @twz123 in #3055
• Clear error in Helm chart status after successful reconciliation by @twz123 in #3053
• Bump regex from 2023.5.4 to 2023.5.5 in /docs by @dependabot in #3066
• Bump requests from 2.29.0 to 2.30.0 in /docs by @dependabot in #3074
• Bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @dependabot in #3075
• Remove unused constant WinDataDirDefault by @twz123 in #3078
• Bump golang.org/x/sync from 0.1.0 to 0.2.0 by @dependabot in #3076
• Bump github.com/opencontainers/image-spec to v1.1.0-rc3 by @twz123 in #3080
• Helm upgrade bug fix by @makhov in #3082
• Use verbose logging in conformance tests run to qualify for k8s-conformance repository requirements by @mikhail-sakhnov in #3090
• Bump golang.org/x/sys from 0.7.0 to 0.8.0 by @dependabot in #3085
• Bump certifi from 2022.12.7 to 2023.5.7 in /docs by @dependabot in #3086
• Bump golang.org/x/tools from 0.8.0 to 0.9.0 by @dependabot in #3093
• Bump mkdocs-material from 9.1.9 to 9.1.11 in /docs by @dependabot in #3095
• Remove unused inttest util function ConfigGetter.FakeAPIConfig() by @twz123 in #3079
• Bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in #3094
• Fix copyright script by @ncopa in #3087
• Bump containerd to v1.7.1 by @twz123 in #3099
• Bump golang.org/x/tools from 0.9.0 to 0.9.1 by @dependabot in #3102
• Bump runc to v1.1.7 by @twz123 in #3040
• Bump calico image version (vuln fixes) by @makhov in #3065
• Bump etcd to v3.5.9 by @twz123 in #3108
• Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible by @dependabot in #3110
• Bump mkdocs-material from 9.1.11 to 9.1.12 in /docs by @dependabot in #3116
• Bump pymdown-extensions from 9.11 to 10.0 in /docs by @dependabot in #3123
• Bump pymdown-extensions from 10.0 to 10.0.1 in /docs by @dependabot in #3124
• Bump github.com/estesp/manifest-tool/v2 from 2.0.6 to 2.0.8 by @dependabot in #2856
• Update otelhttp to v0.39.0 by @twz123 in #3068
• Don't be fail-fast on errors in addons inttest by @twz123 in #3054
• Bump controller-tools to v0.12.0 by @twz123 in #3056
• Make multicontroller inttest be fail-fast by @twz123 in #3100
• Bump Alpine to v3.18 by @twz123 in #3115
• Bump kine to v0.10.1 by @twz123 in #3041
• Bump mkdocs-material from 9.1.12 to 9.1.13 in /docs by @dependabot in #3128
• Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @dependabot in #3131
• Bump Kubernetes to v1.27.2 by @juanluisvaladas in #3136
• Bump Helm to v3.12.0 by @twz123 in #3057
• Use filepath.Join directly for Windows UNC paths by @twz123 in #3137
• Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in #3145
• Bump troubleshoot to v0.64.0 by @twz123 in #3042
• Add missing prerequisites to footlose Docker image by @twz123 in #3148
• Bump cri-dockerd to v0.3.2 by @twz123 in #3147
• Bump github.com/go-playground/validator/v10 from 10.13.0 to 10.14.0 by @dependabot in #3152
• Bump urllib3 from 1.26.15 to 1.26.16 in /docs by @dependabot in #3159
• Bump sonobuoy to v0.56.16 by @juanluisvaladas in #3157
• Bump requests from 2.30.0 to 2.31.0 in /docs by @dependabot in #3155
• Delete empty non used file by @mikhail-sakhnov in #3167
• Bump github.com/zcalusic/sysinfo from 0.9.5 to 1.0.0 by @dependabot in #3169
• Bump github.com/imdario/mergo from 0.3.15 to 0.3.16 by @dependabot in #3168
• Bump mkdocs-material from 9.1.13 to 9.1.15 in /docs by @dependabot in #3173
• Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @dependabot in #3172
• Bump github.com/k0sproject/k0sctl from 0.15.0 to 0.15.1 in /hack/tool by @dependabot in #3177
• Bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 by @dependabot in #3176
• Bump golang.org/x/tools from 0.9.1 to 0.9.3 by @dependabot in #3181
• Bump zeebe-io/backport-action from 1.2.0 to 1.3.0 by @dependabot in https://github.com/k0sproje...