v2.21.0

⚠️ Upgrade Notes

• One-time kustomization re-run: the kustomization trigger state now includes the new deploy toggles and the rendered kustomization.yaml hash, so the first terraform apply after upgrading re-runs the post-install kustomization once (an idempotent kubectl apply -k — no resources are destroyed or recreated). Verified on a live fresh-apply gate: all nodes Ready, upgrade tooling deployed under defaults, toggle flips correctly re-run the kustomization.
• Both new features preserve existing behavior at their defaults (kustomize_apply_options = ["--wait=true"], both toggles true).

🚀 New Features

• Configurable User Kustomization Apply Flags - Added kustomize_apply_options for passing validated kubectl apply flags such as server-side apply to user kustomizations. Defaults to ["--wait=true"] to preserve existing behavior (#2218).
• Optional Upgrade Tooling Deployment - Added enable_kured and enable_system_upgrade_controller toggles for clusters that manage reboot orchestration or system-upgrade-controller externally. Disabling these flags omits the resources from future kustomization applies but does not prune already-deployed kured/system-upgrade-controller objects from existing clusters; remove those manually if needed. The kustomization trigger state now includes these toggles and the rendered kustomization.yaml hash, so existing clusters will see one idempotent kubectl apply -k re-run on upgrade; future toggle flips correctly re-run the kustomization provisioners (#2223).

---

👥 Contributors

Thanks to all contributors who made this release possible:

• @knuurr — enable_kured / enable_system_upgrade_controller toggles (#2223) and the ephemeral-SSH firewall pattern (#2224)
• @orlovmyk (Mykyta Orlov) — configurable kustomization apply flags (#2218)
• Karim Naufal / mysticaltech
• Claude Opus 4.8
• github-actions[bot]

What's Changed

📚 Documentation

• [AUTO] Update Terraform Documentation by @github-actions[bot] in #2231

Other Changes

• feat: add configurable kubectl apply options for user kustomization by @orlovmyk in #2218
• feat: add enable_kured and enable_system_upgrade_controller deploy toggles by @knuurr in #2223

Full Changelog: v2.20.1...v2.21.0