CHANGELOG/CHANGELOG-1.30.md
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | fc6533c68b5bf3368106b019c4f0d9fa9064ee7a3d1167b5e8e4506cf2b6d5296e4ba8eccad3569a8b56208b7b52936edb20a8e60b058fd4d212687df3a3abab |
| kubernetes-src.tar.gz | 576cfc9ae808d5f9e3c2a09f305d75ae025d1de289995758cd70999d27d5131c11ae80d6e4c32cb6ce1899dabdb8040d84434d3a17df2eef5522d97f0f0f8220 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 6ad7da5929458e9ed7c1e396fc862a14df67d8b7cbae336e05149af42b2e466eeec30dd0251d96ce49fe55a2a0cc854d1d93b27be9aaeb3d1b42dd916b83ae06 |
| kubernetes-client-darwin-arm64.tar.gz | f99d19420ff75795b9f8b095af0c0f8f98b467468ca7e1d740fdafc198bfe55d6fd5685467efddaa819136aef85f28ba98e60ae772cf956c2eac24156a677ef2 |
| kubernetes-client-linux-386.tar.gz | 7f88931d14feb36c32852dfc3c4abe28e0b955ab60c5a4057c65f5c9a659606920ff9fed4a1c1239e8166db44d4c313ff8d9e6fbd2832260d5ea1cee13027310 |
| kubernetes-client-linux-amd64.tar.gz | 9687557230e93d354c633f096c88df46f3b63e1b8572b94776ad002e0b20d9100843e867dad167f16f7fb0a937fb46ddac797ed55577503eb88c7dcbd88e50bf |
| kubernetes-client-linux-arm.tar.gz | 8f34c2b26afc668e90d59e90bc33933b5ba36691fb59ad1059b1c709d8b2c2adccc317ec6f9a902afa09dbd6f3d633a870a72058b447231a160d3c643c346918 |
| kubernetes-client-linux-arm64.tar.gz | 5133d63d424cffdadb4a2bc9cd02ad2d763e285fc4d56304bff9fc9d706be66abd45961595ef33efe45b903e63d33431961c47986646d6365acc9891ced95cf5 |
| kubernetes-client-linux-ppc64le.tar.gz | 2318df2f6ed6a52c4c966e923db9e5d2696241872351a6148d294b62f09132f7df23cb37c38fdc72be50c89d8e15b80e28577b688a75acb582748f7bc35c57c0 |
| kubernetes-client-linux-s390x.tar.gz | 9ab3ea6eff061c88c9b768d494544ea9883be17d19dedbf7651e5b4860233ccf30d60d89dbd7cf48d94a6f467479947e89a34f24b1ae4429b4dca55e6af00b72 |
| kubernetes-client-windows-386.tar.gz | aa0e0b3f0a5258edc5ecbef3cfae47bda52687b3821773ec86479c54f3311af576ccbb4444ee5768b1e97eebde042f758771050210d2c8b43e399ca8890672ed |
| kubernetes-client-windows-amd64.tar.gz | a874bf874314fd9725e6025998d194e24a0979528151fdd4f62a464aec984cef8f879551bd6eceab99201bd55a19b6e5ba486638b7cdd1c133345b8bcf6976e9 |
| kubernetes-client-windows-arm64.tar.gz | ee961ac35a93c5a6546b4e96cd55aa070951cd1be31ec4ea2e793b95eb840ae194b5724faa1c1b31b9c82a920b235d3169e769148eb11f92d0c3825fc29e9db7 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 0e1f3f1fa36e2da299fe52ba78fb5ba7198a918a969516a8bd40636580264897d148cedddf2d6d7788bc7dac40979df53f9bfcfb1091de02d103a9ef13c71db0 |
| kubernetes-server-linux-arm64.tar.gz | 20b7e9d4ebc9b6e019456d41519c87c53aa01acfd9d2089b6254ff0927fa73a3737daf0af75b3231fdaf608c6dd404d38dfd9976b3ab73ab2e4bf5dc30f10a92 |
| kubernetes-server-linux-ppc64le.tar.gz | 8b35ce14eba1fa4a29a507e195e8ad378e49ecffb13f1a943aac1c192f90adcabf2b9cef1eaca3b5e2174dd822157c3f862cb688f38129621af9c036e364949a |
| kubernetes-server-linux-s390x.tar.gz | f4a8827e63529acf239621d15288f6b70ac3d6aca1eb9c16ff5570fb3711ab890b97ea4e8c4fb5071e0f8d1728e5d942b77de128d2eb03ee56d09313be01ec4f |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 8ab4d9d6f2eead3858d371481ced91caff0e26610e0a5214bd3a08accce9e151accd0815ad93ea17225ab1af55329e236681aaf9c3fe80bd66a0a57cf2ac8749 |
| kubernetes-node-linux-arm64.tar.gz | 0766660a7664d6393aa1cb7e9439fe605ca51b310098eb404f00f299f6a3e4346677f737f8412f294420792e7b1cdb0da8bc6f4c023d811aac13b2cbedf57705 |
| kubernetes-node-linux-ppc64le.tar.gz | 13078802204e3e5c0abf0ec8c61ca4590d1ffc531a8656ec7b0cfcc0c9133242d0c7845c027e277ee0c869730cbbd6f5df2ea65a7cb036f56e83ce314feeaafb |
| kubernetes-node-linux-s390x.tar.gz | a3a1a01cd0df0b06d5fec4192118ee7c8d8cd58dd953f8f538facb07ed5eb097feb5498b17b8e56e1eacda55b96c42880218f836188443c13936bc9d52942a99 |
| kubernetes-node-windows-amd64.tar.gz | 3598ef7cf749cd6b2a291473a8afc32acbd33bd6152460faff3ef86a98084e6b97fd4cfd83f1d4485360082c8db45d6cf9697bf1d17f83f3b29f8c76b2058561 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | a212420750013bfabb2c28419d9a9e11609e6afd0bf1d28e2e1f853b00f19d7e249060342f9034b5b612c09ab3364ac710c28b50e6f365b67c145d3ff2eaad4f |
| kubernetes-src.tar.gz | c8da67f99b147ebc3c11d9feaa55e8551623b2727434ddfa64528e302838b703eb5bb408320468bd6c86a86f28a2c606afdada0d432aae817a389bb855e2bb21 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 72b8de171ed206f080d01960b276ee5cc3fb4183f6d73fe2fc55e9ac68c164e5ec70ff2c85f59f9da79d9770d322a457940e659445432504c2d356ddd4ab8f22 |
| kubernetes-client-darwin-arm64.tar.gz | f856eda8ba4d32107f5842dd103205c7ce329e4ab59a48f30a5fd68bfbae89afaa7006a5a0e80ae198761d16d7aace74df9e205e7583af7cf2137d270407693f |
| kubernetes-client-linux-386.tar.gz | d0d18956eece62e818e2e9a876cf8152554d1e511464f4e7be5ce18e57014a76860470077720e23035b7d87936b7599b189f3878fb6bb54d491583cbe391926b |
| kubernetes-client-linux-amd64.tar.gz | e356bfe8ded98c04821fd2c6fdd9ab154327b824c98ab686167fa007faeeee19b07ca08a4203e0734693e8409821ea2fa74b023be3002da737aec1eca4c2a10c |
| kubernetes-client-linux-arm.tar.gz | 1cd017cc40e311abe130d11bbc25c99e1c67b1e8924269b8b16371c71202dcd334e10a2e2ef9a09569a08b3ed260ce5a3eddc1fd22df63c0662117302202931a |
| kubernetes-client-linux-arm64.tar.gz | 34b2bead94240aa040c6af318e55acca348a823123dcdfde4fb3a735a01139591a8ea805ac99844b3f11d3c676128541ece81052d952f59166f26cc2cc268744 |
| kubernetes-client-linux-ppc64le.tar.gz | 9ee875e73a0e021cf770ad02f4479f042906d15282b9337097e50bece463718b8b6aab8ccef39f1c58c08ef3e7f8a4cdfc502252da1c2fa77fc55e0f47b763bc |
| kubernetes-client-linux-s390x.tar.gz | c9593a09b2ab0badf38a45e57fbf02813238200c200c7fa565283ab377e93ee2be711e3f7f7fc37d61483f6ce5c0ecc9dee5fc561c1bd64616df252e1113d178 |
| kubernetes-client-windows-386.tar.gz | 86514f1cc70c1ac6b0ca47c6d16569e1ece798f29d2cb746f9e0c0a73a5d90bf72ade81394aa09e512d0d53f91e5231ba0f5aafa3517fb467b48bae074e0a787 |
| kubernetes-client-windows-amd64.tar.gz | 7d22cdbaec1e8adba03cdf7fd83836abfe9ccd26394447ff301e60b3789cdf326a0636089b1e636f0a87d3520cf0eb3d2adb56756e8aef6860ad14b3635b1980 |
| kubernetes-client-windows-arm64.tar.gz | db6332f6b877bc7cdb46c051e6252385dc84bac5f98dd86d44b1047f67b12c39a293cbd553ba69711c734b7385be2650e11fb9da15d1b178e348b48d94d62b93 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | b4e7d52a49328bc634f00f0787c14cc7e93c6ae0238b938798268c1eab1cb371fc6993981be0274ed0fbfb48161de4625b3c187c032db02ece584e1728b7d3dd |
| kubernetes-server-linux-arm64.tar.gz | a060344fe712590792c9054c5e91e723140ed7b37dd3268648e75cd101845105c49c8386e32162787c2b7a4566428d56536e309eec46119cc8d6c7c88cad90ee |
| kubernetes-server-linux-ppc64le.tar.gz | 42181b06292fb03314ff3d163074ff690f94366831cf102e2b858964a4db5a37d38e5b0f41fc10cff5c9067611ff116aa148c01baf1c2416a3c682b790e3c627 |
| kubernetes-server-linux-s390x.tar.gz | d239807d1af1c61393243b1ee5a5aa08fe29cfcedc4621b6aef4e296aa4e0e03bc843bd0b60805e3dcb0e7cd75789615df7f59ac2d6ac0aaa22551ebe50e5a6d |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | f310d13379072323f39cfa4cc3aca5af835eab13ededba6d0a359065451a7794fec294907dee3b15f32aab7040e29a5243f717d2d93268f73db85148276a266d |
| kubernetes-node-linux-arm64.tar.gz | 2bc59a907c6d1b9272fab87e4537129a151fa0303c58e699cfa891cd2caffb0343acec5e492297c8447a6f5e331899c48c22acb99356de22b584a9af1f4e2192 |
| kubernetes-node-linux-ppc64le.tar.gz | e198f286ab9487511660175b6d5d3036a08dd355f2302e290dd3244801707f8ee22b5c4b6a883414a9f2bf2c02e475303a9bd921e9d48adedbe63232eba0c26b |
| kubernetes-node-linux-s390x.tar.gz | 484d2605b6287f2a392c348d63e983ae7b0eef133d76c8541f6c24f4808d1db702d6e72c5648484df791f28694cecf3929b9097912478c4ac49a5be09cea462c |
| kubernetes-node-windows-amd64.tar.gz | 14b3822a8f59760d1eff17595adbe24e6e6ef888e5144cbffa294bcd34050ef75a07bcb8d7cc877eab0cca583dd1515550ff753f98cad21fbb185888cf950604 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 5ff12c83f8e951d100b5ad2a00b22fac9fc9321a925fcb8f0ccbb9800649f12e89fba82841b041ad657e9fe5998e3b490a58baf163c6558cf47f50ce6b888ddc |
| kubernetes-src.tar.gz | f3bdeeee591c868f99a19e3647823f7c6f2ed7deb9cdae9628dc37955c27584368b6e1872cdcebdb243ff8cf3f25a0bccd8ab29807e21794f8d3fbca3db784b2 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 4dd1b4a0cec269dd0c372670d2188e405ed4e96034396f1df5290103ee954818bd9722a89865a8ddd589dce3ac019745b32656d3bc62256d43575b3aac92698f |
| kubernetes-client-darwin-arm64.tar.gz | e6c5a0efc4fcf421db55b4776ba298c26ae1b91b15439e1262901319306d91f7f184a8cd68691db443a5a2cf85fa29d9c18a04f60a404818e0ab265d28a57136 |
| kubernetes-client-linux-386.tar.gz | 14a87321d197811cc18f9ff23372ae5cd2664214e1c266689fe46017c7cff46075299dca2ce02b661db7367868220bda2675f67c337a8d92864565b45dbc2ea0 |
| kubernetes-client-linux-amd64.tar.gz | 3f08c6adc716191eba580f327e89a553fd8128628e015aa8979fe8f7df33a03dedaffe76fd981cb602a3316262587416b04abc76f12d7878e385ce257348a6b5 |
| kubernetes-client-linux-arm.tar.gz | 16a542753c3fbab5268e8b685bf3e6c7f918b67184847cd1ab947b8b31c942e00c2642d7a8292caa6802ebd9def3664c4ca170d8a4e17dcc594c02f52bff4634 |
| kubernetes-client-linux-arm64.tar.gz | a01d881f14ed5d2cbf67e9e8c56df364cbdcf7ea7e31a797778cbddb0551330403eea6dce2f3655c931fcdcd681e46676f51837859df730a0f88f1649f0005f6 |
| kubernetes-client-linux-ppc64le.tar.gz | f4eebb19693da10b721be0013b8b084e01d9c2fb45b8be73e0f435e0c37e59c3099c2f835aaafde55a95198b0cf72456bb3194051dfa0b79b4c699f10120e18c |
| kubernetes-client-linux-s390x.tar.gz | 80e7b05e531bfcbd08e8391512bfb383f56ee30cacbc25bd14eb7a4227af8ab9b2a08f0a7eaa639cd702fa68b2e30d52d9c3379b67f48fa8281dc5f12e6494e4 |
| kubernetes-client-windows-386.tar.gz | b6a3a9ffd03cb8585a18ecf0ad26c9a4e1652e03011f8d4dbb13f865a49f74e5ef8315c6e1f06ad1b2d1df03de639079ea09ca01e036eea8a23a1b41f1548625 |
| kubernetes-client-windows-amd64.tar.gz | 76ccfc83e25878496678afc127d554dcb74cb52f043ac96bd2003986da049ae48d5e2d99cfc1bef7b485b3a5eed0a4f2bab8f1057dba14dff1d7d04c8004293c |
| kubernetes-client-windows-arm64.tar.gz | e1db482e3b16a90eed5c197b12ad7a6c25166b8303c81484dc3a66860f57430903aa6fe48f019793f11d29ef9963b35b471480f2511d7071c4c7ba677cd4e0e4 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 0ed1d5151cdf3dd0862d867909b10891b0f287d4e59015ef650a580137af85dd33fdd74f324bcac2aad01e6b25979c7d05f7819a6c5ac5010bb5d0406e314b3d |
| kubernetes-server-linux-arm64.tar.gz | 3bfded1ca095e35d18fd3413814564803a913a006191d6955849c066bcdb9698406bac2e11723c41d5b284240265521d5236de4a95f58e3389a481ae2b73be70 |
| kubernetes-server-linux-ppc64le.tar.gz | 097f842595c332e46cc9a72af1eb96b9a5b1de21744e9d5e4466463e3360d2f797b6017fdbade43a3cfc8cd999d8befb5fe042186292f544af72774190341c0d |
| kubernetes-server-linux-s390x.tar.gz | 678a39c0041c6818aeeca1e816ae6a4ddba0e6244f563593e3f0f9325662bdea8a6456dd51e9e5917b782b8b3909346274d4753f06490a35e2a85011b76c8455 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | f4da655de2a03d5d7f43e176e4314ddcf1f133f2831590ed9514020f9a5520137baf058f7a3a0e4596bbbcc22361d77566cbdc166a502f69548550daacb0dd96 |
| kubernetes-node-linux-arm64.tar.gz | 9a5173fd18ecfcedb1b9a0a5853ae73e58da36c13593412566f552b11373eae7a361515a4664de75f395e5c434e11d8763a4ffdcc7070578f9a5cb530e9c1620 |
| kubernetes-node-linux-ppc64le.tar.gz | d69fc367675fe2a7fffb232007ee6ff083434618af9169b1141fdb15c13fbf9798da3250bedf980b7e7266d5ff5624b9dab7ffaa71732b2e3275dd6290a868e7 |
| kubernetes-node-linux-s390x.tar.gz | 166a8e4adb0b388fad77b238c8b06efc2b06fd4ab678a704606582905cad119bd5014218fddaa6cc30a176d3386afe82260e4e4c6fd350140f51a0b1ee767f35 |
| kubernetes-node-windows-amd64.tar.gz | 89eb58f58a6ff18153c5d33180216ec651f34b3bbc5b7737ab5ea4f885574ce223b5b6ba62008726d975c64e876b0abccd58d25db36d11b17dab41dd4d0f18a4 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 5732c92a93ac308e794f589652ae0ee1b72717d748fcdabe7c992fd042358e5ce8c425ba2124cb9656d011c7513a65bcc4d7f0e98d0c9dcacc3b8a68258fe463 |
| kubernetes-src.tar.gz | d633bd93d847c68e86c771cbd9cc6bea8d0aa621a874a1dc07318400be28d00be8bd8229c0d380ec7971c818b00c3ac5d70f752ac3cb3e0474d4a9eee6aa3306 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | e923aa48d4394929af127e81b6b72ae1c406eb0a0d4cc6848db52b9bb207580242be2ad8e1742ca78e7d23aad2e73939974090df4575458f22f17bda5300a1f3 |
| kubernetes-client-darwin-arm64.tar.gz | 00cfd7e8c0909786ad2754e49c3f91d9793f990060ca1ce262a7b8e6627ce4b7e29a95e87c6e93c8048435a250183a103ff6d08d62f1a77acf6911b7580ada1f |
| kubernetes-client-linux-386.tar.gz | 2f63ea883850fd4a2f77990c7a01bdb2dc8d17348b0f6a889ee21f89aa8d04762f489827a9c77e589d6dabffda9f4a0e2bf0c588f43eab7817db6d70cfd11eca |
| kubernetes-client-linux-amd64.tar.gz | 6e7bcb38a23a0ac43b3050a5748ca8808e732266c983ae51bea82a0822d72bc0bb1850fd060ab8ef7212225b0221b72d7877131b64c975e09933348d9155b7d9 |
| kubernetes-client-linux-arm.tar.gz | 0558ad5de75a6207a98161bd58fa76b6450bdc3a2daf4a7b5de040fad469d19bb93909c2e7c30fc942e322d79b23cc677c026edb666929844227cc154a157520 |
| kubernetes-client-linux-arm64.tar.gz | a8b60013dcb3353b297f91a19404714554b9de86780a0fe0ff9ce86ae54062ec17f2184733c6139bd10c346526fc056387de51d2f3242dfe145b6f275b1cc315 |
| kubernetes-client-linux-ppc64le.tar.gz | b5995dc6aeb9f94293e7b796321b4996393df7ed9654283b606d2a0789a5d240d5c23bc703baf454682624e472ef1a72d0742496feef6dba8371a8432c331333 |
| kubernetes-client-linux-s390x.tar.gz | eb9fb2c40f0a3aa4f96c894ff885eb429b4043c7e7aef80d5b6207feac0b8c16afb45393e29677559041e49aa4e38d0f98de144cf9f191a5dd5c60c7950920d0 |
| kubernetes-client-windows-386.tar.gz | 7c36043bfae2a9f12e9be830c1e5c8156ced77d4fba1f7cb9e9d4b1d72e261ddb87b762b16e94e1497ee5003f5803c06ea2b6797bf8ce2230b77cb52f215b580 |
| kubernetes-client-windows-amd64.tar.gz | 9c50354f023ac5e27aa7b37cd2c3a4ef23faa70fe9d5569d79f97b75fddb4efe4406d40f12bca10a08ff3a76eac80b763d2f641ca97d5d622c5a42ea0ea7e14e |
| kubernetes-client-windows-arm64.tar.gz | f5846cf9e141373b0ed49685953b9e3c66cf3c744b2a9e24749fc138f18ef9c10f9c2656b0a51ef20a49000c05720da02c50752c41924438bf6d65c34a2a6c7c |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | c4683bed947646f17bc85ea729bcbda4d972b6c4ba21d3a851afa1fcdc2b703bfdac046cc81d455bec5cde2d097de686abbd7842b0e8359fb95cea1d5298e1ba |
| kubernetes-server-linux-arm64.tar.gz | 7770b77dfaee30f6f3b9dd13b8e1a46144b239c48a93cce5617f10a3bdc05ce556db997bf8d72083eebd0d49c37d45f407897068c5032ecc32f9e4a360a28e73 |
| kubernetes-server-linux-ppc64le.tar.gz | 9b372041f0d7cf3212d573f955fd18701c56c31867d50403983a427a7cda98b9b039cbbec5682f36d62b9d62ee94fdf930df4180accfb38d68e69d78d5a47859 |
| kubernetes-server-linux-s390x.tar.gz | 1195beae2c278d5e5007cb570b2ed4147295cf4d6972912936a987f6acb9aa2c8b85c3bb4aca4851139ae8154fb3644e21db59d7de708e9e5843b050b1ac83ac |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | a5698e7b0f02977dcb3461dc0a40bc0657a3d278f32eb21d027f685f056e5cd71a59a93333f1d7c13efd5c1e5edf01eada8f5311cea94c2631d9929b6f65771a |
| kubernetes-node-linux-arm64.tar.gz | f1926f324f8ecce24309192d27a71905af0f4729c306a91d2eb5e21573a9c520f1794694daf1802dac22739b1b7968a44be6dd14fa18bf4516bb7afcbed26f1c |
| kubernetes-node-linux-ppc64le.tar.gz | a8a18f2a1a10ffd92d417fc904f0527edca52d4506ba1be55ceb80ebf35e13f350a5dd93ba08c023e9803f3984db1db9a9f32d9fe0ab66bc1429999214f98b92 |
| kubernetes-node-linux-s390x.tar.gz | 57105e2d4b82dc409a9b96c7cae35a0239b82fa277910036d5b25e968a862c272e2f4a0f888f82b2cc142e72727d96a6f05717e6098b973ac3d573fb929623b0 |
| kubernetes-node-windows-amd64.tar.gz | 3f5d14540a7a80c87d3be641065d3d4442be895f905bec5cee4e5ff0e55e471452e75f34ba17d3fc715fb9b9e4658abb6ea8ae976b055c8238ed6711438c869e |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
OrderedNamespaceDeletion. When enabled, the pods resources are deleted before all other resources while namespace deletion to ensure workload security. (#130510, @cici37) [SIG API Machinery, Apps, Auth and Testing]Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 61092f4103592c205655e54f3acac2c10b85e8d75b4fc5b139d73995ffaedbd079f04d8746ecd335b1714f663e533b7c7535866e940e75f7919e3cd1c76740e8 |
| kubernetes-src.tar.gz | 6345483f0d81394d4cfa28760f07477a0f1414d2a4e6f44470d129bfcb9beb2c5e2ced5ac11ef00cb893bf2daef030505039d586baa4e9f69b63c2427514d6b8 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 0cfd4f7d599a0fc92b9a02308d56e743ec91873b2b77137174463b47f00df3b2d7977959b3592d06936293f716c6eee89dad665cade56ff7f8d604756d67848e |
| kubernetes-client-darwin-arm64.tar.gz | a1389a9323eb0d96a38c6fe9c801c3e88d81d4703bb21344dce04a7c318721d7fe51d117c9b19201a1c608e53bc0c9a4b85e0ebb10a1e4b585b2b9198975728c |
| kubernetes-client-linux-386.tar.gz | b7975691524583d531e9c01b17fceb4c6c6ce23ee1498eb833db8edd5bf69419a942f1a9faa89f69280a9406c229a65492cfbe868878f0515a2f684ebd6a6019 |
| kubernetes-client-linux-amd64.tar.gz | 1d575cf29fc6514565ef76329f2b7008a3d7c7e7dfa853a70e9bd65784b653a3338260325c2a7bc8e80427cb3829bf6407aba6a39fb4bf73c30da775d3aad2c8 |
| kubernetes-client-linux-arm.tar.gz | 90cc2797c1528779e89655343ed1eec2541c425e27279022049419f45401f30c6a7b91de7a45ca80cb99ceceeb5b0fc441e5c412819978f897c6098f08878fe0 |
| kubernetes-client-linux-arm64.tar.gz | 3111d0842d92a1b26d6115d9346b780d3552732d46ee233f7ffb34122b50addb0717032cf85a6ff80317d0ad88e3b4fd7f16628cad2d7a53eadf971fa8da0244 |
| kubernetes-client-linux-ppc64le.tar.gz | 02bc99c03a183174c23f8e567d44b2182277056f4ff3d744d0fbd9f3526630d87a177d93b58fddb1dd78a993b7f3a71c76cca3b6fcf899581a860378a8e81ef5 |
| kubernetes-client-linux-s390x.tar.gz | 22dabd9ad4a659b16f1eedb603e7b93289f6201a432cb2fdb9d750589527441e29915e635af3dee4fdfae266a9de670148e9bcad4134c9159c378d8993dd57f5 |
| kubernetes-client-windows-386.tar.gz | baf3714a464930f713404dcdfb2b5eea8b97f1561e2eaf7dcd41beb3eead42b852c8c3dd52c306b77d61402c54bf745bff592698a6ea5cfa74bfff3dd0b8b879 |
| kubernetes-client-windows-amd64.tar.gz | b0f69805d6186e65e6b1ac521a4e5066dd8fa8f91b5ddf3ce85ac4a0470a511d2d7c69aeb62b190b7d43522b4e665a1e5383d154d0f2267b8fcea4c610f4c50c |
| kubernetes-client-windows-arm64.tar.gz | a88a69782b0e0bc9ae28611c6dfb385485396d77dad79606bf7550fb52eb41d1be9946e9d58fd820aba95db348f79c4f165b4e6c4da884d139dfd5bee423b64c |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 9610ac7c0ff2c4c9bf9d54aaa08738e5c0fdc1155867966a77dd2ae26a12d8764005beccc162f636d20f5934d809abd95e4ad634bad9ee6aadda8bef6d937f1b |
| kubernetes-server-linux-arm64.tar.gz | fa24a3dfd12ceaba3b955f895e51751733241b5e05f54ee5e37037d9b20dafdeaddb62a8ee9ee2f7e5ad6656074f56ef17e92efb7bae130897b3ee25e3b435c5 |
| kubernetes-server-linux-ppc64le.tar.gz | b9664e21e3789af9f3456f4158a2494d1620b87db74d611789bd513f5260061adf99e20d6bd9bbdee85ed24ae378be4e486caf23334c93bd7fd275833a314438 |
| kubernetes-server-linux-s390x.tar.gz | 6dd1dd75c7bc056a2d7ea7d8a990d2fe867b26662bf88ac6f3cf7c9e89fc8a2aaeb4984a6e00f7cda5296044b7c7e99ac1bb94d10de5da64d2a2d311ce8a16b7 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | fa7915afbec6479f444593e6fa37af9ccb9deee0bdd35a3b81a03accd126f573a034af9dde1c7c895b8050b8e4927f3c5c3c5408d2d2472a47752266052fcfeb |
| kubernetes-node-linux-arm64.tar.gz | 9b8c80a41e9f548fbc428a98793c3f2a5e95b252dc6d7cd2db44c6530fbdc2c6ce78b88627eb69016756a57f66936146c63dfc293b9bc8fa36cd7cf772d12ef4 |
| kubernetes-node-linux-ppc64le.tar.gz | 1dfd7a986ab6608244c170a216b1a1e686f0f67e313c1ad503340ae2765c92fee37a77a5a6fe2747ffdf447df7edd2079a4af81c968a1182f10e0108a793c5f6 |
| kubernetes-node-linux-s390x.tar.gz | 5d953c0904a0835c86133a9810dc5820f99df9304e2d5cb68fb85aed24617fe0f8a03791d103f5ae91e5c21054a60693b0816fdc1d50dd2a57b79a663a51ceba |
| kubernetes-node-windows-amd64.tar.gz | 223b53241f663c583dd12151162914b611efcd5aca680403435c0640acf932ad302fbdc84403950dfcb7a76336c1f60883d7df7ceafda4413e48c3a3b7f9a328 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
This release contains changes that address the following vulnerabilities:
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
Affected Versions:
Fixed Versions:
This vulnerability was reported and fixed by Tim Allclair @tallclair from Google.
CVSS Rating: Medium (6.2) CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | ee856a4e03610666fef2e8b88a15f205186f9954114807f751929de8f208f351ae70ca16696a5268a4112be711df80f26580f419b87fb39db91e090543dd7e7f |
| kubernetes-src.tar.gz | 272f476891d94b226c536e4decc367028584c9cf1b465acfbd5df5f95945a0bd968ef8ab3d83720868ad1dfed35317512ffeace5b2897999b71936722c05dc97 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | df1981295a97260f9c9127922ddd2782c3f3c4f4a1cf357acf98da8cd2623a305759f016e316251f23da7089b91625cc8b475c11fa9be9d348e72baa29a62bf2 |
| kubernetes-client-darwin-arm64.tar.gz | 63e49b7c828ee2eddf820ea5367e508ca0311339b00fc33f5c214b9b9e680af893f29bf626cacdaf4deabcb6e7557558af96c78f153e2fc0f68d878ced330ef3 |
| kubernetes-client-linux-386.tar.gz | 59bda28c00437e989623f9be332f5a494df13db8023a986ef64a68b3878bc9ca09cfe7a1799cba058a92310deaebd621203495dc64ec213961732182502a065b |
| kubernetes-client-linux-amd64.tar.gz | 1f554284c530d56893afbcca214ec0539a725e572a43c9370a4011d7483291a7f7b2ee1aa7d4db3e0d48ea2b2498540a828c62106f42bf9d0dd1bd3dc3898b8d |
| kubernetes-client-linux-arm.tar.gz | c82ceec2b35b0ab0ec45933d1bf606e163d2a5ab5f5cb0ebe429a40880002c79d6b563a4d7ab949e91729f369d8fef21da464a2659a454b01573a2d92a1d8a86 |
| kubernetes-client-linux-arm64.tar.gz | b5443648c101b59b50abcbf3a9a06d0b798fc02319f0566aaea1bc73924a8e824e5cafbfb59b8709d79ba71f30f6e246512bffad0fe39b7233f008f99dd35bc0 |
| kubernetes-client-linux-ppc64le.tar.gz | 9165682d04e537d02fb00bd916003ad4e4d8b919b7bdf6634c2e346666e502234183b1425bc63f1733ae36df2e384b5ab98addd3b94fc694d79a6c3b4b01b697 |
| kubernetes-client-linux-s390x.tar.gz | 74996716c2e87f2c422fd29c983e5620ffcec82d0b0520c3c90174e26731ea960c0093fa1288cc693b74b19e5606478dc8a3f42bfa5de2abc876f529ba8a9fb7 |
| kubernetes-client-windows-386.tar.gz | 5731c53f53dec995973bc89956a6ffa1c051d4f9f87bd06006952d752e4f304b95fb973c74e167fdaf720057b7d335ddaf3e32d569ece69ec0c7dab8fc2d884c |
| kubernetes-client-windows-amd64.tar.gz | 1228687afa8390f13c5a1bf22edfdf317a2019f3a460415794a236f069c2af7f7c999c0f8780f6270d9ea777a05284fe17cb862b6c43ca0e810294277e650ffa |
| kubernetes-client-windows-arm64.tar.gz | d6935d8e06890e2494d9cbf5647792ee8ee6126b378529b0c5c3e5c83c9d15ff3115948c688a4b0a01466499f4c70f608fa972e7a473173b90f55a049c583f3b |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | a80aa58418d6f25e4fa82f54762033a6634b310446226dda4852924cf19766268e97ead6f1a93ad72d89d3a519073658b12be0709b3277d4f0e470e26f5e606d |
| kubernetes-server-linux-arm64.tar.gz | 2a2c74ce44349bb017684d4259cd317b4b0bc49f5f3f66c7b16d4fc7b6a96549e3448517b2e980e4610bf35d742bd633e73264e52d16076c4162ae2bd4124a6f |
| kubernetes-server-linux-ppc64le.tar.gz | 24cf04baef9404ab520104118e0025280bc25643e35a1540644dd2406eb20c584807ccc9d7588311648d389479acb728ba4bd278de22af334c398cec41a6858a |
| kubernetes-server-linux-s390x.tar.gz | 016201b29ada6a7456d47ad95b48d404ca74d2577d3a561f8d23a7cbed2afcc9e26465afe6bb6ca46ee848c8fc476bfe3f7f15f08ebb133472c8f399aec4b6c4 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | a38f00c2fbfa6b1da700557583d13d0f5333d11dd7ef6f39b5a0d1ead38fad5a0f56f96586fafd71927ce1d2005fe833f67164aed8e1aa4127593758601e07ef |
| kubernetes-node-linux-arm64.tar.gz | 8030ecfd7045c69ae7d638fe63ff4f907c9477b00dfbec3027fe8c42da2ffa4ef28f2668a83c430acc1804f4f6df7cc5987e3ec9b41b40f09c4c1f712a7ee0b2 |
| kubernetes-node-linux-ppc64le.tar.gz | 13dc241f519f2726635322005f91acb400e0212465c0b79d31138c6ccbf309e58312943b6a43fabc811efbfc1b986dcb1a9eecd4d9862f0ca9517a8e55004944 |
| kubernetes-node-linux-s390x.tar.gz | 9e434e2e26c4e17054c380aae91770c2f4fafdb82c39bd1025fed56579d3b0ad56a739750ae80ea19277af8d2c5313b8f99645ce9eedd27bf8a26450317c8fb5 |
| kubernetes-node-windows-amd64.tar.gz | ec2ee27f025b5fb961fc791bce82403d26ee5846667117a4d1f42c80f0b3c078f0d97c707a2729e8dc9905101e41f6481e068c962b7b7d3bc9df14daa464cdda |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
This release contains changes that address the following vulnerabilities:
A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host.
Affected Versions:
Fixed Versions:
This vulnerability was reported by Peled, Tomer and mitigated by Aravindh Puthiyaprambil.
CVSS Rating: Medium (5.9) CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 191c20191cd3dc9e0f77aec4261036f6c231b905905025b5c52f36bdcf8117726fe8d3c87d6bb7396793efd14b8028c7640b0f0b94cd01e2c7328fb7c9f08dd9 |
| kubernetes-src.tar.gz | 85c4929de50d8048c5b0cb39e5261c0174771002adffcaaf9d7ef088b2201172cbebde49fe53aac5de2da60cd0e8a9aa16fd45d53453ce9c83613aa8a9e87cbf |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 83c6e036654408340ac78e0a68c71d2dfe779ea13c5d5b129d1a050dd59579f17e7f8f2d08cf33abf83330093bbdf1f7c03504f176364f6a1343692f7e3726bf |
| kubernetes-client-darwin-arm64.tar.gz | 2087a1444f3baa03e2003f98ff47ab8190654b2c019826479f45a2c38fe0e0a83d348ca797f275caab17ac7893914ca576b12e68be06aa60f68b67766dd57064 |
| kubernetes-client-linux-386.tar.gz | a695fd6c97029f71cf1bccfce652a22e2783b78586397453f6cc2940f266cd00e86b706e9fb191f3eda4ee1a1c63ac90debe8a580241be3dbd0447d71a6c8987 |
| kubernetes-client-linux-amd64.tar.gz | 01cdd83f082ad61158259b4f9a30d141ebb05a86ec729f5974d8d1fc4e09942ff2978bc2a133adc28144ef43cb2bdec8c92da63922a2ae2a1bf51640cfb10d58 |
| kubernetes-client-linux-arm.tar.gz | 73541e85f725d7bf90104c8eb456bee8fddf8b20971d7551c647825c1272a6a209459d8ff841152587d2f1493540e106a542696ebb17c152aff107343de4cd03 |
| kubernetes-client-linux-arm64.tar.gz | f29b9d65e9c5e2dc77b2b7bc50056c4689e8257c47c6d658c377b45041123491fd9af9b737ed1f5f982f098cb50591ef0cb0ce499ad441fddd8ac4ef34a68bb4 |
| kubernetes-client-linux-ppc64le.tar.gz | d08c7b983aea22059c176811dfc86edfdea594f5b2871094154625d5ef54006a97276882474d9c8fbc7ea3aaab505b58cd2cd792b964d9c63e81601e2db2ae30 |
| kubernetes-client-linux-s390x.tar.gz | 184da2b456f29b11deae61b29234ed67b8def53b8cf19a653cd17ea86653b044ef6ce152b241f4561ac9c00e819c591c4f7f187217c8c76d5fa305f27fcc581e |
| kubernetes-client-windows-386.tar.gz | b1b9ef8f0f1e986890091f5a8de9c1c0b2d6ee8dad189ba007c897a438c457ff325b33c50ec29c0c79371e9cae04fd55bb126bc879cda0dcb3261c8de84036b9 |
| kubernetes-client-windows-amd64.tar.gz | e0ba8ae61933951ef5c506b34631bce5862a6962d73adb1636ffba7ab871b1ceb630284e946119a784b630b2c71db60b96e19c2afe7c97ded26138a3b3168ff7 |
| kubernetes-client-windows-arm64.tar.gz | 5adcf4a405e1513a85f39760a4dec70d41b812b55435d88dd5e807111fc168246fd750b62bc846447de22feb27c4c788a509eac6863d6cc9e29203adf757fdd1 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 90d608937c2db20edd706d343d15ab209b874916d987e613e5ba14d263577a4aa18474fb1105edcddb16d656eba025f943bf810e0f183fca5a26001a350d3156 |
| kubernetes-server-linux-arm64.tar.gz | 456dddc19f5b24319a4ffa2310e92991fadd7f21e4d9f6df8c4216b12cdd1657ea08f24bb45bf744ab4edad6e813be1ecaea4b14978a84d2a46219d08b24f11f |
| kubernetes-server-linux-ppc64le.tar.gz | 72f53d427bbbc36bfeaa75061f7c2c5e94e9a68e4c87e72fa29eb35b069ec963a48a74a4cc357fc41abe22c243787f30699a20875e1db772b540b84c971d9d6c |
| kubernetes-server-linux-s390x.tar.gz | 5d64c782c0ceb5d9fde0e5b1a5e99df5255110968d0147aa18cf8ab62e639814d336173a98f638b006cedd8282aa25c0f036d82499e4eeee879c44dfb528e44c |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 38a2e90aebd26f0b9b663e0f3283ad14a3da9f8c4924cf4dccba5996e1cb25dd6448b0b62822a9543ec63a9adb0ac4e9a880c572aa71d50c27c6e57b12c7c8c8 |
| kubernetes-node-linux-arm64.tar.gz | cd14fe38a57c34a4dd3937b491e94971eb53cafc786513b02e8937832e84d41163e446b8b92eec6b0afd77c7e9261bc41ce63f5ecbde3b79d6f33a162dc9b36a |
| kubernetes-node-linux-ppc64le.tar.gz | 4d9453931f0f4f33e1825445f3b818c6bb20f0c5a0c86c62e8a97e3333f16f802101371532d7b5b8a8d8db6ec2a98b1f066b2fa7c9e19d2b718121b5fc66a703 |
| kubernetes-node-linux-s390x.tar.gz | 4d2e7c9d106958126fcd70959e1ec402e966701b6d801b5b569f622060e761e23319c849ffd1f17d421201b51f4e08596773937b0f1e72e560915b191048f565 |
| kubernetes-node-windows-amd64.tar.gz | fbc6c276cca3afa226ecad01bf26d17f1b45a42ffca10248a721df347ffc3d479af945462712b18c5d46be256784b11cd3a23b30687bc1c8bb9cc3f6c0f8420c |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 572505bb9620d7a32d7d3d4f3e5c210c0c7ee6a8781513872ca6ac2a62400c50833faeac4a19099731bdafd73743b3b185a560f3b8b670e740082d686e5373a7 |
| kubernetes-src.tar.gz | 0febe78567645296e84935086c80578f9dec156714f45ae6b6ba14f007ff7a8f1474b5fba2f277b5d1c2a2ef6e9b59a8fe591c3b66780e9a00453dd22371e3cd |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 7ec2eae02ac11e5be1cdc1d43b606ab6e7104b8f40cfe207fbadf0a44f8cbd795baed917e176ad69e65e8c78254be948b9eb7b3f3f3427b69db0027d656c2003 |
| kubernetes-client-darwin-arm64.tar.gz | edbdcd8e66c176f57b94eecd112c98a7362be87782a5c7f0a65139dbd26acf92e97542802bb0883b6c64ba1ac8208d790b3020cdd80e3cc25cf5f5c951f99f59 |
| kubernetes-client-linux-386.tar.gz | b2bbf9f3ed56d0109ca08822d557e9405d7068aba9861811fbb6950c772b4ce5d06290c86235732c906985e3c3103342d80d96db52716f280d102727f68887d1 |
| kubernetes-client-linux-amd64.tar.gz | a853c1b26182ecaca8c3b09033411b1ef41824d1d729a3a2efee68d67c7b9b9a7a451c080803f007673bec6d30fd4d760a42c870d3c93f23c2e0c959c8c7099d |
| kubernetes-client-linux-arm.tar.gz | 93caff3859fb0b09bf76bd83a60aea0ca0fe93571d04d0b9f6fc016f36624312f4f00b93c846c4e07c213780445072f417bacfd28690b302ffb5f5ec3c28cc63 |
| kubernetes-client-linux-arm64.tar.gz | f7768c3e74c6272cd2a58b69271465173e1ce3ad41806485acec280b1660835210b6633245ea50de82919c828be94e45b3a4207008dd43558b94902990e4676d |
| kubernetes-client-linux-ppc64le.tar.gz | f8badd488171649d2df11cc430d109f8c292c7e616f3de1a10d56a989b24f21ccde7d7d9dea6163bffcb44db262eda2b8843f6d715edfadf83b672f8b7dff098 |
| kubernetes-client-linux-s390x.tar.gz | 7027c48e89538befed2f5d9576ef85cc68c9ebe64aec2a91a55d8235951cf0d3da3661dbc24613ae6cd38bb043d84aa2f5ec9babecfbb1a746c382275aae9747 |
| kubernetes-client-windows-386.tar.gz | ac6f559d8e6c84e7b29194861616bbbf673a0365ef55eb5e9ae7724846f376ba611fe2991bb707839bbaf11852d0c434099b2189e2ac1ee901fabde4949ac399 |
| kubernetes-client-windows-amd64.tar.gz | ac1c2a92b5d28c88446511f412eab2abd29395b01fe6175d13572abb3c194ac6425aa0efffd2773815a826dca355b8fee86dc9691ccb3a231f7b85311bc8a813 |
| kubernetes-client-windows-arm64.tar.gz | 4623294a851532ac06de705a52c4689dabef6d5a5bf4ff1c4da26569c42fbb8f2431d7c70749e57cd698b652c6d262be64e814fba6ffac4bfd6af41e90c74abd |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 817b24e86a5cbe91da3483bc58357b93db02612c26331e366c186e025dbd9362ea9aeabacb82e2e5edac316ffd358c5029caef5a996b22c64289147774dfd592 |
| kubernetes-server-linux-arm64.tar.gz | a2364b378418c1ce648c1c852d380cf7e4ffdb0eccec571ee336e16799e5171885e7824830e302afb7599384571c1a95582eb1080ebe547ebd313ace189c7899 |
| kubernetes-server-linux-ppc64le.tar.gz | 2a8068ec02ffece12f91ee594f65111c3c402a5c84c8425649db7b0fe8aeea303beb03453e5e84f452c5ad1676786db3d59636e191a45e3d00e2ac72f9eaeb8b |
| kubernetes-server-linux-s390x.tar.gz | 403bfc53c96f4ae7bc712e4a3291b4c7fddfe7d0bed894254ccdcf208830ea6fce48bb1e1ab3ad732914ea18b91cbd236d744895105753e43975c9525b469701 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 4f5208f90f495074eb6400b099fe05430258a6e77e3344bab5fb063237d32f29b9b21f870602333055aabb0b875a9a251c1c752232b4be265ebd6639a44a4586 |
| kubernetes-node-linux-arm64.tar.gz | 46c038779f9af5defd7c186598ae3894cc993461802946904ce63018e7b915afb3958745013a0542acc9f51f96465699e1dc57a56dbd1d7ad46de0c7328e3e47 |
| kubernetes-node-linux-ppc64le.tar.gz | 2e321977880fddf0f681df864ea984f19c8ca4a0782e50cb3471ae05da775170d1e69ac6a0fbc6423adf222cd6c35b743ce9e24d6e1625685d3291984bb29727 |
| kubernetes-node-linux-s390x.tar.gz | a79d7309c29f4b033e53cdeba6bbd97f82b1d4dd612c9f5791b6a7124a91e7f1a89dc355bdcbd7ddf06b75f32d7e8c0ed458a19aed6a09a947986997802dc74a |
| kubernetes-node-windows-amd64.tar.gz | 0f48a530e0e3348cb59298150e1b818415878c4a082729cb98846137c6c8d80e7348b650a271ad3357eb81b94a8c1b168a1e1ff3e07ba97edc64bd9c1fa13c37 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 4a43ffe0d8326706d32aee0ba06054acc257703112333ffcfb39f2fcf806ebbbce8ab197f1d69845babe8babf5b398a5168c728df9628f459f05adc7f8673e1d |
| kubernetes-src.tar.gz | b328f2c190a69623c0c6b01c5df4bc2656eb5593627c212eef629d70acdde7a7d0dc3679e09a13ad3aef53c10bc23ebe9292289ef9c78c23f38120de2e87a4c7 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | b6f9c7e034900914316402eb053f68e298e6c294808bd541d0e7f7e6d60ec825a39ea196aff1e94057f22b1e101d3788300618b0d91f24278e9435e6ce8a3e09 |
| kubernetes-client-darwin-arm64.tar.gz | 2ec9d3f4574ed1403d5c2b50574e7db03767dc4a6c2c7eba4cd7e905f360b000038d5a970c54c56095c296792ad91edd4020eb37ec0d0a99eb57f8e129ff34a7 |
| kubernetes-client-linux-386.tar.gz | af65ca8ca857dd5c946d79989f31c1cc1f3e07a97326df54dc2ec96ff28c1f1db12b17207d8848b5db87ee360efc1eed86d56923b400f0d26fb64657b16e55bf |
| kubernetes-client-linux-amd64.tar.gz | d5a8e3b4245735c6407ab5a7236a6c10b6cc175f1ca69260b5136d049e0eb8fc7df3ee1d66335da7e808e64e257e4420d122ea6816e7553caab303ada6bef3a8 |
| kubernetes-client-linux-arm.tar.gz | 0547f81bbb474dbfab726959196f4d4c25182957a7913e323ab96eb9693c3ecbddb7339cc3186aa2f6fc74de4370905751650bb59574f3785f51ee57fe54a6c1 |
| kubernetes-client-linux-arm64.tar.gz | 980fbf5a80f8c6bb08cfbb792e10f5466a930c4b26315b4fb36232c272edd4d4bd3a462db05dda75e41d7ecf7f658e7922371afcfb7f3a44b9d7f14972c221b7 |
| kubernetes-client-linux-ppc64le.tar.gz | 86bb3ca88c0f1c6aeabc535e2583c6a7a22ec078a3ad462865497cddaf1f0ff26822cef6c8a17be734d91d3f310e5adf4c58872badd1b57a27fbc1218e6ad6fc |
| kubernetes-client-linux-s390x.tar.gz | b359ca83bbdef88d938665cd27cb0d94e699891881e478fd425fd9e8112061d87d1a4670ddb10d0be0acfe0549497af63184bbf058557f0f24be03940b777241 |
| kubernetes-client-windows-386.tar.gz | d687e22456536a697e392ed573dae322fee0c74fcd90d77d54d41fb5d619e53d8bb215f9ab121a8d8cfef73db7e6f961e3af1d75684352d38fba4f4ea7fb3d90 |
| kubernetes-client-windows-amd64.tar.gz | 3bc585cbc5ccdb98bb019ae1d29f61284efb7d54dde6b52612c6001c2e713c4e36d2fd134f021779d25b536491058e3bafac1df16133d29ea91794c35bb7f247 |
| kubernetes-client-windows-arm64.tar.gz | eb8208e43d6c520aad3e5fd272e67b372da556aa6d21f300dfb003d56e3684ffa9a11c946b5f874fefe1e8847fbd8f287111479536309eeb178d7eb51fea2c34 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | d3d5b6b7347b3d80790ac58c57eb6f1a7be703a4c1a4507d694ac8adbc762e7d80ec070f4944a265e1dab7a94e9cb5975cc9cd7334d861c790320f94d49fadda |
| kubernetes-server-linux-arm64.tar.gz | 8cdf526e178e40b8904fbf26987e3e7eef59ce3f8fe2a471267e97daeed42b74f82f478105707481fe25cd384f2d1dd38e50fab99b31927d0ec40a6285370c54 |
| kubernetes-server-linux-ppc64le.tar.gz | fb8215dc0038f5e6fa32f8391ffa15960ad6d53ff27698db6a52edec6e78db3a39be63cff0e84fd0d9928cc92788ea91e1090666550cd3bab700910803376738 |
| kubernetes-server-linux-s390x.tar.gz | 89b505fb4eae7b0a0c499311952e8ce0a0ae1934b0fc1c6eff11516cd9739e13e019d87f2cae4a9db51395be86f38c89f68d135a8ffb0398f10db8c4433dbb77 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 6638b2af2abd1d56dffec80b4462f1b79aee5d3ac2c88a1bd07ab8908378a62e401989fee36bdef7b925a7d90bcaed7cbff3198e27b6b180a656b3ac227e3c7c |
| kubernetes-node-linux-arm64.tar.gz | 2e58cedfc1a02410d1b821d3a56664ff1fe02b83ec04034b4a68f4b3abdeecfb9714c17ab29dad88407509573eb123e9dff1bd546f68b3b819e56e4e14690f76 |
| kubernetes-node-linux-ppc64le.tar.gz | e2aa9f593f27e3e3109a5f3ebf8a0166950798ec6667ef0a96a6822c8e888ef1a221ead020d529550271d8e1c237fc952a52b49eff50399b83118095fd13f321 |
| kubernetes-node-linux-s390x.tar.gz | 974cc3605043646e5b713d0c3bd43bfaeb1f5d571e61d63dadb92c09e367d4d95214c7080e30e0dfdd5961f85a46597bc79c9d6e78b10f0957610afdb188a6e5 |
| kubernetes-node-windows-amd64.tar.gz | c48b551f73ca497bb53e220fdac005001a0099d4be4d4f9092319ec3e9b3fd6f7b227214589bb919fd51cb4bcbef7825e4314c11c3a6267b0819bfe66a7b38d0 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
CreateJob are properly terminated after a timeout. (#127346, @yuyabee) [SIG Cluster Lifecycle]socat and ebtables from kubeadm preflight checks (#127414, @saschagrunert) [SIG Cluster Lifecycle]Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 986a10e5458e91d0349a9a394cdcab1c8273de33739072c1feb9e5e412027fe0cfebf032a25984f80292948942fb77bc27f671d40e8c5e476f2dd13d8400898a |
| kubernetes-src.tar.gz | bd253329edc37763e41940533669c39fab38756722089ad5b88394d7916c6458cc938254c75599ab5649abe5a9ab6e57a9d851539bd0ef954777c388ba1dca77 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | ea8f1224926a1e571b3b6315af4a959c54fda3af868a5a4f81fa34c17ae1e86b46316922f7ae25514718e135e0f67d3d393fa802d5d6ffc80be61eba2b1371b3 |
| kubernetes-client-darwin-arm64.tar.gz | a806a9982cdec9b4394f9419267e9926ca8de565b6df9ba5dbd96a37bce594b287cf70716a19630d58b8ea9dcc8dfd4f08e2f34d31298c8801f676088de4cbe6 |
| kubernetes-client-linux-386.tar.gz | 6913f29f1bc148153aa39640da2a34ccc8e6911d0b7dbe9c26b409738ef4b0086ca2af3cb5463220c6cf8c5b2ca25f5fd295d67bec06c4f2895793d0efab4d47 |
| kubernetes-client-linux-amd64.tar.gz | 7551aba20eef3e2fb2076994a1a524b2ea2ecd85d47525845af375acf236b8afd1cd6873815927904fb7d6cf7375cfa5c56cedefad06bf18aa7d6d46bd28d287 |
| kubernetes-client-linux-arm.tar.gz | 24a55e57ff56b5d8ba5e46f13c64bf23d33b864f943b9fc1de38a116a2b4e8964860d23dc997fac6b89a12b9bc3dbeec1829042ed87657c21d339c57e6ac5985 |
| kubernetes-client-linux-arm64.tar.gz | 1f5874dbbdd85aa48d698f0e06272abb36cc0e587d9427764d29024e18d00e9393d66cda3b176675df9c00196dc7b801fee5a10efa73aad734fa15496d8b226a |
| kubernetes-client-linux-ppc64le.tar.gz | 4a74f8cbf2c49ca220d72eb076364ad8654734e1548ec19d969dee636c5ed1693c7f97d37ab7880cc69faac53fd3cbe34d12a1ce4048a8a49f6b711eda66bd21 |
| kubernetes-client-linux-s390x.tar.gz | 3a8abd5fb291462f266a71ce7ed82ef6c9d9d02a9fbe9c6d71c7a377e77fbaa2bc850a1e8489d4e84568ff1d5019a9d1ba5369078e1a85f74243686954b7f335 |
| kubernetes-client-windows-386.tar.gz | b022584e388f9ccd54cd9fabe6ecec094a9a1a475ff303041a6392fd03d44f086945f6b5308f49f208d565d6424bb94c9ffc3049edb0a43cad0430d345bcfcaa |
| kubernetes-client-windows-amd64.tar.gz | e0b31ba4533d2c26d4c82f442d094d53482880a2302dc3199ec843ef645099e9c605193380125938a6593355416a4063b1fa52f701fa51dd88b83200d35fc8ea |
| kubernetes-client-windows-arm64.tar.gz | 8d1eb7740dd7ca865e4f3b027b24e905da653a7c5be2736972270b6151b8922575377c4e78cdb4c132a4c9ebc27f6b4300111e6c4be0bc8cf177dfd91077e29f |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 9228f51b172ffe30d2a2b0a8283dcdabaa255ccc68ec790f61f06690c11949699068a429c6a37ab4d087416b7a57caacbc9eca49f824c63ace72c2fa666d28c3 |
| kubernetes-server-linux-arm64.tar.gz | 36d9afb99a959d1d55a253e823abef797db9c42fb6dee9800956e9d6d4a8109cfab781f55bd9e8da9ce09975396c756c29ce532cc4f0b47ad54411a7f19482df |
| kubernetes-server-linux-ppc64le.tar.gz | 312efddfeeea69b97248827156b2152781b3e4ae96b9a03520bd34373dd824ba96fcafd42b8048497b90d7beffcaee304e6972597006fa082dc8c563763f7e4d |
| kubernetes-server-linux-s390x.tar.gz | b8b7b318be6340ac4d85b464aaeb0eba5568e7dab64cc587942d1928f70a7d0a24539fdf9b726e3c40b46c4988746db4184663d212c24da6b0428d4454edac5c |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | cd909b5059cb902d41317256387b95cb97c3b931e3bf3ecc93448e84e375ab794a60701c36c6f1aa0263cc96601de3b83f16a7b387647e00aba6270ade626fd1 |
| kubernetes-node-linux-arm64.tar.gz | 97a72ed03b584450d37eaac14052cc8f4375646c7291431cf921a40e342ae43a3551a57f7519e03959c041448eba602b672ec39f26f811446b10e3106785854f |
| kubernetes-node-linux-ppc64le.tar.gz | 4de6ac8000071eb2be563bfe472be6bc1d0c20997e899ec651d28f226820200fdb7db1ad33154f5106d9a1b3e858ac4f5d004cbaa4558d0395200d42b2f3bbff |
| kubernetes-node-linux-s390x.tar.gz | 94f892b383795107c8d2bfd139cc45a3e2dea475826f334a083163b6a7f84409f117c9e58ee59ffeb58ef185267439557cdc3faa4b000fde477aacf7a0cb26b7 |
| kubernetes-node-windows-amd64.tar.gz | 821638e57bbf45d0947e58a87f7b0bb81ba99d420ff7efc59745cd7a4076ab94439234371d1854b8fa05095acf52c1f332c767645f80b158acebbb38bc987db9 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 25edd785e9b2aac5971f61ddca8bf9840c0ffcd86f6e7115705dec35525f9efd73ebcc5b720a6af514d5dc36bfa6e46994cbcafda9cda591208233b2fea0ae7e |
| kubernetes-src.tar.gz | 483893d82cb4a7232f51a95fc80f0963f95226898ddc271af9c9ecb6f56dd263b0661da2c2548665df18e32b08825e15614f9b03399765fb3f421c74d12cfec4 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | c0f75bb60acaccc782eada23a69ece3b92d7046bab680551714df5a5b89645f01b773fcaec9c00a72765181625d77f012f680e121b12085f95044c5ccc813974 |
| kubernetes-client-darwin-arm64.tar.gz | 9525045bacdf8df0d101b41070c90ee90896e9b9339408523a9b097935417029f339229d2ade08b8eb5bc8f578104d463254550e555f2468523e4956aedbd34b |
| kubernetes-client-linux-386.tar.gz | d9f9ba0da286d59e6fa3492e5635a8a5b42f6d3045ef46af83ff906a309c4823d39390951d3229820af516d5e2413d5d175d27c5db9120f64eecec0366537fd9 |
| kubernetes-client-linux-amd64.tar.gz | 4ade487edf35c035dd711e91d5989261c4cc211a8e24983097612e9c83e332b015acda478d9415878e7cbe54f16b324c951c83bde09ebb8ddaf9ca371dd790de |
| kubernetes-client-linux-arm.tar.gz | 62edbefb82a4fbe7913ca7057d329ddb5ea8b0b8fa2bec214bb68d6f0f4f8bd3a18644fa88cdca230f43f3b0362c2c38090c2f456204f3bcb8f0da52a1a50b8f |
| kubernetes-client-linux-arm64.tar.gz | 0bfceaed91665537a44ccdd98ed2d3ab9a0a160005b2f368d811e8f46a2c575a0ba6cf94d3adce1d9cb1f61f4445cec8703090d7d154e38b70a6b76e38accb3e |
| kubernetes-client-linux-ppc64le.tar.gz | c49fa194dea40376f2fcd90d5fc83a57558102de559befcbf37cf8836f55515576751796d4fba4e5030e68a919914d2b08ea148f11a62f06f92d7914a9e5c0b4 |
| kubernetes-client-linux-s390x.tar.gz | 99d0639a99f0f11a705027a06bf5b6f3f6f08c3e27c828200ed8118232c5d17bc7b7810b0a4ded642f11d47c8514b22f010c689a3a72c3718efda2d457031987 |
| kubernetes-client-windows-386.tar.gz | a222c185e15bb1bbaa0a608b0572f4ee20869877f20cd0d74a060477e678a0f3f7cc3a2073d1c5b0d8b0457a3735ae930c676d5532b90284d8ecb2b053a606c5 |
| kubernetes-client-windows-amd64.tar.gz | 49751905d3cdb96dd132163be850d5269c86ba61c05aa517f73909011641a9b87d6e972974efafa02e78c92fc2dd3f4bdc7ac45587dd9bf5877ebbe574862a2f |
| kubernetes-client-windows-arm64.tar.gz | e4c5e5ebeac9267987bcf393be899aa7eeaae6d0ef7dc6b6b90af0f78e42b5dd102e3a6e5656cc240a164e571f61279724e79e631168ef399042ba256c60a671 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 9253f7c15ade7c042ba806c24c8c80aa29c7ac85b0fb771945dcea6502efcc2962fcb2f743f56320bad0c3b76b146b0e6ec08faefb42f55e1ff20f3c7a08d400 |
| kubernetes-server-linux-arm64.tar.gz | 5b58138d39ed4d4a7d35b08b811cee5805fed211a6c7eb9ce6f20236643b795f85f11448e2bfd8ae831d6725535db0460d460feae76d5fc87b54f9a02c88dfc4 |
| kubernetes-server-linux-ppc64le.tar.gz | 7732fdcddf77b0480cd18951aebe9b35ae91450f26dface693c0b2f7a920312a40c7e1dd1b1fecb87a3a1b19f369b89bdefc139f5553e928a5ec1e605b8fd9ac |
| kubernetes-server-linux-s390x.tar.gz | 6c813534f7f9d000667fc92de271dccb7019c2d3dde07efb253975ac554f6d74c1151979674f5c5b6a3bf57fac4380aed0337786cb67f388f66179588eceaf72 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | fe8af89543e80d4b248f24dc094f1f326848699caf504266ced619f75b8dd02d5154549022c5bf43bf9df98512dca677f0e0d92095bf3417229048183fc4ea46 |
| kubernetes-node-linux-arm64.tar.gz | 7415107a5b91cdd60a5d18ff287ca8eb517d35abfcfa3992c6c833803d8aeff98856cb0161bfa9656462c56dee0502a9db9f1c91298cb131e537ed80ec9be2ac |
| kubernetes-node-linux-ppc64le.tar.gz | 9c41a1c5aa8b9b54ef014a9b59e5c7ed06d66be4431ea8faacc3af35e837ea2e70661b7dab57ab606b768b6c334e1b72544ee140a2f28b69b940f2f9a4157dd8 |
| kubernetes-node-linux-s390x.tar.gz | 56b4812d265b635590b9e7778895891513378c02efa9365ee22368b9ed26400cf7386913f6e556c3767aaddee22a2fd6b80cd1b9198be983a9f84a2ccf55f547 |
| kubernetes-node-windows-amd64.tar.gz | 80adfaa4a98b233878df32eac9f4dc494b8c8a0c25fb172a3dfc35a7eb5824f44d468e05be1f7e64476b06b835569bb0fa656ffbda20d604d48aa7f525543068 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
items field. (#126146, @xyz-li) [SIG API Machinery]APIServingWithRoutine feature gate has been demoted from beta to alpha, and is now off by default. (#126481, @benluddy) [SIG API Machinery]Always restartPolicy may not terminate gracefully if the pod hasn't initialized yet. (#126331, @gjkim42) [SIG Node and Testing]--yes flag to the list of allowed flags so that it can be mixed with kubeadm upgrade apply --config (#125566, @xmudrii) [SIG Cluster Lifecycle]Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 8909e96a0ff757f498bf3778026738bb50cb937bfcbaee5a6b97317f183a02b22282339cc107a1df6557f832d0cd4980c51a15b14124be1a9cbf61535d696574 |
| kubernetes-src.tar.gz | 46ada506e05bc34269fa6cf3b98791cd33040dac21dd11a606aa34c77532a06a43c605a3cf70270bc747ffa6c31f9bb2f37c509f150d218a323fdcaecdbff7f6 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 1284533de44f47e66ebd0e142eedec2eb0f09b1dcf4da0302d3d3c4372ccda385d089bd4deca07c079f53575eaf26c121f581704cab3cc38b81e30095e44e485 |
| kubernetes-client-darwin-arm64.tar.gz | 03039f131416dc6bcd26acfaaecea59a58d6b63b1b01256c38c7f5f6eb8fc6283eb18ef206e2c38b11b91e65990c9e88e462e99c7e8cbb90d6075e9985046e00 |
| kubernetes-client-linux-386.tar.gz | 7bea2c715e930b046827db6d4a547be798e01cf77e650d7193dbc41d413cb4637dabde6573efeaa92237049ef9f37598160a0bf3354c102543f9cf61a01d7a1f |
| kubernetes-client-linux-amd64.tar.gz | 88ad514acfc33b49161dedbbbb6559660f7a091319806daa124098f9c3d17c760e72324e5d09167a0a8d80275195b9012596da7ee974f628414179159ad4f3de |
| kubernetes-client-linux-arm.tar.gz | 75453d1069bf1c1ec9e5ff57ebe6d3f775144d0e9123dcf6c1c05b7971e54e53a4f47683b413bd4eb1c3ed6c7df6ab22a40dd2ae79a948347485eae5408e422d |
| kubernetes-client-linux-arm64.tar.gz | 37f79009ac14f0aef4a4dc833ee0e43632d03dc6d7a58622987b667e920907e4f3dd0181381a35b4cfebd5e4f5949d32a2f5b1d757b46b4adb4dd80181f87f7a |
| kubernetes-client-linux-ppc64le.tar.gz | e20d7dde800fa10328c73b4947dc7cbf215f51b949641390c22a894bf6853010dc29ec96cf227648076e34b63204600bcc7fe1a08aec22ad47490111e17a69b4 |
| kubernetes-client-linux-s390x.tar.gz | d6206b7d4bf6c88169c663234f32851447863380f12fd04e49a24cddf3ce93d1f609e49f0bbf84a739a909067851cad76e9179e81e9a53e0a540217fde4c0220 |
| kubernetes-client-windows-386.tar.gz | 7ad7410d2a82f87e41fd3e0dd8354feb3e0166ba3c5b96eacb0c54de90c6fcf6921121cfa97a00f0c7b538a7a0b84a58cc0e90fa1c5facce3d207210c15924fd |
| kubernetes-client-windows-amd64.tar.gz | eeed8188713a73df12ddc8cb8d0ad2227778e0789b70599f89b81e06ab3d1475597730040b7a276e45740769e52652f935a16d7178c7f34edd8bdb59b5308bdd |
| kubernetes-client-windows-arm64.tar.gz | cb804579034e0abe45835e95d9f5b57cfae0bee821bdf83c684d352b58e79b5be54b7cd52a0a107fa355f3633056fa83dd1a251fbdde83412d7d87013e784b4c |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 67282a349bd203fcc8d5d1d59d5b82fc56a14ea66f5a769ef457177ac5bcfb2fb65c239503a68f06a256f8919521fc96b5aad563bfec74eec13afb79a174f96b |
| kubernetes-server-linux-arm64.tar.gz | 35fcd3748f0c526094a16c5f220f406b89e26e245c1e7f013891e96864251d371fffe3d1903df583bc1033be072a89ad56bd0df497814777b17a7090d3193229 |
| kubernetes-server-linux-ppc64le.tar.gz | d12ab8bc81752e20d118d86282c9db3d2792ffd5671c46619ecdff6cd43e2d48ce081f0cfb65e35b1c473157d7cdff1d98ff270b2a7ff53d43137168d285e038 |
| kubernetes-server-linux-s390x.tar.gz | 473c70d56232f22e73b7fbb8fde3f64699ae3b695389ba61b11e64f60805241320ead1b4737a95a3bdf975da4e8e8a52ddbb14a36731ff12de80a02894ad9af6 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | dc53c66ddd9a2d72d92d9142ec1a6b00b79b4456f843831356c4dc424c8e44e55d1984528b968f1b943adc531a9af19de1070bda893d112982f5405cf9eb3934 |
| kubernetes-node-linux-arm64.tar.gz | 1a16ac829c4f402543170e88e792fe4cf20ebd615a42afcb67420855c42e289cf7c1c92a268fdfb581b6bf32603a1c15d5eea54fe25d3a2662cac109d673f422 |
| kubernetes-node-linux-ppc64le.tar.gz | 767e9d116e01554ebe9a62f2a64d310ad0f70277c491293943cf2b540fbf2b1bf2013dfb6b93ea4c7ad6a6e1e66c795f73ca698fcb5caffac0f8ce6de510cf34 |
| kubernetes-node-linux-s390x.tar.gz | a413fac81f8b6d36f4d788ddeb2ba92f9c8fbabb1beea1bf307fbc26ca7c46720074bf47906d48be613f391973bb978be674870e018efb464896721cd7f18b93 |
| kubernetes-node-windows-amd64.tar.gz | 1b27368d05ccd8ef5e50d7938c04932e7c5af3611875204c15fd7296a317a43bf8631f7440c90b778089e047c500f8747cb73e18e1b01b8716281066223a3cd6 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
This release contains changes that address the following vulnerabilities:
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
Affected Versions:
Fixed Versions:
This vulnerability was reported by Paulo Gomes @pjbgf from SUSE.
CVSS Rating: Medium (6.1) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Add /sys/devices/virtual/powercap to default masked paths. It avoids the potential security risk that the ability to read these files may offer a power-based sidechannel attack against any workloads running on the same kernel. (#125970, @carlory) [SIG Node]
Fix a bug that Pods could stuck in the unschedulable pod pool if they're rejected by PreEnqueue plugins that could change its result by a change in resources apart from Pods.
DRA plugin is the only plugin that meets the criteria of the bug in in-tree,
and hence if you have DynamicResourceAllocation feature flag enabled,
your DRA Pods could be affected by this bug. (#125643, @sanposhiho) [SIG Scheduling and Testing]
Fix endpoints status out-of-sync when the pod state changes rapidly (#125675, @tnqn) [SIG Apps, Network and Testing]
For statically provisioned PVs, if its volume source is CSI type or it has migrated annotation, when it's deleted, the PersisentVolume controller won't changes its phase to the Failed state.
With this patch, the external provisioner can remove the finalizer in next reconcile loop. Unfortunately if the provious existing pv has the Failed state, this patch won't take effort. It requires users to remove finalizer. (#126043, @carlory) [SIG Apps and Storage]
Job: Fix a bug that the SuccessCriteriaMet could be added to the Job with successPolicy regardless of the featureGate enabling (#125455, @tenzen-y) [SIG Apps]
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | f217dbe38478d20d99f45206df3b516f6aa49d153fe8789690a7ed9a70ad60689f38c8ac5e8cee8f9e11ca343a7b9ab8dd3baf0178a0d8c1e92ae80e999d1aee |
| kubernetes-src.tar.gz | 94ed343eb7606eb0d8dbce3cdbba89bd823e57be344e74dddfa97060ac269130db6804927933e6e3242a6249e71f02951876dc46e70da6967ff3b1ea3d78e2d5 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 0ccc6091ac956e108169b282dc085a0bde956dd22d32ce53594ae5c7eac9157f118170b1240b65a918c5d3f4c9d693b492463225428c6fb51a9fb5419eb949a8 |
| kubernetes-client-darwin-arm64.tar.gz | 7a322c0a68da795f3691ea58ffafd3f7e4694f8f74291733290a61354435966e44ea32172a68f614b45c5eb9932e943c4ff8b98f5fc74c68d62ea4048c37e5a4 |
| kubernetes-client-linux-386.tar.gz | 6c54486d34e9cc09f5c08b2f52dd13b0b928ba33e6d1ba9a1fb3ef14a414873596c34edca1393863ded0140839d5113cf2f42cfb434a16b587e5e455dc2e38a0 |
| kubernetes-client-linux-amd64.tar.gz | 3e3a18138e0436c055322e433398d7ae375e03862cabae71b51883bb78cf969846b9968e426b816e3543c978a4af542e0b292428b00b481d7196e52cf366edbe |
| kubernetes-client-linux-arm.tar.gz | 4e7dd88b4d1ead7375e1dc73c328c1ad824f76b7b04305a20459379be17ca5874d53701e4d21aca4ed794791e1851c912437541768d5d99084e33acec5333fb7 |
| kubernetes-client-linux-arm64.tar.gz | cfe9bf3aa4188813607b2c7cad3333dbc1d8a72b1828751261cdd7b21e6ae8c641addd48940bb08cc193ce6901bbf372ad2006e30d0c66b6affbecd5a730b6cf |
| kubernetes-client-linux-ppc64le.tar.gz | 1c9aa010bf0947de9cf74204f906a51f01d4500c831b4bcf5c2f9b7a721da8660199206b84a2a9cad5b2f2258329b3fc820acff7b922eb2843ad3c84bcbbbb71 |
| kubernetes-client-linux-s390x.tar.gz | 6a78df18ab07b3c683fd8226317d7435ca05c21ce6f5afe242895aab3ffcdbe92db43dc3d71f01ede664651c3f25bb4e2bd6ff06211d535d1ee3db76d701f52e |
| kubernetes-client-windows-386.tar.gz | ff7a7e6c87d325e19d4f7ad0588e9a93dbf55ed9757914cab181af52d5ab2919ed6e5cb1447fca4b3a627a440adf01d83bac74831d197b98fd5fc0c88918e3e9 |
| kubernetes-client-windows-amd64.tar.gz | aa8a4e2bf8894c5b07ecbe15f9e703e5ca102cb13d84edec7c58c3e4c6100b0217238dc6e0f9cd91482aee5774296435cbb49802cb29bc42c4c08114d74390c8 |
| kubernetes-client-windows-arm64.tar.gz | 6278cce91b7ded7ce0df6df37a3086b93febc026c849241d6be4511464861e458dea1d8b3e4ce3ec5c8483191d0be42608e5a4d4ae3681fde2f34a3f65f62dcf |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 5e22892a98dbdb100cdc8798aeb1b10a0d3f015de530fd5b23c663e894f5c90b6e763de052fcb303b92006a5da5a4bcc10e937964c6633eb7b919888b73147c1 |
| kubernetes-server-linux-arm64.tar.gz | f4c7a0495fdd87ad1f3f81b4e1c8a548d5bb36f1bd3b3c66e56d8d18d5378bae8286da995ae3afffa002cfedbdf36d8a6b93a10a1e48d1d2aa99642debc7e804 |
| kubernetes-server-linux-ppc64le.tar.gz | 829dcb504a0fcf3293da2069967a9ae45ed171538d3300092117220289c0a3b4089ddac089e9312c30f36ff9d3fee2fa33c5202ff54c224e5d7a584136fec828 |
| kubernetes-server-linux-s390x.tar.gz | d39df747f5159a054e66ca3e5569a13a154f29a18b239f859485975b78bb56674c7097a7c43b5bc3e18c029b0b04eefbe75781418811e20c8ddb35ed3c50bf16 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | c9427a0b0ae23c2aec347240bf516101b1021d91a5a931c9d2c5914db3d287858cf7f29215830715ff500974350dae5e5796857ffb38be30f2b606842483a87c |
| kubernetes-node-linux-arm64.tar.gz | 34454c9c35e12b87ed08a73c31718ef1a015dc4338064ff36357d4c21c27cb4b0430a467afbf5dc09ae914bf95bc78adab01347470e2e645499ccd62eb3c8392 |
| kubernetes-node-linux-ppc64le.tar.gz | ea05858a2093d22f043758ac4a4f526ca839ec62ae1ef50659310f47f323d7285604c4a2ada35089a51eb29c6252b8fa5ffc528fa2afca3c3ef28f672db93431 |
| kubernetes-node-linux-s390x.tar.gz | 933fd0004c33d96ac2e352eb12534dbb695b1d22f133795157f8016d36910d0ef1d4b606c3efa795624b1f64bbf217141bf5250327741ca31108dbab2b3d990b |
| kubernetes-node-windows-amd64.tar.gz | db441e1875960ef306517404ed18ee25204ef1a98074c1ec7196338914fc887b8e371dfe321648b04ba9211137289c24406c289898570fa4d0505f7ecee0b2bd |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Added the feature gates StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks to enforce the strct cost calculation for CEL extended libraries. It is strongly recommended to turn on the feature gates as early as possible. (#124676, @cici37) [SIG API Machinery, Auth, Node and Testing]
Improved scheduling performance when many nodes, and prefilter returns 1-2 nodes (e.g. daemonset)
For developers of out-of-tree PostFilter plugins, note that the semantics of NodeToStatusMap are changing: A node with an absent value in the NodeToStatusMap should be interpreted as having an UnschedulableAndUnresolvable status (#125306, @gabesaba) [SIG Scheduling]
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | d3cd5b6343545f28be4757cdf2fd1bab445ed55ca96305677fab6fd785bacc977479a53e4689628dc6156e7cdd135c1dd331ab189840af4f5aedeeb9b11d3d3d |
| kubernetes-src.tar.gz | e850e0431d6e3cf3e69050478ab249144ee8b300f97820840c8c40200287d3b0c8b39d94cc0932a1170d86f175b8c0796f62718cb648550a655d8c8fc0f01210 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | a2451d9e0015f2ca5e3596e1bacbfe690482f4fa968336250603217335225abd445c9584741e37ef017726de49322939901b69d8543085dbf250b7c593621457 |
| kubernetes-client-darwin-arm64.tar.gz | c571af8316b9afa75e488bef7913ec142dda48e227ce74f9be3bc2e796c22f80b9e8e14776b63d91ea8db9f313309cae2e606c727c0d8db5f4109e9a8407073c |
| kubernetes-client-linux-386.tar.gz | 729c18fbc57e1d092fd68173668c690a035fa4135b53b4615000f1a28ccf04bd00edfec37ee630872dd939597962e934fa257f43866dbfe2208723104ef07a16 |
| kubernetes-client-linux-amd64.tar.gz | 15e200a6697b1b3d526c4f21f92e3cc9f40eedf8ed9355654b48371b20cd598834bf471aa9330b92c55ef6521a8e71570e2b9c76ecf489f7f694a0ad97e4cf3b |
| kubernetes-client-linux-arm.tar.gz | 1056e0db65964f35923889afb2b4d18a7e31b1266fc0cef7841458cc4431614482e55e63a75483dd451994f6c56fa12b1cb043b54d81a63dd96a110d2fb8fa9f |
| kubernetes-client-linux-arm64.tar.gz | 713eb73fe1fe55236d97a7e2c61d3086b5831f85ccdeaed6a149cf20228a2d22d1bea9b22a8583f99e73d3d4391b2f5226dc085e8bd775bb0009424bdff543cd |
| kubernetes-client-linux-ppc64le.tar.gz | 37abf1a26c6a91b4b2e3475cbe643d2658130dd817084ab97a42544c234fb0d6c8243f70bc0fd88634fe64aa50214059b7c512beb85dc8f9ecb3170ead6928ff |
| kubernetes-client-linux-s390x.tar.gz | c5f8774bf3fb30d1d4de804aa9de6333f1717702c707558a6854c8208aaca73ba5844bf0395477f033b45e4b9dccf291b8558c385df0b2afe1ea1ec689cf680c |
| kubernetes-client-windows-386.tar.gz | 39969b1b9dc340b0547a09739a243388cedadae80cf594bccf4a38f3db228744c5510f17f7de32a03f3edc62091714d606371d05e0c480c77f1b98259b55db5d |
| kubernetes-client-windows-amd64.tar.gz | 4100fad76ebd0f884e4567acdf119ac6842d8f8ad53ec9fab3af42be2e3f8b0e27eeeaffc6339523f04a81be3c2888d173c50305c85e8c64f3a88f7cb3b0b808 |
| kubernetes-client-windows-arm64.tar.gz | 08298b0d4fb8cf909d8474cb29698bcb163b699d0ca7790c66c7f89419c6394e1701b2f6399492b270badd07e970c4c4a5c0850833deac62271f8e4a9a25ef97 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | e8f113c72cc0b79f9d44617f9442138be8a888b6acc9620591da629dd6f5facb001f5305df932f02f11747aef31a9d34fc9c6de06d3aa38dafcfb9740310ff49 |
| kubernetes-server-linux-arm64.tar.gz | 251557b54ff1ac248a4520b30ee06a827e53e8a941c15b085e5d9d00b576aff5b45f580722b2caed4fe37d6f00eb9fbf422e4c0a55603b9dec5146f1caa778ec |
| kubernetes-server-linux-ppc64le.tar.gz | a3f6378c8cfdeb7ff528635a9ae2cc71a6b7cf41e7059aacdabdcf79931350e130e9e882ee83b47efecbe6c9b71fc4a9aed8fdf83efbcb40a7bf79da3df3f803 |
| kubernetes-server-linux-s390x.tar.gz | 5daef0d44d640411009fe2a160ccb588863e8ee8ec1e8dcfd59f0fe7669f0710de72833b8b560158e2e2ecbbcdc6b5b22d6c3035110273aba91bc1b687229444 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 50e07838d4e418f74e2f59e7d3d9d15e8ca049e3e9e368e8b1a51aff52004e0e3ea620c1e4798441f1a68778ecadb3e881b41dbb22d83fdad108b1122477ebe9 |
| kubernetes-node-linux-arm64.tar.gz | f6e2d26ea6eed678f25db0242b2facc2f6db23b3baf5e6d5cc98d03fcfe226049998d8217788e9bbe3b948123f6a3e39997b2ba9c5ae138fc35a1f6a8a92e36c |
| kubernetes-node-linux-ppc64le.tar.gz | e906adc2d0ba461a77116b6867c723d8b1e4cdab342e25a0b3e448e7c4c7101ca60e2fa7377693622d9ca918c69c30f06609fdd5f24a79d1a46fc831d5891dc8 |
| kubernetes-node-linux-s390x.tar.gz | 12999d8428ab7b6c74398896eb1e87d167cfd73f17bfd554f72b9f4aa7b15ef9caf5f605e079fd700d7753b28f589fb53f4a5c8b951021c14f13721d3ab86898 |
| kubernetes-node-windows-amd64.tar.gz | b3f680b4442a2cdacf3a9fe073ae9f24809d700040989585b4eb21a9828a9107a328d575d81a8c47791b4235064a15bd78801e37bd90c5534474ad486f11120a |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 1abe2ea09c08787dfa85450d026499a7a716bb771ff5af0aff1ac651b0059c0aac7a4e8558ef1eddffd4ccf1871daa9086d0be2e3ed8bed47f8c9930e52578ef |
| kubernetes-src.tar.gz | 69a4ae4e4d227f784e241078b5667b7b7eb3cf787d237475cb311e6d417ceb2057624db6d2a5dded81e97db6250fb2e642388b564107fa86ac3c4b5e75980843 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 3a98e32c6e912b0d7e8af31a1e49be20983dd6ddfbc54024cf58eab551cba5398fb04d69138c39b3bc672c962b5a038f4404ac603a6e338218f00511e0bbf41e |
| kubernetes-client-darwin-arm64.tar.gz | 98fa1d19bb9250ff7c9536090a3d939fc2c7cc7253efd91e1fba4613acf44557bf5cdae9d7fd4fc5c209eeacc8bc2b584d281b92fc6e3d1ccea7cf43853d64cc |
| kubernetes-client-linux-386.tar.gz | 608388b0233e08b7b68fb62721275c271356db4c95b2686821a0b6e2c002e26b5d453ea470adddc9b3c17c623d29cec0a2ff66adb75b1e74f9a2f77101e8679e |
| kubernetes-client-linux-amd64.tar.gz | 7983b34128518610a63b500bc9a612b5c334180555af534940a3ec839d4e0b476c9d7742cb6cc57c9ba15de609561fafef5854b3708e48c1e9f822480f3e60b6 |
| kubernetes-client-linux-arm.tar.gz | 36955e5c1637d0b1f679f2ae7e8bf780b9e70fc8a7e64c5194aa8a44035982b97bf8ca631dbc1af4c46d91ff686fdd24bd49b5076fc1617a18bc496b0aee6367 |
| kubernetes-client-linux-arm64.tar.gz | edc3cc941996235d578c59f80e88cdadbc5259a9b3505073deac8632ef3cc08f53bc70959304f4aed5ccf2f99cab02f097730cdab9e8e691f5ffe8217be497fe |
| kubernetes-client-linux-ppc64le.tar.gz | 45a0119f4e5953eebe3cdf2e714d2cce376a800ca8194030880c0b3b5a5f9e462aa2e73bab97d16c9094dac290e3e55ba3df006fc7cd50f1ee1acdedc4dba7a1 |
| kubernetes-client-linux-s390x.tar.gz | 6a15fe0ad5ca4fbff89ea38d0390cf9c822971a50bb18bc37c23dfe3655a7072ed60f87408a47733c7ecb64cebe6201b43140ce6978f2a3c7753ff98bb0e4156 |
| kubernetes-client-windows-386.tar.gz | aea2df663dc841a513ceb060fb7368f492ec864c75c87569594c1d1a09cae2caa6e67846517fd246214395716ec7809e5b9bd6a92adae7afed1a4b087e9a3831 |
| kubernetes-client-windows-amd64.tar.gz | 5483baf908e22de9347fa965ffb1487afec12dc3c3b8642895ac91811154e2cee5de4a3218369f55929badff0466ae9437b59c0922a3699c2bec44a7c4841c47 |
| kubernetes-client-windows-arm64.tar.gz | fe922ecb57a0313ff461438db130416ad3dc4c849f243cf4f29010288351afe3a9ec786b1c820784bd51ca8f7a74f7436797565339d0d0583d93b0a91d5d50aa |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 320c934728b8720b08da5a2d4c95cea111e4bc2efa508a8e48393f45037b0cb3c5331e3ec1f744f83dd57644c6fdd684bdcad9c2fa01108ed2cca6b1046cb821 |
| kubernetes-server-linux-arm64.tar.gz | ddf0c4a47f1cd1ad44e9773b2cf8255c6fb11ef84fa42e73dd9479b9a8b8c94a8dd5ba6581ee3aa152354d9a2fe1ad219ba5289c64aa6b9ddd7ddbca000525d4 |
| kubernetes-server-linux-ppc64le.tar.gz | 5a1e839e38f5b4329dd8d0bac38c0dade336952821c8a4dc550221290481dc8d65f8b2995fc4330c7d0ea6a68fcbe81ae4085edd80b4194761bc86dac3ed380b |
| kubernetes-server-linux-s390x.tar.gz | 30fa3358a0b0e32ed7dfcaaba7d4403cdcf3a305124e7419c898db87c9ba1dc1ae5fc8f71c6caf744d35ea85d3526069596204c18f23449a759703b2ae797bbf |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | e3e8f443a5397029a26a30852f47a9406dc17622638a7b03d37b384283880503af85d134d2a5dfdcfd7a0a5cb11eef8312b37dec77c90062e29d7e0ea1da6026 |
| kubernetes-node-linux-arm64.tar.gz | d1299f54a2ec4343eb23be36071e3560f339d535b4c2eeb60c09cf40b3357f4371ca198aa4af0c41bde73bef1221a839c846a9f9b497f47f2fdf553238a7dab9 |
| kubernetes-node-linux-ppc64le.tar.gz | cd78d5811ac15aefb3392c9bc10ad97c69d9d87add1237ebfc8c72d12be6137d8a4933967a5294932ceff58ffadaddf541cff8d0ae3b663359ef5f6a9ad98b84 |
| kubernetes-node-linux-s390x.tar.gz | 26cec1a3f76289394966f98eab1e27a6dc122ac58f1d7c1ea94eb6b96e74377c449aa282d788655a1f752ff31add47be5389543a75e52cb4de947b7c613fe1e6 |
| kubernetes-node-windows-amd64.tar.gz | b6eed059c8e9c816ca5e26d9fd8154dd904eefd5024e71af59757b801bfd9b232b63d6c74c824b59891a2689b209d1dd7622f86ec3fd8530ebeffab36e3b504c |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
prune-whitelist for apply. Please use the flag prune-allowlist instead.
(#120246, @pacoxu)SecurityContextDeny admission plugin, which has been deprecated since v1.27, has been removed. It is recommended to use the Pod Security Admission plugin instead, which has been available since v1.25. Refer to the Kubernetes documentation for more information.
(#122612, @mtardy)Added (alpha) support for the managedBy field on Jobs. Jobs with a custom value of this field - any value other than kubernetes.io/job-controller - were skipped by the job controller, and their reconciliation was delegated to an external controller, indicated by the value of the field. Jobs that didn't have this field at all, or where the field value was the reserved string kubernetes.io/job-controller, were reconciled by the built-in job controller.
(#123273, @mimowo)
Added alpha-level support for the SuccessPolicy in Jobs. (#123412, @tenzen-y)
Added the CEL library for IP Addresses and CIDRs. This was made available for use starting from version 1.31.
(#121912, @JoelSpeed)
Allowed container runtimes to fix an image garbage collection bug by adding an image_id field to the CRI Container message.
(#123508, @saschagrunert)
Dynamic Resource Allocation: DRA drivers can now use "structured parameters" to let the scheduler handle claim allocation. (#123516, @pohly)
Fixed accidental enablement of the new alpha optionalOldSelf API field in CustomResourceDefinition validation rules, which should only have been allowed to be set when the CRDValidationRatcheting feature gate is enabled.
(#122329, @jpbetz)
Implemented the prescore extension point for the volumeBinding plugin. It now returns skip if it doesn't do anything in Score.
(#115768, @AxeZhan)
Kubelet would fail if NodeSwap was used with LimitedSwap and cgroupv1 node. (#123738, @kannon92)
Promoted AdmissionWebhookMatchConditions to GA. The feature is now stable, and the feature gate is now locked to default.
(#123560, @ivelichkovich)
Structured Authentication Configuration now supports DiscoveryURL. If specified, discoveryURL overrides the URL used to fetch discovery information. This is for scenarios where the well-known and jwks endpoints are hosted at a different location than the issuer (such as locally in the cluster).
(#123527, @aramase)
The StorageVersionMigration API, previously available as a Custom Resource Definition (CRD), is now a built-in API in Kubernetes.
(#123344, @nilekhc)
When configuring a JWT authenticator:
If username.expression used 'claims.email', then 'claims.email_verified' must have been used in username.expression or extra[*].valueExpression or claimValidationRules[*].expression. An example claim validation rule expression that matches the validation automatically applied when username.claim is set to 'email' is 'claims.?email_verified.orValue(true) == true'.
(#123737, @enj)
readOnly volumes now support recursive read-only mounts for kernel versions >= 5.12."
(#123180, @AkihiroSuda)
cri-api: Implemented KEP-3857: Recursive Read-only (RRO) mounts. (#123272, @AkihiroSuda)
kube-apiserver: the AuthenticationConfiguration type accepted in --authentication-config files has been promoted to apiserver.config.k8s.io/v1beta1.
(#123696, @aramase)
kubelet allowed specifying a custom root directory for pod logs (instead of the default /var/log/pods) using the podLogsDir key in kubelet configuration.
(#112957, @mxpv)
resource.k8s.io/ResourceClaim (alpha API): The strategic merge patch strategy for the status.reservedFor array was changed so that a strategic-merge-patch can now add individual entries. This change may break clients using strategic merge patch to update status, which rely on the previous behavior (replacing the entire array).
(#122276, @pohly)
Added a CBOR implementation of runtime.Serializer. Until CBOR graduates to Alpha, API servers will refuse to start if configured with CBOR support. (#122881, @benluddy)
Added a alpha feature, behind the RelaxedEnvironmentVariableValidation feature gate.
When that gate is enabled, Kubernetes allows almost all printable ASCII characters to be used in the names
of environment variables for containers in Pods. (#123385, @HirazawaUi)
Added a new (alpha) field, trafficDistribution, to the Service spec to express preferences for traffic distribution to endpoints. Enabled through the ServiceTrafficDistribution feature gate. (#123487, @gauravkghildiyal)
Added audienceMatchPolicy field to AuthenticationConfiguration and support for configuring multiple audiences. The "audienceMatchPolicy" can be empty (or unset) when a single audience is specified in the "audiences" field. The "audienceMatchPolicy" must be set to "MatchAny" when multiple audiences are specified in the "audiences" field. (#123165, @aramase)
Added consistent vanity import to files and provided tooling for verifying and updating them. (#120642, @jcchavezs)
Added the disable-force-detach CLI option for kube-controller-manager. By default, it's set to false. When enabled, it prevents force detaching volumes based on maximum unmount time and node status. If activated, the non-graceful node shutdown feature must be used to recover from node failure. Additionally, if a pod needs to be forcibly terminated at the risk of corruption, the appropriate VolumeAttachment object must be deleted. (#120344, @rohitssingh)
Added to MutableFeatureGate the ability to override the default setting of feature gates, to allow default-enabling a feature on a component-by-component basis instead of for all affected components simultaneously. (#122647, @benluddy)
Aggregated discovery supports both v2beta1 and v2 types and feature is promoted to GA. (#122882, @Jefftree)
Alpha support for field selectors on custom resources has been added. With the CustomResourceFieldSelectors feature gate enabled, the CustomResourceDefinition API now allows specifying selectableFields. Listing a field there enables filtering custom resources for that CustomResourceDefinition in list or watch requests. (#122717, @jpbetz)
AppArmor profiles can now be configured through fields on the PodSecurityContext and container SecurityContext. The beta AppArmor annotations are deprecated, and AppArmor status is no longer included in the node ready condition. (#123435, @tallclair)
Contextual logging is now in beta and enabled by default. Check out the KEP and official documentation for more details. (#122589, @pohly)
Enabled concurrent log rotation in kubelet. You can now configure the maximum number of concurrent rotations with the containerLogMaxWorkers setting, and adjust the monitoring interval with containerLogMonitorInterval. (#114301, @harshanarayana)
Graduated pod scheduling gates to general availability.
The PodSchedulingReadiness feature gate no longer has any effect, and the
.spec.schedulingGates field is always available within the Pod and PodTemplate APIs. (#123575, @Huang-Wei)
Graduated support for minDomains in pod topology spread constraints, to general availability.
The MinDomainsInPodTopologySpread feature gate no longer has any effect, and the field is
always available within the Pod and PodTemplate APIs. (#123481, @sanposhiho)
In kubelet configuration, the .memorySwap.swapBehavior field now accepts a new value NoSwap, which becomes the default if unspecified. The previously accepted UnlimitedSwap value has been dropped.
(#122745, @kannon92)
Kube-apiserver: the AuthorizationConfiguration type accepted in --authorization-config files has been promoted to apiserver.config.k8s.io/v1beta1. (#123640, @liggitt)
OIDC authentication will now fail if the username asserted based on a CEL expression config is the empty string. Previously the request would be authenticated with the username set to the empty string. (#123568, @enj)
Removed note that hostAliases are not supported on hostNetwork Pods from the PodSpec API. The feature has been supported since v1.8. (#122422, @neolit123)
Structured Authentication Configuration now supports configuring multiple JWT authenticators. The maximum allowed JWT authenticators in the authentication configuration is 64. (#123431, @aramase)
Text logging in Kubernetes components now uses textlogger. The same split streams of info and error log entries with buffering of info entries is now also supported for text output (off by default, alpha feature). Previously, this was only supported for JSON. Performance is better also without split streams. (#114672, @pohly)
The API server now detects and fails on startup if there are conflicting issuers between JWT authenticators and service account configurations. Previously, such configurations would run but could be inconsistently effective depending on the credential. (#123561, @enj)
The JWT authenticator configuration set via the --authentication-config flag is now dynamically reloaded as the file changes on disk. (#123525, @enj)
The StructuredAuthenticationConfiguration feature is now beta and enabled. (#123719, @enj)
The kube_codegen tool now ignores the vendor folder during code generation.
(#122729, @jparrill)
The kubernetes repo now uses Go workspaces. This should not impact end users at all, but does have impact for developers of downstream projects. Switching to workspaces caused some breaking changes in the flags to the various k8s.io/code-generator tools. Downstream consumers should look at staging/src/k8s.io/code-generator/kube_codegen.sh to see the changes. (#123529, @thockin)
Updated an audit annotation key used by the …/serviceaccounts/<name>/token resource handler.
The annotation used to persist the issued credential identifier is now authentication.kubernetes.io/issued-credential-id. (#123098, @munnerz) [SIG Auth]
Users are now allowed to mutate FSGroupPolicy and PodInfoOnMount in CSIDriver.Spec. (#116209, @haoruan)
ValidatingAdmissionPolicy was promoted to GA and will be enabled by default. (#123405, @cici37)
When scheduling a mix of pods using ResourceClaims and others that don't, scheduling a pod with ResourceClaims has a lower impact on scheduling latency. (#121876, @pohly)
When working with client-go events, it's now recommended to use NewEventBroadcasterAdapterWithContext instead of NewEventBroadcasterAdapter if contextual logging support is needed. (#122142, @pohly)
WatchListClient feature gate to client-go. When enabled, it allows the client to receive a stream of individual items instead of chunking from the server.
(#122571, @p0lyn0mial)apiserver_watch_cache_read_wait metric to measure the watch cache impact on request latency.
(#123190, @padlar)io.Closer to be gracefully closed.
(#122498, @Gekko0114)v0.49.0.
(#123599, @bobbypage)--nodeport-addresses behavior to default to "primary node IP(s) only" rather than "all node IPs".
(#122724, @nayihz)procMount field to Unmasked in a container now required setting spec.hostUsers=false as well.
(#123520, @haircommander)kubectl describe a VolumeAttributesClass.
(#122640, @carlory)CRDValidationRatcheting feature gate to beta and made it enabled by default.
(#121461, @alexzielenski)NodeAffinity Score plugin when it has nothing to do with a Pod. You might have noticed an increase in the metric plugin_execution_duration_seconds for extension_point=score and plugin=NodeAffinity, because the plugin only runs when it's relevant.
(#117024, @sanposhiho)RunPreScorePlugins and RunScorePlugins. - PreScorePlugin: used NodeInfo in PreScore. - Extender: used NodeInfo in Filter and Prioritize.
(#121954, @AxeZhan)ImageGCMaxAge behavior in the kubelet to wait the MaxAge duration after the kubelet has restarted before garbage collecting.
(#123343, @haircommander)distroless-iptables to v0.5.0, debian-base to bookworm-v1.0.1, and setcap to bookworm-v1.0.1.
(#123170, @cpanato)NewVolumeManagerReconstruction feature is now GA.
(#123442, @jsafrane)kubectl describe: Added Suspend to job and Node-Selectors and Tolerations to pod template output.
(#122618, @ivanvc)kubectl get job now displays the status for the listed jobs.
(#123226, @ivanvc)v3.5.11.
(#122233, @mzaian)--authorization-config file when it changes. Reloads increment the apiserver_authorization_config_controller_automatic_reload_last_timestamp_seconds timestamp metric, with status="success" for successful reloads and status="failed" for failed reloads. Failed reloads keep using the previously loaded authorization configuration.
(#121946, @liggitt)apiserver_authorization_match_condition_evaluation_errors_total counter metric labeled by authorizer type and name - apiserver_authorization_match_condition_exclusions_total counter metric labeled by authorizer type and name - apiserver_authorization_match_condition_evaluation_seconds histogram metric labeled by authorizer type and name.
(#123611, @ritazh)--authorization-configuration flag.
(#123641, @liggitt)NodeUnschedulable plugin. The scheduling hints allowed the scheduler to only retry scheduling a Pod that had been previously rejected by the NodeSchedulable plugin if a new Node or a Node update had set .spec.unschedulable to false.
(#122334, @carlory)kubeadm reset. When failing to unmount directories under /var/run/kubelet, kubeadm will now throw an error instead of showing a warning and continuing to clean up said directory. In such situations, it is better for you to inspect the problem and resolve it manually. Then, you can call kubeadm reset again to complete the cleanup.
(#122530, @neolit123)-o yaml and -o json to the command kubeadm certs check-expiration. This change is introduced in a new API: kind: CertificateExpirationInfo apiVersion: output.kubeadm.k8s.io/v1alpha3 The existing non-structured formatting is preserved. The output API version v1alpha2 is now deprecated and will be removed in a future release. Please migrate to using v1alpha3.
(#123372, @carlory)WaitForAllControlPlaneComponents feature gate. It could be used to tell kubeadm to wait for all control plane components to be ready when running "kubeadm init" or "kubeadm join --control-plane". Previously, kubeadm only waited for the kube-apiserver. The "kubeadm join" workflow now includes a new experimental phase called "wait-control-plane". This phase was marked as non-experimental when WaitForAllControlPlaneComponents became GA. Accordingly, a "kubeadm init" phase "wait-control-plane" was also available once WaitForAllControlPlaneComponents became GA. These phases could be skipped if the user preferred not to wait for the control plane components.
(#123341, @neolit123)port-forward over websockets (tunneling SPDY) can now be enabled using an Alpha feature flag environment variable: KUBECTL_PORT_FORWARD_WEBSOCKETS=true. The API Server being communicated to must also have an Alpha feature flag enabled: PortForwardWebsockets.
(#123413, @seans3)custom has been introduced in kubectl debug, allowing users to customize pre-defined profiles. (#120346, @ardaguclu)image_pull_duration_seconds was added. The metric tracks the duration (in seconds) it takes for an image to be pulled, including the time spent in the waiting queue of image puller. The metric is broken down by bucketed image size. (#121719, @ruiwen-zhao)lifecycle_handler_sleep_terminated_total is added to record how many times LifecycleHandler sleep got unexpectedly terminated. (#122456, @AxeZhan)client-go support for upgrading subresource fields from client-side to server-side management. (#123484, @erikgb)exec-interactive-mode and exec-provide-cluster-info flags in kubectl config set-credentials command. (#122023, @ardaguclu)process_start_time_seconds to /metrics/slis endpoint of all components. (#122750, @richabanker)apiserver_encryption_config_controller_automatic_reloads_total to measure the total number of API server encryption configuration reload successes and failures. This metric now contains the status label with a value that is either success or failure. Deprecated the metrics apiserver_encryption_config_controller_automatic_reload_success_total and apiserver_encryption_config_controller_automatic_reload_failure_total. Please use apiserver_encryption_config_controller_automatic_reloads_total instead.
(#123179, @aramase)MutatingAdmissionPolicy for enabling mutation policy in admission chain. (#123425, @cici37)access_mode label to volume_manager_selinux_* metrics. (#123667, @jsafrane)kubelet --node-ip values when using a cloud provider. The feature is now GA, and the CloudDualStackNodeIPs feature gate is always enabled. (#123134, @danwinship)nominalConcurrencyShares field now accepts a zero value in both the flowcontrol.apiserver.k8s.io/v1 and flowcontrol.apiserver.k8s.io/v1beta3 APIs.
(#123001, @tkashem)client-go. Depending on the actual implementation, users can control features via environmental variables or command line options. (#122555, @p0lyn0mial)SELinuxMount, which can now be enabled to accelerate SELinux relabeling. (#123157, @jsafrane)apiserver_authentication_jwt_authenticator_latency_seconds metric, labeled by jwtIssuer hash and result. (#123225, @aramase)apiserver_authorization_decisions_total metric, labeled by authorizer type, name, and decision. (#123333, @liggitt)NodeAffinity plugin. The scheduling hints allowed the scheduler to only retry scheduling a Pod that had been previously rejected by the NodeAffinity plugin if a new Node or a Node update matched the Pod's node affinity. (#122309, @carlory)NodeResourceFit plugin. The scheduling hints allowed the scheduler to only retry scheduling a Pod that had been previously rejected by the NodeResourceFit plugin if a new Node or a Node update matched the Pod's resource requirements or if an old pod update or delete matched the Pod's resource requirements. (#119177, @carlory)1.21.6. (#122705, @cpanato)1.22.1. (#123750, @cpanato)1.22. (#123217, @cpanato)1.22rc2. (#122889, @cpanato)authentication.kubernetes.io/credential-id in the user's ExtraInfo. (#123135, @munnerz)Always when SidecarContainers feature is enabled. (#120718, @gjkim42)KubeProxyDrainingTerminatingNodes to Beta. (#122914, @alexanderConstantinescu)StableLoadBalancerNodeSet to GA . (#122961, @alexanderConstantinescu)ImageMaximumGCAge feature to beta. (#123424, @haircommander)status.hostIPs field for Pods to general availability.
The PodHostIPs feature gate no longer has any effect, and the
status.hostIPs field is always available within the Pod API. (#122870, @wzshiming)TranslateStreamCloseWebsocketRequestsKUBECTL_REMOTE_COMMAND_WEBSOCKETSfalse: KUBECTL_REMOTE_COMMAND_WEBSOCKETS=false.
(#123281, @seans3)ignorable option now handles errors for both filter and bind phases. (#122503, @sunbinnnnn)apiserver.latency.k8s.io/decode-response-object annotation was added to the audit log to record the decoding time. (#121512, @HirazawaUi)hostUserns=false and the CRI runtime does not support user namespaces. (#123216, @giuseppe)nodevolumelimits due to not found PVCs, only when new PVCs are added. (#121952, @sanposhiho)kubedns and nodelocaldns to release version 1.22.28. (#121908, @mzaian)IterateOverWaitingPods. In other words, all waitingPods in scheduler can be obtained from any profiles. Before this commit, each profile could only obtain waitingPods within that profile (#122946, @NoicFank)UnschedulableAndUnresolvable. Consequently, these nodes are excluded from the candidates for the preemption process. Additionally, this update corrects how the scheduling framework handles the Unschedulable status from PreFilter. Previously, if PreFilter returned Unschedulable, it could lead to an unexpected abortion in the preemption process, which shouldn't occur in the default scheduler but might occur in schedulers with custom plugins. (#119779, @sanposhiho)RetryGenerateName feature gate is enabled on the kube-apiserver,
create requests using generateName are retried automatically by the apiserver when the generated name conflicts with an existing resource name, up to a max limit of 7 retries.
This feature is in alpha. (#122887, @jpbetz)ValidatingAdmissionPolicy now supports type checking policies that utilize variables. (#123083, @jiahuif)kubelet_first_network_pod_start_sli_duration_second in the kubelet that allowed developers to understand the source of the latency problems on node startups.
(#121720, @aojea)--pod-max-in-unschedulable-pods-duration was initially planned to be removed in v1.26, but we had to change this plan. We found an issue in which Pods can be stuck in the unschedulable pod pool for 5 min, and using this flag is the only workaround for this issue.
This issue only could happen if you use custom plugins or if you change plugin set being used in your scheduler via the scheduler config. (#122013, @sanposhiho)unmanagedFatal to enhance clarity while preserving grammatical consistency with unmanagedWarning. This improvement ensures a more understandable prompt for users. (#120159, @Ithrael)imagefs.inodesfree to default EvictionHard settings.
(#121834, @vaibhav2107)map() operations (e.g., .map(...).exists(...) ) to have the correct estimated cost instead of an unbounded cost.
(#123562, @jpbetz)1.27.0+ regression in kubeadm: The kubelet patch configuration will not be uploaded into the kube-system/kubelet-config ConfigMap anymore.
(#123093, @SataQiu)ValidatingAdmissionPolicy that caused policies using CRD parameters to fail to synchronize.
(#123003, @alexzielenski)kube-proxy introduced in version 1.26.0+ to make externalIPs workwith externalTrafficPolicy: Local.
(#121919, @uablrek)1.29.0+.
(#122341, @jsafrane)1.24 in the scheduling framework when overriding MultiPoint plugins (e.g. default plugins). The incorrect loop logic might have led to a plugin being loaded multiple times, consequently preventing any Pod from being scheduled, which was unexpected.
(#122068, @caohe)AvailableBytes sometimes did not report correctly on WindowsNodes when the PodAndContainerStatsFromCRI feature was enabled.
(#122846, @marosset)NodePublishVolume after node rebooting.
(#119923, @cvvz)EnsureAdminClusterRoleBindingImpl.
(#122893, @danwinship)syncCronJob.
(#122493, @mengjiao-liu)pod_scheduling_duration_seconds that caused the metric to be hidden by default in 1.29.
(#123038, @alculquicondor)NodeAffinity was reverted because potential scenarios were found where events that make Pods schedulable could be missed.
(#122285, @sanposhiho)FileSystemResizeFailed during pod creation if it uses a readonly volume and the capacity of the volume is greater than or equal to its requested storage.
(#122508, @carlory)--verify-only function in code generation wrappers.
(#123261, @skitt)EventedPLEG feature (beta, but disabled by default) back to alpha due to a known issue.
(#122697, @pacoxu)errors.Is() to handle errors returned by LookPath().
(#122600, @lzhecheng)LoadBalancerSourceRanges not working for nftables mode.
(#122614, @tnqn)kubectl get hpa. (#122804, @sreeram-venkitesh)--authentication-config would encounter failures in verifying tokens not signed with RS256. (#123282, @enj)v3.5.11. (#122393, @mzaian)Terminating because of GenerateUnmapVolumeFunc missing globalUnmapPath when kubelet tries to clean up all volumes that failed reconstruction. (#123032, @carlory)LookPath() to support it flexibly. (#120291, @lzhecheng)kubectl explain to show enum for field types if they were defined. (#123023, @ah8ad3)--rootfs global flag didn't work with "kubeadm upgrade node" for control plane nodes. (#123077, @neolit123)Always cannot update its state from terminated to non-terminated for the pod with restartPolicy with Never or OnFailure. (#123323, @gjkim42)kubectl drain would consider a pod as having been deleted if an error occurs while calling the API. (#122574, @brianpursley)1.27 and later
that could result in some updates getting lost (e.g., when a service gets a
new endpoint, the rules for the new endpoint might not be added until
much later). (#122204, @danwinship)1.29.0 where the --attach flag was not honored.
(#122447, @ardaguclu)configmap, secret, projected, and downwardAPI volume types didn't create user-visible files after a kubelet restart. This fix ensures data persistence and accessibility after restarts. (#122807, @carlory)nil by mistake. (#122874, @fusida)PLEG during kubelet start-up. (#122475, @pacoxu)InPlacePodVerticalScaling is turned on. (#122701, @carlory)1.27+ regression in watch stability by serving watch requests without a resourceVersion from the watch cache by default, as in <1.27 (disabling the change in PR 115096 by default). This mitigates the impact of an etcd watch bug (https://github.com/etcd-io/etcd/pull/17555). If the 1.27 change in PR 115096 to serve these requests from underlying storage is still desired despite the impact on watch stability, it can be re-enabled with a WatchFromStorageWithoutResourceVersion feature gate. (#123935, @serathius)kubelet-finalize phase of kubeadm init no longer requires the kubelet kubeconfig to have a specific authinfo. (#123171, @vrutkovs)SeparateCacheWatchRPC feature flag to disable this behavior. (#123532, @serathius)QueueingHint implementation for NodeUnschedulable due to potential scenarios where events that make Pods schedulable could be missed. (#122288, @sanposhiho)StorageClass to Persistent Volume Claims (PVCs) with an empty storageClassName.
(#122704, @carlory)v1.33.0 to resolve CVE-2024-24786. (#123758, @liggitt)kubectl logs <pod-name> and the pod is not found, the error message now includes the namespace. Previously, the message would be "Error from server (NotFound): pods "my-pod-name" not found". Now, it reflects the namespace in the message as follows: "Error from server (NotFound): pods "my-pod-name" not found in namespace "default"".
(#120111, @newtondev)--authorization-mode when --authorization-config is provided (#123654, @LiorLieberman)ValidateVolumeAttributesClassUpdate also validates new VolumeAttributesClass object. (#122449, @carlory)kubectl create token duration.
(#123565, @ah8ad3)getStorageAccountName warning messages.
(#121983, @andyzhangx)leader_election_slowpath_total was added to allow users to monitor how many leader elections are updated non-optimistically.
(#122069, @linxiulei)ConsistentHTTPGetHandlers to default.
(#122578, @carlory)client-go/metadata to contextual logging.
(#122225, @ricardoapl)RemoveSelfLink.
(#122468, @carlory)ExpandedDNSConfig.
(#122086, @bzsuni)KubeletPodResourcesGetAllocatable.
(#122138, @ii2day)KubeletPodResources.
(#122139, @bzsuni)MinimizeIPTablesRestore.
(#122136, @ty-dc)APISelfSubjectReview has been removed, and the feature is unconditionally enabled.
(#122032, @carlory)etcd to version 3.5.12.
(#123150, @bzsuni)v1.29.0.
(#122271, @saschagrunert)v0.7.0.
(#123504, @pacoxu)kubeadm completion error message now displayed supported shell types when an invalid shell was specified.
(#122477, @SataQiu)/healthz endpoints to return OK. The kubelet and API server checks no longer ran in parallel, but one after another (in serial).
(#121958, @neolit123)APIServingWithRoutine=false (#120902, @linxiulei)PV on reclaim policy when it is Recycle. (#122339, @carlory)azureFile in-tree storage plugin. (#122576, @carlory)v3.5.12 has been built. (#123069, @bzsuni)bridge-nf-call-iptables=1 and bridge-nf-call-ip6tables=1 preflight checks are removed since not all the network implementations require this setting, network plugins are responsible for setting this correctly depending on whether or not they connect containers to Linux bridges or use some other mechanism. (#123464, @SataQiu)ttlSecondsAfterFinished to automatically clean up the upgrade-health-check Job that runs during upgrade preflighting. (#122079, @carlory)LegacyServiceAccountTokenCleanUp to GA and locked it to default. (#122635, @carlory)ExperimentalHostUserNamespaceDefaultingGate in 1.30. (#122088, @bzsuni)IPTablesOwnershipCleanup in version 1.30. (#122137, @bzsuni)ProxyTerminatingEndpoints. (#122134, @ty-dc)--cidr-allocator-type option set to CloudAllocator for kube-controller-manager will be deprecated and removed in a future release. Users are advised to transition to and explore the available options provided by their external cloud provider. (#123011, @dims)LegacyServiceAccountTokenTracking (GA since 1.28) is now removed because the feature is unconditionally enabled. (#122409, @Rei1010)kube-dns to v1.22.27. (#121736, @ty-dc)v1.4.0. (#122178, @saschagrunert)v1.23.0. (#123310, @bzsuni)kube-proxy nftables mode is now compatible with kernel 5.4. (#122296, @tnqn)storage_cluster_id for apiserver_storage_size_bytes metric (#124283, dims)STABLE (#123342, @logicalhan)| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 4834d393925d329bb5de6e23a82b1e632595e1323495d2bf7a27842c8a1f350cf8d5800880241db27b5fdbaba850113a18276690ffad6286cfe6d7765307d3d4 |
| kubernetes-src.tar.gz | d361a5042c0b3124da9f3d4e0c88b29ab201da5ca115b0d1e8d1da9422458b7381382ba42ab57addb61f79115087e1c35f1c9b1eea932dc5f0bdedf0a6634b28 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 2d7867965ad4a50b3c139863c1915addc04a1e8c76018857dc89d82950be26d1eb763b9622839fd99223d920b708cf2f730a5ff95352e763bf47b561547285f6 |
| kubernetes-client-darwin-arm64.tar.gz | 45d3b3495b28aed600b58518c43bdc72a1d96e67b504198faab79a598181c7f33bf565625b4282d74d279a7c82508aaafad69341d627285b5988516797068c04 |
| kubernetes-client-linux-386.tar.gz | c4629a88e5b51442ff88788b191e0bbf7fa3299400a6ef761f2c08f65682b1c8c79de8c229cb92a37f905f6f8aaa4aa658a1effd5ad4103dc77e5e92791784f4 |
| kubernetes-client-linux-amd64.tar.gz | 60df082e84b43a32da13f9934c4e129a088373f08bd78d9cf15ab3e88987f4be03dc26c11c68f57e126cf8723418077dcaef502ace3dc4ee3cad94bb8da44627 |
| kubernetes-client-linux-arm.tar.gz | 6ed4749434f54e0c661d1bd802f7de9b3063cd6621b13740e7d94367fd9c74ade82b8fc7702532ceee3b364db20ab180df983f2475efea04916287ca39c15179 |
| kubernetes-client-linux-arm64.tar.gz | b28c136862aed282e1896c55c0810358d04c27738c94de3d85cfd51e290158d158aa163f2765033db7f283571b3c4432eb40a86169f4732bd6a2c0224fcc3643 |
| kubernetes-client-linux-ppc64le.tar.gz | d489d34710458d609f1519268ab0dd4f03b770468f5f3d2dbc8f55ad8626a4e7b5d625077f1c0e2f44c9571352d9ceecd11ff67072594dd9b7e997112f8d4e85 |
| kubernetes-client-linux-s390x.tar.gz | bb43c82e4bfe267ec55c0c817139b738e94230744fd5893220cc44d062274df03f4662301e44bd811cf1f918c4c00d09bed8bd7f7f6f0c809c40278ea8fd019b |
| kubernetes-client-windows-386.tar.gz | ce532ff54e1c6a499868b9840248a09353ff8de18d3b53e1dae1a2efbd7886adeaa204dffd2ec9213694598829c7c99ed1980e7942201f923e820ae6641d3e48 |
| kubernetes-client-windows-amd64.tar.gz | d848ce0f9e0de9d44b2e3c4d2fab622ebab2229d248bf8a7d4c79d44c56f7f55e04436d94a693ef5279514908e6a50b515d255f9b65f9fa3a196f30530e6f30f |
| kubernetes-client-windows-arm64.tar.gz | 11436d4485752a5ac1b7a7669abe737242da7014b6128a34f3e3dda749ff94a7700195e3ccafc314019012d44bd29b8e2a51a5a94aef423f668a46ce08b353cf |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 2fb5914a0cecd59dd9f6ccca46967f1a3718b8dfd9d66d48c27c5b5d4b5431c99e0e4004ee4ddb9a6009a9569fc2d273bb23572792e5a414af54e6738835e934 |
| kubernetes-server-linux-arm64.tar.gz | b9fc3029ed742ee5ec78bb7c01d12377a6e9c9bb56173a2cbd80293edac97a27eaa1ca8cb72a8417a767eb9901e8ef7e92cdc6dd6973be1529038b486c88a300 |
| kubernetes-server-linux-ppc64le.tar.gz | 5f1461ef401fe6e967787600d3c4aa9c31e673a237bd2cf94e57171bc3fb1f5acaedc4667480f6e495f1cc02be5e824373df22e3b551b938f58dd1bbfd95fe8e |
| kubernetes-server-linux-s390x.tar.gz | a4a39cb9a6ae2319a57a23a2fd9e3f6e5692da5e9a8f7094ca3868b3522141d071517ea4b9cc572c28ecc61b8866375c459fa934ab466521560fa613fc4f3168 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 8c168b82df1341217c9264c7f7c3cf64d8eb360c4a70ba50dcc45a4626b66ba08526a10e5e427fece2dba7223515574a5fe0eac68257a232e75c5cc5532b8c24 |
| kubernetes-node-linux-arm64.tar.gz | 7a516522e2f1ac25ce6fe57ff6b311afbacf992b5dc1b34c54606640868bf49a10fdc56ba26161ed10ce8f520125a62333f69535c0fa59715872fb30d159c27e |
| kubernetes-node-linux-ppc64le.tar.gz | f0e66ebe8f7ba0c8580482ce7346a3c315ed2cefd6383ed3369e1af00ae271ad245b709f91f53387aaa5c47b3f593df62c47e28eac10841e8384b1444a627da8 |
| kubernetes-node-linux-s390x.tar.gz | ba14ed098f72ba4b79d1c5f1981439160f0453dd95c840e3aad917ab92cc8c0aef0c6d13215646a9abbceb5baf1dac074b2a591c1fd649a86b1a896075b28504 |
| kubernetes-node-windows-amd64.tar.gz | c5b79e9ce7b61965e87da52ef8b61deed546ea6ec7629fb81be0d025e9869c19b0f1ecc83a110eee15f2100c03b2325e926d4afcec18915aa4b166a61a2da211 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | ae0a262dd4c5893c3141b9976ef0ff9510db1abf21ed2492c4b37e531f8e8577b3fc589ed35e04da067f2a51690785f803700b3cd14482879bbacac8062d842c |
| kubernetes-src.tar.gz | e23b1e1b0e56c7c21b215fa693acf1c6023b97e6971d17e40dd9b7401f7011f3cfd0535a8e0bf8c15b3cc1542f338fc717ad1123757950442c4e26e1cf94ac60 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 4aa22e689797607899922552c73fd0b219894bfc89a97afabafe3710f4c1b6c332a3fbba47ffa0709a875f6138557f7f8eec0785d70caf4e968f9bdb69d1ce33 |
| kubernetes-client-darwin-arm64.tar.gz | 4b89957e5c668db48545f1d64d12e1c53f624f7ca5d992409cf63f571f2b717328cbc5545103adaa813f9cff1cca24f8acadeeceab4c025f102371a8c5c848f4 |
| kubernetes-client-linux-386.tar.gz | fa676d36ead1cc36e4a21a8fc150b5d97b148ea38c5e450c23a541968dc46f771875c028dbdb525555cdf976ed39cea69fad9ad6ab350e0471a79edb453cc4bc |
| kubernetes-client-linux-amd64.tar.gz | 0470f761e42a12808a87763139162203dd9a282793c4f2f38e34ba624b987a18ce6a021b47fec3f422ef3673358128e68f02bd215de94a0c88036275a1933851 |
| kubernetes-client-linux-arm.tar.gz | ba6e5983681d288bb689f9ea70631d303b9d293ff61ca53543da5b987e8447e68657dc318ddec35e9f91a6a96b96924f038875d0df59de6b96ada5d539ccfdf0 |
| kubernetes-client-linux-arm64.tar.gz | 498eacde178389d2cc74a7ce10afdf779d18262d7bde9a09a71b432b654b81b4a9a9a6b59d23556825013c20f9bf50511399dc24d2c8744f89651330e0502527 |
| kubernetes-client-linux-ppc64le.tar.gz | d3d0d61cf0d41ba64b2551fb33fc05f36cb6ff78883ff777f5947e4e02c0fa81fcc1a1dfda52b83535b57ba9d9b50607ad4ae0b78a7df937ae77f4198d1140ce |
| kubernetes-client-linux-s390x.tar.gz | 19ee977f0e42d9592e11d2fa2d387561ef64b5291a893edce199679eaf50bffdda3c630b393495f6b2479abcde2d45da267abe82a3c72cd1db57710af68e34bf |
| kubernetes-client-windows-386.tar.gz | ceaa9fdca37e589aee36f5f76e861fdb02d3499fac40030837281500ccd521d2bea6e2fab1cc6e88b835e9bc97a87fd89f50edcec4d5180f21779b6fda5864e0 |
| kubernetes-client-windows-amd64.tar.gz | 020badd82b7809341619a132937a63d03595efa6bb360578899b6c70c272686dd2cc73bc9156185cf5b2c56d8c4fccab348b7e2e194e636fb3b0aaebb4dbf54a |
| kubernetes-client-windows-arm64.tar.gz | 60ec37789304fc9dc4dcb42adfbeb79ec1092e112a6b804dd90ab60f0bfc12cbb705d78596a44e58322cdbf02c9100814f08ab296b393621872f5000a0e61e84 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | d6226ac429c8118998c4bb9e7a5dad33239f7174710b19c15c1700327a8994f877f74d16e02adb72ac0ca2f9533774f17480f99b6215f0c1ad196cbbd869d19d |
| kubernetes-server-linux-arm64.tar.gz | 93cf320848a3999550c813fc09d26b692043d35ea04bd2238ba40044334447f04d44c920edbd1c329128dd336a4fec6c98808058c9600a438145b954ca83a825 |
| kubernetes-server-linux-ppc64le.tar.gz | 69bfd86f9160a5eac40ffbca918caa2ab9404cbc675f12f2d0bb1ecde84f3445aa78ba626745863e5eeefb6ae31579f1bda7c893b068d1cff789dbaedcfb415d |
| kubernetes-server-linux-s390x.tar.gz | 821ddbfa7c170e591e0129b59f5132f24e87ec3aff6e72643bca2c5e2aef2521fcfa9a09c42e6ce80c1c1b66c61e4b3a36326bd4849988604e3ba59e786000bd |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 350901333780cb449a9b8d6c01d00e2447a1db370d693d6e64181edc7fbf8101b4aca71cdccccd8e9d39d505da3b587df095305a91b79be9933a0e77662ac5f5 |
| kubernetes-node-linux-arm64.tar.gz | fb977f5a2e7b93cbb66f90d6fbe7f79189b1c7abf012df60032aa0954a380f648f1ee7a0c35eb253f002b398782693b3dda4cbf63a79b9fa12517f511488cc9b |
| kubernetes-node-linux-ppc64le.tar.gz | ec0faab2ec6b3abcf5ec45d21422e206bb20e1cabbfb0d124e561b0b1a7f6f93e65197a851bb494f149ae008aa161f7dc8ab199f8283e21a46d4fc0ce322bcb9 |
| kubernetes-node-linux-s390x.tar.gz | 89a0cce40824d0b7a2e48fcd1a1c02615e42d3873e2baaac44137f5887778383818897fa92818bab3e93b600cff7d5142cf0f72fdacc1d5a323f363220ade1c0 |
| kubernetes-node-windows-amd64.tar.gz | 1c55187e74dfde31e5c45204d4a8e5fb86dbc187fc96d7fe1f71ffce61b8c608cad5f06762eb47eed79011204dcae8caf92e55b5abfc4af164b375e6c9650169 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | e6b5adbfa00a7f36c6e3fbe1fac98264ba364d1bb212d1af8409e28f9fa4a73465ab45f13835c2a069cba9e92916e0ffcbb821cbe16c56d1772bd092f5509209 |
| kubernetes-src.tar.gz | 2fb6a5f8db7a1251a5cbdebe07008ce1ab328caf7d89f9e63cb54cf961905194eaf6cca0e3fc4ba381fca92366cfa7f33ad53966c9483496b8b1905ae852f794 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 8b3f64eb99652dc0868dfc1686e1240c91d103d87802940b614b79ac5a965cae49a7ce207ca4758e72e027f2cbd35d01866d2a6e5ecc3dbf8098b6bbd3b96560 |
| kubernetes-client-darwin-arm64.tar.gz | a2d8f7cfda53940e2c804be4d070aa7675c35fb3bc102aa235dbd33eed2a5aaa6cb34a67e89ac4dff70fb67eae7ce56c6761bcb5695247d755a8401ce23d9e70 |
| kubernetes-client-linux-386.tar.gz | ad9c3302781496b332f74de97c5034afe265005b779c5ddf8294e0c89d3e01edf0f55963b823821a94f3f852d1ce453c5a2c8234d0d17e2e41cfa1ebe400ded6 |
| kubernetes-client-linux-amd64.tar.gz | c64e2acaa2f4bc072ff407b5fbd59fff683524b6302501130c74291cd2981a04b70598102d47276d6cf135d63649b0c4e935989d76b5f1d14fa86d84cf138530 |
| kubernetes-client-linux-arm.tar.gz | 6e273ed9eb3a73772f24d2a2de6faaec45d860ee721627e457b4f431d30bbd54128a018a66e8914c13ed1d0bcea19daf4022410e9e02e6a8ba74771523df8859 |
| kubernetes-client-linux-arm64.tar.gz | 6d873fdfe0cddfe7f64e501f34410d55bc42d1e3dfdaf09fb77b800e16026e8ef56cbe47788d7c26540a56c139743825b62f4b5d1817a083c6c4e5957714b02b |
| kubernetes-client-linux-ppc64le.tar.gz | 2a85913a7950b0556ef3ca60b90e0488d98208b39c7c726ab0e2be92ef21b5d3fc66bbcf3a53d758867445acdf2a7069a35530fd09bdb7df9a11ff054bd7666b |
| kubernetes-client-linux-s390x.tar.gz | 51c44df26ca635a9f8d4ccaefd9f73ce7eb140dc9c97dcf20790942a052873fef068fcf5341dcb603fc090d4d55639fd1c962e849aee900334ec18deac83b0e8 |
| kubernetes-client-windows-386.tar.gz | 53b422d9d7ddf68c307b3c582293fa10d1bc93ea5ab05ad0551782e89e207436947a66db3020d649978745d3d669b492382e124a01f8102c5487e5d712781c79 |
| kubernetes-client-windows-amd64.tar.gz | d2a07e65ea1c86f177081932723a404295c2011baeb3c1a8da82f95165d912af3c7dc5fb2f1f99071da43747ef21a9070715b011adbbd0fe1dfe61d3e58f3af5 |
| kubernetes-client-windows-arm64.tar.gz | 90a6b2afabc327c5149e3337361c642ce7ea1cf9cbd7eecca0244d93a8ae76ed647ddb5ade005dc7965d27081346c8af70a0c3b3ccf84364a99225fed2d3c655 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | ac9cfc068f4ccf6cade570fcf06eb318254b05a6ba35c953281f2fe23f21649745199d252078301e078301906ef10e995fab1d99b9d1ed85a5640bcad87f5f72 |
| kubernetes-server-linux-arm64.tar.gz | 06d34cb5ed5931008259aa11cb3fe5b8d055f984ace62ddc1e1f6aa700ebd1cb9b4fad13977cd93c20207c7119748f10f7c84be097d1fea6b9500b1148f9009f |
| kubernetes-server-linux-ppc64le.tar.gz | da7df0c17a60fcfa302b7a6445f194af300152641e2a0c6c9c88ebc130d276543994d6fa82d012caad4d850be37d5dbb25d2816fc20129e575ff12945da09ea3 |
| kubernetes-server-linux-s390x.tar.gz | cabc0e81aecd3616454834eba63bb1a7dfb5058095c8854ee8ecf90512201525cf4957ffe4ea33e7029f90f4cf8bb6a455d4580f112695e9afdb3168a8f8339e |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 908f4145b9a44e7191a6385029bd05fc10ae70314c2342491ebc618340727dd9578bee0ea904a59dcfe569a1f346d9d1d9e3591bd64e0d93aa2aa23c5bb6bae2 |
| kubernetes-node-linux-arm64.tar.gz | 4a8227aa5f3792e15afdd773b6e25f610af8790f0024766bb946f01d643628e341c5d05f877acc862435abcd23af17d83f3c6a8846ba5182078d253846bf5548 |
| kubernetes-node-linux-ppc64le.tar.gz | d9401943959a8f5cc96806ec4986394ece3fd12b3b9b98815190b573ddd88558eae37a263246d2d8032110f9876bf7d8339a740b0e998a7df70f3c55fddaa48f |
| kubernetes-node-linux-s390x.tar.gz | cad41da775fc3325962d0181a5a7ae4b3b4a80ef65d3bea06a939306e6e6da3d5f165ee27d991524520b5778e01c481655a9bd3302c0ce5b3443612eaaa4914e |
| kubernetes-node-windows-amd64.tar.gz | 9b70bb3c6d65b0d2cfadcca3104a832d3072a0c7931bacfca4bd620dc40dc66d6960c16a1ccb6a06f0a82b3a6b37453069d60de91e9615ecb816a6411a192a6e |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
WatchFromStorageWithoutResourceVersion feature gate. (#123935, @serathius) [SIG API Machinery and Etcd]Nothing has changed.
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | e83f477aed051274437987d7b3fa30e923c04950c15d4a7bec20e87f54c017d5938a8d822885b0b458e31c692cade1d26567ac10ffa90934ed15890516376236 |
| kubernetes-src.tar.gz | a32078a0547d093bbf7d1c323d89cbe50fa04c8d98fe9f0decf2be63d206ad11872009971fd9937336f6a7a187294b058e441297a2ae8d7620d77965ad287ecc |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 948db15a9905704d08517c530f903d321103ba2c863c307d5afaa06036aa4ebca24e8674187399f9a92210e58eb7db8e0b46c7dc9f6abada19fcf64334c1ebf6 |
| kubernetes-client-darwin-arm64.tar.gz | 67312baa29835f99ca81e3f241e4f08d776ac606364b4bfbe4bdfb07b1c0a7efdb68bd2b279e07816a7779b560accf4d70e71bbae739326c19844f33c25e97f5 |
| kubernetes-client-linux-386.tar.gz | 0d83df79b845d22e7a0cb98a51b0f4d5e3b3c4558aea128cde5c16c0a1076096dd64569bed4485a419a755d72ba2ac27a364b0dc31319abfe1fbbc01a9b9b9eb |
| kubernetes-client-linux-amd64.tar.gz | 6dc7c48f7418c2375a2c0b264005aff04dca88fb6b2607b71acd5083f7ef62d907b4cdcc6353615855e675f2575fdddce0e010e994553e380ce45fd76f33a7f0 |
| kubernetes-client-linux-arm.tar.gz | 98988fc90a23a5ef6e552192f44812858cb33e01378806a53853409d15927bc153b422f67563f81bb0eb0807584b08376ea76e584c5ab9faf5fab15ff73f9298 |
| kubernetes-client-linux-arm64.tar.gz | aadab5f9253cd313a85575a1c39d4b06966826b0e76ac1b647736dadc9545b57a9a3c9663528f13fb9432e3ca4c8a59698cf445f81402d7d3fbca76f5268d2b5 |
| kubernetes-client-linux-ppc64le.tar.gz | 710bfde17dc991a4e5a233e26ca55dcbd021e75d10d70dbdba71ad791235dbe6607322b97bd3f22eb3e4d843eefdc8f38d1f0b28fac0ce0743fb063135a136c9 |
| kubernetes-client-linux-s390x.tar.gz | b036defee013a7187eeade78df0ab4dd221da347602cd33f977560fb89b27b82ecd7c2a9df1b63c3cef786c36ea054b735ef31fc9ad0fc4af980542a520375ef |
| kubernetes-client-windows-386.tar.gz | dd4f20363812d781f9a4d7e985285418ddfd05b8ba05fd1c07c0ebbb2b3df1b940a8d57472a9b0647a6f71498be28cd8d8b71500a5576dbf7e8c3d8902b9005c |
| kubernetes-client-windows-amd64.tar.gz | 29f71f746dc3987d0187f6039b5e9c897b790c5f31882f7d3d6b138a592e384981856ced87c7cd892574566735d4c9f8972b90cd8a3370adf298f289ce32fc9d |
| kubernetes-client-windows-arm64.tar.gz | 805d8c10e562e45553f1a0978814924e3df5fc244868d20de77d8eea2e978ce524b4d87c5bd06a6250f087237db8566aa46edf6253e47b5b8f2651b14eb6ccdc |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 8332ba0e47eece25af1864fe95849cabe5a208a48e5b8b4d311c545244ae1d05f0569b51f12887e97d8288ab80bc57044490153325e4af43082a65097579ded5 |
| kubernetes-server-linux-arm64.tar.gz | e215b58ac54169d50e9a0247b08de1255990c77bdc80838dc226f165aacb84bd46605c3e3102a23ef590548b431a74bf9e3547fa24f3b5f84de4d68ba32965cb |
| kubernetes-server-linux-ppc64le.tar.gz | d71917d0853b448b1541b4a437a40caef3624a2dacaafb918b2f3679fbb68b94a44ac3d13bcc7b5f6adbf65913342777af39b65b31742bf5c130893d47b65f10 |
| kubernetes-server-linux-s390x.tar.gz | d347add21100106c7fc057cfe0ac940fd0f80741faff9b9dc6093d3c99db17abf29b7cd713cd91f728cc1dae217ac9ad2446801f3f92c9aa18291829497aae01 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | c853ce453e49aa520e20c934849eeeca4e841d49c94bbd8951d94ebade34ed92aecc841715023e0853f23d78e9bb884d5234d790a5ffe9a9a2fa580114bd849c |
| kubernetes-node-linux-arm64.tar.gz | 91a8de520f17062f4680d7b0a7f8073cabbc0996010d4ecc0d907d0bc89bd8641bef1ace3f5d5c050ffa30ce6dec1019b80ee5acea1e3d947666a5bac826b466 |
| kubernetes-node-linux-ppc64le.tar.gz | ed17879b3b43183f5a537a1bad44a56140f809f182f131dbf95b4cbd4c91d90d79016d1c6fd108025a756f408c2dee68d5c458df29b4891a7b598fa41a119a94 |
| kubernetes-node-linux-s390x.tar.gz | bbbcde49cfa7dd52560865816b2c0ac92ce1e7d9a5bf17cce979adecc1b258f13cd07118e0b6c1959cca102c172ec8c950e14207d352b943d14153bb5f864555 |
| kubernetes-node-windows-amd64.tar.gz | 952472d1b65a7b647d6e3f661ea36c975cf82482c32936ea2aa11ae0e828237391e7ae97d5b8a65b194178953c7725b092027ee545439a754e28702e60383e70 |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
A new (alpha) field, trafficDistribution, has been added to the Service spec.
This field provides a way to express preferences for how traffic is distributed to the endpoints for a Service.
It can be enabled through the ServiceTrafficDistribution feature gate. (#123487, @gauravkghildiyal) [SIG API Machinery, Apps and Network]
Add alpha-level support for the SuccessPolicy in Jobs (#123412, @tenzen-y) [SIG API Machinery, Apps and Testing]
Added (alpha) support for the managedBy field on Jobs. Jobs with a custom value of this field - any
value other than kubernetes.io/job-controller - are skipped by the job controller, and their
reconciliation is delegated to an external controller, indicated by the value of the field. Jobs that
don't have this field at all, or where the field value is the reserved string kubernetes.io/job-controller,
are reconciled by the built-in job controller. (#123273, @mimowo) [SIG API Machinery, Apps and Testing]
Added a alpha feature, behind the RelaxedEnvironmentVariableValidation feature gate.
When that gate is enabled, Kubernetes allows almost all printable ASCII characters to be used in the names
of environment variables for containers in Pods. (#123385, @HirazawaUi) [SIG Apps, Node and Testing]
Added alpha support for field selectors on custom resources.
Provided that the CustomResourceFieldSelectors feature gate is enabled, the CustomResourceDefinition
API now lets you specify selectableFields. Listing a field there allows filtering custom resources for that
CustomResourceDefinition in list or watch requests. (#122717, @jpbetz) [SIG API Machinery]
Added support for configuring multiple JWT authenticators in Structured Authentication Configuration. The maximum allowed JWT authenticators in the authentication configuration is 64. (#123431, @aramase) [SIG Auth and Testing]
Aggregated discovery supports both v2beta1 and v2 types and feature is promoted to GA (#122882, @Jefftree) [SIG API Machinery and Testing]
Allowing container runtimes to fix an image garbage collection bug by adding an image_id field to the CRI Container message. (#123508, @saschagrunert) [SIG Node]
AppArmor profiles can now be configured through fields on the PodSecurityContext and container SecurityContext.
Conflicting issuers between JWT authenticators and service account config are now detected and fail on API server startup. Previously such a config would run but would be inconsistently effective depending on the credential. (#123561, @enj) [SIG API Machinery and Auth]
Dynamic Resource Allocation: DRA drivers may now use "structured parameters" to let the scheduler handle claim allocation. (#123516, @pohly) [SIG API Machinery, Apps, Auth, CLI, Cluster Lifecycle, Instrumentation, Node, Release, Scheduling, Storage and Testing]
Graduated pod scheduling gates to general availability.
The PodSchedulingReadiness feature gate no longer has any effect, and the
.spec.schedulingGates field is always available within the Pod and PodTemplate APIs. (#123575, @Huang-Wei) [SIG API Machinery, Apps, Node, Scheduling and Testing]
Graduated support for minDomains in pod topology spread constraints, to general availability.
The MinDomainsInPodTopologySpread feature gate no longer has any effect, and the field is
always available within the Pod and PodTemplate APIs. (#123481, @sanposhiho) [SIG API Machinery, Apps, Scheduling and Testing]
JWT authenticator config set via the --authentication-config flag is now dynamically reloaded as the file changes on disk. (#123525, @enj) [SIG API Machinery, Auth and Testing]
Kube-apiserver: the AuthenticationConfiguration type accepted in --authentication-config files has been promoted to apiserver.config.k8s.io/v1beta1. (#123696, @aramase) [SIG API Machinery, Auth and Testing]
Kube-apiserver: the AuthorizationConfiguration type accepted in --authorization-config files has been promoted to apiserver.config.k8s.io/v1beta1. (#123640, @liggitt) [SIG Auth and Testing]
Kubelet should fail if NodeSwap is used with LimitedSwap and cgroupv1 node. (#123738, @kannon92) [SIG API Machinery, Node and Testing]
Kubelet: a custom root directory for pod logs (instead of default /var/log/pods) can be specified using the podLogsDir
key in kubelet configuration. (#112957, @mxpv) [SIG API Machinery, Node, Scalability and Testing]
Kubelet: the .memorySwap.swapBehavior field in kubelet configuration accepts a new value NoSwap and makes this the default if unspecified; the previously accepted UnlimitedSwap value has been dropped. (#122745, @kannon92) [SIG API Machinery, Node and Testing]
OIDC authentication will now fail if the username asserted based on a CEL expression config is the empty string. Previously the request would be authenticated with the username set to the empty string. (#123568, @enj) [SIG API Machinery, Auth and Testing]
PodSpec API: remove note that hostAliases are not supported on hostNetwork Pods. The feature has been supported since v1.8. (#122422, @neolit123) [SIG API Machinery and Apps]
Promote AdmissionWebhookMatchConditions to GA. The feature is now stable and the feature gate is now locked to default. (#123560, @ivelichkovich) [SIG API Machinery and Testing]
Structured Authentication Configuration now supports DiscoveryURL.
discoveryURL if specified, overrides the URL used to fetch discovery information.
This is for scenarios where the well-known and jwks endpoints are hosted at a different
location than the issuer (such as locally in the cluster). (#123527, @aramase) [SIG API Machinery, Auth and Testing]
Support Recursive Read-only (RRO) mounts (KEP-3857) (#123180, @AkihiroSuda) [SIG API Machinery, Apps, Node and Testing]
The StructuredAuthenticationConfiguration feature is now beta and enabled by default. (#123719, @enj) [SIG API Machinery and Auth]
The StorageVersionMigration API, which was previously available as a Custom Resource Definition (CRD), is now a built-in API in Kubernetes. (#123344, @nilekhc) [SIG API Machinery, Apps, Auth, CLI and Testing]
The kubernetes repo now uses Go workspaces. This should not impact end users at all, but does have impact for developers of downstream projects. Switching to workspaces caused some breaking changes in the flags to the various k8s.io/code-generator tools. Downstream consumers should look at staging/src/k8s.io/code-generator/kube_codegen.sh to see the changes. (#123529, @thockin) [SIG API Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Storage and Testing]
ValidatingAdmissionPolicy is promoted to GA and will be enabled by default. (#123405, @cici37) [SIG API Machinery, Apps, Auth and Testing]
When configuring a JWT authenticator:
If username.expression uses 'claims.email', then 'claims.email_verified' must be used in username.expression or extra[].valueExpression or claimValidationRules[].expression. An example claim validation rule expression that matches the validation automatically applied when username.claim is set to 'email' is 'claims.?email_verified.orValue(true) == true'. (#123737, @enj) [SIG API Machinery and Auth]
Added access_mode label to volume_manager_selinux_* metrics. (#123667, @jsafrane) [SIG Node, Storage and Testing]
Added client-go support for upgrading subresource fields from client-side to server-side management (#123484, @erikgb) [SIG API Machinery]
Added apiserver_watch_cache_read_wait metric to measure watch cache impact on request latency. (#123190, @padlar) [SIG API Machinery and Instrumentation]
Adds new flag, namely custom, in kubectl debug to let users customize pre-defined profiles. (#120346, @ardaguclu) [SIG CLI]
Bump cAdvisor to v0.49.0 (#123599, @bobbypage) [SIG Node]
Embed Node information into Pod-bound service account tokens as additional metadata
Feature gates for RemoteCommand (kubectl exec, cp, and attach) over WebSockets are now enabled by default (Beta).
Graduated HorizontalPodAutoscaler support for per-container metrics to stable. (#123482, @sanposhiho) [SIG API Machinery, Apps and Autoscaling]
Graduated forensic container checkpointing KEP #2008 from Alpha to Beta. (#123215, @adrianreber) [SIG Node and Testing]
In the Pod API, setting the alpha procMount field to Unmasked in a container now requires setting spec.hostUsers=false as well. (#123520, @haircommander) [SIG Apps, Auth and Testing]
InitContainer's image location will be considered in scheduling when prioritizing nodes. (#123366, @kerthcet) [SIG Scheduling]
It is possible to configure the IDs that the Kubelet uses to create user namespaces.
User namespaces support is a Beta feature now. (#123593, @giuseppe) [SIG Node]
Kube-apiserver now reports latency metric for JWT authenticator authenticate token decisions in the apiserver_authentication_jwt_authenticator_latency_seconds metric, labeled by jwtIssuer hash and result. (#123225, @aramase) [SIG API Machinery and Auth]
Kube-apiserver now reports the following metrics for authorization webhook match conditions:
apiserver_authorization_match_condition_evaluation_errors_total counter metric labeled by authorizer type and nameapiserver_authorization_match_condition_exclusions_total counter metric labeled by authorizer type and nameapiserver_authorization_match_condition_evaluation_seconds histogram metric labeled by authorizer type and name (#123611, @ritazh) [SIG API Machinery, Auth and Testing]Kube-apiserver: Authorization webhooks now report the following metrics:
Kube-apiserver: JWT authenticator now report the following metrics:
Kube-apiserver: the StructuredAuthorizationConfiguration feature gate is promoted to beta and allows using the --authorization-configuration flag (#123641, @liggitt) [SIG API Machinery and Auth]
Kube-controller-manager: increase the global level for broadcaster's logging to 3 so that users can ignore event messages by lowering the logging level. It reduces information noise. (#122293, @mengjiao-liu) [SIG API Machinery, Apps, Autoscaling, Network, Node, Scheduling, Storage and Testing]
Kubeadm: add the WaitForAllControlPlaneComponents feature gate. It can be used to tell kubeadm to wait for all control plane components to be ready when running "kubeadm init" or "kubeadm join --control-plane". Currently kubeadm only waits for the kube-apiserver. The "kubeadm join" workflow now includes a new experimental phase called "wait-control-plane". This phase will be marked as non-experimental when WaitForAllControlPlaneComponents becomes GA. Accordingly a "kubeadm init" phase "wait-control-plane" will also be available once WaitForAllControlPlaneComponents becomes GA. These phases can be skipped if the user prefers to not wait for the control plane components. (#123341, @neolit123) [SIG Cluster Lifecycle]
Kubeadm: print all the kubelets and nodes that need to be upgraded on "upgrade plan". (#123578, @carlory) [SIG Cluster Lifecycle]
Kubectl port-forward over websockets (tunneling SPDY) can be enabled using an Alpha feature flag environment variable: KUBECTL_PORT_FORWARD_WEBSOCKETS=true. The API Server being communicated to must also have an Alpha feature flag enabled: PortForwardWebsockets. (#123413, @seans3) [SIG API Machinery, CLI, Node and Testing]
Kubernetes is now built with go 1.22.1 (#123750, @cpanato) [SIG Release and Testing]
Node podresources API now includes init containers with containerRestartPolicy of Always when SidecarContainers feature is enabled. (#120718, @gjkim42) [SIG Node and Testing]
Promote ImageMaximumGCAge feature to beta (#123424, @haircommander) [SIG Node and Testing]
Promote PodHostIPs condition to GA and lock to default. (#122870, @wzshiming) [SIG Apps, Network, Node and Testing]
Target drop-in kubelet configuration dir feature to Beta (#122907, @sohankunkerkar) [SIG Node and Testing]
The Kubelet rejects creating the pod if hostUserns=false and the CRI runtime does not support user namespaces. (#123216, @giuseppe) [SIG Node]
The watch cache waits until it is at least as fresh as given requestedWatchRV if sendInitialEvents was requested. (#122830, @p0lyn0mial) [SIG API Machinery, Network and Testing]
ValidatingAdmissionPolicy now exclude TokenReview, SelfSubjectReview, LocalSubjectAccessReview, and SubjectAccessReview from all versions of authentication.k8s.io and authorization.k8s.io group. (#123543, @jiahuif) [SIG API Machinery and Testing]
kubectl get job now displays the status for the listed jobs. (#123226, @ivanvc) [SIG Apps and CLI]
map()
operations, (e.g. .map(...).exists(...) ) to have the correct estimated instead of an unbounded
cost. (#123562, @jpbetz) [SIG API Machinery, Auth and Cloud Provider]Always cannot update its state from terminated to non-terminated for the pod with restartPolicy with Never or OnFailure. (#123323, @gjkim42) [SIG Apps and Node]GetInstanceProviderID method will not require the providerID to be set and will not fail to initialize the node for backward compatibility issues. (#123713, @aojea) [SIG Cloud Provider]--authorization-mode when --authorization-config is provided (#123654, @LiorLieberman) [SIG Cluster Lifecycle]| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | adbf45f5a9c6efb135c8632e330e24e46b3ae8179372e96fbc5a016bbe089c629ee86683bdd13254a78c5f37c8576cf2364bca19961087f47c4d11a8605b7a92 |
| kubernetes-src.tar.gz | d1bbeed0aca09cc6df72de4e11bd4f6869a422b947604e2a7fc32cc23f01d8a822719486f0f039ef554012e0896faf6738471412296dea069615fd48be611cda |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | b1aeb5eb6480832c8ef899d7f4a7fd679d317d8704a925b426d97e49022bd4dd7bc661c530f46720d62669b0b6a0be9a94144545852108cb3062eedfd32b70d0 |
| kubernetes-client-darwin-arm64.tar.gz | 13c34d52999172a3b73d3e4eba4029c686a8a6d3a0fa16e81d2fa1b3a9d6f7bdb37de9495fb09f783d8edfea8302e648f71d37b131826c89715baa068d555a16 |
| kubernetes-client-linux-386.tar.gz | 5465059af2ecf092d71d30bd5021e175590bc802c2796c366cf1eedb26fb9927f8bd637784a672242aa351a519ff807126953d6c3b940464d72bb1e46b9fbb43 |
| kubernetes-client-linux-amd64.tar.gz | f00211e115ed1d42fc5794bbdd2f2cf9d78ab28844cf9f3b0d5abe4dcdaedca8ce66fb8045ce8688e05fd9e7b9488fcc40d9a691fc4a529cbeb7909868a092bb |
| kubernetes-client-linux-arm.tar.gz | 1bf579ba6aa68fd2ec6f539a69771c933f1df8c21f3d798d130ea6fa13a4d36919926c4212ff4f67cbc2941099720f2924ae8f5f7feab21f669cbef16a082318 |
| kubernetes-client-linux-arm64.tar.gz | 90da779e19ccdd95673b830c9434e316d7ddd676675ce403fd4858e22e1c5afe3103a6f28c45370ff8847b62a689f279310fb390b3f9140aa77987d437ef44e2 |
| kubernetes-client-linux-ppc64le.tar.gz | 4ecf1e5c8520c4370ad0bbf22ba3d54209224bae573836659fd0c0eca43991700bdcac609baea792a9957b497da9c20d8afa8c5152d8a2e272cca5a93a1f0e95 |
| kubernetes-client-linux-s390x.tar.gz | 174beb0691ccfef8f0ba8fcbc2d7bda9015321b69d38e5ccd87fa0609070d8e194af435f372c76e2b65971bc2c58a053e3c5a97bca29d703305cd125e4ae7f7e |
| kubernetes-client-windows-386.tar.gz | 4815aa9032e2d3d3b7a25bd1c07353ded15eda073a31b3894463e47cde0a9197324947f56f239faa671cf95caeb9c6dd377d38b4672a819f9ef781ca4b64ef18 |
| kubernetes-client-windows-amd64.tar.gz | 40fd08d6827eb182f79cefc80cc31f661aa2800e5a5cdc778f16b30a7f583ff3ee266bef04e042f598fdce34c899e5acba75ea4c5ecd84651215646bbbc15285 |
| kubernetes-client-windows-arm64.tar.gz | 24367addf42cc786aa3b39b51d344df65aa92fc0a4270faa9d733301ecd757d16120c70a54fd8a2d17bbff4c85ed7ff623ed2ece6e6f9a436637aba743b99aa7 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 18bfcd3615789df2361f6acbff9a1407d5891168710264334bc60f8fbbe04dd26d88c96d02f744d2280e91dc550f0df24cd021602dcba2ae28204b1dcf723a1f |
| kubernetes-server-linux-arm64.tar.gz | 3a31aa6b074bb8ebc7fc0200a7c7821931108a572503ff2995460e28d581b3cf7beaa4407232ee22a4a52afc63f40ac549809254693289b12ddd66893f4ab2fe |
| kubernetes-server-linux-ppc64le.tar.gz | ae0602c5aa2565ef2b8afb10d28088be41c1802ed537c1d33a6a2fdba6f5c0e9ca2af8597a64a9c7244a7d2b4d75e0829eeca68f88e2de669f6a6ee7c52897ba |
| kubernetes-server-linux-s390x.tar.gz | ea3466f44bdfb250cff319f4ddf854402bc25492548b290a64b5b4e0b027dbed9e17b04ae03b2ae14cb5e30d31447d19219951dde0f2de03255ab1f6a1c3a531 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 378c42d0640a1b845af7bb46224a19b5451452ce6ee7c4dfdb7e912f3248ec6be35c1679cc78202c548ad91b345d2ce470407db39d50dbb0cd0518a526e4429c |
| kubernetes-node-linux-arm64.tar.gz | a5ec415b0c3fbf3003f354fcf913a9851105963e5ba38c68bdebd8427eabb3f2a1598bc2688133f2ad84229218ebe18171e4a123827b9ffcb94436f69bfb43ff |
| kubernetes-node-linux-ppc64le.tar.gz | 8d9b49c3375a1dbfa24fdc46397f929b2f029a94af9cbe36387a8b22ad80f65711d10df2c5327f25cb4e4c3f91135c2f07b8726198fd8ecf1ee8aef005d2531c |
| kubernetes-node-linux-s390x.tar.gz | 99ded87a16331941cd56076cd50892446b40f09771d938552aeb9d858677bc4564472ac470273b681841c2f061836588813eb6e1065322a9ee9c72f3dfb7d58e |
| kubernetes-node-windows-amd64.tar.gz | 5e9b2b95b4751c125cb3e5182ed2095829af968be3d1e9899f31febb8eaf6dd0b037e8fac48bd51a9100c1f1e90829299c117abc23e40fc66c7d709b83d1222d |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
Added a CBOR implementation of runtime.Serializer. Until CBOR graduates to Alpha, API servers will refuse to start if configured with CBOR support. (#122881, @benluddy) [SIG API Machinery]
Added audienceMatchPolicy field to AuthenticationConfiguration and support for configuring multiple audiences.
Contextual logging is now beta and enabled by default. (#122589, @pohly) [SIG Instrumentation]
Cri-api: KEP-3857: Recursive Read-only (RRO) mounts (#123272, @AkihiroSuda) [SIG Node]
Enabled a mechanism for concurrent log rotatation via kubelet using a configuration entity of containerLogMaxWorkers which controls the maximum number of concurrent rotation that can be performed and an interval configuration of containerLogMonitorInterval that can aid is configuring the monitoring duration to best suite your cluster's log generation standards. (#114301, @harshanarayana) [SIG API Machinery, Node and Testing]
Text logging in Kubernetes components now uses textlogger. The same split streams of info and error log entries with buffering of info entries is now also supported for text output (off by default, alpha feature). Previously, this was only supported for JSON. Performance is better also without split streams. (#114672, @pohly) [SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Storage and Testing]
This change adds the following CLI option for kube-controller-manager:
disable-force-detach (defaults to false): Prevent force detaching volumes based on maximum unmount time and node status. If enabled, the non-graceful node shutdown feature must be used to recover from node failure (see https://kubernetes.io/blog/2023/08/16/kubernetes-1-28-non-graceful-node-shutdown-ga/). If enabled and a pod must be forcibly terminated at the risk of corruption, then the appropriate VolumeAttachment object (see here: https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1/) must be deleted. (#120344, @rohitssingh) [SIG API Machinery, Apps, Storage and Testing]lifecycle_handler_sleep_terminated_total is added to record how many times LifecycleHandler sleep got unexpectedly terminated. (#122456, @AxeZhan) [SIG Node and Testing]MutatingAdmissionPolicy for enabling mutation policy in admission chain. (#123425, @cici37) [SIG API Machinery]--authorization-config file when it changes. Reloads increment the apiserver_authorization_config_controller_automatic_reload_last_timestamp_seconds timestamp metric, with status="success" for successful reloads and status="failed" for failed reloads. Failed reloads keep using the previously loaded authorization configuration. (#121946, @liggitt) [SIG API Machinery, Auth and Testing]apiserver_authorization_decisions_total metric, labeled by authorizer type, name, and decision. (#123333, @liggitt) [SIG API Machinery, Auth and Testing]SELinuxMount can be used to speed up SELinux relabeling of volumes. (#123157, @jsafrane) [SIG Node and Storage]CRDValidationRatcheting feature gate to beta, and made it enabled by default. (#121461, @alexzielenski) [SIG API Machinery and Testing]Add a new internal metric in the kubelet that allow developers to understand the source of the latency problems on node startups.
kubelet_first_network_pod_start_sli_duration_seconds (#121720, @aojea) [SIG Instrumentation, Network and Node]
Nothing has changed.
Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | b6946e906e2d089431132ff4d8e24cb1b61f676f4df09b21b22a472c5aa796513ce8d7c39a312c8c0447ba0bb6cb5c4157c2be7645f91d6cf949a03a01cf9458 |
| kubernetes-src.tar.gz | a339603f532774a24d9dcbde8ebc2188729a469cc670ba5f00a09cf8465f2e00bb364b5f6739d79dfac9d20a7347f495672d2f184cfce73407925e0314633a3b |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | 2930b28b275662ac7a78e6d59539809138b173a930c360a417f429bbcf31e7c3ef0a1a544028c5f81e1972a9f07ac0b459f6c02e97d7c0ccbcaa39ed229ef60a |
| kubernetes-client-darwin-arm64.tar.gz | 6e8131d70116dce503a6800504ac349c9e4f3d359c31821083ceab936b8bd782a5f2e3027b4222fa133b7d27def3b15312fa022eb421ce2b3cfdd89f75300b5b |
| kubernetes-client-linux-386.tar.gz | 9272c915586ab46cd9cef8b7029958e7c9771a0109f83eb0d9991bfe7c0468a5c6d55329e656be9cf13217b6a06875bdde2eec1a870328397a54500836267ab8 |
| kubernetes-client-linux-amd64.tar.gz | fd8d6c83b91b13b80dd2a3000ae11746e664039fcf4bd7f1704dc6e53391e0114ab9d53dee83edb29d54ddd22d6ec042735b1e6e0930626f441147e6f4b4cfe7 |
| kubernetes-client-linux-arm.tar.gz | 57b1df4ea4fedd6555dd297808ac23e9ffd7da4b5fd4876088863a287edef34b0d697f296c3da405649146c4c84f72e41155dcf858990ae6e810adb800452539 |
| kubernetes-client-linux-arm64.tar.gz | 83e61c039bd2a7d113b68c97a06e55deff2633abd9e6f1afa98ef22a4308383f2fba3309e3b9ba23f27d0d6a3a99232e0b3404f3848c94f927d654e6317f300a |
| kubernetes-client-linux-ppc64le.tar.gz | cf78c218e4c23e1ad13dc75b465d38c57c2fc284eafe342adaf3b84568965f3629e2c5543c38f2c24e93ca8f5ef72c755c401fd9b5f46e8742095734784f324a |
| kubernetes-client-linux-s390x.tar.gz | 64913790635f51dc012d463b4f2483453483d21c6d228f2c2ac740b8c1abcf25251baffca8331c7d34a8eb945df96efd24f4d23089cc13c992baddb678ebe2b3 |
| kubernetes-client-windows-386.tar.gz | 066fe65b02c68858f09119b657d23b19d770f1432790666e80fd2644251cfc949d323857d5e2308a865442714138be40ee7269e8109314d3e9e99e7917380786 |
| kubernetes-client-windows-amd64.tar.gz | 057b9d0eac9d6f8f96b29a237692f346bab054947d6493fa1b75d143d457c146e46713694e5987e5fc7adf2950d5a16a974f1eb6ffb204a992b6d852435910b6 |
| kubernetes-client-windows-arm64.tar.gz | 0338179407fca68fc67e019fa89075eef497a130d7a09f974692b715a803e1d6521d8d31d55421117e6cefc5aee2902b3afc095fdcacd06438a1673ba9a23cd6 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | fb41f7e577b6e2501819cbb71761e29e38d50d0279fa41508af63ea3857c0c05ca5feb584f65d784d1fb6f765d6c7e9d479c91f904feebd297b05ef296567ce8 |
| kubernetes-server-linux-arm64.tar.gz | 273796e1bcea82151b64974f000813f9e8e63bf8314dc2980d99610363967a8928e52d4958a03f413cb762d69b3d89918e43dac33921f2855acace09d5a74e47 |
| kubernetes-server-linux-ppc64le.tar.gz | 14061e55d204a09e0c1ac7c55931ee62ca1ce9e4c843bd4c7ad42c746a5ab6812d74642bf16146d6191dc72432ebb1fc1304e9486643adfcc8419c46753b4d74 |
| kubernetes-server-linux-s390x.tar.gz | d1a4ef0c30d68eda1710c032ded345acfc295a33aff37b01cb185bc5643efb1a9c27ac90dfb5afa4f95741b03ff4a55a11063e06b720715f425e9178da9ed3f9 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 6c9589d2dc82cc838ef27f2370d503f2750aa8feaef592dd7353bd74a482a2904078df3a3488ccd3e6f64f180f1d27b8931b75f7cc97f4a1f9d543299f0b8db8 |
| kubernetes-node-linux-arm64.tar.gz | 862d0c46d911ce78d191b0996e74263fc14db461cacfb8fb4fdddf4b6b982f4f72feaa1cba960c30dc0af007e718f2266a18e87cdda87fca54c511ab667773da |
| kubernetes-node-linux-ppc64le.tar.gz | 35bcf7be699b443f69b76b7133e94da69c234e3d4d021a3e41a0f09837466521d032422eaf6fd7dbc9b96eccdc97ec5c3a339bd410d1befcd1cad2de1efbd7f6 |
| kubernetes-node-linux-s390x.tar.gz | 15a52713d9640ca4365a9ba40b3523e658a2889bd1e25b3e40d97d78bc03ce3d2e189d9696210059438393a4decc636e164d92d716d0c7eadd35ff7c22bcd3b3 |
| kubernetes-node-windows-amd64.tar.gz | 0452a35597a22014571bac052947cc751d3ac78ac02cc6b9cee206e12717930f847cde3fe84d7f44c52b274c00513c2d7c4423b1d69ee50c25973371803e49cb |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
SecurityContextDeny admission plugin, deprecated since v1.27. The Pod Security Admission plugin, available since v1.25, is recommended instead. See https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#securitycontextdeny for more information. (#122612, @mtardy) [SIG Auth, Security and Testing]…/serviceaccounts/<name>/token resource handler.
The annotation used to persist the issued credential identifier is now authentication.kubernetes.io/issued-credential-id. (#123098, @munnerz) [SIG Auth]status label with enum value of success and failure.
kubelet --node-ip values when using
a cloud provider. The feature is now GA and the CloudDualStackNodeIPs feature
gate is always enabled. (#123134, @danwinship) [SIG API Machinery, Cloud Provider and Node]IterateOverWaitingPods. In other words, all waitingPods in scheduler can be obtained from any profiles. Before this commit, each profile could only obtain waitingPods within that profile. (#122946, @NoicFank) [SIG Scheduling]variables. (#123083, @jiahuif) [SIG API Machinery]kube-system/kubelet-config ConfigMap (#123093, @SataQiu) [SIG Cluster Lifecycle]Nothing has changed.
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | f9e74c1f8400e8c85a65cf85418a95e06a558d230539f4b2f7882b96709eeb3656277a7a1e59ccd699a085d6c94d31bd2dcc83a48669d610ca2064a0c978cbeb |
| kubernetes-src.tar.gz | 413f02b4cba6db36625a14095fb155b12685991ae4ece29e9d91016714aadcfbd06ac88f7766a0943445d05145980a54208cc2ed9bc29f3976f0b61a1492ace2 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-amd64.tar.gz | d06d723da34e021db3dba1890970f5dc5e27209befb4da9cc5a8255bd124e1ea31c273d71c0ee864166acb2afa0cb08a492896c3e85efeccbbb02685c1a3b271 |
| kubernetes-client-darwin-arm64.tar.gz | 7132d1a1ad0f6222eae02251ecd9f6df5dfbf26c6f7f789d1e81d756049eccdd68fc3f6710606bce12b24b887443553198efc801be55e94d83767341f306650e |
| kubernetes-client-linux-386.tar.gz | 09500370309fe1d6472535ed048a5f173ef3bd3e12cbc74ba67e48767b07e7b295df78cabffa5eda140e659da602d17b961563a2ef2a20b2d38074d826a47a35 |
| kubernetes-client-linux-amd64.tar.gz | 154dafa5fae88a8aeed82c0460fa37679da60327fdab8f966357fbcb905e6e6b5473eacb524c39adddccf245fcf3dea8d5715a497f0230d98df21c4cb3b450eb |
| kubernetes-client-linux-arm.tar.gz | d055b29111a90b2c19e9f45bd56e2ba0b779dc35562f21330cda7ed57d945a65343552019f0efe159a87e3a2973c9f0b86f8c16edebdb44b8b8f773354fec7b3 |
| kubernetes-client-linux-arm64.tar.gz | c498a0c7b4ce59b198105c88ef1d29a8c345f3e1b31ba083c3f79bfcca35ae32776fd38a3b6b0bad187e14f7d54eeb0e2471634caac631039a989bd6119ab244 |
| kubernetes-client-linux-ppc64le.tar.gz | 50e5c8bb07fac4304b067a161c34021d0c090bb5d04aed2eff4d43cab5a8cdcffc72fe97b4231f986a5b55987ebc6f6142a7e779b82ad49a109d772c3eade979 |
| kubernetes-client-linux-s390x.tar.gz | 91b10c0f531ba530ca9766e509d1bb717531ff70061735082664da8a2bd7b3282743f53a60d74a5cb1867206f06287aa60fdec1bb41c77b14748330c5ce1199c |
| kubernetes-client-windows-386.tar.gz | eaa83eab240ccf54ad54e0f66eba55bd4b15c7c37ea9a015b2b69638d90a1d5e146f989912c7745e0cbb52f846aa0135dd943b2b4b600fcbc3f9c43352f678f3 |
| kubernetes-client-windows-amd64.tar.gz | 874ad471bc887f0ae2c73d636475793716021b688baf9ae85bd9229d9ceb5ec4bab3bc9f423e2665b2a6f33697d0f5c0a838f274bb4539ea0031018687f39e85 |
| kubernetes-client-windows-arm64.tar.gz | 5f20a1efba7eec42f1ff1811af3b7c2703d7323e5577fd131fe79c8e53da33973a7922e794f4bc64f1fa16696cdc01e4826d0878a2e46158350a9b6de4eb345b |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | fd631b9f8e500eee418a680bd5ee104508192136701642938167f8b42ee4d2577092bada924e7b56d05db534920faeca416292bf0c1636f816ac35db30d80693 |
| kubernetes-server-linux-arm64.tar.gz | cc20574eac935a61e9c23c056d8c325cf095e4217d7d23d278dcf0d2ca32c2651febd3eb3de51536fd48e0fd17cf6ec156bdcf53178c1959efc92e078d9aed44 |
| kubernetes-server-linux-ppc64le.tar.gz | e8aa36ba41856b7e73fe4a52e725b1b52c70701822f17af10b3ddd03566cf41ab280b69a99c39b8dca85a0b7d80c3f88f7b0b5d5cd1da551701958f8bd176a11 |
| kubernetes-server-linux-s390x.tar.gz | fdf61522374eeccda5c32b6c9dc5927a92f68c78af811976f798dce483856ebc1e52a6a2b08a121ba7a3b60f0f8e2d727814ff7aed7edd1e7282288a1cacb742 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | cc8d03394114c292eca5be257b667d5114d7934f58d1c14365ea0a68fdb4e699437f3ea1a28476c65a1247cf5b877e40c0dabd295792d2d0de160f2807f9a7de |
| kubernetes-node-linux-arm64.tar.gz | 1602ecf70f2d9e8ec077bdb4d45a18027c702be24d474c3fdaf6ad2e3a56527ee533b53a1b4bbbe501404cc3f2d7d60a88f7f083352a57944e20b4d7109109e6 |
| kubernetes-node-linux-ppc64le.tar.gz | 6494efec3efb3b0cc20170948eb2eb2e1a51c4913d26c0682de4ddcb4c20629232bc83020f62c1c618986df598008047258019e31d0ec444308064fafdbc861c |
| kubernetes-node-linux-s390x.tar.gz | 265041c73c045f567e6d014b594910524daef10cc0ce27ad760fb0188c34aeee52588dc1fbef1d9f474d11d032946bdbd527e9c04196294991d0fbe71ae5e678 |
| kubernetes-node-windows-amd64.tar.gz | faa5b4598326a9bd08715f5d6d0c1ac2f47fb20c0eb5745352f76b779d99a20480a9a79c6549e352d2a092b829e1926990b5fa859392603c1c510bf571b6094f |
All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.
NewEventBroadcasterAdapterWithContext should be used instead of NewEventBroadcasterAdapter if the goal is to support contextual logging. (#122142, @pohly) [SIG API Machinery, Instrumentation and Scheduling]optionalOldSelf API field in CustomResourceDefinition validation rules, which should only be allowed to be set when the CRDValidationRatcheting feature gate is enabled. (#122329, @jpbetz) [SIG API Machinery]prescore extension point for volumeBinding plugin. Return skip if it doesn't do anything in Score. (#115768, @AxeZhan) [SIG Scheduling, Storage and Testing]status.reservedFor array was changed such that a strategic-merge-patch can add individual entries. This breaks clients using strategic merge patch to update status which rely on the previous behavior (replacing the entire array). (#122276, @pohly) [SIG API Machinery]Add Timezone column in the output of kubectl get cronjob command (#122231, @ardaguclu) [SIG CLI]
Add WatchListClient feature gate to client-go. When enabled it allows the client to get a stream of individual items instead of chunking from the server. (#122571, @p0lyn0mial) [SIG API Machinery]
Add process_start_time_seconds to /metrics/slis endpoint of all components (#122750, @Richabanker) [SIG Architecture, Instrumentation and Testing]
Adds exec-interactive-mode and exec-provide-cluster-info flags in kubectl config set-credentials command (#122023, @ardaguclu) [SIG CLI]
Allow scheduling framework plugins that implement io.Closer to be gracefully closed. (#122498, @Gekko0114) [SIG Scheduling]
Change --nodeport-addresses behavior to default to "primary node IP(s) only" rather than "all node IPs". (#122724, @nayihz) [SIG Network and Windows]
Etcd: build image for v3.5.11 (#122233, @mzaian) [SIG API Machinery]
Informers now support adding Indexers after the informer starts (#117046, @howardjohn) [SIG API Machinery]
Introduce a feature gate mechanism to client-go. Depending on the actual implementation, users can control features via environmental variables or command line options. (#122555, @p0lyn0mial) [SIG API Machinery]
Kube-scheduler implements scheduling hints for the NodeAffinity plugin. The scheduling hints allow the scheduler to only retry scheduling a Pod that was previously rejected by the NodeAffinity plugin if a new Node or a Node update matches the Pod's node affinity. (#122309, @carlory) [SIG Scheduling]
Kube-scheduler implements scheduling hints for the NodeResourceFit plugin. The scheduling hints allow the scheduler to only retry scheduling a Pod that was previously rejected by the NodeResourceFit plugin if a new Node or a Node update matches the Pod's resource requirements or if an old pod update or delete matches the Pod's resource requirements. (#119177, @carlory) [SIG Scheduling]
Kube-scheduler implements scheduling hints for the NodeUnschedulable plugin. The scheduling hints allow the scheduler to only retry scheduling a Pod that was previously rejected by the NodeSchedulable plugin if a new Node or a Node update sets .spec.unschedulable to false. (#122334, @carlory) [SIG Scheduling]
Kube-scheduler implements scheduling hints for the PodTopologySpread plugin. The scheduling hints allow the scheduler to retry scheduling a Pod that was previously rejected by the PodTopologySpread plugin if create/delete/update a related Pod or a node which matches the toplogyKey. (#122195, @nayihz) [SIG Scheduling]
Kubeadm: add better handling of errors during unmount when calling "kubeadm reset". When failing to unmount directories under "/var/run/kubelet", kubeadm will now throw an error instead of showing a warning and continuing to cleanup said directory. In such situations it is better for you to inspect the problem and resolve it manually, then you can call "kubeadm reset" again to complete the cleanup. (#122530, @neolit123) [SIG Cluster Lifecycle]
Kubectl debug: add sysadmin profile (#119200, @eiffel-fl) [SIG CLI and Testing]
Kubernetes is now built with Go 1.21.6 (#122705, @cpanato) [SIG Architecture, Release and Testing]
Kubernetes is now built with go 1.22rc2 (#122889, @cpanato) [SIG Release and Testing]
Print more information when kubectl describe a VolumeAttributesClass (#122640, @carlory) [SIG CLI]
Promote KubeProxyDrainingTerminatingNodes to Beta (#122914, @alexanderConstantinescu) [SIG Network]
Promote feature gate StableLoadBalancerNodeSet to GA (#122961, @alexanderConstantinescu) [SIG API Machinery, Cloud Provider and Network]
Scheduler skips NodeAffinity Score plugin when NodeAffinity Score plugin has nothing to do with a Pod. You might notice an increase in the metric plugin_execution_duration_seconds for extension_point=score plugin=NodeAffinity, because the plugin will only run when the plugin is relevant (#117024, @sanposhiho) [SIG Scheduling and Testing]
The option ignorable of scheduler extender can skip error both filter and bind. (#122503, @sunbinnnnn) [SIG Scheduling]
Update kubedns and nodelocaldns to release version 1.22.28 (#121908, @mzaian) [SIG Cloud Provider]
Update some interfaces' signature in scheduler:
When PreFilterResult filters out some Nodes, the scheduling framework assumes them as rejected via UnschedulableAndUnresolvable,
that is those nodes won't be in the candidates of preemption process.
Also, corrected how the scheduling framework handle Unschedulable status from PreFilter.
Before this PR, if PreFilter return Unschedulable, it may result in an unexpected abortion in the preemption,
which shouldn't happen in the default scheduler, but may happen in schedulers with a custom plugin. (#119779, @sanposhiho) [SIG Scheduling]
kubectl describe: added Suspend to job, and Node-Selectors and Tolerations to pod template output (#122618, @ivanvc) [SIG CLI]
--pod-max-in-unschedulable-pods-duration was initially planned to be removed in v1.26, but we have to change this plan. We found an issue in which Pods can be stuck in the unschedulable pod pool for 5 min, and using this flag is the only workaround for this issue.
This issue only could happen if you use custom plugins or if you change plugin set being used in your scheduler via the scheduler config. (#122013, @sanposhiho) [SIG Scheduling]Add imagefs.inodesfree to default EvictionHard settings (#121834, @vaibhav2107) [SIG Node]
Added metric name along with the utilization information when running kubectl get hpa (#122804, @sreeram-venkitesh) [SIG CLI]
Allow deletion of pods that use raw block volumes on node reboot (#122211, @gnufied) [SIG Node and Storage]
Changed the API server so that for admission webhooks that have a URL matching the hostname localhost, or a loopback IP address, the connection supports HTTP/2 where it can be negotiated. (#122558, @linxiulei) [SIG API Machinery and Testing]
Etcd: Update to v3.5.11 (#122393, @mzaian) [SIG API Machinery, Cloud Provider, Cluster Lifecycle, Etcd and Testing]
Fix Windows credential provider cannot find binary. Windows credential provider binary path may have ".exe" suffix so it is better to use LookPath() to support it flexibly. (#120291, @lzhecheng) [SIG Cloud Provider]
Fix an issue where kubectl apply could panic when imported as a library (#122346, @Jefftree) [SIG CLI]
Fix panic of Evented PLEG during kubelet start-up (#122475, @pacoxu) [SIG Node]
Fix resource deletion failure caused by quota calculation error when InPlacePodVerticalScaling is turned on (#122701, @carlory) [SIG API Machinery, Node and Testing]
Fix the following volume plugins may not create user visible files after kubelet was restarted.
Fix: Ignore unnecessary node events and improve daemonset controller performance. (#121669, @xigang) [SIG Apps]
Fix: Mount point may become local without calling NodePublishVolume after node rebooting. (#119923, @cvvz) [SIG Node and Storage]
Fixed a bug where kubectl drain would consider a pod as having been deleted if an error occurs while calling the API. (#122574, @brianpursley) [SIG CLI]
Fixed a regression since 1.24 in the scheduling framework when overriding MultiPoint plugins (e.g. default plugins). The incorrect loop logic might lead to a plugin being loaded multiple times, consequently preventing any Pod from being scheduled, which is unexpected. (#122068, @caohe) [SIG Scheduling]
Fixed migration of in-tree vSphere volumes to the CSI driver. (#122341, @jsafrane) [SIG Storage]
Fixes a race condition in the iptables mode of kube-proxy in 1.27 and later that could result in some updates getting lost (e.g., when a service gets a new endpoint, the rules for the new endpoint might not be added until much later). (#122204, @danwinship) [SIG Network]
Fixes bug in ValidatingAdmissionPolicy which caused policies using CRD params to not successfully sync (#123003, @alexzielenski) [SIG API Machinery and Testing]
For statically provisioned PVs, if its volume source is CSI type or it has migrated annotation, when it's deleted, the PersisentVolume controller won't changes its phase to the Failed state.
With this patch, the external provisioner can remove the finalizer in next reconcile loop. Unfortunately if the provious existing pv has the Failed state, this patch won't take effort. It requires users to remove finalizer. (#122030, @carlory) [SIG Apps and Storage]
If a pvc has an empty storageClassName, persistentvolume controller won't try to assign a default StorageClass (#122704, @carlory) [SIG Apps and Storage]
Improves scheduler performance when no scoring plugins are defined. (#122058, @aleksandra-malinowska) [SIG Scheduling]
Improves scheduler performance when no scoring plugins are defined. (#122435, @aleksandra-malinowska) [SIG Scheduling]
Kube-proxy: fixed LoadBalancerSourceRanges not working for nftables mode (#122614, @tnqn) [SIG Network]
Kubeadm: fix a regression in "kubeadm init" that caused a user-specified --kubeconfig file to be ignored. (#122735, @avorima) [SIG Cluster Lifecycle]
Make decoding etcd's response respect the timeout context. (#121815, @HirazawaUi) [SIG API Machinery]
QueueingHint implementation for NodeAffinity is reverted because we found potential scenarios where events that make Pods schedulable could be missed. (#122285, @sanposhiho) [SIG Scheduling]
QueueingHint implementation for NodeUnschedulable is reverted because we found potential scenarios where events that make Pods schedulable could be missed. (#122288, @sanposhiho) [SIG Scheduling]
Remove wrong warning event (FileSystemResizeFailed) during a pod creation if it uses a readonly volume and the capacity of the volume is greater or equal to its request storage. (#122508, @carlory) [SIG Storage]
Reverts the EventedPLEG feature (beta, but disabled by default) back to alpha for a known issue (#122697, @pacoxu) [SIG Node]
The scheduling queue didn't notice any extenders' failures, it could miss some cluster events, and it could end up Pods rejected by Extenders stuck in unschedulable pod pool in 5min in the worst-case scenario. Now, the scheduling queue notices extenders' failures and requeue Pods rejected by Extenders appropriately. (#122022, @sanposhiho) [SIG Scheduling]
Use errors.Is() to handle err returned by LookPath() (#122600, @lzhecheng) [SIG Cloud Provider]
ValidateVolumeAttributesClassUpdate also validates new vac object. (#122449, @carlory) [SIG Storage]
When using a claim with immediate allocation and a pod referencing that claim couldn't get scheduled, the scheduler incorrectly may have tried to deallocate that claim. (#122415, @pohly) [SIG Node and Scheduling]
leader_election_slowpath_total that allow users to monitor how many leader elections are updated non-optimistically. (#122069, @linxiulei) [SIG API Machinery, Architecture and Instrumentation]ttlSecondsAfterFinished to automatically clean up the upgrade-health-check Job that runs during upgrade preflighting. (#122079, @carlory) [SIG Cluster Lifecycle]ExpandedDNSConfig. (#122086, @bzsuni) [SIG Network]KubeletPodResourcesGetAllocatable. (#122138, @ii2day) [SIG Node]KubeletPodResources. (#122139, @bzsuni) [SIG Node]MinimizeIPTablesRestore. (#122136, @ty-dc) [SIG Network]ProxyTerminatingEndpoints. (#122134, @ty-dc) [SIG Network]azureFile in-tree storage plugin (#122576, @carlory) [SIG API Machinery, Cloud Provider, Node and Storage]--cidr-allocator-type to CloudAllocator for kube-controller-manager will be removed in a future release. Please switch to and explore the options available in your external cloud provider (#123011, @dims) [SIG API Machinery and Network]LegacyServiceAccountTokenTracking (GA since 1.28) is now removed, since the feature is unconditionally enabled. (#122409, @Rei1010) [SIG Auth]