v1.26.0-beta.2

Release v1.26.0-beta.2 (draft)

What's Changed

• Automated cherry pick of #14888: Fix ingress status for loadbalancers that does not have by @zetaab in #14890
• Automated cherry pick of #14880: Use short service name with discovery labels by @johngmyers in #14892
• Automated cherry pick of #14897: Include SSHCredentials in create cluster dryrun output by @johngmyers in #14900
• Automated cherry pick of #14902: etcd domains are now under .internal. by @johngmyers in #14903
• Automated cherry pick of #14887: set loadbalancer configs before initializing the OS by @zetaab in #14889
• Automated cherry pick of #14907: APIServer nodes also need apiserverAdditionalIPs by @johngmyers in #14908
• Don't expose v1alpha3 API by @johngmyers in #14893
• Automated cherry pick of #14937: Improve error message when trying to use IPv6 with amazonvpc by @johngmyers in #14938
• Automated cherry pick of #14923: Do not include tags when searching existing volumes in by @zetaab in #14924
• Automated cherry pick of #14929: Prune admission webhooks by @johngmyers in #14940
• Automated cherry pick of #14941: Don't tag public subnets for internal LBs in IPv6 clusters by @johngmyers in #14942
• Automated cherry pick of #14966: Bump EBS CSI driver to 1.14.1 by @johngmyers in #14967
• Automated cherry pick of #14951: Upgrade k8s-dns-node-cache to 1.22.16 by @johngmyers in #14968
• Automated cherry pick of #14194: Add a flag to rolling update to fail immediately on IG by @olemarkus in #14970
• Automated cherry pick of #14974: Update containerd to v1.6.15 by @hakman in #14975
• Automated cherry pick of #14913: Run pods needing control-plane instance credentials on by @johngmyers in #14977
• Automated cherry pick of #14978: Update Go to v1.19.5 by @hakman in #14979
• Update dependencies for kOps 1.26 by @hakman in #14982
• Automated cherry pick of #14983: Use state store for nodeup.Config in Gossip clusters by @hakman in #14984
• Automated cherry pick of #14920: Populate cluster with default values in kops replace by @hakman in #14985
• Automated cherry pick of #14519: feat(cluster-autoscaler): autogenerate priority-expander by @olemarkus in #14971
• Automated cherry pick of #14986: Infer the dns suffix from the cluster name for by @hakman in #14987
• Automated cherry pick of #14930: no dns for OpenStack by @hakman in #14989
• Release 1.26.0-beta.2 by @johngmyers in #14992

Full Changelog: v1.26.0-beta.1...v1.26.0-beta.2

v1.27.0-alpha.1

What's Changed

• Disallow use of admissionControl as of k8s 1.26 by @johngmyers in #14670
• We no longer release an images.tar.gz by @johngmyers in #14667
• Update release process by @hakman in #14675
• Update Calico documentation and validation by @johngmyers in #14671
• Don't disable AWS src/dst checks in Calico IPv6 by @johngmyers in #14672
• Remove obsolete document by @johngmyers in #14678
• Bump peter-evans/create-pull-request from 4.2.0 to 4.2.2 by @dependabot in #14681
• Apply: Migration from CSA to SSA; set operation and merge by @justinsb in #14626
• aws: remove obsolete workaround code by @johngmyers in #14684
• Refactor terraformWriter.Literal by @johngmyers in #14680
• Refactor IPv6 use of terraformWriter.Literal by @johngmyers in #14686
• Add id_ed25519 to auto-loaded ssh keys by @Mia-Cross in #14638
• Revert "Calico: Work around host port/conntrack problem" by @johngmyers in #14685
• v1alpha3: document field name changes by @johngmyers in #14688
• v1alpha3: use new terminology for kubelet config by @johngmyers in #14669
• v1alpha3: fix miscellaneous capitalization by @johngmyers in #14689
• Remove support for using Vault as state store by @hakman in #14692
• Use newer terminology in validation by @johngmyers in #14697
• Fix edit.HasExtraFields() by @johngmyers in #14696
• Stop trying to populate arbitrary cluster fields from the channel by @johngmyers in #14691
• Fix Cilium ENI ipam by @olemarkus in #14694
• Refactor writing of terraform block by @johngmyers in #14698
• Update dependencies by @github-actions in #14705
• aws: Skip Route53 cleanup for clusters without DNS by @hakman in #14707
• Update OWNERS files by @hakman in #14704
• gce: Add integration tests for clusters with many addons by @hakman in #14712
• metrics-server: Set preferred address type to InternalIP when non AWS by @hakman in #14709
• Bump actions/setup-go from 3.3.1 to 3.4.0 by @dependabot in #14716
• Bump peter-evans/create-pull-request from 4.2.2 to 4.2.3 by @dependabot in #14717
• Use AWS CCM 1.26.0-alpha.1 for k8s 1.26 clusters by @olemarkus in #14718
• Refactor writing of Terraform data sources by @johngmyers in #14713
• Expose channels through CLI by @olemarkus in #14072
• A couple of static checks cleanups by @olemarkus in #14719
• gce: Set AUTOSCALER_ENV_VARS in instance template metadata by @hakman in #14703
• upgrade authentication.aws to v0.5.12 by @nnmin-aws in #14720
• Upgrade Node Termination Handler to 1.18.1 and fix some issues by @johngmyers in #14715
• gce: Update default instance types by @hakman in #14701
• gce: Allow metrics-server to access kubelet API by @hakman in #14722
• Scaleway create cluster by @Mia-Cross in #14641
• gce: Update cluster-autoscaler config by @hakman in #14700
• Refactor ListResources to not require passing the Cluster object by @hakman in #14724
• Update documentation and validation for Cilium by @johngmyers in #14676
• Refactor writing Terraform resources by @johngmyers in #14723
• v1alpha3: move networking fields under networking by @johngmyers in #14706
• Change default for NTH Queue Processor mode to enabled by @johngmyers in #14721
• Allow cluster-autoscaler to run on spot if nothing else is available by @johngmyers in #14593
• scaleway: migrate account API to IAM API by @Mia-Cross in #14733
• Update etcd to v3.5.6 by @hakman in #14734
• aws: Use EnsureTask to reference shared target groups by @hakman in #14737
• Make curl fail on 404 in scenario tests by @olemarkus in #14740
• aws: Add support for managing target group attributes by @hakman in #14738
• OpenStack: Refactor Load Balancer builder by @olemarkus in #14742
• kops-controller: increase verbosity level on logs in gossip controller by @olemarkus in #14745
• bump k8s versions and ubuntu ami version in alpha channel by @moshevayner in #14747
• Overflow wrap the content column so content doesn't go under right sidebar and not be readable by @NorseGaud in #14746
• Enable NTH Scheduled Event Draining by default by @johngmyers in #14750
• trying to fix the broken list items for ECR permissions by @NorseGaud in #14748
• Bump kOps versions in alpha and stable channels by @hakman in #14751
• Update etcd-manager to v3.0.20221209 by @hakman in #14752
• Promote alpha channel to stable by @hakman in #14754
• Refactor writing Terraform providers by @johngmyers in #14730
• Update dependencies by @hakman in #14762
• Refactor writing Terraform outputs, etc. by @johngmyers in #14763
• Bump cilium version to 1.12.4 by @olemarkus in #14732
• Bump EBS CSI driver to 1.13.0 by @olemarkus in #14770
• Rename field from ManagedFile.Public to ManagedFile.PublicACL by @hakman in #14775
• Update Go to v1.19.4 by @hakman in #14779
• Update containerd to v1.6.12 by @hakman in #14782
• Introduce context.Context into some of our "Context" objects by @justinsb in #14778
• scaleway : nodeidentity by @Mia-Cross in #14736
• Guess cloud provider from state store path by @hakman in #14768
• Get AWS zones list from AWS SDK by @johngmyers in #14683
• Calico: Don't try to upgrade IPAM in IPv6 clusters by @johngmyers in #14773
• OpenStack: allow no lbclient when checking for vipacl by @olemarkus in #14743
• Update GCE integration tests by @hakman in #14786
• gce: Add support for clusters without DNS by @hakman in #14769
• Update containerd to v1.6.13 by @hakman in #14789
• scaleway: list and delete resources by @Mia-Cross in #14731
• Update dependencies by @github-actions in #14793
• Always use load balancer address in kubeconfig by @hakman in #14729
• Upgrade AWS CCM to v1.26.0 by @johngmyers in #14794
• Don't drain on rebalance recommendations in SQS mode unless configured by @johngmyers in #14771
• Upgrade older AWS CCM minor versions by @johngmyers in #14795
• NTH: add API validation against unsupported option configurations by @johngmyers in #14796
• Support public buckets for serviceAccountIssuers on S3 by @johngmyers in #14799
• Always include load balancer domain in APIServer certificate by @johngmyers in #14800
• NTH: Remove unnecessary configuration in Queue Processor mode by @johngmyers in #14792
• Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in #14803
• Bump actions/setup-go from 3.4.0 to 3.5.0 by @dependabot in #14802
• Bump actions/dependency-review-action from 3.0.1 to 3.0.2 by @dependabot in #14801
• Bump metrics-server to 0.6.2 by @johngmyers in https://github.com/kubernetes/kops/pull/...

v1.26.0-beta.1

What's Changed

• Disallow use of admissionControl as of k8s 1.26 by @johngmyers in #14670
• We no longer release an images.tar.gz by @johngmyers in #14667
• Update release process by @hakman in #14675
• Update Calico documentation and validation by @johngmyers in #14671
• Don't disable AWS src/dst checks in Calico IPv6 by @johngmyers in #14672
• Remove obsolete document by @johngmyers in #14678
• Bump peter-evans/create-pull-request from 4.2.0 to 4.2.2 by @dependabot in #14681
• Apply: Migration from CSA to SSA; set operation and merge by @justinsb in #14626
• aws: remove obsolete workaround code by @johngmyers in #14684
• Refactor terraformWriter.Literal by @johngmyers in #14680
• Refactor IPv6 use of terraformWriter.Literal by @johngmyers in #14686
• Add id_ed25519 to auto-loaded ssh keys by @Mia-Cross in #14638
• Revert "Calico: Work around host port/conntrack problem" by @johngmyers in #14685
• v1alpha3: document field name changes by @johngmyers in #14688
• v1alpha3: use new terminology for kubelet config by @johngmyers in #14669
• v1alpha3: fix miscellaneous capitalization by @johngmyers in #14689
• Remove support for using Vault as state store by @hakman in #14692
• Use newer terminology in validation by @johngmyers in #14697
• Fix edit.HasExtraFields() by @johngmyers in #14696
• Stop trying to populate arbitrary cluster fields from the channel by @johngmyers in #14691
• Fix Cilium ENI ipam by @olemarkus in #14694
• Refactor writing of terraform block by @johngmyers in #14698
• Update dependencies by @github-actions in #14705
• aws: Skip Route53 cleanup for clusters without DNS by @hakman in #14707
• Update OWNERS files by @hakman in #14704
• gce: Add integration tests for clusters with many addons by @hakman in #14712
• metrics-server: Set preferred address type to InternalIP when non AWS by @hakman in #14709
• Bump actions/setup-go from 3.3.1 to 3.4.0 by @dependabot in #14716
• Bump peter-evans/create-pull-request from 4.2.2 to 4.2.3 by @dependabot in #14717
• Use AWS CCM 1.26.0-alpha.1 for k8s 1.26 clusters by @olemarkus in #14718
• Refactor writing of Terraform data sources by @johngmyers in #14713
• Expose channels through CLI by @olemarkus in #14072
• A couple of static checks cleanups by @olemarkus in #14719
• gce: Set AUTOSCALER_ENV_VARS in instance template metadata by @hakman in #14703
• upgrade authentication.aws to v0.5.12 by @nnmin-aws in #14720
• Upgrade Node Termination Handler to 1.18.1 and fix some issues by @johngmyers in #14715
• gce: Update default instance types by @hakman in #14701
• gce: Allow metrics-server to access kubelet API by @hakman in #14722
• Scaleway create cluster by @Mia-Cross in #14641
• gce: Update cluster-autoscaler config by @hakman in #14700
• Refactor ListResources to not require passing the Cluster object by @hakman in #14724
• Update documentation and validation for Cilium by @johngmyers in #14676
• Refactor writing Terraform resources by @johngmyers in #14723
• v1alpha3: move networking fields under networking by @johngmyers in #14706
• Change default for NTH Queue Processor mode to enabled by @johngmyers in #14721
• Allow cluster-autoscaler to run on spot if nothing else is available by @johngmyers in #14593
• scaleway: migrate account API to IAM API by @Mia-Cross in #14733
• Update etcd to v3.5.6 by @hakman in #14734
• aws: Use EnsureTask to reference shared target groups by @hakman in #14737
• Make curl fail on 404 in scenario tests by @olemarkus in #14740
• aws: Add support for managing target group attributes by @hakman in #14738
• OpenStack: Refactor Load Balancer builder by @olemarkus in #14742
• kops-controller: increase verbosity level on logs in gossip controller by @olemarkus in #14745
• bump k8s versions and ubuntu ami version in alpha channel by @moshevayner in #14747
• Overflow wrap the content column so content doesn't go under right sidebar and not be readable by @NorseGaud in #14746
• Enable NTH Scheduled Event Draining by default by @johngmyers in #14750
• trying to fix the broken list items for ECR permissions by @NorseGaud in #14748
• Bump kOps versions in alpha and stable channels by @hakman in #14751
• Update etcd-manager to v3.0.20221209 by @hakman in #14752
• Promote alpha channel to stable by @hakman in #14754
• Refactor writing Terraform providers by @johngmyers in #14730
• Update dependencies by @hakman in #14762
• Refactor writing Terraform outputs, etc. by @johngmyers in #14763
• Bump cilium version to 1.12.4 by @olemarkus in #14732
• Bump EBS CSI driver to 1.13.0 by @olemarkus in #14770
• Rename field from ManagedFile.Public to ManagedFile.PublicACL by @hakman in #14775
• Update Go to v1.19.4 by @hakman in #14779
• Update containerd to v1.6.12 by @hakman in #14782
• Introduce context.Context into some of our "Context" objects by @justinsb in #14778
• scaleway : nodeidentity by @Mia-Cross in #14736
• Guess cloud provider from state store path by @hakman in #14768
• Get AWS zones list from AWS SDK by @johngmyers in #14683
• Calico: Don't try to upgrade IPAM in IPv6 clusters by @johngmyers in #14773
• OpenStack: allow no lbclient when checking for vipacl by @olemarkus in #14743
• Update GCE integration tests by @hakman in #14786
• gce: Add support for clusters without DNS by @hakman in #14769
• Update containerd to v1.6.13 by @hakman in #14789
• scaleway: list and delete resources by @Mia-Cross in #14731
• Update dependencies by @github-actions in #14793
• Always use load balancer address in kubeconfig by @hakman in #14729
• Upgrade AWS CCM to v1.26.0 by @johngmyers in #14794
• Don't drain on rebalance recommendations in SQS mode unless configured by @johngmyers in #14771
• Upgrade older AWS CCM minor versions by @johngmyers in #14795
• NTH: add API validation against unsupported option configurations by @johngmyers in #14796
• Support public buckets for serviceAccountIssuers on S3 by @johngmyers in #14799
• Always include load balancer domain in APIServer certificate by @johngmyers in #14800
• NTH: Remove unnecessary configuration in Queue Processor mode by @johngmyers in #14792
• Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in #14803
• Bump actions/setup-go from 3.4.0 to 3.5.0 by @dependabot in #14802
• Bump actions/dependency-review-action from 3.0.1 to 3.0.2 by @dependabot in #14801
• Bump metrics-server to 0.6.2 by @johngmyers in #14...

v1.26.0-alpha.2

What's Changed

• Promote out-of-bound Kubernetes releases by @yurrriq in #14312
• Update dependencies by @github-actions in #14316
• Avoid spurious changes with bastion hosts due to user data by @hakman in #14318
• Replace --vpc flag with --network-id by @hakman in #14295
• Avoid spurious changes with NLB due to access log config by @hakman in #14319
• Add more details to the NTH documentation by @yurrriq in #14323
• cluster-autoscaler : Add iam permission autoscaling:DescribeScalingActivities needed since 1.24 version by @noony in #14317
• Bump peter-evans/create-pull-request from 4.1.1 to 4.1.2 by @dependabot in #14330
• Bump actions/dependency-review-action from 2.1.0 to 2.4.0 by @dependabot in #14331
• Fix typo in doc for enabling cert-manager dns-01 challenges by @ilyasotkov in #14332
• Scaleway init and nodeup by @Mia-Cross in #14322
• Set metrics-server --kubelet-preferred-address-types by k8s version by @hakman in #14336
• Validate --zones flag earlier by @hakman in #14343
• Make kOps release and deprecation policy more clear by @olemarkus in #14342
• Bump Terraform tag to v1.3.0 by @hakman in #14335
• Revert "Set metrics-server --kubelet-preferred-address-types by k8s version" by @hakman in #14349
• hetzner: Fix metrics-server config to use internal IP by @hakman in #14350
• Set higher verbosity when logging Gossip DNS info by @hakman in #14339
• Update channels with the latest Ubuntu images by @hakman in #14351
• Update channels with the latest Ubuntu images by @hakman in #14354
• Scaleway support in protokube by @Mia-Cross in #14345
• Add node/master size from create cluster into IG spec by @olemarkus in #14347
• Ensure kubelet configuration from IG takes precedence over cluster's by @olemarkus in #14333
• Update dependencies by @github-actions in #14358
• gce: memberlist needs TCP also by @justinsb in #14364
• Bump peter-evans/create-pull-request from 4.1.2 to 4.1.3 by @dependabot in #14367
• Always infer gossip DNS from cluster name by @hakman in #14366
• Refactor NodeUp GossipBuilder to EtcHostsBuilder by @hakman in #14368
• Disable rp_filter on cilium hosts by @olemarkus in #14369
• Fix logic for pre-creating DNS records by @hakman in #14377
• Karpenter : fallback on ondemand instance by default by @noony in #14378
• cluster-autoscaler : Add scaleDownUnneededTime and scaleDownUnreadyTime by @noony in #14379
• update node-problem-detector to version 0.8.12 by @jjinno in #14382
• hetzner: Update CCM to v1.13.2 by @hakman in #14386
• Bump EBS CSI driver to 1.12.0 by @olemarkus in #14388
• Remove fsGroupPolicy as it is immutable by @olemarkus in #14390
• Fix default launch spec detection for spotinst by @2solt in #14389
• Update dependencies by @github-actions in #14395
• Let kOps take ownership of any field currently owned by kubectl by @olemarkus in #14362
• nodeup script: accept strongly typed nodeup.Config by @justinsb in #14397
• Fix typo in format string by @justinsb in #14399
• Bump actions/checkout from 3.0.2 to 3.1.0 by @dependabot in #14400
• update k8s cloudprovider openstack images by @zetaab in #14401
• update k8s openstack by @zetaab in #14406
• karpenter: upgrade to version 0.16.3 and support kubeReserved configuration by @noony in #14408
• Deprecate AWS Classic Load Balancer support for API by @hakman in #14410
• Update dependencies by @github-actions in #14412
• Bump k8s and ubuntu ami version in alpha by @MoShitrit in #14415
• Bump actions/dependency-review-action from 2.4.0 to 2.5.0 by @dependabot in #14416
• bump Openstack ccm version by @zetaab in #14417
• Remove usage of cluster kubelet config in nodeup by @olemarkus in #14419
• Allow snapshot controller to create volumesnapshotcontent by @TwoStone in #14413
• Ensure kOps doesn't surge on karpenter IGs by @olemarkus in #14423
• Bump AWS CCM to 1.25.1 by @olemarkus in #14424
• get-keypairs: Tolerate key set items without certificates by @seh in #14370
• Move setting role taints to cloudup by @olemarkus in #14420
• Bump alpha and stable channel with the latest kops releases by @olemarkus in #14433
• Log and aggregate errors from rolling update by @olemarkus in #14436
• add option to query AMI IDs from SSM by @heybronson in #14434
• Update dependencies by @github-actions in #14438
• Move Gossip check to cluster struct by @hakman in #14439
• Fix pdb for identity webhook by @olemarkus in #14442
• Update Kubernetes support removal documentation by @johngmyers in #14445
• Remove dead code by @johngmyers in #14446
• Bump peter-evans/create-pull-request from 4.1.3 to 4.2.0 by @dependabot in #14447
• Bump actions/setup-go from 3.3.0 to 3.3.1 by @dependabot in #14448
• Fix 1.22 deprecation notice by @johngmyers in #14449
• Need to setup topology before control plane for IPv6 private topology by @johngmyers in #14455
• hack: add support for dev-build script for scaleway by @remyleone in #14456
• Update containerd to v1.6.9 by @hakman in #14458
• ipv6: Tolerate multiple routes to the same NAT Gateway by @johngmyers in #14461
• Update dependencies by @github-actions in #14467
• Update Calico and Canal to v3.24.3 by @hakman in #14466
• Stop applying the beta.kubernetes.io/os by @pacoxu in #14459
• Fix Prometheus scraping for pod-identity-webhook by @jim-barber-he in #14463
• ipv6: NPE fixes for IPv6-only instances by @johngmyers in #14470
• aws: Set the target group health check interval to 10s by @hakman in #14473
• Bump actions/dependency-review-action from 2.5.0 to 2.5.1 by @dependabot in #14476
• Refactor to avoid looking up SSH keypairs twice by @johngmyers in #14475
• Refactor all normalization code into new Normalize() method by @johngmyers in #14477
• Move GCE project under CloudProvider in v1alpha3 API by @johngmyers in #14443
• Upgrade Amazon VPC CNI to v1.12.0 by @MoShitrit in #14485
• Remove well known account aliases for unsupported distros by @johngmyers in #14484
• Update aws.md by @slb235 in #14486
• doc_fix: fixing update cluster command by @swagftw in #14487
• hetzner: Create cluster without DNS or Gossip by @hakman in #14440
• hetzner: Use kops-controller for node bootstrap by @hakman in #14460
• Add e2e template for dedicated APIserver nodes without DNS by @hakman in #14489
• hetzner: Add listener for kops-controller when using it for node bootstrap by @hakman in #14492
• Update dependencies by @github-actions in #14494
• Revert deprecation of positional clustername args by @john...

v1.25.3

What's Changed

• Automated cherry pick of #14436: Log and aggregate errors from rolling update by @hakman in #14437
• Automated cherry pick of #14458: Update containerd to v1.6.9 by @hakman in #14464
• Automated cherry pick of #14463: Fix Prometheus scraping for pod-identity-webhook by @johngmyers in #14472
• Automated cherry pick of #14466: Update Calico and Canal by @hakman in #14478
• Automated cherry pick of #14503: use the same tolerations config for coredns-autoscaler by @MoShitrit in #14506
• Automated cherry pick of #14513: add a condition for the aws-cni ClusterRole based on the by @MoShitrit in #14516
• Automated cherry pick of #14549: Update Go to v1.19.3 by @hakman in #14552
• Automated cherry pick of #14551: Update Calico and Canal to latest versions by @hakman in #14553
• Automated cherry pick of #14550: Update containerd to v1.6.10 by @hakman in #14554
• Automated cherry pick of #14564: use sprig join for template functions by @johngmyers in #14567
• Automated cherry pick of #14573: Allow using the price-capacity-optimized spot allocation by @johngmyers in #14574
• Automated cherry pick of #14563: Add missing create tags permissions for cilium operator in by @olemarkus in #14579
• Automated cherry pick of #14576: aws: Fix SIGSEGV when using instance selector by @hakman in #14580
• Update dependencies for kOps 1.25 by @hakman in #14578
• Automated cherry pick of #14586: Bump cilium to 1.11.11 by @olemarkus in #14588
• Automated cherry pick of #14589: Fix disabling StorageClass management by @olemarkus in #14590
• Automated cherry pick of #14595: Add generics alternatives for fi.Bool/Float*/Int*/String*() by @hakman in #14597
• Automated cherry pick of #14602: Remove CloudFormation tests by @hakman in #14605
• Automated cherry pick of #14434: add option to query AMIs IDs from SSM by @hakman in #14615
• Automated cherry pick of #14442: Fix pdb for identity webhook by @johngmyers in #14617
• Automated cherry pick of #14632: hetzner: Update CSI driver to v2.0.0 by @hakman in #14636
• Automated cherry pick of #14648: aws: Limit the number of target groups updated per by @johngmyers in #14651
• Automated cherry pick of #14650: Add ec2:DescribeAvailabilityZones to the AWS CCM by @johngmyers in #14654
• Automated cherry pick of #14655: gce: Allow Cilium to connect to its etcd cluster by @hakman in #14656
• Release 1.25.3 by @hakman in #14661

Full Changelog: v1.25.2...v1.25.3

v1.24.5

What's Changed

• Automated cherry pick of #14458: Update containerd to v1.6.9 by @hakman in #14465
• Automated cherry pick of #14466: Update Calico and Canal by @hakman in #14479
• Automated cherry pick of #14503: use the same tolerations config for coredns-autoscaler by @MoShitrit in #14505
• Automated cherry pick of #14513: add a condition for the aws-cni ClusterRole based on the by @MoShitrit in #14515
• Update Go to v1.18.8 by @hakman in #14555
• Manual cherry pick of #14551: Update Calico and Canal to latest versions by @hakman in #14558
• Automated cherry pick of #14550: Update containerd to v1.6.10 by @hakman in #14556
• Automated cherry pick of #14564: use sprig join for template functions by @johngmyers in #14568
• Automated cherry pick of #14576: aws: Fix SIGSEGV when using instance selector by @hakman in #14581
• Automated cherry pick of #14595: Add generics alternatives for fi.Bool/Float*/Int*/String*() by @hakman in #14598
• Automated cherry pick of #14602: Remove CloudFormation tests by @hakman in #14606
• Cherry pick of #14442: Fix pdb for identity webhook by @johngmyers in #14618
• Automated cherry pick of #14650: Add ec2:DescribeAvailabilityZones to the AWS CCM by @johngmyers in #14653
• Automated cherry pick of #14648: aws: Limit the number of target groups updated per by @johngmyers in #14652
• Automated cherry pick of #14655: gce: Allow Cilium to connect to its etcd cluster by @hakman in #14657
• Release 1.24.5 by @hakman in #14662

Full Changelog: v1.24.4...v1.24.5

v1.25.2

What's Changed

• Automated cherry pick of #14369: Disable rp_filter on cilium hosts by @olemarkus in #14372
• Automated cherry pick of #14364: gce: memberlist needs TCP also by @hakman in #14365
• Automated cherry pick of #14379: cluster-autoscaler : Add scaleDownUnneededTime and by @olemarkus in #14380
• Automated cherry pick of #14382: update NPD to version 0.8.12 by @hakman in #14384
• Automated cherry pick of #14386: hetzner: Update CCM to v1.13.2 by @hakman in #14387
• Automated cherry pick of #14388: Bump EBS CSI driver to 1.12.0
  #14390: Remove fsGroupPolicy as it is immutable by @olemarkus in #14394
• Automated cherry pick of #14401: update k8s cloudprovider openstack images by @zetaab in #14405
• Automated cherry pick of #14389: Fix default launch spec detection by @hakman in #14392
• Automated cherry pick of #14406: update k8s openstack by @zetaab in #14407
• Automated cherry pick of #14408: karpenter: upgrade to version 0.16.3 and support by @olemarkus in #14409
• Automated cherry pick of #14417: bump Openstack ccm version by @zetaab in #14418
• Automated cherry pick of #14413: Allow snapshot controller to create volumesnapshotcontent by @olemarkus in #14421
• Automated cherry pick of #14423: Ensure kOps doesn't surge on karpenter IGs by @olemarkus in #14425
• Automated cherry pick of #14424: Bump AWS CCM to 1.25.1 by @olemarkus in #14426
• Automated cherry pick of #14370: get-keypairs: Tolerate items without certificates by @hakman in #14427
• Release 1.25.2 by @hakman in #14430

Full Changelog: v1.25.1...v1.25.2

v1.24.4

What's Changed

• Automated cherry pick of #14319: Avoid spurious changes with NLB due to access log config by @hakman in #14325
• Automated cherry pick of #14326: Add --network-id alias for --vpc flag by @hakman in #14327
• Automated cherry pick of #14318: Avoid spurious changes with bastion hosts due to user by @hakman in #14321
• Automated cherry pick of #14317: cluster-autoscaler : Add iam permission by @olemarkus in #14328
• Automated cherry pick of #14369: Disable rp_filter on cilium hosts by @olemarkus in #14373
• Automated cherry pick of #14364: gce: memberlist needs TCP also by @hakman in #14374
• Automated cherry pick of #14382: update NPD to version 0.8.12 by @hakman in #14385
• Automated cherry pick of #14401: update k8s cloudprovider openstack images by @zetaab in #14404
• Automated cherry pick of #14389: Fix default launch spec detection by @hakman in #14393
• Release 1.24.4 by @hakman in #14429

Full Changelog: v1.24.3...v1.24.4

v1.25.1

What's Changed

• Automated cherry pick of #14309: hetzner: Generate CCM args from external CCM config by @hakman in #14310
• Update dependencies for kOps 1.25 by @hakman in #14314
• Automated cherry pick of #14319: Avoid spurious changes with NLB due to access log config by @hakman in #14324
• Add --network-id alias for --vpc flag by @hakman in #14326
• Automated cherry pick of #14318: Avoid spurious changes with bastion hosts due to user by @hakman in #14320
• Automated cherry pick of #14317: cluster-autoscaler : Add iam permission by @olemarkus in #14329
• Automated cherry pick of #14343: Validate --zones flag earlier by @hakman in #14344
• Automated cherry pick of #14350: hetzner: Fix metrics-server config to use internal IP by @hakman in #14352
• Automated cherry pick of #14339: Set higher verbosity when logging Gossip DNS info by @hakman in #14341
• Automated cherry pick of #14347: Add create cluster test for arm64 by @olemarkus in #14355
• Automated cherry pick of #14333: Ensure kubelet configuration from IG takes precedence by @hakman in #14356
• Release 1.25.1 by @hakman in #14357

Full Changelog: v1.25.0...v1.25.1

v1.26.0-alpha.1

What's Changed

• support for scaleway in s3 buckets by @Mia-Cross in #14214
• AWS IAM Role listing: don't ignore "other" errors by @justinsb in #14215
• Some minor docs fixes by @olemarkus in #14221
• Update dependencies by @github-actions in #14222
• Remove warning for FindClusterStatus not implemented for Hetzner by @hakman in #14223
• Add support for installing dcgm exporter by @olemarkus in #14203
• Release notes for 1.23.4 by @justinsb in #14230
• Makefile: Don't assume GOBIN is set by @justinsb in #14232
• Release notes for 1.24.2 by @justinsb in #14231
• Update Calico and Canal to v3.24.1 by @hakman in #14225
• Update Flannel to v0.19.2 by @hakman in #14226
• applylib: Better health checking by @justinsb in #14234
• Bump cluster-autoscaler images by @olemarkus in #14235
• Allow cert-manager the privileges needed to resolve dns-01 challenges by @olemarkus in #14229
• GCE: change default control-plane instance type to e2-medium by @justinsb in #14233
• Small release notes cleanup for 1.25 by @olemarkus in #14237
• Add suport to --cordon-node-before-terminating autoscaler flag by @dcfranca in #14236
• Fix openstack tag limitation by @akkina2107 in #13853
• Bump versions in netlify and mkdocs by @rifelpet in #14248
• aws-node-termination-handler to match node using providerID instead of AWS DNS name by @anthonyhaussman in #14244
• Update dependencies by @github-actions in #14250
• kOps managed OIDC provider is no longer needed for IRSA by @olemarkus in #14243
• Update recommended kOps versions in alpha and stable by @MoShitrit in #14252
• AWS LBC needs ec2:DescribeVpcPeeringConnections for IPv6 by @johngmyers in #14255
• Add back missing permissions for legacy CCM. Again. by @olemarkus in #14253
• Fix CAS cordon flag by @olemarkus in #14254
• Bump verbosity level for some log statements by @olemarkus in #14260
• Warm pool-enabled ASGs scaled to zero will no longer panic by @olemarkus in #14251
• Bump aws-cni to v1.11.4 by @MoShitrit in #14265
• aws-cni clusterRole fix by @MoShitrit in #14272
• bump k8s versions in alpha with September releases by @MoShitrit in #14278
• rolling-update: don't deregister our only apiserver by @justinsb in #13163
• Update dependencies by @github-actions in #14280
• Delete the oldest servers when over the desired count for Hetzner by @hakman in #14282
• Release notes for 1.24.3 by @olemarkus in #14281
• [Docs] Fix karpenter link by @jorge07 in #14284
• Bump stable and alpha channels with latest k8s/kops releases by @olemarkus in #14288
• Prevent kops edit cluster from writing the populated IG spec to state store by @olemarkus in #14287
• User IG without image should be allowed by @olemarkus in #14290
• Remove k8s GTE 1.20 checks as it is always true by @olemarkus in #14291
• Add support for using an existing network for Hetzner by @hakman in #14294
• Update Hetzner CCM to v1.13.0 by @hakman in #14297
• hetzner: Move out of alpha and drop feature flag by @hakman in #14299
• Add release 1.25.0 to channels by @hakman in #14306
• Release notes for 1.25.0 by @hakman in #14305
• Remove support for K8s 1.20 by @olemarkus in #14307
• Hetzner: Generate CCM args from external CCM config by @hakman in #14309
• Release 1.26.0-alpha.1 by @hakman in #14311

New Contributors

• @Mia-Cross made their first contribution in #14214
• @dcfranca made their first contribution in #14236
• @akkina2107 made their first contribution in #13853

Full Changelog: v1.25.0-beta.1...v1.26.0-alpha.1