Fwd: [kubernetes-announce] Kubernetes v1.32.0-alpha.1 is live!

346 views
Skip to first unread message

Marko Mudrinić

unread,
Oct 4, 2024, 5:58:39 PM10/4/24
to d...@kubernetes.io
Kubernetes Community,

Kubernetes v1.32.0-alpha.1 has been built and pushed using Golang version 1.23.0.

The release notes have been updated in CHANGELOG-1.32.md, with a pointer to them on GitHub:

v1.32.0-alpha.1

Downloads for v1.32.0-alpha.1

Source Code

filename sha512 hash
kubernetes.tar.gz 86532c5440a87a6f6f0581cdddfdc68ea3f3f13a6478093518d8445c5ade8c448248de3f2102f29dc327f2055805a573cb60c36d7cce93605ed58b8b2ab23a5c
kubernetes-src.tar.gz 9cdce49ad47d92b14d88fbe0acdf67cce94dfd57f21d2a048ed46b370ff32f3b852ebbd1dfc646126cf30d20927d8e707500128c2ff193810ba7d7b68f612e94

Client Binaries

filename sha512 hash
kubernetes-client-darwin-amd64.tar.gz 742727920beab9ac9285ea98238be4e7a9099205ca95a52c930f2ebff2ded5617b13d5c861c4579c2316b3cb8398959ecb66c72f061724df6079d491c0f4fa5a
kubernetes-client-darwin-arm64.tar.gz 7bd4af634ccbf510d83a3468f288a3d91abf20146fd54e558324cb0dcaaa722a9e07f544699c2c73f033a5cf812cdfd9b8b36e3c612c0148792e1f8370a5d33e
kubernetes-client-linux-386.tar.gz 39d34eca859b53fda63bda7df3ed45ba5e7e6cf406895d454da0291c6dd403139b4bfc46584595ddabaee890511df76d71252ebc1e1dda42f0ba941cec296cd9
kubernetes-client-linux-amd64.tar.gz f71a38447431dc7289caed55fd4846a4990247e4996c22b7c98aa9304959a5e25bf5aeb117d443481c411e6cc497051d8c75bde1ef3a7cb4ab8ff6f2abe43a39
kubernetes-client-linux-arm.tar.gz 21b75e8d69e98842704b2d1e468bbdaa62031d8570d35398095e6b7c96825af0276f668064722d6043788e7f2b8b0d093bbaed8fa93126f3e2d8720bc3fecf9b
kubernetes-client-linux-arm64.tar.gz 498fc9962c02c60823832207f85ce919bb0c405b73feb931a7186babd644c928cee377c4ae0286f3e981328995d96586e4ae4783e38b879eb3caab8f9c9d0a5b
kubernetes-client-linux-ppc64le.tar.gz 9bed5cf8bb05dc529f9ac7a637a657e1312065a2ee39c1d809f926b542547b8ddc674addae84cb523569a8a5a7f183a598b2d0566d9e58317bccd61558ca7192
kubernetes-client-linux-s390x.tar.gz 6c5aa276aa65d969826ad49d901bc95fb7290cd00778c03f681ccdc12f3dc7cd77752e2895400250875a3c0a7548e20fe6f958bace1482f9a9b88c8581c10d95
kubernetes-client-windows-386.tar.gz 5d45f1c1e0e984fa85ed99ac58dda6c475c3a2120a911425272187fde03b8017cdb14d71b2d6d9a23c946166fd2c374c42ffa32186c74546d7ea0146271cd50f
kubernetes-client-windows-amd64.tar.gz f0e3b6e845053c753640a46c3258eec96b04e7c95f044e8b980300ad32dadab2f0fef735213ba3de9b98dca2d7106a7f51e0f08c28a75cbe89f5a9f36f7e29a4
kubernetes-client-windows-arm64.tar.gz 1a86995fc7284db06c23af66d82d836be36a6efcba7e2ef296c14bff56d39392a444cb399ce1f999181ec1ff7ac3edfdff84c3ccb63b0c6564550a8c0c948cef

Server Binaries

filename sha512 hash
kubernetes-server-linux-amd64.tar.gz dd0cfd5d57ad9c82ea52c98c80df8fe63a349bfbb16e42b30b1fe4c3b765327250397438e75e49014e6afffbaa7514daf830b8f7c781362241fb527196d8dc86
kubernetes-server-linux-arm64.tar.gz dbd29ab7bdfe97b8f9261cf3e727065f301bced78c866ead01d932de92e26476d3824c8f1023a8ebc63a63a3a79001dd2493c0f70118580841922b59ab1632c1
kubernetes-server-linux-ppc64le.tar.gz f37b92ed3ef9eeb3c40973068ef6131441abd6f4eabf1f1b4845f5774f116efbdf7d73f870f5268137d0ff4f406f443522f8adf63a043aaedcb67672246f0b55
kubernetes-server-linux-s390x.tar.gz 58531d380dc3ddbff5b8e6e3cef8cc58f6c47aea0b4a3c907805836e35f571dc1e231e4dbbf635115bb70357408cf23ad68a86dd725a5abbe5025b2945cf1ddf

Node Binaries

filename sha512 hash
kubernetes-node-linux-amd64.tar.gz 4273a6fc9fec18f408c0e559d3680270572250fc3d4c997439dfe844dca138a1a7277852882184601c4960a52525a6594b274f251bcca78df02104d296302e12
kubernetes-node-linux-arm64.tar.gz 931eea6e9e6809a13a28519b03022bda056ac6215cd2b1bcd4186efa8204bc1b9245c3893292ad0ba823dc9cf008afd82dc4988cee2ea09eef3d5bb073945b1d
kubernetes-node-linux-ppc64le.tar.gz a35ed30cafb4aebb541d6a7a8d1995e773877cdda3e8b413a81eddc1eeb989b086765c6396df3d1d1dde86fb62ae7684401aa6dcedfcbe6940ada470549fe6e6
kubernetes-node-linux-s390x.tar.gz cc9b57d9fa7561d015288789cf7949dc7a68d4e6f006aa5b354941e736490b92480bd65f36090c53ddacde00f5a6a34b7a7a2b8c4912dfed3ec36e4c37759e9f
kubernetes-node-windows-amd64.tar.gz be118da99917ca00cff3f5ba9bb1a747c112c26522c4cc695d6cd2b2badfdf2ebcf79cb8885dbcf9986fc392510ec8a6c746cdf4ea7c984ed86a49f206ba68c2

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name architectures
registry.k8s.io/conformance:v1.32.0-alpha.1 amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.32.0-alpha.1 amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.32.0-alpha.1 amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.32.0-alpha.1 amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.32.0-alpha.1 amd64, arm64, ppc64le, s390x
registry.k8s.io/kubectl:v1.32.0-alpha.1 amd64, arm64, ppc64le, s390x

Changelog since v1.31.0

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

  • ACTION REQUIRED for custom scheduler plugin developers: PodEligibleToPreemptOthers in the preemption interface gets ctx in the parameters. Please change your plugins' implementation accordingly. (#126465, @googs1025) [SIG Scheduling]
  • Changed NodeToStatusMap from map to struct and exposed methods to access the entries. Added absentNodesStatus, which inform what is the status of nodes that are absent in the map.

For developers of out-of-tree PostFilter plugins, make sure to update usage of NodeToStatusMap. Additionally, NodeToStatusMap should be eventually renamed to NodeToStatusReader. (#126022, @macsko) [SIG Node, Scheduling and Testing]

Changes by Kind

Deprecation

  • Reverted the DisableNodeKubeProxyVersion feature gate to default-off to give a full year from deprecation announcement in 1.29 to clearing the field by default, per the Kubernetes deprecation policy. (#126720, @liggitt) [SIG Architecture and Node]

API Change

  • Allow for Pod search domains to be a single dot "." or contain an underscore "_" (#127167, @adrianmoisey) [SIG Apps, Network and Testing]
  • Disallow k8s.io and kubernetes.io namespaced extra key in structured authentication configuration. (#126553, @aramase) [SIG Auth]
  • Fix the bug where spec.terminationGracePeriodSeconds of the pod will always be overwritten by the MaxPodGracePeriodSeconds of the soft eviction, you can enable the AllowOverwriteTerminationGracePeriodSeconds feature gate, which will restore the previous behavior. If you do need to set this, please file an issue with the Kubernetes project to help contributors understand why you need it. (#122890, @HirazawaUi) [SIG API Machinery, Architecture, Node and Testing]
  • Kube-scheduler removed the following plugins:
    • AzureDiskLimits
    • CinderLimits
    • EBSLimits
    • GCEPDLimits Because the corresponding CSI driver reports how many volumes a node can handle in NodeGetInfoResponse, the kubelet stores this limit in CSINode and the scheduler then knows the driver's limit on the node. Remove plugins AzureDiskLimits, CinderLimits, EBSLimits and GCEPDLimits if you explicitly enabled them in the scheduler config. (#124003, @carlory) [SIG Scheduling, Storage and Testing]
  • Promoted CustomResourceFieldSelectors to stable; the feature is enabled by default. --feature-gates=CustomResourceFieldSelectors=true not needed on kube-apiserver binaries and will be removed in a future release. (#127673, @jpbetz) [SIG API Machinery and Testing]
  • The default value for node-monitor-grace-period has been increased to 50s (earlier 40s) (Ref - https://github.com/kubernetes/kubernetes/issues/121793) (#126287, @devppratik) [SIG API Machinery, Apps and Node]
  • The resource/v1alpha3.ResourceSliceList filed which should have been named "metadata" but was instead named "listMeta" is now properly "metadata". (#126749, @thockin) [SIG API Machinery]
  • The synthetic "Bookmark" event for the watch stream requests will now include a new annotation: kubernetes.io/initial-events-list-blueprint. THe annotation contains an empty, versioned list that is encoded in the requested format (such as protobuf, JSON, or CBOR), then base64-encoded and stored as a string. (#127587, @p0lyn0mial) [SIG API Machinery]
  • To enhance usability and developer experience, CRD validation rules now support direct use of (CEL) reserved keywords as field names in object validation expressions. Name format CEL library is supported in new expressions. (#126977, @aaron-prindle) [SIG API Machinery, Architecture, Auth, Etcd, Instrumentation, Release, Scheduling and Testing]
  • Updated incorrect description of persistentVolumeClaimRetentionPolicy (#126545, @yangjunmyfm192085) [SIG API Machinery, Apps and CLI]
  • X.509 client certificate authentication to kube-apiserver now produces credential IDs (derived from the certificate's signature) for use by audit logging. (#125634, @ahmedtd) [SIG API Machinery, Auth and Testing]

Feature

  • Added new functionality into the Go client code (client-go) library. The List() method for the metadata client allows enabling API streaming when fetching collections; this improves performance when listing many objects. To request this behaviour, your client software must enable the WatchListClient client-go feature gate. Additionally, streaming is only available if supported by the cluster; the API server that you connect to must also support streaming. If the API server does not support or allow streaming, then client-go falls back to fetching the collection using the list API verb. (#127388, @p0lyn0mial) [SIG API Machinery and Testing]

  • Added preemptionPolicy field when using kubectl get PriorityClass -owide (#126529, @googs1025) [SIG CLI]

  • Client-go/rest: contextual logging of request/response with accurate source code location of the caller (#126999, @pohly) [SIG API Machinery and Instrumentation]

  • Enabled kube-controller-manager '--concurrent-job-syncs' flag works on orphan Pod processors (#126567, @fusida) [SIG Apps]

  • Extend discovery GroupManager with Group lister interface (#127524, @mjudeikis) [SIG API Machinery]

  • Fix kubectl doesn't print image volume when kubectl describe a pod with that volume (#126706, @carlory) [SIG CLI]

  • Graduate the AnonymousAuthConfigurableEndpoints feature gate to beta and enable by default to allow configurable endpoints for anonymous authentication. (#127009, @vinayakankugoyal) [SIG Auth]

  • Implement a queueing hint for PersistentVolumeClaim/Add event in CSILimit plugin. (#124703, @utam0k) [SIG Scheduling and Storage]

  • Implement new cluster events UpdatePodSchedulingGatesEliminated and UpdatePodTolerations for scheduler plugins. (#127083, @sanposhiho) [SIG Scheduling]

  • Improve Node QueueHint in the NodeAffinty plugin by ignoring unrelated changes that keep pods unschedulable. (#127444, @dom4ha) [SIG Scheduling and Testing]

  • Improve Node QueueHint in the NodeResource Fit plugin by ignoring unrelated changes that keep pods unschedulable. (#127473, @dom4ha) [SIG Scheduling and Testing]

  • Improve performance of the job controller when handling job delete events. (#127378, @hakuna-matatah) [SIG Apps]

  • Improve performance of the job controller when handling job update events. (#127228, @hakuna-matatah) [SIG Apps]

  • JWT authenticators now set the jti claim (if present and is a string value) as credential id for use by audit logging. (#127010, @aramase) [SIG API Machinery, Auth and Testing]

  • Kube-apiserver: a new --requestheader-uid-headers flag allows configuring request header authentication to obtain the authenticating user's UID from the specified headers. The suggested value for the new option is X-Remote-Uid. When specified, the kube-system/extension-apiserver-authentication configmap will include the value in its .data[requestheader-uid-headers] field. (#115834, @stlaz) [SIG API Machinery, Auth, Cloud Provider and Testing]

  • Kube-proxy uses field-selector clusterIP!=None on Services to avoid watching for Headless Services, reduce unnecessary network bandwidth (#126769, @Sakuralbj) [SIG Network]

  • Kubeadm: kubeadm upgrade apply now supports phase sub-command, user can use kubeadm upgrade apply phase <phase-name> to execute the specified phase, or use kubeadm upgrade apply --skip-phases <phase-names> to skip some phases during cluster upgrade. (#126032, @SataQiu) [SIG Cluster Lifecycle]

  • Kubeadm: kubeadm upgrade node now supports addon and post-upgrade phases. User can use kubeadm upgrade node phase addon to execute the addon upgrade, or use kubeadm upgrade node --skip-phases addon to skip the addon upgrade. Currently, the post-upgrade phase is no-op, and it is mainly used to handle some release specific post-upgrade tasks. (#127242, @SataQiu) [SIG Cluster Lifecycle]

  • Kubeadm: add a validation warning when the certificateValidityPeriod is more than the caCertificateValidityPeriod (#126538, @SataQiu) [SIG Cluster Lifecycle]

  • Kubeadm: allow mixing the flag --config with the special flag --print-manifest of the subphases of 'kubeadm init phase addon'. (#126740, @neolit123) [SIG Cluster Lifecycle]

  • Kubeadm: if an unknown command name is passed to any parent command such as 'kubeadm init phase' return an error. If 'kubeadm init phase' or another command that has subcommands is called without subcommand name, print the available commands and also return an error. (#127096, @neolit123) [SIG Cluster Lifecycle]

  • Kubeadm: promoted feature gate EtcdLearnerMode to GA. Learner mode in etcd deployed by kubeadm is now locked to enabled by default. (#126374, @pacoxu) [SIG Cluster Lifecycle]

  • Kubelet: add log and event for cgroup v2 with kernel older than 5.8. (#126595, @pacoxu) [SIG Node]

  • Kubernetes is now built with go 1.23.0 (#127076, @cpanato) [SIG Release and Testing]

  • Promoted RetryGenerateName to stable; the feature is enabled by default. --feature-gates=RetryGenerateName=true not needed on kube-apiserver binaries and will be removed in a future release. (#127093, @jpbetz) [SIG API Machinery]

  • Support inflight_events metric in the scheduler for QueueingHint (alpha feature). (#127052, @sanposhiho) [SIG Scheduling]

  • Support specifying a custom network parameter when running e2e-node-tests with the remote option. (#127574, @bouaouda-achraf) [SIG Node and Testing]

  • The scheduler retries gated Pods more appropriately, giving them a backoff penalty too. (#126029, @sanposhiho) [SIG Scheduling]

  • Transformation_operations_total metric will have additional resource label which can be used for resource specific validations for example handling of encryption config by the apiserver. (#126512, @kmala) [SIG API Machinery, Auth, Etcd and Testing]

  • Unallowed label values will show up as "unexpected" in scheduler metrics (#126762, @richabanker) [SIG Instrumentation and Scheduling]

  • When SchedulerQueueingHint is enabled, the scheduler's in-tree plugins now subscribe to specific node events to decide whether to requeue Pods. This allows the scheduler to handle cluster events faster with less memory.

    Specific node events include updates to taints, tolerations or allocatable. In-tree plugins now ignore node updates that don't modify any of these fields. (#127220, @sanposhiho) [SIG Node, Scheduling and Storage]

  • When SchedulerQueueingHints is enabled, clear events cached in the scheduling queue as soon as possible so that the scheduler consumes less memory. (#120586, @sanposhiho) [SIG Scheduling]

Documentation

  • Clarified the kube-controller-manager documentation for --allocate-node-cidrs, --cluster-cidr, and --service-cluster-ip-range flags to accurately reflect their dependencies and usage conditions. (#126784, @eminwux) [SIG API Machinery, Cloud Provider and Docs]
  • Documented the --for=create option to kubectl wait (#127327, @ryanwinter) [SIG CLI]

Failing Test

  • Kubelet Plugins are now re-registered properly on Windows if the re-registration period is < 15ms. (#114136, @claudiubelu) [SIG Node, Storage, Testing and Windows]

Bug or Regression

  • API emulation versioning honors cohabitating resources (#127239, @xuzhenglun) [SIG API Machinery]
  • Apiserver repair controller is resilient to etcd errors during bootstrap and retries during 30 seconds before failing. (#126671, @fusida) [SIG Network]
  • Applyconfiguration-gen no longer generates duplicate methods and ambiguous member accesses when types end up with multiple members of the same name (through embedded structs). (#127001, @skitt) [SIG API Machinery]
  • DRA: when a DRA driver was started after creating pods which need resources from that driver, no additional attempt was made to schedule such unschedulable pods again. Only affected DRA with structured parameters. (#126807, @pohly) [SIG Node, Scheduling and Testing]
  • DRA: when enabling the scheduler queuing hint feature, pods got stuck as unschedulable for a while unnecessarily because recording the name of the generated ResourceClaim did not trigger scheduling. (#127497, @pohly) [SIG Auth, Node, Scheduling and Testing]
  • Discarded the output streams of destination path check in kubectl cp when copying from local to pod and added a 3 seconds timeout to this check (#126652, @ardaguclu) [SIG CLI]
  • Fix CEL estimated cost of expressions that perform equality checks of IPs, CIDRs, Quantities, Formats and URLs. (#126359, @jpbetz) [SIG API Machinery]
  • Fix a bug on the endpoints controller that does not reconcile the Endpoint object after this is truncated (it gets more than 1000 endpoints addresses) (#127417, @aojea) [SIG Apps, Network and Testing]
  • Fix a bug when the hostname label of a node does not match the node name, pods bound to a PV with nodeAffinity using the hostname may be scheduled to the wrong node or experience scheduling failures. (#125398, @AxeZhan) [SIG Scheduling and Storage]
  • Fix a bug with dual stack clusters using the beta feature MultiCIDRServiceAllocator can not create dual stack Services or Services with IPs on the secondary range. User that want to use this feature in 1.30 with dual stack clusters can workaround the issue by setting the feature gate DisableAllocatorDualWrite to true (#127598, @aojea) [SIG Network and Testing]
  • Fix a potential memory leak in QueueingHint (alpha feature) (#127016, @sanposhiho) [SIG Scheduling]
  • Fix a scheduler preemption issue where the victim pod was not deleted due to incorrect status patching. This issue occurred when the preemptor and victim pods had different QoS classes in their status, causing the preemption to fail entirely. (#126644, @Huang-Wei) [SIG Scheduling]
  • Fix fake client to accept request without metadata.name to better emulate behavior of actual client. (#126727, @jpbetz) [SIG API Machinery]
  • Fix race condition in kube-proxy initialization that could blackhole UDP traffic to service VIP. (#126532, @wedaly) [SIG Network]
  • Fix the wrong hierarchical structure for the child span and the parent span (i.e. SerializeObject and List). In the past, some children's spans appeared parallel to their parents. (#127551, @carlory) [SIG API Machinery and Instrumentation]
  • Fixed a bug where init containers may fail to start due to a temporary container runtime failure. (#126543, @gjkim42) [SIG Node]
  • Fixed a bug which the scheduler didn't correctly tell plugins Node deletion. This bug could impact all scheduler plugins subscribing to Node/Delete event, making the queue keep the Pods rejected by those plugins incorrectly at Node deletion. Among the in-tree plugins, PodTopologySpread is the only victim. (#127464, @sanposhiho) [SIG Scheduling and Testing]
  • Fixed a possible memory leak for QueueingHint (alpha feature) (#126962, @sanposhiho) [SIG Scheduling]
  • Fixed a regression in 1.29+ default configurations, where regular init containers may fail to start due to a temporary container runtime failure. (#127162, @gjkim42) [SIG Node]
  • Fixed an issue where requests sent by the KMSv2 service would be rejected due to having an invalid authority header. (#126930, @Ruddickmg) [SIG API Machinery and Auth]
  • Fixed: dynamic client-go can now handle subresources with an UnstructuredList response (#126809, @ryantxu) [SIG API Machinery]
  • Fixes a bug in the garbage collector controller which could block indefinitely on a cache sync failure. This fix allows the garbage collector to eventually continue garbage collecting other resources if a given resource cannot be listed or watched. Any objects in the unsynced resource type with owner references with blockOwnerDeletion: true will not be known to the garbage collector. Use of blockOwnerDeletion has always been best-effort and racy on startup and object creation, with this fix, it continues to be best-effort for resources that cannot be synced by the garbage collector controller. (#125796, @haorenfsa) [SIG API Machinery, Apps and Testing]
  • Fixes a bug where restartable and non-restartable init containers were not accounted for in the message and annotations of eviction event. (#124947, @toVersus) [SIG Node]
  • Fixes the ability to set the resolvConf option in drop-in kubelet configuration files, validates that drop-in kubelet configuration files are in a supported version. (#127421, @liggitt) [SIG Node]
  • Fixes the bug in NodeUnschedulable that only happens with QHint enabled, which the scheduler might miss some updates for the Pods rejected by NodeUnschedulable plugin and put the Pods in the queue for a longer time than needed. (#127427, @sanposhiho) [SIG Scheduling]
  • Fixes the bug in PodTopologySpread that only happens with QHint enabled, which the scheduler might miss some updates for the Pods rejected by PodTopologySpread plugin and put the Pods in the queue for a longer time than needed. (#127447, @sanposhiho) [SIG Scheduling]
  • HostNetwork pods no longer depend on the PodIPs to be assigned to configure the defined hostAliases on the Pod (#126460, @aojea) [SIG Network, Node and Testing]
  • If a client makes an API streaming requests and specifies an application/json;as=Table content type, the API server now responds with a 406 (Not Acceptable) error. This change helps to ensure that unsupported formats, such as Table representations are correctly rejected. (#126996, @p0lyn0mial) [SIG API Machinery and Testing]
  • If an old pod spec has used image volume source, we must allow it when updating the resource even if the feature-gate ImageVolume is disabled. (#126733, @carlory) [SIG API Machinery, Apps and Node]
  • Improve PVC Protection Controller's scalability by batch-processing PVCs by namespace with lazy live pod listing. (#125372, @hungnguyen243) [SIG Apps, Node, Storage and Testing]
  • Improve PVC Protection Controller's scalability by batch-processing PVCs by namespace with lazy live pod listing. (#126745, @hungnguyen243) [SIG Apps, Storage and Testing]
  • Kube-apiserver: Fixes a 1.31 regression that stopped honoring build ID overrides with the --version flag (#126665, @liggitt) [SIG API Machinery]
  • Kubeadm: ensure that Pods from the upgrade preflight check CreateJob are properly terminated after a timeout. (#127333, @yuyabee) [SIG Cluster Lifecycle]
  • Kubeadm: when adding new control plane nodes with "kubeamd join", ensure that the etcd member addition is performed only if a given member URL does not already exist in the list of members. Similarly, on "kubeadm reset" only remove an etcd member if its ID exists. (#127491, @SataQiu) [SIG Cluster Lifecycle]
  • Kubelet now attempts to get an existing node if the request to create it fails with StatusForbidden. (#126318, @hoskeri) [SIG Node]
  • Kubelet: use the CRI stats provider if PodAndContainerStatsFromCRI feature is enabled (#126488, @haircommander) [SIG Node]
  • Removed unneeded permissions for system:controller:persistent-volume-binder and system:controller:expand-controller clusterroles (#125995, @carlory) [SIG Auth and Storage]
  • Revert "fix: handle socket file detection on Windows" (#126976, @jsturtevant) [SIG Node]
  • Send an error on ResultChan and close the RetryWatcher when the client is forbidden or unauthorized from watching the resource. (#126038, @mprahl) [SIG API Machinery]
  • Send bookmark right now after sending all items in watchCache store (#127012, @Chaunceyctx) [SIG API Machinery]
  • Terminated Pods on a node will not be re-admitted on kubelet restart. This fixes the problem of Completed Pods awaiting for the finalizer marked as Failed after the kubelet restart. (#126343, @SergeyKanzhelev) [SIG Node and Testing]
  • The CSI volume plugin stopped watching the VolumeAttachment object if the object is not found or the volume is not attached when kubelet waits for a volume attached. In the past, it would fail due to missing permission. (#126961, @carlory) [SIG Storage]
  • The Usage and VolumeCondition are both optional in the response and if CSIVolumeHealth feature gate is enabled kubelet needs to consider returning metrics if either one is set. (#127021, @Madhu-1) [SIG Storage]
  • Upgrade coreDNS to v1.11.3 (#126449, @BenTheElder) [SIG Cloud Provider and Cluster Lifecycle]
  • Use allocatedResources on PVC for node expansion in kubelet (#126600, @gnufied) [SIG Node, Storage and Testing]
  • When entering a value other than "external" to the "--cloud-provider" flag for the kubelet, kube-controller-manager, and kube-apiserver, the user will now receive a warning in the logs about the disablement of internal cloud providers, this is in contrast to the previous warnings about deprecation. (#127711, @elmiko) [SIG API Machinery, Cloud Provider and Node]

Other (Cleanup or Flake)

  • Added an example for kubectl delete with the --interactive flag. (#127512, @bergerhoffer) [SIG CLI]
  • Aggregated Discovery v2beta1 fixture is removed in ./api/discovery. Please use v2 (#127008, @Jefftree) [SIG API Machinery]
  • Device manager: stop using annotations to pass CDI device info to runtimes. Containerd versions older than v1.7.2 don't support passing CDI info through CRI and need to be upgraded. (#126435, @bart0sh) [SIG Node]
  • Feature gate "AllowServiceLBStatusOnNonLB" has been removed. This gate has been stable and unchanged for over a year. (#126786, @thockin) [SIG Apps]
  • Fix a warning message about the gce in-tree cloud provider state (#126773, @carlory) [SIG Cloud Provider]
  • Kube-proxy initialization waits for all pre-sync events from node and serviceCIDR informers to be delivered. (#126561, @wedaly) [SIG Network]
  • Kube-proxy will no longer depend on conntrack binary for stale UDP connections cleanup (#126847, @aroradaman) [SIG Cluster Lifecycle, Network and Testing]
  • Kubeadm: don't warn if crictl binary does not exist since kubeadm does not rely on crictl since v1.31. (#126596, @saschagrunert) [SIG Cluster Lifecycle]
  • Kubeadm: make sure the extra environment variables written to a kubeadm managed PodSpec are sorted alpha-numerically by the environment variable name. (#126743, @neolit123) [SIG Cluster Lifecycle]
  • Kubeadm: remove the deprecated sub-phase of 'init kubelet-finilize' called experimental-cert-rotation, and use 'enable-client-cert-rotation' instead. (#126913, @pacoxu) [SIG Cluster Lifecycle]
  • Kubeadm: removed socat and ebtables from kubeadm preflight checks (#127151, @saschagrunert) [SIG Cluster Lifecycle]
  • Kubeadm: removed the deprecated and NO-OP flags --features-gates for kubeadm upgrde apply and --api-server-manfiest, --controller-manager-manfiest and --scheduler-manifest for kubeadm upgrade diff. (#127123, @neolit123) [SIG Cluster Lifecycle]
  • Kubeadm: removed the deprecated flag '--experimental-output', please use the flag '--output' instead that serves the same purpose. Affected commands are - "kubeadm config images list", "kubeadm token list", "kubeadm upgade plan", "kubeadm certs check-expiration". (#126914, @carlory) [SIG Cluster Lifecycle]
  • Kubeadm: switched the kube-scheduler static Pod to use the endpoints /livez (for startup and liveness probes) and /readyz (for the readiness probe). Previously /healthz was used for all probes, which is deprecated behavior in the scope of this component. (#126945, @liangyuanpeng) [SIG Cluster Lifecycle]
  • Optimize code, filter podUID is empty string when call this getPodAndContainerForDevice method. (#126997, @lengrongfu) [SIG Node]
  • Remove GAed feature gates ServerSideApply/ServerSideFieldValidation (#127058, @carlory) [SIG API Machinery]
  • Removed feature gate ValiatingAdmissionPolicy. (#126645, @cici37) [SIG API Machinery, Auth and Testing]
  • Removed generally available feature gate CloudDualStackNodeIPs. (#126840, @carlory) [SIG API Machinery and Cloud Provider]
  • Removed generally available feature gate LegacyServiceAccountTokenCleanUp. (#126839, @carlory) [SIG Auth]
  • Removed generally available feature gate MinDomainsInPodTopologySpread (#126863, @carlory) [SIG Scheduling]
  • Removed generally available feature gate NewVolumeManagerReconstruction. (#126775, @carlory) [SIG Node and Storage]
  • Removed generally available feature gate NodeOutOfServiceVolumeDetach (#127019, @carlory) [SIG Apps and Testing]
  • Removed generally available feature gate StableLoadBalancerNodeSet. (#126841, @carlory) [SIG API Machinery, Cloud Provider and Network]
  • Removed the KMSv2 and KMSv2KDF feature gates. The associated features graduated to stable in the Kubernetes v1.29 release. (#126698, @enj) [SIG API Machinery, Auth and Testing]
  • Short circuit if the compaction request from apiserver is disabled. (#126627, @fusida) [SIG Etcd]
  • Show a warning message to inform users that the legacy profile is planned to be deprecated. (#127230, @mochizuki875) [SIG CLI]
  • The flowcontrol.apiserver.k8s.io/v1beta3 API version of FlowSchema and PriorityLevelConfiguration is no longer served in v1.32. Migrate manifests and API clients to use the flowcontrol.apiserver.k8s.io/v1 API version, available since v1.29. More information is at https://kubernetes.io/docs/reference/using-api/deprecation-guide/#flowcontrol-resources-v132 (#127017, @carlory) [SIG API Machinery and Testing]
  • The kube-proxy command line flags --healthz-port and --metrics-port, which were previously deprecated, have now been removed. (#126889, @aroradaman) [SIG Network and Windows]
  • The percentage display in kubectl top node is changed from % -> (%) (#126995, @googs1025) [SIG CLI]
  • Update github.com/coredns/corefile-migration to v1.0.24 (#126851, @BenTheElder) [SIG Architecture and Cluster Lifecycle]
  • Updated cni-plugins to v1.5.1. (#126966, @saschagrunert) [SIG Cloud Provider, Node and Testing]
  • Updated cri-tools to v1.31.0. (#126590, @saschagrunert) [SIG Cloud Provider and Node]
  • Upgrade etcd client to v3.5.16 (#127279, @serathius) [SIG API Machinery, Auth, Cloud Provider and Node]

Dependencies

Added

Changed

Removed


Contributors, the CHANGELOG-1.32.md has been bootstrapped with v1.32.0-alpha.1 release notes and you may edit now as needed.



Published by your Kubernetes Release Managers.

--
You received this message because you are subscribed to the Google Groups "kubernetes-announce" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-anno...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-announce/Yiod9IWZTi-ymBnhJDzNIw%40geopod-ismtpd-11.

Reply all
Reply to author
Forward
0 new messages