Kubernetes v1.28.2 is live!

[Marko Mudrinić]

Kubernetes Community,

Kubernetes v1.28.2 has been built and pushed using Golang version 1.20.8.

The release notes have been updated in CHANGELOG-1.28.md, with a pointer to them on GitHub:

---

v1.28.2

Downloads for v1.28.2

Source Code

filename	sha512 hash
kubernetes.tar.gz	f6e13f2632697aab3ce6230d777240dd3d9c23b65eba7ff7d1df5d330e4dd926f8f439b77d823f8d08f44ddcd7eeca476af6d83eaa29cf623e86f2e4f315074a
kubernetes-src.tar.gz	3c21536962251eb199e4b0f42379cdfa172e826b10a28d8946df23bb8bae5e12d09647448d1f7a9c7146166178dd38398dee308dcc1e604000be908e1e0bbe89

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	b85d0f2da76708a934cb8cecdf08a2d7c146c8f8209f49deab82b01c15842cf3c0631e01977af20230e69d478dfb21b5bf6acf9fc985d9ae27d1126f7a9f1112
kubernetes-client-darwin-arm64.tar.gz	0e556a34b3c659c45a9368b8b0d709831bdfa6562adb48dd5c924085806f3e1b76d4ba3b5dd719bc2d126f1bd640ddc94ddbd37515168a4de1a358b4605e031a
kubernetes-client-linux-386.tar.gz	a091434bc89f762655fb76e301c9287297ab48079118eb045589d6ef246fcda307a1799732178c568ea8c64211b5bdae3ba7a836bdd60d1c61bb7dcb7b7ee324
kubernetes-client-linux-amd64.tar.gz	ab534cd06d8cc89d1288590cfae98415facaa7db2f481d8f6be0a20574d2990cc55348cf98386c34df7788aa80ff018fc844816a2b605bcb350a82d752738fdc
kubernetes-client-linux-arm.tar.gz	31fb2570bd4dff5ad9f6525e33fa80847ee35d2804a1c81af8ce27855a1b4d8267bea3b522ac90bd49bc5c6a9a9fd9388a14899ebd48baac214a98644f357e02
kubernetes-client-linux-arm64.tar.gz	2304f6888752dd22e898526df091b66aae85835690e922a8e017d57e077dd1c8fcdfca16fc5aba94e9fb51ad800832305a574aee24c6cfa5d37278c8e28a144e
kubernetes-client-linux-ppc64le.tar.gz	5dbb4fefd197b14ccdc3b82d088b0e09987b1a8afbf47e03abb6707c455716658ed95d7e2dce7e5d7e12981febd53eebd0ed6296d282d2ce317c191a2c8116e9
kubernetes-client-linux-s390x.tar.gz	455e436244ff306604eb5d8a230a24186799ef5c462b7f278bb2d62e36245639db7a0d89241682dc201351a4c648ba788acdd7ac73a486cd6db426e1079ed87b
kubernetes-client-windows-386.tar.gz	96a4cf768fb59ad626a383bddcc9bab433f9d309ba3b06a8c9d927799a5ee6c4645412d22a190255c9a3e7104bf6d914f5976fcdd39876bdf1598c72dabb68a7
kubernetes-client-windows-amd64.tar.gz	e7075cf3f0103edd22962fdb5a9adb4f80249a4adc8309794fc15f2f3d8e934feee6adc47c1724cc3a1c497d9cc0d4afbe0d66511042670cd2f1da1d82c70ba3
kubernetes-client-windows-arm64.tar.gz	d230193bc1f73f6834f0a9e919b673b7fcd645343773d9cf05b33ce95d81d5ed6f8efa1620e7099e8291beab47a2f3e058dde25a96fd0873b2de2ab28e7c3b7d

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	cd54f2f48733806208d3b1585ed307bebf91893e250a1eb3e18355c9a9e6d1f75a70966cb66165be2fbb8566e5368b14f66f63a8929fbceca30aa73bfd491441
kubernetes-server-linux-arm64.tar.gz	e879568fb40ac54b897ac52e39aa3077278f9ea502c4b7d639a247d503be85db623c264cc30300016ac1651db2c93bc82420decb5e904af396f54e40d3aa33ff
kubernetes-server-linux-ppc64le.tar.gz	212ef04a6d443f239fa6ecb34df5f4fc93f172dab5a5d2931a0554eafdd3901e8504f6e8918712c44f843f3be55adb83c241839d60a9de1d4b6988035f47dc6d
kubernetes-server-linux-s390x.tar.gz	b7efe45fbb811ee09e0c8daec0b608546f065c389e2b480c0d5178ea778690f11fc3d880a84baba2331bb30042898a616b5a4f7934456543aaa9b3fc0169f923

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	adafa3beb4525d898a602ec87f1d2b35ad89f71f6b89aad81ee0cdff97a2916ef323a21b5007d61bb0453e12d3058ad21861184049eb22c26b86be4dc268e7d9
kubernetes-node-linux-arm64.tar.gz	c9ece93728bc2712004d508c37e692add5cc358437ee0b209ef062b81db137cccf85bf9f4560c6436c0b83193a4ba23fa28e06dd432281b946f235aa30e88842
kubernetes-node-linux-ppc64le.tar.gz	85918f6235563c10d58ae18e0a1918011492c4f812a753ba185447b6080aae88ccf94c6008519694fb9fca4b2a9cc02dec6ae91f1ca55a489b383d85c8f7fa9c
kubernetes-node-linux-s390x.tar.gz	ea59ee997d3df3d89405be4943dbe8f76cc8066e98173db30f0f83ad06a9c60c73217004f837f14310bf17228fd0c4e2d2917632ddda3cc3e483c353edc38745
kubernetes-node-windows-amd64.tar.gz	b8125003fcd8fa7e89d7cbc49f634cc01cd8fdf198a3325f22e5bb3743923e03e82c3d4a7545b32b0da82c950b8d887997e502839359027f194de4a0a4774654

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.28.2	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.28.2	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.28.2	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.28.2	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.28.2	amd64, arm64, ppc64le, s390x
registry.k8s.io/kubectl:v1.28.2	amd64, arm64, ppc64le, s390x

Changelog since v1.28.1

Changes by Kind

API Change

• Fixed a bug where CEL expressions in CRD validation rules would incorrectly compute a high estimated cost for functions that return strings, lists or maps. The incorrect cost was evident when the result of a function was used in subsequent operations. (#119807, @jpbetz) [SIG API Machinery, Auth and Cloud Provider]
• Mark Job onPodConditions as optional in pod failure policy (#120208, @mimowo) [SIG API Machinery and Apps]

Feature

• Kubernetes is now built with Go 1.20.8 (#120495, @cpanato) [SIG Release and Testing]

Bug or Regression

• Fix OpenAPI v3 not being cleaned up after deleting APIServices (#120108, @tnqn) [SIG API Machinery and Testing]
• Fix a 1.28 regression in scheduler: a pod with concurrent events could incorrectly get moved to the unschedulable queue where it could got stuck until the next periodic purging after 5 minutes if there was no other event for it. (#120445, @pohly) [SIG Scheduling]
• Fix a concurrent map access in TopologyCache's HasPopulatedHints method. (#120372, @Miciah) [SIG Network]
• Fixed a 1.26 regression scheduling bug by ensuring that preemption is skipped when a PreFilter plugin returns UnschedulableAndUnresolvable (#119951, @sanposhiho) [SIG Scheduling]
• Fixed a 1.27 scheduling regression that PostFilter plugin may not function if previous PreFilter plugins return Skip (#119942, @Huang-Wei) [SIG Scheduling and Testing]
• Fixed a 1.28 regression around restarting init containers in the right order relative to normal containers (#120440, @gjkim42) [SIG Node and Testing]
• Fixed a regression in default 1.27 configurations in kube-apiserver: fixed the AggregatedDiscoveryEndpoint feature (beta in 1.27+) to successfully fetch discovery information from aggregated API servers that do not check Accept headers when serving the /apis endpoint (#120359, @Jefftree) [SIG API Machinery]
• Fixes a 1.28 regression handling negative index json patches (#120329, @liggitt) [SIG API Machinery]
• Fixes a bug where images pinned by the container runtime can be garbage collected by kubelet. (#120053, @ruiwen-zhao) [SIG Node]
• Ignore context canceled from validate and mutate webhook (#120155, @divyasri537) [SIG API Machinery]
• Kubeadm: fix nil pointer when etcd member is already removed (#120010, @neolit123) [SIG Cluster Lifecycle]

Dependencies

Added

Nothing has changed.

Changed

• github.com/evanphx/json-patch: v5.6.0+incompatible → v4.12.0+incompatible
• github.com/google/cel-go: v0.16.0 → v0.16.1

Removed

Nothing has changed.

---

Contributors, the CHANGELOG-1.28.md has been bootstrapped with v1.28.2 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.