Kubernetes v1.26.10 is live!

563 views

Skip to first unread message

Marko Mudrinić

unread,

Oct 18, 2023, 12:25:27 PM10/18/23

to kubernetes-announce, dev

Kubernetes Community,

Kubernetes v1.26.10 has been built and pushed using Golang version 1.20.10.

The release notes have been updated in CHANGELOG-1.26.md, with a pointer to them on GitHub:

v1.26.10

Downloads for v1.26.10

Source Code

filename	sha512 hash
kubernetes.tar.gz	71e444111cb3295ea6571f963e3b687df70ffb0f23bbebf7740841e2ac6cd3aa9bc10b022ea8f918da3422c4c989d818268be38066e6f26194e581e7362129ed
kubernetes-src.tar.gz	f6bd86c318bf092d37a6965a0ae575f7beab73c4295f193bed34f0c82a18901cb5b9119102ae6967f618ab5797e82e98a06a6171dc18c73d2eee2d2a334bb0fe

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	12797b69f528c045310d2fe35b239f1265e926cc0110c2a2ce2855f96f46cb2e75a37564fe873d3d071911b56b81133850ec38c40a89b051fc18e1a733d40fa2
kubernetes-client-darwin-arm64.tar.gz	c5579815c549443d566824513bc51e73ecaed1229a371f906014cb9842cc40b0f64ec2d22ba728d746577c7f83cb16a787bcb5764036328d25c4f2f1d77112d0
kubernetes-client-linux-386.tar.gz	f7500b9e32499e122fc78a7b79bc778f45bce2fd268201fa871c64df097d9549a43d466a185f87df9b6a67bc5cdcc9ed08053ed0c673b59b7dbf81105b553990
kubernetes-client-linux-amd64.tar.gz	e0297612af35b05329f16528c458764b975136339a6a282bf8c3ef9c8a68a6c425f5e9a00c473f11862412e500ced3042e1a84224c9a4ba476b28f0a9d6fa585
kubernetes-client-linux-arm.tar.gz	3ccb33046bd5504f6fadb2a3696b73dc66e00cfd8be27da29eda7240a4d67c624543a2ae0793d312e26418a0025967df53eb0c8351b1888ecaa80faddf968795
kubernetes-client-linux-arm64.tar.gz	170dc0dc0821ac34e26687327d3c1da88dd5ddb64704d715a708caa773729e998f9a14d313105e067e0be07c6b07d0563af9023a53b73aa1e4ca2746f7bf2229
kubernetes-client-linux-ppc64le.tar.gz	012f103c0d191f06d79568e5faec166fcd4040771892a2fe4cbf4a76484720c8aaa7933bdd1f7812cb6cf93982f138434abd5e83fbabc4408f3950454510d872
kubernetes-client-linux-s390x.tar.gz	7decbde676b50c87eec4ff3dd3a7affd980d23da5e6849dc6b45f04d7408a5fa3a4656995e8b1640d834ea873da826bde102d3a4991de3d584c91533c0f5969a
kubernetes-client-windows-386.tar.gz	cbcd7b9b7a1367906ec457e6fcfbff5bbe6ab999727dffd6eaad4bbf1e3aafab27a13325db252880ee87acbcb90601014b1dc0ea58790da54e9dda21895ef9e1
kubernetes-client-windows-amd64.tar.gz	d07390c8e14695c2a6567723e19c54eeec0ec283ccd6758e76621251caa6ba9a1d039bc34d118adc43f298f41f85c3a0334c116bb5c5c0cd0f0170fdfc16a3d7
kubernetes-client-windows-arm64.tar.gz	554591e9520904deeada4a81cc256e5f5c2d34fa58b1a693368dd779528ba022edc33b7c37d16e0f746c70b8d815da7e386622e0096711794cdfe462a61ebbec

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	1e334ccd1b1ee8189be7c11e1fe76df91b1380eea3f8e293e1af53f05c7c9d6384e322e26114a067ec3095d1a55b2b8301e72ea8842cb35e5d48156fe502595e
kubernetes-server-linux-arm.tar.gz	117019118a460154a1bbf86f1b2aa8912cfd8715db242b4c1cfb13b42738055c39c7cf861b5dfbde10e08e48a5cb0e1e9044e4cedafe42fd7058b33507492d65
kubernetes-server-linux-arm64.tar.gz	2e46bebefcd3fd84fa572c8501b06ec9312cde439e40cc3677cd7fe7f3035e5c899e491cabb881a42d487dbef1c48f923cd55f7a611df2ea5a9b70935b86c860
kubernetes-server-linux-ppc64le.tar.gz	701bdf04d0baf2e9d164ddff1e3f52e58f716c8c6a66e91e8d651102344cf8be623009b476e2a91824cc918afff82a9822fbb6d87250f232e2806a545402d875
kubernetes-server-linux-s390x.tar.gz	3299cc0265c74536a33856c28300268cdadf7311dbe863cc786c880410009a9157d99a5f5078fb9588a9a21e2a899be1916a3bbbcd09eae4e81c2a2633a637e8

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	ce2d55c178d31e5890a67a7d75bde7aaf6cd212178dc394ff32e9bb7953296d57d22e8e27a23d5f6eac36125040763aa37aebcd4fd0ca576635c232f6d0aa3c9
kubernetes-node-linux-arm.tar.gz	21f15f578ae70c6b40d59a3372c074facc5210b171f569ec085cffb08376e8c83aec0e53e4b36bf910e2afe9ffe6bff956987a7e9d7749641b552c9cd4d1b997
kubernetes-node-linux-arm64.tar.gz	b95440ceb06f4f4a7ee4d84d0ef3e3a8c290d1afd6476db1eef84aa7662f309ba4c71b42169c56d03431460b0576bb93f5eccd9542a9b730a1ce41c06d115dda
kubernetes-node-linux-ppc64le.tar.gz	f7cc54cffdf8c2a7dcea6e24e31e3036fa20ecd43801ea64625071ebe23b61a4b12c9c21e91b5fd79aed5b4e7ee95c8cb2e9414657689446e31c55b95bfa9f99
kubernetes-node-linux-s390x.tar.gz	c4be2f3657c940576469e6ba052bcfd8f78cb4582f8a8035aa11fe93ef231245cc4d41475ff791dc928e3c60fcda22b3a4be5669ed0fcc6b66e3b0587367bf57
kubernetes-node-windows-amd64.tar.gz	27d7717e91851f3311435d3227f4db954867a4e76640d0fd43825bdeb614d20ca0f3cc0bc5e50afcf2f0c67208c146f238c9f1584f5206e385a9a3d732befc26

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.26.10	amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.26.10	amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.26.10	amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.26.10	amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.26.10	amd64, arm, arm64, ppc64le, s390x

Changelog since v1.26.9

Changes by Kind

Feature

Kubernetes is now built with Go 1.20.10 (#121151, @cpanato) [SIG Release and Testing]
Kubernetes is now built with Go 1.20.9 (#121023, @cpanato) [SIG Release and Testing]

Bug or Regression

Adds an opt-in mitigation for http/2 DOS vulnerabilities for CVE-2023-44487 and CVE-2023-39325 for the API server when the client is unauthenticated. The mitigation may be enabled by setting the UnauthenticatedHTTP2DOSMitigation feature gate to true (it is disabled by default). An API server fronted by an L7 load balancer that already mitigates these http/2 attacks may choose not to enable the kube-apiserver mitigation to avoid disrupting load balancer → kube-apiserver connections if http/2 requests from multiple clients share the same backend connection. An API server on a private network may choose not to enable the kube-apiserver mitigation to prevent performance regressions for unauthenticated clients. Authenticated requests rely on the fix in golang.org/x/net v0.17.0 alone. https://issue.k8s.io/121197 tracks further mitigation of http/2 attacks by authenticated clients. (#121200, @enj) [SIG API Machinery]
Fix a bug in cronjob controller where already created jobs may be missing from the status. (#120649, @andrewsykim) [SIG Apps]
Fixed a 1.26.7 regression where kube-controller-manager can crash when StatefulSet with Parallel policy and PVC labels is scaled up. (#121186, @aleksandra-malinowska) [SIG Apps]
Fixed attaching volumes after detach errors. Now volumes that failed to detach are not treated as attached, Kubernetes will make sure they are fully attached before they can be used by pods. (#120595, @jsafrane) [SIG Apps and Storage]
Fixes a bug where Services using finalizers may hold onto ClusterIP and/or NodePort allocated resources for longer than expected if the finalizer is removed using the status subresource (#120656, @aojea) [SIG Network and Testing]
Fixes creationTimestamp: null causing unnecessary writes to etcd (#116865, @alexzielenski) [SIG API Machinery and Testing]
Revised the logic for DaemonSet rolling update to exclude nodes if scheduling constraints are not met. This eliminates the problem of rolling updates to a DaemonSet getting stuck around tolerations. (#120789, @mochizuki875) [SIG Apps and Testing]
Sometimes, the scheduler incorrectly placed a pod in the "unschedulable" queue instead of the "backoff" queue. This happened when some plugin previously declared the pod as "unschedulable" and then in a later attempt encounters some other error. Scheduling of that pod then got delayed by up to five minutes, after which periodic flushing moved the pod back into the "active" queue. (#120334, @pohly) [SIG Scheduling]

Other (Cleanup or Flake)

Etcd: update to v3.5.9 (#118078, @nikhita) [SIG Cloud Provider, Cluster Lifecycle and Testing]
Fixes an issue where the vsphere cloud provider will not trust a certificate if:
- The issuer of the certificate is unknown (x509.UnknownAuthorityError)
- The requested name does not match the set of authorized names (x509.HostnameError)
- The error surfaced after attempting a connection contains one of the substrings: "certificate is not trusted" or "certificate signed by unknown authority" (#120766, @MadhavJivrajani) [SIG Architecture and Cloud Provider]
Set the resolution for the job_controller_job_sync_duration_seconds metric from 4ms to 1min (#120669, @mimowo) [SIG Apps and Instrumentation]

Dependencies

Added

Nothing has changed.

Changed

github.com/vmware/govmomi: v0.30.0 → v0.30.6
golang.org/x/crypto: v0.1.0 → v0.14.0
golang.org/x/net: v0.8.0 → v0.17.0
golang.org/x/sys: v0.6.0 → v0.13.0
golang.org/x/term: v0.6.0 → v0.13.0
golang.org/x/text: v0.8.0 → v0.13.0

Removed

Nothing has changed.

Contributors, the CHANGELOG-1.26.md has been bootstrapped with v1.26.10 release notes and you may edit now as needed.