Kubernetes v1.28.8 is live!

[Jeremy Rickard]

Kubernetes Community,

Kubernetes v1.28.8 has been built and pushed using Golang version 1.21.8.

The release notes have been updated in CHANGELOG-1.28.md, with a pointer to them on GitHub:

---

v1.28.8

Downloads for v1.28.8

Source Code

filename	sha512 hash
kubernetes.tar.gz	66998a96c8af53a8249708f5b25e77aae10fcf07e863d8c80145759dc7813d944a4bbd1b3a2b3676f33d2daf89d94bfe79475efe77694bb39b804dd8946405e8
kubernetes-src.tar.gz	02177b6c0517146bec036ddbad8575f742bbf8b328a604bc30f5e16398dee22f192b6840370d9e345492f919de98a0978c55ea0890587cb91afe77109a7efe8c

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	d5cde8002471c38a70417e708c6d355498e770de513dd8cbc5364036498eed01d2a2b69266a91ad132bfaab4fa0082986af7e3d9907d906459093eb30797bd84
kubernetes-client-darwin-arm64.tar.gz	03895f6d43f07cd83225100ac633830bf96a4a7f8bf1cf4175ab11bb4c98696efefa67ff1ea6333d00fe46bd8dc329dcb5a5355f97a616ad3666d9b21d8d28e7
kubernetes-client-linux-386.tar.gz	072894bceb8dbc4b443be095d0446d33b5ab235d312a4a571afa81411880bb882a352d4b023e5edf96be7fbb66f367a37056ce0cb5b2c3f54e767cfe45d111bd
kubernetes-client-linux-amd64.tar.gz	0812400f8285dc6ead6d25b332ebe3355edd1619b092d1af2445c578553b09a435af7627322eb50d07d0f2d82fd29f4441ceb5ba0b4c4bb990db2ebe197d3e0b
kubernetes-client-linux-arm.tar.gz	f08d1a33a84145f2493b0d4d85a85a2331d3753b93836166faa41e9222eca1cfdf0e3da624654d64a810bf16159ac2524d4be789ee85d6255ea1a3fde12b712f
kubernetes-client-linux-arm64.tar.gz	1ae4bd65c4f3483797c9b7dd7e1e8727b22a10dc09c877a9c2d468f615d1cdc915ec9f372832025fa7153cdb8e302d239738671a32a3ec715e2b7aa6d307dbd1
kubernetes-client-linux-ppc64le.tar.gz	daf0b71a340f7afe81cd0c49d42f9a6e259fcb0b5bcb60f7b0ddfe0137d7a5b9a80569aa38b1e6eb59d094b2bd69d64487d7df8021fd5720ec216ddb615e37d9
kubernetes-client-linux-s390x.tar.gz	61e81b992aea5ecbfb395b9ff26b66a209530dc3155d3275ff977833d4d8798972571a2b01cf6eee8389b75a9d03aee555c8c211114aba601e1864f86b8006da
kubernetes-client-windows-386.tar.gz	5c8890d079280deb489905e9bf8b1ef5df9e1267eda9dd0c691bca8f1eb2395629a5bea4d4e2d9d71b89af422a515e226aab50724ee673f298e15aa311926738
kubernetes-client-windows-amd64.tar.gz	63a47818e2d45ffa0e598bc7c0915e140121fedb7cde578fd00332118401bbf495aaee811da11f0cd9075e58a94fb1eda40936a7c12fbfae99e06a4bd04ed0fd
kubernetes-client-windows-arm64.tar.gz	287a83b2f19f15ebef9488d65c7509a0423345873671a748f77ea71acdae1d44cb83c7d638677e248907eff14e4fa6612947e7b7f63c1eaabaecf5d607f3f49b

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	3cb91a04cff7cc54d40e3cdeb9bd2b6ba57a54223de1aac82db33afcac47b7ed25a7267984937a7fb99e9eac23080a1879ec392978def7d70d327cff208eea2e
kubernetes-server-linux-arm64.tar.gz	6bd7d6654ab5454cada91454189b250c693264b0fe66dd2bcb7a80d7969785ecfecf90a8b550d1e9e576316c4275bbbd91a445819ec20a710eddc3c611fec3b4
kubernetes-server-linux-ppc64le.tar.gz	12058f01fcfa5c450c95f5f00149d095db7703bdb3736a6ed3fd33e8af3c60b702cfc4ae90cc79bbe0bb60de8470f9969eed4135343d527e15f852c3a986ab69
kubernetes-server-linux-s390x.tar.gz	3b37e695260f4305f916dfe53a4d6235ca4c4a559e0006e2c38e1832132e7b65c231f5e7daa6d7507f6d1be303430bd38f8425e1623a10389724c576054b4f7c

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	8739961e2657ac011ff9112d85d1958a6fe6f6c8d358ae5e882c526f40d49f95ebf3b90e35473fdd50981f952951714a2d0ed722efbae886586a36e33fb7d79f
kubernetes-node-linux-arm64.tar.gz	85a5d9971e6ed12e51f274259dc39223599c42a0f81f546f19ac5ccc60caae46e2feb850d6fd5659aed6e2411127109488833d270ff42344dbaa6b30ffecf511
kubernetes-node-linux-ppc64le.tar.gz	11e284538091e43cd06c5ecf1c038f75242225d06ea95bd0c395bef2f8964a1037ee5e89bf74892d011e2a61d86f7d16aafb691e43b22feaa189fd53c26f2639
kubernetes-node-linux-s390x.tar.gz	e89d208a8349e5d5208473bbf1aa67285039d18ff87b0d32555baec13c29ffee529a7a8fed36363fa9adc9825568c98d35a5fd8bab74803df3c1c1c1846e8fd1
kubernetes-node-windows-amd64.tar.gz	1dfa21cab0fc5dba81752f541801eab2d35da875b4a4688fd0b0b7d864a328f7fd60fdfb0488cdb314238102719aa9ba8bc7e7c539c466ff43bf556c1714b080

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.28.8	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.28.8	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.28.8	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.28.8	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.28.8	amd64, arm64, ppc64le, s390x
registry.k8s.io/kubectl:v1.28.8	amd64, arm64, ppc64le, s390x

Changelog since v1.28.7

Changes by Kind

Feature

• Kubernetes is now built with go 1.21.8
  • update distroless-iptables to v0.4.6 (#123772, @cpanato) [SIG Release and Testing]

Bug or Regression

• Fix error when trying to expand a volume that does not require node expansion (#123055, @gnufied) [SIG Node and Storage]
• Fixed a bug that an init container with containerRestartPolicy with Always cannot update its state from terminated to non-terminated for the pod with restartPolicy with Never or OnFailure. (#123710, @gjkim42) [SIG Apps]
• Fixed cleanup of Pod volume mounts when a file was used as a subpath. (#123052, @jsafrane) [SIG Node]
• Fixed the disruption controller's PDB status synchronization to maintain all PDB conditions during an update. (#122056, @dhenkel92) [SIG Apps]
• Fixes an issue calculating total CPU usage reported for Windows nodes (#122999, @marosset) [SIG Node and Windows]
• Prevent watch cache starvation by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior (#123694, @mengqiy) [SIG API Machinery]
• Restore --verify-only function in code generation wrappers. (#123261, @skitt) [SIG API Machinery]
• Updates google.golang.org/protobuf to v1.33.0 to resolve CVE-2024-24786 (#123764, @liggitt) [SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node and Storage]

Other (Cleanup or Flake)

• Build etcd image v3.5.12 (#123069, @bzsuni) [SIG API Machinery and Etcd]

Dependencies

Added

Nothing has changed.

Changed

• github.com/golang/protobuf: v1.5.3 → v1.5.4
• google.golang.org/protobuf: v1.31.0 → v1.33.0

Removed

Nothing has changed.

---

Contributors, the CHANGELOG-1.28.md has been bootstrapped with v1.28.8 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.