MicroK8s 1.26 → 1.36
10 releases · 8 breaking changes · 0 security fixes · 0 advisories fixed
0security8breaking2deprecated48feature36fix
Breaking changes
- breaking microk8s dashboard-proxy in 1.36
- breaking the dashboard core addon in 1.36
- breaking the dashboard-ingress community addon in 1.36
- breaking Osm in 1.36
- breaking Kwasm in 1.36
- breaking Removed the dashboard addon by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/399 https://github.com/canonical/microk8s/pull/5485 in 1.36
- breaking Removed Kwasm addon by @0xE282B0 https://github.com/canonical/microk8s-community-addons/pull/301 in 1.36
- breaking Removed ondat addon from the community repository in 1.29
Security changes
None in the release notes.
Deprecations
- deprecated Deprecate MinIO in 1.35
- deprecated Add deprecation warning to dashboard-proxy command (removal in 1.36 release) @louiseschmidtgen in 1.35
Every release in between
breakingmicrok8s dashboard-proxy
breakingthe dashboard core addon
breakingthe dashboard-ingress community addon
breakingOsm
breakingKwasm
fixFixed microk8s disable ingress leaving behind a legacy IngressClass resource by @HomayoonAlimohammadi https://github.com/canonical/microk8s-core-addons/pull/380
fixFixed microk8s inspect emitting a spurious error when collecting Dqlite state, as newer Dqlite versions no longer create localnode.yaml by @SaiRajeshRamaraju https://github.com/canonical/microk8s/pull/5369
fixFixed STUNner addon failing to install when Gateway API CRDs were already present in the cluster by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/304
fixFixed CloudNativePG addon reporting a failure on enable due to kubectl-cnpg trying to reach localhost:8080 when no kubeconfig was passed by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/295
fixTrivy build dependency pinned to a known-safe version by @HomayoonAlimohammadi https://github.com/canonical/microk8s/pull/5416
fixFixed GPU addon (set-as-default-runtime) to honour the GPU Operator's CONTAINERD_SET_AS_DEFAULT setting, improving GPU Operator integration by @elezar https://github.com/canonical/microk8s-core-addons/pull/361
otherBumped containerd from v2.1.3 → v2.2.3 by @nathanael-h https://github.com/canonical/microk8s/pull/5406 and @louiseschmidtgen https://github.com/canonical/microk8s/pull/5479
otherBumped runc from v1.3.0 → v1.4.2 by @louiseschmidtgen https://github.com/canonical/microk8s/pull/5479
otherBumped etcd from v3.6.6 → v3.6.10 by @louiseschmidtgen https://github.com/canonical/microk8s/pull/5479
otherBumped CNI plugins from v1.8.0 → v1.9.1 by @louiseschmidtgen https://github.com/canonical/microk8s/pull/5479
otherBumped Flannel from v0.27.4 → v0.28.4 by @louiseschmidtgen https://github.com/canonical/microk8s/pull/5479
otherBumped Helm from v3.19.2 → v3.20.2 by @louiseschmidtgen https://github.com/canonical/microk8s/pull/5479
otherBumped CoreDNS from 1.13.1 → 1.14.3 by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/396
otherBumped Metrics Server from v0.8.0 → v0.8.1 by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/396
otherBumped cert-manager from v1.19.1 → v1.20.2 by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/396
otherBumped MetalLB from v0.15.2 → v0.15.3 by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/396
otherBumped Traefik ingress chart from 37.4.0 → 39.0.8 (Traefik v3.6.13) by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/396
otherBumped Gateway API CRDs from v1.4.0 → v1.5.1 by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/396
breakingRemoved the dashboard addon by @louiseschmidtgen https://github.com/canonical/microk8s-core-addons/pull/399 https://github.com/canonical/microk8s/pull/5485
otherBumped ArgoCD Helm chart from 5.34.3 → 7.9.1 by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/298
otherBumped KEDA from v2.12.0 → v2.17.3 by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/294
otherBumped CloudNativePG from 1.23.3 → 1.25.4 by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/295
otherBumped Trivy Operator Helm chart from 0.15.1 → 0.24.1 by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/296
otherBumped NFS Server Provisioner Helm chart from 1.4.0 → 1.8.0 by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/297
otherBumped Linkerd from v2.14.3 → stable-2.14.10 by @louiseschmidtgen https://github.com/canonical/microk8s-community-addons/pull/293
otherBumped Falco Helm chart to 8.0.1 with updated default configuration by @killermonk https://github.com/canonical/microk8s-community-addons/pull/287
otherBumped EasyHAProxy Helm chart from 0.1.5 → 2.0.0 with improved node labelling and error handling by @byjg https://github.com/canonical/microk8s-community-addons/pull/285
otherReworked Kata Containers addon to use the kata-deploy Helm chart (kata-containers 3.29.0), replacing the legacy snap-based approach by @stalb https://github.com/canonical/microk8s-community-addons/pull/257
breakingRemoved Kwasm addon by @0xE282B0 https://github.com/canonical/microk8s-community-addons/pull/301
fixRemove deprecated etcd-v2 flag
fixAllow sockets in cri-containerd AppArmor profile
fixAdd endpointslice to node rbac
fixRelax cri-containerd AppArmor restrictions to permit network and signal syscalls
fixUse 1.8.1 k8s-dqlite
fixPreserve individual environment variables with sudo
fixInclude IngressClass for determining addon status
fixReplace nginx ingress with Traefik in validation and image conf
fixImprove compatibility for dashboard installation in different namespaces
otherUpdate component versions
otherrook-ceph 1.18.7
otherobservability stack - Prometheus 77.6.2, Loki 2.10.3, Tempo 1.24.1
otherGPU operator 25.10.0, Network Operator 25.7.0
otherCoreDNS 1.13.1
otherKubernetes dashboard 7.14.0
othercert-manager 1.19.1
featureAdd Kubernetes 1.35 patches
otherBump containerd to 2.1.3 and update build process
deprecatedDeprecate MinIO
otherReplace NGINX ingress with Traefik
deprecatedAdd deprecation warning to dashboard-proxy command (removal in 1.36 release) @louiseschmidtgen
otherKubernetes v1.34.0
otherk8s-dqlite v1.7.0
othercontainerd v1.7.28
otherrunc v1.3.0
otherhelm v3.18.6
othercoredns v1.12.3
otherkubernetes dashboard v7.13.0
otheringress controller v1.13.1
otherhostpath-storage v1.5.0
othermetrics server v0.8.0
othernvidia operator v25.3.2
othermetallb v0.15.2
otherprometheus kube stack v76.4.1
othercert-manager v1.18.2
otherrook-ceph v1.18.0
featureAMD hardware support
fixfix: run iptables as sudo on microk8s stop
fixfix: Always refresh the default hooks during upgrades
fixfix: flush the CNI-HOSTPORT-DNAT chain on stop
fixfix: update configure hook to add a newline before adding watchlist flag
fixCleanup common non-namespaced resources (Closes #4747)
fixscripts: Fix kill-host-pods script
fixkill-host-pods.py: filter pods by node
fixfix: Catches KeyError while enabling SRIOV addon
otherBump component versions
othersnapcraft.yaml: upgrade to libmnl-1.0.5
otherchore: bump go version to 1.24
otherUpdate addon versions
fixfix: update ingress-nginx to 1.12.1
othercert-manager: Update to v1.17.1
otherUpdate dashboard to 7.11.1
othermetallb: Update addon to v1.14.9
otherkube-ovn: Upgrade to v1.13.8
otherUpdate observability addon to the latest versions
otherrook-ceph: Update addon to v1.16.6
othernvidia: Update addon helm charts to the latest versions
featurefeat: update addons versions and update list
otherDns domain argument
otherchore: add updated patches for kubernetes v1.33
fixfix: update strict patches for runc 1.2.6
fixPin k8s-dqlite version
fixPrioritize SNAP_CURRENT in containerd paths
fixfix: ensure nf_conntrack module loaded for kubelite.
fixfix non sudo enable community addon
fixInspect ip route fix
fixTrivy job fix
fixCleans up containers and shims on microk8s stop and snap removal
fixkube-ovn: Fix placeholder not being replaced on enable
otherUpdate calico version to v3.28.1
otherK8s-dqlite v1.3.0 (Dqlite LTS)
otherBump runc to v1.1.15 and containerd to v1.6.36
otherBump cni plugins to v1.6.0
otherBump pause image to 3.10
otherBump helm to v3.16.3
otherBump go version to 1.23
otherUpdate Default GPU Operator Version to v24.6.2
otherUpgrade kube-ovn to v1.12
featureAdd patches for 1.32
featureAdd updated strict patches for runc
otherDisable WatchList feature gate
otherhelm upgrade to v3.14.4
othercert-manager to v1.14.5
othercilium to v1.15.2
othergopaddle to v5.0
otherfalco to v4.5.1
othercloudnative pg to v1.23.3
othercontainerd to v1.6.28 and runc to v.1.1.12
othergpu-operator to v23.9.1
featureStunner by @smeng9, a Kubernetes media gateway for WebRTC
otherDo not set --hostname-override on kube-proxy when joining a cluster
otherUse build-snaps instead of manually installing the go snap
otherBump containerd to v1.6.28 and runc to v.1.1.12
fixFix erroneous microk8s join invocations by adding validation
featureDQlite node role reassignment in case of failure domain availability changes
featureOptional admission control to ensure performance
featureHandling the out-of-disk-space cases
featurePerformance improvements related to static linking of DQlite and SQL query preparation
featureFalco: the cloud-native security tool that employs custom rules on kernel events to provide real-time alerts
featureCloudNative PG Operator: Leveraging cloud native Postgres for Kubernetes adds speed, efficiency and protection for your infrastructure modernization
featurengrok: Ingress Controller instantly adds connectivity, load balancing, authentication, and observability to your services
otherKubernetes 1.29
featureImproved messaging in joining nodes
featureFix the default IP shown in ‘microk8s add-node’ output when using FRR (thanks)
featureImprove connectivity check in installers, thank you
featureHandle out of low disk capacity on dqlite nodes
featureAdmission control to protect from dqlite performance degradation
featureFailure domain control plain datastore rebalance
featureMemory argument warning in installer, thank you
featureNew addon: nvidia, allows for enabling the gpu and network operators
featureNew addon: Falco v3.7.1, thank you
featureNew addon: CloudNativePG, thank you
featureNew addon: ngrok, thank you
featureAdded default-class option to hostpath-storage, thank you
otherUpgraded sosivio to v1.7.1, thank you
otherUpgrade linkerd to v2.14.3, thank you
otherUpgraded KWasm operator to version v0.3.0, thank you
otherUpgrade keda to v2.12.0, thank you
otherUpgraded hostpath-storage to v1.5.0
otherUpgraded MICROCKS to v1.8.0, thank you
otherhostpath-storage option not to be set as the default storage class, courtesy of
breakingRemoved ondat addon from the community repository
featureKubeArmor is a cloud-native runtime security enforcement system that restricts the behavior (such as process execution, file access, and networking operations) of pods, containers, and nodes at the system level.
featureMICROCKS is a CNCF project designed to simplify and streamline API mocking and testing, with support for many different types of API and integrations for GitHub, Gitlab, Jenkins and more.
otherKubernetes v1.28
otherCalico CNI updated to v3.25.1
featuremicrok8s status will return an error code in case the cluster is not yet ready.
featuremicrok8s join no longer fails if nodes cannot resolve each other’s hostnames. This limitation has been lifted by updating the default arguments of kube-apiserver.
featurefixes iptables rule with custom CIDR, thanks
featureCertificate based authentication replaces token auth
featurekubelet certificate authority set to the cluster CA by default
featureRBAC rules for kubelet webhook auth-mode loaded by default
featureEventRateLimit is enabled by default
featureKubelet now does not serialize image pulls by default, which should result in faster image pulls (thanks)
featureAttempt to increase inotify and async IO limits if found too low
featureNew addon: kubearmor, thanks to and
featureNew addon: microcks, thank you
featureUpdate ArgoCD to v2.7.2 and add support for ARM64, thank you
otherCoredns updated to v1.10.1
othercilium updated to 1.13.4 now supporting multi-node clusters
featuregopapdle updated to v4.2.9, added support for ARM64, renamed to goppadle from goppadle-lite, thank you
otherMetrics server updated to v0.6.3
otherIngress updated to v1.8.0
otherlinkerd updated to v2.13.5, thank you
otherkeda updated to v2.11.1, thank you
otherkata addon expects to find a runtime and does not use the kata-runtime snap anymore
othertrivy addon updated tov 0.15.1
otherMetallb updated to v0.13.10, thank you
otherIstio updated to v1.18.2, thank you
otherwhich addons to be enabled
otherwhat cluster the node should join
otherwhat image and addon repositories should be used
otherwhat arguments should be used in bringing up the K8s services
featureShifu is a Kubernetes native, production-grade, protocol & vendor agnostic IoT development framework. The partnership with Shifu takes IoT and Edge devices with MicroK8s to the next level.
featureEasyHAProxy automatically configures HA proxy as ingress based on the labels defined in deployed containers. An advantage of HA proxy is that it provides TCP endpoints and it works in tandem with the next addon.
featureParking deploys a static webserver to park a domain this involves setting up all necessary ingress, service and pods.
otherKubernetes core services
otherKubernetes v1.27
otherContainerd upgraded to v1.6.15
otherRebase to snap core20 compatible with Ubuntu 20.04
otherdqlite updated to v1.14.0, with experimental disk-mode operation and performance improvements
otherCoreDNS updated to v1.10.0
otherCalico CNI updated to v3.25.0
featureDNS service enabled by default on new installations
otherCNI tools upgraded to 1.2.0, thanks
featureFlannel upgraded to 0.21.2, adding support for IPv6 NAT, thanks
otherUsability Improvements
otherconfigure your MicroK8s installation through cloudinit-like launch configurations
otheraddons repo updates require sudo
otherenable/disable multiple addons in one command will display a depreciation warning
othercert-manager addon will wait for the operator to be functional, thank you
fixfixes in refresh-certs command to handle presented certificates
otherinspection script to check for uppercase letters in hostname
otherinstalling on lxc without the proper profile will fail
fixfix microk8s reset command that would sometimes leave behind a few resources, thank you
othermicrok8s ctr now needs elevated permissions, thank you
otherimproved server certificate handling. Thank you
otherAddon updates
featurenew partner addon shifu, try is with microk8s enable shifu, thank you
featurenew community addon EasyHAProxy, try it with microk8s enable easyhaproxy, thank you
featurenew community addon Parking, try it with microk8s enable parking, thank you
otherObservability addon pinned to version v45.5.0
otherMayastor updated to version v2.0.0
otherNVIDIA gpu operator updated to v22.9.1
otherIngress updated to v1.5.1, thank you
otherTraefik updated to v20.8.0
otherknative updated to v1.8.2
othercilium updated to v1.11.12, thank you