v1.30.1

What's Changed

• Kubernetes v1.30.1
• Add firewall rules and security group rules for Cilium and Hubble metrics (#1449)
• Update Cilium from v1.15.3 to v1.15.5
• Update flannel from v0.24.4 to v0.25.1
• Introduce components variabe to enable/disable/configure pre-installed components (#1453, docs)
  • Add Terraform modules for coredns, cilium, and flannel components (#1455)

Azure

• Add controller_security_group_name output for adding custom security rules (#1450)
• Add controller_address_prefixes output for adding custom security rules (#1450)

Contributions

• Update Cilium and flannel container images by @dghubble in #1447
• Allow CoreDNS and kube-proxy to be optional components by @dghubble in #1448
• Add firewall and security rules for Cilium/Hubble metrics by @dghubble in #1449
• azure: Add controller security group and subnet outputs by @dghubble in #1450
• Update Kubernetes from v1.30.0 to v1.30.1 by @dghubble in #1452
• Introduce the component system for managing pre-installed addons by @dghubble in #1453
• Update Cilium from v1.15.4 to v1.15.5 by @dghubble in #1454
• Add Terraform modules for CoreDNS, Cilium, and flannel by @dghubble in #1455

Dependencies

• Bump pymdown-extensions from 10.8 to 10.8.1 by @dependabot in #1441
• Bump mkdocs-material from 9.5.19 to v9.5.21 by @dghubble-renovate in #1442
• Bump pygments from 2.17.2 to v2.18.0 by @dghubble-renovate in #1444
• Bump provider ct to v0.13.0 by @dghubble-renovate in #1443
• Bump mkdocs-material from 9.5.21 to v9.5.22 by @dghubble-renovate in #1446
• Bump mkdocs-material from 9.5.22 to v9.5.23 by @dghubble-renovate in #1451

New Contributors

• @dghubble-renovate made their first contribution in #1442

Full Changelog: v1.30.0...v1.30.1

v1.30.0

What's Changed

• Kubernetes v1.30.0
• Update etcd from v3.5.12 to v3.5.13
• Update Cilium from v1.15.2 to v1.15.3
• Update Calico from v3.27.2 to v3.27.3

Contributions

• Update etcd from v3.5.12 to v3.5.13 and bump Calico/Cilium by @dghubble in #1432
• Add release.yaml to help auto-populate release notes by @dghubble in #1433
• Update Kubernetes from v1.29.3 to v1.30.0 by @dghubble in #1438
• Update mkdocs and mkdocs-material together by @dghubble in #1439

Dependencies

• Bump mkdocs-material from 9.5.14 to 9.5.15 by @dependabot in #1430
• Bump mkdocs-material from 9.5.15 to 9.5.16 by @dependabot in #1431
• Bump mkdocs-material from 9.5.16 to 9.5.18 by @dependabot in #1436
• Bump pymdown-extensions from 10.7.1 to 10.8 by @dependabot in #1437

Full Changelog: v1.29.3...v1.30.0

v1.29.3

• Kubernetes v1.29.3
• Update Cilium from v1.15.1 to v1.15.2
• Update flannel from v0.24.2 to v0.24.4

v1.29.2

• Kubernetes v1.29.2
• Update etcd from v3.5.10 to v3.5.12
• Update Cilium from v1.14.3 to v1.15.1
• Update Calico from v3.26.3 to v3.27.2
  • Fix upstream incompatibility with Fedora CoreOS (calico#8372)
• Update flannel from v0.22.2 to v0.24.2
• Add an install_container_networking variable (default true) (#1421)
  • When true, the chosen container networking provider is installed during cluster bootstrap
  • Set false to self-manage the container networking provider. This allows flannel, Calico, or Cilium to be self-managed (e.g. via Terraform like any other Kubernetes resources). Nodes will be NotReady until you apply the self-managed container networking provider. This may become the default in future.
  • Continue to set networking to one of the three supported container networking providers. Most require custom firewall / security policies be present across nodes so they have some infra tie-ins.

v1.29.1

• Kubernetes v1.29.1

AWS

• Continue to support AWS IMDSv1 (#1412)

v1.29.0

• Kubernetes v1.29.0

Known Issues

• Calico and Fedora CoreOS cannot be used together currently (calico#8372)

v1.28.4

• Kubernetes v1.28.4

v1.28.3

• Kubernetes v1.28.3
• Update etcd from v3.5.9 to v3.5.10
• Update Cilium from v1.14.2 to v1.14.3
• Workaround problems in Cilium v1.14's partial kube-proxy implementation (#365)
• Update Calico from v3.26.1 to v3.26.3

Google Cloud

• Allow upgrading Google Cloud Terraform provider to v5.x

v1.28.2

• Kubernetes v1.28.2
• Update Cilium from v1.14.1 to v1.14.2

Azure

• Add optional azure_authorized_key variable
  • Azure inspects public keys, requires RSA keys, and forbids more secure key formats (e.g. ed25519)
  • Allow passing a dummy RSA key via azure_authorized_key to satisfy Azure validations. Then the usual ssh_authorized_key variable can use new newer formats (e.g. ed25519)

Known Issues

• Instability in clusters with Cilium v1.14

v1.28.1

• Kubernetes v1.28.1

Known Issues

• Instability in clusters with Cilium v1.14