Release notes
Avisi Managed Environment Kubernetes release notes
Introduction
This page documents updates to the Avisi Managed Environment Kubernetes clusters. This contains: new or updated functionality, bug fixes, known issues and deprecation announcements.
- Please see our Kubernetes lifecycle policy for more information about how we handle our version management.
- Check out our how to upgrade for information on how to upgrade your cluster.
Release notes
Preview
Regular
Stable
Action required: apply kernel security fixes to your nodes
A patched Linux kernel resolves three recently disclosed kernel vulnerabilities:
- CopyFail (CVE-2026-31431, 7.8): a logic flaw in the cryptographic template allowing local privilege escalation via unauthorized page cache writes.
- Dirty Frag (CVE-2026-43284, 7.8): a local privilege escalation flaw in the kernel's xfrm network subsystem.
- ssh-keysign-pwn (CVE-2026-46333, 5.5): a process management flaw allowing unprivileged users to read root-only host files, including SSH private keys.
Updated node images are available for AWS; replace your nodes to pick up the patched kernel. For other providers the image status differs:
- vSphere: updated node images (ubuntu-jammy-22.04-cloudimg-tmpl-2026-q3 / ubuntu-noble-24.04-cloudimg-tmpl-2026-q3) are available from AME v1.34.9-u-ame.4 / v1.35.6-u-ame.4 / v1.36.2-u-ame.4; replace your nodes to pick up the patched kernel.
- Leafcloud: the node images have not been updated yet (Ubuntu-22.04.20250502 / Ubuntu-24.04.20260219). Keep any mitigation in place until updated images are published.
- Hetzner and Cyso: nodes boot the Ubuntu images provided by the platform and currently run kernel 6.8.0-117-generic, which contains the CopyFail fix but is still missing the Dirty Frag and ssh-keysign-pwn fixes (both require 6.8.0-124-generic or newer). Upgrade the kernel package and reboot, and keep the mitigation in place until nodes report 6.8.0-124-generic or later.
On all cloud providers, newly joined nodes start on their base-image kernel and only pick up a newer kernel the following morning through the automated unattended security upgrades, so they require a reboot to activate it. Do not enable autoscaling together with automatic reboots: the combination recycles all nodes every day in a continuous loop.
We recommend running the mitigation DaemonSet on Hetzner, Cyso, and Leafcloud clusters until their nodes report a fully patched kernel (6.8.0-124-generic or newer).
Required actions:
- Apply the fix at the node level: replace nodes (on providers with updated images) or reboot your existing nodes. Because these fixes are applied at the kernel level, restarting pods or updating the control plane is not sufficient. On other providers, reboot your existing nodes to load the patched kernel once the updated kernel package is available.
- Remove the mitigation DaemonSet only after your nodes are running the patched kernel.
Kubernetes v1.36 - Preview
v1.36.2-u-ame.4
Kubernetes v1.36.2-ubuntu · Cluster controller v2.38.0-v1.36 · Addon controller v0.29.6 · Ubuntu 24.04 LTS
Images
- vsphere Updated the vSphere VM template name to ubuntu-noble-24.04-cloudimg-tmpl-2026-q3
Improvements
- addons Pass additional cluster settings through to addon configurations, enabling addon default values
Fixes
- control-plane Force cluster deletion now always succeeds, even when the customer's cloud credentials are invalid
- nodes Fixed node-pool scale-down failing when a machine never joined the cluster
v1.36.2-u-ame.2
Kubernetes v1.36.2-ubuntu · Cluster controller v2.37.2-v1.36 · Addon controller v0.29.6 · Ubuntu 24.04 LTS
Security fixes
The components shipped with Kubernetes v1.36 include fixes for these notable CVEs (CVSS ≥ 6):
- containerd: CVE-2026-50195 (9.9, critical) and CVE-2026-53492 (9.6, critical) checkpoint/CRI escapes; CVE-2026-53488 (8.8), CVE-2026-53489 (6.5)
- AWS EBS CSI: CVE-2026-33186 (9.1, critical) gRPC authorization bypass; CVE-2026-33814 (7.5)
- cilium-envoy: CVE-2026-47774 (7.5), CVE-2026-27135 (7.5) HTTP/2 DoS
- cilium: CVE-2026-53935 (6.9) cross-namespace redirect
- kubernetes: CVE-2026-42504 (7.5), CVE-2026-27145 (6.5) Go stdlib DoS (Go 1.26.4 rebuild)
- aws: Ubuntu 24.04 AMI CVE-2026-31431 (7.8, kernel LPE) and CVE-2026-43284 (7.8, kernel LPE, Dirty Frag); CVE-2026-28387 (8.1, OpenSSL), CVE-2026-35385 (7.5, OpenSSH)
Core
- containerd Upgraded containerd to 2.3.2
- runc Upgraded runc to v1.5.0
- cni_plugins Upgraded CNI plugins to v1.9.1
- cluster-autoscaler Upgraded cluster-autoscaler to v1.34.3
- konnectivity Upgraded Konnectivity to v0.36.0
CNI
- calico Upgraded Calico (calico-v3.32) to v3.32.0
- cilium Upgraded Cilium (cilium-v1.19) to v1.19.5
- cilium-envoy Upgraded cilium-envoy to v1.36.8
CSI
- aws-ebs-csi Upgraded AWS EBS CSI driver to v1.62.0
- hetzner-csi Upgraded Hetzner CSI driver to v2.21.2
- openstack-cinder-csi Upgraded OpenStack Cinder CSI driver to v1.36.0
- vsphere-csi Upgraded vSphere CSI driver to v3.7.2
Cloud specifics
- hetzner Upgraded hetzner-cloud-controller-manager to v1.33.0
- openstack Upgraded openstack-cloud-controller-manager to v1.36.0
- aws Upgraded aws-cloud-controller-manager to v1.35.0
- vsphere Upgraded vsphere-cloud-controller-manager to v1.36.0
Images
- aws Updated Ubuntu 24.04 AMIs (amd64: ami-042dc8681de073ac4, arm64: ami-0a80e331254190309, released 2026-06-10)
Improvements
- kubernetes Introduced Kubernetes v1.36 support
Fixes
- kubeadm Fixed kubelet role setup on newly added Kubernetes versions by binding the apiserver-kubelet-client certificate to the kubelet API
Kubernetes v1.35 - Regular
v1.35.6-u-ame.4
Kubernetes v1.35.6-ubuntu · Cluster controller v2.38.0-v1.35 · Addon controller v0.29.6 · Ubuntu 24.04 LTS
Images
- vsphere Updated the vSphere VM template name to ubuntu-noble-24.04-cloudimg-tmpl-2026-q3
Improvements
- addons Pass additional cluster settings through to addon configurations, enabling addon default values
Fixes
- control-plane Force cluster deletion now always succeeds, even when the customer's cloud credentials are invalid
- nodes Fixed node-pool scale-down failing when a machine never joined the cluster
v1.35.6-u-ame.2
Kubernetes v1.35.6-ubuntu · Cluster controller v2.37.2-v1.35 · Addon controller v0.29.6 · Ubuntu 24.04 LTS
Security fixes
Notable CVEs remediated in this release (CVSS ≥ 6):
- containerd: CVE-2026-50195 (9.9, critical) and CVE-2026-53492 (9.6, critical) checkpoint/CRI escapes; CVE-2026-53488 (8.8), CVE-2026-46680 (7.8), CVE-2026-53489 (6.5)
- AWS EBS CSI: CVE-2026-33186 (9.1, critical) gRPC authorization bypass; CVE-2026-33814 (7.5)
- cilium-envoy: CVE-2026-47774 (7.5), CVE-2026-27135 (7.5) HTTP/2 DoS
- cilium: CVE-2026-53935 (6.9) cross-namespace redirect
- kubernetes: CVE-2026-42504 (7.5), CVE-2026-27145 (6.5) Go stdlib DoS (Go 1.25.11 rebuild)
- aws: Ubuntu 24.04 AMI CVE-2026-31431 (7.8, kernel LPE) and CVE-2026-43284 (7.8, kernel LPE, Dirty Frag); CVE-2026-28387 (8.1, OpenSSL), CVE-2026-35385 (7.5, OpenSSH)
Core
- containerd Upgraded containerd to 2.2.5
- runc Upgraded runc to v1.4.3
- konnectivity Upgraded Konnectivity to v0.35.0
CNI
- calico Upgraded Calico (calico-v3.31) to v3.31.6
- cilium Upgraded Cilium (cilium-v1.19) to v1.19.5
- cilium-envoy Upgraded cilium-envoy to v1.36.8
CSI
- aws-ebs-csi Upgraded AWS EBS CSI driver to v1.62.0
- hetzner-csi Upgraded Hetzner CSI driver to v2.21.2
- openstack-cinder-csi Upgraded OpenStack Cinder CSI driver to v1.36.0
- vsphere-csi Upgraded vSphere CSI driver to v3.7.2
Cloud specifics
- hetzner Upgraded hetzner-cloud-controller-manager to v1.33.0
- vsphere Upgraded vsphere-cloud-controller-manager to v1.35.1
Images
- aws Updated Ubuntu 24.04 AMIs (amd64: ami-042dc8681de073ac4, arm64: ami-0a80e331254190309, released 2026-06-10)
Fixes
- kubeadm Fixed kubelet role setup on newly added Kubernetes versions by binding the apiserver-kubelet-client certificate to the kubelet API
v1.35.4-u-ame.4
Kubernetes v1.35.4-ubuntu · Cluster controller v2.36.0-v1.35 · Addon controller v0.29.6 · Ubuntu 24.04 LTS
Addons
- gpu Upgraded gpu-operator to v26.3.2
v1.35.4-u-ame.3
Kubernetes v1.35.4-ubuntu · Cluster controller v2.36.0-v1.35 · Addon controller v0.29.5 · Ubuntu 24.04 LTS
Improvements
- etcd Improved etcd high-availability handling with safe HA / non-HA switching.
v1.35.4-u-ame.2
Kubernetes v1.35.4-ubuntu · Cluster controller v2.35.2-v1.35 · Addon controller v0.29.5 · Ubuntu 24.04 LTS
Images
- vsphere Updated the vSphere VM template name to ubuntu-noble-24.04-cloudimg-tmpl-2026-q2
v1.35.4-u-ame.1
Kubernetes v1.35.4-ubuntu · Cluster controller v2.35.1-v1.35 · Addon controller v0.29.5 · Ubuntu 24.04 LTS
Addons
- ingress-nginx Upgraded ingress-nginx to 4.15.1 (app v1.15.1)
- certmanager Upgraded cert-manager to v1.20.2
v1.35.4-u-ame.0
Kubernetes v1.35.4-ubuntu · Cluster controller v2.35.1-v1.35 · Addon controller v0.29.3 · Ubuntu 24.04 LTS
Core
- containerd Upgraded containerd to 2.2.3
- runc Upgraded runc to v1.4.2
CNI
- calico Upgraded Calico (calico-v3.31) to v3.31.5
- cilium Upgraded Cilium (cilium-v1.19) to v1.19.3
- cilium-envoy Upgraded cilium-envoy to v1.36.6-1776000132
Images
- aws Updated Ubuntu 24.04 AMIs (amd64: ami-018f28221ffaa9b3b, arm64: ami-0e90ac8060d3ae6af, released 2026-04-09)
Improvements
- nodes Security updates can now be configured per node pool, controlling whether they are installed on new nodes before join. Options: off (default), install, or install and reboot.
Fixes
- nodes Reduced node join token TTL and node join timeout from 1 hour to 15 minutes
- autoscaler Improved cluster-autoscaler handling
v1.35.3-u-ame.4
Kubernetes v1.35.3-ubuntu · Cluster controller v2.34.2-v1.35 · Addon controller v0.29.3 · Ubuntu 24.04 LTS
Addons
- kured Upgraded kured to 5.11.0 (app v1.21.0)
Fixes
- kube-apiserver Fixed an issue which caused unnecessary restarts of kube-apiserver on Kubernetes v1.35.0+
v1.35.3-u-ame.2
Kubernetes v1.35.3-ubuntu · Cluster controller v2.34.1-v1.35 · Addon controller v0.29.2 · Ubuntu 24.04 LTS
Fixes
- openstack Skip deleted/deleting servers during node pool reconciliation
v1.35.3-u-ame.1
Kubernetes v1.35.3-ubuntu · Cluster controller v2.34.0-v1.35 · Addon controller v0.29.2 · Ubuntu 24.04 LTS
Addons
- kured Reverted to 5.6.2 (app v1.17.1) to fix an issue where nodes rebooted outside of scheduled windows or while disabled
v1.35.3-u-ame.0
Kubernetes v1.35.3-ubuntu · Cluster controller v2.34.0-v1.35 · Addon controller v0.29.1 · Ubuntu 24.04 LTS
Components
- containerd Upgraded containerd to 2.2.2
- runc Upgraded runc to v1.4.1
- cni_plugins Upgraded CNI plugins to v1.9.1
- cluster-autoscaler Upgraded cluster-autoscaler to v1.34.3
- konnectivity Upgraded Konnectivity to v0.34.0
CNI
- calico Upgraded Calico (calico-v3.31) to v3.31.4
- cilium Upgraded Cilium (cilium-v1.19) to v1.19.1
- cilium-envoy Upgraded cilium-envoy to v1.35.9
CSI
- aws-ebs-csi Upgraded AWS EBS CSI driver to v1.56.0
- azure-disk-csi Upgraded Azure Disk CSI driver to v1.33.4
- hetzner-csi Upgraded Hetzner CSI driver to v2.20.0
- digitalocean-csi Upgraded DigitalOcean CSI driver to v2.1.2
- openstack-cinder-csi Upgraded OpenStack Cinder CSI driver to v1.34.1
- vsphere-csi Upgraded vSphere CSI driver to v3.6.1
- thalassa-csi Upgraded Thalassa CSI driver to v0.5.3
- ceph-csi Upgraded Ceph CSI driver to v3.5.1
- snapshot-controller Upgraded Snapshot Controller to v8.3.0
Addons
- monitoring Upgraded kube-prometheus-stack to 82.4.0
- logging Upgraded Promtail to 6.17.1 (app v3.5.1)
- ingress-nginx Upgraded ingress-nginx to 4.14.3 (app v1.14.3)
- traefik Upgraded Traefik to 26.1.0 (app v2.11.0)
- certmanager Upgraded cert-manager to v1.19.4
- kured Upgraded kured to 5.11.0 (app v1.21.0)
- gpu Upgraded gpu-operator to v25.10.1
- flux-operator Upgraded flux-operator to 0.42.1
- cloudnative-pg Upgraded CloudNativePG to 0.27.1 (app v1.28.1)
Cloud specifics
- hetzner Upgraded hetzner-cloud-controller-manager to v1.30.1
- openstack Upgraded openstack-cloud-controller-manager to v1.35.0
- aws Upgraded aws-cloud-controller-manager to v1.35.0
- azure Upgraded azure-cloud-controller-manager to v1.34.3
- vsphere Upgraded vsphere-cloud-controller-manager to v1.35.0
- digitalocean Upgraded digitalocean-cloud-controller-manager to v0.1.66
Images
- aws Updated Ubuntu 24.04 AMIs (amd64: ami-005f97cc4a61dd3b4, arm64: ami-052b310a8f0d76968)
- vsphere Updated the vSphere VM template name to ubuntu-noble-24.04-cloudimg-tmpl-2026-01-19
- thalassa Updated Thalassa image ID to d5em2emeeagc739oao00
Improvements
- autoscaler Track temporary nodes during autoscaler scaling to prevent unintended node recreation
- nodeprovisioner Add priority-based scale-down ordering
- nodeprovisioner Stop eagerly deleting autoscaler-tainted nodes
Fixes
- thalassa Implement GetProviderID for ThalassaMachine
Kubernetes v1.34 - Stable
v1.34.9-u-ame.4
Kubernetes v1.34.9-ubuntu · Cluster controller v2.38.0-v1.34 · Addon controller v0.29.6 · Ubuntu 22.04 LTS
Images
- vsphere Updated the vSphere VM template name to ubuntu-jammy-22.04-cloudimg-tmpl-2026-q3
Improvements
- addons Pass additional cluster settings through to addon configurations, enabling addon default values
Fixes
- control-plane Force cluster deletion now always succeeds, even when the customer's cloud credentials are invalid
- nodes Fixed node-pool scale-down failing when a machine never joined the cluster
v1.34.9-u-ame.2
Kubernetes v1.34.9-ubuntu · Cluster controller v2.37.2-v1.34 · Addon controller v0.29.6 · Ubuntu 22.04 LTS
Security fixes
Notable CVEs remediated in this release (CVSS ≥ 6):
- containerd: CVE-2026-50195 (9.9, critical) and CVE-2026-53492 (9.6, critical) checkpoint/CRI escapes; CVE-2026-53488 (8.8), CVE-2026-53489 (6.5)
- AWS EBS CSI: CVE-2026-33186 (9.1, critical) gRPC authorization bypass; CVE-2026-33814 (7.5)
- cilium-envoy: CVE-2026-47774 (7.5), CVE-2026-27135 (7.5) HTTP/2 DoS
- cilium: CVE-2026-53935 (6.9) cross-namespace redirect
- kubernetes: CVE-2026-42504 (7.5), CVE-2026-27145 (6.5) Go stdlib DoS (Go 1.25.11 rebuild)
- aws: Ubuntu 22.04 AMI CVE-2026-31431 (7.8, kernel LPE) and CVE-2026-43284 (7.8, kernel LPE, Dirty Frag); CVE-2026-28387 (8.1, OpenSSL), CVE-2026-35385 (7.5, OpenSSH)
Core
- containerd Upgraded containerd to 2.1.9
- runc Upgraded runc to v1.3.6
CNI
- cilium Upgraded Cilium (cilium-v1.18) to v1.18.11
- cilium-envoy Upgraded cilium-envoy to v1.36.8
CSI
- aws-ebs-csi Upgraded AWS EBS CSI driver to v1.62.0
- hetzner-csi Upgraded Hetzner CSI driver to v2.21.2
- openstack-cinder-csi Upgraded OpenStack Cinder CSI driver to v1.36.0
- vsphere-csi Upgraded vSphere CSI driver to v3.7.2
Cloud specifics
- hetzner Upgraded hetzner-cloud-controller-manager to v1.33.0
Images
- aws Updated Ubuntu 22.04 AMIs (amd64: ami-0c42a2b384b315690, arm64: ami-0acdc3ce0b7228cef, released 2026-06-10)
Fixes
- kubeadm Fixed kubelet role setup on newly added Kubernetes versions by binding the apiserver-kubelet-client certificate to the kubelet API
v1.34.7-u-ame.4
Kubernetes v1.34.7-ubuntu · Cluster controller v2.36.0-v1.34 · Addon controller v0.29.6 · Ubuntu 22.04 LTS
Addons
- gpu Upgraded gpu-operator to v26.3.2
v1.34.7-u-ame.3
Kubernetes v1.34.7-ubuntu · Cluster controller v2.36.0-v1.34 · Addon controller v0.29.5 · Ubuntu 22.04 LTS
Improvements
- etcd Improved etcd high-availability handling with safe HA / non-HA switching.
v1.34.7-u-ame.2
Kubernetes v1.34.7-ubuntu · Cluster controller v2.35.2-v1.34 · Addon controller v0.29.5 · Ubuntu 22.04 LTS
Images
- vsphere Updated the vSphere VM template name to ubuntu-jammy-22.04-cloudimg-tmpl-2026-q2
v1.34.7-u-ame.1
Kubernetes v1.34.7-ubuntu · Cluster controller v2.35.1-v1.34 · Addon controller v0.29.5 · Ubuntu 22.04 LTS
Addons
- ingress-nginx Upgraded ingress-nginx to 4.15.1 (app v1.15.1)
- certmanager Upgraded cert-manager to v1.20.2
v1.34.7-u-ame.0
Kubernetes v1.34.7-ubuntu · Cluster controller v2.35.1-v1.34 · Addon controller v0.29.3 · Ubuntu 22.04 LTS
Core
- containerd Upgraded containerd to 2.1.7
CNI
- cilium Upgraded Cilium (cilium-v1.18) to v1.18.9
- cilium-envoy Upgraded cilium-envoy to v1.36.6-1776000132
Cloud specifics
- hetzner Upgraded hetzner-cloud-controller-manager to v1.30.1
Images
- aws Updated Ubuntu 22.04 AMIs (amd64: ami-01b5c3cf789dbf1fb, arm64: ami-0440ced4765c38345, released 2026-04-10)
Improvements
- nodes Security updates can now be configured per node pool, controlling whether they are installed on new nodes before join. Options: off (default), install, or install and reboot.
Fixes
- nodes Reduced node join token TTL and node join timeout from 1 hour to 15 minutes
- autoscaler Improved cluster-autoscaler handling
v1.34.6-u-ame.4
Kubernetes v1.34.6-ubuntu · Cluster controller v2.34.2-v1.34 · Addon controller v0.29.3 · Ubuntu 22.04 LTS
Addons
- kured Upgraded kured to 5.11.0 (app v1.21.0)
Fixes
- kube-apiserver Fixed an issue which caused unnecessary restarts of kube-apiserver on Kubernetes v1.35.0+
v1.34.6-u-ame.2
Kubernetes v1.34.6-ubuntu · Cluster controller v2.34.1-v1.34 · Addon controller v0.29.2 · Ubuntu 22.04 LTS
Fixes
- openstack Skip deleted/deleting servers during node pool reconciliation
v1.34.6-u-ame.1
Kubernetes v1.34.6-ubuntu · Cluster controller v2.34.0-v1.34 · Addon controller v0.29.2 · Ubuntu 22.04 LTS
Addons
- kured Reverted to 5.6.2 (app v1.17.1) to fix an issue where nodes rebooted outside of scheduled windows or while disabled
v1.34.6-u-ame.0
Kubernetes v1.34.6-ubuntu · Cluster controller v2.34.0-v1.34 · Addon controller v0.29.1 · Ubuntu 22.04 LTS
Components
- runc Upgraded runc to v1.3.5
- cni_plugins Upgraded CNI plugins to v1.9.1
- cluster-autoscaler Upgraded cluster-autoscaler to v1.34.3
CNI
- calico Upgraded Calico (calico-v3.30) to v3.30.7
- cilium Upgraded Cilium (cilium-v1.18) to v1.18.7
CSI
- aws-ebs-csi Upgraded AWS EBS CSI driver to v1.56.0
- azure-disk-csi Upgraded Azure Disk CSI driver to v1.33.4
- hetzner-csi Upgraded Hetzner CSI driver to v2.20.0
- digitalocean-csi Upgraded DigitalOcean CSI driver to v2.1.2
- openstack-cinder-csi Upgraded OpenStack Cinder CSI driver to v1.34.1
- vsphere-csi Upgraded vSphere CSI driver to v3.6.1
- thalassa-csi Upgraded Thalassa CSI driver to v0.5.3
- ceph-csi Upgraded Ceph CSI driver to v3.5.1
- snapshot-controller Upgraded Snapshot Controller to v8.3.0
Addons
- monitoring Upgraded kube-prometheus-stack to 82.4.0
- logging Upgraded Promtail to 6.17.1 (app v3.5.1)
- ingress-nginx Upgraded ingress-nginx to 4.14.3 (app v1.14.3)
- traefik Upgraded Traefik to 26.1.0 (app v2.11.0)
- certmanager Upgraded cert-manager to v1.19.4
- kured Upgraded kured to 5.11.0 (app v1.21.0)
- gpu Upgraded gpu-operator to v25.10.1
- flux-operator Upgraded flux-operator to 0.42.1
- cloudnative-pg Upgraded CloudNativePG to 0.27.1 (app v1.28.1)
Cloud specifics
- hetzner Upgraded hetzner-cloud-controller-manager to v1.30.0
- openstack Upgraded openstack-cloud-controller-manager to v1.34.1
- aws Upgraded aws-cloud-controller-manager to v1.34.0
- azure Upgraded azure-cloud-controller-manager to v1.34.3
- vsphere Upgraded vsphere-cloud-controller-manager to v1.34.0
- digitalocean Upgraded digitalocean-cloud-controller-manager to v0.1.65
Improvements
- autoscaler Track temporary nodes during autoscaler scaling to prevent unintended node recreation
- nodeprovisioner Add priority-based scale-down ordering
- nodeprovisioner Stop eagerly deleting autoscaler-tainted nodes
Fixes
- thalassa Implement GetProviderID for ThalassaMachine
v1.34.3-u-ame.5
Kubernetes v1.34.3-ubuntu · Cluster controller v2.32.4-v1.34 · Addon controller v0.28.1 · Ubuntu 22.04 LTS
Fixes
- control-plane Fixed conflicts during upgrade HA control-planes
v1.34.3-u-ame.4
Kubernetes v1.34.3-ubuntu · Cluster controller v2.32.3-v1.34 · Addon controller v0.28.1 · Ubuntu 22.04 LTS
Core
- cluster-autoscaler Upgraded cluster-autoscaler to v1.34.2
- cni_plugins Upgraded CNI plugins to v1.9.0
- containerd Upgraded containerd to 2.1.6
- runc Upgraded runc to v1.3.4
CNI
- calico Upgraded Calico (calico-v3.30) to v3.30.6
- cilium Upgraded Cilium (cilium-v1.18) to v1.18.6
- cilium-envoy Upgraded cilium-envoy to v1.35.9
Addons
- metrics-server Upgraded metrics-server to v0.8.0
- node-problem-detector Upgraded node-problem-detector to v1.34.2
Cloud specifics
- hetzner Upgraded hetzner-cloud-controller-manager to v1.29.2
Images
- thalassa Updated Thalassa image ID to d5em2emeeagc739oao10
- aws Updated Ubuntu 22.04 AMIs to 20251212
- vsphere Updated the vSphere VM template name to ubuntu-jammy-22.04-cloudimg-tmpl-2026-01-19
Fixes
- control-plane Improved control-plane HA scheduling and etcd resilience
- control-plane Improved loading renewed control-plane certificates
- openstack Corrected the infrastructure provisioned event for OpenStack subnets
v1.34.2-u-ame.7
Kubernetes v1.34.2-ubuntu · Cluster controller v2.30.4-v1.34 · Addon controller v0.28.1 · Ubuntu 22.04 LTS
Addons
- nfs Added privileged security policy to the nfs-server-provisioner namespace to ensure compatibility with restricted clusters.
v1.34.2-u-ame.6
Kubernetes v1.34.2-ubuntu · Cluster controller v2.30.4-v1.34 · Addon controller v0.28.0 · Ubuntu 22.04 LTS
Addons
- cloudnative-pg Add CloudNativePG v1.27.1
Improvements
- openstack Change 'anti-affinity' to 'soft-anti-affinity' rule for Server Groups to prevent scheduling failures when unique hosts are unavailable
v1.34.2-u-ame.3
Kubernetes v1.34.2-ubuntu · Cluster controller v2.30.1-v1.34 · Addon controller v0.27.1 · Ubuntu 22.04 LTS
v1.34.2-u-ame.2
Kubernetes v1.34.2-ubuntu · Cluster controller v2.30.0-v1.34 · Addon controller v0.27.1 · Ubuntu 22.04 LTS
v1.34.2-u-ame.1
Kubernetes v1.34.2-ubuntu · Cluster controller v2.30.0-v1.34 · Addon controller v0.27.0 · Ubuntu 22.04 LTS
Components
Warning
Upgrading in place without draining restarts running pods because the containerd and runc upgrades change the pod sandbox, and it can fail on the first node when that node hosts the konnectivity-agent used during the upgrade. We recommend using replace-node upgrades for this release; configuring this strategy for a single-version upgrade is not supported yet.
- runc Upgraded runc to v1.3.3
- containerd Upgraded containerd to v2.1.5
- calico Upgraded Calico to v3.30.4
- cilium Upgraded Cilium to v1.18.4
- konnectivity Upgraded Konnectivity to v0.34.0
- cluster-autoscaler Upgraded cluster-autoscaler to v1.34.1
- cloud-controller-manager Updated cloud controller managers
Addons
- logging Upgraded Promtail to v3.5.1
- auditlog Upgraded Promtail to v2.9.17
v1.34.1-u-ame.5
Kubernetes v1.34.1-ubuntu · Cluster controller v2.29.1-v1.34 · Addon controller v0.26.0 · Ubuntu 22.04 LTS
v1.34.1-u-ame.4
Kubernetes v1.34.1-ubuntu · Cluster controller v2.29.0-v1.34 · Addon controller v0.26.0 · Ubuntu 22.04 LTS
v1.34.1-u-ame.3
Kubernetes v1.34.1-ubuntu · Cluster controller v2.28.0-v1.34 · Addon controller v0.26.0 · Ubuntu 22.04 LTS
Addons
- certmanager Upgraded cert-manager to v1.18.3
- nginx Upgraded ingress nginx to v4.13.3
- monitoring Upgraded kube-prometheus-stack to v78.5.0
v1.34.1-u-ame.0
Kubernetes v1.34.1-ubuntu · Cluster controller v2.27.1-v1.34 · Addon controller v0.23.1 · Ubuntu 22.04 LTS
Components
- cilium Upgraded Cilium to v1.18.1
- cni Upgraded CNI plugins to v1.8.0
- crictl Upgraded crictl to v1.34