v1.32.3

Downloads for v1.32.3

Source Code

Client Binaries

Server Binaries

Node Binaries

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

Changelog since v1.32.2

Changes by Kind

API Change

• DRA: CEL expressions using attribute strings exceeded the cost limit because their cost estimation was incomplete. Cost estimation was unnecessarily also computed in the scheduler. (#129690, @pohly) [SIG Node]

Bug or Regression

• Added a feature gate OrderedNamespaceDeletion. When enabled, the pods resources are deleted before all other resources while namespace deletion to ensure workload security. (#130508, @cici37) [SIG API Machinery, Apps and Testing]

• Fixed an issue in register-gen where imports for k8s.io/apimachinery/pkg/runtime and k8s.io/apimachinery/pkg/runtime/schema were missing. (#130392, @mrIncompetent) [SIG API Machinery]

• Fixes a 1.30+ regression in connection stability for exec / attach / portforward requests initiated using a websocket client (#130253, @fuweid) [SIG API Machinery, CLI and Testing]

• Fixes a 1.32 regression starting pods with postStart hooks specified (#130496, @sreeram-venkitesh) [SIG Node]

• Fixes a 1.32 regression where nodes may fail to report status and renew serving certificates after the kubelet restarts (#130356, @aojea) [SIG Node]

• Kube-apiserver: fixes a 1.32+ regression validating OIDC and anonymous authentication flags are mutually exclusive to authentication configuration. Fixes an issue where the kube-apiserver /flagz endpoint would not respond correctly with parsed flags value. (#130332, @richabanker) [SIG API Machinery and Testing]

• Kube-proxy, when using a Service with External or LoadBalancer IPs on UDP services , was consuming a large amount of CPU because it was not filtering by the Service destination port and trying to delete all the UDP entries associated to the service. (#130505, @aojea) [SIG Network]

• Kube-proxy: fixes a 1.32 regression with a potential memory leak which can occur in clusters with high volume of UDP workflows (#130034, @aroradaman) [SIG Network]

• Kubeadm: fix panic when no UpgradeConfiguration was found in the config file (#130313, @neolit123) [SIG Cluster Lifecycle]

• Resolves a performance regression in default 1.31+ configurations, related to the ConsistentListFromCache feature, where rapid create / update API requests across different namespaces encounter increased latency. (#130136, @AwesomePatrol) [SIG API Machinery]

• The following roles have had Watch added to them (prefixed with system:controller:):

  • cronjob-controller
  • endpoint-controller
  • endpointslice-controller
  • endpointslicemirroring-controller
  • horizontal-pod-autoscaler
  • node-controller
  • pod-garbage-collector
  • storage-version-migrator-controller (#130461, @kariya-mitsuru) [SIG Auth]

Dependencies

Added

Nothing has changed.

Changed

• github.com/vishvananda/netlink: b1ce50c → 62fb240

Removed

Nothing has changed.