RATATOSKRATATOSK
Sign in

Open Cluster Management

v1.1.0Orchestration & Management
Oct 22, 2025

CHECK 1PLAN 1OTHER 105

This release adds gRPC, manifest-management, addon, and workload-management capabilities alongside extensive fixes and dependency and supply-chain updates. Upgrades may require attention because `apiextensions v1beta1` is removed and `InstallNamespace` is deprecated in `v1alpha1`.

Check if affected (1)

  • breakingThe apiextensions v1beta1 CRD, removed

    Applies if you use the apiextensions v1beta1 CRD.

    The apiextensions v1beta1 CRD is removed from the release.

Plan ahead (1)

  • deprecatedThe InstallNamespace API, deprecated in v1alpha1

    Applies if you use the InstallNamespace API.

    The InstallNamespace addon field is deprecated in the v1alpha1 open-cluster-management.io API.

All 105 other recorded changesvalue changes 50 · fixes 31 · additions 23 · constraints 1

value changes (50)

  • - Add labels to resources created by work controller (#1176) @suvaanshkumar
  • - Update sdk-go so we can support executor test for cloudevent (#1182) @qiujian16
  • - adjust base and max delay for appliedmanifestwork deletion (#1120) @skeeey
  • - Bump the aws group with 5 updates (#1217) @dependabot[bot]
  • - Bump library to v1.1.0 (#1216) @qiujian16
  • - Upgrade golang.org/x/net to v0.46.0 (#1212) @zhujian7
  • - Upgrade docker lib (#1197) @zhujian7
  • - Bump the aws group with 5 updates (#1186) @dependabot[bot]
  • - Update grpc configuration in operator API (#1159) @qiujian16
  • - upgrade grpc server. (#1157) @morvencao
  • - Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#1149) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.24.0 to 2.25.1 (#1140) @dependabot[bot]
  • - Bump the aws group across 1 directory with 4 updates (#1137) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.24.0 (#1133) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 (#1129) @dependabot[bot]
  • - Bump the k8s-io group with 8 updates (#1127) @dependabot[bot]
  • - Bump the aws group with 4 updates (#1122) @dependabot[bot]
  • - Bump golang.org/x/net from 0.42.0 to 0.43.0 (#1119) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.36.3 to 1.38.0 (#1114) @dependabot[bot]
  • - Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 (#1111) @dependabot[bot]
  • - Bump golang.org/x/net from 0.40.0 to 0.42.0 (#1106) @dependabot[bot]
  • - Bump the aws group across 1 directory with 4 updates (#1105) @dependabot[bot]
  • - Bump github.com/google/cel-go from 0.25.0 to 0.26.0 (#1104) @dependabot[bot]
  • - Bump github.com/cloudevents/sdk-go/v2 from 2.15.3-0.20240911135016-682f3a9684e4 to 2.16.1 (#1103) @dependabot[bot]
  • - Bump github.com/mochi-mqtt/server/v2 from 2.6.6 to 2.7.9 (#1100) @dependabot[bot]
  • - Bump the aws group with 5 updates (#1098) @dependabot[bot]
  • - Bump github.com/spf13/pflag from 1.0.6 to 1.0.7 (#1094) @dependabot[bot]
  • - Bump the aws group with 5 updates (#1093) @dependabot[bot]
  • - Bump the k8s-io group with 9 updates (#1091) @dependabot[bot]
  • - Update dependencies by group (#1088) @zhujian7
  • - Upgrade golang to 1.24 and helm to 3.18.4 (#1085) @zhujian7
  • :seedling: Bump golang.org/x/net from 0.42.0 to 0.43.0
  • :seedling: Bump the aws group across 1 directory with 4 updates×2
  • :seedling: Bump the k8s-io group with 8 updates
  • :seedling: Bump helm.sh/helm/v3 from 3.18.4 to 3.18.5
  • :seedling: Bump the aws group with 4 updates
  • :seedling: Bump github.com/onsi/ginkgo/v2 from … to …×2
  • :seedling: Bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • 🌱 upgrade grpc server.
  • 🌱 Update grpc configuration in operator API
  • 🐛 Update sdk-go so we can support executor test for cloudevent
  • :seedling: Bump the aws group with 5 updates×2
  • 🌱 Improve addon template controller logging and template mode support
  • ✨ Add labels to resources created by work controller
  • 🌱 Upgrade docker lib
  • 🌱 Upgrade golang.org/x/net to v0.46.0
  • 🌱 Bump library to v1.1.0

fixes (31)

  • - Empty agentInstallNamespace should not override addonTemplate namespace (#1213) @zhujian7
  • - using mw finalizer instead of resource finalizer (#1211) @skeeey
  • - Fix progressive rollout on ManifestWorkReplicaSet spec changes (#1207) @haoqing0110
  • - Avoid redundant apply and get operation in work controller (#1196) @qiujian16
  • - Add startTime initialization and wait in hubTimeoutController (#1191) @xuezhaojun
  • - Use specific addon template instead of default in CSR functions (#1180) @zhujian7
  • - Requeue ssar check if only hubKubeConfigSecret is unauthorized (#1169) @qiujian16
  • - Fix ManagedClusterAddons not removed when ClusterManagementAddon is deleted (#1160) @zhujian7
  • - fix addon namespace deletion in multi-hub scenarios (#1153) @elgnay
  • - Fix wrong key queue for addon controllers (#1152) @qiujian16
  • - Ignore already existing error when creating cluster (#1142) @qiujian16
  • - should resync the grpc-server cert after clustermanager updated (#1126) @skeeey
  • - fix issue when handling z release changelog (#1101) @qiujian16
  • - Should start clusterprofile informer when featuregate is enabled (#1079) @qiujian16
  • - revert the app label (#1073) @zhiweiyin318
  • - fix the labels of hub deployments cannot be updated from the clustermanager (#1046) @zhiweiyin318
  • - fix no requeue when return requeueError (#1041) @zhiweiyin318
  • :bug: should resync the grpc-server cert after clustermanager updated
  • :bug: add tokenreviews permission for supporting token auth way
  • 🐛 Ignore already existing error when creating cluster
  • 🐛 Fix wrong key queue for addon controllers
  • 🐛 Requeue ssar check if only hubKubeConfigSecret is unauthorized
  • 🐛 Fix ManagedClusterAddons not removed when ClusterManagementAddon is deleted
  • 🐛 fix addon namespace deletion in multi-hub scenarios
  • 🐛 Use specific addon template instead of default in CSR functions
  • :bug: Add startTime initialization and wait in hubTimeoutController
  • 🐛 Fix ManifestWorkReplicaSet not deleting ManifestWorks from old placement
  • :bug: using mw finalizer instead of resource finalizer
  • 🐛 Avoid redundant apply and get operation in work controller
  • 🐛 Empty agentInstallNamespace should not override addonTemplate namespace
  • :bug: Fix progressive rollout on ManifestWorkReplicaSet spec changes

additions (23)

  • - add grpc config into the bootstrap secret (#1194) @zhiweiyin318
  • - support cluster import config secret (#1170) @zhiweiyin318
  • - Deleted manifestwork when it is completed for ttl seconds. (#1158) @qiujian16
  • - Set deleting condition when mw is deleting (#1084) @qiujian16
  • - grp server (#1058) @skeeey
  • - add tokenreviews permission for supporting token auth way (#1131) @skeeey
  • - Improve addon template controller logging and template mode support (#1184) @zhujian7
  • - support grpc auto approval user config (#1145) @skeeey
  • - support cert auto approve for grpc (#1134) @skeeey
  • - Generate attestation for helm charts (#1117) @zhujian7
  • - Generate sbom and attestation for release images (#1115) @zhujian7
  • - Generate sbom and attestation for images (#1110) @zhujian7
  • - support deploying grpc with clustermanager/klusterlet (#1107) @skeeey
  • - starting grpc server with config file (#1071) @skeeey
  • - Send an event for evicting appliedmanifestwork (#1066) @zhujian7
  • :seedling: support cert auto approve for grpc
  • :seedling: support grpc auto approval user config
  • :sparkles: support cluster import config secret
  • ✨ Deleted manifestwork when it is completed for ttl seconds.
  • ✨ support managed namespaces
  • :seedling: check registration webhook deployment for HubRegistrationDegraded condition
  • Manifest completion
  • add grpc config into the bootstrap secret

constraints (1)

  • - support managed namespaces (#1193) @elgnay
Add Open Cluster Management to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Open Cluster Management releases →