RATATOSKRATATOSK
Sign in

Open Cluster Management

v1.3.0Orchestration & Management
May 9, 2026

CHECK 2OTHER 119

A feature and maintenance release with new addon, TLS, API, and manifest capabilities, along with correctness fixes and dependency updates. The unsupported `addon webhook hosted mode config` is removed, so configuration and API behavior should be reviewed during an upgrade.

Check if affected (2)

  • breakingRemoval of the addon webhook hosted mode config

    Applies if you configure addon webhook hosted mode config.

    The unsupported addon webhook hosted mode config is removed from the addon webhook configuration in this release.

  • breakingRemoval of the addon webhook hosted mode config

    Applies if you configure addon webhook hosted mode config.

    The unsupported addon webhook hosted mode config is removed from the addon webhook configuration in this release.

All 119 other recorded changesvalue changes 84 · fixes 16 · additions 13 · constraints 4 · defaults 1 · renames 1

value changes (84)

  • - Apply resource in manifestwork ordered by kind (#1500) @qiujian16
  • - split debug controller as standalone service with proper validation (#1461) @haoqing0110
  • - fix: Propagate UserInfo.Extra field in ManifestWork webhook SAR (#1427) @zhujian7
  • - Use generate name for manfiestwork generated by manifestworkreplicaset (#1421) @qiujian16
  • - Move addon manager's API to v1beta1 (#1511) @qiujian16
  • - Bump the github-actions group with 2 updates (#1508) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 (#1503) @dependabot[bot]
  • - Bump open-cluster-management.io/api from 1.2.1-0.20260420020752-a40dfdc05b05 to 1.3.0 in the open-cluster-management-io group (#1501) @dependabot[bot]
  • - chore: Bump open-cluster-management.io/api to pick up the omitzero tag on ClusterDecision.Score in PlacementDecision (#1492) @mikeshng
  • - Bump the github-actions group with 2 updates (#1490) @dependabot[bot]
  • - Bump the k8s-io group with 8 updates (#1489) @dependabot[bot]
  • - Bump the github-actions group with 4 updates (#1488) @dependabot[bot]
  • - Bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 (#1487) @dependabot[bot]
  • - Bump github.com/google/cel-go from 0.27.0 to 0.28.0 (#1483) @dependabot[bot]
  • - Bump github.com/aws/aws-sdk-go-v2/service/eks from 1.81.2 to 1.82.0 in the aws group across 1 directory (#1482) @dependabot[bot]
  • - Bump sigs.k8s.io/cluster-inventory-api from 0.0.0-20251124125836-445319b6307a to 0.1.0 in the k8s-io group (#1481) @dependabot[bot]
  • - Bump step-security/harden-runner from 2.16.0 to 2.16.1 in the github-actions group (#1475) @dependabot[bot]
  • - Bump the aws group with 2 updates (#1474) @dependabot[bot]
  • - refactor cluster kubeapiserver health check with failure threshold (#1473) @zhiweiyin318
  • - Bump github.com/itchyny/gojq from 0.12.18 to 0.12.19 (#1472) @dependabot[bot]
  • - Bump google.golang.org/grpc from 1.79.3 to 1.80.0 (#1470) @dependabot[bot]
  • - Bump the github-actions group with 3 updates (#1466) @dependabot[bot]
  • - Bump the aws group with 4 updates (#1464) @dependabot[bot]
  • - Bump google.golang.org/grpc from 1.79.2 to 1.79.3 (#1451) @dependabot[bot]
  • - Bump the aws group with 4 updates (#1441) @dependabot[bot]
  • - Bump the github-actions group with 2 updates (#1440) @dependabot[bot]
  • - Move addon api to beta in registration (#1438) @qiujian16
  • - Bump helm.sh/helm/v3 from 3.19.5 to 3.20.1 (#1433) @dependabot[bot]
  • - Bump github.com/aws/aws-sdk-go-v2/service/eks from 1.80.2 to 1.81.0 in the aws group (#1432) @dependabot[bot]
  • - Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.53.4 to 1.53.5 in the aws group (#1424) @dependabot[bot]
  • - upgrade sdk-go (#1422) @skeeey
  • - Bump the github-actions group with 3 updates (#1419) @dependabot[bot]
  • - Bump the k8s-io group across 1 directory with 3 updates (#1418) @dependabot[bot]
  • - Bump google.golang.org/grpc from 1.79.1 to 1.79.2 (#1415) @dependabot[bot]
  • - Bump kubernetes lib to 1.35 (#1414) @qiujian16
  • - Bump the aws group across 1 directory with 5 updates (#1411) @dependabot[bot]
  • - Bump the github-actions group with 5 updates (#1407) @dependabot[bot]
  • - Bump the aws group with 5 updates (#1399) @dependabot[bot]
  • - Bump the github-actions group across 1 directory with 2 updates (#1395) @dependabot[bot]
  • - Bump google.golang.org/grpc from 1.78.0 to 1.79.1 (#1392) @dependabot[bot]
  • - Bump github.com/aws/aws-sdk-go-v2/service/eks from 1.78.0 to 1.79.0 in the aws group (#1382) @dependabot[bot]
  • - Bump github.com/aws/aws-sdk-go-v2/service/eks from 1.77.1 to 1.78.0 in the aws group (#1379) @dependabot[bot]
  • - Bump the github-actions group with 2 updates (#1377) @dependabot[bot]
  • - Bump github.com/aws/aws-sdk-go-v2/service/eks from 1.77.0 to 1.77.1 in the aws group (#1374) @dependabot[bot]
  • - Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 (#1372) @dependabot[bot]
  • - Bump github/codeql-action from 4.31.11 to 4.32.0 in the github-actions group (#1370) @dependabot[bot]
  • - Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 (#1369) @dependabot[bot]
  • - Bump github.com/google/cel-go from 0.26.1 to 0.27.0 (#1366) @dependabot[bot]
  • Bump the github-actions group across 1 directory with 2 updates
  • Bump google.golang.org/grpc from … to …×4
  • Bump the aws group with 5 updates
  • Bump the github-actions group with 5 updates
  • Bump the aws group across 1 directory with 5 updates
  • Bump kubernetes lib to 1.35
  • Bump the k8s-io group across 1 directory with 3 updates
  • Bump the github-actions group with 3 updates×2
  • upgrade sdk-go
  • Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.53.4 to 1.53.5 in the aws group
  • Bump helm.sh/helm/v3 from … to …×2
  • Bump github.com/aws/aws-sdk-go-v2/service/eks from 1.80.2 to 1.81.0 in the aws group
  • Bump the aws group with 4 updates×2
  • Bump the github-actions group with 2 updates×3
  • Bump the k8s-io group with 8 updates×2
  • Move addon api to beta in registration
  • Bump github/codeql-action from 4.33.0 to 4.34.1 in the github-actions group
  • Bump the aws group with 2 updates
  • Bump step-security/harden-runner from 2.16.0 to 2.16.1 in the github-actions group
  • Bump sigs.k8s.io/cluster-inventory-api from 0.0.0-20251124125836-445319b6307a to 0.1.0 in the k8s-io group
  • Bump github.com/aws/aws-sdk-go-v2/service/eks from 1.81.2 to 1.82.0 in the aws group across 1 directory
  • Bump the github-actions group with 4 updates
  • Bump github.com/google/cel-go from 0.27.0 to 0.28.0
  • Bump github.com/itchyny/gojq from 0.12.18 to 0.12.19
  • Bump open-cluster-management.io/api to pick up the omitzero tag on ClusterDecision.Score in PlacementDecision
  • Bump open-cluster-management.io/api from 1.2.1-0.20260420020752-a40dfdc05b05 to 1.3.0 in the open-cluster-management-io group
  • Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2

fixes (16)

  • - Fix concurrency bugs in executor cache (#1512) @zhujian7
  • - Match the exact cluster name for csr renewal (#1476) @qiujian16
  • - fix renew the spoke agent cert request in grpc mode (#1463) @skeeey
  • - Fix Progressing condition stuck at True for overlapping placements (#1456) @zhiweiyin318
  • - fix cma Progressing status addon counting error (#1454) @zhiweiyin318
  • - set tokenrequest UID to empty to avoid conflict with the ServiceAccount UID validation (#1423) @zhiweiyin318
  • set tokenrequest UID to empty to avoid conflict with the ServiceAccount UID validation
  • Propagate UserInfo.Extra field in ManifestWork webhook SAR
  • Use generate name for manfiestwork generated by manifestworkreplicaset
  • fix cma Progressing status addon counting error
  • Fix Progressing condition stuck at True for overlapping placements
  • fix renew the spoke agent cert request in grpc mode
  • disable leader election for grpc server
  • Match the exact cluster name for csr renewal
  • tls-server-name field of external-managed-kubeconfig is missing
  • Fix concurrency bugs in executor cache

additions (13)

  • - feature: Add new ignore field options in SSA updateStrategy (#1405) @ncr38
  • - tls-server-name field of external-managed-kubeconfig is missing (#1502) @rokej
  • - Bump google.golang.org/grpc from 1.80.0 to 1.81.0 (#1516) @dependabot[bot]
  • - Copy TLS ConfigMap to addon namespaces in klusterlet operator (#1480) @zhujian7
  • - Add TLS profile compliance for gRPC server (#1471) @zhujian7
  • - Add TLS ConfigMap watch and restart for cluster-manager operator (#1452) @zhujian7
  • Add new ignore field options in SSA updateStrategy
  • Add TLS ConfigMap watch and restart for cluster-manager operator
  • split debug controller as standalone service with proper validation
  • Add TLS profile compliance for gRPC server
  • Copy TLS ConfigMap to addon namespaces in klusterlet operator
  • refactor cluster kubeapiserver health check with failure threshold
  • Apply resource in manifestwork ordered by kind

constraints (4)

  • - support install hosted addon via installStrategy (#1410) @zhiweiyin318
  • - Change image tag validation to fail only for tag format mismatches (#1385) @zhujian7
  • Support default mode webhook networking configuration
  • support install hosted addon via installStrategy

defaults (1)

  • - disable leader election for grpc server (#1468) @skeeey

renames (1)

  • Move addon manager's API to v1beta1
Add Open Cluster Management to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Open Cluster Management releases →