Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: KarmadaClear ×

Karmadav1.18.2Orchestration & ManagementJul 31, 2026

ACTION 2CHECK 8PLAN 4OTHER 65View full analysis

A broad operator-impacting maintenance release with security-related base image updates, API and configuration changes, scheduling capabilities, and deprecations and removals. Operators should review changed defaults and constraints and account for migration work affecting their configurations, APIs, and metrics.

Action needed (2)

securityThe alpine base image update
The alpine base image is updated from alpine:3.23.4 to alpine:3.24.1 to address security concerns.
securityThe alpine base image update
The alpine base image is updated from alpine:3.23.3 to alpine:3.23.4 to address security concerns.

Check if affected (8)

breakingThe cluster lease duration flags, removed
Applies if you configure either --cluster-lease-duration or --cluster-lease-renew-interval-fraction.
The flags --cluster-lease-duration and --cluster-lease-renew-interval-fraction have been removed.
breakingThe Estimator metric label value, removed
Applies if you use either estimating_plugin_execution_duration_seconds or estimating_plugin_extension_point_duration_seconds.
The deprecated Estimator label value for estimating_plugin_extension_point has been removed from the estimating_plugin_execution_duration_seconds and estimating_plugin_extension_point_duration_seconds metrics.
breakingThe Etcd.Local.InitImage configuration field, removed
Applies if you configure Etcd.Local.InitImage.
The deprecated Etcd.Local.InitImage field has been removed from Karmada Init Configuration.
+ 5 more on the release page

Plan ahead (4)

deprecatedThe ReplicaRequirements.resourceRequest field deprecationdeprecated since v1.18.0
Applies if you use ReplicaRequirements.resourceRequest.
ReplicaRequirements.resourceRequest is deprecated in favor of resourceRequestBytes, which stores proto-serialized resource.Quantity objects.
deprecatedThe ComponentReplicaRequirements.resourceRequest field deprecationdeprecated since v1.18.0
Applies if you use ComponentReplicaRequirements.resourceRequest.
ComponentReplicaRequirements.resourceRequest is deprecated in favor of resourceRequestBytes, which stores proto-serialized resource.Quantity objects.
deprecatedThe NodeClaim.nodeAffinity field deprecationdeprecated since v1.18.0
Applies if you use NodeClaim.nodeAffinity.
NodeClaim.nodeAffinity is deprecated in favor of nodeAffinityBytes, which stores a proto-serialized corev1.NodeSelector object.
+ 1 more on the release page

Source ↗

Karmadav1.17.5Orchestration & ManagementJul 31, 2026

ACTION 1CHECK 4PLAN 2OTHER 82View full analysis

A mixed maintenance and feature release with workload-affinity and anti-affinity support, encryption-at-rest capabilities, bug fixes, and updates to dependencies and default images. It also changes operational defaults and validation while deprecating or removing configuration flags and fields, so compatibility and configuration changes are part of the release.

Action needed (1)

breakingControllerPriorityQueue promotion to beta and default enablement
ControllerPriorityQueue is promoted to beta and enabled by default.

Check if affected (4)

breakingThe --etcd-init-image flag, removed from karmadactl init
Applies if you use the --etcd-init-image flag.
karmadactl removed the deprecated --etcd-init-image flag from the init command.
breakingnamespace validation for spec.resourceSelectors
Applies if you use PropagationPolicy or OverridePolicy.
karmada-webhook adds namespace validation for spec.resourceSelectors in PropagationPolicy and OverridePolicy.
breakingDistinct GroupByLabelKey values in WorkloadAffinity
Applies if you configure WorkloadAffinity.
karmada-webhook disallows setting the same GroupByLabelKey for affinity and antiAffinity in WorkloadAffinity.
+ 1 more on the release page

Plan ahead (2)

deprecatedEtcd.Local.InitImage deprecationdeprecated since v1.17.0 · removal date not announced
Applies if you configure Etcd.Local.InitImage in Karmada Init Configuration.
Etcd.Local.InitImage in Karmada Init Configuration is deprecated and will be removed in a future version.
deprecatedDeprecation of cluster lease flagsdeprecated since v1.17.0 · removal date not announced
Applies if you use --cluster-lease-duration or --cluster-lease-renew-interval-fraction.
The flags --cluster-lease-duration and --cluster-lease-renew-interval-fraction are deprecated and will be removed in a future release.

Source ↗

Karmadav1.16.8Orchestration & ManagementJul 31, 2026

ACTION 1CHECK 4PLAN 2OTHER 104View full analysis

A mixed maintenance and feature release with bug fixes, new APIs and capabilities, performance and instrumentation improvements, dependency updates, and deprecated field removals. Operators should review the removed fields and the updated dependency, while the release also adds multi-component scheduling, configurable initialization, eviction queue support, and new workload interpreters.

Action needed (1)

securitymediumThe github.com/vektra/mockery dependency update
The github.com/vektra/mockery dependency was bumped to v3.5.5 to address security concerns identified by GO-2025-3900.

Check if affected (4)

breakingThe external etcd fields CAData, CertData, and KeyData, removed
Applies if you configure CAData, CertData, or KeyData.
Deprecated external etcd fields CAData, CertData, and KeyData have been removed.
breakingThe init command's default component images
Applies if you run the init command.
The init command's default kube-apiserver and kube-controller-manager images were updated from v1.31.3 to v1.34.1. The default etcd image was updated from 3.5.16-0 to 3.6.0-0.
breakingA 32s default timeout for the member cluster client
Applies if you use the member cluster client.
A default timeout of 32s was added for the member cluster client to avoid the controller hanging when a member cluster does not respond.
+ 1 more on the release page

Plan ahead (2)

deprecatedThe --etcd-init-image flag, deprecatedremoval date not announced
Applies if you use --etcd-init-image.
The --etcd-init-image flag of the init command is deprecated because it is no longer used. The flag will be removed in a future release.
breakingThe Prometheus metric labels cluster and cluster_name, replaced by member_clusterremoval planned in 1.18
Applies if you use the cluster or cluster_name metric labels.
The Prometheus metric labels cluster and cluster_name are deprecated for identifying a Karmada member cluster. The member_cluster label is now used instead and the older labels will be removed in the 1.18 release.

Source ↗

Karmadav1.18.1Orchestration & ManagementJun 30, 2026

ACTION 1OTHER 1View full analysis

This release updates the Alpine base image and fixes a Helm chart TLS certificate issue. The Helm fix applies to deployments that use a custom namespace, while the base image change addresses security concerns.

Action needed (1)

securityThe alpine base image, upgraded
The alpine base image is promoted from alpine:3.23.4 to alpine:3.24.1 to address security concerns.

Source ↗

Karmadav1.17.4Orchestration & ManagementJun 30, 2026

ACTION 1OTHER 1View full analysis

Karmada v1.17.4 updates its Alpine base image to address security concerns. The release also fixes a Helm chart TLS certificate SAN mismatch when deploying to a custom namespace.

Action needed (1)

securityThe alpine base image, updated to alpine:3.24.1
The alpine base image is updated from alpine:3.23.4 to alpine:3.24.1 to address security concerns. The update ships in Karmada v1.17.4.

Source ↗

Karmadav1.16.7Orchestration & ManagementJun 30, 2026

ACTION 1OTHER 1View full analysis

Karmada v1.16.7 updates its Alpine base image for security concerns and includes a Helm chart fix for TLS certificate SANs in custom namespaces. The release affects deployments that use the updated image or the affected Helm chart configuration.

Action needed (1)

securityThe alpine base image, updated
The base image alpine is promoted from alpine:3.23.4 to alpine:3.24.1 to address security concerns.

Source ↗

Karmadav1.18.0Orchestration & ManagementMay 30, 2026

ACTION 1CHECK 9OTHER 35View full analysis

A feature and maintenance release that adds overflow scheduling and scheduling overcommit protection, along with API, default, constraint, metric, and flag changes. It also includes a security-related alpine base-image update and numerous defect corrections.

Action needed (1)

securityThe alpine base image update
The alpine base image has changed from alpine:3.23.3 to alpine:3.23.4 to address security concerns.

Check if affected (9)

breakingThe overflowAffinities field
Applies if you configure overflowAffinities.
Users can declare supplementary cluster groups with the overflowAffinities field in a ClusterAffinityTerm.
breakingStricter clusterTolerations operator validation
Applies if you set spec.placement.clusterTolerations with Lt or Gt.
PropagationPolicy and ClusterPropagationPolicy resources that use the Lt or Gt operator are now rejected.
breakingThe operator's default verbosity level
Applies if you run the operator.
The operator now sets the default verbosity level to 2 for the specified components.
+ 6 more on the release page

Source ↗

Karmadav1.17.2Orchestration & ManagementApr 30, 2026

ACTION 1OTHER 5View full analysis

v1.17.2 contains correctness fixes and a security-related Alpine base-image dependency update. The alpine update requires upgrading to receive the new base image.

Action needed (1)

securityThe alpine base image, updated to alpine:3.23.4
The base image alpine has been updated from alpine:3.23.3 to alpine:3.23.4 to address security concerns. The update ships in v1.17.2.

Source ↗

Karmadav1.15.8Orchestration & ManagementApr 30, 2026

ACTION 1OTHER 3View full analysis

A maintenance release includes corrected operator and scheduler behavior, along with an updated Alpine base image. The Alpine update addresses security concerns.

Action needed (1)

securityThe alpine base image, updated
The base image alpine was updated from alpine:3.23.3 to alpine:3.23.4 to address security concerns. The update ships in the release.

Source ↗

Browse by month