Kubeflow
26.10.0AI & MLWorkspacesを既定で有効にし、Helm対応の拡充や同梱コンポーネントの更新を含む機能・統合リリースです。アップグレード時の移行手順と修正も含まれるため、Workspaces、Helm、または該当する既存リソースを利用している環境では変更内容の確認が必要です。
要対応 (2)
securityKubeflow Dashboard 2.0.1 の更新
Kubeflow Dashboard 2.0.1 に依存関係とセキュリティの更新、ナビゲーションの修正、閲覧者を自身で管理する機能が含まれます。
breakingKubeflow Workspaces 2.0.0 の既定有効化
Kubeflow Workspaces 2.0.0(
Notebooks v2)が既定で有効になり、Central Dashboard に Workspaces の項目が追加されます。
影響確認 (5)
breakingKServe リソースと Models Web Application の namespace 移動
KServe control-plane resourcesまたは Models Web Application を利用している場合に適用されます。KServe control-plane resourcesと Models Web Application がkservenamespace に移動し、計画的な control-plane の停止が必要になります。breaking
Workspacesへの移行とレガシー構成の削除条件いずれかの namespace で
Notebook、Tensorboard、PVCViewerオブジェクトを利用している場合に適用されます。既定のインストールでは
WorkspacesがNotebooks v1に置き換わります。レガシー構成の削除を任意で行う場合は、すべての namespace からNotebook、Tensorboard、PVCViewerオブジェクトがなくなるまで実施できません。breaking
ml-pipeline-uiDeployment の更新戦略既存の
ml-pipeline-uiDeployment がある場合に適用されます。既存の
ml-pipeline-uiDeployment には、新しいマニフェストを適用する前に、文書化されたRecreate戦略のパッチが必要です。breaking
Notebooks v2のメニュー追加とNotebooks v1の既定無効化Notebooks v1を利用している場合に適用されます。Notebooks v2のメニュー項目が追加され、Notebooks v1は既定で無効になります。breaking
ml-pipeline-ui更新戦略手順の追加26.03.1 から 26.10.0 にアップグレードする場合に適用されます。
26.03.1 から 26.10.0 へのアップグレードでは、
ml-pipeline-uiの更新戦略に関する手順が追加されます。
その他の記録済み変更 84 件すべてvalue changes 51 · additions 25 · fixes 6 · constraints 1 · removals 1
value changes (51)
- Update kubeflow/hub manifests from v0.3.10 by @pboyd in https://github.com/kubeflow/community-distribution/pull/3504
- Update kubeflow/spark-operator manifests from v2.5.1 by @juliusvonkohout in https://github.com/kubeflow/community-distribution/pull/3506
- Update kserve/kserve manifests to version v0.19.0 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3505
- Update kubeflow/trainer manifests from v2.2.1 by @juliusvonkohout in https://github.com/kubeflow/community-distribution/pull/3511
- Update istio to 1.30.2 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3513
- Synchronize kserve UI manifests v1.0.0 by @juliusvonkohout in https://github.com/kubeflow/community-distribution/pull/3529
- Restore defaultProviders.metrics in oauth2-proxy istio mesh config by @noisonnoiton in https://github.com/kubeflow/community-distribution/pull/3532
- Synchronize kubeflow pipelines manifests release 2.17 by @juliusvonkohout in https://github.com/kubeflow/community-distribution/pull/3537
- Update kubeflow/pipelines manifests from release-2.17 by @juliusvonkohout in https://github.com/kubeflow/community-distribution/pull/3538
- proper build version by @juliusvonkohout in https://github.com/kubeflow/community-distribution/pull/3539
- Update Kubeflow Pipelines synchronization and test SDK to 2.17.0 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3542
- Update kserve-ui manifests to v1.0.1 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3546
- helm: update cert-manager chart metadata by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3531
- Update kubeflow/hub manifests from v0.3.12 by @pboyd in https://github.com/kubeflow/community-distribution/pull/3548
- ray: update KubeRay and Ray versions by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3528
- helm: align Hub chart with v0.3.12 manifests by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3553
- Update Istio manifests to 1.30.3 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3554
- Update kubeflow/hub manifests from v0.3.14 by @pboyd in https://github.com/kubeflow/community-distribution/pull/3555
- helm: restore Hub v0.3.14 parity by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3556
- Update Spark Operator to v2.5.2 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3571
- Update OAuth2-Proxy to v7.15.3, Cert Manager to v1.21.1 and Trainer to v2.3.0-rc.3 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3572
- Update Kubeflow Trainer to v2.3.0 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3578
- Update kserve/kserve manifests to version v0.20.0 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3576
- spark: regenerate resources.yaml with Helm v4 and pin the toolchain by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3587
- Update kubeflow/notebooks manifests to v2.0.0-beta.0 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3584
- Update kubeflow/pipelines manifests to 2.17.1 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3591
- Update kubeflow/hub manifests from v0.3.16 by @adysenrothman in https://github.com/kubeflow/community-distribution/pull/3593
- Update Istio manifests to 1.31.0 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3596
- Update Kind to 0.33.0 and Kubernetes to 1.37.0 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3597
- Update kubeflow/notebooks manifests to v2.0.0-beta.1 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3598
- Update Kubeflow Pipelines to 2.17.2 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3599
- Update kubeflow/notebooks manifests to v2.0.0-beta.2 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3608
- Update kubeflow/hub manifests from v0.3.17 by @pboyd in https://github.com/kubeflow/community-distribution/pull/3620
- Update Istio to 1.31.1 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3621
- Synchronize KServe UI to v1.0.5 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3625
- Update kserve/kserve manifests to version v0.21.0 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3627
- Update kubeflow/notebooks manifests to v2.0.0-beta.3 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3629
- Update istio/istio manifests from 1.31.2 by @vikas-saxena02 in https://github.com/kubeflow/community-distribution/pull/3643
- Update cert-manager/cert-manager manifests from v1.21.2 by @vikas-saxena02 in https://github.com/kubeflow/community-distribution/pull/3645
- Synchronize oauth2 proxy v7.15.5 and dex v2.46.0 by @vikas-saxena02 in https://github.com/kubeflow/community-distribution/pull/3646
- Synchronize KubeRay 1.7.1 manifests and Helm wrapper by @vikas-saxena02 in https://github.com/kubeflow/community-distribution/pull/3647
- Update kubeflow/hub manifests from v0.3.18 by @pboyd in https://github.com/kubeflow/community-distribution/pull/3652
- Update Kubeflow Pipelines and Istio versions by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3653
- Synchronize kubeflow/notebooks manifests to v2.0.0-rc.0 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3649
- Update KServe UI, Knative, and Dex by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3654
- Update Kubeflow Pipelines and SDK to 2.18.0 by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3658
- Update kubeflow/notebooks manifests to v2.0.0-rc.1 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3670
- Update kubeflow/dashboard manifests to v2.0.1 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3672
- Update kubeflow/notebooks manifests to v1.11.1 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3673
- Update kubeflow/notebooks manifests to v2.0.0 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3675
- Update kubeflow/trainer manifests to v2.4.0 by @christian-heusel in https://github.com/kubeflow/community-distribution/pull/3676
additions (25)
- Experimental [Helm charts](https://medium.com/@danishsiddiqui040/why-kubeflow-helm-charts-took-more-than-writing-yaml-ad7ef203222e) providing a 1:1 equivalent of the Kustomize manifests, with [full Helm installation and end-to-end integration tests](https://github.com/kubeflow/community-distribution/actions/workflows/helm_kubeflow_integration_test.yaml) and Helm/Kustomize comparison tests.
- Pipelines now supports [garbage collection for both S3 artifacts and the database](https://medium.com/@siddhantjainofficial26/gsoc-2026-platform-scalability-and-security-df71812c2563).
- helm: align hub image tags with kustomize by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3514
- helm: add cert-manager wrapper chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3470
- helm: add Kubeflow foundation charts by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3468
- helm: add Dex wrapper chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3480
- helm: add oauth2-proxy wrapper chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3479
- helm: add Istio wrapper chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3478
- helm: add Kubeflow Dashboard chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3524
- helm: add Kubeflow Notebooks chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3525
- istio: add namespace ownership guards and machine-to-machine gateway authentication payload by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3567
- dex: configure connectors through values by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3568
- dex: render the authcodes CustomResourceDefinition from templates by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3594
- helm: add generated Knative Serving chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3615
- helm: add generated Models UI platform chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3614
- helm: wrap the upstream KubeRay operator chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3618
- workspaces: add the Kubeflow Workspaces Helm chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3611
- helm: add generated Hub registry and catalog charts by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3616
- helm: add Kubeflow Pipelines chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3552
- helm: add Spark Operator chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3575
- helm: add generated Knative Eventing chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3617
- katib: add the generated Katib Helm chart by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3610
- trainer: add the Kubeflow Trainer Helm charts by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3612
- Enable Workspaces and validate Spark Connect in full integrations by @juliusvonkohout with @Copilot in https://github.com/kubeflow/community-distribution/pull/3603
- documentation: connect OAuth2 Proxy directly to Keycloak without Dex by @ezejiofor in https://github.com/kubeflow/community-distribution/pull/3655
fixes (6)
- Kubeflow Notebooks v1.11.1 fixes the [infinite status reconciliation loop in the notebook controller](https://github.com/kubeflow/notebooks/pull/1343), improving scalability for existing Notebooks v1 installations.
- There is a small bug which leads to the old version number being displayed in the Dashboard. Please use the latest [26.10 branch for a fix](https://github.com/kubeflow/community-distribution/tree/release-26.10).
- fix(pipeline): allow kube-apiserver to reach the PipelineVersion admission webhook by @tyetladd in https://github.com/kubeflow/community-distribution/pull/3581
- fix(spark): add sparkconnects to the aggregated Spark ClusterRoles by @vikas-saxena02 in https://github.com/kubeflow/community-distribution/pull/3586
- fix(spark): correct sidecar injection label key on the SparkApplication by @vikas-saxena02 in https://github.com/kubeflow/community-distribution/pull/3588
- helm: apply aggregated role ownership repair to Istio by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3622
constraints (1)
- dex, oauth2-proxy: refuse to render placeholder credentials by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3569
removals (1)
- Remove legacy Training Operator by @danish9039 in https://github.com/kubeflow/community-distribution/pull/3540
対応が必要なリリースが出たときに、週次メールでお知らせします。 今回のセキュリティパッチと破壊的変更も、その一例です。