What's Changed

• scaletest: decouple client HTTP traffic for etcd events by @Jefftree in #18415
• Release notes for 1.36 (alpha) by @hakman in #18414
• chore: Add hashes for additional May releases by @hakman in #18418
• Add logs at v2 level to ensure we have slow pods data in logs by @hakuna-matatah in #18420
• chore: upgrade containerd to v2.3.1 by @hakman in #18422
• Upgrade kube-router to v2.10.0 by @rifelpet in #18421
• aws: pin LBC selectors to fix in-place upgrades by @hakman in #18426
• cert-manager: upgrade to v1.19.5 and set AWS_REGION for Route53 dns-01 by @hakman in #18428
• etcd: add ListenClientHTTPURLs field to EtcdManagerSpec by @Jefftree in #18416
• Default omitted authorization to RBAC instead of AlwaysAllow by @hakman in #18431
• cilium: allow disabling masquerade in ENI IPAM mode by @hakman in #18432
• channels: surface addon apply failures via a readiness probe by @hakman in #18433
• etcd-manager: upgrade etcd-manager and etcd to latest patches by @hakman in #18436
• chore: downgrade containerd to v2.2.4 by @hakman in #18447
• test: avoid kubeconfig access in golden tests by @hakman in #18448
• scaletest: Build only linux/amd64 in kubernetes scalability presubmits by @Jefftree in #18446
• scaletest: Allow feature gates to be set in scalability tests by @Jefftree in #18449
• feat: add gVisor RuntimeClass support for containerd by @ameukam in #18406
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #18451
• Calico: add NFTablesMode setting by @rifelpet in #18452
• etcd-manager: switch to go-runner-based distroless image by @hakman in #18450
• kube-proxy: assert buildPod command in unit test by @hakman in #18455
• gVisor: add HasGVisor() helper function by @hakman in #18456
• dump: add --node-dump-timeout flag for per-node dump timeout by @Jefftree in #18443
• scaltest: Default node dump timeout to 5m in scalability run-test.sh by @Jefftree in #18457
• Release 1.36.0-beta.1 by @hakman in #18464

Full Changelog: v1.36.0-alpha.1...v1.36.0-beta.1

What's Changed

• Automated cherry pick of #17740: Fix HasHighlyAvailableControlPlane to use AllInstanceGroups by @hakman in #18117
• Automated cherry pick of #18113: Add excludedInstanceTypes to instanceRequirements by @hakman in #18119
• Automated cherry pick of #18123: Fix instanceRequirements memory assignment bug by @hakman in #18124
• Automated cherry pick of #17999: aws: Bypass LBC webhook for cert-manager by @rifelpet in #18125
• Automated cherry pick of #18126: Add --use-kubeconfig to kops reconcile cluster by @hakman in #18127
• Automated cherry pick of #18128: vfs: Silence warnings when the S3 provider has no supported by @hakman in #18130
• Automated cherry pick of #18114: Pin upload-artifacts GHA to commit sha by @rifelpet in #18208
• Automated cherry pick of #18173: Update Golang to 1.25.9 by @hakman in #18205
• Automated cherry pick of #18110: Update Cluster Autoscaler to 1.35.0 by @hakman in #18217
• Automated cherry pick of #18237: cilium: require k8s-connectivity in liveness probe by @hakman in #18242
• aws: bypass LBC mservice webhook for kube-system by @hakman in #18248
• Automated cherry pick of #18251: aws: skip node S3 permissions when kops-controller serves node config by @hakman in #18253
• Cherrypick VPC CNI fixes to 1.35 by @rifelpet in #18268
• Cherrypick GCE resource dump fixes to 1.35 by @rifelpet in #18282
• Automated cherry pick of #18285: cilium: allow setting arbitrary cilium-config entries by @hakman in #18286
• Automated cherry pick of #18281: hetzner: Upgrade hcloud-cloud-controller-manager to v1.30.1 by @hakman in #18283
• Automated cherry pick of #18298: dns-controller: make priorityClassName configurable by @hakman in #18299
• Automated cherry pick of #18232: Initial support for Ubuntu 26.04 by @rifelpet in #18306
• Automated cherry pick of #18302: dns-controller: default Provider when ExternalDNS is partially set by @hakman in #18303
• Automated cherry pick of #18307: gce: expose kops-controller on internal LB for gossip clusters by @hakman in #18308
• Automated cherry pick of #18260: azure: encode storage account in azureblob:// URLs by @hakman in #18320
• Automated cherry pick of #18319: azure: list VMSS NICs in protokube gossip seed discovery by @hakman in #18321
• Automated cherry pick of #18323: etcd-manager: upgrade to v3.0.20260512 by @hakman in #18324
• Cherrypick GCE instance handling fixes to 1.35 by @rifelpet in #18327
• etcd-manager: bump etcd to latest patches (3.5.30, 3.6.11) by @yuzhouliu9 in #18333
• Automated cherry pick of #18375: cilium: add flags for bpf-lb-sock and bpf-lb-sock-hostns-only by @hakman in #18376
• Automated cherry pick of #18379: kops-controller and nodeup bug fixes by @rifelpet in #18380
• Automated cherry pick of #18384: Fix kops get assets when spec.dnsZone is a DNS name by @hakman in #18386
• Automated cherry pick of #18144: Move johngmyers to emeritus by @hakman in #18388
• Automated cherry pick of #18391: Validate instance group names in kops-controller by @rifelpet in #18392
• Upgrade Go to 1.26.3 for release-1.35 by @hakman in #18396
• Update dependencies for release-1.35 by @hakman in #18399
• Automated cherry pick of #18401: gomod: tidy and verify all modules by @hakman in #18404
• Automated cherry pick of #18403: build: use gcr.io/distroless/static as base image by @hakman in #18417
• Automated cherry pick of #18418: chore: Add hashes for additional May releases by @hakman in #18419
• Automated cherry pick of #18364: chore: upgrade containerd to v2.3.0
  #18422: chore: upgrade containerd to v2.3.1 by @hakman in #18423
• Release 1.35.1 by @hakman in #18425

Full Changelog: v1.35.0...v1.35.1

What's Changed

• Remove support for Amazon Linux 2 by @rifelpet in #17898
• Update distribution matrix for Amazon Linux 2 by @rifelpet in #17943
• metal: Unpin K8s version by @hakman in #17944
• Create iproute2 symlink for kuberouter on older distros by @rifelpet in #17945
• chore(channels): update alpha k8s versions with February releases by @moshevayner in #17948
• versionbump: go 1.25.7 by @justinsb in #17956
• Feature: pull user defined images for warm pool instances by @dezmodue in #17861
• Fix creation of discovery and state store buckets by @rifelpet in #17961
• Migrate more scenario scripts to --test=exec by @rifelpet in #17962
• Migrate e2e template AMIs to SSM params by @rifelpet in #17964
• LBC Scenario - Pass region to AWS CLI by @rifelpet in #17965
• Set kubeconfig for LBC test suite by @rifelpet in #17967
• Enable nf_conntrack kernel module on Rocky 9 by @rifelpet in #17968
• Remove DISCOVERY_STORE handling by @rifelpet in #17969
• kube-router: bump version v2.5.0 -> 2.7.1 by @aauren in #17966
• chore: Add asset hashes for February 2026 releases by @hakman in #17980
• Remove reference to unbound variable by @rifelpet in #17985
• Use golang-based tool for AWS instances availability by @ameukam in #17953
• drop cdn.dl.k8s.io as a mirror by @upodroid in #17976
• drop storage.googleapis.com/k8s-artifacts-cni as a mirror by @hakman in #17987
• tests/ai-conformance: don't panic if no zones for AWS by @justinsb in #17994
• Scenario Fixes by @rifelpet in #17997
• Use a deterministic bucket name in prow jobs by @rifelpet in #17998
• Make region selection determistic from BUILD_ID by @rifelpet in #18000
• Addon Scenario - Remove old feature flag by @rifelpet in #17963
• aws: Bypass LBC webhook for cert-manager by @hakman in #17999
• Bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in #18002
• tests/ai-conformance: fix syntax for enabling gatewayAPI with cilium by @justinsb in #17992
• tests/ai-conformance: fix syntax for enabling nvidia GPU in containerd by @justinsb in #18001
• Consolidate support for ENI-based CNIs by @rifelpet in #17940
• tests/ai-conformance: use nvidia GPU operator by @justinsb in #18005
• tests/ai-conformance: create cluster with some non-GPU nodes by @justinsb in #18006
• tests/ai-conformance: update test job for DRA v1 by @justinsb in #18008
• tests/ai-conformance: use server-side-apply for KubeRay Operator by @justinsb in #18007
• fix: avoid panic if subnet ID is nil by @justinsb in #18010
• tests/ai-conformance: create first tests for AI Conformance by @justinsb in #18009
• gce: don't request migration on instance types that don't support it by @justinsb in #18004
• gce: Wait to delete InstanceManagers and InstanceTemplates by @Camila-B in #18013
• Bump release tools for E2E tests by @ameukam in #18017
• Add warning for non-production use in README by @ritazh in #17952
• Keep skipping certain tests on older cilium versions by @rifelpet in #18019
• chore: Add hashes for additional February releases by @hakman in #18021
• chore: Bump alpha channels with additional February releases by @hakman in #18020
• chore: Bump etcd-manager to v3.0.20260227 by @hakman in #18026
• build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #18029
• build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #18030
• chore(channels): promote alpha to stable by @moshevayner in #18033
• feat: Use wellknownports for etcd and add cilium etcd ports by @apeabody in #18035
• tests/ai-conformance: Install prometheus for metrics by @ameukam in #18018
• build(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #18042
• Fix node bootstrap challenge response hashing by @rifelpet in #18043
• Add addons node to scalability tests by @serathius in #18036
• test: Skip dumping not found nodes for GCE by @hakman in #18049
• allow pods to reach metric ports running on control plane nodes when using gce alias ip by @upodroid in #18052
• [aiconformance] Add test for gang scheduling with kueue by @justinsb in #18053
• chore: Bump Go to v1.25.8 by @hakman in #18058
• [aiconformance] Add tests for security / isolation by @justinsb in #18055
• scaletest: Move Prometheus to addon nodes by @serathius in #18048
• [aiconformance]: Add robust_controller test using KubeRay by @justinsb in #18056
• scaletest: Use sleep instead of wait for large clusters by @serathius in #18065
• [aiconformance]: Enable Cluster Autoscaler for GPU Nodes by @ameukam in #18066
• scaletest: Increase scalability tests log verbosity to 3 by @serathius in #18069
• [aiconformance]: Enable Metrics Server by @ameukam in #18067
• fix: don't panic when dumping nodes if we didn't capture cloud resources by @justinsb in #18072
• [aiconformance]: Validate networking/ai_inference requirements by @justinsb in #18063
• [aiconformance]: Add accelerator metrics validator test by @justinsb in #18064
• [aiconformance]: observability/ai_service_metrics by @justinsb in #18071
• [aiconformance]: Add K8s wrapper for DaemonSet object by @ameukam in #18073
• [aiconformance]: Add driver_runtime_management validator by @ameukam in #18074
• [aiconformance]: unify output under tests/ directory by @justinsb in #18076
• [aiconformance]: render markdown to HTML by @justinsb in #18077
• scaletest: Align kops scalability configuration with kube-up for kube-apiserver deleteCollectionsWorkers and MaxRequestInflight by @ronaldngounou in #18081
• [aiconformance]: Write conformance report to file by @justinsb in #18084
• [aiconformance]: Unify how we write test artifacts by @justinsb in #18087
• scaletest: Align kops scalability configuration with kube-up for kubeapisever CompactionInterval by @ronaldngounou in #18086
• Refactor interface type check to more idiomatic syntax by @rramkumar1 in #17951
• scaletest: Align kops scalability configuration with kube-up for kubelet kubeAPIQPS by @ronaldngounou in #18085
• Move VFS acls framework closer to VFS implementation code by @rramkumar1 in #17949
• Fix existing VPCs/Subnets with IPv6 by @rlees85 in #18089
• [aiconformance]: test for schedulingOrchestration pod autoscaling by @justinsb in #18075
• Enable E2E external CSI testing on GCP by @rifelpet in #18098
• [aiconformance] add test for schedulingOrchestration clusterAutoscaling by @justinsb in #18100
• Replace cwd with go:embed for storage.testdriver manifests by @rifelpet in #18102
• chore(channels): bump alpha channel k8s and ubuntu AMI versions by @moshevayner in #18103
• [aiconformance]: set namespace explicitly for testdata by @ameukam in https://github.com/kubernetes/kops/pu...

What's Changed

• Automated cherry pick of #17740: Fix HasHighlyAvailableControlPlane to use AllInstanceGroups by @hakman in #18118
• Automated cherry pick of #18114: Pin upload-artifacts GHA to commit sha by @rifelpet in #18209
• Automated cherry pick of #18173: Update Golang to 1.25.9 by @hakman in #18206
• Automated cherry pick of #17877: truncate very long sqs queue names
  #17885: fix truncate long sqs by @hakman in #18216
• Automated cherry pick of #18110: Update Cluster Autoscaler to 1.35.0 by @hakman in #18218
• Automated cherry pick of #18237: cilium: require k8s-connectivity in liveness probe by @hakman in #18243
• aws: bypass LBC mservice webhook for kube-system by @hakman in #18249
• Automated cherry pick of #18251: aws: skip node S3 permissions when kops-controller serves node config by @hakman in #18254
• Automated cherry pick of #18268: Cherrypick VPC CNI fixes by @rifelpet in #18269
• Automated cherry pick of #18285: cilium: allow setting arbitrary cilium-config entries by @hakman in #18287
• Automated cherry pick of #18281: hetzner: Upgrade hcloud-cloud-controller-manager to v1.30.1 by @hakman in #18284
• Automated cherry pick of #18298: dns-controller: make priorityClassName configurable by @hakman in #18300
• Automated cherry pick of #18302: dns-controller: default Provider when ExternalDNS is partially set by @hakman in #18304
• Automated cherry pick of #18307: gce: expose kops-controller on internal LB for gossip clusters by @hakman in #18309
• Automated cherry pick of #18319: azure: list VMSS NICs in protokube gossip seed discovery by @hakman in #18322
• Automated cherry pick of #18323: etcd-manager: upgrade to v3.0.20260512 by @hakman in #18325
• etcd-manager: bump etcd to latest patches (3.5.30, 3.6.11) by @yuzhouliu9 in #18332
• Automated cherry pick of #18375: cilium: add flags for bpf-lb-sock and bpf-lb-sock-hostns-only by @hakman in #18377
• Automated cherry pick of #18379: kops-controller and nodeup bug fixes by @rifelpet in #18381
• Automated cherry pick of #18384: Fix kops get assets when spec.dnsZone is a DNS name by @hakman in #18387
• Automated cherry pick of #18144: Move johngmyers to emeritus by @hakman in #18389
• Automated cherry pick of #18391: Validate instance group names in kops-controller by @rifelpet in #18393
• Upgrade Go to 1.26.3 for release-1.34 by @hakman in #18397
• Update dependencies for release-1.34 by @hakman in #18400
• Automated cherry pick of #18401: gomod: tidy and verify all modules by @hakman in #18405
• Release 1.34.3 by @hakman in #18412

Full Changelog: v1.34.2...v1.34.3

What's Changed

• Automated cherry pick of #17945: Create iproute2 symlink for kuberouter on older distros by @rifelpet in #17946
• Automated cherry pick of #17956: versionbump: go 1.25.7 by @hakman in #17957
• Automated cherry pick of #17861: Feature: pull user defined images for warm pool instances by @hakman in #17959
• Automated cherry pick of #17980: chore: Add asset hashes for February 2026 releases by @hakman in #17981
• Automated cherry pick of #17966: kube-router: bump version v2.5.0 -> 2.7.1 by @hakman in #17979
• Automated cherry pick of #17976: drop cdn.dl.k8s.io as a mirror
  #17987: drop storage.googleapis.com/k8s-artifacts-cni as a mirror by @hakman in #17988
• Automated cherry pick of #18021: chore: Add hashes for additional February releases by @hakman in #18022
• Automated cherry pick of #18026: chore: Bump etcd-manager to v3.0.20260227 by @hakman in #18027
• Automated cherry pick of #18043: Fix node bootstrap challenge response hashing by @rifelpet in #18044
• Automated cherry pick of #18058: chore: Bump Go to v1.25.8 by @hakman in #18059
• Release 1.35.0 by @hakman in #18090

Full Changelog: v1.35.0-beta.1...v1.35.0

What's Changed

• Automated cherry pick of #17755: Include maxParallelImagePulls field in Kubelet config by @hakman in #17772
• Automated cherry pick of #17773: aws: Tag Launch Template network interfaces by @hakman in #17774
• Automated cherry pick of #17776: aws: Enable CloudWatch metrics for the warm pool of an ASG by @recollir in #17778
• Automated cherry pick of #17783: chore(upup): bump aws-cni to 1.20.5 by @moshevayner in #17786
• Automated cherry pick of #17792: aws: Disable the kubelet systemd unit during warm pool warming by @dezmodue in #17801
• Automated cherry pick of #17800: aws: Allow warm pool with mixed instances policy by @kimxogus in #17803
• gcp: cherrypick ccm upgrade to release 1.34 by @upodroid in #17794
• Automated cherry pick of #17812: etcd-manager: Update etcd versions by @hakman in #17813
• Automated cherry pick of #17712: gce: bump GCE PD CSI Driver by @upodroid in #17835
• Automated cherry pick of #17899: Update Cilium to v1.18.6 by @hakman in #17900
• Automated cherry pick of #17689: Migrate Kindnet to Kubernetes prod registry by @rifelpet in #17903
• Automated cherry pick of #17854: Add iam:ListInstanceProfiles permission to Karpenter by @hakman in #17905
• Cherry-pick #17879: bump golang to 1.25.6 by @justinsb in #17906
• deps: bump containerd to v1.7.29 to address vulnerabilities by @justinsb in #17907
• Automated cherry pick of #17917: hetzner: Update default server type to cx23 by @hakman in #17918
• Automated cherry pick of #17867: Use a different systemd-networkd configuration for AL2023
  #17882: Disable cloud-init network hotplug on Ubuntu 24.04 for Cilium and Ama…
  #17933: Set MACAddressPolicy=none for AWS VPC CNI on AL2023 by @rifelpet in #17935
• Automated cherry pick of #17945: Create iproute2 symlink for kuberouter on older distros by @rifelpet in #17947
• Automated cherry pick of #17956: versionbump: go 1.25.7 by @hakman in #17958
• Automated cherry pick of #17861: Feature: pull user defined images for warm pool instances by @hakman in #17960
• chore: Back-port pulling CNI plugins from GitHub by @hakman in #17970
• Automated cherry pick of #17980: chore: Add asset hashes for February 2026 releases by @hakman in #17982
• Automated cherry pick of #17976: drop cdn.dl.k8s.io as a mirror
  #17987: drop storage.googleapis.com/k8s-artifacts-cni as a mirror by @hakman in #17989
• Automated cherry pick of #18021: chore: Add hashes for additional February releases by @hakman in #18023
• Automated cherry pick of #18026: chore: Bump etcd-manager to v3.0.20260227 by @hakman in #18028
• Automated cherry pick of #18043: Fix node bootstrap challenge response hashing by @rifelpet in #18045
• Automated cherry pick of #18058: chore: Bump Go to v1.25.8 by @hakman in #18060
• Release 1.34.2 by @hakman in #18091

Full Changelog: v1.34.1...v1.34.2

What's Changed

• Automated cherry pick of #17722: scaleway: Fix failing terraform test by @hakman in #17724
• Automated cherry pick of #17559: Bump ko-build by @hakman in #17729
• Update Go to 1.24.7 and some deps by @hakman in #17730
• Automated cherry pick of #17640: Update cluster-autoscaler to v1.34.0 releases
  #17725: Update cluster-autoscaler to v1.34.1 by @hakman in #17727
• Automated cherry pick of #17776: aws: Enable CloudWatch metrics for the warm pool of an ASG by @recollir in #17779
• Automated cherry pick of #17792: aws: Disable the kubelet systemd unit during warm pool warming by @dezmodue in #17802
• Automated cherry pick of #17793: gcp: Update ccm to fix broken arm64 jobs by @upodroid in #17814
• Automated cherry pick of #17712: gce: bump GCE PD CSI Driver by @upodroid in #17836
• Automated cherry pick of #17144: Normalize the hardcoded images used for warmpool pre-pulling
  #17861: Feature: pull user defined images for warm pool instances by @hakman in #17977
• chore: Back-port pulling CNI plugins from GitHub by @hakman in #17971
• Automated cherry pick of #17980: chore: Add asset hashes for February 2026 releases by @hakman in #17983
• Automated cherry pick of #17976: drop cdn.dl.k8s.io as a mirror
  #17987: drop storage.googleapis.com/k8s-artifacts-cni as a mirror by @hakman in #17990
• Automated cherry pick of #17956: versionbump: go 1.25.7 by @hakman in #17995
• Automated cherry pick of #18021: chore: Add hashes for additional February releases by @hakman in #18024
• Automated cherry pick of #18043: Fix node bootstrap challenge response hashing by @rifelpet in #18046
• Automated cherry pick of #18058: chore: Bump Go to v1.25.8 by @hakman in #18061
• Release 1.33.2 by @hakman in #18092

Full Changelog: v1.33.1...v1.33.2

What's Changed

• Automated cherry pick of #17559: Bump ko-build by @upodroid in #17736
• Automated cherry pick of #17709: tests: free up disk space on github actions runner by @hakman in #17805
• Automated cherry pick of #17157: Use ephemeral S3 buckets for E2E tests by @hakman in #17806
• Automated cherry pick of #17792: aws: Disable the kubelet systemd unit during warm pool warming by @dezmodue in #17807
• Automated cherry pick of #17722: scaleway: Fix failing terraform test by @hakman in #17978
• chore: Back-port pulling CNI plugins from GitHub by @hakman in #17973
• Automated cherry pick of #17980: chore: Add asset hashes for February 2026 releases by @hakman in #17984
• Automated cherry pick of #17976: drop cdn.dl.k8s.io as a mirror
  #17987: drop storage.googleapis.com/k8s-artifacts-cni as a mirror by @hakman in #17991
• Automated cherry pick of #17956: versionbump: go 1.25.7 by @hakman in #17996
• Automated cherry pick of #18021: chore: Add hashes for additional February releases by @hakman in #18025
• Automated cherry pick of #18043: Fix node bootstrap challenge response hashing by @rifelpet in #18047
• Automated cherry pick of #18058: chore: Bump Go to v1.25.8 by @hakman in #18062
• Release 1.32.3 by @hakman in #18093
• Release 1.32.4 by @hakman in #18094

Full Changelog: v1.32.2...v1.32.4

Significant changes

• bridge-utils, conntrack, pigz, libltdl are no longer installed by default.

• OpenStack: the InsecureSkipVerify field from the Cluster object is now propagated to all components

Deprecations

• Support for Kubernetes version 1.29 is removed in kOps 1.35.

• Support for Kubernetes version 1.30 is deprecated and will be removed in kOps 1.36.

• Support for Amazon Linux 2 is deprecated and will be removed in kOps 1.36

What's Changed

• recognise rhel 10 and its variants + fedora + centos stream by @upodroid in #17785
• chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in #17787
• chore(upup): bump metrics-server to 0.8.0 by @moshevayner in #17788
• iptables is deprecated and broken on rhel10+ so use nftables by default by @upodroid in #17789
• gcp: Update ccm to fix broken arm64 jobs by @upodroid in #17793
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #17795
• chore(upup): bump aws-cni to 1.20.5 by @moshevayner in #17783
• chore(channels): Promote Alpha to Stable by @moshevayner in #17796
• aws: Allow warm pool with mixed instances policy by @kimxogus in #17800
• aws: Disable the kubelet systemd unit during warm pool warming by @dezmodue in #17792
• Update cert-manager to v1.19.2 by @hakman in #17808
• build(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #17811
• etcd-manager: Update etcd versions by @hakman in #17812
• azure: Fix the setting of creationTimestamp label for tests by @hakman in #17815
• codebot: update-dependencies by @ameukam in #17816
• Update coredns to v1.13.2 by @hakman in #17817
• enable deploying a released version of kops by @upodroid in #17819
• chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in #17822
• chore(networking): bump aws-cni to 1.21.0 by @moshevayner in #17823
• Remove spurious indent by @rramkumar1 in #17824
• kubetest2: Fix cloud-labels for non-Azure providers by @hakman in #17826
• kubetest2-kops: use ephemeral discovery store for AWS by @ameukam in #17809
• Bump and introduce new assets versions by @ameukam in #17827
• gce: Support cloudLabels for InstanceGroup by @rramkumar1 in #17821
• test: Update test skipping for K8s 1.35 by @hakman in #17829
• Bump containerd to 2.1.6 by @ameukam in #17828
• Update Calico to v3.31.2 by @hakman in #17831
• azure: Use VXLAN encapsulation for pod traffic with Calico by @hakman in #17832
• chore(networking): bump aws-cni to 1.21.1 by @moshevayner in #17834
• azure: Dump VM logs with toolbox dump by @upodroid in #17820
• chore(channels): promote alpha to stable (k8s and aws ubuntu AMI versions) by @moshevayner in #17837
• Update Calico to v3.31.3 by @hakman in #17838
• channels: Add Kubernetes 1.35.0 support by @hakman in #17839
• gcp: bump ccm to v35 by @upodroid in #17841
• test: Disable IRSA for AWS scale jobs by default by @hakman in #17842
• Move url util to where it's solely used by @rramkumar1 in #17848
• Delete dead code by @rramkumar1 in #17846
• Simple discovery server by @justinsb in #17818
• Use dns=none for apiserver-nodes test by @rifelpet in #17851
• Use public dns for apiserver-nodes e2e by @rifelpet in #17852
• Add iam:ListInstanceProfiles permission to Karpenter by @rifelpet in #17854
• Continue to skip failing e2e tests in k8s CI versions by @rifelpet in #17859
• Remove unused pointer helper functions by @rramkumar1 in #17857
• Enable RBAC in E2E templates by @rifelpet in #17860
• Add unit test for jsonutils.SortSlice by @rramkumar1 in #17850
• Add test for taints util by @rramkumar1 in #17855
• Support API field mapping for bastion.loadBalancer.type by @rramkumar1 in #17858
• Deprecate version util in pkg/k8sversion by @rramkumar1 in #17856
• Update metrics-server container port by @rifelpet in #17862
• Fix upgrades to CI k8s versions by @rifelpet in #17864
• Use a different systemd-networkd configuration for AL2023 by @rifelpet in #17867
• Continue skipping hostPort protocol test with Cilium by @rifelpet in #17865
• Skip SupplementalGroupsPolicy in deb11 jobs by @rifelpet in #17866
• kube-scheduler: Wait for the auth conf from the API server by @hakman in #17868
• build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #17869
• Allow release of the discovery service by @ameukam in #17863
• Removed dead code in upup/pkg/fi/timestamp.go by @rramkumar1 in #17871
• Update openstack csi images by @jauru in #17872
• fix: add kops details to Hetzner Cloud client user agent by @lukasmetzner in #17875
• Pull cluster name from context in kops version --server by @rramkumar1 in #17870
• Delete more dead code by @rramkumar1 in #17876
• Bump golang to 1.25.6 by @ameukam in #17879
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #17883
• metal: support dns=none, use API server IP for kops-controller by @justinsb in #17884
• truncate very long sqs queue names by @upodroid in #17877
• fix truncate long sqs by @upodroid in #17885
• fix aws scalability tests by @upodroid in #17880
• fix podidentitywebhook test by @upodroid in #17887
• Add EtcdEventsHTTP feature flag for HTTP on events etcd by @dims in #17891
• Disable cloud-init network hotplug on Ubuntu 24.04 for Cilium and Ama… by @yilmaz-burak in #17882
• Consolidate env var utils by @rramkumar1 in #17889
• Enable EtcdEventsHTTP in scalability tests by @dims in #17892
• Add tip to use gotestfail when doing local development by @rramkumar1 in #17893
• Add Scenario for AI conformance by @ameukam in #17886
• Remove year from copyright header boilerplate by @hakman in #17895
• fix broken metrics server test by @upodroid in #17896
• Update Cilium to v1.18.6 by @hakman in #17899
• gce: Require zones on instancegroup creation by @Camila-B in #17849
• Add well-known hashes for latest CNI by @justinsb in #17901
• Skip kube-proxy nfacct metric test on rhel + rocky distros by @rifelpet in #17902
• versionbump tools/metal: bump go version to 1.25.6 by @justinsb in #17912
• versionbump: bump dependencies in tests/e2e/go.mod by @justinsb in #17909
• chore: fix govet issue in tester.go by @justinsb in #17913
• traceserver tool: fix compilation error by @justinsb in #17910
• Use go get -tool instead of hack/tools.go by @justinsb in #17911
• hetzner: Update Getting Started docs by @hakman in #17916
• openstack: pass through InsecureSkipVerify into openstack components by @justinsb in #17908
• hetzner: Update default server type to cx23 by @hakman in https://github.com/k...

What's Changed

• Update etcd to v3.5.23 for K8s <1.34 by @hakman in #17639
• Stop rendering large CAPI manifests by @justinsb in #17650
• update openstack csi images by @kraashen in #17652
• Add toolbox command to generate ClusterAPI objects by @justinsb in #17655
• tests: allow env vars to be exported from kubetest2-kops by @justinsb in #17654
• chore: bump kOps version in tests by @justinsb in #17659
• build(deps): bump actions/dependency-review-action from 4.8.0 to 4.8.1 by @dependabot[bot] in #17660
• aws: Update Karpenter to v1.8.1 by @hakman in #17661
• chore: remove old (unused) bazel libraries by @justinsb in #17665
• aws: Add the option to set Karpenter feature gates by @hakman in #17663
• Remove unused kubelet flag --pod-infra-container-image by @hakman in #17657
• gce: run scale tests on kops by @upodroid in #17651
• Initial support for Ubuntu 25.10 (Questing Quokka) by @hakman in #17664
• Drop the libltdl package by @hakman in #17667
• Drop the pigz package by @hakman in #17668
• aws: Bypass the graceful OS shutdown process on cluster deletion by @hakman in #17670
• aws: Enforce the graceful OS shutdown for Xen instances by @hakman in #17675
• test: Enforce max node to dump for unregistered nodes by @hakman in #17672
• test: Remove non-nitro instance types from the AWS scale test by @hakman in #17674
• Allow setting map[string][]string from the command line by @hakman in #17679
• allow specific GCE IGs to have public IP addresses by @upodroid in #17680
• Prevent failing DNS requests on shutdown of CoreDNS pods by @jan-kantert in #17678
• Support tags for kubetest-kops by @ameukam in #17682
• Switch Route53 domain for E2E tests by @ameukam in #17684
• Migrate Kindnet to Kubernetes prod registry by @ameukam in #17689
• fix notfound backendservice/healthchekc by @upodroid in #17692
• chore: reduce logspam when matching channels by @justinsb in #17693
• fix: use kopsbase.Version instead of kopsbase.KOPS_RELEASE_VERSION by @justinsb in #17658
• calico: Don't install Wireguard if disabled by @hakman in #17687
• Drop bridge-utils and conntrack packages by @hakman in #17694
• Release Notes for kOps 1.34 by @hakman in #17696
• Update kindnet repository links in documentation by @aojea in #17698
• bump kops-controller qps limits by @upodroid in #17701
• Update the node package list only before installing packages by @hakman in #17690
• aws: Fix missing permissions for CCM and LBC by @hakman in #17705
• Improve the node package list updates by @hakman in #17704
• Skip package updates at boot time by @hakman in #17708
• tests: free up disk space on github actions runner by @justinsb in #17709
• More support for cluster-api by @justinsb in #17636
• build(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #17711
• capi: refactor to use shared nodeup builder by @justinsb in #17703
• add support for specifying iops and thoroughput when using hyperdisks by @upodroid in #17685
• start running the access tokens and huge services test by @upodroid in #17671
• Pull CNI plugins from Github by @ameukam in #17716
• Bump cni version by @ameukam in #17676
• clean up the skip regex files by @upodroid in #17715
• remove bastion flag from gce scale jobs by @upodroid in #17719
• Update etcd to v3.5.24 for K8s <1.34 by @hakman in #17720
• scaleway: Fix failing terraform test by @hakman in #17722
• Update cluster-autoscaler to v1.34.1 by @hakman in #17725
• Update Go to 1.25.3 and deps by @hakman in #17728
• azure: Avoid spurious changes in NetworkSecurityGroup by @hakman in #17734
• azure: Allow independent VMs to join the cluster by @hakman in #17710
• update kops scalability run-test.sh to allow configuring qps and burst by @alaypatel07 in #17742
• test: Skip Pod Level Resources tests by @hakman in #17745
• Skip Pod InPlace Resize Container tests by @hakman in #17747
• Update containerd to v2.1.5 by @hakman in #17743
• Remove HugeService Test Suite to stop bleeding by @hakuna-matatah in #17750
• configure proper kops flags for kube-scheduler qps and burst configuration by @alaypatel07 in #17752
• Add snapshot permissions for ec2:CreateVolume by @rifelpet in #17757
• build(deps): bump actions/dependency-review-action from 4.8.1 to 4.8.2 by @dependabot[bot] in #17760
• Revert configure proper kops flags for kube-scheduler qps and burst configuration by @alaypatel07 in #17761
• Configure kube-scheduler QPS and Burst by @Sreeja1725 in #17763
• Include maxParallelImagePulls field in Kubelet config by @jaswdr in #17755
• Fix Netlify build failure from template syntax error and PATH issues in documentation by @Copilot in #17767
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #17765
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #17764
• gce: bump GCE PD CSI Driver by @upodroid in #17712
• reworking toolbox dumping logic by @upodroid in #17733
• Update Go to 1.25.4 by @hakman in #17768
• test: dump kubelet config file by @hakman in #17771
• kubelet: Wait less for control-plane pods to restart by @hakman in #17510
• aws: Tag Launch Template network interfaces by @hakman in #17773
• aws: Enable CloudWatch metrics for the warm pool of an ASG by @recollir in #17776
• Update dependencies by @hakman in #17777
• Release 1.35.0-alpha.1 by @hakman in #17781

New Contributors

• @kraashen made their first contribution in #17652
• @jan-kantert made their first contribution in #17678
• @alaypatel07 made their first contribution in #17742
• @Sreeja1725 made their first contribution in #17763
• @jaswdr made their first contribution in #17755
• @Copilot made their first contribution in #17767

Full Changelog: v1.34.0-beta.1...v1.35.0-alpha.1