Meet KubeOne 1.12

We are excited to announce the release of KubeOne 1.12! This release brings support for the latest Kubernetes version and several improvements to manage your clusters more flexibly.

Here are the highlights of what’s new in KubeOne 1.12.

Complete support for Kubernetes 1.34

KubeOne 1.12 introduces full support for Kubernetes 1.34. You can now provision new clusters or upgrade your existing ones to the latest stable Kubernetes version.

• RHEL 9 and Rockly Linux 9 Support: We’ve validated the release against these OS versions, adding test scenarios for the newly supported RHEL and Rocky Linux 9.6 with Kubernetes 1.34.
• Addons & Images: Internal addons and image lists have been refreshed to support 1.34 features out of the box.
• Comprehensive Updates: We have updated all core components, including the operating-system-manager and machine-controller, to ensure seamless compatibility.

Operational Enhancements & CLI Improvements

We have added several flags and configuration options to give you more control over your cluster’s lifecycle and maintenance.

• Cleaner Cluster Resets: The reset command now includes flags to --cleanup-volumes and --cleanup-load-balancers. This is crucial for avoiding “orphaned” cloud resources that can accrue costs after a cluster is deleted.
• Cluster-Wide Kubelet Configuration: You can now define a Cluster-wide KubeletConfig, simplifying the management of node configurations across your entire fleet without needing per-node tweaks.
• Configurable Timeouts: The machine-controller join cluster timeout is now configurable, helping in environments where nodes might take longer to become ready.
• Improved Image Management: The config images list command now supports an --all flag, allowing you to inspect all related images, not just the ones actively used in your current config.

Improved security & Customization APIs

KubeOne 1.12 opens up new APIs for deeper customization of your cluster security and container runtime.

• Certificate Validity: New API fields certificateValidityPeriod and caCertificateValidityPeriod have been added, allowing administrators to define custom expiration policies for cluster certificates.
• Bastion SSH Key: You can now explicitly configure the bastion SSH private key file in the host config, decoupling it from the Terraform output.
• Containerd Mirrors: A new overridePath API allows you to configure the override_path mirrors parameter for containerd, useful for air-gapped or optimized registry setups.
• Non-Root Devices: Added an option to enable non-root device usage in worker nodes via the Operating System Manager.

Other Provider & Component Updates

• Nutanix: Upgraded the CSI driver to v3.3.4.
• Azure: Switched to flatcar-container-linux-corevm-amd64 for Flatcar deployments on Azure.
• OpenStack: Updated Cloud Controller Manager (CCM) and CSI to version 1.34.0.
• Cluster Autoscaler: The addon has been refreshed to align with upstream changes.

We hope KubeOne 1.12 helps you manage your Kubernetes clusters with greater ease! For more details, check out the changelog and upgrade instructions.

As always, we’d love to hear your feedback. Reach out to us on our Community Slack or on GitHub!