Release Notes

• 1: KubeOps Versions
• 2: KubeOps 2.1.0_Beta1
• 3: KubeOps 2.1.0_Beta0
• 4: KubeOps 2.1.0_Alpha0
• 5: KubeOps 2.0.5
• 6: KubeOps 2.0.4
• 7: KubeOps 2.0.3
• 8: KubeOps 2.0.2
• 9: KubeOps 2.0.1

1 - KubeOps Versions

KubeOps Versions

Here is the KubeOps and it’s supported tools versions list. Make sure to install or upgrade according to supported versions only.

KubeOps 2.1.0_Beta0

KubeOps 2.1.0_Alpha0

KubeOps 2.0.4

KubeOps 2.0.3

KubeOps 2.0.2

KubeOps 2.0.1

2 - KubeOps 2.1.0_Beta1

KubeOps 2.1.0_Beta1 - Release Date xx.xx.2026

Changelogs KubeOpsCtl 2.1.0_Beta1

Whats new?

+ Added Single Sign-On (SSO) with Keycloak for Rook-Ceph
+ Added Single Sign-On (SSO) with Keycloak for Harbor
+ Added Single Sign-On (SSO) with Keycloak for Grafana
+ Added Single Sign-On (SSO) with Keycloak for KubeOps Dashboard
+ Added Single Sign-On (SSO) with Keycloak for OpenSearch Dashboard
+ Added Traefik for manual installation
+ Added CloudNativePG operator for manual installation
+ Added command kubeopsctl check-connections -f cluster-values.yaml
+ Added check-connections before kubeopsctl apply
+ Improved cert-manager package to install lets-encrypt-staging as inital CA for SSO support
+ Improved harbor backup by adding pre.hook.backup.velero.io in harbor package
+ Improved keycloak backup by adding pre.hook.backup.velero.io in harbor package
+ Improved kubeopsctl apply no longer throws an exception when cluster-values.yaml is missing.

3 - KubeOps 2.1.0_Beta0

KubeOps 2.1.0_Beta0 - Release Date 13.04.2026

Changelogs KubeOpsCtl 2.1.0_Beta0

Whats new?

+ Added Single Sign-On (SSO) with Keycloak for Harbor
+ Added Single Sign-On (SSO) with Keycloak for Grafana
+ Added Single Sign-On (SSO) with Keycloak for KubeOps Dashboard
+ Added Traefik for manual installation
+ Added CloudNativePG operator for manual installation
+ Added command kubeopsctl check-connections -f cluster-values.yaml
+ Added check-connections before kubeopsctl apply
+ Improved cert-manager package to install lets-encrypt-staging as inital CA for SSO support
+ Improved harbor backup by adding pre.hook.backup.velero.io in harbor package
+ Improved keycloak backup by adding pre.hook.backup.velero.io in harbor package
+ Improved kubeopsctl apply no longer throws an exception when cluster-values.yaml is missing.

4 - KubeOps 2.1.0_Alpha0

KubeOps 2.1.0_Alpha0 - Release Date 09.03.2026

Changelogs KubeOpsCtl 2.1.0_Alpha0

Whats new?

+ Added Single Sign-On (SSO) with Keycloak for Rook-Ceph
+ Added Single Sign-On (SSO) with Keycloak for Harbor
+ Added Single Sign-On (SSO) with Keycloak for Grafana
+ Added Single Sign-On (SSO) with Keycloak for KubeOps Dashboard
+ Added Single Sign-On (SSO) with Keycloak for OpenSearch Dashboard
+ Added Traefik for manual installation
+ Added CloudNativePG operator for manual installation
+ Added command kubeopsctl check-connections -f cluster-values.yaml
+ Added check-connections before kubeopsctl apply
+ Improved cert-manager package to install lets-encrypt-staging as inital CA for SSO support
+ Improved harbor backup by adding pre.hook.backup.velero.io in harbor package
+ Improved keycloak backup by adding pre.hook.backup.velero.io in harbor package
+ Improved kubeopsctl apply no longer throws an exception when cluster-values.yaml is missing.

5 - KubeOps 2.0.5

KubeOps 2.0.5 - Release Date 26.03.2026

Changelogs KubeOpsCtl 2.0.5

Bugfixes

+ Implemented fixes for the following CVEs affecting the `rook-ceph` package:
    - CVE-2025-68121
    - CVE-2026-33186

6 - KubeOps 2.0.4

KubeOps 2.0.4 - Release Date 02.03.2026

Changelogs KubeOpsCtl 2.0.4

Bugfixes

+ Implemented fixes for the following CVEs affecting the `harbor` package:
    - CVE-2025-27151
    - CVE-2025-49844
+ Implemented fixes for the following CVEs affecting the `opensearch` package:
    - CVE-2025-68428
    - CVE-2025-9288
+ Implemented fixes for the following CVEs affecting the `opensearch-dashboards` package:
    - App Version 3.4.0, Chart Version 3.4.0
    - CVE-2025-68428
    - CVE-2025-9288

7 - KubeOps 2.0.3

KubeOps 2.0.3 - Release Date 10.02.2026

Changelogs KubeOpsCtl 2.0.3

Bugfixes

+ Implemented fixes for the following CVEs affecting the `ingress-nginx` package:
    - CVE-2025-15467
    - CVE-2025-49794
    - CVE-2025-49796

8 - KubeOps 2.0.2

KubeOps 2.0.2 - Release Date 28.01.2026

Changelogs KubeOpsCtl 2.0.2

Improvements

+ Added --delete-emptydir-data while draining nodes
+ Added Repo support for the KOSI installation packages

Bugfixes

+ Fixed a bug where imagePullSecrets were not created

9 - KubeOps 2.0.1

KubeOps 2.0.1 - Release Date 22.12.2025

Changelogs KubeOpsCtl 2.0.1

Whats new?

+ Supports KubeVIP
+ Supports Ubuntu 24.04 LTS
+ Supports RHEL 9.6
+ Supports Cilium CNI
+ Reworked Cluster creation process
+ Reworked Cluster upgrade process
+ Reworked Compliance application installation process
+ Reworked Compliance application update process
+ Introduced new value format for cluster-values.yaml
+ Introduced new value format for enterprise-values.yaml
+ Introduced selfcontained air-gap packages

Improvements

+ Improve the Cluster creation process
+ Improve the Cluster upgrade process
+ Improve the Compliance application installation process
+ Improve the Compliance application update process
+ Improve the Cluster creation/upgrade speed
+ Improve the Compliance application installation/update speed
+ Updated opensearch package from 1.7.6 to 2.0.0
+ Updated opensearch-dashboard package from 1.7.6 to 2.0.0
+ Updated velero package from 1.7.6 to 2.0.0
+ Enterprise packages are only pulled if they are marked as `enabled: true` in the enterprise-values.yaml

Bugfixes

+ "Delete Node" now works over multiple zones
+ An invalid cluster-values.yaml is now caught before cluster creation
+ If no helm chart is installed the cluster creation process will still run through
+ Harbor: fixed missing template for hostname
+ nginx-ingress: updated netpols
+ opensearch-dashboard: changed issuer to cluster-issuer
+ airgap-packages are pulled from locally installed harbor registry instead of public registries

Known Issues