KubeOpsDoku – update

Kubeopsctl-2.0: Release Notes

Mon, 01 Jan 0001 00:00:00 +0000

Kubeopsctl: Release Notes

Mon, 01 Jan 0001 00:00:00 +0000

Kosi: Release Notes

Mon, 01 Jan 0001 00:00:00 +0000

Kosi: KOSI 2.14.0.4

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.14.0.4_Beta0 - Release Date 02.03.2026

New

Permission management

added manage add user command
added manage add group command
added manage add-user-to-group command
added manage create group command
added manage list permissions command
added manage remove user command
added manage remove group command
added manage remove permission command
added manage user-from-group command

Update

Update internal Dependencies

Bugfix

fixed a bug where the groupname always includes the hubname. Now it can leave it if the user is kubeops

Changelog Plugins 2.0.0

Kosi: KOSI 2.13.0.2

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.13.0.2

New

Create a config.yaml if there is no config.yaml

Update

Update internal Dependencies

Bugfix

fixed an issue where kosi crashes if there is no config
fixed an issue where kosi could not installed on ubuntu
fixed an Issue that local package installation calls dispatcher

Changelog Plugins 2.0.0

Update

Update internal Dependencies

Kosi: KOSI 2.12.1.0

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.12.1.0

New

Now creates a default config.yaml, if there is no config.yaml.

Update

Update Dependencies
Update plugins

Bugfix

fixed an issue with the config.yaml
fixed an issue with the installation for ubuntu, where kubeopsroot was not used correctly.

BREAKING CHANGE

KOSI 2.12.0 does not support the old dispatcher url. it requires the new dispatcher: dispatcher.kubeops.net/v4/dispatcher. also supports only the new registry: registry.kubeops.net

Changelog Plugins 1.7.1

Update

Update Dependencies

Kosi: KOSI 2.13.0.1

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.13.0.1

New

Create a config.yaml if there is no config.yaml

Update

Update internal Dependencies

Bugfix

fixed an issue where kosi crashes if there is no config
fixed an issue where kosi could not installed on ubuntu

Changelog Plugins 2.0.0

Update

Update internal Dependencies

Kosi: KOSI 2.12.0.19

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.12.0.19

New

Added Licence verification
Increase Upload-size for packages to 3Gb

Change

Clientrequest timeouts set to 60 seconds
Changed the image format on push to OCI

Update

Update Dependencies
Update plugins

Bugfix

KOSI lint linting package.yaml correctly
fixed templating in lists
fixed issue when pushing image to localregistry and not being authorized
fixed an issue where kosi install with multiple value-files was not possible

BREAKING CHANGE

KOSI 2.12.0 does not support the old dispatcher url. it requires the new dispatcher: dispatcher.kubeops.net/v4/dispatcher.

Changelog Plugins 1.7.0

New

set plugin: for setting variables

Change

move some messages from info to debug in template-plugin and if-plugin
change file destination from pia ssh-mode from /home/pia to /var/kubeops/pia

Update

Update Dependencies

Bugfix

fixed an issue that kosi plugin pull command requires retag buts optional
fixed an issue that kosi plugin pull was not able to pull packages.
fixed an issue that kubectl run operation was not executed correctly.

Kosi: KOSI 2.12.0.13_Beta0

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.12.0.13_Beta1

New

Added Licence verification
Increase Upload-size for packages to 3Gb

Change

Clientrequest timeouts set to 60 seconds
Changed the image format on push to OCI

Update

Update Dependencies
Update plugins

Bugfix

KOSI lint linting package.yaml correctly
fixed templating in lists
fixed issue when pushing image to localregistry and not being authorized
fixed an issue where kosi install with multiple value-files was not possible

BREAKING CHANGE

KOSI 2.12.0 does not support the old dispatcher url. it requires the new dispatcher: dispatcher.kubeops.net/v4/dispatcher.

Changelog Plugins 1.7.0

New

set plugin: for setting variables

Change

move some messages from info to debug in template-plugin and if-plugin
change file destination from pia ssh-mode from /home/pia to /var/kubeops/pia

Update

Update Dependencies

Bugfix

fixed an issue that kosi plugin pull command requires retag buts optional
fixed an issue that kosi plugin pull was not able to pull packages.
fixed an issue that kubectl run operation was not executed correctly.
fixed an issue that cmd plugin could not work if SHELL env was not set.

Kosi: KOSI 2.12.0.12_Beta0

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.12.0.12_Beta0

New

Added Licence verification
Increase Upload-size for packages to 3Gb

Change

Clientrequest timeouts set to 60 seconds
Changed the image format on push to OCI

Update

Update Dependencies
Update plugins

Bugfix

KOSI lint linting package.yaml correctly
fixed templating in lists
fixed issue when pushing image to localregistry and not being authorized
fixed an issue where kosi install with multiple value-files was not possible

BREAKING CHANGE

KOSI 2.12.0 does not support the old dispatcher url. it requires the new dispatcher: dispatcher.kubeops.net/v4/dispatcher.

Changelog Plugins 1.7.0

New

set plugin: for setting variables

Change

move some messages from info to debug in template-plugin and if-plugin
change file destination from pia ssh-mode from /home/pia to /var/kubeops/pia

Update

Update Dependencies

Kosi: KOSI 2.12.0.12_Alpha1

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.12.0.12_Alpha1

New

Added Licence verification
Increase Upload-size for packages to 3Gb

Change

Clientrequest timeouts set to 60 seconds
Changed the image format on push to OCI

Update

Update Dependencies
Update plugins

Bugfix

KOSI lint linting package.yaml correctly
fixed templating in lists
fixed issue when pushing image to localregistry and not being authorized
fixed an issue where kosi install with multiple value-files was not possible

BREAKING CHANGE

KOSI 2.12.0 does not support the old dispatcher url. it requires the new dispatcher: dispatcher.kubeops.net/v4/dispatcher.

Changelog Plugins 1.7.0

New

set plugin: for setting variables

Change

move some messages from info to debug in template-plugin and if-plugin
change file destination from pia ssh-mode from /home/pia to /var/kubeops/pia

Update

Update Dependencies

Kosi: KOSI 2.12.0.11_Alpha0

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.12.0.11_Alpha0

New

Added Licence verification
Increase Upload-size for packages to 3Gb

Change

Clientrequest timeouts set to 60 seconds
Changed the image format on push to OCI

Update

Update Dependencies
Update plugins

Bugfix

KOSI lint linting package.yaml correctly
fixed templating in lists
fixed issue when pushing image to localregistry and not being authorized

BREAKING CHANGE

KOSI 2.12.0 does not support the old dispatcher url. it requires the new dispatcher: dispatcher.kubeops.net/v4/dispatcher.

Changelog Plugins 1.7.0

New

set plugin: for setting variables

Change

move some messages from info to debug in template-plugin and if-plugin
change file destination from pia ssh-mode from /home/pia to /var/kubeops/pia

Update

Update Dependencies

Kosi: KOSI 2.11.8

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.8.0

Update

update supported plugins to 1.6.8
update dependencies

Bugfix

fixed an issue where the user don´t get any notification, that image push failed
fixed an issue where kosi install with multiple value-files was not possible

Changelog Plugins 1.6.8

Update

Update Dependencies

Bugfix

fixed an issue that kosi plugin pull command requires retag buts optional
fixed an issue that kosi plugin pull was not able to pull packages.
fixed an issue that kubectl run operation was not executed correctly.
fixed an issue that cmd plugin could not work if SHELL env was not set.

Kosi: KOSI 2.11.7

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.7.1

Update

update supported plugins to 1.6.7
update dependencies

Bugfix

fixed an issue where the user don´t get any notification, that image push failed
fixed an issue where kosi install with multiple value-files was not possible

Changelog Plugins 1.6.7

Change

Move some messages from info to debug in template-plugin and if-plugin
KOSI plugin local package paths now working proberly

Update

Update Dependencies

Kosi: KOSI 2.11.6

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.6.1

Update

update supported plugins to 1.6.6
update dependencies

Bugfix

fixed an issue where the user don´t get any notification, that image push failed

Changelog Plugins 1.6.6

Change

Move some messages from info to debug in template-plugin and if-plugin
KOSI plugin local package paths now working proberly

Update

Update Dependencies

Kosi: KOSI 2.11.5

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.5.1

Update

update supported plugins to 1.6.5

Change

fixed templating in lists

Known Issues

digists as string templating in lists could be recognized as int.

Kosi: KOSI 2.11.4

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.4.0

Bugfix

KOSI lint linting package.yaml correctly

Kosi: KOSI 2.11.3

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.3.0

Change

Change image format for pushing packages to registry to OCI.

Known Issues

KOSI lint just linting a package.kosi for linting package.yaml it will throw an unable to cast exception.

Kosi: KOSI 2.11.2

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.2.0

Fixed

Fixed an issue where invalid permissions was not displayed correctly

Kosi: KOSI 2.11.1

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.1.1

Fixed

Fixed an issue where duplicate podman errors could be occured

Kosi: KOSI 2.11.0

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.0

New

added kosi language version check
increase user experience, with removing the single, double-quote scenario
added Debian-package support for KOSI.
Batchengine V2 Plugin Support
kubeops commons remove observer method

Update

update KOSI plugin
update KOSI Basic Plugins
update KOSI Professional Plugins
update KOSI Enterprise Plugins

Fixed

bugfix unable to cast object of type Tree to Boolean
bugfix podman push force compression
bugfix kosi tmp path
bugfix missleading error for removing package when not logged in
bugfix missleading error for using encrypted files as value files and vice versa
bugfix consider KUBEOPSROOT environment variable at Installation
bugfix immutable image sha tag

Kosi: KOSI 2.11.0 Beta1

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.0_Beta1

New

added kosi language version check
increase user experience, with removing the single, double-quote scenario
added Debian-package support for KOSI.
Batchengine V2 Plugin Support
kubeops commons remove observer method

Update

update KOSI plugin
update KOSI Basic Plugins
update KOSI Professional Plugins
update KOSI Enterprise Plugins

Fixed

bugfix unable to cast object of type Tree to Boolean
bugfix podman push force compression
bugfix kosi tmp path
bugfix missleading error for removing package when not logged in
bugfix missleading error for using encrypted files as value files and vice versa
bugfix consider KUBEOPSROOT environment variable at Installation
bugfix immutable image sha tag

Kosi: KOSI 2.11.0 Beta0

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.0 Beta0

New

added kosi language version check
increase user experience, with removing the single, double-quote scenario
added Debian-package support for KOSI.
Batchengine V2 Plugin Support
kubeops commons remove observer method

Update

update KOSI plugin
update KOSI Basic Plugins
update KOSI Professional Plugins
update KOSI Enterprise Plugins

Fixed

bugfix unable to cast object of type Tree to Boolean
bugfix podman push force compression
bugfix kosi tmp path
bugfix missleading error for removing package when not logged in
bugfix missleading error for using encrypted files as value files and vice versa
bugfix consider KUBEOPSROOT environment variable at Installation

Kosi: KOSI 2.11.0 Alpha1

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.0 Alpha1

New

added kosi language version check
increase user experience, with removing the single, double-quote scenario
added Debian-package support for KOSI.
Batchengine V2 Plugin Support
kubeops commons remove observer method

Update

update KOSI plugin
update KOSI Basic Plugins
update KOSI Professional Plugins
update KOSI Enterprise Plugins

Fixed

bugfix unable to cast object of type Tree to Boolean
bugfix podman push force compression
bugfix kosi tmp path
bugfix missleading error for removing package when not logged in
bugfix missleading error for using encrypted files as value files and vice versa
bugfix consider KUBEOPSROOT environment variable at Installation

Kosi: KOSI 2.11.0 Alpha0

Mon, 01 Jan 0001 00:00:00 +0000

Changelog KOSI 2.11.0 Alpha0

New

added kosi language version check
increase user experience, with removing the single, double-quote scenario
added Debian-package support for KOSI.

Kubeopsctl: KubeOps 1.7.9

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.9 - Release Date 02.03.2026

changelog harbor 1.7.9

Bugfix

Implemented fixes for the following CVEs:
- CVE-2025-27151
- CVE-2025-49844

Kubeopsctl: KubeOps 1.7.8

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.8 - Release Date 04.02.2026

changelog ingress-nginx 1.7.8

Bugfix

Implemented fixes for the following CVEs:
- CVE-2025-15467
- CVE-2025-49794
- CVE-2025-49796

Kubeopsctl: KubeOps 1.7.7

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.7 - Release Date 28.01.2026

changelog Lima 1.7.7

New

Added support for Kubernetes 1.34.1

Note: Kubernetes 1.34.1 can be used with earlier versions of Kubeopsctl 1.7.x.

changelog rook-ceph 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog harbor 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog kube-prometheus-stack 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog kubeops-dashboard 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog logstash 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog filebeat 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog opensearch 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog opensearch-dashboards 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog keycloak 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog opa-gatekeeper 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog velero 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

changelog cert-manager 1.7.7

New

Updated Image Pull Policy to ensure that it will stay on Always

Kubeopsctl: KubeOps 1.7.6

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.6 - Release Date 30.12.2025

changelog Lima 1.7.6

changed

increased Port range of hosts for rook-ceph to 6800-7568.

changelog rook-ceph 1.7.6

New

Included Network Policies

changelog harbor 1.7.6

New

Included Network Policies

Fixed

fixed issue where harbor upgrade was not possible because of postgres version mismatch
fixed cve CVE-2024-56171, CVE-2025-49794, CVE-2025-49796, CVE-2024-3596, CVE-2025-5914, CVE-2024-46981 and CVE-2025-6965 - updated to appversion 2.14.0 and chartversion 1.18.0

changelog kube-prometheus-stack 1.7.6

New

Included Network Policies

changelog kubeops-dashboard 1.7.6

New

Included Network Policies

changelog logstash 1.7.6

New

Included Network Policies

Fixed

changed default loglevel to “INFO”

changelog filebeat 1.7.6

New

Included Network Policies

Fixed

changed default loglevel to “INFO”

changelog opensearch 1.7.6

New

Included Network Policies

Fixed

changed default loglevel to “INFO”
updated package to version 3.2.1 and appversion 3.2.0 for compatibility

changelog opensearch-dashboards 1.7.6

New

Included Network Policies

fixed

fixed CVE CVE-2025-7783, and updated package to version 3.2.2 with appVersion 3.2.0

changelog keycloak 1.7.6

New

Included Network Policies

changelog opa-gatekeeper 1.7.6

New

Included Network Policies

changelog velero 1.7.6

New

Included Network Policies

changelog cert-manager 1.7.6

New

Included Network Policies

Kubeopsctl: KubeOps 1.7.4

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.4 - Release Date 30.09.2025

changelog kube-prometheus-stack 1.7.4

fixed

fixed cve CVE-2024-45337, updated helm chart to version 77.0.2 ( appVersion v0.85.0)

changelog kubeops-dashboard 1.7.4

added

Resolved issue with service account

changelog cert-manager 1.7.4

fixed

fixed cve CVE-2024-45337, updated helm chart to version v1.18.2 ( appVersion v1.18.2)

changelog velero 1.7.4

fixed

fixed cve CVE-2024-24790, updated helm chart to version 10.1.0 ( appVersion 1.16.2)

Kubeopsctl: KubeOps 1.7.3

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.3 - Release Date 23.09.2025

changelog kubeopsctl 1.7.3

fixed

fixed issue where plattform upgrade was not possible

Kubeopsctl: KubeOps 1.7.2

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.2 - Release Date 05.09.2025

changelog kubeopsctl 1.7.2

fixed

Prevented failure by adding fallback creation logic for missing namespace and secret
fixed issue where auditlog path was not templatable

changelog lima 1.7.2

new

- added logic for updating from RHEL 8 to RHEL 9

fixed

- fixed issue where auditlog path was not templatable

changelog rook-ceph 1.7.2

fixed

- fixed issue where the lableing was only after installing platform packages
- added logic for cerating crushmap for rook-ceph 
- added topologySpreadConstraints for spreading across the kubeops zones
- Removed external ingress and deployed using helm chart
- Updated `imagePullPolicy` to `Always` to comply with BSI security requirements.

changelog harbor 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones
- Removed external ingress and deployed using helm chart
- Updated `imagePullPolicy` to `Always` to comply with BSI security requirements.

changelog opensearch-os 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog opensearch-dashboards 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones
- Removed external ingress and deployed using helm chart

changelog opa-gatekeeper 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones
- Updated `imagePullPolicy` to `Always` to comply with BSI security requirements.

changelog cert-manager 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones
- Updated `imagePullPolicy` to `Always` to comply with BSI security requirements.

changelog ingress-nginx 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones
- Updated `imagePullPolicy` to `Always` to comply with BSI security requirements.

changelog keycloak 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones
- Removed external ingress and deployed using helm chart
- Updated `imagePullPolicy` to `Always` to comply with BSI security requirements.

changelog velero 1.7.2

fixed

- added topologySpreadConstraints for spreading across the kubeops zones
- Updated `imagePullPolicy` to `Always` to comply with BSI security requirements.
- Addressed the following CVEs:
  - CVE-2024-24790
  - CVE-2024-32002
  - CVE-2024-45491
  - CVE-2024-45492
  - CVE-2024-37371
  - CVE-2023-45853

changelog kubeops-dashboard 1.7.2

fixed

Removed external ingress and deployed using helm chart
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog prometheus 1.7.2

fixed

Removed external ingress and deployed using helm chart
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog filebeat 1.7.2

fixes

Addressed the following CVEs:
- CVE-2024-41110
- CVE-2024-45337
- CVE-2023-24538
- CVE-2023-24540
- CVE-2024-24790
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog calico-multus

fixes

Updated imagePullPolicy to Always to comply with BSI security requirements.

Kubeopsctl: KubeOps 1.7.1

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.1 - Release Date 29.07.2025

changelog lima 1.7.1

new

- added support of RHEL 9.6
- added containerd.io-1.7.27
- added container-selinux-2.237.0
- opened firewall ports for 30000-32767 tcp on all nodes

changelog helm 1.7.1

fixed

- updated helm to 3.17.4 for Rhel 9.6 support

changelog rook-ceph 1.7.1

fixed

- added spreading the crushmap across the kubeops zones

changelog kubeopsctl 1.7.1

fixed

- added suport of RHEL 9.6

Kubeopsctl: KubeOps 1.7.0

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.0 - Release Date 30.06.2025

changelog lima 1.7.0

new

- added logic for updating from RHEL 8 to RHEL 9

fixed

- fixed issue where auditlog path was not templatable
- fixed issue where nodes could not be joined after update registry was performed

changelog rook-ceph 1.7.0

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog harbor 1.7.0

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog opensearch-os 1.7.0

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog opensearch-dashboards 1.7.0

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog kubeopsctl 1.7.0

fixed

- fixed issue where auditlog path was not templatable

changelog Velero 1.7.0

fixes

Addressed the following CVEs:
- CVE-2024-24790
- CVE-2024-32002
- CVE-2024-45491
- CVE-2024-45492
- CVE-2024-37371
- CVE-2023-45853

Kubeopsctl: KubeOps 1.7.0_Beta0

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.0_Beta0 - Release Date 30.04.2025

Changelog kubeopsctl 1.7.0_Beta0

New

Added Licence verification

Bugfix

Resolved issue with kubeopsctl status for keycloak

Changelog lima 1.7.0_Beta0

Bugfix

Fixed a bug where ssh key support for ed25519 was not possible.

Changelog opensearch 1.7.0_Beta0

Bugfix

Fixed a bug where the secret internal-users-config-secret was not created.
resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog nginx-ingress 1.7.0_Beta0

Updates

Upgraded Helm chart to version 4.11.5 to address CVE-2025-1974.

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

changelog prometheus 1.7.0_Beta0

Bugfix

Updated execution permissions for the executable in the Grafana OpenSearch plugin.
resolved imagePullSecrets warning in Kubernetes events
added ressource limits

changelog kubeops-dashboard 1.7.0_Beta0

Bugfix

Fixed CVE-2024-45337 issue
resolved imagePullSecrets warning in Kubernetes events
added ressource limits

changelog rook-ceph 1.7.0_Beta0

Bugfix

Added missing ImagePullSecret in Rook Operator and Ceph Cluster.
resolved imagePullSecrets warning in Kubernetes events
added ressource limits
removed not templatable values

changelog harbor 1.7.0_Beta0

Bugfix

Added missing ImagePullSecret in Rook Operator and Ceph Cluster.
Resolved the PostgreSQL issue encountered during the Harbor upgrade.

changelog setup 1.7.0_Beta0

Updates

Added rhel9 support for kubedependencies, containerd, containerde-dependencies, nftablese

changelog lima 1.7.0_Beta0

New

Added Licence verification
added new version of calicomultus

Updates

Added rhel9 support for kubedependencies, containerd, containerde-dependencies, nftablese
Lima will now create the file /etc/systemd/system/containerd.service.d/override.conf in order to overwriten LimitNOFILE=Infinity with LimitNOFILE=1048576 for ceph support in Red Hat Enterprise 9
Lima will now add SystemdCgroup = true below [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options] in file /etc/containerd/config.toml
Resolved the login issue for non-root users when creating a Lima container
fixed issue with reading clusterstorage.yaml
fixed issue with kubernetes upgrade to 1.32 versions
fixed issue with syntax error in lima update -r

Changelog cert-manager 1.7.0_Beta0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog filebeat 1.7.0_Beta0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog keycloak 1.7.0_Beta0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits
fixed cves, updated version

Changelog logstash 1.7.0_Beta0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog opa-gatekeeper 1.7.0_Beta0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog opensearch-dashboards 1.7.0_Beta0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog velero 1.7.0_Beta0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog kubevirt 1.0.0_Beta0

new

added package

Kubeopsctl: KubeOps 1.7.0_Alpha2

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.0_Alpha2 - Release Date 11.04.2025

Changelog kubeopsctl 1.7.0_Alpha2

Bugfix

Resolved issue with kubeopsctl status for keycloak

Changelog lima 1.7.0_Alpha2

Bugfix

Fixed a bug where ssh key support for ed25519 was not possible.

Changelog opensearch 1.7.0_Alpha2

Bugfix

Fixed a bug where the secret internal-users-config-secret was not created.

Kubeopsctl: KubeOps 1.7.0_Alpha1

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.0_Alpha1 - Release Date 08.04.2025

Changelog nginx-ingress 1.7.0_Alpha1

Updates

Upgraded Helm chart to version 4.11.5 to address CVE-2025-1974.

changelog prometheus 1.7.0_Alpha1

Bugfix

Updated execution permissions for the executable in the Grafana OpenSearch plugin.

changelog kubeops-dashboard 1.7.0_Alpha1

Bugfix

Fixed CVE-2024-45337 issue

changelog rook-ceph 1.7.0_Alpha1

Bugfix

Added missing ImagePullSecret in Rook Operator and Ceph Cluster.

changelog harbor 1.7.0_Alpha1

Bugfix

Added missing ImagePullSecret in Rook Operator and Ceph Cluster.

changelog setup 1.7.0_Alpha1

Updates

Added rhel9 support for kubedependencies, containerd, containerde-dependencies, nftablese

changelog lima 1.7.0_Alpha1

Updates

Added rhel9 support for kubedependencies, containerd, containerde-dependencies, nftablese
Lima will now create the file /etc/systemd/system/containerd.service.d/override.conf in order to overwriten LimitNOFILE=Infinity with LimitNOFILE=1048576 for ceph support in Red Hat Enterprise 9
Lima will now add SystemdCgroup = true below [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options] in file /etc/containerd/config.toml

Kubeopsctl: KubeOps 1.7.0_Alpha0

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.7.0_Alpha0 - Release Date 01.04.2025

Changelog kubeopsctl 1.7.0_Alpha0

New

Added Licence verification

Changelog lima 1.7.0_Alpha0

New

Added Licence verification
added new version of calicomultus

Bugfix

Resolved the login issue for non-root users when creating a Lima container
fixed issue with reading clusterstorage.yaml
fixed issue with kubernetes upgrade to 1.32 versions
fixed issue with syntax error in lima update -r

Changelog cert-manager 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog filebeat 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog nginx-ingress 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog keycloak 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits
fixed cves, updated version

changelog kubeops-dashboard 1.7.0_Alpha0

fixed

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog logstash 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog opa-gatekeeper 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog opensearch 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog opensearch-dashboards 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog prometheus 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog velero 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits

Changelog rook-ceph 1.7.0_Alpha0

Bugfix

resolved imagePullSecrets warning in Kubernetes events
added ressource limits
removed not templatable values

Changelog kubevirt 1.7.0_Alpha0

new

- added package

Kubeopsctl: KubeOps 1.6.11

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.11 - Release Date 30.09.2025

changelog kubeops-dashboard 1.6.11

fixed

Resolved issue with service account

Kubeopsctl: KubeOps 1.6.10

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.10 - Release Date 05.09.2025

changelog kubeopsctl 1.6.10

fixed

Prevented failure by adding fallback creation logic for missing namespace and secret

changelog rook-ceph 1.6.10

fixed

Removed external ingress and deployed using helm chart
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog opensearch-dashboards 1.6.10

fixed

Removed external ingress and deployed using helm chart

changelog kubeops-dashboard 1.6.10

fixed

Removed external ingress and deployed using helm chart
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog keycloak 1.6.10

fixed

Removed external ingress and deployed using helm chart
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog harbor 1.6.10

fixed

Removed external ingress and deployed using helm chart
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog prometheus 1.6.10

fixed

Removed external ingress and deployed using helm chart
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog filebeat 1.6.10

fixes

Addressed the following CVEs:
- CVE-2024-41110
- CVE-2024-45337
- CVE-2023-24538
- CVE-2023-24540
- CVE-2024-24790
Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog velero 1.6.10

fixes

Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog cert-manager 1.6.10

fixes

Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog OPA-Gatekeeper 1.6.10

fixes

Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog nginx-ingress 1.6.10

fixes

Updated imagePullPolicy to Always to comply with BSI security requirements.

changelog calico-multus

fixes

Updated imagePullPolicy to Always to comply with BSI security requirements.

Kubeopsctl: KubeOps 1.6.9

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.9 - Release Date 30.06.2025

changelog lima 1.6.9

new

- added logic for updating from RHEL 8 to RHEL 9

fixed

- fixed issue where auditlog path was not templatable

changelog rook-ceph 1.6.9

fixed

- fixed issue where the lableing was only after installing platform packages
- added logic for cerating crushmap for rook-ceph

changelog rook-ceph 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog harbor 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog opensearch-os 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog opensearch-dashboards 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog opa-gatekeeper 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog cert-manager 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog ingress-nginx 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog keycloak 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog velero 1.6.9

fixed

- added topologySpreadConstraints for spreading across the kubeops zones

changelog kubeopsctl 1.6.9

fixed

- fixed issue where auditlog path was not templatable

changelog Velero 1.6.9

fixes

Addressed the following CVEs:
- CVE-2024-24790
- CVE-2024-32002
- CVE-2024-45491
- CVE-2024-45492
- CVE-2024-37371
- CVE-2023-45853

Kubeopsctl: KubeOps 1.6.8

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.8 - Release Date 30.04.2025

changelog lima 1.6.8

new

added logic for creating rook-ceph on rhel 9
added new containerd and containerd packages for rhel9

fixed

fixed issue where setting the auditlog parameter to false did nothing
fixed issue where setting the auditlog parameter to true only made changes on the clustermaster

changelog opensearch 1.6.8

changed

updated opensearch to version: 2.32.0 and appVersion: 2.19.1
Issue with creating and accessing secrets in OpenSearch has been resolved.
Issue with creating namespace for opensearch has been resolved

changelog opensearch dashboards 1.6.8

changed

updated opensearch to version: 2.28.0 and appVersion: 2.19.1

changelog prometheus 1.6.8

fixed

fixed issue where grafana opnsearch datasource hat wrong permissions

changelog ingress nginx 1.6.8

changed

updated helm chart to appVersion: 1.11.5 and version: 4.11.5

fixed

fixed critical cves:
- CVE-2025-1097
- CVE-2025-1098
- CVE-2025-1974
- CVE-2025-24513
- CVE-2025-24514
fixed issue where advanced parameters did not work

changelog kubeopsctl 1.6.8

fixed

fixed issue where clusterstorage was not updated after kubeopsctl commands
fixed issue where kubeopsctl version command did not create a output

Kubeopsctl: KubeOps 1.6.7

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.7 - Release Date 27.03.2025

changelog lima 1.6.7

fixed

fixed issue in kubernetes 1.31.2 where the pause image has the tag 3.10.0 instead of 3.10
fixed issue in kubernetes 1.31.4 where the pause image has the tag 3.10.0 instead of 3.10
fixed issue where the kubernetes upgrade from 1.30 to 1.31 failed with the CreateContainerConfigError
fixed issue where the kubernetes upgrade from 1.30 to 1.31 only applied on the worker nodes
fixed issue where the kubernetes upgrade from 1.30 to 1.31 create a version conflict between the kube-apiserver of an upgraded master and an not upgraded master

changelog kubeopsctl 1.6.7

fixed

fixed issue where the kubernetes upgrade from 1.30 to 1.31 only applied on the worker nodes
fixed issue where the kubernetes upgrade from 1.30 to 1.31 create a version conflict between the kube-apiserver of an upgraded master and an not upgraded master

changelog rook-ceph 1.6.7

fixed

fixed templating of mgr so that it can be modified via the advanced parameters

added

added ressourcenlimits for rook

changelog harbor 1.6.7

fixed

fixed templating of postgres so that it can be modified via the advanced parameters

added

added ressourcenlimits for harbor

changelog helm 1.6.7

added

added ressourcenlimits for helm

changelog cert-manager 1.6.7

added

added ressourcenlimits for cert-manager

changelog filebeat 1.6.7

added

added ressourcenlimits for filebeat

changelog ingress-nginx 1.6.7

added

added ressourcenlimits for ingress.nginx

changelog keycloak 1.6.7

added

added ressourcenlimits for keycloak

changelog kubeops-package 1.6.7

added

added ressourcenlimits for kubeops-package

changelog kubeops-setup 1.6.7

added

added ressourcenlimits for kubeops-setup

changelog logstash 1.6.7

added

added ressourcenlimits for logstash

changelog opa-gtekeeper 1.6.7

added

added ressourcenlimits for opa-gatekeeper

changelog opensearch 1.6.7

added

added ressourcenlimits for opensearch

known issue

the installation can create the following error: Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException

changelog prometheus 1.6.7

added

added ressourcenlimits for prometheus

Kubeopsctl: KubeOps 1.6.6

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.6

changelog lima 1.6.6

fixed

fixed issue where a non exiting cluster storage lead to exceptions
fixed issue where the restart of the proxy in lima update registry lead to errors

changelog opensearch 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog opensearch-dashboards 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

known issue

the installation can create the following error: Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException

changelog logstash 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog filebeat 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog prometheus 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog prometheus 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog opa-gatekeeper 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog cert-manager 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog ingress-nginx 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog keycloak 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

changelog velero 1.6.6

fixed

fixed issue where package had automatically a imagepullsecret from the local harbor

Kubeopsctl: KubeOps 1.6.5

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.5

changelog lima 1.6.5

added

added kubernetes version 1.29.12
added kubernetes version 1.30.8

changelog kubeops-dashboard 1.6.5

fixed

fixed issue where nodeport was randomly assigned

Changelog opensearch-dashboards 1.6.5

known issue

the installation can create the following error: Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException

Kubeopsctl: KubeOps 1.6.4

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.4

changelog lima 1.6.4

added

added kubernetes version to 1.29.10
added kubernetes version to 1.30.6

changed

updated yq version in lima code for vulnerability fix

fixed

fixed issue where change auditlog only worked on clustermaster
fixed issue where clusterstorage was not complete after cluster creation

changelog rook-ceph 1.6.4

changed

updated app-version version of rook-ceph operator to 1.15.6, helm chart version to 1.15.6
updated helm chart version of rook-ceph cluster to 1.15.6, helm chart version to 1.15.6

changelog kube prometheus stack 1.6.4

changed

updated the ingress configuration to enable HTTPS access for Prometheus and Grafana services
updated to grafana plugin to 11.3.1
updated prometheus image because of critical cves

changelog kubeopsctl 1.6.4

fixed

fixed issue where change auditlog only worked on clustermaster
fixed issue where an warning message was thrown, that the node could be be upgraded, even if no upgrade was applied

changelog opensearch 1.6.4

added

added ressourcenlimits for opensearch

known issue

the installation can create the following error: Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException

Kubeopsctl: KubeOps 1.6.3

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.3

changelog kubeopsctl 1.6.3

bugfixes

resolved issue where only masters in zones was not possible
resolved issue where installation of harbor without password and external url was possible
resolved issue where imagepullsecret was not created correctly for harbor with domain name
resolved issue where harbor password was in logs

changelog lima 1.6.3

bugfixes

Resolved the issue where the kubectl command was not found

added

added kubernetes version to 1.31.2

changelog rook-ceph 1.6.3

fixes

resolved issue with accessing ceph dashboard
fixed issue with updating rook-cephfs storageClass

Changelog Harbor 1.6.3

fixes

hardened images because of critical cves: CVE-2024-41110, CVE-2024-45491, CVE-2024-45492, CVE-2024-37371

Changelog prometheus-stack 1.6.3

fixes

changed scrape port of etcd for prometheus stack to 2381
resolved issues with prometheus crds in prometheus upgrade

Changelog nginx-ingress 1.6.3

fixes

fixed the critical vulnerability CVE-2024-24790

Changelog kubeops-dashboard 1.6.3

fixes

updated helm chart to 0.26.0 and app version 0.26.0

Changelog opensearch-dashboards 1.6.3

updates

upgraded Helm chart version to 2.22.0

known issue

the installation can create the following error: Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException

Kubeopsctl: KubeOps 1.6.2

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.2

changelog kubeopsctl 1.6.2

bugfixes

resolved issue where images were not pinned, so images were deleted by kubernetes
resolved issue where updateRegistry was not executed
resolved issue where lima container did not properly stop after errors
fixed issue with storageClassName in logstashValues

changelog rook-ceph

fixes

resolved issue where parameters useallnodes and usealldevivces, and deviceslist were not templated

Changelog opa gatekeeper 1.6.2

fixes

fixed issue where opa gatekeeper namespace was controlled by helm
updated helm chart of opa gatekeeper, changed curl image

Changelog keycloak 1.6.2

fixes

fixed issue with critical CVEs

Changelog opensearch-dashboards 1.6.2

known issue

the installation can create the following error: Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException

Kubeopsctl: KubeOps 1.6.1

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.1

Changelog kubeopsctl 1.6.1

Bugfix

Resolved the issue of missing master nodes details in /usr/local/etc/haproxy/haproxy.cfg
Resolved the issue where no error message was displayed when running kubeopsctl apply -f with a non-existent YAML file

Changelog lima 1.6.1

Bugfix

Resolved issue with upgrading kubenetes versions

Changelog velero 1.6.1

Bugfix

Fixed issue with CVE-2024-24790 vulnerability

Changelog kubeops-dashboard 1.6.1

Bugfix

Fixed issue with CVE-2024-24790 and CVE-2024-41110 vulnerabilities

Changelog cert-manager 1.6.1

Bugfix

Upgraded the cert-manager Helm chart to version 1.15.3

Changelog prometheus 1.6.1

Bugfix

Upgraded the prometheus Helm chart to version 62.7.0

Changelog nginx-ingress 1.6.1

Bugfix

Fixed issue with CVE-2024-24790 vulnerability

Changelog harbor 1.6.1

Bugfix

Upgraded the prometheus Helm chart to version 1.15.1

Changelog opensearch-dashboards 1.6.1

known issue

the installation can create the following error: Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException

Kubeopsctl: KubeOps 1.6.0

Mon, 01 Jan 0001 00:00:00 +0000

KubeOps 1.6.0

Changelog kubeopsctl 1.6.0

New

Added apiVersion kubeops/kubeopsctl/alpha/v5
Added a overwrite parameters for platform packages such as rook, harbor, logstash, filebeat etc.

Bugfix

Fixed the issue where the platform was creating Harbor project despite it being set to false.
Resolved the issue with status giving output for invalid argument/s
Resolved the issue with multiline literal that converted “|” to “>”