Cluster API v1.14.3
security~~~~~~~~~~~~*****!
Cluster API released v1.14.3. The release bumps grpc to 1.83.2 to address security advisories, along with several OpenTelemetry, golang.org/x/net and genproto dependencies. Fixes include setting the cluster-name label on Clusters without ClusterClass, a race in the KCP proxy DialContext, and handling of etcd member matching and not-found owner references.
What changes for platform teams
Platform teams running Cluster API should pick up the grpc dependency fix and the KCP and cluster labeling fixes. The release notes list no breaking changes, and the source does not describe any new capability.
Changes
- Dependency: Bump grpc to 1.83.2 to address security advisoriessecurity
- Github.com/grpc-ecosystem/grpc-gateway/v2: v2.28.0 → v2.29.0changed
- Go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.43.0 → v1.45.0changed
- Go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.43.0 → v1.45.0changed
- Go.opentelemetry.io/otel/metric: v1.44.0 → v1.45.0changed
- Go.opentelemetry.io/otel/sdk/metric: v1.44.0 → v1.45.0changed
- Go.opentelemetry.io/otel/sdk: v1.44.0 → v1.45.0changed
- Go.opentelemetry.io/otel/trace: v1.44.0 → v1.45.0changed
- Go.opentelemetry.io/otel: v1.44.0 → v1.45.0changed
- Go.opentelemetry.io/proto/otlp: v1.10.0 → v1.11.0changed
- Golang.org/x/net: v0.57.0 → v0.58.0changed
- Google.golang.org/genproto/googleapis/api: 3dc84a4 → 6ac0973changed
15 more lines
- Google.golang.org/genproto/googleapis/rpc: 3dc84a4 → 6ac0973changed
- Google.golang.org/grpc: v1.83.1 → v1.83.2changed
- Cluster: Also set cluster-name label on Clusters without ClusterClassfixed
- KCP: Fix race in KCP proxy DialContextfixed
- KCP: Try to match etcd member to machine being deleted by KCPfixed
- Machine/MachineSet: Gracefully handle not-found when resolving owner referencesfixed
- Misc: Implement support for multiNamespaceInformer in controller util consistency storefixed
- Testing: Fix flaky TestReconcileControlPlane by reading the Cluster with the API readerfixed
- Management Cluster: v1.33.x -> v1.37.xother
- Workload Cluster: v1.31.x -> v1.37.xother
- 16 new commits mergedother
- 6 bugs fixed 🐛other
- E2e: Extend e2e tests to detect double rolloutsother
- Runtime SDK: Improve discoveryother
- Testing: Restore apiVersionGetter after unit testsother
5 maintenance lines (dependency bumps, CI, tests, docs)
- Bump machine to highcpu-32maintenance
- Add verify for downloaded binariesmaintenance
- Improve Kubernetes version resolutionmaintenance
- Clusterctl: Bump cert-manager to v1.21.2maintenance
- Dependency: Update Otel version to v1.45.0maintenance
32 lines1 security13 changed6 fixed7 other5 maintenancetyped from the source notes
Full release notes ↗ · all Cluster API releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules