LoginSign Up
← Back to all sparks
K

k0s

INFRA · APIS
Velocity5.0

Zero-friction lightweight Kubernetes distribution

k0sproject.io ↗

k0s writes the etcd certificate fix once and backports it down every branch

kubernetes-distributionbackportsetcdcluster-lifecyclerelease-train
◆Current state
k0s ships version-only tags across four concurrent support branches, each a roll-up of backported pull requests and image bumps. The 1.36 branch has just taken Kubernetes 1.36.4 together with etcd certificate renewal for clusters using a custom etcd CA, a fix stopping k0s reset from unmounting the kubelet root directory, and image bumps for containerd, Calico, CoreDNS, Traefik and kine. The same etcd certificate work reached the 1.35 branch the same morning.
◆Where it's heading
This is a maintenance distribution doing maintenance deliberately: a fix is written once and lands on 1.34, 1.35 and 1.36 within hours, with a bot authoring most of the roll-up. The two items in this batch that reach operators are both about not breaking a running cluster — certificates that would otherwise expire under a custom CA, and a reset path that was unmounting a directory it did not own. Feature work belongs to upstream Kubernetes; what k0s contributes is the packaging and the safety of the lifecycle commands around it.
◆Prediction
Expect the branch-parallel pattern to continue, with the next Kubernetes patch releases arriving on 1.34, 1.35 and 1.36 in close succession rather than any one branch pulling ahead.

◆Recent moves

  1. 16d ago

    Kubernetes 1.36.4, custom-CA etcd cert renewal, safer k0s reset

    Kubernetes moves to 1.36.4 on the 1.36 branch, carrying two operator-facing fixes: etcd certificates generated by a custom etcd CA are now renewed, and k0s reset no longer unmounts the kubelet root directory. The rest is image and toolchain bumps — containerd 2.3.4, Calico 3.32.1-3, kine 0.16.4, CoreDNS, Traefik, Go 1.26.7 — backported through the bot.

    View source ↗
  2. 16d ago

    Kubernetes 1.35.8 on the 1.35 branch, with etcd custom-CA certificate renewal

    The 1.35 branch takes Kubernetes 1.35.8 with the same custom-CA etcd certificate renewal that reached 1.36 hours later. The pairing is the clearest illustration of how this project works: one fix, every supported branch, same morning.

    View source ↗
  3. 19d ago

    Kubernetes 1.34.11 lands on the 1.34 support branch

    Kubernetes 1.34.11 lands on the oldest branch still under support. Routine upstream tracking, notable only as the third arm of the same backport pattern.

    View source ↗
  4. 1mo ago

    Traefik, Envoy and Calico image bumps backported to 1.36.3

    Traefik, Envoy and Calico image bumps backported to 1.36.3. Component version tracking with nothing an operator would act on.

    View source ↗
  5. 1mo ago

    Autopilot restart states clarified; Calico and CoreDNS bumps

    Autopilot restart states are clarified and Calico and CoreDNS are bumped. Documentation wording and image versions, no behaviour change.

    View source ↗
  6. 1mo ago

    Release candidate with a kube-router image bump

    A release candidate carrying a kube-router image bump. A pre-release tag on the way to 1.36.3 proper, with a body to match.

    View source ↗