kubesolo Updates & Release Notes

What's Changed

Feature

Added in-place upgrades with backup and automatic rollback #208

kubesoloctl upgrade, kubesoloctl rollback and kubesoloctl status, or the same through the configuration API (POST /api/v1/upgrade, POST /api/v1/rollback, GET /api/v1/status)

The binary, datastore and configuration are backed up, and the new version is tested against a copy of the datastore before switching over. It is rolled back automatically if it does not become healthy

A boot guard restores the previous version if the host loses power or reboots partway through an upgrade

Running install.sh with a newer version on an existing host upgrades it the same way

For more details, refer to this docs

KubeSolo now loads containerd drop-ins from /etc/containerd/conf.d, the standard directory used by containerd packaging and nvidia-ctk #206

/etc/containerd/config.d is still read

For more details, refer to this docs

Added --load-balancer=true|false and --load-balancer-ip to install.sh #204 #216

Set the IP published as a LoadBalancer Service's external IP on hosts with more than one network interface

Kubernetes, containerd and kine logs now use KubeSolo's single log format #210 #213

One component name per service, times to the millisecond, and no colour when output is not a terminal

Fixes

Fixed systemctl stop and restart hanging for 90s and ending in SIGKILL on a fully started node #207

Upgrading from v1.1.x or v1.2.0 now moves flag-based settings to the configuration file #211

install.sh now prints why an upgrade was aborted, rolled back or failed #211

Fixed a successful rollback being reported as failed when a short health timeout was used #211

Fixed upgrades and restarts on OpenRC (Alpine) failing with "already been started" #214

Fixed containerd shims being left running after a rollback or uninstall on OpenRC #215

KubeSolo's output on OpenRC now goes to syslog instead of being discarded #215

A clean reboot while an upgrade is being verified no longer rolls the upgrade back #215

Chore

Bumped github.com/moby/sys/user 0.4.0 -> 0.4.1 #212

New Contributors

@zoumingzhe made their first contribution in #204

Full Changelog: v1.2.1...v1.2.2

What's Changed

Feature

Introduced a configuration file to replace command-line flags #188

For more details, refer to these docs: configuration file, configuration API

The local-path-provisioner image is only imported into containerd when local-path storage is enabled #195

Systems that don't use local-path storage no longer need the image or a registry pull for it

Added ready-to-import Grafana dashboards for the metrics endpoint #202

For more details, refer to this docs

Fixes

Fixed pods being duplicated and side-loaded images being lost when KubeSolo restarts #199

Fixed KubeSolo on nftables-only hosts and hosts with a read-only /proc/sys #190

kube-proxy no longer flushes the host's ip nat nftables table on startup #191

Fixed installing on 32-bit ARM and RISC-V hosts #198

Chore

Bumped google.golang.org/grpc 1.82.1 -> 1.83.2 #189 #193

Bumped go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.35.0 -> 1.45.0 #196

Full Changelog: v1.2.0...v1.2.1

What's Changed

Feature

Introduced a Prometheus-compatible metrics endpoint #176

Enable with --metrics-server; serves /metrics with control plane health gauges on 127.0.0.1:9105 (configurable via --metrics-bind-address)

Added support for attaching to a host-managed container runtime (containerd or CRI-O) #181

Set --container-runtime-endpoint (e.g. unix:///run/crio/crio.sock) to skip the embedded containerd; the host then supplies the runtime, OCI runtime, CNI plugin binaries and sandbox image

Added CPU manager support for latency-sensitive workloads #183

New --cpu-manager-policy, --cpu-manager-policy-options, --system-reserved and --reserved-cpus flags

For more details, refer to this docs

Auto-detect the network MTU, with an override via --mtu #179

Picks up reduced MTUs on VPN/tunnel/PPPoE links and applies them to the CNI bridge (cni0) and pod veth interfaces

For more details, refer to this docs

Portainer Edge Agent now tracks the lts tag, and the image is configurable via --portainer-edge-image #177

Any image other than the default is pulled from the registry rather than loaded from the embedded image

Fixes

Fixed an issue where the EXTERNAL-IP was not set when an existing service was changed to type LoadBalancer #178

Also added --load-balancer-ip to publish services on an address other than the node IP

Fixed kubesoloctl writing the kubeconfig to the wrong user's home directory #185

Ownership is now resolved only from an explicit sudo/doas escalation; in a plain root shell (e.g. after sudo su -) the kubeconfig goes to root's home rather than being attributed to the original login user

Fixed external-dependency builds embedding artifacts they do not use #184

Chore

Updated KubeSolo to track Kubernetes v1.35.7 and Kine v0.16.3 #180

Dropped the :latest container image tag and split CI publishing to be fork-safe #174

Images must now be pulled by an explicit version tag

Bumped google.golang.org/grpc 1.80.0 -> 1.82.1 #175

Bumped github.com/google/cel-go 0.26.0 -> 0.29.0 #182

New Contributors

@c92s made their first contribution in #184

Full Changelog: v1.1.9...v1.2.0

What's Changed

Feature

• Added --node-ip flag (env KUBESOLO_NODE_IP) to pin the node IP on multi-NIC hosts #167
• Applies to the apiserver advertise-address, kubeconfig, kubelet node IP, and LoadBalancer EXTERNAL-IP

Fixes

• Fixed an issue where a node IP change regenerated the entire PKI tree including the CA, invalidating previously distributed kubeconfigs — the CA is now preserved and only leaf certificates are re-signed #167
• Fixed non-deterministic node IP auto-detection on multi-NIC hosts, now preferring a private (RFC 1918) address #167

Chore

• Removed the edge memory overrides; KubeSolo now always uses upstream Kubernetes and containerd defaults #166

Full Changelog: v1.1.7...v1.1.8

What's Changed

Feature

Introduced kubesoloctl, a management CLI tool for KubeSolo #139

For more information, refer to this docs

Introduced Container mode to support KubeSolo on macOS, WSL2, or any Linux dev host with Docker Engine #106

For more details, refer to this docs

Introduced native d2k integration, Docker-to-Kubernetes API translator #156

For more details, refer to this docs

Auto-regenerate certificates when the node IP changes #159

Added fuse-overlayfs support where the rootfs is an overlay #160

Fixes

Fixed an issue where optional components failure exit the service #163

Fixed an issue Portainer Edge env vars were stripped by sudo env_reset #161

Fixed an issue where false-positive runc warning messages flooding #157

Added the missing --startup-timeout flag to the docs #154

Chore

Updated KubeSolo to track Kubernetes v1.34.8 #162

Bumped embedded dependency versions #164

Go 1.26.2 → 1.26.4

Portainer Agent 2.39.2 -> 2.39.4

CoreDNS 1.14.3 -> 1.14.4

New Contributors

@benoitschipper made their first contribution in #154

@rothgar made their first contribution in #160

@testA113 made their first contribution in #162

Full Changelog: v1.1.6...v1.1.7

What's Changed

Chore

• Bumped Go to 1.26.2
• Bumped Portainer Agent to 2.39.2-LTS
• Bumped CoreDNS to 1.14.3
• Bumped local-path-provisioner to 0.0.36
• Bumped Kubernetes to 1.34.7

Feature

• Added --disable-ipv6 flag to support disabling IPv6 #150
• Added --db-wal-repair flag to detect SQLite WAL corruption on startup and recover from unclean shutdowns caused by power loss #148

Fixes

• Fixed an issue where registry config was being wiped on restart #147

New Contributors

• @xiezhuojin made their first contribution in #147

Full Changelog: v1.1.4...v1.1.5

What's Changed

Chore

Bumped Go to 1.26.1

Bumped Portainer Agent to 2.39.1-LTS

Bumped the following actions in CI and release GitHub Actions:

actions/checkout@v6

actions/setup-go@v6

actions/upload-artifact@v7

Added arm architecture support for musl - #112

Added riscv64 architecture support for musl - #114

Feature

Added support for registry configuration - #126

Security

CVE-2026-33186 - bumped google.golang.org/grpc to v1.79.3

CVE-2026-39883 - bumped go.opentelemetry.io/otel/sdk to v1.43.0

CVE-2024-28180 - bumped github.com/go-jose/go-jose/v4 to 4.1.4

CVEs - bumped github.com/nats-io/nats-server to v2.12.6

Improvements

Optimized NodeSetter webhook for patching objects efficiently - #118

Added cgroupv2 detection, nftables proxy mode for kube-proxy including table flush on start, and kernel loading - #116

Added support for registry configuration via hosts.toml - #126

Optimized binary size, crun, zstd compression, online/offline build variants - #117

Fixes

Updated container images to use fully-qualified image references for proper loading - #115

Normalized hostname for consistency - #116

Added mutex to prevent data race for the use of client set in webhook - #122

Fixed WaitGroup deadlocks and premature readiness signaling on failed startup paths - #123 and #124

Fixed Alpine 3.23 compatibility issues causing post-reboot crashes #132

Fixed a few issues for the installation script - #130

Fixed an issue where stale runtime state caused pod sync failures on restart - #127

New Contributors

@Ritish134 made their first contribution in #112

@mmoll made their first contribution in #114

@nova8-technologies made their first contribution in #115

@samdulam made their first contribution in #132

Full Changelog: v1.1.2...v1.1.3

Chore

chore(deps): bump Go to 1.25.7
chore(deps): bump Kubernetes to 1.34.4
chore(deps): bump CoreDNS to 1.14.1
chore(deps): bump Local Path Provisioner to 0.0.34
chore(deps): bump Portainer Agent to 2.39.0-LTS
chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in the go_modules group across 1 directory by @dependabot[bot] in #104
chore(deps): bump github.com/nats-io/nats-server/v2 from 2.12.0 to 2.12.3 in the go_modules group across 1 directory by @dependabot[bot] in #107
chore(deps): bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 in the go_modules group across 1 directory by @dependabot[bot] in #110

Improvements

feat(build): add capability to specify a custom bin URL path by @yajith in #105

Bug Fix

fix(coredns): dns resolution fix by @stevensbkang in #102
fix(kine): reduce noises in kubesolo logs by @stevensbkang in #103

New Contributors

@yajith made their first contribution in #105

Full Changelog: v1.1.0...v1.1.1