Kured 1.15.1

Build and Testing

• update build-tools
• build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.2
• build(deps): bump alpine from 3.19.0 to 3.19.1
• build(deps): bump lycheeverse/lychee-action from 1.9.2 to 1.9.3
• build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1 (#893)
• build(deps): bump nick-invision/retry from 2.9.0 to 3.0.0 (#892)
• build(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0
• build(deps): bump helm/kind-action from 1.8.0 to 1.9.0
• build(deps): bump github.com/prometheus/common from 0.46.0 to 0.47.0
• build(deps): bump github.com/prometheus/common from 0.47.0 to 0.48.0
• build(deps): bump github.com/prometheus/client_golang
• build(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 (#905)
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
• build(deps): bump guyarb/golang-test-annoations from 0.7.0 to 0.8.0
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0

Kubernetes Version Compatibility

The daemon image contains a 1.28.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.27.x, 1.28.x and 1.29.x

Thanks a lot to everyone who contributed to kured since 1.15.0.

Kured 1.15.0

⚠️ Important notice

Due to the changes made for the new signal reboot-mode to reduce needed permissions of kured, the default
sentinel path and its mounting have changed. If you are using our YAML-Manifests instead of the helm-chart
please ensure to update the full manifest instead of only increasing the version-number.
There are two manifest-variants in the repo available now: kured-ds.yaml with the "old" reboot-command mechanism and the new
kured-ds-signal.yaml manifest which uses the new reboot-signal mechanism with non-privileged permissions.

Features and Improvements

• Add signal-reboot (#814)
• add drain delay (#852)

Build and Testing

• update k8s deps
• update k8s image versions
• update k8s test matrix (#883)
• bump aquasecurity/trivy-action from 0.15.0 to 0.16.0
• bump github/codeql-action from 2 to 3
• bump docker/metadata-action from 5.3.0 to 5.4.0
• bump github.com/spf13/viper from 1.18.1 to 1.18.2
• bump github.com/prometheus/client_golang
• bump aquasecurity/trivy-action from 0.16.0 to 0.16.1
• bump docker/metadata-action from 5.4.0 to 5.5.0
• bump lycheeverse/lychee-action from 1.8.0 to 1.9.0
• bump kubereboot/kured from 1.13.2 to 1.14.2 (#877)
• bump docker/setup-buildx-action from 2 to 3 (#879)
• bump nick-invision/retry from 2.8.3 to 2.9.0 (#880)
• bump docker/setup-qemu-action from 2 to 3
• bump actions/setup-go from 4 to 5 (#882)
• bump actions/checkout from 3 to 4
• bump lycheeverse/lychee-action from 1.9.0 to 1.9.1
• bump github.com/prometheus/common from 0.45.0 to 0.46.0 (#885)

Kubernetes Version Compatibility

The daemon image contains a 1.28.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.27.x, 1.28.x and 1.29.x

Thanks a lot to everyone who contributed to kured since 1.14.2.

Kured 1.14.2

Build and Testing

• build(deps): bump docker/metadata-action from 5.0.0 to 5.1.0 by @dependabot in #854
• build(deps): bump alpine from 3.18.4 to 3.18.5 by @dependabot in #855
• build(deps): bump docker/metadata-action from 5.1.0 to 5.2.0 by @dependabot in #856
• build(deps): bump docker/metadata-action from 5.2.0 to 5.3.0 by @dependabot in #857
• build(deps): bump aquasecurity/trivy-action from 0.14.0 to 0.15.0 by @dependabot in #858
• build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #859
• build(deps): bump github.com/spf13/viper from 1.17.0 to 1.18.0 by @dependabot in #860
• build(deps): bump actions/stale from 8 to 9 by @dependabot in #861
• build(deps): bump github.com/spf13/viper from 1.18.0 to 1.18.1 by @dependabot in #863
• build(deps): bump alpine from 3.18.5 to 3.19.0 by @dependabot in #864
• update for 1.14.2 release by @dholbach in #862

Documentation

• doc: Updated maintainers file by @ckotzbauer in #851

Kubernetes Version Compatibility

The daemon image contains a 1.27.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.26.x, 1.27.x and 1.28.x

Thanks a lot to everyone who contributed to kured since 1.14.1.

Full Changelog: 1.14.1...1.14.2

Kured 1.14.1

Build and Testing

• build(deps): bump github.com/containrrr/shoutrrr from 0.7.1 to 0.8.0 by @dependabot in #821
• build(deps): bump aquasecurity/trivy-action from 0.11.2 to 0.12.0 by @dependabot in #825
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #826
• Fix the goreleaser architecture for arm and ppc by @grisu48 in #824
• build(deps): bump docker/setup-qemu-action from 2 to 3 by @dependabot in #828
• build(deps): bump docker/login-action from 2 to 3 by @dependabot in #829
• build(deps): bump docker/build-push-action from 4 to 5 by @dependabot in #830
• build(deps): bump docker/setup-buildx-action from 2 to 3 by @dependabot in #831
• build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0 by @dependabot in #832
• build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 by @dependabot in #834
• build(deps): bump nick-invision/retry from 2.8.3 to 2.9.0 by @dependabot in #837
• build(deps): bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 by @dependabot in #838
• build(deps): bump alpine from 3.18.3 to 3.18.4 by @dependabot in #839
• build(deps): bump github.com/spf13/viper from 1.16.0 to 1.17.0 by @dependabot in #840
• update k8s and x/net dependencies by @dholbach in #842
• build(deps): bump github.com/prometheus/common from 0.44.0 to 0.45.0 by @dependabot in #843
• build(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.13.0 by @dependabot in #845
• build(deps): bump aquasecurity/trivy-action from 0.13.0 to 0.13.1 by @dependabot in #846
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #848
• build(deps): bump aquasecurity/trivy-action from 0.13.1 to 0.14.0 by @dependabot in #849

Kubernetes Version Compatibility

The daemon image contains a 1.27.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.26.x, 1.27.x and 1.28.x

Thanks a lot to everyone who contributed to kured since 1.14.0.

New Contributors

• @grisu48 made their first contribution in #824

Full Changelog: 1.14.0...1.14.1

Kured 1.14.0

Features and Improvements

• Support pod-selector for drain command (#788)
• Use readOnlyRootFilesystem (#805)
• Log on unusual sentinel-command exit code (#806)
• Don’t hold node lock if reboot is blocked (#819)
• Add argument to invert the behavior of alert-filter-regexp (#786)
• Add multiple concurrent node reboot (#660)
• Adds new flag --metrics-host (#811)

Build and Testing

• Use [email protected], [email protected], test k8s 1.26-1.28 (#818)
• updated build-tools (#809)
• confirm cosign prompt
• Update alpine to 3.18.3 (#815)

Kubernetes Version Compatibility

The daemon image contains a 1.27.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.26.x, 1.27.x and 1.28.x

Thanks a lot to everyone who contributed to kured since 1.13.2.

Kured 1.13.2

Features and Improvements

• feat: metrics port command (#780)

Build and Testing

• build(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2
• build(deps): bump docker/metadata-action from 4.5.0 to 4.6.0
• build(deps): bump github.com/prometheus/client_golang
• build(deps): bump alpine from 3.18.0 to 3.18.2
• build(deps): bump gotest.tools/v3 from 3.4.0 to 3.5.0 (#789)
• build(deps): bump helm/kind-action from 1.7.0 to 1.8.0
• build(deps): bump guyarb/golang-test-annoations from 0.6.0 to 0.7.0 (#801)
• Update k8s components/images to 0.26.7

Kubernetes Version Compatibility

The daemon image contains a 1.26.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.25.x, 1.26.x and 1.27.x

Thanks a lot to everyone who contributed to kured since 1.13.1.

Kured 1.13.1

Build and Testing

• update k8s deps
• release 1.13.1 (#779)
• build(deps): bump github.com/prometheus/client_golang
• build(deps): bump github.com/prometheus/common from 0.42.0 to 0.43.0 (#762)
• build(deps): bump alpine from 3.17.3 to 3.18.0
• build(deps): bump lycheeverse/lychee-action from 1.7.0 to 1.8.0
• build(deps): bump helm/kind-action from 1.5.0 to 1.6.0 (#766)
• build(deps): bump helm/kind-action from 1.6.0 to 1.7.0 (#767)
• build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
• build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3
• build(deps): bump github.com/prometheus/common from 0.43.0 to 0.44.0
• build(deps): bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#773)
• build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4
• build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
• build(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0
• build(deps): bump docker/metadata-action from 4.4.0 to 4.5.0

Kubernetes Version Compatibility

The daemon image contains a 1.26.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.25.x, 1.26.x and 1.27.x

Thanks a lot to everyone who contributed to kured since 1.13.0.

Kured 1.13.0

Features and Improvements

• fix: annotate nodes for reboot before aborting due to blocked (#749)

Documentation

• update docs location (#758)

Build and Testing

• update k8s dependencies and test images for k8s release (#747)
• update go-restful to 3.10.2
• build(deps): bump actions/setup-go from 3 to 4
• build(deps): bump actions/stale from 7 to 8 (#748)
• build(deps): bump alpine from 3.17.2 to 3.17.3
• build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
• build(deps): bump github.com/prometheus/client_golang
• build(deps): bump docker/metadata-action from 4.3.0 to 4.4.0
• build(deps): bump lycheeverse/lychee-action from 1.6.1 to 1.7.0
• build(deps): bump aquasecurity/trivy-action from 0.9.2 to 0.10.0

Helm-Chart

• Default nodeSelector for kubernetes.io/os: linux

Kubernetes Version Compatibility

The daemon image contains a 1.25.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.25.x, 1.26.x and 1.27.x

Thanks a lot to everyone who contributed to kured since 1.12.2.

Kured 1.12.2

This patch release only contains dependency updates, which should make your CVE checker happy again.

Build and Testing

• build(deps): bump alpine from 3.17.1 to 3.17.2
• build(deps): bump github.com/prometheus/common from 0.39.0 to 0.40.0
• build(deps): bump lycheeverse/lychee-action from 1.5.4 to 1.6.1
• build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
• build(deps): bump github.com/prometheus/common from 0.40.0 to 0.41.0
• build(deps): bump aquasecurity/trivy-action from 0.9.1 to 0.9.2
• build(deps): bump github.com/prometheus/common from 0.41.0 to 0.42.0
• update relevant deps
• Move to aquasecurity/trivy-action instead
• Try to dropping golang.org/x/text replacement
• lychee: exclude slack:// and teams:// urls as well
• update Go to 1.19, it's used in k8s 1.24 as well
• Add ports config to DaemonSet yaml. Closes #741 (#742)

Kubernetes Version Compatibility

The daemon image contains a 1.25.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.24.x, 1.25.x and 1.26.x

Thanks a lot to everyone who contributed to kured since 1.12.1.

Kured 1.12.1

This patch release only contains dependency updates, which should make your CVE checker happy again.

Build and Testing

• update golang.org/x/net dep
• drop unnecessary replacement for go-restful CVE
• build(deps): bump actions/stale from 6 to 7
• build(deps): bump nick-invision/retry from 2.8.2 to 2.8.3
• build(deps): bump alpine from 3.17.0 to 3.17.1 (#714)
• build(deps): bump docker/metadata-action from 4.1.1 to 4.3.0
• build(deps): bump github.com/spf13/viper from 1.14.0 to 1.15.0
• build(deps): bump github.com/containrrr/shoutrrr from 0.6.1 to 0.7.1
• build(deps): bump docker/build-push-action from 3 to 4

Kubernetes Version Compatibility

The daemon image contains a 1.25.x k8s.io/{client-go,kubectl} for the purposes of maintaining the lock and draining worker nodes. Kubernetes aims to provide forwards & backwards compatibility of one minor version between client and server, so this should work on 1.24.x, 1.25.x and 1.26.x

Thanks a lot to everyone who contributed to kured since 1.12.0.