2.4.0 - Update OS and Kubernetes

This release updates the OS image, Kubernetes and KubeOne to newer versions.

Component updates:

Component	New version
kubeone	1.7.2
kubernetes	1.27.10
ubuntu	22.04

2.3.0 - WireGuard

New feature: WireGuard has been added as an optional deployment. Run make deploy-wireguard to deploy it.

Component updates:

Component	New version
kubeone	1.7.0

Components added:

Component	New version
wireguard	1.0.20210914

2.2.0 - Falco Security

New feature: The Falco Helm chart has been added as an optional deployment. Run make deploy-falco to deploy it.

Components added:

Component	New version
falco	3.4.1

2.1.0 - Dex connectors

New feature: You can now configure Dex connectors in the main config.yaml to integrate multiple additional identity providers. Please consult the README.md how to configure these. An example configuration of integrating GitHub OAuth is included in config.example.yaml.

2.0.0 - OIDC/IDP integration

Note: This is a major release and contains potential breaking changes. Please backup all your data first before upgrading existing clusters to this version!

• New feature: All configuration options for the entire project have now been moved into a single file, config.yaml. Please consult the README.md how to properly configure your cluster with it. An example config.example.yaml has been included.

• New feature: OIDC integration for Kubernetes authentication with the help of Dex

• New feature: Added Kubernetes cluster scanning with Trivy. Simply run make trivy-scan to scan your cluster.

• Breaking change: The former configuration files credentials.yaml, kubeone.yaml and terraform/terraform.tfvars and their examples have been removed from the project with the introduction of the new main configuration file. There is now a new make step available to generate these based on the main configuration file: make config. Make sure to copy over all your values, credentials and settings into the main configuration file before running the command, as it will overwrite all these other files!

• Breaking change: With the introduction of the new main configuration file, config.yaml, the preconfigured default storage profiles for control-plane and worker VMs have been changed. Thus if you run Terraform it will destroy and recreate all these existing VMs, losing their data. If you wish to avoid this and keep your existing VMs unharmed, then you'll have to make sure to configure their storage profiles (control_plane.storage_profile and workers.storage_profile) and modify/hack the Terraform state files to reflect that.

• Warning: If you upgrade an existing cluster to this version, temporarily add the flag --force-upgrade to the make command kubeone-apply in the Makefile. Otherwise the newly introduced OIDC settings will not be applied to the Kubernetes control-plane and you won't be able to login via OIDC (the default cluster-admin from kubeconfig will still work fine though).

Component updates:

Component	New version
longhorn	1.5.1

Components added:

Component	New version
dex	0.15.2
oauth2-proxy	6.16.1

1.2.0 - Update Kubernetes and Helm charts

This release updates Kubernetes and various Helm chart deployments to newer versions.

Component updates:

Helm chart	New version
kubernetes	1.26.6
cert-manager	1.12.2
grafana	6.57.4
ingress-nginx	4.7.1
loki	5.6.4
opencost	1.14.5
prometheus	22.6.7
promtail	6.11.5

1.1.0 - Update Helm chart deployments

This release updates the Helm chart deployments to newer versions.

Component updates:

Helm chart	New version
cert-manager	1.11.2
grafana	6.56.5
ingress-nginx	4.6.1
kubernetes-dashboard	6.0.8
loki	5.5.5
longhorn	1.4.2
opencost	1.14.3
prometheus	22.6.2
promtail	6.11.2

1.0.0 - Release with Kubernetes 1.26.4

First GA release! 🥳