## What's Changed * etcd-manager: Use image volumes to mount etcd images by @hakman in https://github.com/kubernetes/kops/pull/17539 * Recognize Debian 13 by @rifelpet in https://github.com/kubernetes/kops/pull/17550 * aws: Update EBS CSI driver to v1.47.0 by @hakman in https://github.com/kubernetes/kops/pull/17552 * etcd-manager: Keep the ImageVolume feature gate for K8s 1.35 by @hakman in https://github.com/kubernetes/kops/pull/17553 * Bump ko-build by @ameukam in https://github.com/kubernetes/kops/pull/17559 * Bump Golang to 1.25 by @ameukam in https://github.com/kubernetes/kops/pull/17560 * Add AGENTS.md by @ameukam in https://github.com/kubernetes/kops/pull/17561 * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/17566 * Add instructions to avoid loops by @ameukam in https://github.com/kubernetes/kops/pull/17569 * Golangci-lint v2 fixes by @rifelpet in https://github.com/kubernetes/kops/pull/17573 * Use yum instead of dnf on Amazon Linux 2 by @ConnorJC3 in https://github.com/kubernetes/kops/pull/17557 * build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/17576 * Bump golangci-lint to v2 by @ameukam in https://github.com/kubernetes/kops/pull/17562 * Upgrade AWS Load Balancer Controller to v2.13.4 by @cloud303-pdavis in https://github.com/kubernetes/kops/pull/17571 * nodeup: Simplify the template by removing split-commas by @hakman in https://github.com/kubernetes/kops/pull/17577 * Install cgroupfs-mount for distros lower than Debian Trixie by @ameukam in https://github.com/kubernetes/kops/pull/17581 * Remove unused const, variables and function reported by Golangci-lint by @ameukam in https://github.com/kubernetes/kops/pull/17582 * containerd: Don't install crictl and nerdctl by default by @hakman in https://github.com/kubernetes/kops/pull/17547 * coredns: Relax zonal topologySpreadConstraints by @hakman in https://github.com/kubernetes/kops/pull/17554 * Add nftables package by @ameukam in https://github.com/kubernetes/kops/pull/17583 * Update amazon-ec2-instance-selector to v3.1.1 by @hakman in https://github.com/kubernetes/kops/pull/17586 * Drop ebtables, ethtool and socat by @ameukam in https://github.com/kubernetes/kops/pull/17587 * Update 1.34 release notes by @ameukam in https://github.com/kubernetes/kops/pull/17588 * Update Kubernetes hashes with latest releases by @hakman in https://github.com/kubernetes/kops/pull/17592 * chore: Bump channels with the latest releases by @hakman in https://github.com/kubernetes/kops/pull/17596 * Update release notes for kOps 1.33 by @hakman in https://github.com/kubernetes/kops/pull/17597 * chore: Remove support for Kubernetes 1.28 in kOps 1.34 by @hakman in https://github.com/kubernetes/kops/pull/17598 * build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/17599 * Use only systemd as cgroup driver by @hakman in https://github.com/kubernetes/kops/pull/17600 * Golangci-lint v2 fixes: gocritic by @ameukam in https://github.com/kubernetes/kops/pull/17602 * Ensure containerd starts after dbus by @ameukam in https://github.com/kubernetes/kops/pull/17603 * Update Karpenter to v1.6.2 by @hakman in https://github.com/kubernetes/kops/pull/17567 * build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/17606 * azure: Use internal K8s API endpoint for cloud-node-manager by @hakman in https://github.com/kubernetes/kops/pull/17607 * Bump coredns to 1.12.4 by @ameukam in https://github.com/kubernetes/kops/pull/17609 * Bump k8s assets by @ameukam in https://github.com/kubernetes/kops/pull/17610 * azure: Update getting started docs by @hakman in https://github.com/kubernetes/kops/pull/17612 * azure: Add udev disk rules by @hakman in https://github.com/kubernetes/kops/pull/17611 * Bump versions in netlify and mkdocs by @hakman in https://github.com/kubernetes/kops/pull/17614 * nodeup: Use embed for containerd license by @hakman in https://github.com/kubernetes/kops/pull/17613 * Update etcd-manager to v3.0.20250917 by @hakman in https://github.com/kubernetes/kops/pull/17615 * Update etcd to v3.6.4 for K8s 1.34+ by @hakman in https://github.com/kubernetes/kops/pull/17616 * Update Karpenter to v1.7.1 by @hakman in https://github.com/kubernetes/kops/pull/17624 * docs: migrate to control-plane nomenclature by @apeabody in https://github.com/kubernetes/kops/pull/17618 * Add support for `cilium-etcd` with `dns=none` by @hakman in https://github.com/kubernetes/kops/pull/17625 * Update Cilium to v1.18.2 by @hakman in https://github.com/kubernetes/kops/pull/17601 * feat: add CPU and memory resource configuration for AWS Load Balancer Controller by @ana-aguilar7 in https://github.com/kubernetes/kops/pull/17608 * aws: Update VPC CNI to v1.20.2 by @hakman in https://github.com/kubernetes/kops/pull/17629 * Update Calico to v3.30.3 by @hakman in https://github.com/kubernetes/kops/pull/17628 * build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/17632 * Restore default SELinux security contexts for containerd binaries by @hakman in https://github.com/kubernetes/kops/pull/17633 * Update etcd to v3.6.5 for K8s 1.34+ by @hakman in https://github.com/kubernetes/kops/pull/17637 * Update cluster-autoscaler to v1.34.0 releases by @hakman in https://github.com/kubernetes/kops/pull/17640 * Remove Canal support by @hakman in https://github.com/kubernetes/kops/pull/17642 * Update Flannel to v0.27.4 by @hakman in https://github.com/kubernetes/kops/pull/17641 * Update dependencies by @hakman in https://github.com/kubernetes/kops/pull/17643 * Update CCM for AWS, Azure and Hetzner by @hakman in https://github.com/kubernetes/kops/pull/17644 * Update codegen to v0.34.1 by @hakman in https://github.com/kubernetes/kops/pull/17645 * Release 1.34.0-beta.1 by @hakman in https://github.com/kubernetes/kops/pull/17646 ## New Contributors * @ConnorJC3 made their first contribution in https://github.com/kubernetes/kops/pull/17557 * @cloud303-pdavis made their first contribution in https://github.com/kubernetes/kops/pull/17571 * @apeabody made their first contribution in https://github.com/kubernetes/kops/pull/17618 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.34.0-alpha.1...v1.34.0-beta.1

## What's Changed * channels: Bump Azure image by @hakman in https://github.com/kubernetes/kops/pull/17479 * azure: Fix small issues related to role assignments by @hakman in https://github.com/kubernetes/kops/pull/17478 * azure: Deploy cloud-node-manager for K8s 1.31+ by @hakman in https://github.com/kubernetes/kops/pull/17483 * Fix `--cloud-provider` flag for K8s 1.31+ by @hakman in https://github.com/kubernetes/kops/pull/17482 * docs: Fix release notes deprecations by @hakman in https://github.com/kubernetes/kops/pull/17481 * aws: Update ecr-credential-provider to v1.31.7 by @hakman in https://github.com/kubernetes/kops/pull/17486 * Update ecr-credential-provider checksums by @rsafonseca in https://github.com/kubernetes/kops/pull/17491 * Upgrade node-local-dns from 1.23.0 to 1.26.0 by @rsafonseca in https://github.com/kubernetes/kops/pull/17490 * azure: Track resources by ID during deletion by @hakman in https://github.com/kubernetes/kops/pull/17493 * Introduce flag use-kubeconfig which allows loading from the local kubeconfig by @justinsb in https://github.com/kubernetes/kops/pull/17494 * Normalize the hardcoded images used for warmpool pre-pulling by @rifelpet in https://github.com/kubernetes/kops/pull/17144 * Reduce verbosity of k8s version warning by @rifelpet in https://github.com/kubernetes/kops/pull/17498 * Fix invalid filters for describing security group rules by @rifelpet in https://github.com/kubernetes/kops/pull/17500 * azure: Add e2e testing by @hakman in https://github.com/kubernetes/kops/pull/17497 * azure: Add defaults for network CIDR and subscription ID by @hakman in https://github.com/kubernetes/kops/pull/17504 * chore: Use constants for default network CIDRs by @hakman in https://github.com/kubernetes/kops/pull/17505 * azure: Use `kops` as the default admin user by @hakman in https://github.com/kubernetes/kops/pull/17506 * azure: Use creation timestamp tag in e2e tests by @hakman in https://github.com/kubernetes/kops/pull/17507 * protokube: Initialize CloudProvider only with Gossip by @hakman in https://github.com/kubernetes/kops/pull/17509 * Wait for GCE disk creation operation by @ouillie in https://github.com/kubernetes/kops/pull/17512 * Don't require `.` in `dns=none` cluster names by @hakman in https://github.com/kubernetes/kops/pull/17515 * Prefer using `id_ed25519.pub` instead of `id_rsa.pub` by @hakman in https://github.com/kubernetes/kops/pull/17516 * azure: Fix periodic tests by @hakman in https://github.com/kubernetes/kops/pull/17517 * (Experimental) bare-metal with IPv6 by @justinsb in https://github.com/kubernetes/kops/pull/16944 * testing: Fix e2e test job name by @hakman in https://github.com/kubernetes/kops/pull/17523 * aws: Add support for using ECR as pull-through image cache by @rsafonseca in https://github.com/kubernetes/kops/pull/16593 * Add support for passing image for nvidia-k8s-device-plugin by @sats-23 in https://github.com/kubernetes/kops/pull/17519 * aws: added permissions to RW*TargetGroupAttributes to CCM by @mtulio in https://github.com/kubernetes/kops/pull/17521 * Add more context to terraform fatal log by @rifelpet in https://github.com/kubernetes/kops/pull/17524 * Use ssm parameter for AMI ID in LBC scenario by @rifelpet in https://github.com/kubernetes/kops/pull/17525 * Add round-trip tests / PodCIDR to all versions by @justinsb in https://github.com/kubernetes/kops/pull/17526 * Update containerd to v1.7.28 by @hakman in https://github.com/kubernetes/kops/pull/17527 * Use official etcd images from `registry.k8s.io` by @hakman in https://github.com/kubernetes/kops/pull/17485 * metal: Update Debian image by @hakman in https://github.com/kubernetes/kops/pull/17531 * Update containerd to v2.1.4 by @hakman in https://github.com/kubernetes/kops/pull/17532 * tests: Skip failing CNI tests by @hakman in https://github.com/kubernetes/kops/pull/17533 * build(deps): bump actions/setup-go from 5.1.0 to 5.5.0 by @dependabot[bot] in https://github.com/kubernetes/kops/pull/17537 * azure: Fix rolling-update error by @hakman in https://github.com/kubernetes/kops/pull/17538 * Update etcd-manager to v3.0.20250803 by @hakman in https://github.com/kubernetes/kops/pull/17540 * Skip tests-e2e-scenarios-bare-metal-ipv6 when `version.go` changes by @hakman in https://github.com/kubernetes/kops/pull/17549 * Release 1.34.0-alpha.1 by @hakman in https://github.com/kubernetes/kops/pull/17548 ## New Contributors * @ouillie made their first contribution in https://github.com/kubernetes/kops/pull/17512 * @sats-23 made their first contribution in https://github.com/kubernetes/kops/pull/17519 * @mtulio made their first contribution in https://github.com/kubernetes/kops/pull/17521 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.33.0-beta.1...v1.34.0-alpha.1

## What's Changed * Automated cherry pick of #17478: Fix role assignment for cluster resource group #17483: azure: Deploy cloud-node-manager for K8s 1.31+ by @hakman in https://github.com/kubernetes/kops/pull/17487 * Automated cherry pick of #17482: Fix cloud-provider flag for K8s 1.31+ by @hakman in https://github.com/kubernetes/kops/pull/17488 * Automated cherry pick of #17500: Fix invalid filters for describing security group rules by @rifelpet in https://github.com/kubernetes/kops/pull/17501 * Automated cherry pick of #17512: Wait for the GCE disk creation operation to finish by @hakman in https://github.com/kubernetes/kops/pull/17513 * Automated cherry pick of #17523: testing: Fix e2e test job name by @hakman in https://github.com/kubernetes/kops/pull/17529 * Automated cherry pick of #17531: metal: Update Debian image by @hakman in https://github.com/kubernetes/kops/pull/17534 * Automated cherry pick of #17485: Use official etcd images from registry.k8s.io by @hakman in https://github.com/kubernetes/kops/pull/17536 * Automated cherry pick of #17527: Update containerd to v1.7.28 by @hakman in https://github.com/kubernetes/kops/pull/17528 * Automated cherry pick of #17540: Update etcd-manager to v3.0.20250803 by @hakman in https://github.com/kubernetes/kops/pull/17541 * Automated cherry pick of #16593: Add support for using ECR as pull-through image cache by @hakman in https://github.com/kubernetes/kops/pull/17545 * Release 1.33.0 by @hakman in https://github.com/kubernetes/kops/pull/17546 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.33.0-beta.1...v1.33.0

## Release notes for kOps 1.32 series kOps 1.32 is a smaller release without significant additional features beyond updated support for kubernetes 1.32 and associated ecosystem updates. Significant kOps features will instead target kOps 1.33. # Significant changes ## Kubernetes minor version upgrades to 1.31 or later should be performed using the `kops reconcile cluster command. * Kubernetes 1.31 introduced stricter checks around the version-skew policy. While kOps has always followed the version-skew policy, there was an edge case: nodes that were added by an autoscaler during a rolling-update would not always follow the version-skew policy. We recommend trying the new kops reconcile command, see [docs/tutorial/upgrading-kubernetes.md](https://github.com/kubernetes/kops/blob/master/docs/tutorial/upgrading-kubernetes.md) for more details. The `kops reconcile` functionality was introduced in kOps 1.32. * flannel is no longer planned to be removed and has been updated to v0.26.4. # Deprecations * Support for Kubernetes version 1.26 is deprecated and is removed in kOps 1.32. * Support for Kubernetes version 1.27 is deprecated and will be removed in kOps 1.33. ## What's Changed * Don't require PriorityClassName to pass missing-static-pod checks by @johngmyers in https://github.com/kubernetes/kops/pull/10049 * Upgrade aws-iam-authenticator to 0.5.2 by @rifelpet in https://github.com/kubernetes/kops/pull/10047 * Recommend kops 1.18.1 for kops >= 1.15 in alpha channel by @johngmyers in https://github.com/kubernetes/kops/pull/10051 * upgrade-cluster: test that new image in stable or alpha channel will … by @nvanheuverzwijn in https://github.com/kubernetes/kops/pull/10052 * Release 1.19.0-alpha.5 by @hakman in https://github.com/kubernetes/kops/pull/10054 * Release notes for 1.19.0-alpha.5 by @hakman in https://github.com/kubernetes/kops/pull/10055 * Rewrite ssh user to ubuntu in bastions docs by @h3poteto in https://github.com/kubernetes/kops/pull/10044 * Updating alpha with October releases and latest Ubuntu AMI version by @moshevayner in https://github.com/kubernetes/kops/pull/10062 * Simplify node local dns by @olemarkus in https://github.com/kubernetes/kops/pull/10059 * Fix bug in MergeAddons and test by @nckturner in https://github.com/kubernetes/kops/pull/10045 * do not create egress rules when using vipacl octavia by @zetaab in https://github.com/kubernetes/kops/pull/10061 * Add some quick notes on how to get GPU opertor working by @olemarkus in https://github.com/kubernetes/kops/pull/10067 * Add some missing notes to the release notes by @olemarkus in https://github.com/kubernetes/kops/pull/10056 * Cleanup channels error output by @rifelpet in https://github.com/kubernetes/kops/pull/10068 * Add eBPF dataplane support for Calico CNI by @hakman in https://github.com/kubernetes/kops/pull/10069 * Upgrade aws sdk to 1.35.10 by @rifelpet in https://github.com/kubernetes/kops/pull/10074 * Use AWS SDK lists of enum values for API validation by @rifelpet in https://github.com/kubernetes/kops/pull/10075 * Allow more volume types by @olemarkus in https://github.com/kubernetes/kops/pull/10073 * Initial kubetest2 structure for e2e testing by @rifelpet in https://github.com/kubernetes/kops/pull/10031 * Hotfix/10015 cloud formation lint error by @binkkatal in https://github.com/kubernetes/kops/pull/10066 * Update docs for cutting new release branches by @rifelpet in https://github.com/kubernetes/kops/pull/10084 * Update security_groups.md by @yurrriq in https://github.com/kubernetes/kops/pull/10078 * Take node labels from cloud tags on AWS by @johngmyers in https://github.com/kubernetes/kops/pull/9575 * Update Office Hours Zoom link by @johngmyers in https://github.com/kubernetes/kops/pull/10087 * Update zoom links on the spanish README by @rdrgmnzs in https://github.com/kubernetes/kops/pull/10088 * Ignore changes to ForAPIServer field by @justinsb in https://github.com/kubernetes/kops/pull/10086 * Update Flannel CNI to v0.13.0 by @hakman in https://github.com/kubernetes/kops/pull/10064 * kubetest2 - Implement create/validate/delete cluster functionality by @rifelpet in https://github.com/kubernetes/kops/pull/10083 * Cert circular deps by @olemarkus in https://github.com/kubernetes/kops/pull/10092 * Fix cilium template by specifying boolean as a string for enable-metrics by @h3poteto in https://github.com/kubernetes/kops/pull/10094 * Release notes for 1.18.2 by @justinsb in https://github.com/kubernetes/kops/pull/10097 * Update Kops Go build supported versions 1.15 by @bmelbourne in https://github.com/kubernetes/kops/pull/10099 * Spotinst: Bump the Spot Cluster Controller to 1.0.68 by @liranp in https://github.com/kubernetes/kops/pull/10103 * Remove hack/workaround from etcd-manager certificate expiration advisory by @hakman in https://github.com/kubernetes/kops/pull/10102 * Install container runtime packages as assets by @hakman in https://github.com/kubernetes/kops/pull/10048 * Default to exporting a kubecfg, even without credentials by @justinsb in https://github.com/kubernetes/kops/pull/10105 * Remove dependency of TerraformJSON feature flag by @johngmyers in https://github.com/kubernetes/kops/pull/10106 * Makefile and hack script cleanup by @rifelpet in https://github.com/kubernetes/kops/pull/10112 * Update channels by @hakman in https://github.com/kubernetes/kops/pull/10117 * Update Calico config for eBPF mode by @hakman in https://github.com/kubernetes/kops/pull/10115 * Add random AWS zone logic + specify build stage location by @rifelpet in https://github.com/kubernetes/kops/pull/10121 * Update AWS VPC CNI to 1.7.5 by @moshevayner in https://github.com/kubernetes/kops/pull/10124 * Add nodeLocalDNSCache.kubeDnsOnly option by @javipolo in https://github.com/kubernetes/kops/pull/10111 * Align AWS VPC CNI manifest with upstream by @hakman in https://github.com/kubernetes/kops/pull/10126 * Fix release notes links to point to https://kops.sigs.k8s by @hakman in https://github.com/kubernetes/kops/pull/10118 * Add verify-cloudformation script by @rifelpet in https://github.com/kubernetes/kops/pull/10130 * Fix cloudformation lint errors by @rifelpet in https://github.com/kubernetes/kops/pull/10131 * Update shell style for CLI docs for better compatibility by @hakman in https://github.com/kubernetes/kops/pull/10128 * Prevent unintended resource updates to LB attatchments by @rdrgmnzs in https://github.com/kubernetes/kops/pull/9794 * Make verify-cloudformation job fail when issues are found by @rifelpet in https://github.com/kubernetes/kops/pull/10133 * Set minimum Terraform version to 0.12.26/0.13.0 by @bmelbourne in https://github.com/kubernetes/kops/pull/10109 * ELB/TargetGroup/ASG attachment fixes by @rifelpet in https://github.com/kubernetes/kops/pull/10138 * Prepare for version 1.20 by @johngmyers in https://github.com/kubernetes/kops/pull/10101 * Rebrand kops to kOps by @hakman in https://github.com/kubernetes/kops/pull/10077 * Remove code for no-longer-supported k8s releases by @johngmyers in https://github.com/kubernetes/kops/pull/10141 * allow reauth for openstack client by @zetaab in https://github.com/kubernetes/kops/pull/10144 * Simplify etcd options builder by @hakman in https://github.com/kubernetes/kops/pull/10145 * Update AWS Cloudmock for complex and externallb integration test clusters by @rifelpet in https://github.com/kubernetes/kops/pull/10140 * Deprecate field calico.majorVersion by @hakman in https://github.com/kubernetes/kops/pull/10143 * [Digital Ocean] Use Debian10 as default image by @srikiz in https://github.com/kubernetes/kops/pull/10098 * Implement API load balancer class with NLB and ELB support on AWS by @christianjoun in https://github.com/kubernetes/kops/pull/9011 * Fix NLB naming for terraform and cloudformation targets by @rifelpet in https://github.com/kubernetes/kops/pull/10158 * Move NLB's VPC CIDR security group rule logic into model by @rifelpet in https://github.com/kubernetes/kops/pull/10161 * Fix additionalSecurityGroups support for NLB by @rifelpet in https://github.com/kubernetes/kops/pull/10162 * Some typos by @zouy414 in https://github.com/kubernetes/kops/pull/10160 * Fix output for CF and TF by @hakman in https://github.com/kubernetes/kops/pull/10164 * Mount the whole /etc/ssl/certs directory for k8s-ec2-srcdst by @kitos9112 in https://github.com/kubernetes/kops/pull/10169 * Avoid waiting on validation during rolling update for inapplicable instance groups by @bharath-123 in https://github.com/kubernetes/kops/pull/10065 * OpenStack Reset deviceID status if needed by @zetaab in https://github.com/kubernetes/kops/pull/10178 * Remove unused bearer token field from kubeconfig builder by @rifelpet in https://github.com/kubernetes/kops/pull/10181 * Compare KubernetesAPIAccess to OpenStack allowedCIDRs deterministically by @havulv in https://github.com/kubernetes/kops/pull/10186 * Consistent naming of security group rules by @olemarkus in https://github.com/kubernetes/kops/pull/10179 * Upgrade Hashicorp HCLv2 Go module v2.7.0 by @bmelbourne in https://github.com/kubernetes/kops/pull/10189 * Fix auto scaling group changes when using spot instances by @hakman in https://github.com/kubernetes/kops/pull/10187 * Upgrade sprig to v3 by @olemarkus in https://github.com/kubernetes/kops/pull/10191 * Upgrade helm to 2.17 and use the helm.sh reference by @olemarkus in https://github.com/kubernetes/kops/pull/10192 * Fix AWS NLB reconciliation by @hakman in https://github.com/kubernetes/kops/pull/10199 * Fix disabling spot instances when using launch templates by @hakman in https://github.com/kubernetes/kops/pull/10198 * Add ACM cert permalink by @rifelpet in https://github.com/kubernetes/kops/pull/10156 * Setup a second NLB listener when an AWS ACM certificate is used by @rifelpet in https://github.com/kubernetes/kops/pull/10157 * Update Go to v1.15.4 by @hakman in https://github.com/kubernetes/kops/pull/10209 * Upgrade docker client by @olemarkus in https://github.com/kubernetes/kops/pull/10193 * Spotinst: Configure Resource Limits in Ocean Auto Scaler by @liranp in https://github.com/kubernetes/kops/pull/10190 * Release notes 1.19.0-beta.1 by @hakman in https://github.com/kubernetes/kops/pull/10213 * Use LaunchTemplate versions instead of timestamped LaunchTemplates by @hakman in https://github.com/kubernetes/kops/pull/10151 * Update kOps version after 1.19.0-beta.1 release by @hakman in https://github.com/kubernetes/kops/pull/10216 * Remove components from cluster validation by @johngmyers in https://github.com/kubernetes/kops/pull/10214 * Allow to use custom csi plugin image and enable topology support by @zetaab in https://github.com/kubernetes/kops/pull/10215 * Update validate cluster cli docs by @johngmyers in https://github.com/kubernetes/kops/pull/10219 * Fix cluster autoscaler docs by @djablonski-moia in https://github.com/kubernetes/kops/pull/10225 * Make etcd-manager log verbosity configurable by @elblivion in https://github.com/kubernetes/kops/pull/10194 * Update k8s versions nov 2020 by @moshevayner in https://github.com/kubernetes/kops/pull/10227 * Update Ubuntu ami to latest version by @moshevayner in https://github.com/kubernetes/kops/pull/10195 * Fix various nits by @hakman in https://github.com/kubernetes/kops/pull/10217 * Switch ARM64 CI to Graviton2 CPU by @hakman in https://github.com/kubernetes/kops/pull/10230 * Update docs related to audit logging by @hakman in https://github.com/kubernetes/kops/pull/10231 * Don't install the misc packages for k8s 1.20+ by @johngmyers in https://github.com/kubernetes/kops/pull/10222 * Fix readme by @karancode in https://github.com/kubernetes/kops/pull/10228 * Update kops as kOps and remove extra spaces from .md files by @axpraka in https://github.com/kubernetes/kops/pull/10235 * Add default runtime and runtimes fields in the docker config by @bharath-123 in https://github.com/kubernetes/kops/pull/10238 * Fix cluster validation dependency on local kubeconfig by @eddycharly in https://github.com/kubernetes/kops/pull/10221 * Associate instance group to pod validation failures in cluster validation. by @bharath-123 in https://github.com/kubernetes/kops/pull/10237 * Add HPA Flags for `horizontal-pod-autoscaler-initial-readiness-delay` & `horizontal-pod-autoscaler-cpu-initialization-period` by @JoelBCarter in https://github.com/kubernetes/kops/pull/10241 * Remove more code specific to unsupported etcd v2 by @johngmyers in https://github.com/kubernetes/kops/pull/10245 * GCE: ignore (output-only) networkInterface.name by @justinsb in https://github.com/kubernetes/kops/pull/10242 * Make it possible to use OnDelete update strategy on addon daemonset by @olemarkus in https://github.com/kubernetes/kops/pull/10167 * Fix version of storage-aws addon manifest by @johngmyers in https://github.com/kubernetes/kops/pull/10247 * Fix cloudformation lint job by @rifelpet in https://github.com/kubernetes/kops/pull/10256 * Update etcd-manager to 3.0.20201117 by @justinsb in https://github.com/kubernetes/kops/pull/10257 * Use separate domain for kops-controller bootstrap by @johngmyers in https://github.com/kubernetes/kops/pull/10239 * Revert "Switch ARM64 CI to Graviton2 CPU" by @hakman in https://github.com/kubernetes/kops/pull/10262 * Update Bazel rules for Go to v0.24.7 by @hakman in https://github.com/kubernetes/kops/pull/10240 * Update k8s dependencies to 1.20.0-beta.2 by @rifelpet in https://github.com/kubernetes/kops/pull/10266 * Push multi-arch images by @hakman in https://github.com/kubernetes/kops/pull/10265 * alpha channel: update legacy images by @justinsb in https://github.com/kubernetes/kops/pull/10269 * Fix multi-arch image pushing by @hakman in https://github.com/kubernetes/kops/pull/10270 * Add sslPolicy for NLB to change listener's security policy by @FrankYang0529 in https://github.com/kubernetes/kops/pull/9666 * Optimize Bazel builds by os and arch by @hakman in https://github.com/kubernetes/kops/pull/10267 * Fix incorrect URLs in kops cluster documentation by @bycEEE in https://github.com/kubernetes/kops/pull/10274 * Use etcd v3.4.13 for k8s v1.19+ by @hakman in https://github.com/kubernetes/kops/pull/10277 * Parse TargetGroup names from ARNs by @hakman in https://github.com/kubernetes/kops/pull/10276 * Add Go code-generator v0.20.0-beta.2 crypto hash by @bmelbourne in https://github.com/kubernetes/kops/pull/10285 * Add ACM/NLB instructions to 1.19 release notes by @rifelpet in https://github.com/kubernetes/kops/pull/10292 * Release notes for 1.19.0-beta.2 by @hakman in https://github.com/kubernetes/kops/pull/10293 * Add more NLB release notes and documentation by @rifelpet in https://github.com/kubernetes/kops/pull/10294 * Can check cert expiry using openssl by @alok87 in https://github.com/kubernetes/kops/pull/10282 * [weave] Add support for default version override by @dntosas in https://github.com/kubernetes/kops/pull/10273 * Add support of Azure Blob storage to VFS by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/10258 * Update kOps version after 1.19.0-beta.2 release by @hakman in https://github.com/kubernetes/kops/pull/10295 * Remove support for using legacy ELB name by @hakman in https://github.com/kubernetes/kops/pull/10296 * Remove dead code by @hakman in https://github.com/kubernetes/kops/pull/10297 * Remove support for disabling manifest normalization by @johngmyers in https://github.com/kubernetes/kops/pull/10298 * Upgrade cloud-provider-openstack to 1.19.2 by @rifelpet in https://github.com/kubernetes/kops/pull/10303 * Fix a typo in an error message returned from buildAzureBlobPath by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/10305 * Allow setting CPU limit and Mem request / limit for kube API server by @rdrgmnzs in https://github.com/kubernetes/kops/pull/10275 * Optimize Bazel dev builds by arch by @hakman in https://github.com/kubernetes/kops/pull/10309 * Update Calico to v3.17.0 by @hakman in https://github.com/kubernetes/kops/pull/10310 * [Digital Ocean] Upgrade godo sdk to v1.54 by @srikiz in https://github.com/kubernetes/kops/pull/10320 * Tolerate missing detached EC2 instances by @hwoarang in https://github.com/kubernetes/kops/pull/10319 * Don't try to detach masters by @olemarkus in https://github.com/kubernetes/kops/pull/10328 * Remove copyright notice from nodeup scripts to reduce the user-data size. by @rdrgmnzs in https://github.com/kubernetes/kops/pull/10333 * Add docs for metrics server by @olemarkus in https://github.com/kubernetes/kops/pull/10332 * Push alpha to stable by @moshevayner in https://github.com/kubernetes/kops/pull/10336 * Add paramaeters related to Taint based Evictions in kube-apiserver by @h3poteto in https://github.com/kubernetes/kops/pull/10339 * Allow using gp3 for root volumes by @olemarkus in https://github.com/kubernetes/kops/pull/10345 * Update containerd and Docker versions by @hakman in https://github.com/kubernetes/kops/pull/10341 * Update aws-sdk-go to v1.36.0 by @hakman in https://github.com/kubernetes/kops/pull/10347 * Bump aws-vpc-cni version to 1.7.6 by @moshevayner in https://github.com/kubernetes/kops/pull/10337 * Update etcd-manager to 3.0.20201202 by @justinsb in https://github.com/kubernetes/kops/pull/10351 * Update DigitalOcean cloud-controller-manager to v0.1.30 by @timoreimann in https://github.com/kubernetes/kops/pull/10352 * Add aws-cloud-controller-manager config to addons by @nckturner in https://github.com/kubernetes/kops/pull/9704 * Allow attaching same external target group to multiple instance groups by @hakman in https://github.com/kubernetes/kops/pull/10335 * Add fuzzer and OSS-fuzz build script by @AdamKorcz in https://github.com/kubernetes/kops/pull/10326 * Set --service-account-issuer for k8s 1.20+ by @johngmyers in https://github.com/kubernetes/kops/pull/10284 * Promote addon docs to first level menu item by @olemarkus in https://github.com/kubernetes/kops/pull/10355 * [Digital Ocean] Promote to Beta by @srikiz in https://github.com/kubernetes/kops/pull/10312 * Give users the option to gzip and base64 encode the heredocs in the nodeup.sh user-data by @rdrgmnzs in https://github.com/kubernetes/kops/pull/10357 * Add integration test for creating an HA cluster in shared zone by @hakman in https://github.com/kubernetes/kops/pull/10365 * Add minimal cert-manager addon by @olemarkus in https://github.com/kubernetes/kops/pull/10318 * Add option to reuse existing Elastic IPs for NAT gateways by @hakman in https://github.com/kubernetes/kops/pull/10374 * Remove resource limits from cluster autoscaler by @olemarkus in https://github.com/kubernetes/kops/pull/10375 * Remove dependency on TravisCI by @hakman in https://github.com/kubernetes/kops/pull/10366 * fix cluster-autoscaler README url from cluster_spec -> addons by @isaachui in https://github.com/kubernetes/kops/pull/10373 * Rename duplicate ci target to quick-ci by @hakman in https://github.com/kubernetes/kops/pull/10378 * Use custom-configured ServiceAccountIssuer when present by @johngmyers in https://github.com/kubernetes/kops/pull/10364 * Add option for setting the volume encryption key in AWS by @hakman in https://github.com/kubernetes/kops/pull/10359 * Add support for AWS IMDS v2 by @bharath-123 in https://github.com/kubernetes/kops/pull/10324 * Update k8s dependencies to v1.20.0 by @hakman in https://github.com/kubernetes/kops/pull/10390 * Update docs for CentOS 8 by @hakman in https://github.com/kubernetes/kops/pull/10368 * Move tools into separate `hack` go module by @rifelpet in https://github.com/kubernetes/kops/pull/10308 * Update etcd-manager to 20201209 by @justinsb in https://github.com/kubernetes/kops/pull/10394 * Mount /lib64 for Protokube only on AMD64 by @hakman in https://github.com/kubernetes/kops/pull/10396 * Explicitly specify http_endpoint in terraform launch template by @bharath-123 in https://github.com/kubernetes/kops/pull/10398 * Update alpha channel with December 2020 k8s releases and bump Ubuntu AMI version by @moshevayner in https://github.com/kubernetes/kops/pull/10401 * Hack script improvements by @rifelpet in https://github.com/kubernetes/kops/pull/10407 * hack/goimports - Replace mapfile with read by @rifelpet in https://github.com/kubernetes/kops/pull/10410 * Allow override of registry and tag for Calico images by @hakman in https://github.com/kubernetes/kops/pull/10316 * Update Calico to v3.17.1 by @hakman in https://github.com/kubernetes/kops/pull/10408 * Bump aws-cni to 1.7.7 by @moshevayner in https://github.com/kubernetes/kops/pull/10416 * Add support for containerd v1.4.3 ARM64 by @hakman in https://github.com/kubernetes/kops/pull/10418 * Add release note for terraform launch template migration by @rifelpet in https://github.com/kubernetes/kops/pull/10423 * Expose metrics port when PrometheusMetricsEnabled set to true in Calico by @avdhoot in https://github.com/kubernetes/kops/pull/10414 * Bump etcd client to 3.4.13. Use go modules by @olemarkus in https://github.com/kubernetes/kops/pull/10425 * Use the kubernetes-sigs version of yaml by @olemarkus in https://github.com/kubernetes/kops/pull/10427 * Bump heredoc to v2 by @olemarkus in https://github.com/kubernetes/kops/pull/10429 * Update container runtime service files by @hakman in https://github.com/kubernetes/kops/pull/10428 * Template functions for recommended kubernetes versions by @olemarkus in https://github.com/kubernetes/kops/pull/10369 * Make CoreDNS the default DNS server by @rajansandeep in https://github.com/kubernetes/kops/pull/7919 * Delay defaulting to CoreDNS to k8s v1.20 by @hakman in https://github.com/kubernetes/kops/pull/10435 * Bump go-bindata and use go module by @olemarkus in https://github.com/kubernetes/kops/pull/10421 * Bump sftp to 1.12 by @olemarkus in https://github.com/kubernetes/kops/pull/10436 * IAM ServiceAccount Roles: truncate name at 64 characters by @justinsb in https://github.com/kubernetes/kops/pull/10437 * Bump helm to v3 by @olemarkus in https://github.com/kubernetes/kops/pull/10426 * cloudmock - guard the VPC CIDR association calls with a mutex by @rifelpet in https://github.com/kubernetes/kops/pull/10440 * Upgrade mkdocs dependencies to latest by @rifelpet in https://github.com/kubernetes/kops/pull/10433 * Spotinst: Schedule Ocean Controller to Linux nodes only by @liranp in https://github.com/kubernetes/kops/pull/10444 * Bump AWS-CNI to version 1.7.8 by @moshevayner in https://github.com/kubernetes/kops/pull/10447 * protokube - query host by label when setting tags by @rdrgmnzs in https://github.com/kubernetes/kops/pull/10413 * Allow Calico to run on systems with loose reverse path forwarding by @hakman in https://github.com/kubernetes/kops/pull/10442 * Bump k8s versions on alpha and bump Ubuntu AMI version on stable by @moshevayner in https://github.com/kubernetes/kops/pull/10464 * Remove gjtempleton as reviewer by @gjtempleton in https://github.com/kubernetes/kops/pull/10466 * Calico: Allow operators to choose which encapsulation mode to use by @seh in https://github.com/kubernetes/kops/pull/10404 * Spotinst: Ignore volume type case sensitivity to prevent unnecessary updates by @liranp in https://github.com/kubernetes/kops/pull/10450 * Spotinst: Expose Ocean Headroom percentage and autoconfig labels by @liranp in https://github.com/kubernetes/kops/pull/10449 * Spotinst: Support for multiple subnets per zone by @liranp in https://github.com/kubernetes/kops/pull/10452 * Add new-pod-scale-up-delay in Cluster Autoscaler spec by @akshedu in https://github.com/kubernetes/kops/pull/10471 * Replace (some) deprecated ResourceHolder with Resource by @justinsb in https://github.com/kubernetes/kops/pull/10472 * Remove ResourceHolder: remove last usages and remove code by @justinsb in https://github.com/kubernetes/kops/pull/10478 * Refactor MirroredAsset into mirrors package by @justinsb in https://github.com/kubernetes/kops/pull/10475 * Refactor nodeUpConfigBuilder to be standalone by @justinsb in https://github.com/kubernetes/kops/pull/10476 * Avoid recursive type definitions in schema by @justinsb in https://github.com/kubernetes/kops/pull/10482 * Drop support for containerd 1.2 by @hakman in https://github.com/kubernetes/kops/pull/10483 * Update CNI plugins to v0.8.7 by @hakman in https://github.com/kubernetes/kops/pull/10481 * Add Azure support by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/10114 * Refactor GCE InstanceTemplate by @justinsb in https://github.com/kubernetes/kops/pull/10477 * Use Region method of fi.Cloud by @justinsb in https://github.com/kubernetes/kops/pull/10474 * Spotinst: Bump the Ocean Controller to 1.0.69 by @liranp in https://github.com/kubernetes/kops/pull/10487 * Added event-qps and event-burst flags to kubelet by @DOboznyi in https://github.com/kubernetes/kops/pull/10486 * Add config options for container runtime package URL and Hash by @hakman in https://github.com/kubernetes/kops/pull/10473 * Fix cluster setup when KOPS_ARCH is set by @hakman in https://github.com/kubernetes/kops/pull/10496 * Docs: Rename "Development" section to "Contributing" and add instructions to update the base AMI version of Ubuntu by @moshevayner in https://github.com/kubernetes/kops/pull/10455 * Release notes for 1.19.0-beta.3 by @hakman in https://github.com/kubernetes/kops/pull/10497 * Use containerd.sock for AmazonVPC CNI with containerd by @hakman in https://github.com/kubernetes/kops/pull/10502 * Remove support for Kubenet with containerd by @hakman in https://github.com/kubernetes/kops/pull/10501 * Add containerd option for registry mirrors by @hakman in https://github.com/kubernetes/kops/pull/10507 * Treat InvalidDhcpOptionsId.NotFound as already-deleted by @wongma7 in https://github.com/kubernetes/kops/pull/10508 * Add required toleration to gpu documentation by @silashansen in https://github.com/kubernetes/kops/pull/10509 * AWS IAM Role Tagging by @rifelpet in https://github.com/kubernetes/kops/pull/10488 * Update stable channel with recent k8s releases by @moshevayner in https://github.com/kubernetes/kops/pull/10514 * Run k/k's e2e suite via new kubetest2 make target by @rifelpet in https://github.com/kubernetes/kops/pull/10504 * Remove copyright YEAR from generated Go files by @bmelbourne in https://github.com/kubernetes/kops/pull/10520 * e2e - dump cluster manifests into artifacts and add --kubernetes-version by @rifelpet in https://github.com/kubernetes/kops/pull/10522 * kubetest2: Pass through some AWS env vars by @justinsb in https://github.com/kubernetes/kops/pull/10525 * kubetest2: add initial support for GCE by @justinsb in https://github.com/kubernetes/kops/pull/10524 * Add gp3 Volume Type to etcd by @msidwell in https://github.com/kubernetes/kops/pull/10453 * Only include API server additional security groups in InstanceGroups for masters by @seh in https://github.com/kubernetes/kops/pull/10519 * Update kube-router to v1.1.1 by @hakman in https://github.com/kubernetes/kops/pull/10512 * IRSA - continue adding route53 permisions to masters by @rifelpet in https://github.com/kubernetes/kops/pull/10529 * Add possibility to set volume throughput for gp3 volumes by @hakman in https://github.com/kubernetes/kops/pull/10530 * Prefix etcd cluster names with letters by @hakman in https://github.com/kubernetes/kops/pull/10361 * Recognize ubuntu 20.10 by @justinsb in https://github.com/kubernetes/kops/pull/10278 * Don't allow ebs volume TF resource names to begin with digit by @rifelpet in https://github.com/kubernetes/kops/pull/10424 * Add K8s Docker runtime support deprecation release note by @bmelbourne in https://github.com/kubernetes/kops/pull/10371 * Make it possible to change the etcd volume type and iops by @olemarkus in https://github.com/kubernetes/kops/pull/10461 * Promote Ole Markus to approvers list by @hakman in https://github.com/kubernetes/kops/pull/10542 * Add containerd config file to Flatcar based instances by @hakman in https://github.com/kubernetes/kops/pull/10540 * Add control-plane node role label to cp nodes by @olemarkus in https://github.com/kubernetes/kops/pull/10397 * Move bootstrapchannelbuilder to a dedicated package by @olemarkus in https://github.com/kubernetes/kops/pull/10409 * kubetest2: support specifying admin-access value by @justinsb in https://github.com/kubernetes/kops/pull/10526 * GCE: Don't warn about NVME by @justinsb in https://github.com/kubernetes/kops/pull/10548 * Simple upgrade test using kubetest2 framework by @justinsb in https://github.com/kubernetes/kops/pull/10523 * Refactor and centralize distribution logic by @justinsb in https://github.com/kubernetes/kops/pull/10538 * Fix to handle exit code of gazelle command in hack/verify-bazel.sh by @h3poteto in https://github.com/kubernetes/kops/pull/10182 * COS/GCE: exec on kubelet/flexvolume dirs by @justinsb in https://github.com/kubernetes/kops/pull/10547 * Fix typo in comment by @fenggw-fnst in https://github.com/kubernetes/kops/pull/10541 * Openstack: Prevent data race in servergroup member list by @justinsb in https://github.com/kubernetes/kops/pull/10553 * Updates GCE channels to use ubuntu over COS by @geojaz in https://github.com/kubernetes/kops/pull/10554 * Kubetest2 - use our own tester that wraps kubetest2's ginkgo tester by @rifelpet in https://github.com/kubernetes/kops/pull/10549 * Spotinst: Specify Spot percentage per Instance Group by @liranp in https://github.com/kubernetes/kops/pull/10551 * update gophercloud dependency by @zetaab in https://github.com/kubernetes/kops/pull/10556 * Upgrade Go v1.15.6 / Bazel v3.4.1 by @bmelbourne in https://github.com/kubernetes/kops/pull/10550 * Remove node-authorization by @olemarkus in https://github.com/kubernetes/kops/pull/10439 * [addons/CA] Add support for specifying resources and metrics by @dntosas in https://github.com/kubernetes/kops/pull/10281 * Spotinst: Iterate over metadata labels only once by @liranp in https://github.com/kubernetes/kops/pull/10560 * Default cgroup driver to systemd from k8s 1.20 by @bharath-123 in https://github.com/kubernetes/kops/pull/10419 * AWS CSI driver by @olemarkus in https://github.com/kubernetes/kops/pull/10467 * Upgrade cfn-lint to 0.44.3 by @rifelpet in https://github.com/kubernetes/kops/pull/10565 * Fix file not found error detection in fs:// by @rifelpet in https://github.com/kubernetes/kops/pull/10566 * Fix NLB listener -> target group association for TF & CF by @rifelpet in https://github.com/kubernetes/kops/pull/10567 * Spotinst: Bump the Ocean Controller to 1.0.70 by @liranp in https://github.com/kubernetes/kops/pull/10573 * Spotinst: Specify whether scale-down activities should be restricted by @liranp in https://github.com/kubernetes/kops/pull/10561 * [OpenStack] Use new hash format in instance names by @zetaab in https://github.com/kubernetes/kops/pull/10557 * kubetest2 - Add manifest template support by @rifelpet in https://github.com/kubernetes/kops/pull/10559 * Updates to Alpha versions - k8s & kOps by @moshevayner in https://github.com/kubernetes/kops/pull/10576 * Use Bazel 3.4.1 for postsubmit jobs by @hakman in https://github.com/kubernetes/kops/pull/10578 * Give kubetest2 its own makefile by @rifelpet in https://github.com/kubernetes/kops/pull/10577 * Use consistent naming for the remaining SGRs part two by @olemarkus in https://github.com/kubernetes/kops/pull/10188 * [DigitalOcean] add e2e tests by @srikiz in https://github.com/kubernetes/kops/pull/10575 * Allow nodeup (and others) to replace in-use files by @justinsb in https://github.com/kubernetes/kops/pull/10581 * Dial-down logging on flagbuilder by @justinsb in https://github.com/kubernetes/kops/pull/10582 * Fix default make target by @rifelpet in https://github.com/kubernetes/kops/pull/10584 * containerd: Add /etc/crictl config to enable crictl by @justinsb in https://github.com/kubernetes/kops/pull/10585 * Add CF integration test for gp3 volumes by @hakman in https://github.com/kubernetes/kops/pull/10569 * Release 1.20.0-alpha.1 by @hakman in https://github.com/kubernetes/kops/pull/10591 * Release notes for 1.20.0-alpha.1 by @hakman in https://github.com/kubernetes/kops/pull/10592 * Make cluster proportional autoscaler image configurable. by @bjhaid in https://github.com/kubernetes/kops/pull/10564 * Set default container runtime to containerd by @bmelbourne in https://github.com/kubernetes/kops/pull/10370 * Fix minor docs typos by @JamesJJ in https://github.com/kubernetes/kops/pull/10598 * Validate cluster cloud labels by @olemarkus in https://github.com/kubernetes/kops/pull/10599 * Exclude terraform.lock.hcl files from Git repo by @bmelbourne in https://github.com/kubernetes/kops/pull/10597 * Provide required --kubernetes-version flags to kubetest2-kops --up by @rifelpet in https://github.com/kubernetes/kops/pull/10600 * Kubetest - add networking support + misc fixes by @rifelpet in https://github.com/kubernetes/kops/pull/10601 * Require KOPS_TERRAFORM_0_12_RENAMED, to guard against tf breakage by @justinsb in https://github.com/kubernetes/kops/pull/10602 * Add troubleshooting documentation by @olemarkus in https://github.com/kubernetes/kops/pull/10594 * Fix menu link to troubleshooting by @olemarkus in https://github.com/kubernetes/kops/pull/10607 * Use kops binary built by kubetest2-kops in upgrade script by @rifelpet in https://github.com/kubernetes/kops/pull/10613 * Warn if cilium encryption is enabled, but no secret has been set by @olemarkus in https://github.com/kubernetes/kops/pull/10608 * kubetest2 upgrade script - PATH needs to be a directory by @rifelpet in https://github.com/kubernetes/kops/pull/10617 * Add support for container-log-max-size/files with kubelet by @hakman in https://github.com/kubernetes/kops/pull/10612 * Add network and router availability zone hints to OpenStack by @ottosulin in https://github.com/kubernetes/kops/pull/10616 * Increase CoreDNS default ttl by @johanneswuerbach in https://github.com/kubernetes/kops/pull/10610 * Update Go to v1.15.7 by @hakman in https://github.com/kubernetes/kops/pull/10614 * kubetest2 - Add support for specifying a kubernetes version marker file by @rifelpet in https://github.com/kubernetes/kops/pull/10620 * kubetest 2 - fix parsing of k8s version semver values by @rifelpet in https://github.com/kubernetes/kops/pull/10621 * Update Weave to v2.8.0 by @hakman in https://github.com/kubernetes/kops/pull/10604 * Update AWS instances defaults by @hakman in https://github.com/kubernetes/kops/pull/10624 * kubetest2 - update the skip regex for the upgrade scenario by @rifelpet in https://github.com/kubernetes/kops/pull/10626 * Install dbus if needed for protokube with containerd by @justinsb in https://github.com/kubernetes/kops/pull/10583 * Ensure SpecOverrideFlag is set in upgrade test by @rifelpet in https://github.com/kubernetes/kops/pull/10628 * Fix unbound variable in upgrade scenario script by @rifelpet in https://github.com/kubernetes/kops/pull/10631 * kubetest2 - increase validation timeout for the upgrade scenario by @hakman in https://github.com/kubernetes/kops/pull/10632 * Add startup probe for calico-kube-controllers by @hakman in https://github.com/kubernetes/kops/pull/10633 * Remove coredns dnsprovider by @olemarkus in https://github.com/kubernetes/kops/pull/10629 * Spotinst: Avoid unnecessary duplication of tasks by @liranp in https://github.com/kubernetes/kops/pull/10630 * enableRemoteNodeIdentity actually defaults to true by @olemarkus in https://github.com/kubernetes/kops/pull/10635 * Replace gopkg yaml with k8s-sigs yaml by @olemarkus in https://github.com/kubernetes/kops/pull/10634 * protokube: Remove unused ExecuteTemplate function by @justinsb in https://github.com/kubernetes/kops/pull/10637 * Fix phony make target for setting up kubetest2 by @rifelpet in https://github.com/kubernetes/kops/pull/10636 * [Digital Ocean] Add SFO3 region. Also update e2e tests to use full list of supported zones by @srikiz in https://github.com/kubernetes/kops/pull/10622 * etcd-manager: Update to 3.0.20210122 by @justinsb in https://github.com/kubernetes/kops/pull/10638 * Update k8s versions in stable channel and bump ubuntu ami version in alpha channel by @moshevayner in https://github.com/kubernetes/kops/pull/10639 * Update kubetest2 library by @rifelpet in https://github.com/kubernetes/kops/pull/10646 * feat: implement azure get api ingress status fn by @ngalantowicz in https://github.com/kubernetes/kops/pull/10609 * Use the same package marker for kubectl as for e2e binary by @rifelpet in https://github.com/kubernetes/kops/pull/10649 * Reword 'what is kOps' by @olemarkus in https://github.com/kubernetes/kops/pull/10570 * Add back support for kubenet style networking with containerd by @hakman in https://github.com/kubernetes/kops/pull/10651 * Add `set instancegroup` command by @gabrieljackson in https://github.com/kubernetes/kops/pull/10593 * Add minimum version info for External Policies by @prashantkalkar in https://github.com/kubernetes/kops/pull/10589 * Set the tcp_rmem sysctl in bootstrap script by @justinsb in https://github.com/kubernetes/kops/pull/10654 * Add --create-args kubetest2 flag by @rifelpet in https://github.com/kubernetes/kops/pull/10658 * Fix cluster_spec.md indentation by @trondhindenes in https://github.com/kubernetes/kops/pull/10660 * Allow attaching same external load balancer to multiple instance groups by @hakman in https://github.com/kubernetes/kops/pull/10666 * Fix typo by @adrianmoisey in https://github.com/kubernetes/kops/pull/10667 * Update kops e2e testing docs by @bmelbourne in https://github.com/kubernetes/kops/pull/10652 * Create default loadbalancer when SSL certificate is specified by @rudeigerc in https://github.com/kubernetes/kops/pull/10665 * Bump Ubuntu images for AWS and GCE by @hakman in https://github.com/kubernetes/kops/pull/10670 * Release notes for 1.18.3 by @justinsb in https://github.com/kubernetes/kops/pull/10673 * Remove taints from spotinst ocean terraform resource by @rifelpet in https://github.com/kubernetes/kops/pull/10674 * Allow SSH user to be overridden for `toolbox dump` by @rifelpet in https://github.com/kubernetes/kops/pull/10675 * kubetest2 - Use --ssh-user to dump logs by @rifelpet in https://github.com/kubernetes/kops/pull/10676 * Update AWS etcd-manager volumes defaults by @hakman in https://github.com/kubernetes/kops/pull/10661 * Update aws-sdk-go to 1.37.0 by @rifelpet in https://github.com/kubernetes/kops/pull/10682 * Release notes for 1.19.0 by @justinsb in https://github.com/kubernetes/kops/pull/10683 * Update release compatibility matrix by @johngmyers in https://github.com/kubernetes/kops/pull/10684 * Default IMDSv2 to "optional" for AWS by @hakman in https://github.com/kubernetes/kops/pull/10655 * Add link to 1.19 by @olemarkus in https://github.com/kubernetes/kops/pull/10686 * Fix header indentation in addons.md by @olemarkus in https://github.com/kubernetes/kops/pull/10685 * Documentation update: Corrected externalPolicy AWS ARN formatting by @timothyclarke in https://github.com/kubernetes/kops/pull/10680 * Remove 'not released' notice from 1.19 notes by @olemarkus in https://github.com/kubernetes/kops/pull/10688 * Fix bug preventing tasks using gp2 by @olemarkus in https://github.com/kubernetes/kops/pull/10694 * Have channels create PKI for addons by @olemarkus in https://github.com/kubernetes/kops/pull/10545 * Add template function returning the latest image by @olemarkus in https://github.com/kubernetes/kops/pull/10689 * Update Weave to v2.8.1 by @hakman in https://github.com/kubernetes/kops/pull/10698 * Increase IMDSv2 hop limit on control plane nodes by @olemarkus in https://github.com/kubernetes/kops/pull/10702 * Kubetest2 - refactor how `kops create cluster` arguments are set by @rifelpet in https://github.com/kubernetes/kops/pull/10701 * Update upgrade test to use 1.18->1.19 by @rifelpet in https://github.com/kubernetes/kops/pull/10710 * Fix create args for upgrade test by @rifelpet in https://github.com/kubernetes/kops/pull/10711 * Docs: Fix ServiceAccountVolume proposed configuration for Istio by @dntosas in https://github.com/kubernetes/kops/pull/10712 * Update the skipped tests in the upgrade job to help the test stage pass by @rifelpet in https://github.com/kubernetes/kops/pull/10713 * Remove unused instanceGroup parameter from setClusterFields by @bharath-123 in https://github.com/kubernetes/kops/pull/10690 * Update code reference links in docs by @bharath-123 in https://github.com/kubernetes/kops/pull/10696 * Fix rendering issue created by #10414 by @avdhoot in https://github.com/kubernetes/kops/pull/10700 * Fix panic when exporting kubecfg for AWS cluster without load balancer by @rifelpet in https://github.com/kubernetes/kops/pull/10720 * Cleanup kops-controller Route53 record during cluster deletion by @rifelpet in https://github.com/kubernetes/kops/pull/10721 * Revert making imdsv2 default by @olemarkus in https://github.com/kubernetes/kops/pull/10729 * Throw error if path being set by kops set is not present in struct by @bharath-123 in https://github.com/kubernetes/kops/pull/10692 * Use expected LaunchTemplateId in updating ASG when MixedInstancePolicy is changed by @h3poteto in https://github.com/kubernetes/kops/pull/10742 * Fix ineffassign issues by @zhijianli88 in https://github.com/kubernetes/kops/pull/10739 * Deprecate aliyun by @olemarkus in https://github.com/kubernetes/kops/pull/10746 * alpha channel: Update older images by @justinsb in https://github.com/kubernetes/kops/pull/10748 * Fix docs build failure by @bharath-123 in https://github.com/kubernetes/kops/pull/10750 * add user agent to openstack api requests by @zetaab in https://github.com/kubernetes/kops/pull/10732 * Add support for cilium 1.9 by @olemarkus in https://github.com/kubernetes/kops/pull/10695 * Use EnsureTask instead of prepending IG names to external ELB tasks by @rifelpet in https://github.com/kubernetes/kops/pull/10754 * nodeup file: Set owner & group when we write the file. by @justinsb in https://github.com/kubernetes/kops/pull/10757 * Always generate kops-controller certs by @hakman in https://github.com/kubernetes/kops/pull/10758 * Release 1.20.0-alpha.2 by @hakman in https://github.com/kubernetes/kops/pull/10765 * Release notes for 1.20.0-alpha.2 by @hakman in https://github.com/kubernetes/kops/pull/10768 * Add troubleshooting of corrupted api server leases by @olemarkus in https://github.com/kubernetes/kops/pull/10764 * Boot nodes without state store access by @justinsb in https://github.com/kubernetes/kops/pull/10469 * Update GCE zones by @bharath-123 in https://github.com/kubernetes/kops/pull/10771 * Kubetest2 - Use a shell lexer for passing extra args to `create cluster` by @rifelpet in https://github.com/kubernetes/kops/pull/10772 * Use the kubeApiServerConfig clientCAFile field by @slu2011 in https://github.com/kubernetes/kops/pull/10707 * Kubetest2 - Fix splitting of --create-args by @rifelpet in https://github.com/kubernetes/kops/pull/10775 * Logging: don't suggest we are pre-creating DNS records unless we are by @justinsb in https://github.com/kubernetes/kops/pull/10782 * Add missing versions to channels by @olemarkus in https://github.com/kubernetes/kops/pull/10781 * fix: asset task copy docker image by @johanneswuerbach in https://github.com/kubernetes/kops/pull/10767 * Add support for creating world-readable managedFiles by @olemarkus in https://github.com/kubernetes/kops/pull/10778 * Update kubectl documentation with new flags by @rpadovani in https://github.com/kubernetes/kops/pull/10779 * Add overrides testing in lifecycle integration tests by @rifelpet in https://github.com/kubernetes/kops/pull/10752 * Add AWS LoadBalancerController by @olemarkus in https://github.com/kubernetes/kops/pull/10489 * Update Calico to v3.17.2 by @hakman in https://github.com/kubernetes/kops/pull/10787 * Enable CSIMigrationAWS if CSI EBS driver is installed by @olemarkus in https://github.com/kubernetes/kops/pull/10791 * Fill Role names in kops-controller-config instead of instance profile names when it is specified by @h3poteto in https://github.com/kubernetes/kops/pull/10728 * Storage: Allow disabling of kOps's management of StorageClasses by @seh in https://github.com/kubernetes/kops/pull/10733 * kubetest2 - Dump all pod logs in addition to host logs by @rifelpet in https://github.com/kubernetes/kops/pull/10799 * Update Docker to v19.03.15 by @hakman in https://github.com/kubernetes/kops/pull/10802 * Fix LaunchSpec TF output by @hakman in https://github.com/kubernetes/kops/pull/10806 * Make protokube CP label setting consistent with kops-controller by @olemarkus in https://github.com/kubernetes/kops/pull/10780 * Add deprecation notice for launch templates. by @bharath-123 in https://github.com/kubernetes/kops/pull/10809 * add azure support for internal loadbalancer to k8s api by @collin-woodruff-t1cg in https://github.com/kubernetes/kops/pull/10744 * Allow managed images for Azure instance groups by @NickSchleicher in https://github.com/kubernetes/kops/pull/10797 * kubenet containerd: match upstream by @justinsb in https://github.com/kubernetes/kops/pull/10759 * kubetest2: Add --host argument by @justinsb in https://github.com/kubernetes/kops/pull/10814 * iptables: Use the lock when checking for existing rules by @justinsb in https://github.com/kubernetes/kops/pull/10812 * Spotinst: Replace corev1.Taint to fix HCL2 serialization by @liranp in https://github.com/kubernetes/kops/pull/10819 * Spotinst: Bump the Ocean Controller to 1.0.72 by @liranp in https://github.com/kubernetes/kops/pull/10820 * Allow to control which subnets and IPs get used for the API loadbalancer by @codablock in https://github.com/kubernetes/kops/pull/10741 * kubetest2: Call Test, not Execute by @justinsb in https://github.com/kubernetes/kops/pull/10824 * Fix kdi 'must specify' error by @olemarkus in https://github.com/kubernetes/kops/pull/10825 * Update aws-sdk-go by @rifelpet in https://github.com/kubernetes/kops/pull/10830 * Use correct tag when creating node labels from azure cloud tags by @NickSchleicher in https://github.com/kubernetes/kops/pull/10619 * Precreate the kops-controller DNS name by @rifelpet in https://github.com/kubernetes/kops/pull/10833 * containerd installation: always configure, even if we don't install by @justinsb in https://github.com/kubernetes/kops/pull/10813 * Release binaries for protokube and channels by @hakman in https://github.com/kubernetes/kops/pull/10840 * Release 1.21.0-alpha.1 by @hakman in https://github.com/kubernetes/kops/pull/10841 * Release notes for 1.21.0-alpha.1 by @hakman in https://github.com/kubernetes/kops/pull/10844 * Update mock to v1.21.0-alpha.1 by @hakman in https://github.com/kubernetes/kops/pull/10845 * Kubetest2 - terraform support by @rifelpet in https://github.com/kubernetes/kops/pull/10697 * Actually enable systemd cgroup for containerd by @codablock in https://github.com/kubernetes/kops/pull/10846 * Update Go to v1.15.8 by @hakman in https://github.com/kubernetes/kops/pull/10853 * Add liveness probe for calico-kube-controllers by @hakman in https://github.com/kubernetes/kops/pull/10856 * Fix OpenStack delete functions by @ottosulin in https://github.com/kubernetes/kops/pull/10849 * Add support for CAS 1.20 + support for disabling CAS for a given IG by @olemarkus in https://github.com/kubernetes/kops/pull/10857 * Bump aws node termination handler to 1.12.0 by @bharath-123 in https://github.com/kubernetes/kops/pull/10863 * Kubetest2 - add ginkgo node debug logs by @rifelpet in https://github.com/kubernetes/kops/pull/10866 * K8s Version Updates February 2021 by @moshevayner in https://github.com/kubernetes/kops/pull/10865 * Add note about remote identities by @olemarkus in https://github.com/kubernetes/kops/pull/10868 * Bump metrics-server to 0.4.2 by @olemarkus in https://github.com/kubernetes/kops/pull/10858 * kubetest2 - support terraform with `kops create cluster` by @rifelpet in https://github.com/kubernetes/kops/pull/10867 * Add validation for instanceType and ami architecture by @bharath-123 in https://github.com/kubernetes/kops/pull/10747 * Upgrade k8s 1.20 to latest patch version by @moshevayner in https://github.com/kubernetes/kops/pull/10875 * Update AWS CNI to latest patch version by @moshevayner in https://github.com/kubernetes/kops/pull/10876 * Fixes for 1.21 e2e tests by @olemarkus in https://github.com/kubernetes/kops/pull/10879 * Release notes for 1.19.1 by @justinsb in https://github.com/kubernetes/kops/pull/10883 * Improve machine type and image validation by @hakman in https://github.com/kubernetes/kops/pull/10884 * fix loadBalancerID null pointer by @collin-woodruff-t1cg in https://github.com/kubernetes/kops/pull/10886 * Update Openstack Cloud Go module to v1.20.1 by @bmelbourne in https://github.com/kubernetes/kops/pull/10896 * Enforce 1.14 deprecation by @olemarkus in https://github.com/kubernetes/kops/pull/10897 * add usage of subnet and routetable shared resources in azure by @ngalantowicz in https://github.com/kubernetes/kops/pull/10900 * Update Calico to v3.18.0 by @hakman in https://github.com/kubernetes/kops/pull/10904 * Adding Elastic IP Allocations to NLB API by @timothyclarke in https://github.com/kubernetes/kops/pull/10872 * Release notes for 1.20.0-beta.1 by @hakman in https://github.com/kubernetes/kops/pull/10909 * Update Google Cloud Go module to v0.77.0 by @bmelbourne in https://github.com/kubernetes/kops/pull/10894 * Add Tagging to Instance Profiles and OIDC Providers by @rifelpet in https://github.com/kubernetes/kops/pull/10832 * AWS LB controller is as of 1.20, not 1.19 by @olemarkus in https://github.com/kubernetes/kops/pull/10919 * Spotinst: Prevent instance groups with the same suffix from being deleted by @liranp in https://github.com/kubernetes/kops/pull/10918 * add support for azure public loadbalancer by @collin-woodruff-t1cg in https://github.com/kubernetes/kops/pull/10915 * Fix nil pointer deference for image ID with spotinst by @hakman in https://github.com/kubernetes/kops/pull/10924 * Update SSH documentation for ubuntu by @jpugliesi in https://github.com/kubernetes/kops/pull/10931 * Fix no-schedule issue by @christian-schlichtherle in https://github.com/kubernetes/kops/pull/10928 * Update Controller Runtime Go module to v0.8.2 by @bmelbourne in https://github.com/kubernetes/kops/pull/10914 * Sort external policies when checking for changes by @hakman in https://github.com/kubernetes/kops/pull/10940 * Instruct GH to collapse BUILD.bazel diffs by default by @rifelpet in https://github.com/kubernetes/kops/pull/10912 * Further improve cloudLabel validation by @olemarkus in https://github.com/kubernetes/kops/pull/10910 * Add a standardised set of labels on all resources by @olemarkus in https://github.com/kubernetes/kops/pull/10796 * Bump external-dns to 0.7.6 by @olemarkus in https://github.com/kubernetes/kops/pull/10946 * Update etcd-manager to 3.0.20210228 by @justinsb in https://github.com/kubernetes/kops/pull/10949 * gce doesn't suffix the IG names with ClusterName by @olemarkus in https://github.com/kubernetes/kops/pull/10944 * Add AWS Transit Gateway support by @rifelpet in https://github.com/kubernetes/kops/pull/10948 * Fix node label conversion in Azure by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/10935 * Allow multi-CNI setups to set usesSecondaryIP by @ravens in https://github.com/kubernetes/kops/pull/10828 * Spotinst: Bump the Ocean Controller to 1.0.73 by @liranp in https://github.com/kubernetes/kops/pull/10960 * Spotinst: Don't skip LB attachments when SpotinstHybrid is enabled by @liranp in https://github.com/kubernetes/kops/pull/10961 * Add explicit RBAC permissions for finalizers subresources by @olemarkus in https://github.com/kubernetes/kops/pull/10966 * Fix typos in docs/getting_started by @roim in https://github.com/kubernetes/kops/pull/10921 * Add support for CPU Credits on AWS t2 and t3 instance families by @rifelpet in https://github.com/kubernetes/kops/pull/10934 * Add support for enable-cadvisor-json-endpoints with Kubelet by @adrianmoisey in https://github.com/kubernetes/kops/pull/10957 * Exclude CP nodes from load balancers by @olemarkus in https://github.com/kubernetes/kops/pull/10945 * Update k8s.io Go modules to v0.20.4 by @bmelbourne in https://github.com/kubernetes/kops/pull/10965 * Update Go to v1.16 by @bmelbourne in https://github.com/kubernetes/kops/pull/10892 * Add a note about informal office hours by @olemarkus in https://github.com/kubernetes/kops/pull/10650 * Removing duplicate local and output values in terraform(#10786) by @mmerrill3 in https://github.com/kubernetes/kops/pull/10978 * Add CloudLabels as --extra-tags to aws-ebs-csi driver by @codablock in https://github.com/kubernetes/kops/pull/10976 * Use internal api url for jwks by @olemarkus in https://github.com/kubernetes/kops/pull/10888 * Disable Calico Prometheus metrics by default by @hakman in https://github.com/kubernetes/kops/pull/10982 * Add etcd-manager discoveryPollInterval option by @ottosulin in https://github.com/kubernetes/kops/pull/10975 * Remove manually added labels from addons by @hakman in https://github.com/kubernetes/kops/pull/10987 * Fix kops-controller rbac due to leader election change by @olemarkus in https://github.com/kubernetes/kops/pull/10988 * Various cleanups around apply_cluster and awsmodel by @olemarkus in https://github.com/kubernetes/kops/pull/10579 * Fix very minor formatting typos in docs/manifests_and_customizing_via_api by @vitaliyf in https://github.com/kubernetes/kops/pull/10990 * Run protokube as a systemd service by @bharath-123 in https://github.com/kubernetes/kops/pull/10574 * kubetest2 - don't overwrite create args that use equals signs by @rifelpet in https://github.com/kubernetes/kops/pull/10994 * Remove support for launch configurations by @bharath-123 in https://github.com/kubernetes/kops/pull/10937 * Use exponential backoff for DNS updates by @hakman in https://github.com/kubernetes/kops/pull/10996 * Storage: Amend default choice for StorageClass management to honor a specified OpenStack-related value by @seh in https://github.com/kubernetes/kops/pull/11002 * Add to 1.21 release notes by @bharath-123 in https://github.com/kubernetes/kops/pull/11004 * Kubetest2 - Add support for publishing the kops version marker by @rifelpet in https://github.com/kubernetes/kops/pull/11006 * Kubetest2 - Fix kops' --kubernetes-version with k8s version markers by @rifelpet in https://github.com/kubernetes/kops/pull/11007 * Don't build kops during periodic upgrade tests by @rifelpet in https://github.com/kubernetes/kops/pull/11005 * Remove extraneous field from integration test by @rifelpet in https://github.com/kubernetes/kops/pull/11010 * Remove trailing newline from kubernetes version marker by @rifelpet in https://github.com/kubernetes/kops/pull/11011 * aws: Graceful handling of EC2 detach errors by @hwoarang in https://github.com/kubernetes/kops/pull/10740 * Kubetest2 - use same kops binary for all commands in upgrade scenario by @rifelpet in https://github.com/kubernetes/kops/pull/11017 * Update Calico to v3.18.1 by @hakman in https://github.com/kubernetes/kops/pull/11018 * Increase route53 retry count from 3 to 5 by @rifelpet in https://github.com/kubernetes/kops/pull/11020 * Spotinst: Add support for block device mappings in Ocean Launch Spec by @liranp in https://github.com/kubernetes/kops/pull/11009 * Allow cilium 1.10 by @olemarkus in https://github.com/kubernetes/kops/pull/11026 * Fix rendering of multiple Docker insecure registries by @hakman in https://github.com/kubernetes/kops/pull/11027 * azure: fix null pointer when updating in place cluster by @collin-woodruff-t1cg in https://github.com/kubernetes/kops/pull/11015 * Release notes for 1.20.0-beta.2 by @hakman in https://github.com/kubernetes/kops/pull/11034 * Update k8s dependencies to v1.21.0-beta.1 by @hakman in https://github.com/kubernetes/kops/pull/11013 * Trim space on kops version markers by @rifelpet in https://github.com/kubernetes/kops/pull/11037 * Honor OS update policy at InstanceGroup level too by @seh in https://github.com/kubernetes/kops/pull/10913 * Update Go to v1.16.2 by @hakman in https://github.com/kubernetes/kops/pull/11039 * Create an environment file for kops-configuration systemd process by @bharath-123 in https://github.com/kubernetes/kops/pull/11042 * Improve instance type validation error message by @bharath-123 in https://github.com/kubernetes/kops/pull/11043 * Revert upgrade script to build kops by @rifelpet in https://github.com/kubernetes/kops/pull/11044 * cluster validation - allow flapping of validation errors by @rifelpet in https://github.com/kubernetes/kops/pull/11049 * Update Terraform to v0.14.8 by @bmelbourne in https://github.com/kubernetes/kops/pull/11051 * Cleanup some nodeup & protokube logging by @rifelpet in https://github.com/kubernetes/kops/pull/11052 * Update Go modules to latest versions by @bmelbourne in https://github.com/kubernetes/kops/pull/11047 * Add channels entries for image architecture by @hakman in https://github.com/kubernetes/kops/pull/11046 * fix CNI bin path in troubleshoot.md by @adrianmester in https://github.com/kubernetes/kops/pull/11061 * Kubetest2 - Add GCE default SSH key values from prow jobs by @rifelpet in https://github.com/kubernetes/kops/pull/11065 * correct a word for readme by @yojay11717 in https://github.com/kubernetes/kops/pull/11066 * Update Bazel to v3.5.0 by @hakman in https://github.com/kubernetes/kops/pull/11041 * Install bazelisk before pushing images by @hakman in https://github.com/kubernetes/kops/pull/11067 * Kubetest2 - Add boskos for GCE support by @rifelpet in https://github.com/kubernetes/kops/pull/11070 * Download kubectl to /opt/kops/bin on Flatcar OS by @rifelpet in https://github.com/kubernetes/kops/pull/11054 * Kubetest2 - initialize boskos heartbeat channel by @rifelpet in https://github.com/kubernetes/kops/pull/11073 * Instance roles for service accounts (IRSA) contd by @olemarkus in https://github.com/kubernetes/kops/pull/10756 * Kubetest2 - add more validation time for --target terraform by @rifelpet in https://github.com/kubernetes/kops/pull/11077 * Fix GCE channels version constraints by @rifelpet in https://github.com/kubernetes/kops/pull/11076 * Update k8s versions with March 2021 releases by @moshevayner in https://github.com/kubernetes/kops/pull/11075 * Upgrade AWS CNI to version 1.7.10 by @moshevayner in https://github.com/kubernetes/kops/pull/11078 * Improve error messages around PublicJWKS by @justinsb in https://github.com/kubernetes/kops/pull/11085 * Don't add control-plane DNS permissions with UseServiceAccountIAM by @justinsb in https://github.com/kubernetes/kops/pull/11086 * Ensure a publicdatastore exists for jwks and that it can only be s3 by @olemarkus in https://github.com/kubernetes/kops/pull/11081 * Apiserver nodes by @olemarkus in https://github.com/kubernetes/kops/pull/10722 * fix(docs): cpuCFSQuotaPeriod needs a feature gate by @danmx in https://github.com/kubernetes/kops/pull/11071 * Update Ubuntu 20.04 to latest AMI by @bmelbourne in https://github.com/kubernetes/kops/pull/11083 * Re-add integration tests for jwks by @justinsb in https://github.com/kubernetes/kops/pull/11087 * Replace go-bindata with go:embed by @rifelpet in https://github.com/kubernetes/kops/pull/11089 * Dns controller fixes by @olemarkus in https://github.com/kubernetes/kops/pull/11069 * Remove unused RoleLabelName16 by @justinsb in https://github.com/kubernetes/kops/pull/11097 * Add additional IOPS validation for AWS EBS gp3 volumes by @lichuan0620 in https://github.com/kubernetes/kops/pull/10843 * Update google SDK libraries by @justinsb in https://github.com/kubernetes/kops/pull/11096 * Add values page by @justinsb in https://github.com/kubernetes/kops/pull/11094 * Deeper validation in dns controller tests by @justinsb in https://github.com/kubernetes/kops/pull/11095 * Ensure protokube can connect to kube-apiserver before starting the sync loop by @olemarkus in https://github.com/kubernetes/kops/pull/11093 * Remove dbus dependency by @bharath-123 in https://github.com/kubernetes/kops/pull/11082 * Have nodeup retry kops-controller bootstrapping sooner if DNS isn't setup by @rifelpet in https://github.com/kubernetes/kops/pull/11101 * Update AWS zones used by e2e tests by @rifelpet in https://github.com/kubernetes/kops/pull/11103 * Add docs about dedicated apiserver ndoes by @olemarkus in https://github.com/kubernetes/kops/pull/11090 * Put awslbcontroller on the control-plane by @olemarkus in https://github.com/kubernetes/kops/pull/11091 * Release 1.21.0 alpha.2 by @hakman in https://github.com/kubernetes/kops/pull/11109 * Release notes for 1.21.0-alpha.2 by @hakman in https://github.com/kubernetes/kops/pull/11111 * Update release process docs by @hakman in https://github.com/kubernetes/kops/pull/11112 * Use "tag on create" for EIPs, NLBs, and TargetGroups by @rifelpet in https://github.com/kubernetes/kops/pull/11107 * Load env vars from file for kops-configuration service by @hakman in https://github.com/kubernetes/kops/pull/11114 * Update containerd to v1.3.10/v1.4.4 by @bmelbourne in https://github.com/kubernetes/kops/pull/11084 * [DigitalOcean] Fix DO Tag issue by @srikiz in https://github.com/kubernetes/kops/pull/11102 * Kubetest2 - Setup SSH keys for GCE by @rifelpet in https://github.com/kubernetes/kops/pull/11123 * Validate that kube-apiserver has the necessary authz modes set by @olemarkus in https://github.com/kubernetes/kops/pull/11127 * Remove instance-selector label by @bharath-123 in https://github.com/kubernetes/kops/pull/11048 * Kubetest2 - fix temp directory created for GCE SSH keys by @rifelpet in https://github.com/kubernetes/kops/pull/11133 * replace hard coded aws region checks with aws sdk calls by @guydog28 in https://github.com/kubernetes/kops/pull/11119 * kubetest2 - Specify GCE network name by @rifelpet in https://github.com/kubernetes/kops/pull/11139 * Update protokube systemd unit docs link by @rifelpet in https://github.com/kubernetes/kops/pull/11138 * Add scaleDownDelayAfterAdd to clusterAutoscaler spec by @jurriaanpro in https://github.com/kubernetes/kops/pull/11140 * Update cluster_spec.md by @igor-loncarevic in https://github.com/kubernetes/kops/pull/11142 * minor protokube code clean up by @bharath-123 in https://github.com/kubernetes/kops/pull/11143 * Pass ctx to drain helper by @olemarkus in https://github.com/kubernetes/kops/pull/11146 * Change registrable domains to placeholders by @lukehinds in https://github.com/kubernetes/kops/pull/11147 * Add tags to instance profile and OIDC provider terraform resources by @rifelpet in https://github.com/kubernetes/kops/pull/11149 * Clarify release notes around exporting kubeconfig by @justinsb in https://github.com/kubernetes/kops/pull/11154 * Expand flag help on --user flags by @justinsb in https://github.com/kubernetes/kops/pull/11153 * Update Getting Started AWS guide by @allir in https://github.com/kubernetes/kops/pull/11150 * fix the mistake link in addons.md by @maoyangLiu in https://github.com/kubernetes/kops/pull/11151 * cloudbuild: capture some hashes by @justinsb in https://github.com/kubernetes/kops/pull/11159 * Only update kops-controller pods on deletion by @olemarkus in https://github.com/kubernetes/kops/pull/10871 * Side load images also on apiserver by @olemarkus in https://github.com/kubernetes/kops/pull/11156 * Add an option to skip NTP installation by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/11160 * kubetest2 - Pass GOPATH when building kops by @rifelpet in https://github.com/kubernetes/kops/pull/11167 * Filter kOps NatGateways from route table by @zetaab in https://github.com/kubernetes/kops/pull/11169 * Bump k8s deps to 1.21-rc.0 by @olemarkus in https://github.com/kubernetes/kops/pull/11168 * Allow setting dedicated apiserver node count from create cluster cmd by @olemarkus in https://github.com/kubernetes/kops/pull/11152 * Update Go to v1.16.3 by @bmelbourne in https://github.com/kubernetes/kops/pull/11174 * Add integration test for aws lb controller by @olemarkus in https://github.com/kubernetes/kops/pull/11175 * Enable use of irsa for aws load balancer controller by @olemarkus in https://github.com/kubernetes/kops/pull/11088 * Increase timeout and update images for postsubmit job by @rifelpet in https://github.com/kubernetes/kops/pull/11177 * Update Go modules to latest versions by @bmelbourne in https://github.com/kubernetes/kops/pull/11176 * Kubetest2 - Add flag to expose cluster validation wait time by @rifelpet in https://github.com/kubernetes/kops/pull/11178 * Spotinst: Use BDM to configure the root volume size at VNG level by @liranp in https://github.com/kubernetes/kops/pull/11179 * Spotinst: Configure headroom resources only at the VNG level by @liranp in https://github.com/kubernetes/kops/pull/11181 * Update k8s dependencies to v1.21.0 by @hakman in https://github.com/kubernetes/kops/pull/11188 * Release notes for 1.19.2 by @justinsb in https://github.com/kubernetes/kops/pull/11193 * Update node local dns cache by @zetaab in https://github.com/kubernetes/kops/pull/11057 * Update cilium.md by @recollir in https://github.com/kubernetes/kops/pull/11189 * Release notes for 1.20.0 by @justinsb in https://github.com/kubernetes/kops/pull/11196 * Docs: Remove 'prerelease' warning from 1.20 by @justinsb in https://github.com/kubernetes/kops/pull/11198 * Kubetest2 - Create project-specific state store buckets in GCP by @rifelpet in https://github.com/kubernetes/kops/pull/11200 * Update release compatibility matrix by @johngmyers in https://github.com/kubernetes/kops/pull/11201 * Update integration tests to k8s v1.21.0 by @bmelbourne in https://github.com/kubernetes/kops/pull/11206 * Kubetest2 - Set KOPS_BASE_URL to --build's stage location by @rifelpet in https://github.com/kubernetes/kops/pull/11210 * Update Docker to v20.10.5 by @bmelbourne in https://github.com/kubernetes/kops/pull/11195 * Rename the service account key by @johngmyers in https://github.com/kubernetes/kops/pull/11207 * Update go deps by @zetaab in https://github.com/kubernetes/kops/pull/11208 * Kubetest2 - detect errors creating GCS bucket by @rifelpet in https://github.com/kubernetes/kops/pull/11212 * Kubetest2 - Ensure the bucket path is the final gsutil arg by @rifelpet in https://github.com/kubernetes/kops/pull/11215 * Update IG tutorial for per-AZ node groups by @rifelpet in https://github.com/kubernetes/kops/pull/11218 * Use "string" for architecture type in ChannelRecommendedImage by @hakman in https://github.com/kubernetes/kops/pull/11220 * Always secure api -> kubelet communication by @olemarkus in https://github.com/kubernetes/kops/pull/11185 * Fix etcd volume validation logic by @hakman in https://github.com/kubernetes/kops/pull/11225 * Replace k8s.io/utils/mount with k8s.io/mount-utils by @hakman in https://github.com/kubernetes/kops/pull/11229 * Release 1.21.0-alpha.3 by @hakman in https://github.com/kubernetes/kops/pull/11231 * fix a typo by @yojay11717 in https://github.com/kubernetes/kops/pull/11232 * Release notes for 1.21.0-alpha.3 by @hakman in https://github.com/kubernetes/kops/pull/11233 * Remove validations for EBS from cluster validation by @h3poteto in https://github.com/kubernetes/kops/pull/11228 * Add support for Docker v20.10.6 by @hakman in https://github.com/kubernetes/kops/pull/11236 * Don't start kubelet if instance is entering the warm pool by @olemarkus in https://github.com/kubernetes/kops/pull/11216 * Correct typos by @hakman in https://github.com/kubernetes/kops/pull/11238 * 'sv' may have 'nil' or other unexpected value by @Akiros001 in https://github.com/kubernetes/kops/pull/11161 * Logging cleanup by @rifelpet in https://github.com/kubernetes/kops/pull/11080 * Update kops_create_secret_dockerconfig.md by @integrii in https://github.com/kubernetes/kops/pull/11186 * Remove BLM banner by @hakman in https://github.com/kubernetes/kops/pull/10672 * Run tests only in zones with increased limits by @hakman in https://github.com/kubernetes/kops/pull/11240 * Give kOps CLI knowledge about ASG warm pools by @olemarkus in https://github.com/kubernetes/kops/pull/11227 * Fix golint issue caused by typo by @fenggw-fnst in https://github.com/kubernetes/kops/pull/11239 * Remove unused constants by @johngmyers in https://github.com/kubernetes/kops/pull/11241 * Bump k8s versions with April 2021 releases in Alpha channel by @moshevayner in https://github.com/kubernetes/kops/pull/11245 * Update kOps recommended versions and images by @hakman in https://github.com/kubernetes/kops/pull/11247 * Kubetest2 - Cleanup leaked resources from previous clusters by @rifelpet in https://github.com/kubernetes/kops/pull/11250 * Run tests in all regions with increased limits by @hakman in https://github.com/kubernetes/kops/pull/11249 * Don't set NeedUpdate on first addon install by @olemarkus in https://github.com/kubernetes/kops/pull/11257 * Make it possible to detect field changes when mixedInstancePolicy is removed by @h3poteto in https://github.com/kubernetes/kops/pull/11255 * Update rolling update documentation by @johngmyers in https://github.com/kubernetes/kops/pull/11263 * Pre-pull cilium and kube-proxy in warming mode by @olemarkus in https://github.com/kubernetes/kops/pull/11258 * [cilium] Add support for choosing resources by @dntosas in https://github.com/kubernetes/kops/pull/11248 * Add install section to kubelet unit by @olemarkus in https://github.com/kubernetes/kops/pull/11264 * Update terraform and cloudformation lint versions by @rifelpet in https://github.com/kubernetes/kops/pull/11266 * Fix cilium template scoping typo by @javipolo in https://github.com/kubernetes/kops/pull/11270 * Add Azure image to alpha/stable channel by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/11271 * Exclude nodes from load balancers upon cordoning by @johngmyers in https://github.com/kubernetes/kops/pull/11273 * Make it possible to enable/configure warm pool by @olemarkus in https://github.com/kubernetes/kops/pull/11235 * If one tries to use eip with a public ip that doesn't exist, fail by @olemarkus in https://github.com/kubernetes/kops/pull/11276 * Spotinst: Update spotinst/ocean-controller to v1.0.74 by @liranp in https://github.com/kubernetes/kops/pull/11286 * Add NTH Queue Processor Mode by @haugenj in https://github.com/kubernetes/kops/pull/10995 * Apiserver fixes by @olemarkus in https://github.com/kubernetes/kops/pull/11293 * Spotinst: Prevent nil pointer dereference by @liranp in https://github.com/kubernetes/kops/pull/11289 * fix: create.go doesnt add --name flag to the prompt: kops update cluster by @ebarped in https://github.com/kubernetes/kops/pull/11296 * Make warm pool no ASG found error retryable by @olemarkus in https://github.com/kubernetes/kops/pull/11285 * Document the newly required SQS permissions for NTH by @rifelpet in https://github.com/kubernetes/kops/pull/11300 * fix permissions required for NTH Queue Processor by @haugenj in https://github.com/kubernetes/kops/pull/11303 * bump NTH to 1.13.0 by @haugenj in https://github.com/kubernetes/kops/pull/11301 * Add GCE Router task by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/11184 * Add ability to set a default Issuer in certManager addon by @javipolo in https://github.com/kubernetes/kops/pull/11281 * Make nodeup able to complete the warming life cycle hook by @olemarkus in https://github.com/kubernetes/kops/pull/11259 * update deps by @zetaab in https://github.com/kubernetes/kops/pull/11306 * Filter servers using cluster name in tags by @zetaab in https://github.com/kubernetes/kops/pull/11305 * Add warm pool docs and release notes by @olemarkus in https://github.com/kubernetes/kops/pull/11307 * Use the full operator instead of the generic one by @olemarkus in https://github.com/kubernetes/kops/pull/11312 * Improve warm pool documentation by @johngmyers in https://github.com/kubernetes/kops/pull/11313 * Disallow negative warmpool sizes by @johngmyers in https://github.com/kubernetes/kops/pull/11317 * Promote channel alpha to stable by @hakman in https://github.com/kubernetes/kops/pull/11318 * [metrics-server] Bump manifest to latest stable by @dntosas in https://github.com/kubernetes/kops/pull/11319 * Allow disabling warm pool by setting WarmPool.MaxSize to 0 by @johngmyers in https://github.com/kubernetes/kops/pull/11316 * Fix typo by @johngmyers in https://github.com/kubernetes/kops/pull/11321 * [csi/aws] Bump templates + add support for warm pools by @dntosas in https://github.com/kubernetes/kops/pull/11304 * Add a lifecycle test for GCE by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/11291 * Add cluster-level warmPool settings by @johngmyers in https://github.com/kubernetes/kops/pull/11322 * Fix arguments to csi-provisioner after bump to v2.2.0 by @codablock in https://github.com/kubernetes/kops/pull/11326 * kubetest2: Infer the provider and zones from the kops cluster by @justinsb in https://github.com/kubernetes/kops/pull/10847 * Add support for configuring Cilium enable-host-reachable-services. by @bjhaid in https://github.com/kubernetes/kops/pull/11333 * Fix lifecycle hook naming by @olemarkus in https://github.com/kubernetes/kops/pull/11335 * Recognize Ubuntu 21.04 by @hakman in https://github.com/kubernetes/kops/pull/11327 * Add `enable-host-reachable-services` to 1.8 and generic cilium. by @bjhaid in https://github.com/kubernetes/kops/pull/11337 * Don't try to delete warm pool when creating the cluster by @olemarkus in https://github.com/kubernetes/kops/pull/11331 * Update Calico to v3.18.2 by @hakman in https://github.com/kubernetes/kops/pull/11339 * Fix SQS resource flapping by @olemarkus in https://github.com/kubernetes/kops/pull/11336 * Update controller-runtime to v0.9.0-beta.0 by @hakman in https://github.com/kubernetes/kops/pull/11342 * Set SAN for addon CAs by @olemarkus in https://github.com/kubernetes/kops/pull/11328 * Update kubetest2 dependency and fix install method for upgrade scenario by @rifelpet in https://github.com/kubernetes/kops/pull/11338 * Bump cilium to 1.9.6 by @olemarkus in https://github.com/kubernetes/kops/pull/11344 * Fix upgrade scenario kubetest2 install by @rifelpet in https://github.com/kubernetes/kops/pull/11350 * Fix kubetest2 panic inheriting env vars by @rifelpet in https://github.com/kubernetes/kops/pull/11351 * Mount /run inside etcd-manager pods for systemd mounts by @hakman in https://github.com/kubernetes/kops/pull/11352 * Update deps by @zetaab in https://github.com/kubernetes/kops/pull/11357 * Ignore detached nodes when doing validate cluster by @rajatjindal in https://github.com/kubernetes/kops/pull/11349 * Move firewall, iam, network and sshkey to awsmodel by @hakman in https://github.com/kubernetes/kops/pull/11358 * [addons/nth] Add capability to define resources by @dntosas in https://github.com/kubernetes/kops/pull/11360 * Split oidc_provider by @olemarkus in https://github.com/kubernetes/kops/pull/11359 * Expose hubble agent when hubble is enabled by @olemarkus in https://github.com/kubernetes/kops/pull/11314 * Configure aws oidc provider by @olemarkus in https://github.com/kubernetes/kops/pull/11361 * Use VFS as service account issuer if configured by @olemarkus in https://github.com/kubernetes/kops/pull/11362 * Allow cert-manager to be provisioned externally by @codablock in https://github.com/kubernetes/kops/pull/11354 * Mark control-plane node for update when etcd volume size changes by @hakman in https://github.com/kubernetes/kops/pull/11365 * Mark control-plane node for update when etcd manager config changes by @hakman in https://github.com/kubernetes/kops/pull/11369 * user-configurable IAM roles for ServiceAccounts by @olemarkus in https://github.com/kubernetes/kops/pull/11016 * add permission to create sa tokens by @zetaab in https://github.com/kubernetes/kops/pull/11373 * Add more support for cilium 1.10 by @olemarkus in https://github.com/kubernetes/kops/pull/11374 * Update Calico to v3.19.0 by @hakman in https://github.com/kubernetes/kops/pull/11372 * Refactor terraform writing by @johngmyers in https://github.com/kubernetes/kops/pull/11371 * Remove unused k8s version parsing by @rifelpet in https://github.com/kubernetes/kops/pull/11375 * Fix upgrade of service-account key by @johngmyers in https://github.com/kubernetes/kops/pull/11376 * Don't try to mount hubble TLS on the agent if we don't use hubble by @olemarkus in https://github.com/kubernetes/kops/pull/11378 * Kubetest2 - Update k8s upgrade test + add kops upgrade test by @rifelpet in https://github.com/kubernetes/kops/pull/11382 * Kubetest2 - Fix GNU mktemp syntax by @rifelpet in https://github.com/kubernetes/kops/pull/11384 * Kubetest2 - fix wget flag in kops download by @rifelpet in https://github.com/kubernetes/kops/pull/11385 * kubetest2 - remove unnecessary flags from upgrade scripts by @rifelpet in https://github.com/kubernetes/kops/pull/11386 * Don't use PublicJWKS in TestAWSLBController by @johngmyers in https://github.com/kubernetes/kops/pull/11391 * Don't add IRSA env vars if feature flag is not enabled by @olemarkus in https://github.com/kubernetes/kops/pull/11392 * Recognize the ServiceAccountIssuerDiscovery featue gate by @johngmyers in https://github.com/kubernetes/kops/pull/11395 * Quote `grep` patterns in docs/rotate-secrets.md by @keithlayne in https://github.com/kubernetes/kops/pull/10656 * Documentation and release note for IRSA by @johngmyers in https://github.com/kubernetes/kops/pull/11398 * Remove the PublicJWKS feature flag by @johngmyers in https://github.com/kubernetes/kops/pull/11396 * Don't publish OIDC discovery if DiscoveryStore not set by @johngmyers in https://github.com/kubernetes/kops/pull/11397 * Add elasticloadbalancing:ModifyTargetGroupAttributes to aws lb controller by @olemarkus in https://github.com/kubernetes/kops/pull/11393 * Add another update cluster dryrun to upgrade tests by @rifelpet in https://github.com/kubernetes/kops/pull/11401 * Update default volumes types in Cluster Documentation by @allir in https://github.com/kubernetes/kops/pull/11405 * Create upgrade_ab e2e scenario for complex upgrades by @justinsb in https://github.com/kubernetes/kops/pull/11403 * Release 1.22.0-alpha.1 by @johngmyers in https://github.com/kubernetes/kops/pull/11407 * e2e upgrade-ab: fix a few errors by @justinsb in https://github.com/kubernetes/kops/pull/11409 * Verify all versions are set correctly by @johngmyers in https://github.com/kubernetes/kops/pull/11413 * Use etcd-manager built from etcdadm repo by @justinsb in https://github.com/kubernetes/kops/pull/11098 * Remove code for no-longer-supported k8s versions by @johngmyers in https://github.com/kubernetes/kops/pull/11412 * Update the release process documentation by @johngmyers in https://github.com/kubernetes/kops/pull/11419 * [addons/awscsidriver] Bump to GA release by @dntosas in https://github.com/kubernetes/kops/pull/11418 * [Digital Ocean] Add an e2e job for DO by @srikiz in https://github.com/kubernetes/kops/pull/10963 * Fix references to v1.20 in v1.21 release notes by @hakman in https://github.com/kubernetes/kops/pull/11427 * Release notes for 1.21.0-beta.1 by @johngmyers in https://github.com/kubernetes/kops/pull/11426 * e2e: only get ExternalIPRange if we need it by @justinsb in https://github.com/kubernetes/kops/pull/11431 * e2e upgrade-ab: a few more fixes and notes on how to run locally by @justinsb in https://github.com/kubernetes/kops/pull/11432 * Create new clusters without forcing a container runtime by @hakman in https://github.com/kubernetes/kops/pull/11428 * Update verify-terraform to use 0.15.3 by @rifelpet in https://github.com/kubernetes/kops/pull/11433 * Carry forward 1.20 deprecations to 1.21 release notes by @johngmyers in https://github.com/kubernetes/kops/pull/11438 * Start release notes for 1.22 by @johngmyers in https://github.com/kubernetes/kops/pull/11439 * Sort --extra-tags of ebs-csi-driver by @codablock in https://github.com/kubernetes/kops/pull/11444 * Fix typo in 1.22 release notes by @johngmyers in https://github.com/kubernetes/kops/pull/11448 * Add test scenario for aws ebs csi driver by @olemarkus in https://github.com/kubernetes/kops/pull/11449 * Always install the latest plugin versions for Terraform tests by @hakman in https://github.com/kubernetes/kops/pull/11447 * Set the output base for fitask by @hakman in https://github.com/kubernetes/kops/pull/11411 * Simplify buildLaunchTemplateTask() part one by @johngmyers in https://github.com/kubernetes/kops/pull/11452 * Add missing carryover items from 1.21 release notes by @johngmyers in https://github.com/kubernetes/kops/pull/11451 * Add support for CAS 1.21.0 by @olemarkus in https://github.com/kubernetes/kops/pull/11462 * Allow AWS instance types with multiple architectures by @hakman in https://github.com/kubernetes/kops/pull/11463 * Fix KCM livenessProbe to use secure port by @rifelpet in https://github.com/kubernetes/kops/pull/11454 * Simplify buildLaunchTemplateTask() part two by @johngmyers in https://github.com/kubernetes/kops/pull/11461 * Use kubernetes.default for OIDC discovery in gossip clusters by @rifelpet in https://github.com/kubernetes/kops/pull/11470 * Add instructions for updating the k8s versions periodic jobs by @rifelpet in https://github.com/kubernetes/kops/pull/11473 * Release notes for 1.20.1 by @justinsb in https://github.com/kubernetes/kops/pull/11475 * Release notes for 1.19.3 by @justinsb in https://github.com/kubernetes/kops/pull/11474 * Update alpha channel with K8s releases from May-12 2021 by @moshevayner in https://github.com/kubernetes/kops/pull/11476 * upup: gcetasks: fix diffs in instance template and router by @nicktrav in https://github.com/kubernetes/kops/pull/11460 * Discover what zone the cluster is in for the aws-ebs-csi driver tests by @olemarkus in https://github.com/kubernetes/kops/pull/11472 * Use ginkgo to run the tests so we can run things in parallel by @olemarkus in https://github.com/kubernetes/kops/pull/11479 * Kubetest2 - Increase validation time for DO jobs by @rifelpet in https://github.com/kubernetes/kops/pull/11481 * upup: gcetasks: force send AutoCreateSubnetworks field when set to false by @nicktrav in https://github.com/kubernetes/kops/pull/11457 * Add kOps and k8s 1.21 to alpha channel by @moshevayner in https://github.com/kubernetes/kops/pull/11482 * Reduce kOps supported version range by @johngmyers in https://github.com/kubernetes/kops/pull/11485 * More release process documentation improvements by @johngmyers in https://github.com/kubernetes/kops/pull/11434 * Set the test cluster-tag by @olemarkus in https://github.com/kubernetes/kops/pull/11487 * Set canonical location for downloads to artifacts.k8s.io by @hakman in https://github.com/kubernetes/kops/pull/11486 * [AWS CCM] Permission to create SA token by @nckturner in https://github.com/kubernetes/kops/pull/11368 * Add link to release notes on first beta release by @johngmyers in https://github.com/kubernetes/kops/pull/11488 * Remove etcd-manager certificate expiration advisory by @hakman in https://github.com/kubernetes/kops/pull/11480 * Adjust deprecation announcements by @johngmyers in https://github.com/kubernetes/kops/pull/11489 * Update cert-manager by @olemarkus in https://github.com/kubernetes/kops/pull/11493 * Set priorityClassName on critical addons by @olemarkus in https://github.com/kubernetes/kops/pull/11495 * fix(coredns/rbac): add permission to list and watch endpointslices by @nettoclaudio in https://github.com/kubernetes/kops/pull/11459 * bump aws lb controller to 2.2.0 by @olemarkus in https://github.com/kubernetes/kops/pull/11502 * Aws lb scenario fix flags by @olemarkus in https://github.com/kubernetes/kops/pull/11506 * AWS LB controller requires multiple subnets to work by @olemarkus in https://github.com/kubernetes/kops/pull/11507 * Cleanup some of the scenario scripts by @rifelpet in https://github.com/kubernetes/kops/pull/11508 * Include new pipeline job in the release branch process by @rifelpet in https://github.com/kubernetes/kops/pull/11509 * Spotinst: Update spotinst/ocean-controller to v1.0.75 by @liranp in https://github.com/kubernetes/kops/pull/11512 * Subsume StatusStore into fi.Cloud by @johngmyers in https://github.com/kubernetes/kops/pull/11498 * Split genkgo in two by @olemarkus in https://github.com/kubernetes/kops/pull/11519 * [DigitalOcean] [WIP] Increase droplet size for e2e tests by @srikiz in https://github.com/kubernetes/kops/pull/11520 * Add initial support for configuring IPv6 with AWS by @hakman in https://github.com/kubernetes/kops/pull/11442 * Add default tags to LB controller and cilium eni resources by @olemarkus in https://github.com/kubernetes/kops/pull/11517 * Remove dead code in bootstrap script by @johngmyers in https://github.com/kubernetes/kops/pull/11521 * Set default fstype for ebs volumes to ext4 by @olemarkus in https://github.com/kubernetes/kops/pull/11525 * Skip feature tests for ebs csi e2e by @olemarkus in https://github.com/kubernetes/kops/pull/11530 * Update etcd_backup_restore_encryption.md by @aberenshtein in https://github.com/kubernetes/kops/pull/11533 * Don't download nodeup if already in the AMI by @johngmyers in https://github.com/kubernetes/kops/pull/11524 * [addons/networking.cilium.io] enable prometheus scraping by @ulfox in https://github.com/kubernetes/kops/pull/11514 * feat(openstack): enable configuration of servergroup affinities by @mitch000001 in https://github.com/kubernetes/kops/pull/11531 * Update containerd to v1.4.6 by @hakman in https://github.com/kubernetes/kops/pull/11535 * Cleanup orphaned IAM service account roles in direct render by @johngmyers in https://github.com/kubernetes/kops/pull/11497 * Support terraform 0.12+'s filebase64() in json output by @rifelpet in https://github.com/kubernetes/kops/pull/11540 * Release images bundle instead of separate images by @hakman in https://github.com/kubernetes/kops/pull/11522 * Bump CoreDNS manifests to latest stable version 1.8.3 by @dntosas in https://github.com/kubernetes/kops/pull/11500 * Run the tests requiring snapshotcontroller again by @olemarkus in https://github.com/kubernetes/kops/pull/11544 * Update CAS manifest by @olemarkus in https://github.com/kubernetes/kops/pull/11491 * Make events etcd cluster optional by @codablock in https://github.com/kubernetes/kops/pull/11330 * Add support for arbitrary terraform functions by @rifelpet in https://github.com/kubernetes/kops/pull/11542 * Add snapshot-controller by @olemarkus in https://github.com/kubernetes/kops/pull/10730 * Add etcd-server related tests by @hakman in https://github.com/kubernetes/kops/pull/11552 * Bump default cilium to 1.9.7 by @olemarkus in https://github.com/kubernetes/kops/pull/11554 * Document updating conformance is first stable minor release only by @johngmyers in https://github.com/kubernetes/kops/pull/11556 * Add hubble documentation by @olemarkus in https://github.com/kubernetes/kops/pull/11557 * Allow using insecure TLS for metrics-server with Kubernetes 1.19+ by @hakman in https://github.com/kubernetes/kops/pull/11559 * Add snapshot-controller by @olemarkus in https://github.com/kubernetes/kops/pull/11561 * Fix deletion of IAM roles and policies by @johngmyers in https://github.com/kubernetes/kops/pull/11558 * Allow Spotinst to use comma separated instance types by @hakman in https://github.com/kubernetes/kops/pull/11560 * Release notes for 1.21.0-beta.2 by @johngmyers in https://github.com/kubernetes/kops/pull/11570 * Set flags on AWS CCM mimicking KCM by @olemarkus in https://github.com/kubernetes/kops/pull/11566 * Enable cert-manager in the ebs csi e2e test by @olemarkus in https://github.com/kubernetes/kops/pull/11569 * Only allow deletion of snapshots owned by the cluster by @olemarkus in https://github.com/kubernetes/kops/pull/11571 * Avoid error when first creating VPC with IPv6 by @justinsb in https://github.com/kubernetes/kops/pull/11575 * Improve some small issues with the release process by @hakman in https://github.com/kubernetes/kops/pull/11572 * Cleanup InstanceProfile only that have ownership tags in delete cluster by @h3poteto in https://github.com/kubernetes/kops/pull/11568 * Don't set the master address for aws ccm by @olemarkus in https://github.com/kubernetes/kops/pull/11582 * Enable reading shared config when possibly from CLI by @johngmyers in https://github.com/kubernetes/kops/pull/11387 * Only update kubeconfig user when we have user info by @justinsb in https://github.com/kubernetes/kops/pull/11584 * Add release note for AWS shared config by @johngmyers in https://github.com/kubernetes/kops/pull/11585 * Use latest CI build instead of building in the test by @olemarkus in https://github.com/kubernetes/kops/pull/11588 * Remove unused files by @johngmyers in https://github.com/kubernetes/kops/pull/11591 * Use the downloaded kops version for awslbc test by @olemarkus in https://github.com/kubernetes/kops/pull/11593 * Use the OnDelete updateStrategy for AWS VPC CNI DaemonSet by @johngmyers in https://github.com/kubernetes/kops/pull/11590 * Update Calico to v3.19.1 by @hakman in https://github.com/kubernetes/kops/pull/11594 * Cleanup Docs by @hakman in https://github.com/kubernetes/kops/pull/11595 * First addon operator integration: CoreDNS by @justinsb in https://github.com/kubernetes/kops/pull/9374 * Add a note about NTH Queue Process mode by @olemarkus in https://github.com/kubernetes/kops/pull/11600 * Enable AWS EBS CSI driver by default by @olemarkus in https://github.com/kubernetes/kops/pull/11605 * Add documentation about snapshot-controller by @olemarkus in https://github.com/kubernetes/kops/pull/11606 * Convert all indents to spaces in node bootstrap script by @hakman in https://github.com/kubernetes/kops/pull/11611 * Use version marker for kops upgrade scenario by @olemarkus in https://github.com/kubernetes/kops/pull/11612 * Add init image field for Amazon VPC CNI by @ryan-dyer-sp in https://github.com/kubernetes/kops/pull/11602 * Add to release process documentation by @johngmyers in https://github.com/kubernetes/kops/pull/11581 * Change toolbox template flag for consistency by @johngmyers in https://github.com/kubernetes/kops/pull/11616 * Fix duplicate CopyFile tasks by @johngmyers in https://github.com/kubernetes/kops/pull/11619 * Don't stage kops as file assets by @johngmyers in https://github.com/kubernetes/kops/pull/11620 * Dump all CP node logs to artifacts by @olemarkus in https://github.com/kubernetes/kops/pull/11615 * Simplify release steps by @johngmyers in https://github.com/kubernetes/kops/pull/11624 * Remove debug code and copy kops to PATH by @olemarkus in https://github.com/kubernetes/kops/pull/11625 * Update Go to v1.16.4 by @hakman in https://github.com/kubernetes/kops/pull/11626 * Add "kops get assets" command by @johngmyers in https://github.com/kubernetes/kops/pull/11617 * Set lifecycle on WarmPool task by @johngmyers in https://github.com/kubernetes/kops/pull/11618 * Label issue types in issue templates by @johngmyers in https://github.com/kubernetes/kops/pull/11637 * Remove fallback support for legacy IAM by @johngmyers in https://github.com/kubernetes/kops/pull/11641 * Rename CopyDockerImage to CopyImage by @johngmyers in https://github.com/kubernetes/kops/pull/11640 * Update the service account issuer discovery documentation by @olemarkus in https://github.com/kubernetes/kops/pull/11642 * Require all HasLifecycle tasks to have lifecycle set by @johngmyers in https://github.com/kubernetes/kops/pull/11650 * Consolidate CSI livenessprobe images for multi-arch support by @rifelpet in https://github.com/kubernetes/kops/pull/11652 * Protokube needs dns-controller IAM permissions by @johngmyers in https://github.com/kubernetes/kops/pull/11645 * Remove docs on static addons by @olemarkus in https://github.com/kubernetes/kops/pull/11653 * Skip some steps if not doing cluster lifecycle by @johngmyers in https://github.com/kubernetes/kops/pull/11657 * Fix detection of virtual-hosted-style S3 urls in us-east-1 by @johngmyers in https://github.com/kubernetes/kops/pull/11655 * Promote channel alpha to stable by @johngmyers in https://github.com/kubernetes/kops/pull/11658 * Bump default cilium to 1.10 by @olemarkus in https://github.com/kubernetes/kops/pull/11659 * [Digital Ocean] Code cleanup with no functional modifications by @srikiz in https://github.com/kubernetes/kops/pull/11592 * Fix jwks object path in S3 for IRSA by @h3poteto in https://github.com/kubernetes/kops/pull/11649 * Use version marker for kops ab scenario by @olemarkus in https://github.com/kubernetes/kops/pull/11648 * Kubetest2 scenario script cleanup by @rifelpet in https://github.com/kubernetes/kops/pull/11664 * Add more lifecycles to HasLifecycle tasks by @rifelpet in https://github.com/kubernetes/kops/pull/11666 * Set lifecycle on Droplet task by @johngmyers in https://github.com/kubernetes/kops/pull/11665 * Don't describe CloudLabels as being AWS-specific by @johngmyers in https://github.com/kubernetes/kops/pull/11667 * Move common stuff in e2e scenarios to common.sh by @olemarkus in https://github.com/kubernetes/kops/pull/11668 * Fix kubetest2 upgrade scripts by @rifelpet in https://github.com/kubernetes/kops/pull/11670 * Clean up straggling autogenerated code by @johngmyers in https://github.com/kubernetes/kops/pull/11671 * Remove dead code by @johngmyers in https://github.com/kubernetes/kops/pull/11672 * Explicitly set kubeconfig flag where we want to use it by @olemarkus in https://github.com/kubernetes/kops/pull/11676 * Add support for Docker v20.10.7 by @hakman in https://github.com/kubernetes/kops/pull/11674 * Use release markers instead of releases by @olemarkus in https://github.com/kubernetes/kops/pull/11679 * Drop trailing slash from oidc issuer by @olemarkus in https://github.com/kubernetes/kops/pull/11682 * Make Lifecycle field non-pointer by @johngmyers in https://github.com/kubernetes/kops/pull/11673 * Update Go to v1.16.5 by @hakman in https://github.com/kubernetes/kops/pull/11686 * Fix set-version leaving backup files with "-e" suffix by @johngmyers in https://github.com/kubernetes/kops/pull/11691 * Release notes for 1.21.0-beta.3 by @johngmyers in https://github.com/kubernetes/kops/pull/11694 * Update release process documentation by @johngmyers in https://github.com/kubernetes/kops/pull/11695 * Set IMDSv2 on by default for nodes and apiservers by @olemarkus in https://github.com/kubernetes/kops/pull/11329 * Deprecate old OS versions by @johngmyers in https://github.com/kubernetes/kops/pull/11696 * Fix panic in dryrun report by @johngmyers in https://github.com/kubernetes/kops/pull/11698 * Add options for configuring IPv4 and IPv6 support with Calico by @hakman in https://github.com/kubernetes/kops/pull/11688 * add e2e scenario script for testing cilium connectivity by @olemarkus in https://github.com/kubernetes/kops/pull/11697 * Fix copying of images from docker.io by @johngmyers in https://github.com/kubernetes/kops/pull/11656 * Fix the CSI EBS DS CRB. by @olemarkus in https://github.com/kubernetes/kops/pull/11701 * Use v1 certificate for LB controller by @olemarkus in https://github.com/kubernetes/kops/pull/11703 * Move asset copying out of apply_cluster by @johngmyers in https://github.com/kubernetes/kops/pull/11700 * Remove documentation of legacy IAM permissions by @johngmyers in https://github.com/kubernetes/kops/pull/11706 * Add some tests around channel adding needs-update annotation by @olemarkus in https://github.com/kubernetes/kops/pull/11598 * Update kube-router to v1.2.3 by @hakman in https://github.com/kubernetes/kops/pull/11124 * Create document on asset repositories by @johngmyers in https://github.com/kubernetes/kops/pull/11654 * Make relnotes match the new max hop limit IMDS behaviour by @olemarkus in https://github.com/kubernetes/kops/pull/11702 * Add proxy envs to calico to make possible usage of AWS source destination check by @DOboznyi in https://github.com/kubernetes/kops/pull/11709 * Update controller-runtime to v0.9.0 by @hakman in https://github.com/kubernetes/kops/pull/11713 * Generate AWSEBSCSIDriver model only when using AWS by @hakman in https://github.com/kubernetes/kops/pull/11716 * Make AWS EBS CSI Driver default as of k8s 1.22 by @olemarkus in https://github.com/kubernetes/kops/pull/11721 * Use quay images for cilium by @olemarkus in https://github.com/kubernetes/kops/pull/11722 * Allow master to touch volumes tagged with kubernetes.io/cluster/<clusterName>:owned by @wongma7 in https://github.com/kubernetes/kops/pull/11729 * Update release branch docs with kubetest2 presubmit job by @rifelpet in https://github.com/kubernetes/kops/pull/11732 * Perform ClusterCIDR and ServiceClusterIPRange assignments for IPv6 by @johngmyers in https://github.com/kubernetes/kops/pull/11724 * Spotinst: Support for API Load Balancer with AWS/NLB by @liranp in https://github.com/kubernetes/kops/pull/11604 * Add support for setting latest k8s in ab scenario by @olemarkus in https://github.com/kubernetes/kops/pull/11735 * Deprecate CloudFormation support by @johngmyers in https://github.com/kubernetes/kops/pull/11630 * Calculate IPv6 subnet CIDR based on cluster CIDR by @hakman in https://github.com/kubernetes/kops/pull/11523 * Only warm-pull images used by the CSI DS by @olemarkus in https://github.com/kubernetes/kops/pull/11734 * Remove k8s-upgrade script as upgrade-ab is now used instead by @olemarkus in https://github.com/kubernetes/kops/pull/11738 * Add small note about rotating cluster after backup restore by @olemarkus in https://github.com/kubernetes/kops/pull/11733 * Make forwardToKubeDNS work in the NodeLocal DNSCache template by @ederst in https://github.com/kubernetes/kops/pull/11743 * Add test scenario for if channels is able to delete dangling resources by @olemarkus in https://github.com/kubernetes/kops/pull/11739 * Remove InstanceGroup from NodeupModelContext by @johngmyers in https://github.com/kubernetes/kops/pull/9294 * Refactor keypair code in preparation for secret rotation by @johngmyers in https://github.com/kubernetes/kops/pull/11219 * Remove unused field by @johngmyers in https://github.com/kubernetes/kops/pull/11749 * Hyperlink Sprig reference by @OutdatedVersion in https://github.com/kubernetes/kops/pull/11730 * Compare OpenStack security groups deterministically by @ederst in https://github.com/kubernetes/kops/pull/11741 * Don't set Subnet dependency on AmazonIPv6CIDR for shared VPCs by @hakman in https://github.com/kubernetes/kops/pull/11752 * Set BindAddress appropriately when in IPv6-only mode by @johngmyers in https://github.com/kubernetes/kops/pull/11737 * Add --ipv6 experimental cli flag by @hakman in https://github.com/kubernetes/kops/pull/11629 * Don't restrict nodeup download to IPv4 by @johngmyers in https://github.com/kubernetes/kops/pull/11755 * Cilium: disable masquerade by default when in ENI IPAM mode by @johngmyers in https://github.com/kubernetes/kops/pull/11753 * Set default ClusterCIDR through the PodCIDR by @johngmyers in https://github.com/kubernetes/kops/pull/11756 * Enable IPv6 support for Cilium by @johngmyers in https://github.com/kubernetes/kops/pull/11754 * Allow unsetting fields from the command line by @johngmyers in https://github.com/kubernetes/kops/pull/11745 * Adjustments to SpecOverride by @johngmyers in https://github.com/kubernetes/kops/pull/11761 * Make the AdminAccess default inclusive of IPv6 by @johngmyers in https://github.com/kubernetes/kops/pull/11763 * Default the NodeCIDRMaskSize appropriately for IPv6 by @johngmyers in https://github.com/kubernetes/kops/pull/11762 * Simplify Calico IPv6 configuration by @johngmyers in https://github.com/kubernetes/kops/pull/11725 * Fix typo in IRSA docs by @yurrriq in https://github.com/kubernetes/kops/pull/11770 * Fix typo in populate_instancegroup_spec.go by @yurrriq in https://github.com/kubernetes/kops/pull/11769 * fix enable default SC when EBS driver is not installed by @olemarkus in https://github.com/kubernetes/kops/pull/11771 * Set containerd config on nodeup.Config instead of clusterspec by @olemarkus in https://github.com/kubernetes/kops/pull/11750 * Make it easy to run scenarios with irsa enabled by @olemarkus in https://github.com/kubernetes/kops/pull/11758 * Trim unnecessary paths from worker node IAM by @johngmyers in https://github.com/kubernetes/kops/pull/11775 * Allocate smaller IPv6 PodCIDRs by default by @johngmyers in https://github.com/kubernetes/kops/pull/11772 * Update github.com/spf13/viper to v1.8.0 by @hakman in https://github.com/kubernetes/kops/pull/11777 * [cni/cilium] Add support for additional config options by @dntosas in https://github.com/kubernetes/kops/pull/11678 * Bump the cas addon version. by @olemarkus in https://github.com/kubernetes/kops/pull/11780 * Also set haveUserInfo=true in case --user was provided in "kops export kubecfg" by @codablock in https://github.com/kubernetes/kops/pull/11778 * Don't try to build etcd-manager secrets for cilium twice by @olemarkus in https://github.com/kubernetes/kops/pull/11764 * [addons] Introduce NodeProblemDetector by @dntosas in https://github.com/kubernetes/kops/pull/11381 * Enable ability to use IRSA for cluster autoscaler by @olemarkus in https://github.com/kubernetes/kops/pull/11748 * Allow using IRSA for EBS CSI Driver by @olemarkus in https://github.com/kubernetes/kops/pull/11747 * Delete all files in the provided discoveryStore on cluster deletion by @olemarkus in https://github.com/kubernetes/kops/pull/11791 * Release notes for 1.20.2 by @justinsb in https://github.com/kubernetes/kops/pull/11804 * Update alpha channel k8s versions and ec2 ami base image by @moshevayner in https://github.com/kubernetes/kops/pull/11803 * Seed the random number generator on AWS by @johngmyers in https://github.com/kubernetes/kops/pull/11789 * Upgrade AWS CNI to latest release 1.8.0 by @moshevayner in https://github.com/kubernetes/kops/pull/11805 * bump the version of gophercloud by @cardoe in https://github.com/kubernetes/kops/pull/11788 * Allow "kops create keypair" to stage next CA cert by @johngmyers in https://github.com/kubernetes/kops/pull/11252 * Reduce policy size by @olemarkus in https://github.com/kubernetes/kops/pull/11814 * Fix lbc permissions by @olemarkus in https://github.com/kubernetes/kops/pull/11815 * doc: remove `brew switch` ref and simplify version bump by @chenrui333 in https://github.com/kubernetes/kops/pull/11817 * brew: remove kops.rb by @chenrui333 in https://github.com/kubernetes/kops/pull/11819 * Split out get, describe, and delete keypairs commands by @johngmyers in https://github.com/kubernetes/kops/pull/11820 * Include multiple cluster CAs in trust stores by @johngmyers in https://github.com/kubernetes/kops/pull/11809 * Fix validating presence of AWS EBS CSI by @olemarkus in https://github.com/kubernetes/kops/pull/11795 * Pre-pull all container images used by components and addons by @hakman in https://github.com/kubernetes/kops/pull/11717 * skip flaking ebs csi flakes by @olemarkus in https://github.com/kubernetes/kops/pull/11821 * Set EnableExternalCloudController to true by default by @hakman in https://github.com/kubernetes/kops/pull/11825 * Put versioned API of cluster into state store by @johngmyers in https://github.com/kubernetes/kops/pull/9229 * Support creating new service-account keypairs by @johngmyers in https://github.com/kubernetes/kops/pull/11822 * Add support for logging-format option (text/json) by @dntosas in https://github.com/kubernetes/kops/pull/11583 * Add back createvolume to master + bump ebs driver by @olemarkus in https://github.com/kubernetes/kops/pull/11811 * Improve the output of 'kops get keypairs' by @johngmyers in https://github.com/kubernetes/kops/pull/11823 * Fix kOps version for managed flag on cert-manager by @djablonski-moia in https://github.com/kubernetes/kops/pull/11828 * Run scenarios as presubmit tests by @olemarkus in https://github.com/kubernetes/kops/pull/11801 * Include multiple CA certs in exported kubeconfigs by @johngmyers in https://github.com/kubernetes/kops/pull/11831 * Remove support for importing and converting kubeup clusters by @johngmyers in https://github.com/kubernetes/kops/pull/11824 * Ignore failing tests in upgrade scenario by @rifelpet in https://github.com/kubernetes/kops/pull/11832 * Set priority class for AWS CCM addon by @hakman in https://github.com/kubernetes/kops/pull/11834 * Limit concurrency of asset copy tasks by @johngmyers in https://github.com/kubernetes/kops/pull/11708 * Add 'kops promote keypair' command by @johngmyers in https://github.com/kubernetes/kops/pull/11835 * Kubetest2 fix periodic end to end tests by @olemarkus in https://github.com/kubernetes/kops/pull/11838 * Kubetest2 - Add --skip-regex logic by @rifelpet in https://github.com/kubernetes/kops/pull/11841 * Fix skip regex for ebs csi test by @olemarkus in https://github.com/kubernetes/kops/pull/11840 * Mark nodes NeedsUpdate when keys they use change by @johngmyers in https://github.com/kubernetes/kops/pull/11833 * Completely remove EnableExternalCloudController feature flag by @hakman in https://github.com/kubernetes/kops/pull/11839 * Only set default --skip-regex if it hasn't been set by @rifelpet in https://github.com/kubernetes/kops/pull/11842 * Clarify the limitations of Azure DNS support by @kenji-cloudnatix in https://github.com/kubernetes/kops/pull/11844 * Refactor kube-controller-manager secrets by @johngmyers in https://github.com/kubernetes/kops/pull/11847 * Escape --skip-regex pattern by @rifelpet in https://github.com/kubernetes/kops/pull/11851 * Make aws-cni config more flexible and generalized by @moshevayner in https://github.com/kubernetes/kops/pull/11816 * Weaken some interfaces by @johngmyers in https://github.com/kubernetes/kops/pull/11837 * Handle containerExec hooks when using containerd by @hakman in https://github.com/kubernetes/kops/pull/11852 * Improve image copying by @johngmyers in https://github.com/kubernetes/kops/pull/11854 * Update helm to v3.6.1 by @olemarkus in https://github.com/kubernetes/kops/pull/11860 * Update CNI plugins to v0.9.1 by @hakman in https://github.com/kubernetes/kops/pull/11846 * Don't include irrelevant bootstrap addons by @johngmyers in https://github.com/kubernetes/kops/pull/11861 * Remove obsolete Spotinst manifest by @johngmyers in https://github.com/kubernetes/kops/pull/11862 * Enable cross-subnet mode with Calico by default by @hakman in https://github.com/kubernetes/kops/pull/11810 * Fix dryrun cluster creation by @johngmyers in https://github.com/kubernetes/kops/pull/11863 * Push alpha channel to stable by @moshevayner in https://github.com/kubernetes/kops/pull/11864 * Add a note about running update-expected when updating base AMI by @moshevayner in https://github.com/kubernetes/kops/pull/11865 * Make it simpler to spot missing files in integration tests by @olemarkus in https://github.com/kubernetes/kops/pull/11866 * fix: broken link by @choeffer in https://github.com/kubernetes/kops/pull/11793 * Decrease default values for net.ipv4.tcp_rmem and net.ipv4.tcp_wmem by @hakman in https://github.com/kubernetes/kops/pull/11868 * Remove version from addons by @hakman in https://github.com/kubernetes/kops/pull/11867 * Move most nodeup.Config data to config store by @johngmyers in https://github.com/kubernetes/kops/pull/11869 * Don't reconcile roles and policies if a profile is provided by @olemarkus in https://github.com/kubernetes/kops/pull/11836 * Use DualStack API NLB for IPv6 by @hakman in https://github.com/kubernetes/kops/pull/11870 * Simplify config server protocol by @johngmyers in https://github.com/kubernetes/kops/pull/11871 * Refactor etcd-client-cilium secrets by @johngmyers in https://github.com/kubernetes/kops/pull/11848 * Retain deleted keypairs by @johngmyers in https://github.com/kubernetes/kops/pull/11845 * Write config as ManagedFile by @johngmyers in https://github.com/kubernetes/kops/pull/11796 * Improve "kops distrust keypair" command by @johngmyers in https://github.com/kubernetes/kops/pull/11876 * Avoid spurious changes for ASG InstanceProtection and LT InstanceMonitoring by @hakman in https://github.com/kubernetes/kops/pull/11873 * Kubetest2 - set node-os-arch flag instead of skipping kubectl test on arm64 by @rifelpet in https://github.com/kubernetes/kops/pull/11879 * Improve completion for kops root command by @johngmyers in https://github.com/kubernetes/kops/pull/11880 * Spotinst: Update `spotinst/ocean-controller` to v1.0.76 by @liranp in https://github.com/kubernetes/kops/pull/11885 * support large/slow downloads by @aojea in https://github.com/kubernetes/kops/pull/11884 * Add support for darwin/arm64 on the client-side by @hakman in https://github.com/kubernetes/kops/pull/11883 * Refactor nodeup APIServer builder, part one by @johngmyers in https://github.com/kubernetes/kops/pull/11872 * Allow rotation of etcd-clients-ca-cilium by @johngmyers in https://github.com/kubernetes/kops/pull/11877 * [DigitalOcean] Increase droplet size for e2e tests by @srikiz in https://github.com/kubernetes/kops/pull/11887 * Set download timeout to 3 minutes by @hakman in https://github.com/kubernetes/kops/pull/11886 * Implement completion for "kops create keypair" by @johngmyers in https://github.com/kubernetes/kops/pull/11888 * Render managed files with Terraform by @johngmyers in https://github.com/kubernetes/kops/pull/9621 * Implement completion for "kops promote keypair" by @johngmyers in https://github.com/kubernetes/kops/pull/11892 * Fix nil-pointer dereference on dryrun by @johngmyers in https://github.com/kubernetes/kops/pull/11894 * Implement completion for "kops distrust keypair" by @johngmyers in https://github.com/kubernetes/kops/pull/11899 * Refactor etcd-clients-ca keyset for api-server by @johngmyers in https://github.com/kubernetes/kops/pull/11897 * Allow overriding the ServiceAccountIssuer for IRSA by @johngmyers in https://github.com/kubernetes/kops/pull/11853 * Remove unnecessary parameters from terraform finish methods by @rifelpet in https://github.com/kubernetes/kops/pull/11900 * Include GCP Project in terraform HCL2 output by @rifelpet in https://github.com/kubernetes/kops/pull/11901 * Use Cobra's built-in completion command by @johngmyers in https://github.com/kubernetes/kops/pull/11905 * Refactor apiserver-aggregator-ca by @johngmyers in https://github.com/kubernetes/kops/pull/11906 * Add support for IPv6 addresses to dns-controller by @hakman in https://github.com/kubernetes/kops/pull/11907 * Improve "kops get keypairs" by @johngmyers in https://github.com/kubernetes/kops/pull/11904 * Release notes for 1.21.0 by @justinsb in https://github.com/kubernetes/kops/pull/11910 * Update pause image to 3.5 by @rifelpet in https://github.com/kubernetes/kops/pull/11909 * Upgrade Cobra to 1.2.1 by @johngmyers in https://github.com/kubernetes/kops/pull/11912 * Capture logs from the containerd service by @hakman in https://github.com/kubernetes/kops/pull/11914 * Do not set both CIDR and IPv6CIDR on sg rules by @olemarkus in https://github.com/kubernetes/kops/pull/11915 * Remove unused test files from legacy IAM by @rifelpet in https://github.com/kubernetes/kops/pull/11918 * Reduce policy size further by @olemarkus in https://github.com/kubernetes/kops/pull/11843 * Set KOPS_RUN_TOO_NEW_VERSION in scenario scripts by @rifelpet in https://github.com/kubernetes/kops/pull/11923 * Update version support matrix for 1.21 by @johngmyers in https://github.com/kubernetes/kops/pull/11922 * Rename the "ca" keyset to "kubernetes-ca" by @johngmyers in https://github.com/kubernetes/kops/pull/11921 * Allow fsstore to be used for mock s3 rules by @olemarkus in https://github.com/kubernetes/kops/pull/11916 * Implement completion for "kops rolling-update cluster" by @johngmyers in https://github.com/kubernetes/kops/pull/11924 * Implement completion for "kops update cluster" by @johngmyers in https://github.com/kubernetes/kops/pull/11926 * Update the status of cloud providers by @johngmyers in https://github.com/kubernetes/kops/pull/11930 * Remove obsolete files by @johngmyers in https://github.com/kubernetes/kops/pull/11932 * Implement completion for validate and upgrade by @johngmyers in https://github.com/kubernetes/kops/pull/11927 * Continue if a single addon fails to be applied by @olemarkus in https://github.com/kubernetes/kops/pull/11933 * Remove unused golden files from manyaddons test by @olemarkus in https://github.com/kubernetes/kops/pull/11935 * Schedule certmanager webhook on control plane by @olemarkus in https://github.com/kubernetes/kops/pull/11934 * [Digital Ocean] Remove PrivateNetworking option in droplet since it's deprecated by @srikiz in https://github.com/kubernetes/kops/pull/11936 * Run cert-manager cainjector on CP nodes as well by @olemarkus in https://github.com/kubernetes/kops/pull/11938 * Fix various CCM issues by @olemarkus in https://github.com/kubernetes/kops/pull/11939 * Add podPidsLimit / --pod-max-pids support by @uthark in https://github.com/kubernetes/kops/pull/11898 * Add log rotation for etcd-cilium.log by @hakman in https://github.com/kubernetes/kops/pull/11943 * [Digital Ocean] Modify error message when multiple zones are specified by @srikiz in https://github.com/kubernetes/kops/pull/11944 * Fix bullet point rendering in state doc by @rothgar in https://github.com/kubernetes/kops/pull/11948 * Implement some completion for "kops create cluster" by @johngmyers in https://github.com/kubernetes/kops/pull/11940 * check if the instance is under an asg by @olivierpilotte in https://github.com/kubernetes/kops/pull/11958 * Use etcd v3.5.0 for Kubernetes 1.22+ by @hakman in https://github.com/kubernetes/kops/pull/11941 * Unconditionally reenable KMS and Volume Limit tests by @rifelpet in https://github.com/kubernetes/kops/pull/11966 * Suppress usage for errors returned from RunE by @johngmyers in https://github.com/kubernetes/kops/pull/11969 * Implement completion for "kops create instancegroup" by @johngmyers in https://github.com/kubernetes/kops/pull/11957 * Refactor keysets for etcd-manager by @johngmyers in https://github.com/kubernetes/kops/pull/11964 * Cilium etcd fixes by @olemarkus in https://github.com/kubernetes/kops/pull/11961 * Refactor service-account signing key by @johngmyers in https://github.com/kubernetes/kops/pull/11974 * Add "all" variants of key rotation commands by @johngmyers in https://github.com/kubernetes/kops/pull/11971 * Add documentation for keypair rotation by @johngmyers in https://github.com/kubernetes/kops/pull/11972 * Implement completion for delete commands by @johngmyers in https://github.com/kubernetes/kops/pull/11970 * Issue certs using CA KeypairID in NodeupConfig by @johngmyers in https://github.com/kubernetes/kops/pull/11975 * Stop writing the certificate-only keyset.yaml by @johngmyers in https://github.com/kubernetes/kops/pull/11977 * Provide more information on rotating secrets by @johngmyers in https://github.com/kubernetes/kops/pull/11978 * Spotinst: Update `spotinst/ocean-controller` to v1.0.77 by @liranp in https://github.com/kubernetes/kops/pull/11981 * [Digital Ocean] Fix sporadic volume detach error when volume is already detached by @srikiz in https://github.com/kubernetes/kops/pull/11963 * Fix broken link to contributing by @moshevayner in https://github.com/kubernetes/kops/pull/11979 * Add "kops trust keypair" command by @johngmyers in https://github.com/kubernetes/kops/pull/11973 * Implement completion for "kops edit" commands by @johngmyers in https://github.com/kubernetes/kops/pull/11980 * Add missing IAM permissions to the NTH docs by @olemarkus in https://github.com/kubernetes/kops/pull/11984 * Implement completion for "kops export kubeconfig" by @johngmyers in https://github.com/kubernetes/kops/pull/11983 * Cobra cleanups by @johngmyers in https://github.com/kubernetes/kops/pull/11985 * Fix "kops export kubeconfig" by @johngmyers in https://github.com/kubernetes/kops/pull/11988 * Add region to aws lbc by @olemarkus in https://github.com/kubernetes/kops/pull/11990 * Move containerd config from cloudup to nodeup by @olemarkus in https://github.com/kubernetes/kops/pull/11986 * Change set and unset commands into flags on "kops edit cluster" by @johngmyers in https://github.com/kubernetes/kops/pull/11987 * Remove dead code by @johngmyers in https://github.com/kubernetes/kops/pull/11993 * Implement completion for "kops toolbox", part one by @johngmyers in https://github.com/kubernetes/kops/pull/11992 * hack/upload: avoid ACLs for GCS buckets with UBLA enabled by @spiffxp in https://github.com/kubernetes/kops/pull/11994 * Azure - support VMSS availability zones by @rifelpet in https://github.com/kubernetes/kops/pull/11962 * Upgrade aws-sdk-go by @rifelpet in https://github.com/kubernetes/kops/pull/11996 * remove references to kubernetes-release-dev by @spiffxp in https://github.com/kubernetes/kops/pull/11997 * Clean up extra spaces by @jayonlau in https://github.com/kubernetes/kops/pull/11989 * Verify CA keypair IDs for kops-controller-issued certs by @johngmyers in https://github.com/kubernetes/kops/pull/11982 * Use keypair IDs for non-kops-controller-issued worker node certs by @johngmyers in https://github.com/kubernetes/kops/pull/11998 * Update alpha channel with July k8s releases and bump Ubuntu EC2 AMI version by @moshevayner in https://github.com/kubernetes/kops/pull/12000 * Dedicated function for ccm permissons by @olemarkus in https://github.com/kubernetes/kops/pull/11991 * Add keypair rotation test scenario by @rifelpet in https://github.com/kubernetes/kops/pull/12001 * Fix file permissions on new keypair rotation test scenario by @rifelpet in https://github.com/kubernetes/kops/pull/12005 * Implement completion for "kops toolbox", part two by @johngmyers in https://github.com/kubernetes/kops/pull/11999 * Issue kubelet cert on apiserver nodes for k8s before 1.19 by @johngmyers in https://github.com/kubernetes/kops/pull/12002 * Refactor more kube-apiserver credentials by @johngmyers in https://github.com/kubernetes/kops/pull/12003 * Accommodate older destination kops versions in upgrade-ab scenario by @johngmyers in https://github.com/kubernetes/kops/pull/12008 * Fix kops binary references in keypair rotation scenario by @rifelpet in https://github.com/kubernetes/kops/pull/12009 * Don't provision SSH key by default on AWS by @johngmyers in https://github.com/kubernetes/kops/pull/12011 * Deprecate the Lyft CNI by @johngmyers in https://github.com/kubernetes/kops/pull/12010 * Remove apiserver's access to controller-manager secrets by @johngmyers in https://github.com/kubernetes/kops/pull/12006 * Release 1.22.0-alpha.2 by @hakman in https://github.com/kubernetes/kops/pull/12012 * Fix keypair rotation scenario kops binary by @rifelpet in https://github.com/kubernetes/kops/pull/12013 * Keypair rotation scenario - create report directory by @rifelpet in https://github.com/kubernetes/kops/pull/12015 * Release notes for 1.22.0-alpha.2 by @hakman in https://github.com/kubernetes/kops/pull/12014 * Clarify how cloud labels are used in getting started docs by @rifelpet in https://github.com/kubernetes/kops/pull/12017 * Add azure support for specifying a shared vpc by @rifelpet in https://github.com/kubernetes/kops/pull/12018 * Report unknown feature flags as such by @johngmyers in https://github.com/kubernetes/kops/pull/12020 * Promote AWS VPC CNI to stable by @johngmyers in https://github.com/kubernetes/kops/pull/12021 * keypair rotation scenario - fix base64 decoding by @rifelpet in https://github.com/kubernetes/kops/pull/12022 * Set vpc-id on aws lbc by @olemarkus in https://github.com/kubernetes/kops/pull/12023 * Add irsa support for node termination handler by @olemarkus in https://github.com/kubernetes/kops/pull/12024 * Return a clearer error when terraform is used on an unsupported provider by @rifelpet in https://github.com/kubernetes/kops/pull/11953 * Remove redundant call to addSnapshotPermissions by @olemarkus in https://github.com/kubernetes/kops/pull/12025 * Remove addons that no longer works by @olemarkus in https://github.com/kubernetes/kops/pull/12027 * Fix certificate bootstrap for non-kops-controller-bootstrap cloud providers by @johngmyers in https://github.com/kubernetes/kops/pull/12019 * Assert the correct number of kubeconfig CAs during keypair rotation by @rifelpet in https://github.com/kubernetes/kops/pull/12029 * keypair rotation - export new credentials between promote and distruts by @rifelpet in https://github.com/kubernetes/kops/pull/12032 * Update mkdocs dependencies to latest versions by @rifelpet in https://github.com/kubernetes/kops/pull/12031 * Implement completion for "kops get", part one by @johngmyers in https://github.com/kubernetes/kops/pull/12028 * Use kubeconfig for authentication and authorization as well by @johngmyers in https://github.com/kubernetes/kops/pull/12036 * Implement completion for "kops get", part two by @johngmyers in https://github.com/kubernetes/kops/pull/12039 * Remove unnecessary IAM permission by @johngmyers in https://github.com/kubernetes/kops/pull/12044 * Replace "kops describe keypair" with "kops get keypair -oyaml" by @johngmyers in https://github.com/kubernetes/kops/pull/12040 * Provision TLS server certs for controller-manager and scheduler by @johngmyers in https://github.com/kubernetes/kops/pull/12030 * Recommend kops 1.21.0 in alpha channel by @johngmyers in https://github.com/kubernetes/kops/pull/12051 * Promote channel alpha to stable by @johngmyers in https://github.com/kubernetes/kops/pull/12050 * Pull sshpubkey subcommands out of secrets by @johngmyers in https://github.com/kubernetes/kops/pull/12045 * Clean up "create secret" subcommands by @johngmyers in https://github.com/kubernetes/kops/pull/12055 * Clean up remaining secrets subcommands by @johngmyers in https://github.com/kubernetes/kops/pull/12056 * Use regional STS endpoint by @johngmyers in https://github.com/kubernetes/kops/pull/12043 * Use static pattern rules to reduce duplication by @johngmyers in https://github.com/kubernetes/kops/pull/12046 * Update aws-sdk-go to v1.40.10 by @hakman in https://github.com/kubernetes/kops/pull/12060 * Update controller-runtime to v0.9.5 by @hakman in https://github.com/kubernetes/kops/pull/12061 * Update containerd to v1.4.8 by @hakman in https://github.com/kubernetes/kops/pull/12059 * Cobra cleanups by @johngmyers in https://github.com/kubernetes/kops/pull/12063 * Update AWS CNI to v1.9.0 by @moshevayner in https://github.com/kubernetes/kops/pull/12065 * Update core-dns to v1.8.4 by @hakman in https://github.com/kubernetes/kops/pull/12062 * Cleanup various references to LaunchConfigurations by @rifelpet in https://github.com/kubernetes/kops/pull/12072 * Update containerd to v1.4.9 by @hakman in https://github.com/kubernetes/kops/pull/12073 * Fix cluster list action by @justinsb in https://github.com/kubernetes/kops/pull/12075 * GCE: TargetPool should ignore Lifecycle field by @justinsb in https://github.com/kubernetes/kops/pull/12079 * Update Ubuntu images to v20210720 by @hakman in https://github.com/kubernetes/kops/pull/12080 * Use SHA-256 for manifest hashes by @johngmyers in https://github.com/kubernetes/kops/pull/12087 * Update Calico to v3.20.0 by @hakman in https://github.com/kubernetes/kops/pull/12088 * Temporarily skip MetricsGrabber test by @rifelpet in https://github.com/kubernetes/kops/pull/12090 * Kubetest2 scenarios - provide absolute path to kops binary by @rifelpet in https://github.com/kubernetes/kops/pull/12091 * Add nth rebalance recommendation configs by @cheyilin in https://github.com/kubernetes/kops/pull/12083 * Also skip MetricsGrabber tests on 1.23 version marker by @rifelpet in https://github.com/kubernetes/kops/pull/12093 * Update Docker to v20.10.8 by @hakman in https://github.com/kubernetes/kops/pull/12096 * Update README.md by @youvegotmoxie in

This is the first alpha release of the kOps 1.33 series, which adds support for kubernetes 1.33. ## What's Changed * chore: avoid replacing client-go version in tests/e2e by @justinsb in https://github.com/kubernetes/kops/pull/17245 * chore: create script to update dependencies by @justinsb in https://github.com/kubernetes/kops/pull/17244 * docs: update 1.32 release note with beta release by @justinsb in https://github.com/kubernetes/kops/pull/17254 * Update flannel to v0.26.4 by @hakman in https://github.com/kubernetes/kops/pull/17179 * Remove removal notice for flannel and update docs by @hakman in https://github.com/kubernetes/kops/pull/17259 * Skip failing test in pull-kops-kubernetes-e2e-ubuntu-gce-build by @hakman in https://github.com/kubernetes/kops/pull/17260 * bare-metal: add some go tests to start to verify functionality by @justinsb in https://github.com/kubernetes/kops/pull/16896 * docs: updated etcdctl example by @vitaliyf in https://github.com/kubernetes/kops/pull/17263 * chore(channels): bump k8s and ubuntu ami versions in alpha channel by @moshevayner in https://github.com/kubernetes/kops/pull/17264 * Fix conditional for reconcile command in upgrade tests by @rifelpet in https://github.com/kubernetes/kops/pull/17265 * Split dpkg-query fields with a tab by @rifelpet in https://github.com/kubernetes/kops/pull/17271 * Better dumping via private IP when bastion is not set by @justinsb in https://github.com/kubernetes/kops/pull/17261 * metal: copy control plane config to nodes by @justinsb in https://github.com/kubernetes/kops/pull/17273 * chore(channels): promote alpha to stable - k8s and Ubuntu ami versions by @moshevayner in https://github.com/kubernetes/kops/pull/17276 * Remove cloud-config and cloud-provider from 1.33 apiserver by @rifelpet in https://github.com/kubernetes/kops/pull/17270 * chore(networking): upgrade amazon vpc cni to 1.19.3 by @moshevayner in https://github.com/kubernetes/kops/pull/17277 * Cleanup logging for reconcile cluster by @rifelpet in https://github.com/kubernetes/kops/pull/17282 * cloudup/gce: use slices and maps by @ameukam in https://github.com/kubernetes/kops/pull/17283 * make --admin configurable to rolling-update by @zetaab in https://github.com/kubernetes/kops/pull/17274 * Update k8s.io dependencies by @ameukam in https://github.com/kubernetes/kops/pull/17288 * gha: Introduce arm64 for tests by @ameukam in https://github.com/kubernetes/kops/pull/17286 * Bump CI tools by @ameukam in https://github.com/kubernetes/kops/pull/17292 * Skip hostnetwork + hostname tests through 1.33 by @rifelpet in https://github.com/kubernetes/kops/pull/17293 * Remove default CPU limits for aws-iam-authentication and node-problem-detector by @jim-barber-he in https://github.com/kubernetes/kops/pull/17237 * Change to cx22 as default instance for Hetzner by @bjornharrtell in https://github.com/kubernetes/kops/pull/17296 * Bump golang.org/x/crypto by @rifelpet in https://github.com/kubernetes/kops/pull/17303 * Use ephemeral S3 buckets for E2E tests by @ameukam in https://github.com/kubernetes/kops/pull/17157 * kube-router: bump version v2.1.1 -> v2.5.0 by @aauren in https://github.com/kubernetes/kops/pull/17297 * Update Calico to v3.29.2 by @hakman in https://github.com/kubernetes/kops/pull/17311 * Update metrics-server to v0.7.2 by @hakman in https://github.com/kubernetes/kops/pull/17313 * Update Cilium to v1.16.7 by @hakman in https://github.com/kubernetes/kops/pull/17312 * Bump Go to v1.24 by @ameukam in https://github.com/kubernetes/kops/pull/17295 * chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in https://github.com/kubernetes/kops/pull/17317 * ServiceTrafficDistribution cannot be switched off for kubernetes master (for scalability tests) by @dims in https://github.com/kubernetes/kops/pull/17318 * chore(channels): promote alpha to stable by @moshevayner in https://github.com/kubernetes/kops/pull/17320 * WarmPool should implement CompareWithID by @justinsb in https://github.com/kubernetes/kops/pull/17323 * build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in https://github.com/kubernetes/kops/pull/17322 * Fix JSON circular dependency in ASG / WarmPool by @justinsb in https://github.com/kubernetes/kops/pull/17321 * Update dependencies by @rifelpet in https://github.com/kubernetes/kops/pull/17333 * Remove cilium-config-path mount in cilium-agent container by @admun in https://github.com/kubernetes/kops/pull/17319 * Support 1.33 pre-releases with --cloud-provider flag removal validation by @rifelpet in https://github.com/kubernetes/kops/pull/17340 * fix(cilium): operator prometheus port by @raffis in https://github.com/kubernetes/kops/pull/17336 * build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot in https://github.com/kubernetes/kops/pull/17343 * Pin GCP CCM image to v32.2.4 by @rifelpet in https://github.com/kubernetes/kops/pull/17348 * toolbox: ensure SSH keys are loaded by @ameukam in https://github.com/kubernetes/kops/pull/17346 * Remove legacy addons by @rifelpet in https://github.com/kubernetes/kops/pull/17332 * feat: Added cni-exclusive setting for cilium by @runitmisra in https://github.com/kubernetes/kops/pull/17361 * add goaway-chance parameter for kube-apiserver by @succa in https://github.com/kubernetes/kops/pull/17357 * Update etcd to v3.5.21 by @hakman in https://github.com/kubernetes/kops/pull/17367 * Bump skip.regex for failing tests to 1.34 by @hakman in https://github.com/kubernetes/kops/pull/17371 * Make GCE backend service regional for the Terraform target by @flopib in https://github.com/kubernetes/kops/pull/17229 * Enable more admission controllers by @ameukam in https://github.com/kubernetes/kops/pull/17354 * Fix diff formatting of bools by @justinsb in https://github.com/kubernetes/kops/pull/17375 * gce: use typed ServiceAccount in IAM tasks by @justinsb in https://github.com/kubernetes/kops/pull/17379 * gce: set values for role labels by @justinsb in https://github.com/kubernetes/kops/pull/17378 * Add support for Gateway API within Cilium by @jValdron in https://github.com/kubernetes/kops/pull/17358 * fix get assets by @justinsb in https://github.com/kubernetes/kops/pull/17385 * tests: add tests for kubectl get assets by @justinsb in https://github.com/kubernetes/kops/pull/17384 * Release 1.33.0-alpha.1 by @justinsb in https://github.com/kubernetes/kops/pull/17389 ## New Contributors * @bjornharrtell made their first contribution in https://github.com/kubernetes/kops/pull/17296 * @admun made their first contribution in https://github.com/kubernetes/kops/pull/17319 * @runitmisra made their first contribution in https://github.com/kubernetes/kops/pull/17361 * @succa made their first contribution in https://github.com/kubernetes/kops/pull/17357 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.32.0-beta.1...v1.33.0-alpha.1

This is the first beta release of the kOps 1.32 series, which adds support for kubernetes 1.32. kOps 1.32 is planned as a small release without significant additional features beyond updated support for kubernetes 1.32 and associated ecosystem updates. Significant kOps features will instead target kOps 1.33. # Changes of note * Kubernetes minor version upgrades to 1.31 or later should be performed using a new `kops reconcile` cluster command. Kubernetes 1.31 introduces stricter checks around the version-skew policy. While kOps has always followed the version-skew policy, there was an edge case: nodes that were added by an autoscaler during a rolling-update would not always follow the version-skew policy. We recommend trying the new `kops reconcile` command, see [docs/tutorial/upgrading-kubernetes.md](https://github.com/kubernetes/kops/blob/master/docs/tutorial/upgrading-kubernetes.md) for more details. This functionality was introduced in kOps 1.32. ## What's Changed * build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by @dependabot in https://github.com/kubernetes/kops/pull/17139 * chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in https://github.com/kubernetes/kops/pull/17136 * Temporarily skip failing cilium test to unblock PRs by @rifelpet in https://github.com/kubernetes/kops/pull/17140 * Only set NTH ManagedASGTag label if it doesn't already exist by @rifelpet in https://github.com/kubernetes/kops/pull/17141 * Dump ip routes as job artifacts by @rifelpet in https://github.com/kubernetes/kops/pull/17149 * Update calico to 3.29.1 by @rifelpet in https://github.com/kubernetes/kops/pull/17148 * chore(channels): promote alpha to stable (k8s and ubuntu ami versions) by @moshevayner in https://github.com/kubernetes/kops/pull/17150 * s3 vfs: fix delete all versions to handle errors by @justinsb in https://github.com/kubernetes/kops/pull/17151 * chore: add context to rolling update functions by @justinsb in https://github.com/kubernetes/kops/pull/17153 * chore: refactor factory to accept a cluster by @justinsb in https://github.com/kubernetes/kops/pull/17154 * Add assets Runc 1.2 by @ameukam in https://github.com/kubernetes/kops/pull/17156 * Update etcd to v3.5.17 by @hakman in https://github.com/kubernetes/kops/pull/17160 * chore(networking): bump aws-vpc-cni version to 1.19.2 by @moshevayner in https://github.com/kubernetes/kops/pull/17163 * Only configure STS region for Route 53 when we obtain it using IDMS by @jValdron in https://github.com/kubernetes/kops/pull/17161 * Install CNI network plugins only for specific CNIs by @hakman in https://github.com/kubernetes/kops/pull/17162 * Remove support for K8s 1.26 in kOps 1.32 by @hakman in https://github.com/kubernetes/kops/pull/17167 * chore: generate kubeconfig on the fly by @justinsb in https://github.com/kubernetes/kops/pull/17155 * Update Cilium to v1.16.5 by @hakman in https://github.com/kubernetes/kops/pull/17170 * Skip test `Services should implement NodePort and HealthCheckNodePort… by @hakman in https://github.com/kubernetes/kops/pull/17172 * Adding VolumeType for Azure for etcdMembers by @ajgupta42 in https://github.com/kubernetes/kops/pull/17171 * Propagate IG NodeLabels to k8s nodes in Hetzner by @rifelpet in https://github.com/kubernetes/kops/pull/16739 * Update containerd to v1.7.24 by @hakman in https://github.com/kubernetes/kops/pull/17178 * Bump alpha channel with Dec 24 K8s releases by @hakman in https://github.com/kubernetes/kops/pull/17181 * Update Go to v1.23.4 by @hakman in https://github.com/kubernetes/kops/pull/17184 * fix the random order of block_device_mappings render by @AldoFusterTurpin in https://github.com/kubernetes/kops/pull/17180 * Add kindnet network plugin by @aojea in https://github.com/kubernetes/kops/pull/17158 * aws: Update EBS CSI driver to v1.38.1 by @hakman in https://github.com/kubernetes/kops/pull/17193 * Use SDK's built-in resolver for S3Path.GetHTTPsUrl by @rifelpet in https://github.com/kubernetes/kops/pull/17183 * Add IPv6 support for kindnet by @hakman in https://github.com/kubernetes/kops/pull/17190 * Fix aws cli command for discovering 24.04 AMIs by @rifelpet in https://github.com/kubernetes/kops/pull/17196 * chore: Promote alpha channel to stable by @hakman in https://github.com/kubernetes/kops/pull/17197 * Use the same port for hubble-metrics that is used by cilium by @kforsthoevel in https://github.com/kubernetes/kops/pull/17177 * Refactor validation logic around checking for multiple options by @justinsb in https://github.com/kubernetes/kops/pull/17187 * Update containerd to v1.7.25 by @hakman in https://github.com/kubernetes/kops/pull/17200 * Use Ubuntu 24.04 (Noble) as the default distro for K8s 1.32+ by @hakman in https://github.com/kubernetes/kops/pull/17203 * kindnet: use commands instead of args for the container image by @aojea in https://github.com/kubernetes/kops/pull/17204 * delete cluster: avoid logspam on GCE "resource in use" error by @justinsb in https://github.com/kubernetes/kops/pull/17211 * toolbox dump: include full instance details on GCE by @justinsb in https://github.com/kubernetes/kops/pull/17212 * reconcile: wait for apiserver to response before trying rolling-update by @justinsb in https://github.com/kubernetes/kops/pull/17208 * bump kindnet default version to 1.8.2 by @aojea in https://github.com/kubernetes/kops/pull/17210 * reconcile: if --yes is not provided, print the same output as `update cluster` does by @justinsb in https://github.com/kubernetes/kops/pull/17214 * fix kindnet permissions by @aojea in https://github.com/kubernetes/kops/pull/17213 * kindnet: Support IP aliases with kindnet on gce by @justinsb in https://github.com/kubernetes/kops/pull/17206 * gce: Update scale test scenario by @hakman in https://github.com/kubernetes/kops/pull/17209 * Kindnet requires cluster to provide ipam via the node.spec.podcidr by @aojea in https://github.com/kubernetes/kops/pull/17215 * chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in https://github.com/kubernetes/kops/pull/17216 * Support strong-typing for --target values by @justinsb in https://github.com/kubernetes/kops/pull/16978 * tests: use reconcile command for kOps 1.31+ by @justinsb in https://github.com/kubernetes/kops/pull/17152 * Update Go to v1.23.5 by @hakman in https://github.com/kubernetes/kops/pull/17217 * e2e: add `kops validate` step to metal test by @justinsb in https://github.com/kubernetes/kops/pull/16943 * Remove reconcile flag from `kops update` by @justinsb in https://github.com/kubernetes/kops/pull/17220 * chore(channels): promote alpha to stable by @moshevayner in https://github.com/kubernetes/kops/pull/17232 * Add docs for the new kops reconcile cluster command by @rifelpet in https://github.com/kubernetes/kops/pull/17191 * Promote Ubuntu 24.04 to stable in Kops 1.31 by @rifelpet in https://github.com/kubernetes/kops/pull/17192 * Add more IOPS to help raft latencies by @hakuna-matatah in https://github.com/kubernetes/kops/pull/17233 * Bump actions/setup-go from 5.2.0 to 5.3.0 by @dependabot in https://github.com/kubernetes/kops/pull/17236 * docs: update release note for 1.31 now that it is released by @justinsb in https://github.com/kubernetes/kops/pull/17238 * docs: create placeholder docs for 1.32 and 1.33 releases by @justinsb in https://github.com/kubernetes/kops/pull/17239 * Release 1.32.0-beta.1 by @justinsb in https://github.com/kubernetes/kops/pull/17241 ## New Contributors * @jValdron made their first contribution in https://github.com/kubernetes/kops/pull/17161 * @ajgupta42 made their first contribution in https://github.com/kubernetes/kops/pull/17171 * @AldoFusterTurpin made their first contribution in https://github.com/kubernetes/kops/pull/17180 * @kforsthoevel made their first contribution in https://github.com/kubernetes/kops/pull/17177 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.31.0-beta.1...v1.32.0-beta.1

## What's Changed * Automated cherry pick of #17141: Only set NTH ManagedASGTag label if it doesn't already exist by @rifelpet in https://github.com/kubernetes/kops/pull/17143 * Automated cherry pick of #17161: Only configure STS region for Route 53 when we obtain it using IDMS by @johngmyers in https://github.com/kubernetes/kops/pull/17165 * Automated cherry pick of #17184: Update Go to v1.23.4 by @hakman in https://github.com/kubernetes/kops/pull/17186 * Automated cherry pick of #17180: fix the random order of block_device_mappings render Include by @hakman in https://github.com/kubernetes/kops/pull/17189 * Automated cherry pick of #17177: Use the same port for hubble-metrics that is used by cilium by @rifelpet in https://github.com/kubernetes/kops/pull/17199 * Automated cherry pick of #17183: Use SDK's built-in resolver for S3Path.GetHTTPsUrl by @rifelpet in https://github.com/kubernetes/kops/pull/17201 * Automated cherry pick of #17217: Update Go to v1.23.5 by @hakman in https://github.com/kubernetes/kops/pull/17219 * Release 1.30.4 by @johngmyers in https://github.com/kubernetes/kops/pull/17242 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.30.3...v1.30.4

## What's Changed * Update Service Account Issuer Migration doc by @elliotdobson in https://github.com/kubernetes/kops/pull/16711 * Bump nvidia-driver-535 for CUDA 12 support by @ddelange in https://github.com/kubernetes/kops/pull/16560 * Use a different healthcheck port for AWS CSI controller by @rifelpet in https://github.com/kubernetes/kops/pull/16909 * tests: Fix argument order in assertions by @pierreprinetti in https://github.com/kubernetes/kops/pull/16912 * Upgrade Cilium to v1.16.3 by @rifelpet in https://github.com/kubernetes/kops/pull/16914 * dns: Update coredns to v1.11.3 by @ataut-pai in https://github.com/kubernetes/kops/pull/16915 * API Server: memory management related flags by @rsafonseca in https://github.com/kubernetes/kops/pull/16918 * metal: Run apt-get update before install by @hakman in https://github.com/kubernetes/kops/pull/16919 * build(deps): bump actions/dependency-review-action from 4.3.4 to 4.3.5 by @dependabot in https://github.com/kubernetes/kops/pull/16923 * build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by @dependabot in https://github.com/kubernetes/kops/pull/16925 * build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in https://github.com/kubernetes/kops/pull/16924 * Add support for configuring environment variables on kube-apiserver by @rsafonseca in https://github.com/kubernetes/kops/pull/16920 * openstack: Upgrade to Gophercloud v2 by @pierreprinetti in https://github.com/kubernetes/kops/pull/16911 * build(deps): bump actions/dependency-review-action from 4.3.5 to 4.4.0 by @dependabot in https://github.com/kubernetes/kops/pull/16930 * feat(cilium): adding EnableLocalRedirectPolicy parameter by @ana-aguilar7 in https://github.com/kubernetes/kops/pull/16929 * Reduce number of nodes in manyaddons tests by @rifelpet in https://github.com/kubernetes/kops/pull/16934 * Fix: Normalize the SQS policies before comparing them by @justinsb in https://github.com/kubernetes/kops/pull/16937 * Allow updating the cluster one instance group at a time by @justinsb in https://github.com/kubernetes/kops/pull/16936 * Spotinst: add aggressive scale down feature by @yehielnetapp in https://github.com/kubernetes/kops/pull/16931 * e2e tests: dump ip information for each VM by @justinsb in https://github.com/kubernetes/kops/pull/16942 * e2e: name artifacts after the tests by @justinsb in https://github.com/kubernetes/kops/pull/16941 * tests: run kops toolbox dump in bare-metal e2e by @justinsb in https://github.com/kubernetes/kops/pull/16940 * chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in https://github.com/kubernetes/kops/pull/16947 * openstack: add external dns support by @zetaab in https://github.com/kubernetes/kops/pull/16948 * chore(upup): bump aws-cni to 1.18.6 by @moshevayner in https://github.com/kubernetes/kops/pull/16949 * feat(docs): add toggle for light/dark mode support by @moshevayner in https://github.com/kubernetes/kops/pull/16951 * chore(channels): promote alpha to stable by @moshevayner in https://github.com/kubernetes/kops/pull/16952 * build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0 by @dependabot in https://github.com/kubernetes/kops/pull/16953 * Fix channels for K8s 1.26 by @hakman in https://github.com/kubernetes/kops/pull/16958 * refactor: build assets for kubernetes and nodeup explicitly by @justinsb in https://github.com/kubernetes/kops/pull/16954 * refactor: create abstraction over cluster/instancegroup for building assets by @justinsb in https://github.com/kubernetes/kops/pull/16955 * Add hashes for containerd 1.17.22 by @justinsb in https://github.com/kubernetes/kops/pull/16962 * chore(channels): bump k8s and ubuntu jammy ami versions in alpha channel by @moshevayner in https://github.com/kubernetes/kops/pull/16964 * Recognize fedora 41 and debian 13 by @justinsb in https://github.com/kubernetes/kops/pull/16963 * Remove more unnecessary IMDS request logging by @rifelpet in https://github.com/kubernetes/kops/pull/16966 * Use port 9811 for EBS CSI controller healthcheck by @rifelpet in https://github.com/kubernetes/kops/pull/16967 * chore(channels): promoe alpha to stable (k8s and ubuntu ami) by @moshevayner in https://github.com/kubernetes/kops/pull/16973 * Fix version upgrade kubelet support by @rsafonseca in https://github.com/kubernetes/kops/pull/16932 * Remove unusued kubernetesVersion from AssetBuilder by @justinsb in https://github.com/kubernetes/kops/pull/16976 * tests: fix linter-detected problem with error handling by @justinsb in https://github.com/kubernetes/kops/pull/16974 * Fixup kubelet and controlPlaneKubelet config building by @justinsb in https://github.com/kubernetes/kops/pull/16975 * Add `kops reconcile cluster` command by @justinsb in https://github.com/kubernetes/kops/pull/16980 * reconcile command to combine update and rolling-update by @justinsb in https://github.com/kubernetes/kops/pull/16939 * chore: fix some function names in comment by @cuiyourong in https://github.com/kubernetes/kops/pull/16981 * Generate hashes for latest kube versions by @justinsb in https://github.com/kubernetes/kops/pull/16984 * Dial down warning level when asset is not found by @justinsb in https://github.com/kubernetes/kops/pull/16985 * OpenStack: update csi images by @jauru in https://github.com/kubernetes/kops/pull/17134 * chore(networking): bump aws-cni to 1.19.0 by @moshevayner in https://github.com/kubernetes/kops/pull/17137 * Release 1.31.0-beta.1 by @justinsb in https://github.com/kubernetes/kops/pull/17138 ## New Contributors * @pierreprinetti made their first contribution in https://github.com/kubernetes/kops/pull/16912 * @ataut-pai made their first contribution in https://github.com/kubernetes/kops/pull/16915 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.31.0-alpha.1...v1.31.0-beta.1