What's Changed

Feature

• Introduced a Prometheus-compatible metrics endpoint #176
  • Enable with --metrics-server; serves /metrics with control plane health gauges on 127.0.0.1:9105 (configurable via --metrics-bind-address)
• Added support for attaching to a host-managed container runtime (containerd or CRI-O) #181
  • Set --container-runtime-endpoint (e.g. unix:///run/crio/crio.sock) to skip the embedded containerd; the host then supplies the runtime, OCI runtime, CNI plugin binaries and sandbox image
• Added CPU manager support for latency-sensitive workloads #183
  • New --cpu-manager-policy, --cpu-manager-policy-options, --system-reserved and --reserved-cpus flags
  • For more details, refer to this docs
• Auto-detect the network MTU, with an override via --mtu #179
  • Picks up reduced MTUs on VPN/tunnel/PPPoE links and applies them to the CNI bridge (cni0) and pod veth interfaces
  • For more details, refer to this docs
• Portainer Edge Agent now tracks the lts tag, and the image is configurable via --portainer-edge-image #177
  • Any image other than the default is pulled from the registry rather than loaded from the embedded image

Fixes

• Fixed an issue where the EXTERNAL-IP was not set when an existing service was changed to type LoadBalancer #178
  • Also added --load-balancer-ip to publish services on an address other than the node IP
• Fixed kubesoloctl writing the kubeconfig to the wrong user's home directory #185
  • Ownership is now resolved only from an explicit sudo/doas escalation; in a plain root shell (e.g. after sudo su -) the kubeconfig goes to root's home rather than being attributed to the original login user
• Fixed external-dependency builds embedding artifacts they do not use #184

Chore

• Updated KubeSolo to track Kubernetes v1.35.7 and Kine v0.16.3 #180
• Dropped the :latest container image tag and split CI publishing to be fork-safe #174
  • Images must now be pulled by an explicit version tag
• Bumped google.golang.org/grpc 1.80.0 -> 1.82.1 #175
• Bumped github.com/google/cel-go 0.26.0 -> 0.29.0 #182

New Contributors

• @c92s made their first contribution in #184

Full Changelog: v1.1.9...v1.2.0

What's Changed

Chore

• Bumped Kubernetes to v1.34.9 #173

Fixes

• Fixed an issue where KubeSolo was attempting to write to an immutable root filesystems #171

Full Changelog: v1.1.8...v1.1.9

What's Changed

Feature

• Added --node-ip flag (env KUBESOLO_NODE_IP) to pin the node IP on multi-NIC hosts #167
  • Applies to the apiserver advertise-address, kubeconfig, kubelet node IP, and LoadBalancer EXTERNAL-IP

Fixes

• Fixed an issue where a node IP change regenerated the entire PKI tree including the CA, invalidating previously distributed kubeconfigs — the CA is now preserved and only leaf certificates are re-signed #167
• Fixed non-deterministic node IP auto-detection on multi-NIC hosts, now preferring a private (RFC 1918) address #167
  Chore
• Removed the edge memory overrides; KubeSolo now always uses upstream Kubernetes and containerd defaults #166

Full Changelog: v1.1.7...v1.1.8

What's Changed

Feature

• Introduced kubesoloctl, a management CLI tool for KubeSolo #139
  • For more information, refer to this docs
• Introduced Container mode to support KubeSolo on macOS, WSL2, or any Linux dev host with Docker Engine #106
  • For more details, refer to this docs
• Introduced native d2k integration, Docker-to-Kubernetes API translator #156
  • For more details, refer to this docs
• Auto-regenerate certificates when the node IP changes #159
• Added fuse-overlayfs support where the rootfs is an overlay #160

Fixes

• Fixed an issue where optional components failure exit the service #163
• Fixed an issue Portainer Edge env vars were stripped by sudo env_reset #161
• Fixed an issue where false-positive runc warning messages flooding #157
• Added the missing --startup-timeout flag to the docs #154

Chore

• Updated KubeSolo to track Kubernetes v1.34.8 #162
• Bumped embedded dependency versions #164
  • Go 1.26.2 → 1.26.4
  • Portainer Agent 2.39.2 -> 2.39.4
  • CoreDNS 1.14.3 -> 1.14.4

New Contributors

• @benoitschipper made their first contribution in #154
• @rothgar made their first contribution in #160
• @testA113 made their first contribution in #162

Full Changelog: v1.1.6...v1.1.7

What's Changed

Feature

• Added a --timeout flag to allow overriding the default control plane startup timeout #152

Fixes

• Fixed an issue where compaction was not working correctly #153
  • If your state.db has grown due to this issue, compaction will run automatically after 5 minutes of uptime, and the vacuum process will run on the next restart

Chore

• Updated the README #151

Full Changelog: v1.1.5...v1.1.6

What's Changed

Chore

• Bumped Go to 1.26.2
• Bumped Portainer Agent to 2.39.2-LTS
• Bumped CoreDNS to 1.14.3
• Bumped local-path-provisioner to 0.0.36
• Bumped Kubernetes to 1.34.7

Feature

• Added --disable-ipv6 flag to support disabling IPv6 #150
• Added --db-wal-repair flag to detect SQLite WAL corruption on startup and recover from unclean shutdowns caused by power loss #148

Fixes

• Fixed an issue where registry config was being wiped on restart #147

New Contributors

• @xiezhuojin made their first contribution in #147

Full Changelog: v1.1.4...v1.1.5

What's Changed

Feature

• Added --full flag (KUBESOLO_FULL env var) to run with upstream Kubernetes defaults instead of edge-optimised overrides, useful for CI and powerful machines. It is disabled by default - #143

Security

• Fixed CVE-2026-33816 - #138

Fixes

• Fixed pod egress connectivity loss after reboot by owning pod masquerade rules directly instead of relying on kube-proxy or the CNI bridge plugin - #140

Full Changelog: v1.1.3...v1.1.4

What's Changed

Chore

• Bumped Go to 1.26.1
• Bumped Portainer Agent to 2.39.1-LTS
• Bumped the following actions in CI and release GitHub Actions:
  • actions/checkout@v6
  • actions/setup-go@v6
  • actions/upload-artifact@v7
• Added arm architecture support for musl - #112
• Added riscv64 architecture support for musl - #114

Feature

• Added support for registry configuration - #126

Security

• CVE-2026-33186 - bumped google.golang.org/grpc to v1.79.3
• CVE-2026-39883 - bumped go.opentelemetry.io/otel/sdk to v1.43.0
• CVE-2024-28180 - bumped github.com/go-jose/go-jose/v4 to 4.1.4
• CVEs - bumped github.com/nats-io/nats-server to v2.12.6

Improvements

• Optimized NodeSetter webhook for patching objects efficiently - #118
• Added cgroupv2 detection, nftables proxy mode for kube-proxy including table flush on start, and kernel loading - #116
• Added support for registry configuration via hosts.toml - #126
• Optimized binary size, crun, zstd compression, online/offline build variants - #117

Fixes

• Updated container images to use fully-qualified image references for proper loading - #115
• Normalized hostname for consistency - #116
• Added mutex to prevent data race for the use of client set in webhook - #122
• Fixed WaitGroup deadlocks and premature readiness signaling on failed startup paths - #123 and #124
• Fixed Alpine 3.23 compatibility issues causing post-reboot crashes #132
• Fixed a few issues for the installation script - #130
• Fixed an issue where stale runtime state caused pod sync failures on restart - #127

New Contributors

• @Ritish134 made their first contribution in #112
• @mmoll made their first contribution in #114
• @nova8-technologies made their first contribution in #115
• @samdulam made their first contribution in #132

Full Changelog: v1.1.2...v1.1.3

What's Changed

• fix(controller): set endpoint slices batch settings to the default to support headless service lookup by @stevensbkang in #111

Full Changelog: v1.1.1...v1.1.2

Chore

• chore(deps): bump Go to 1.25.7
• chore(deps): bump Kubernetes to 1.34.4
• chore(deps): bump CoreDNS to 1.14.1
• chore(deps): bump Local Path Provisioner to 0.0.34
• chore(deps): bump Portainer Agent to 2.39.0-LTS
• chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in the go_modules group across 1 directory by @dependabot[bot] in #104
• chore(deps): bump github.com/nats-io/nats-server/v2 from 2.12.0 to 2.12.3 in the go_modules group across 1 directory by @dependabot[bot] in #107
• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 in the go_modules group across 1 directory by @dependabot[bot] in #110

Improvements

• feat(build): add capability to specify a custom bin URL path by @yajith in #105

Bug Fix

• fix(coredns): dns resolution fix by @stevensbkang in #102
• fix(kine): reduce noises in kubesolo logs by @stevensbkang in #103

New Contributors

• @yajith made their first contribution in #105

Full Changelog: v1.1.0...v1.1.1

Breaking Changes

• Kubernetes version has been bumped from 1.33 to 1.34

General Notice

• Starting with v1.1.0, the Kubernetes version will be pinned to the major release line. For example, all v1.1.x releases will use Kubernetes v1.34.x, v1.2.x will use Kubernetes v1.35.x, and so on

What's Changed

• feat(localpath): support sharedFileSystemPath by @stevensbkang in #79
• feat(containerd): no more symlink for runc, containerd-shim, and CNI plugins directory by @stevensbkang in #76
• fix(security): remediate vulnerabilities and bump kubernetes to 1.34.2 by @stevensbkang in #90
• ci: update release workflow to fetch tags by @eznix86 in #92
• feat(flags): version support by @stevensbkang in #95
• chore(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 in the go_modules group across 1 directory by @dependabot[bot] in #97
• opt(coredns): improve coredns readiness [KS-16] by @stevensbkang in #98
• feat: update install script by @portainer-mike in #87
• feat(loadbalancer): nodesetter to support load balancer by @stevensbkang in #99

Full Changelog: v1.0.0...v1.1.0