Upgrades k8s to v1.35.8, along with other resources and services - #950
Open
nkinkade wants to merge 1 commit into
Open
Upgrades k8s to v1.35.8, along with other resources and services#950nkinkade wants to merge 1 commit into
nkinkade wants to merge 1 commit into
Conversation
Version bumps: - k8s v1.34.4 -> v1.35.8 (kubeadm-deployed etcd moves 3.6.5 -> 3.6.6) - crictl v1.34.0 -> v1.35.0 - CNI plugins v1.9.0 -> v1.9.1 - flannel v0.28.1 -> 0.28.9 (Docker Hub tags lost their 'v' prefix as of 0.28.6, so the variable now matches the image tag format) - flannel CNI plugin v1.9.0-flannel1 -> v1.9.1-flannel3 - tooling (kubernetes/release) v0.19.0 -> v0.21.1 - etcdctl v3.6.5 -> v3.6.6 - helm v4.1.1 -> v4.2.4 - vector 0.53.0 -> 0.58.0 (chart 0.50.0 -> 0.58.0) - kured 1.21.0 -> 1.23.0 (chart 5.11.0 -> 6.1.0) - cert-manager v1.19.3 -> v1.21.1 Vector v0.57.0 disabled env var interpolation in config files by default, which our customConfig depends on, so the vector values now set VECTOR_DANGEROUSLY_ALLOW_ENV_VAR_INTERPOLATION=true to keep the previous behavior. kubernetes/release removed the cmd/kubepkg systemd unit templates, which broke the kubelet.service/10-kubeadm.conf downloads in bootstraplib.sh and add_k8s_virtual_node.sh. Both now fetch from the cmd/krel path, matching what epoxy-images already does. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
robertodauria
approved these changes
Sep 2, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Upgrades the platform cluster from k8s v1.34.4 to v1.35.8, along with related components:
Notes from the changelog review:
--pod-infra-container-imageflag and several locked-GA feature gates. None of these affect our nodes/configs (all nodes are cgroup v2, none of the removed flags/gates are set). The kubeadm config API remains v1beta4, so no template changes were needed.${VAR}interpolation in config files by default, which our customConfig relies on (VECTOR_SELF_NODE_NAME). The vector values now setVECTOR_DANGEROUSLY_ALLOW_ENV_VAR_INTERPOLATION=trueto retain the previous behavior.vprefix as of 0.28.6, soK8S_FLANNEL_VERSIONnow matches the image tag format.cmd/kubepkgsystemd unit templates, which had silently broken the kubelet.service/10-kubeadm.conf downloads inbootstraplib.shandadd_k8s_virtual_node.sh(even at the currently-pinned v0.19.0). Both now fetch from thecmd/krelpath, matching epoxy-images.serviceAccount.extraAnnotationsrendering) does not affect our values; cert-manager 1.20/1.21 breaking changes don't intersect our overrides, and both support k8s 1.35.Status: the mlab-sandbox control plane has already been upgraded to v1.35.8 via
upgrade_api_cluster.sh, and the sandbox build of this branch deployed the workload updates successfully.DO NOT MERGE until the mlab-staging control plane has been manually upgraded (the usual k8s-upgrade sequencing).
🤖 Generated with Claude Code
This change is