Significant changes

• bridge-utils, conntrack, pigz, libltdl are no longer installed by default.

• OpenStack: the InsecureSkipVerify field from the Cluster object is now propagated to all components

Deprecations

• Support for Kubernetes version 1.29 is removed in kOps 1.35.

• Support for Kubernetes version 1.30 is deprecated and will be removed in kOps 1.36.

• Support for Amazon Linux 2 is deprecated and will be removed in kOps 1.36

What's Changed

• recognise rhel 10 and its variants + fedora + centos stream by @upodroid in #17785
• chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in #17787
• chore(upup): bump metrics-server to 0.8.0 by @moshevayner in #17788
• iptables is deprecated and broken on rhel10+ so use nftables by default by @upodroid in #17789
• gcp: Update ccm to fix broken arm64 jobs by @upodroid in #17793
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #17795
• chore(upup): bump aws-cni to 1.20.5 by @moshevayner in #17783
• chore(channels): Promote Alpha to Stable by @moshevayner in #17796
• aws: Allow warm pool with mixed instances policy by @kimxogus in #17800
• aws: Disable the kubelet systemd unit during warm pool warming by @dezmodue in #17792
• Update cert-manager to v1.19.2 by @hakman in #17808
• build(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #17811
• etcd-manager: Update etcd versions by @hakman in #17812
• azure: Fix the setting of creationTimestamp label for tests by @hakman in #17815
• codebot: update-dependencies by @ameukam in #17816
• Update coredns to v1.13.2 by @hakman in #17817
• enable deploying a released version of kops by @upodroid in #17819
• chore(channels): update alpha k8s and ubuntu ami versions by @moshevayner in #17822
• chore(networking): bump aws-cni to 1.21.0 by @moshevayner in #17823
• Remove spurious indent by @rramkumar1 in #17824
• kubetest2: Fix cloud-labels for non-Azure providers by @hakman in #17826
• kubetest2-kops: use ephemeral discovery store for AWS by @ameukam in #17809
• Bump and introduce new assets versions by @ameukam in #17827
• gce: Support cloudLabels for InstanceGroup by @rramkumar1 in #17821
• test: Update test skipping for K8s 1.35 by @hakman in #17829
• Bump containerd to 2.1.6 by @ameukam in #17828
• Update Calico to v3.31.2 by @hakman in #17831
• azure: Use VXLAN encapsulation for pod traffic with Calico by @hakman in #17832
• chore(networking): bump aws-cni to 1.21.1 by @moshevayner in #17834
• azure: Dump VM logs with toolbox dump by @upodroid in #17820
• chore(channels): promote alpha to stable (k8s and aws ubuntu AMI versions) by @moshevayner in #17837
• Update Calico to v3.31.3 by @hakman in #17838
• channels: Add Kubernetes 1.35.0 support by @hakman in #17839
• gcp: bump ccm to v35 by @upodroid in #17841
• test: Disable IRSA for AWS scale jobs by default by @hakman in #17842
• Move url util to where it's solely used by @rramkumar1 in #17848
• Delete dead code by @rramkumar1 in #17846
• Simple discovery server by @justinsb in #17818
• Use dns=none for apiserver-nodes test by @rifelpet in #17851
• Use public dns for apiserver-nodes e2e by @rifelpet in #17852
• Add iam:ListInstanceProfiles permission to Karpenter by @rifelpet in #17854
• Continue to skip failing e2e tests in k8s CI versions by @rifelpet in #17859
• Remove unused pointer helper functions by @rramkumar1 in #17857
• Enable RBAC in E2E templates by @rifelpet in #17860
• Add unit test for jsonutils.SortSlice by @rramkumar1 in #17850
• Add test for taints util by @rramkumar1 in #17855
• Support API field mapping for bastion.loadBalancer.type by @rramkumar1 in #17858
• Deprecate version util in pkg/k8sversion by @rramkumar1 in #17856
• Update metrics-server container port by @rifelpet in #17862
• Fix upgrades to CI k8s versions by @rifelpet in #17864
• Use a different systemd-networkd configuration for AL2023 by @rifelpet in #17867
• Continue skipping hostPort protocol test with Cilium by @rifelpet in #17865
• Skip SupplementalGroupsPolicy in deb11 jobs by @rifelpet in #17866
• kube-scheduler: Wait for the auth conf from the API server by @hakman in #17868
• build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #17869
• Allow release of the discovery service by @ameukam in #17863
• Removed dead code in upup/pkg/fi/timestamp.go by @rramkumar1 in #17871
• Update openstack csi images by @jauru in #17872
• fix: add kops details to Hetzner Cloud client user agent by @lukasmetzner in #17875
• Pull cluster name from context in kops version --server by @rramkumar1 in #17870
• Delete more dead code by @rramkumar1 in #17876
• Bump golang to 1.25.6 by @ameukam in #17879
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #17883
• metal: support dns=none, use API server IP for kops-controller by @justinsb in #17884
• truncate very long sqs queue names by @upodroid in #17877
• fix truncate long sqs by @upodroid in #17885
• fix aws scalability tests by @upodroid in #17880
• fix podidentitywebhook test by @upodroid in #17887
• Add EtcdEventsHTTP feature flag for HTTP on events etcd by @dims in #17891
• Disable cloud-init network hotplug on Ubuntu 24.04 for Cilium and Ama… by @yilmaz-burak in #17882
• Consolidate env var utils by @rramkumar1 in #17889
• Enable EtcdEventsHTTP in scalability tests by @dims in #17892
• Add tip to use gotestfail when doing local development by @rramkumar1 in #17893
• Add Scenario for AI conformance by @ameukam in #17886
• Remove year from copyright header boilerplate by @hakman in #17895
• fix broken metrics server test by @upodroid in #17896
• Update Cilium to v1.18.6 by @hakman in #17899
• gce: Require zones on instancegroup creation by @Camila-B in #17849
• Add well-known hashes for latest CNI by @justinsb in #17901
• Skip kube-proxy nfacct metric test on rhel + rocky distros by @rifelpet in #17902
• versionbump tools/metal: bump go version to 1.25.6 by @justinsb in #17912
• versionbump: bump dependencies in tests/e2e/go.mod by @justinsb in #17909
• chore: fix govet issue in tester.go by @justinsb in #17913
• traceserver tool: fix compilation error by @justinsb in #17910
• Use go get -tool instead of hack/tools.go by @justinsb in #17911
• hetzner: Update Getting Started docs by @hakman in #17916
• openstack: pass through InsecureSkipVerify into openstack components by @justinsb in #17908
• hetzner: Update default server type to cx23 by @hakman in #17917
• dns-controller: use the pod IPs when creating records for pods annotated with AnnotationNameDNSInternal by @dezmodue in #17791
• Add constructor for kopscontrollerclient so that internal http client can be cleanly initialized by @rramkumar1 in #17890
• cleanup: fix vet warnings in traceserver by @justinsb in #17919
• Announce AL2 deprecation in 1.35 by @rifelpet in #17921
• gce: Simplify resource lister by @rramkumar1 in #17924
• Add unit test for GuessCloudForPath by @rramkumar1 in #17926
• Move localmutexes.go to GCE-specific cloudup by @rramkumar1 in #17925
• build k/k when running presubmit jobs in kubernetes repo by @upodroid in #17927
• make some etcd variables configurable by @upodroid in #17929
• Add DeleteCollectionWorkers field to KubeAPIServerConfig by @ronaldngounou in #17928
• add exponential backoffs to calling kops-controller by @upodroid in #17930
• Upgrade scenario cleanup by @rifelpet in #17931
• fix: set proxyMode to nftables on rhel10 by @justinsb in #17920
• Migrate karpenter and LBC scenario scripts to use --test=exec by @rifelpet in #17932
• Set MACAddressPolicy=none for AWS VPC CNI on AL2023 by @rifelpet in #17933
• Increase delete-collections-workers flag value to speed up namespace deletion by @ronaldngounou in #17934
• tests: dump /proc/modules from e2e tests by @justinsb in #17937
• Replace deprecated kops CLI flags by @rifelpet in #17939
• Release 1.35.0-beta.1 by @justinsb in #17941

New Contributors

• @rramkumar1 made their first contribution in #17824
• @lukasmetzner made their first contribution in #17875
• @yilmaz-burak made their first contribution in #17882
• @Camila-B made their first contribution in #17849
• @ronaldngounou made their first contribution in #17928

Full Changelog: v1.35.0-alpha.1...v1.35.0-beta.1