Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 6 additions & 5 deletions scripts/shared/lib/clusters_kind
Original file line number Diff line number Diff line change
Expand Up @@ -25,11 +25,12 @@ kind_k8s_versions[1.28]=1.28.15@sha256:a7c05c7ae043a0b8c818f5a06188bc2c4098f6cb5
kind_k8s_versions[1.29]=1.29.12@sha256:62c0672ba99a4afd7396512848d6fc382906b8f33349ae68fb1dbfe549f70dec
# kind 0.29.0 hashes
kind_k8s_versions[1.30]=1.30.13@sha256:397209b3d947d154f6641f2d0ce8d473732bd91c87d9575ade99049aa33cd648
# kind 0.30.0 hashes
kind_k8s_versions[1.31]=1.31.12@sha256:0f5cc49c5e73c0c2bb6e2df56e7df189240d83cf94edfa30946482eb08ec57d2
kind_k8s_versions[1.32]=1.32.8@sha256:abd489f042d2b644e2d033f5c2d900bc707798d075e8186cb65e3f1367a9d5a1
kind_k8s_versions[1.33]=1.33.4@sha256:25a6018e48dfcaee478f4a59af81157a437f15e6e140bf103f85a2e7cd0cbbf2
kind_k8s_versions[1.34]=1.34.0@sha256:7416a61b42b1662ca6ca89f02028ac133a309a2a30ba309614e8ec94d976dc5a
# kind 0.31.0 hashes
kind_k8s_versions[1.31]=1.31.14@sha256:6f86cf509dbb42767b6e79debc3f2c32e4ee01386f0489b3b2be24b0a55aac2b
kind_k8s_versions[1.32]=1.32.11@sha256:5fc52d52a7b9574015299724bd68f183702956aa4a2116ae75a63cb574b35af8
kind_k8s_versions[1.33]=1.33.7@sha256:d26ef333bdb2cbe9862a0f7c3803ecc7b4303d8cea8e814b481b09949d353040
kind_k8s_versions[1.34]=1.34.3@sha256:08497ee19eace7b4b5348db5c6a1591d7752b164530a36f855cb0f2bdcbadd48
kind_k8s_versions[1.35]=1.35.0@sha256:452d707d4862f52530247495d180205e029056831160e22870e37e3f6c1ac31f

### Functions ###

Expand Down
2 changes: 1 addition & 1 deletion tools/go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ go 1.25.0
require (
github.com/golangci/golangci-lint/v2 v2.10.1
github.com/psampaz/go-mod-outdated v0.9.0
sigs.k8s.io/kind v0.30.0
sigs.k8s.io/kind v0.31.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

kind v0.31.0 Kubernetes compatibility release notes

💡 Result:

Summary of kind v0.31.0 Kubernetes compatibility (release highlights)

  • Defaults to Kubernetes v1.35.0 (default node image: kindest/node:v1.35.0@sha256:452d707d...). [1][2]
  • Kubernetes 1.35+ drops cgroup v1 support — kind node images at those Kubernetes versions likewise drop cgroup v1; migrate to cgroup v2 or use older Kubernetes if you must remain on cgroup v1. [2]
  • kubeadm config: prepare for future move from kubeadm v1beta3 → v1beta4 (breaking change to extraArgs); if you use kubeadmConfigPatches, use versioned patches (v1beta3 and v1beta4) and adjust extraArgs shape as needed. kind currently uses v1beta3 for supported versions and is expected to adopt v1beta4 for a future Kubernetes (around 1.36+). [2]
  • Installation/download notes reference v0.31.0 release binaries and go install target sigs.k8s.io/kind@v0.31.0. [1]

Sources: kind documentation (Quick Start / release info) and release notes for v0.31.0. [1] https://kind.sigs.k8s.io/docs/user/quick-start/ [2] release notes summary (v0.31.0).


🌐 Web query:

kind v0.31.0 security advisories CVE

💡 Result:

Short answer: There are no published CVEs that directly affect the kind v0.31.0 client itself. The v0.31.0 release is a dependency/update release (defaults to Kubernetes v1.35.0) and its release notes do not list any kind-specific CVEs. [1][2]

Notes & recommendations:

  • kind node images can include components (containerd, runc, kernel, etc.) that have CVEs; check the exact node image(s) your clusters use (kindest/node:@sha256) and inspect those upstream component advisories. [1][2]
  • Always review the kind releases page and the node image changelogs for security fixes before upgrading. [2]

Sources:

  • kind project site / docs (v0.31.0 references). [1]
  • kind v0.31.0 release notes / releases listing. [2]

🌐 Web query:

sigs.k8s.io kind v0.31.0 breaking changes

💡 Result:

Summary of breaking changes in sigs.k8s.io/kind v0.31.0

  • Default node image bumped to kindest/node:v1.35.0 (digest changed). [1] (gitlab.com)
  • Kubernetes 1.35+ drops cgroup v1 support — kind node images for those Kubernetes versions also drop cgroup v1; if you need cgroup v1, use older Kubernetes images or migrate to cgroup v2. [1] (gitlab.com)
  • Warning about future kubeadm config change: kind will move to kubeadm v1beta4 (breaking change to kubeadm extraArgs) in a future release — prepare if you use kubeadmConfigPatches. [1] (gitlab.com)
  • General note: this release contains dependency updates and defaults Kubernetes version; check release notes for any image- or runtime-related compatibility changes (containerd/cgroup/tooling) that may affect workflows. [2] (github.com)

Sources: [1] kind v0.31.0 release notes / changelog. [2] kind releases page. [1] (gitlab.com) [2] (github.com).

Citations:


Verify cgroup v2 compatibility before upgrading to kind v0.31.0.

kind v0.31.0 is compatible with Kubernetes 1.35.0 (which it defaults to) and has no security advisories. However, Kubernetes 1.35+ and kind v0.31.0's node images drop cgroup v1 support entirely. Ensure your environment supports cgroup v2 or plan to migrate to it before upgrading. Additionally, prepare for a future kubeadm configuration breaking change (v1beta3 → v1beta4) when kind adopts it for Kubernetes 1.36+.

🤖 Prompt for AI Agents
In @tools/go.mod at line 8, The change bumps the kind dependency to
sigs.k8s.io/kind v0.31.0 which requires cgroup v2 support in node images; before
merging, verify your runtime and CI environments support cgroup v2 (or plan
migration) and update any docs/README or CI provisioning scripts to check/enable
cgroup v2; if you cannot guarantee cgroup v2 yet, hold the version bump or pin
to the previous kind version and add a TODO comment referencing the eventual
upgrade and the kubeadm v1beta3→v1beta4 breaking change for future kube
versions.

)

require (
Expand Down
4 changes: 2 additions & 2 deletions tools/go.sum
Original file line number Diff line number Diff line change
Expand Up @@ -606,7 +606,7 @@ mvdan.cc/gofumpt v0.9.2 h1:zsEMWL8SVKGHNztrx6uZrXdp7AX8r421Vvp23sz7ik4=
mvdan.cc/gofumpt v0.9.2/go.mod h1:iB7Hn+ai8lPvofHd9ZFGVg2GOr8sBUw1QUWjNbmIL/s=
mvdan.cc/unparam v0.0.0-20251027182757-5beb8c8f8f15 h1:ssMzja7PDPJV8FStj7hq9IKiuiKhgz9ErWw+m68e7DI=
mvdan.cc/unparam v0.0.0-20251027182757-5beb8c8f8f15/go.mod h1:4M5MMXl2kW6fivUT6yRGpLLPNfuGtU2Z0cPvFquGDYU=
sigs.k8s.io/kind v0.30.0 h1:2Xi1KFEfSMm0XDcvKnUt15ZfgRPCT0OnCBbpgh8DztY=
sigs.k8s.io/kind v0.30.0/go.mod h1:FSqriGaoTPruiXWfRnUXNykF8r2t+fHtK0P0m1AbGF8=
sigs.k8s.io/kind v0.31.0 h1:UcT4nzm+YM7YEbqiAKECk+b6dsvc/HRZZu9U0FolL1g=
sigs.k8s.io/kind v0.31.0/go.mod h1:FSqriGaoTPruiXWfRnUXNykF8r2t+fHtK0P0m1AbGF8=
sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
Loading