| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: kubernetes1.35-kubeadm | Distribution: openSUSE Tumbleweed |
| Version: 1.35.7 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Jul 27 08:14:23 2026 |
| Group: System/Management | Build host: reproducible |
| Size: 78812753 | Source RPM: kubernetes1.35-1.35.7-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://kubernetes.io/ | |
| Summary: Kubernetes kubeadm bootstrapping tool | |
Manage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubeadm bootstrapping tool
Apache-2.0
* Mon Jul 27 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- CVE-2020-8561: kubernetes: Webhook redirect in kube-apiserver, bsc#1190099
* TL;DR: Please refer to the official blogpost by the upstream Kubernetes project for details on mitigating the CVE: https://kubernetes.io/blog/2026/05/26/reconciling-unfixed-kubernetes-cves/#cve-2020-8561-webhook-redirect-in-kube-apiserver
* ***Important note to users and administrators****
The Issue: The kube-apiserver follows HTTP redirects when communicating with admission webhooks. An actor capable of configuring an AdmissionWebhookConfiguration can redirect API server requests to internal, private networks.
Why it remains unfixed: Restricting this behavior would require breaking the standard HTTP client behavior that many legitimate integrations rely on.
Mitigation: Set the API server log level to less than 10 (to prevent logging response bodies) and disable dynamic profiling (--profiling=false) to prevent unauthorized log-level changes.
* Mon Jul 27 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.35.7:
* Bump images and versions to golang 1.25.12 and update distroless-iptables
* stop logging missing optional container annotations
* Make utf8 replacement char test pass on Go 1.27
* Restore string JSON encoding of cri-api KeyValue
* kubeadm: treat already promoted learner as successful
* kubeadm: use KubernetesAPICallTimeout for mandatory kubeadm-config fetch
* Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
* Fix job controller reporting active=0 during pod creation backoff
* test/compatibility_lifecycle: resolve feature names from variables
* kubeadm: skip promote call when etcd member is already a voting member
- Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.25.12`
* ref: https://github.com/kubernetes/kubernetes/blob/v1.35.7/.go-version
* Wed Jul 01 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.35.6:
* Bump images and versions to go 1.25.11 and distroless iptables
* kubeadm: fix dry-run CA copy paths in init certs
* Fix DRA scoring bug with mixed allocated and unallocated claims
* fix(endpoint): avoid panic on services with empty IPFamilies
* fix(csi): preserve mount dir on NodePublish error during remount
* feat(volume): add IsRemount to MounterArgs
* Restore ability to plumb binary data through envvar values
* Cache selinux conflicts
* controller/selinuxwarning/cache: Add reverse index
* controller/selinuxwarning: Pre-parse SELinux label
* DRA: fix AllocationModeAll with consumed counters
* Wed May 13 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.35.5:
* kubeadm: use dedicated ClusterRole for apiserver kubelet client
* kubeadm: skip LocalAPIEndpoint defaulting on worker join
* kubeadm: use the localAPIEndpoint for all API calls in 'init'
* kube-proxy: don't do full periodic syncs on large cluster mode
* Delete remote endpoint if it has same ip as local endpoint in the system.
* Delete remote endpoint if it has same ip as local endpoint in the system.
* Add a (*Client) addEndpoint method
* Evaluate etcd cluster health using quorum
* Escape path inside the container
* scheduler: address recreated pod review feedback
* scheduler: skip requeueing recreated pods on scheduling failure
* scheduler: fix inFlightPods leak when pod is recreated during scheduling failure
* podStartSLOduration excludes init container runtime and image pulling time, includes only stateless and immediately schedulable pods
* Thu Apr 16 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.35.4:
* Update github.com/moby/spdystream from v0.5.0 to v0.5.1
* update go.opentelemetry.io/otel to v1.41.0
* Bump images and versions to go 1.25.9 and distroless iptables
* Deflake TestPodSubresourceAuth by waiting for effective permissions before testing
* podresources: filter out inactive pods in Get()
* e2e: node: podresources: fix expectations for Get() and terminated pods
* Fix device plugin admission failure after container restart
* Fix backport differences for 1.35 (remove WithOrigin and MarkAlpha)
* Add slice and map union member support with tests
* Use IsZero instead of IsNil for union ratcheting check
* Add DRA test for device attribute with no value set
* Add nil OldValue test coverage for union doc_tests
* Fix union validation ratcheting when oldObj is nil
* KEP-961: demote maxUnavailable feature in statefulset to off by default
* kubelet: fix sidecar restart after kubelet restart
* pkg/proxy/nftables: fix kube-proxy crash with newer nftables versions
* Update knftables to v0.0.21
* Bugfix: calculate request latency properly in audit log filter
- Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.25.9`
* ref: https://github.com/kubernetes/kubernetes/blob/v1.35.4/build/dependencies.yaml#L132-L139
* Thu Mar 19 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.35.3:
* cmd/kubeadm: ignore EINVAL error during unmount
* Use localhost image reference in PodObservedGenerationTracking test
* drop publishing rules from dependencies.yaml on release branch
* start scheduler after creating binding/non-binding slices
* dra: stabilize DeviceBindingConditions BasicFlow by creating without-binding slice first
* kubeadm: do not add learner member to etcd client endpoints
* Fix flake TestDeviceTaintRule test by adjusting event hanlder status update logic
* add dockerized go cache to `make clean`
* fake client-go: un-deprecate NewSimpleClientset
* Fix flaky TestApplyCRDuringCRDFinalization test
* Mon Mar 02 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.35.2:
* Bump images and versions to go 1.25.7 and distroless iptables
- Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.25.7`
* ref: https://github.com/kubernetes/kubernetes/blob/v1.35.2/build/dependencies.yaml#L119-L120
* Thu Feb 12 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.35.1:
* Apparently some EC2 images we use do not have /proc/net/nf_conntrack
* test: Fix KubeProxy CLOSE_WAIT test for IPv6 environments
* test: Read /proc/net/nf_conntrack instead of using conntrack binary
* csi: raise kubelet CSI init backoff to cover ~140s DNS delays
* test(ut/dra): add unit test for pod requesting prepared and new claims
* test(e2e/dra): add test for pod requesting allocated and new claims
* DRA integration: more pods per node, more parallelism
* DRA integration: add "uses all resources" test
* DRA scheduler: fix another root cause of double device allocation
* DRA scheduler: fix one root cause of double device allocation
* fix(kubelet): convert V().Error() to V().Info() for verbosity-aware logging
* fix(expansion):Resolve the issue of UTF-8 characters being truncated, resulting in invalid UTF-8
* Bump images and versions to go 1.25.6 and distroless iptables
* kubelet(dra): fix multiple claims handling
* Fix for preferred dualstack and required dualstack in winkernel proxier.
* kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join'
* kubectl: Fix panic in exec terminal size queue
* bump go to 1.25.6 for CVE fixes
* kubeadm: fix a bug where kubeadm upgrade is failed if the content of the `kubeadm-flags.env` file is `KUBELET_KUBEADM_ARGS=""`
* Switch ipvs and winkernel back to more regular forced syncs
* mark QuotaMonitor as not running and invalidate monitors list
* Add unit test with CSIDriver.SELinuxMount=false
* Added e2e tests with disabled SELinux
* Use only enqueuePod to add pods to the controller queue
* Fix policy of Pods with unknown SELinux label
* selinux: add e2e test with a completed pod
* Rework unit tests to builder pattern
* selinux: Do not report conflits with finished pods
* refactoring: use a common function to enqueue Pod
* add StatefulSetAvailabilityCheck test
* replace "k8s.io/klog/v2/ktesting" with "k8s.io/kubernetes/test/utils/ktesting"
* schedule pod availability checks at the correct time in StatefulSets
* wire now (time) to the availability checks in the StatefulSet controller
* Fix race condition in DRA health e2e test pod status update
* kubeadm: always retry Patch() Node API calls
* Disable SchedulerAsyncAPICalls in v1.35 due to performance issues
* kubeadm: do not sort extraArgs alpha-numerically
* Update vendored hnslib to v0.1.2
* refactor: Ensure metricIdentifier uses scheme for kind resolution
* Fix apiserver_watch_events_sizes metric.
* hack/lib/util.sh: support uutils' `date` command
- Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.25.6`
* ref: https://github.com/kubernetes/kubernetes/blob/v1.35.1/build/dependencies.yaml#L119-L120
* Thu Dec 18 2025 Priyanka Saggu <priyanka.saggu@suse.com>
- initial package for Kubernetes v1.35.0
* Full changelog - https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.35.md#v1350
/usr/bin/kubeadm /usr/lib/modules-load.d /usr/lib/modules-load.d/kubeadm.conf /usr/lib/sysctl.d/90-kubeadm.conf /usr/lib/systemd/system/kubelet.service.d/10-kubeadm.conf /usr/share/doc/packages/kubernetes1.35-kubeadm /usr/share/doc/packages/kubernetes1.35-kubeadm/CHANGELOG-1.35.md /usr/share/doc/packages/kubernetes1.35-kubeadm/CONTRIBUTING.md /usr/share/doc/packages/kubernetes1.35-kubeadm/README.md /usr/share/licenses/kubernetes1.35-kubeadm /usr/share/licenses/kubernetes1.35-kubeadm/LICENSE /usr/share/man/man1/kubeadm-alpha.1.gz /usr/share/man/man1/kubeadm-certs-certificate-key.1.gz /usr/share/man/man1/kubeadm-certs-check-expiration.1.gz /usr/share/man/man1/kubeadm-certs-generate-csr.1.gz /usr/share/man/man1/kubeadm-certs-renew-admin.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew-all.1.gz /usr/share/man/man1/kubeadm-certs-renew-apiserver-etcd-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-apiserver-kubelet-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-apiserver.1.gz /usr/share/man/man1/kubeadm-certs-renew-controller-manager.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew-etcd-healthcheck-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-etcd-peer.1.gz /usr/share/man/man1/kubeadm-certs-renew-etcd-server.1.gz /usr/share/man/man1/kubeadm-certs-renew-front-proxy-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-scheduler.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew-super-admin.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew.1.gz /usr/share/man/man1/kubeadm-certs.1.gz /usr/share/man/man1/kubeadm-completion.1.gz /usr/share/man/man1/kubeadm-config-images-list.1.gz /usr/share/man/man1/kubeadm-config-images-pull.1.gz /usr/share/man/man1/kubeadm-config-images.1.gz /usr/share/man/man1/kubeadm-config-migrate.1.gz /usr/share/man/man1/kubeadm-config-print-init-defaults.1.gz /usr/share/man/man1/kubeadm-config-print-join-defaults.1.gz /usr/share/man/man1/kubeadm-config-print-reset-defaults.1.gz /usr/share/man/man1/kubeadm-config-print-upgrade-defaults.1.gz /usr/share/man/man1/kubeadm-config-print.1.gz /usr/share/man/man1/kubeadm-config-validate.1.gz /usr/share/man/man1/kubeadm-config.1.gz /usr/share/man/man1/kubeadm-init-phase-addon-all.1.gz /usr/share/man/man1/kubeadm-init-phase-addon-coredns.1.gz /usr/share/man/man1/kubeadm-init-phase-addon-kube-proxy.1.gz /usr/share/man/man1/kubeadm-init-phase-addon.1.gz /usr/share/man/man1/kubeadm-init-phase-bootstrap-token.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-all.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-apiserver-etcd-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-apiserver-kubelet-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-apiserver.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-ca.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-ca.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-healthcheck-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-peer.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-server.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-front-proxy-ca.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-front-proxy-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-sa.1.gz /usr/share/man/man1/kubeadm-init-phase-certs.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-all.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-apiserver.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-controller-manager.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-scheduler.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane.1.gz /usr/share/man/man1/kubeadm-init-phase-etcd-local.1.gz /usr/share/man/man1/kubeadm-init-phase-etcd.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-admin.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-all.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-controller-manager.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-kubelet.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-scheduler.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-super-admin.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-finalize-all.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-finalize-enable-client-cert-rotation.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-finalize.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-start.1.gz /usr/share/man/man1/kubeadm-init-phase-mark-control-plane.1.gz /usr/share/man/man1/kubeadm-init-phase-preflight.1.gz /usr/share/man/man1/kubeadm-init-phase-show-join-command.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-certs.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config-all.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config-kubeadm.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config-kubelet.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config.1.gz /usr/share/man/man1/kubeadm-init-phase-wait-control-plane.1.gz /usr/share/man/man1/kubeadm-init-phase.1.gz /usr/share/man/man1/kubeadm-init.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-join-all.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-join-mark-control-plane.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-join.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-all.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-certs.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-control-plane.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-download-certs.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-kubeconfig.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare.1.gz /usr/share/man/man1/kubeadm-join-phase-etcd-join.1.gz /usr/share/man/man1/kubeadm-join-phase-kubelet-start.1.gz /usr/share/man/man1/kubeadm-join-phase-kubelet-wait-bootstrap.1.gz /usr/share/man/man1/kubeadm-join-phase-preflight.1.gz /usr/share/man/man1/kubeadm-join-phase-wait-control-plane.1.gz /usr/share/man/man1/kubeadm-join-phase.1.gz /usr/share/man/man1/kubeadm-join.1.gz /usr/share/man/man1/kubeadm-kubeconfig-user.1.gz /usr/share/man/man1/kubeadm-kubeconfig.1.gz /usr/share/man/man1/kubeadm-reset-phase-cleanup-node.1.gz /usr/share/man/man1/kubeadm-reset-phase-preflight.1.gz /usr/share/man/man1/kubeadm-reset-phase-remove-etcd-member.1.gz /usr/share/man/man1/kubeadm-reset-phase.1.gz /usr/share/man/man1/kubeadm-reset.1.gz /usr/share/man/man1/kubeadm-token-create.1.gz /usr/share/man/man1/kubeadm-token-delete.1.gz /usr/share/man/man1/kubeadm-token-generate.1.gz /usr/share/man/man1/kubeadm-token-list.1.gz /usr/share/man/man1/kubeadm-token.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon-all.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon-coredns.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon-kube-proxy.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-bootstrap-token.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-control-plane.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-kubelet-config.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-post-upgrade.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-preflight.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config-all.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config-kubeadm.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config-kubelet.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase.1.gz /usr/share/man/man1/kubeadm-upgrade-apply.1.gz /usr/share/man/man1/kubeadm-upgrade-diff.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon-all.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon-coredns.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon-kube-proxy.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-control-plane.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-kubelet-config.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-post-upgrade.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-preflight.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase.1.gz /usr/share/man/man1/kubeadm-upgrade-node.1.gz /usr/share/man/man1/kubeadm-upgrade-plan.1.gz /usr/share/man/man1/kubeadm-upgrade.1.gz /usr/share/man/man1/kubeadm-version.1.gz /usr/share/man/man1/kubeadm.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 9 15:46:50 2026