| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: kubernetes1.36-kubeadm | Distribution: openSUSE Tumbleweed |
| Version: 1.36.3 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Jul 27 08:16:44 2026 |
| Group: System/Management | Build host: reproducible |
| Size: 79376804 | Source RPM: kubernetes1.36-1.36.3-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://kubernetes.io/ | |
| Summary: Kubernetes kubeadm bootstrapping tool | |
Manage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubeadm bootstrapping tool
Apache-2.0
* Mon Jul 27 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- CVE-2020-8561: kubernetes: Webhook redirect in kube-apiserver, bsc#1190099
* TL;DR: Please refer to the official blogpost by the upstream Kubernetes project for details on mitigating the CVE: https://kubernetes.io/blog/2026/05/26/reconciling-unfixed-kubernetes-cves/#cve-2020-8561-webhook-redirect-in-kube-apiserver
* ***Important note to users and administrators****
The Issue: The kube-apiserver follows HTTP redirects when communicating with admission webhooks. An actor capable of configuring an AdmissionWebhookConfiguration can redirect API server requests to internal, private networks.
Why it remains unfixed: Restricting this behavior would require breaking the standard HTTP client behavior that many legitimate integrations rely on.
Mitigation: Set the API server log level to less than 10 (to prevent logging response bodies) and disable dynamic profiling (--profiling=false) to prevent unauthorized log-level changes.
* Mon Jul 27 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.36.3:
* DRA: roll back reserved state in allocateDevice
* Bump images and versions to golang 1.26.5 and update distroless-iptables
* stop logging missing optional container annotations
* Add e2e test for setting maps and slices to null via SSA
* Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
* kubelet startPodSync: reuse the previous context to fix memory leak regression
* Make utf8 replacement char test pass on Go 1.27
* Restore string JSON encoding of cri-api KeyValue
* kubeadm: treat already promoted learner as successful
* kubeadm: use KubernetesAPICallTimeout for mandatory kubeadm-config fetch
* Align DeviceTaintRule informer API version with handlers
* Fix job controller reporting active=0 during pod creation backoff
* flowcontrol: cover Required rule for spec.type and limitResponse.type
* flowcontrol: emit Required when spec.type or limitResponse.type is empty
* test/compatibility_lifecycle: resolve feature names from variables
* kubeadm: skip promote call when etcd member is already a voting member
- Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.26.5`
* ref: https://github.com/kubernetes/kubernetes/blob/v1.36.3/.go-version
* Wed Jul 01 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.36.2:
* Bump images and versions to go 1.26.4 and distroless iptables
* DRA E2E: simplify kind.yaml
* kubeadm: fix dry-run CA copy paths in init certs
* Fix DRA scoring bug with mixed allocated and unallocated claims
* batch/job: Fix scheduling directives mutation for not-yet-started suspended Jobs
* fix(endpoint): avoid panic on services with empty IPFamilies
* fix(csi): preserve mount dir on NodePublish error during remount
* feat(volume): add IsRemount to MounterArgs
* DRA: account for shared devices when rebuilding counters
* Restore ability to plumb binary data through envvar values
* Only emit non-dupicated values as metrics
* Optimize how deletions are handled
* Improve performance characteristic of selinux metric emission
* DRA: fix AllocationModeAll with consumed counters
* Wed May 13 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.36.1:
* kubeadm: use dedicated ClusterRole for apiserver kubelet client
* KEP-5304: DecodeMetadataFromStream only skips metadata entries with unknown API versions
* DRA: merge same request metadata across drivers
* kubeadm: skip LocalAPIEndpoint defaulting on worker join
* kubeadm: use the localAPIEndpoint for all API calls in 'init'
* kube-proxy: don't do full periodic syncs on large cluster mode
* Delete remote endpoint if it has same ip as local endpoint in the system.
* Delete remote endpoint if it has same ip as local endpoint in the system.
* hack/update-vendor.sh
* register zfs cadvisor plugin
* Add a (*Client) addEndpoint method
* Evaluate etcd cluster health using quorum
* test/localupcluster: stop all components before starting replacements
* localupcluster: set readiness polling interval to 1 second
* localupcluster: properly query /readyz and /healthz
* Escape path inside the container
* Thu Apr 23 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- drop kubeadm-opensuse-flexvolume.patch:
* Patch is no longer needed as upstream kubeadm removed built-in flex volume support entirely in v1.36.
The patch was originally added to align kubeadm's flex volume plugin path with the SUSE kubelet path (/var/lib/kubelet/volume-plugin) on immutable/transactional filesystems (bsc#1084766).
Ref: https://github.com/kubernetes/kubernetes/commit/c7b4a6593bf87e9eb85a366735567c1e72d317a0
* Thu Apr 23 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- initial package for kubernetes v1.36.0
* Full changelog - https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#v1360
/usr/bin/kubeadm /usr/lib/modules-load.d /usr/lib/modules-load.d/kubeadm.conf /usr/lib/sysctl.d/90-kubeadm.conf /usr/lib/systemd/system/kubelet.service.d/10-kubeadm.conf /usr/share/doc/packages/kubernetes1.36-kubeadm /usr/share/doc/packages/kubernetes1.36-kubeadm/CHANGELOG-1.36.md /usr/share/doc/packages/kubernetes1.36-kubeadm/CONTRIBUTING.md /usr/share/doc/packages/kubernetes1.36-kubeadm/README.md /usr/share/licenses/kubernetes1.36-kubeadm /usr/share/licenses/kubernetes1.36-kubeadm/LICENSE /usr/share/man/man1/kubeadm-alpha.1.gz /usr/share/man/man1/kubeadm-certs-certificate-key.1.gz /usr/share/man/man1/kubeadm-certs-check-expiration.1.gz /usr/share/man/man1/kubeadm-certs-generate-csr.1.gz /usr/share/man/man1/kubeadm-certs-renew-admin.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew-all.1.gz /usr/share/man/man1/kubeadm-certs-renew-apiserver-etcd-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-apiserver-kubelet-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-apiserver.1.gz /usr/share/man/man1/kubeadm-certs-renew-controller-manager.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew-etcd-healthcheck-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-etcd-peer.1.gz /usr/share/man/man1/kubeadm-certs-renew-etcd-server.1.gz /usr/share/man/man1/kubeadm-certs-renew-front-proxy-client.1.gz /usr/share/man/man1/kubeadm-certs-renew-scheduler.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew-super-admin.conf.1.gz /usr/share/man/man1/kubeadm-certs-renew.1.gz /usr/share/man/man1/kubeadm-certs.1.gz /usr/share/man/man1/kubeadm-completion.1.gz /usr/share/man/man1/kubeadm-config-images-list.1.gz /usr/share/man/man1/kubeadm-config-images-pull.1.gz /usr/share/man/man1/kubeadm-config-images.1.gz /usr/share/man/man1/kubeadm-config-migrate.1.gz /usr/share/man/man1/kubeadm-config-print-init-defaults.1.gz /usr/share/man/man1/kubeadm-config-print-join-defaults.1.gz /usr/share/man/man1/kubeadm-config-print-reset-defaults.1.gz /usr/share/man/man1/kubeadm-config-print-upgrade-defaults.1.gz /usr/share/man/man1/kubeadm-config-print.1.gz /usr/share/man/man1/kubeadm-config-validate.1.gz /usr/share/man/man1/kubeadm-config.1.gz /usr/share/man/man1/kubeadm-init-phase-addon-all.1.gz /usr/share/man/man1/kubeadm-init-phase-addon-coredns.1.gz /usr/share/man/man1/kubeadm-init-phase-addon-kube-proxy.1.gz /usr/share/man/man1/kubeadm-init-phase-addon.1.gz /usr/share/man/man1/kubeadm-init-phase-bootstrap-token.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-all.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-apiserver-etcd-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-apiserver-kubelet-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-apiserver.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-ca.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-ca.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-healthcheck-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-peer.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-etcd-server.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-front-proxy-ca.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-front-proxy-client.1.gz /usr/share/man/man1/kubeadm-init-phase-certs-sa.1.gz /usr/share/man/man1/kubeadm-init-phase-certs.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-all.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-apiserver.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-controller-manager.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane-scheduler.1.gz /usr/share/man/man1/kubeadm-init-phase-control-plane.1.gz /usr/share/man/man1/kubeadm-init-phase-etcd-local.1.gz /usr/share/man/man1/kubeadm-init-phase-etcd.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-admin.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-all.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-controller-manager.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-kubelet.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-scheduler.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig-super-admin.1.gz /usr/share/man/man1/kubeadm-init-phase-kubeconfig.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-finalize-all.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-finalize-enable-client-cert-rotation.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-finalize.1.gz /usr/share/man/man1/kubeadm-init-phase-kubelet-start.1.gz /usr/share/man/man1/kubeadm-init-phase-mark-control-plane.1.gz /usr/share/man/man1/kubeadm-init-phase-preflight.1.gz /usr/share/man/man1/kubeadm-init-phase-show-join-command.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-certs.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config-all.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config-kubeadm.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config-kubelet.1.gz /usr/share/man/man1/kubeadm-init-phase-upload-config.1.gz /usr/share/man/man1/kubeadm-init-phase-wait-control-plane.1.gz /usr/share/man/man1/kubeadm-init-phase.1.gz /usr/share/man/man1/kubeadm-init.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-join-all.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-join-mark-control-plane.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-join.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-all.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-certs.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-control-plane.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-download-certs.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare-kubeconfig.1.gz /usr/share/man/man1/kubeadm-join-phase-control-plane-prepare.1.gz /usr/share/man/man1/kubeadm-join-phase-etcd-join.1.gz /usr/share/man/man1/kubeadm-join-phase-kubelet-start.1.gz /usr/share/man/man1/kubeadm-join-phase-kubelet-wait-bootstrap.1.gz /usr/share/man/man1/kubeadm-join-phase-preflight.1.gz /usr/share/man/man1/kubeadm-join-phase-wait-control-plane.1.gz /usr/share/man/man1/kubeadm-join-phase.1.gz /usr/share/man/man1/kubeadm-join.1.gz /usr/share/man/man1/kubeadm-kubeconfig-user.1.gz /usr/share/man/man1/kubeadm-kubeconfig.1.gz /usr/share/man/man1/kubeadm-reset-phase-cleanup-node.1.gz /usr/share/man/man1/kubeadm-reset-phase-preflight.1.gz /usr/share/man/man1/kubeadm-reset-phase-remove-etcd-member.1.gz /usr/share/man/man1/kubeadm-reset-phase.1.gz /usr/share/man/man1/kubeadm-reset.1.gz /usr/share/man/man1/kubeadm-token-create.1.gz /usr/share/man/man1/kubeadm-token-delete.1.gz /usr/share/man/man1/kubeadm-token-generate.1.gz /usr/share/man/man1/kubeadm-token-list.1.gz /usr/share/man/man1/kubeadm-token.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon-all.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon-coredns.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon-kube-proxy.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-addon.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-bootstrap-token.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-control-plane.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-kubelet-config.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-post-upgrade.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-preflight.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config-all.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config-kubeadm.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config-kubelet.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase-upload-config.1.gz /usr/share/man/man1/kubeadm-upgrade-apply-phase.1.gz /usr/share/man/man1/kubeadm-upgrade-apply.1.gz /usr/share/man/man1/kubeadm-upgrade-diff.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon-all.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon-coredns.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon-kube-proxy.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-addon.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-control-plane.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-kubelet-config.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-post-upgrade.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase-preflight.1.gz /usr/share/man/man1/kubeadm-upgrade-node-phase.1.gz /usr/share/man/man1/kubeadm-upgrade-node.1.gz /usr/share/man/man1/kubeadm-upgrade-plan.1.gz /usr/share/man/man1/kubeadm-upgrade.1.gz /usr/share/man/man1/kubeadm-version.1.gz /usr/share/man/man1/kubeadm.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 9 15:46:50 2026