What's Changed

• Use per hosts SANs for controllers in ConfigureK0S phase by @i-prudnikov in #1128
• fix(files): stop re-downloading unchanged URL sources by @kke in #1165
• fix: read the existing k0s config with sudo by @kke in #1143
• fix: restart controllers one at a time when the config changes by @kke in #1148
• chore(deps): bump github.com/k0sproject/rig to v2.2.0 by @kke in #1160
• chore(deps): bump go to v1.27.1 by @kke in #1159
• build(deps): bump docker/login-action from 4 to 4.5.2 by @dependabot[bot] in #1129
• build(deps): bump docker/login-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #1133
• build(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 by @dependabot[bot] in #1151
• build(deps): bump github.com/sirupsen/logrus from 1.9.4 to 1.10.1 by @dependabot[bot] in #1146
• build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #1141
• build(deps): bump github/codeql-action from 4 to 4.37.4 by @dependabot[bot] in #1132
• build(deps): bump github/codeql-action from 4.37.4 to 4.37.6 by @dependabot[bot] in #1134
• build(deps): bump github/codeql-action from 4.37.6 to 4.37.8 by @dependabot[bot] in #1147
• build(deps): bump github/codeql-action/analyze from 4.37.8 to 4.37.9 by @dependabot[bot] in #1163
• build(deps): bump github/codeql-action/autobuild from 4.37.8 to 4.37.9 by @dependabot[bot] in #1164
• build(deps): bump github/codeql-action/init from 4.37.8 to 4.37.9 by @dependabot[bot] in #1162
• build(deps): bump golang.org/x/text from 0.40.0 to 0.41.0 by @dependabot[bot] in #1136
• build(deps): bump k8s.io/apimachinery from 0.36.3 to 0.36.4 by @dependabot[bot] in #1144
• build(deps): bump k8s.io/client-go from 0.36.3 to 0.36.4 by @dependabot[bot] in #1145
• build(deps): bump k8s.io/client-go from 0.36.4 to 0.37.0 by @dependabot[bot] in #1154
• ci: add agentic triage for failed smoke runs by @kke in #1161
• ci: fix smoke triage first run findings by @kke in #1168
• ci: make the triage pick one category, and hang the re-run on it by @kke in #1172
• ci: make the triage read the diff, and say less by @kke in #1169
• ci: scope the GITHUB_TOKEN in the workflows that never declared one by @kke in #1170
• ci: test against latest and previous bootloose images by @kke in #1149
• smoke: wait for sshd before the first bare bootloose ssh by @kke in #1171
• Pin GitHub Actions versions by @twz123 in #1121
• Add failing uutils test by @kke in #1150 (turned green with the fix from rig)

Full Changelog: v0.32.2...v0.33.0

SHA256 Checksums

031f5cc3fb794028f82954b9e47b4061c484efc880bfa70371111b5d100d41d3 *k0sctl-linux-amd64
d8a371d20d7a0f0251e937b5735d6437e0b38814d19e0c421d4d736fb72632b2 *k0sctl-linux-arm64
f2033f14c0557f2c0b27d1d2af648749d2f32e4f3c87c03e8f9936e0ba4f9c70 *k0sctl-linux-arm
59a52550b52c20f354a63bff19a0134d9bf63baae3fc48f32ccf65ae811d4b2e *k0sctl-linux-riscv64
ff799bcaaa9b3dca1d3a650ac4cf7abb1f38bc9be83e26e5b388ea7da07fc573 *k0sctl-win-amd64.exe
75ed97721cf45527673e57af87c8fe76d48909c4dd945b58070908f3a2e32402 *k0sctl-darwin-amd64
29fb473a9f7e87bc3f48883e2536c18b6fc1980bfea0fb9bf5d7dc25f9ea4c42 *k0sctl-darwin-arm64

What's Changed

• Remove long-removed podSecurityPolicy from k0sctl's init default config by @twz123 in #1126
• Fix corrupted Windows k0s install command (Flags double-unquote, --kubelet-extra-args double-quote) by @vikramhh in #1120
• build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #1115
• build(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #1119
• build(deps): bump k8s.io/client-go from 0.36.2 to 0.36.3 by @dependabot[bot] in #1123
• build(deps): bump github.com/mattn/go-isatty from 0.0.22 to 0.0.24 by @dependabot[bot] in #1125
• build(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 by @dependabot[bot] in #1113
• build(deps): bump github.com/k0sproject/rig/v2 from 2.1.0 to 2.1.1 by @dependabot[bot] in #1127

New Contributors

• @vikramhh made their first contribution in #1120

Full Changelog: v0.32.1...v0.32.2

SHA256 Checksums

cb40948151451c68dfca16de000cf990ee112fb2ffb4f6a5d103e665cbb43d5e *k0sctl-linux-amd64
b8de441f03ba8b53dee590d675caba1c0508ba05c53d2c77a841d31959a12ca7 *k0sctl-linux-arm64
8c05e5793da7d9e463844e075156f9c544b40088a856b9c77387971a18b23195 *k0sctl-linux-arm
65f7de2b295578d60ac7019b2131052ac2151a8416d495ccc7ea1a988bce0e26 *k0sctl-linux-riscv64
3d06cca961ba0bd2571836a19f6a67a9c2b44fe0d5684944028393265562b467 *k0sctl-win-amd64.exe
1124a07e18831bcc6df442593dde15f3c2a149060a42c05001ba59c58120a2c9 *k0sctl-darwin-amd64
cee6db821bd255e67052e00fd054ed89e1a2421a05326686ed576210caf1ffdd *k0sctl-darwin-arm64

What's Changed

• build(deps): bump github.com/k0sproject/rig/v2 from 2.0.0 to 2.1.0 by @dependabot[bot] in #1110

Full Changelog: v0.32.0...v0.32.1

SHA256 Checksums

a427299d348f990c90734bea50969249c79c3cab587f880a091fcd1b90f32b65 *k0sctl-linux-amd64
626c238e0591743e0dd14831e9c683844b9a9939c9c7e46c206a34e65a830972 *k0sctl-linux-arm64
31ddf3f2120a4e3fa611514663777ed513f984ab707cbeeedfdb9faae4459fc3 *k0sctl-linux-arm
04a71484ea8ba5a1b3ff270c2b699b4cd37782aa6448534094ca5f47b1d81f04 *k0sctl-linux-riscv64
a7792b3eb05507e0d4af98a45a12ffc286b2e5603fed6c3099438aeb35172385 *k0sctl-win-amd64.exe
f27bf57f4d7bbe0b1c64db34256eec400c3c680982130dcee52a76245df72007 *k0sctl-darwin-amd64
194faa77562600be3c425d38f39f26e2a06a0ca3473ec33ae2f95f123967223b *k0sctl-darwin-arm64

Notice

⚠️ Major internal change: rig v2

This release replaces k0sctl's entire host connection and remote execution layer with rig v2.0.0 (was v0.21.11), this is the purpose built library that handles SSH/WinRM connections, sudo, OS detection, remote command execution and file transfers.

No changes to your k0sctl.yaml or workflows are required, configuration and command-line usage remain fully compatible and behavior should be unchanged. However, since this touches nearly every remote operation k0sctl performs, please keep an eye out for regressions. If you run into unexpected connection, sudo/privilege escalation, OS detection or file transfer issues, please file an issue and roll back to k0sctl v0.31.1 until it's resolved.

What's Changed

• refactor(rig-v2):migrate k0sctl from rig v0.x to rig v2 by @kke in #1092

Full Changelog: v0.31.1...v0.32.0

SHA256 Checksums

89568e506bec81a4c84519ab1bffb5f1aa96d94a1863397ee186ec58dac09452 *k0sctl-linux-amd64
ddcb55ba1b258a5b44e6fdc7c2feb6a318ceed4fa08c19d367175be6f62c0a16 *k0sctl-linux-arm64
898cc571a0a3ed5385fa2480c73e48a440910eb420d256aea3bf10b5243e604e *k0sctl-linux-arm
63766aedaef158f07a72b81c8e4635d05454ba9b2049adad4e3f68bf9a45f7a4 *k0sctl-linux-riscv64
4e1f852c1d3235d0f00e541683543999e67783c11d5bba9828d461238886cbfb *k0sctl-win-amd64.exe
86a707285f484df669a14536c4dc65fa89a2f909de5a5dc259ffd2fe3099804b *k0sctl-darwin-amd64
aecdeba4f10de065c3ad3dd19d4e32d76cd475b7efac654c1ec1e84f2c460bf0 *k0sctl-darwin-arm64

Notice

The next release will contain #1092 only which is a significant refactoring to migrate the transport package rig from v0.x to v2.0.0 - if issues surface, please report them and roll back to this v0.31.1 version.

What's Changed

• Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1105
• Normalize k0s node names before drain, cordon, etc by @kv1sidisi in #1095
• Bump github.com/k0sproject/rig from 0.21.10 to 0.21.11 by @dependabot[bot] in #1107

New Contributors

• @kv1sidisi made their first contribution in #1095

Full Changelog: v0.31.0...v0.31.1

SHA256 Checksums

c7dc5cdc7f8c006249d573229302612b8ef323ef4faff6a68ebe8c4aba83772d *k0sctl-linux-amd64
9107ce95f3762b2afbd0e5b9c7d4145e5749b36f3e1976c91873d04f6ae4f98f *k0sctl-linux-arm64
c7a09db15db08e238ecec548582f6045bf2fed4e418b3fb3f577f7dca277a2fa *k0sctl-linux-arm
659b4f308e5cbf8b8fcb9780c8f78675a39626a5c8918a94c9cce127d6e58b44 *k0sctl-linux-riscv64
77f83e76e0dafc372cda969c6e2206230900e83397b384c23868b323adcc1f96 *k0sctl-win-amd64.exe
dda7dd02d9a9c962e8685f46e03715aac0c22c1c2a0b761dbee675e3bc4eb7f0 *k0sctl-darwin-amd64
1554b0a6643af6ef63c66d47c12e704e5e0f86d6480e8479f0a68dc2c179cd1a *k0sctl-darwin-arm64

What's Changed

• Fix unnecessary reinstall when dynamicConfig is enabled by @kke in #1099
• Don't autodetect CPLB IP as host private address by @byDimasik in #1101
• Enable testifylint by @twz123 in #1102
• Handle unexpected names in the kubeconfig by @pschichtel in #1087
• Bump k8s.io/apimachinery from 0.36.1 to 0.36.2 by @dependabot[bot] in #1098
• Bump k8s.io/client-go from 0.36.1 to 0.36.2 by @dependabot[bot] in #1097
• Bump github.com/k0sproject/rig from 0.21.8 to 0.21.10 by @dependabot[bot] in #1104
• Bump golang.org/x/text from 0.36.0 to 0.37.0 by @dependabot[bot] in #1082
• Bump k8s.io/client-go from 0.36.0 to 0.36.1 by @dependabot[bot] in #1083
• Bump github.com/k0sproject/rig from 0.21.6 to 0.21.8 by @dependabot[bot] in #1089
• Bump github.com/go-playground/validator/v10 from 10.30.2 to 10.30.3 by @dependabot[bot] in #1090
• Bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #1091

New Contributors

• @byDimasik made their first contribution in #1101
• @pschichtel made their first contribution in #1087

Full Changelog: v0.30.1...v0.31.0

SHA256 Checksums

413deec14e9b8ab7b600cf2f43b0db4d1141dbe8bd88e7003f6057dc3f4c605f *k0sctl-linux-amd64
b56eacf956419550557eabe2309ae51a24bdf16441da4d52e5416846b893b95d *k0sctl-linux-arm64
de23f1d993f6a211bfff2a66042f03b2d9a03837ee7c85c156dcac705d898685 *k0sctl-linux-arm
9f8be484c35ff10b8441690ee61f8238d8b29889ac31ec87e794f4b5135af27d *k0sctl-linux-riscv64
7d67c45a1f22351b276db3ffb423cec05458f71449884d4d6240740ef8fe98e5 *k0sctl-win-amd64.exe
6dcbc26877148b0d98ce246612a3856830cc4b2c63e61c843075d85b7f927dd3 *k0sctl-darwin-amd64
c8636a775c3caee76ee823f883fad45699f253ee963ae1a0212a7e8b9181ff44 *k0sctl-darwin-arm64

What's Changed

• Consistently write dry-run output to manager.Writer by @kke in #1079
• Bump github.com/k0sproject/rig from 0.21.4 to 0.21.6 by @dependabot[bot] in #1081
  • Fix Windows sudo detection to use IsInRole for effective elevation check by @kke in k0sproject/rig#338
  • Add fix for uutils for newer ubuntu by @a1994sc in k0sproject/rig#329

Full Changelog: v0.30.0...v0.30.1

SHA256 Checksums

dd16227ef351e3993d3d52630d132bcc86490d48990f06ff46580b4103dd6f13 *k0sctl-linux-amd64
39128f17ddfe3d317b457295c5cdae191d495daf2afc6784211b3437d4ccf9b2 *k0sctl-linux-arm64
d5af5939aa9a746c1ae103fdb117d8fc37dcd5ff2c28e36214533c807b345b26 *k0sctl-linux-arm
c48262b616147e5241e8c80c64f3a0fafb0ab126834e731661abd3acae336f6a *k0sctl-linux-riscv64
ed2c5058e6371a892fe62a21f43a4be5f8715e5477a48cf99396e81283aad8a1 *k0sctl-win-amd64.exe
c66c42abd6caa2d483ece7e4ec1136cd954b6abaecebe6c3f392bba6142d2d95 *k0sctl-darwin-amd64
dceb3efa4744b977dccc746f187e2f9c288d4bb017a65def184515d51f85c108 *k0sctl-darwin-arm64

What's Changed

• Lowercase auto-detected hostname by @CmdrSharp in #1063
• Fix dynamic node config to use lowercase metadata key instead of Metadata by @kke in #1077
• ci: Add support for linux-riscv64 by @luhenry in #1067
• Add all the k0sctl packages to the README by @twz123 in #1060
• TestLocalBinaryProviderCreatesParentDir fixed for sandboxed environments by @twz123 in #1068
• Bump github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2 by @dependabot[bot] in #1058
• Bump golang.org/x/text from 0.35.0 to 0.36.0 by @dependabot[bot] in #1065
• Bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] in #1066
• Bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #1069
• Bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 by @dependabot[bot] in #1064
• Bump k8s.io/apimachinery from 0.35.3 to 0.35.4 by @dependabot[bot] in #1070
• Bump k8s.io/client-go from 0.35.3 to 0.35.4 by @dependabot[bot] in #1071
• Bump github.com/k0sproject/rig from 0.21.2 to 0.21.4 by @dependabot[bot] in #1072
• Bump k8s.io/apimachinery from 0.35.4 to 0.36.0 by @dependabot[bot] in #1073
• Bump k8s.io/client-go from 0.35.4 to 0.36.0 by @dependabot[bot] in #1074
• Bump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 by @dependabot[bot] in #1075
• Bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 by @dependabot[bot] in #1076

New Contributors

• @CmdrSharp made their first contribution in #1063
• @luhenry made their first contribution in #1067

Full Changelog: v0.29.0...v0.30.0

SHA256 Checksums

9a5f7fcf32c2e430ccd26db1d2764074339098f12cb4134cda67c9bdea874512 *k0sctl-linux-amd64
02f612f255f215d3c0a447c47db75a5c5b2794eb7627865b274941404de5d6e9 *k0sctl-linux-arm64
e1d3aedcd89c28a33108fdb0aae0dd135d5aeb6f9ccfac508ddd67e811b61768 *k0sctl-linux-arm
de44e8f058345b4c0085dadfabd6b4b33910a8989d022108fdaff88c0928e11f *k0sctl-linux-riscv64
9333c3c65cf43105581484f6b6236d5bf90a1f632f880ebdadabbbd5c00c757f *k0sctl-win-amd64.exe
3f902bd9a0a00bf93b1d98a490dcb5fbd67209c1901b57712ba6440ae3c8c627 *k0sctl-darwin-amd64
e4b19ba76754d1c785fda885f57775a1bdcd9c7ba568446e00a345621c87978b *k0sctl-darwin-arm64

What's Changed

• Basic Windows worker support by @kke in #936
• Validate nllb is not enabled when "single" role used by @kke in #1003
• Use --feature-gates from host.installFlags also in k0s config validation by @kke in #1015
• Validate or discover k0s path when useExistingK0s used by @kke in #1011
• Fix backup and reset with --kubelet-root-dir and unknown k0s version by @kke in #1020
• Workaround v1.35.1+k0s.0 requiring valid join token on worker restart by @kke in #1039
• Allow host role mismatch when resetting nodes if --force given by @kke in #1007
• Ensure IPv6 API address with node-local LB by @kke in #1045
• Use hostname instead of label to query node readiness by @gknw in #1041
• Shell-escape hostname when used in remote commands by @kke in #1048
• Windows worker fixes by @tppolkow in #1030
• Refactor k0s binary retrieval by @kke in #1046
• fix: k0sctl apply fails with debug install flag on windows nodes by @tppolkow in #1055

CI / Workflow

• Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1031
• Bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #1036
• Bump docker/login-action from 3 to 4 by @dependabot[bot] in #1037
• Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1042
• Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #1043
• Dockerfile fix: place k0sctl binary in PATH to fix container execution, changed base image go-1.26-alpine step builder by @TeodoroAnelloasix2 in #1057
• Modernize linter autofix by @kke in #997
• Update copyright year to 2026 by @kke in #1016

Dependency Updates

• Bump k8s.io/client-go from 0.34.3 to 0.35.0 by @dependabot[bot] in #998
• Bump github.com/go-playground/validator/v10 from 10.29.0 to 10.30.1 by @dependabot[bot] in #1001
• Bump golang.org/x/text from 0.32.0 to 0.33.0 by @dependabot[bot] in #1008
• Bump github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.9.2 by @dependabot[bot] in #1010
• Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in #1013
• Bump github.com/bmatcuk/doublestar/v4 from 4.9.2 to 4.10.0 by @dependabot[bot] in #1017
• Bump golang.org/x/text from 0.33.0 to 0.34.0 by @dependabot[bot] in #1022
• Bump k8s.io/apimachinery from 0.35.0 to 0.35.1 by @dependabot[bot] in #1024
• Bump k8s.io/client-go from 0.35.0 to 0.35.2 by @dependabot[bot] in #1033
• Bump go to v0.21.2, go to 1.26 and update all deps by @kke in #1050
• Bump github.com/k0sproject/rig from 0.21.1 to 0.21.2 by @dependabot[bot] in #1051
• Bump k8s.io/apimachinery from 0.35.2 to 0.35.3 by @dependabot[bot] in #1052
• Bump k8s.io/client-go from 0.35.2 to 0.35.3 by @dependabot[bot] in #1053

New Contributors

• @gknw made their first contribution in #1041
• @tppolkow made their first contribution in #1030
• @TeodoroAnelloasix2 made their first contribution in #1057

Full Changelog: v0.28.0...v0.29.0

SHA256 Checksums

37bfa438cacffeefe2777c09d00f834665a4b8a57d41b4fe28fbd3804e4166a2 *k0sctl-linux-amd64
7c8836897de2db83ff35636f40e2f7de288fc164229da35aa1cb883d6f5e8293 *k0sctl-linux-arm64
882e4dcfbb63df3597fd522e9281140b0c378e1a04d5edbdba9dc24970a31f01 *k0sctl-linux-arm
3fff957d3b23b3874c991b26c8589442fdb6e24d298f2ac40d97bfbe079a4ec1 *k0sctl-win-amd64.exe
f16c730d4fac10db8b9b1426adb69330cdfe7202591414edc766cb3593fdf264 *k0sctl-darwin-amd64
083b3f5b5d9e27fcd62188401ff9d319dfedc19ea9eaf4243e4b8fd820cda8cb *k0sctl-darwin-arm64

What's Changed

• Add host.useExistingK0s to use preinstalled k0s binary on node by @kke in #996
• Bump k8s.io/apimachinery from 0.34.2 to 0.34.3 by @dependabot[bot] in #992
• Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #995
• Bump k8s.io/client-go from 0.34.2 to 0.34.3 by @dependabot[bot] in #993
• Bump github.com/go-playground/validator/v10 from 10.28.0 to 10.29.0 by @dependabot[bot] in #994

Full Changelog: v0.27.1...v0.28.0

SHA256 Checksums

30776867c60a02f29edae7f8bb2eb72f48bd09392fe7b6cebb26d4dcb71ab33c *k0sctl-linux-amd64
1a6604c90231db1684835b2aa087c93bd504bc0def3b9e79958a123682eea24c *k0sctl-linux-arm64
f90ac76529c78111fb7add380f9e9d5448480024400cab0a238666abbbee25aa *k0sctl-linux-arm
371e30a0cd32fa5d73059074f37889fc58b2e7dfa09fc4e9e4ce573ebd8ff8a0 *k0sctl-win-amd64.exe
c2781d4c7518e50697f1968bab536a988f23a40cc5576a3ae0d7521e27f2a378 *k0sctl-darwin-amd64
efe9f212f1d2f6d8bf105c1c1bdf8ae4fefd7434531eab6afa0e944be1e92ed0 *k0sctl-darwin-arm64