Release Proposal 2.24.1

[VannTen]

Changes by Kind

Feature

• Make kubernetes v1.28.6 default ([kubernetes] Make kubernetes v1.28.6 default #10810, @mzaian)

Bug or Regression

• Make containerd 1.7.13 default
  Make runc 1.1.12 default
  Patch GHSA-xr7r-f8xq-vfvv ([2.24] Add patches versions checksums (k8s, runc, containerd) #10877, @VannTen)

---

The release intend to address GHSA-xr7r-f8xq-vfvv

@yankay

Tasks

Beta Give feedback

1. [2.24] Add patches versions checksums (k8s, runc, containerd) #10877
   approved cncf-cla: yes kind/bug lgtm size/S +5
   
2. Fix logical error when checking for boostrap-os #10867
   approved cncf-cla: yes kind/bug lgtm size/M +5
   
3. coredns UDP service port point to TCP pod port when upgrading from 23.* #10860
   kind/bug +1
4. Bump galaxy version before release #10890
   approved cncf-cla: yes kind/cleanup lgtm size/XS +5
   

[dibi-codes]

#10867 would be nice as well

[Red-GV]

Is it possible to put #10813 if it is not already?

[yankay]

Should the versions be updated before release?

• https://github.com/kubernetes-sigs/kubespray/blob/release-2.24/README.md
• https://github.com/kubernetes-sigs/kubespray/blob/release-2.24/galaxy.yml

[VannTen]

Is it possible to put #10813 if it is not already?

I don't think there is reasons to backport this, it's just cleanup.

Should the versions be updated before release?

* https://github.com/kubernetes-sigs/kubespray/blob/release-2.24/README.md

* https://github.com/kubernetes-sigs/kubespray/blob/release-2.24/galaxy.yml

Good point !

[ugur99]

Is there any chance to put this one 10795 as well, I know it is a small feature not bug fix but would be cool to have it.

[VannTen]

Well, no (IMO). The point of patches releases is to backport bugfixes / regressions. (Though if you really need a feature, local backporting is not hard, just cherry-pick the PR commit on top of your tag).

[VannTen]

I'm very busy this week, I'm not sure I'll be able to tackle the coredns issue (Haven't got the time to try to reproduce it). I'm not sure, should we release this as is, given the CVE impact ?

[miro-grapeup]

@VannTen do you expect this version 2.24.1 to be released soon?

[VannTen]

We should probably release this despite the coredns issue. I'm a bit short on time for reproducing it and we'll still be able to release another patch release if needed, but at least the CVE should be addressed... @yankay, could you make the release ?

[yankay]

We should probably release this despite the coredns issue. I'm a bit short on time for reproducing it and we'll still be able to release another patch release if needed, but at least the CVE should be addressed... @yankay, could you make the release ?

LGTM. The CVE has been for 3 weeks, the CoreDNS issue is not the broken issue of the release.

[yankay]

It's released https://github.com/kubernetes-sigs/kubespray/releases/tag/v2.24.1

[VannTen]

Thanks o/ o/