Embedded Cluster v3 release notes
This topic contains release notes for the Replicated Embedded Cluster v3 installer. The release notes list new features, improvements, bug fixes, known issues, and breaking changes.
Additionally, these release notes list the versions of Kubernetes that are available with each version of Embedded Cluster.
3.7.0-beta.1
| Version | 3.7.0-beta.1+k8s-1.34 | 3.7.0-beta.1+k8s-1.33 | 3.7.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
3.6.0-beta.1
| Version | 3.6.0-beta.1+k8s-1.34 | 3.6.0-beta.1+k8s-1.33 | 3.6.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds the ability to declare Kubernetes node taints on a custom role. Every node that carries the role receives the taints automatically at install or join time. For more information, see roles in Embedded Cluster Config.
3.5.0-beta.1
| Version | 3.5.0-beta.1+k8s-1.34 | 3.5.0-beta.1+k8s-1.33 | 3.5.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds the ability to generate and download a support bundle from the persistent admin console, without SSH access to the controller.
Improvements
- Reduces dashboard clutter when many releases are available: the Available updates panel now shows only the 3 most recent, with a Show all toggle for the rest.
Bug fixes
- Fixes a gateway timeout that could occur when uploading large airgap releases through the persistent admin console.
3.4.0-beta.1
| Version | 3.4.0-beta.1+k8s-1.34 | 3.4.0-beta.1+k8s-1.33 | 3.4.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds air gap support to the persistent admin console. Release archives can be uploaded directly through the dashboard and applied without SSH access to the controller. Uploads are resumable across browser sessions, and the currently-installed release can be re-uploaded to update its bundled license or restore a missing copy needed for redeploy.
Improvements
- Aligns the Replicated SDK's
dockerconfigjson with the active registry mode. When a Bring Your Own (BYO) registry is configured, the secret now carries credentials keyed by the BYO registry host instead of the unused proxy.replicated.com and registry.replicated.com defaults.
Bug fixes
- Forwards the host CA bundle ConfigMap and native proxy values to the Replicated SDK chart so the SDK can communicate with
replicated.app through a MITM proxy. Previously only proxy environment variables were passed, causing TLS verification failures when the SDK contacted replicated.app.
3.3.2-beta.1
| Version | 3.3.2-beta.1+k8s-1.34 | 3.3.2-beta.1+k8s-1.33 | 3.3.2-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds support for changing the Bring Your Own (BYO) registry configuration on upgrade. The
upgrade command now accepts the --registry, --registry-username, --registry-password, --registry-ca-cert, --registry-tls-cert, and --registry-tls-key flags. Flags use patch semantics: omit to keep the existing value, pass a new value to update, or pass an empty string (for example, --registry="") to clear. Passing --registry="" reverts the cluster to the default registry mode.
Bug fixes
- Updates the installer landing page login button text to match the operation mode: Continue for the persistent admin console and Continue to Upgrade for upgrades. Install mode is unchanged.
3.3.1-beta.1
| Version | 3.3.1-beta.1+k8s-1.34 | 3.3.1-beta.1+k8s-1.33 | 3.3.1-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
Bug fixes
- Fixes the persistent admin console landing page, which was incorrectly framed as the "Upgrade Wizard." When the console is enabled, the page now reads "Admin Console" with console-appropriate "What's Next" steps.
- Allows retrying an upgrade when the target version is itself listed as a required release and matches the currently-incomplete revision. The previous behavior incorrectly blocked the retry with a "must install X before X" error.
- Removes an invalid
journalctl troubleshooting tip from the host-unreachable warning on the upgrade preparation screen. The tip was rendering the application's display name instead of its slug, producing an unusable command.
3.3.0-beta.1
| Version | 3.3.0-beta.1+k8s-1.34 | 3.3.0-beta.1+k8s-1.33 | 3.3.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds the persistent admin console, an opt-in, always-on web UI for browser-driven upgrades and operations. Enable it by running
console install on a controller after installation.
3.2.3-beta.1
| Version | 3.2.3-beta.1+k8s-1.34 | 3.2.3-beta.1+k8s-1.33 | 3.2.3-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
Bug fixes
- Fixes a failure in the
Lookup template function when the kubeconfig has not yet been created on the node. Lookup now returns an empty map in that case instead of erroring.
3.2.2-beta.1
| Version | 3.2.2-beta.1+k8s-1.34 | 3.2.2-beta.1+k8s-1.33 | 3.2.2-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds support for the KOTS
Lookup template function, which queries resources in the running cluster from templates.
Improvements
- Skips the airgap
images.tar preload when a Bring Your Own (BYO) registry is configured.
3.2.1-beta.1
| Version | 3.2.1-beta.1+k8s-1.34 | 3.2.1-beta.1+k8s-1.33 | 3.2.1-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
Improvements
- Pins the cluster TLS certificate's public key in the node-join
curl command so the join bundle download cannot be intercepted by an attacker on the network path.
3.2.0-beta.1
| Version | 3.2.0-beta.1+k8s-1.34 | 3.2.0-beta.1+k8s-1.33 | 3.2.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Automates multi-node upgrades. All remote nodes are upgraded as part of a single cluster upgrade, removing the per-node CLI commands required in earlier versions. Clusters with any node older than 3.2.0-beta.1 fall back to the manual upgrade flow automatically.
- Adds TLS client certificate (mTLS) authentication for Bring Your Own (BYO) registries with the
--registry-tls-cert and --registry-tls-key install flags.
3.1.0-beta.1
| Version | 3.1.0-beta.1+k8s-1.34 | 3.1.0-beta.1+k8s-1.33 | 3.1.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds support for vendor-defined custom node roles. Roles are declared in the EC config with associated labels, and one or more roles can be assigned to a node at install or join time. See roles in Embedded Cluster Config.
- Adds an external HTTP API on port 30081 (configurable with
--api-port) for headless installs, programmatic node joins, and cluster-state polling. See External API.
- Adds Bring Your Own (BYO) registry support during install.
- Allows joining new nodes to the cluster during an upgrade.
- Adds nftables support for Linux kernel 6.17+.
Improvements
- Unifies runtime suppression of when-gated and readonly config items.
- Applies templating to status informers.
Bug fixes
- Adds detection of orphaned containerd tmpmounts to upgrade preflights.
- Verifies the installer UI port is free before prompting on install or upgrade.
3.0.0-beta.4
| Version | 3.0.0-beta.4+k8s-1.34 | 3.0.0-beta.4+k8s-1.33 | 3.0.0-beta.4+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features
- Adds SELinux analyzer to host support bundle.
Improvements
- Runs app preflights during upgrades.
- Validates client-side regex on the config screen of the install and upgrade wizards.
Bug fixes
- Fixes an issue where the "continue" modal on the "Add Nodes" page had a black overlay.
- Respects readonly config fields in the UI.
- Redirects embedded web server output to
/var/log//web.log.
- Fixes missing version on the Embedded Cluster upgrade completion screen.
- Clears install and upgrade errors when retrying.
- Sets default Kubernetes CLI namespace for the
shell command.
- Supports Helm
alias field for Replicated SDK dependency renaming.
- Resolves air gap image reference mismatch bugs.
3.0.0-beta.2
| Version | 3.0.0-beta.2+k8s-1.34 | 3.0.0-beta.2+k8s-1.33 | 3.0.0-beta.2+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
Bug fixes
- Persists config values on headless install without
--config-values.
3.0.0-beta.1
| Version | 3.0.0-beta.1+k8s-1.34 | 3.0.0-beta.1+k8s-1.33 | 3.0.0-beta.1+k8s-1.32 |
|---|
| Kubernetes Version | 1.34.4 | 1.33.8 | 1.32.12 |
|---|
New features