Skip to content
208 changes: 168 additions & 40 deletions docs/docs-content/release-notes/release-notes.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,12 +23,7 @@ tags: ["release-notes"]

#### Features

<!-- https://spectrocloud.atlassian.net/browse/PEM-9118 -->

- Palette and VerteX installations now use
[Traefik for Kubernetes ingress](https://doc.traefik.io/traefik/reference/install-configuration/providers/kubernetes/kubernetes-ingress/).
The migration is seamless for new and existing Palette installations. This change follows the
[Ingress NGINX Retirement](https://kubernetes.io/blog/2025/11/11/ingress-nginx-retirement/).
<!-- https://spectrocloud.atlassian.net/browse/PCP-5747 -->

- Palette now supports the option to skip worker node upgrades on
[AWS IaaS clusters](../clusters/public-cloud/aws/create-cluster.md). For example, if you have worker pools running
Expand All @@ -41,20 +36,38 @@ tags: ["release-notes"]
[N-3 minor version skew supported by Kubernetes](https://kubernetes.io/releases/version-skew-policy/). Palette
enforces this during cluster profile updates and blocks you from updating if you attempt to exceed the N-3 threshold.

- [Palette Management Appliance](../enterprise-version/install-palette/palette-management-appliance.md) and
[VerteX Management Appliance](../vertex/install-palette-vertex/vertex-management-appliance.md) version 4.8.b is now
available.

#### Improvements

<!-- https://spectrocloud.atlassian.net/browse/PEM-9695 -->
<!-- https://spectrocloud.atlassian.net/browse/PEM-9205 -->

- A [cluster repave](../clusters/cluster-management/node-pool.md#repave-behavior-and-configuration) warning is now
displayed when modifying operating system (OS) or Kubernetes configurations for clusters linked to a cluster template.
Once you save your cluster profile changes, all clusters attached to the template are automatically repaved during the
next upgrade window. Refer to [Modify Cluster Templates](../cluster-templates/modify-cluster-templates.md) for more
information.

<!-- https://spectrocloud.atlassian.net/browse/PEM-9696 -->
<!-- https://spectrocloud.atlassian.net/browse/PEM-7488 -->

- Cluster IDs and cluster profile IDs are now displayed on the respective cluster and cluster profile detail pages.

<!-- https://spectrocloud.atlassian.net/browse/PEM-9668 -->

- The [Virtual Machine Migration Assistant](../vm-management/vm-migration-assistant/vm-migration-assistant.md) now
supports the migration of VMs with NVM Express (NVMe) backed disks.

<!-- https://spectrocloud.atlassian.net/browse/PEM-7563 -->

- The Palette UI now supports direct navigation to the relevant profile layer when users click any profile component of
a running cluster from the overview page, instead of defaulting to editing the Operating System layer.

<!-- https://spectrocloud.atlassian.net/browse/PEM-5869 -->

- Palette's internal database, MongoDB, has been upgraded to version 8.0.

<!-- https://spectrocloud.atlassian.net/browse/PCP-5934 -->

- Palette now improves how `volumes` and `volumeMounts` defined in `ClusterPodPreset` or `PodPreset` resources on a
Expand All @@ -66,6 +79,46 @@ tags: ["release-notes"]
mounts when the same paths are specified in both locations. Volume and mount names are generated using a hash of the
full path to ensure path-unique naming and avoid Kubernetes validation conflicts.

<!-- https://spectrocloud.atlassian.net/browse/PCOM-166 -->

- [Artifact Studio](../downloads/artifact-studio.md) now implements AWS Key Management Service (AWS KMS) signing for
image and artifact signatures. The public key file used for bundle verification has also been updated.

#### Bug Fixes

<!-- https://spectrocloud.atlassian.net/browse/PEM-9460 -->

- Fixed an issue that prevented some permissions available in
[tenant roles](../user-management/palette-rbac/tenant-scope-roles-permissions.md) from being available during
[custom role creation](../user-management/palette-rbac/create-custom-role.md).

<!-- https://spectrocloud.atlassian.net/browse/PCP-5756 -->

- Fixed an issue that caused the Palette controller to stop reconciling resources on
[AWS clusters](../clusters/public-cloud/aws/aws.md) where pack uninstallation is stuck.

<!-- https://spectrocloud.atlassian.net/browse/PEM-9788 -->

- Fixed an issue that caused Palette to fail to list or select
[Zarf OCI](../registries-and-packs/registries/oci-registry/add-oci-zarf.md) packs with image tags do not conform to
strict semantic versioning.

<!-- https://spectrocloud.atlassian.net/browse/PCP-5949 -->

- Fixed an issue that caused [backups](../clusters/cluster-management/backup-restore/backup-restore.md) to failing
unless `AWS_REGION` is set in the `kube2iam` DaemonSet.

<!-- https://spectrocloud.atlassian.net/browse/PEM-9830 -->

- Fixed an issue that caused Palette [SMTP configuration](../enterprise-version/system-management/smtp.md) to ignore
`noProxy` entries specified using leading-dot notation.

<!-- https://spectrocloud.atlassian.net/browse/PEM-9843 -->

- Fixed an issue that caused [cluster profiles](../profiles/cluster-profiles/cluster-profiles.md) configured with
[OCI Helm chart packs](../registries-and-packs/registries-and-packs.md) with missing `pack.namespace` fields to fail
to publish.

#### Deprecations and Removals

### Edge
Expand All @@ -76,18 +129,71 @@ The [CanvOS](https://github.com/spectrocloud/CanvOS) version corresponding to th

:::

#### Features

#### Improvements

<!-- https://spectrocloud.atlassian.net/browse/PE-7783 -->

<!-- prettier-ignore-start -->

- The <VersionedLink text="Palette Optimized Canonical" url="/integrations/packs/?pack=edge-canonical" /> pack has exited Tech Preview and is now ready for production workloads.

<!-- prettier-ignore-end -->

<!-- https://spectrocloud.atlassian.net/browse/PE-7529 -->

- The [Palette Optimized Canonical distribution](../clusters/edge/architecture/architecture.md) now supports
[network overlay](../clusters/edge/networking/vxlan-overlay.md).

<!-- https://spectrocloud.atlassian.net/browse/PE-7394 -->

- The [kube-vip](../clusters/edge/networking/kubevip.md) version used in Edge cluster deployments is now 1.0.3.

<!-- https://spectrocloud.atlassian.net/browse/PE-7991 -->

- The [Palette Agent installer](../deployment-modes/agent-mode/install-agent-host.md) now displays a progress bar during
the download of the Palette agent binary.

<!-- https://spectrocloud.atlassian.net/browse/PE-5767 -->

- The Kubernetes boot time on [Edge clusters](../clusters/edge/edge.md) has now been reduced through the optimization of
cache fetching.

#### Bug Fixes

<!-- https://spectrocloud.atlassian.net/browse/PE-7531 -->

- Palette no longer reports errors when automatic certificate renewals are not configured on
[Edge clusters](../clusters/edge/edge.md).

<!-- https://spectrocloud.atlassian.net/browse/PE-7727 -->

- Fixed an issue that prevented Palette from applying priority classes on critical upgrade pods, leading to scheduling
errors during cluster upgrades.

<!-- https://spectrocloud.atlassian.net/browse/PE-7809 -->

- Fixed an issue that caused the automatic upgrades task to consume high memory and crash.

<!-- https://spectrocloud.atlassian.net/browse/PE-8018 -->

- Fixed an issue that prevented Palette from deleting some cluster artifacts and journal logs from Edge hosts that have
been [reset](../clusters/edge/cluster-management/reset-host.md).

<!-- https://spectrocloud.atlassian.net/browse/PE-8064 -->

- Fixed an issue that prevented Palette from clearing NTP values and SSH keys after they have been removed in
[LocalUI](../clusters/edge/local-ui/local-ui.md), causing the Edge cluster to fail to update successfully.

<!-- https://spectrocloud.atlassian.net/browse/PE-8075 -->

- Fixed an issue that caused JWT tokens issued in [LocalUI](../clusters/edge/local-ui/local-ui.md) to fail signature
verification.

<!-- https://spectrocloud.atlassian.net/browse/PE-8130 -->

- Fixed an issue that caused Palette to print some sensitive information to the
[LocalUI](../clusters/edge/local-ui/local-ui.md) audit logs.

### VerteX

#### Features
Expand All @@ -103,53 +209,80 @@ Check out the [CLI Tools](/downloads/cli-tools/) page to find the compatible ver

:::

#### Breaking Changes

<!-- https://spectrocloud.atlassian.net/browse/PLT-1854 -->

- The `kubeconfig` and `adminKubeConfig` fields are now marked as sensitive across the
[Spectro Cloud Crossplane provider](https://marketplace.upbound.io/providers/crossplane-contrib/provider-palette)
cluster CRDs . These fields were previously exposed in the resource status and are now protected to prevent unintended
access.

Users who require kubeconfig access must explicitly configure `writeConnectionSecretToRef` on the managed resource to
retrieve the connection details in a secure and controlled manner.

#### Features

- Terraform version 0.27.1 of the
- Terraform version 0.28.0 of the
[Spectro Cloud Terraform provider](https://registry.terraform.io/providers/spectrocloud/spectrocloud/latest/docs) is
now available. For more details, refer to the Terraform provider
[release page](https://github.com/spectrocloud/terraform-provider-spectrocloud/releases).
- Crossplane version 0.27.1 of the
- Crossplane version 0.28.0 of the
[Spectro Cloud Crossplane provider](https://marketplace.upbound.io/providers/crossplane-contrib/provider-palette) is
now available.

#### Improvements

### Docs and Education

#### Pack Notes

#### OS
<!-- https://spectrocloud.atlassian.net/browse/PLT-2118 -->

| Pack Name | New Version |
| --------- | ----------- |
- The
[`spectrocloud_cluster_aws` Terraform resource](https://registry.terraform.io/providers/spectrocloud/spectrocloud/latest/docs/resources/cluster_aws)
now provides the `skip_k8s_upgrade` configuration for machine pools. When enabled, the Kubernetes version upgrade for
this worker pool will be skipped provided that it remains within the allowed N-3 version skew.

#### Kubernetes
#### Bug Fixes

| Pack Name | New Version |
| --------- | ----------- |
<!-- https://spectrocloud.atlassian.net/browse/PLT-2134 -->

#### CNI
- Fixed an issue that caused the
[`spectrocloud_cluster_profile` Terraform resource](https://registry.terraform.io/providers/spectrocloud/spectrocloud/latest/docs/resources/cluster_profile)
to fail to resolve the pack UID of Helm packs in OCI registries.

| Pack Name | New Version |
| --------- | ----------- |
### Docs and Education

#### CSI
- The Spectro Cloud Ask AI bot is now configured to use a Model Context Protocol (MCP) server. You can integrate it with
your IDEs and other AI tools to retrieve answers from the Spectro Cloud documentation site. Use the **Ask AI** widget
and expand the **Use MCP** drop-down menu to get started.

| Pack Name | New Version |
| --------- | ----------- |
### Packs

#### Add-on Packs
<!-- https://spectrocloud.atlassian.net/browse/PAC-3643 -->
<!-- https://spectrocloud.atlassian.net/browse/PAC-3687 -->
<!-- https://spectrocloud.atlassian.net/browse/PAC-3670 -->

| Pack Name | New Version |
| --------- | ----------- |
| Pack Name | Layer | Non-FIPS | FIPS | New Version |
| ---------------------------- | ---------- | ------------------ | ------------------ | ----------- |
| Amazon EBS CSI | CSI | :white_check_mark: | :x: | 1.55.0 |
| Argo CD | Add-on | :white_check_mark: | :x: | 9.3.7 |
| AWS Application Loadbalancer | Add-on | :white_check_mark: | :x: | 3.0.0 |
| Canonical Kubernetes | Kubernetes | :white_check_mark: | :x: | 1.34 |
| Cilium | CNI | :x: | :white_check_mark: | 1.18.4 |
| Cilium | CNI | :x: | :white_check_mark: | 1.18.1 |
| External Secrets | Add-on | :white_check_mark: | :x: | 1.3.1 |
| Karpenter | Add-on | :white_check_mark: | :x: | 1.8.6 |
| Kubernetes (EKS) | Kubernetes | :white_check_mark: | :white_check_mark: | 1.35 |
| Longhorn | CSI | :white_check_mark: | :white_check_mark: | 1.10.1 |
| Nginx | Add-on | :white_check_mark: | :x: | 1.14.3 |
| Prometheus Agent | Add-on | :white_check_mark: | :x: | 28.6.1 |
| Prometheus Operator | Add-on | :white_check_mark: | :x: | 81.3.1 |
| Traefik | Add-on | :white_check_mark: | :x: | 39.0.0 |

#### FIPS Packs
#### Bug Fixes

| Pack Name | New Version |
| --------- | ----------- |
<!-- https://spectrocloud.atlassian.net/browse/PAC-3640 -->

#### Deprecations and Removals
- Fixed an issue where the Harbor Nginx service template did not honor the `expose.http.enabled: false` when
`expose.type: nodePort` was set, resulting in the HTTP NodePort 30002 being created even when it was disabled.

## February 6, 2026 - Component Updates {#component-updates-2026-06}

Expand Down Expand Up @@ -743,11 +876,6 @@ The [CanvOS](https://github.com/spectrocloud/CanvOS) version corresponding to th
[registry mapping rules](../clusters/edge/edge-configuration/installer-reference.md#registry-mapping-rules) from
working with local registries.

<!-- https://spectrocloud.atlassian.net/browse/PE-7727 -->

- Fixed an issue that prevented Palette from applying priority classes on critical upgrade pods, leading to scheduling
errors during cluster upgrades.

<!-- https://spectrocloud.atlassian.net/browse/PE-7786 -->

- Fixed an issue that caused Edge reset operations to fail on nodes whose `COS_PERSISTENT` partition is LUKS-encrypted.
Expand Down