Deckhouse

Latest version: v0.4.11

Safety actively analyzes 714973 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 72

1.62.0

Please note
* **The port range used by DKP components has been changed.** Managing network policies is now easier since most ports are in the 4200-4299 range. Please refer to the [documentation](https://deckhouse.io/documentation/v1.62/network_security_setup.html) for an up-to-date list of the ports in use and instructions on how to assign a specific port.

Major changes

* **Support for Kubernetes 1.30 has been added while support for Kubernetes 1.25 has been discontinued.**
* You can now send logs via a TCP or UDP [socket](https://deckhouse.io/documentation/v1.62/modules/460-log-shipper/cr.html#clusterlogdestination-v1alpha1-spec-socket); _text_, _JSON_, _CEF_, _Syslog_ encodings are supported.
* A leader label (`leader=true`) has been added to the active DKP controller pod (d8-system/deckhouse). You can now run commands in the DKP pod in a more convenient fashion, regardless of whether the pod is running in high availability mode or not, e.g.:
shell
kubectl -n d8-system -l app=deckhouse,leader=true -c deckhouse logs


* A [nodeGroups.instanceClass.configDrive](https://deckhouse.io/documentation/v1.62/modules/030-cloud-provider-openstack/cluster_configuration.html#openstackclusterconfiguration-nodegroups-instanceclass-configdrive) boolean parameter has been added to the OpenStack provider for the _SimpleWithInternalNetwork_ layout to control whether an additional disk containing the node's configuration will be mounted on the node. This parameter must be enabled if DHCP is disabled on the network designated as the _mainNetwork_.
* An option to manage VPA settings (the [resourcesRequests](https://deckhouse.io/documentation/v1.62/modules/650-runtime-audit-engine/configuration.html#parameters-resourcesrequests) parameter) has been added to the runtime-audit-engine module.
* Users are not allowed to create namespaces prefixed with `d8-` and `kube-`. Only DKP can create these _system_ namespaces.
* A [section](https://deckhouse.io/documentation/latest/module-development/) has been added to the documentation with information on how to get your DKP module up and running.
* [Deckhouse CLI](https://deckhouse.io/documentation/v1.62/deckhouse-cli/), the tool for working with Deckhouse Kubernetes Platform clusters, is now available for Windows.


Component version updates

- Kubernetes control plane: `v1.27.15`, `v1.28.11`, `v1.29.6`, `v1.30.2`
- cloud-provider-yandex CSI plugin: `v0.12.0`
- cloud-provider-vsphere CSI plugin: `v3.0.0`
- deckhouse-cli (d8 tool): `0.2.1`
- dex: `2.40.0`
- helm_lib: `1.26.0`
- nginx (Ingress controller 1.10): `1.25.5`

A list of internal modules or their components that will be restarted during the upgrade

- Kubernetes control plane
- Ingress-controller with the `HostPortWithFailover` inlet
- Ingress-controller v1.10
- bashible-apiserver
- capi-controller-manager
- cilium-agent
- cloud-provider-*
- deckhouse
- dex (user-auth)
- documentation
- ebpf-exporter
- kube-proxy
- kubeconfig-generator (user-auth)
- kubelet
- log-shipper
- machine-controller-manager
- metallb
- network-policy-engine
- node-exporter
- node-local-dns
- registry-packages-proxy
- runtime-audit-engine

See [CHANGELOG v1.62](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.62.md) for more details.

1.61.5

Fixes


- **[cni-cilium]** Fix trouble with empty `excludedCIDRs` field in `EgressGatewayPolicy`. [8930](https://github.com/deckhouse/deckhouse/pull/8930)
- **[deckhouse-controller]** Fix kubectl version detection in `kubectl_wrapper.sh`. [8829](https://github.com/deckhouse/deckhouse/pull/8829)
- **[dhctl]** Fix registry preflight check for anonymous docker registries. [8940](https://github.com/deckhouse/deckhouse/pull/8940)
- **[dhctl]** Fix SSH tunneling preflight check not triggering when TCP forwarding is disabled. [8857](https://github.com/deckhouse/deckhouse/pull/8857)
- **[static-routing-manager]** Fixed CRDs path in `ensure_crds` hook. [8928](https://github.com/deckhouse/deckhouse/pull/8928)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.61.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.61.0).

1.61.4

Fixes


- **[node-manager]** Create status.errors object for all NodeUsers (migration) and add conversion webhook for same logic. [8814](https://github.com/deckhouse/deckhouse/pull/8814)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.61.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.61.0).

1.61.3

Know before update


- Ingress controller will restart.

Fixes


- **[cloud-provider-yandex]** Fix typo in label key in discoverer. [8792](https://github.com/deckhouse/deckhouse/pull/8792)
- **[dhctl]** Fix working with registries on non-standard ports. [8809](https://github.com/deckhouse/deckhouse/pull/8809)
- **[dhctl]** Fix registry path calculation. [8802](https://github.com/deckhouse/deckhouse/pull/8802)
- **[dhctl]** Fix bootstrap cluster. [8787](https://github.com/deckhouse/deckhouse/pull/8787)
- **[ingress-nginx]** Fix pod descheduling from a not-ready node. [8801](https://github.com/deckhouse/deckhouse/pull/8801)
Kruise controller's pods will be recreated.
- **[ingress-nginx]** Fix usage custom logs formats without our fields. [8621](https://github.com/deckhouse/deckhouse/pull/8621)
Ingress controller will restart.
- **[node-manager]** Fix RBAC permissions and startup schedule cleanup of NodeUser creation errors. [8803](https://github.com/deckhouse/deckhouse/pull/8803)
- **[registry-packages-proxy]** Fix working with registries on non-standard ports. [8809](https://github.com/deckhouse/deckhouse/pull/8809)
registry-packages-proxy will restart.
- **[registry-packages-proxy]** Fix registry path calculation. [8802](https://github.com/deckhouse/deckhouse/pull/8802)
registry-packages-proxy will restart.


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.61.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.61.0).

1.61.2

Features


- **[control-plane-manager]** Adding a new module static-routing-manager. [7952](https://github.com/deckhouse/deckhouse/pull/7952)
- **[deckhouse-controller]** Adding a new module static-routing-manager. [7952](https://github.com/deckhouse/deckhouse/pull/7952)
- **[dhctl]** Add new commander/detach operation, add commander-uuid option for all commander operations [8607](https://github.com/deckhouse/deckhouse/pull/8607)
- **[dhctl]** Add cluster config validation gRPC services. [8606](https://github.com/deckhouse/deckhouse/pull/8606)
- **[docs]** Adding a new module static-routing-manager. [7952](https://github.com/deckhouse/deckhouse/pull/7952)
- **[node-manager]** Re-enable ClusterHasOrphanedDisks alert for Yandex Cloud. [8718](https://github.com/deckhouse/deckhouse/pull/8718)
- **[static-routing-manager]** Adding a new module static-routing-manager. [7952](https://github.com/deckhouse/deckhouse/pull/7952)

Fixes


- **[ingress-nginx]** Fix HostPortWithProxyProtocol inlet. [8742](https://github.com/deckhouse/deckhouse/pull/8742)
- **[monitoring-kubernetes-control-plane]** Add missing datasource variable to deprecated-apis dashboard [8689](https://github.com/deckhouse/deckhouse/pull/8689)
- **[user-authn]** Fix crowd basic auth proxy migration. [8704](https://github.com/deckhouse/deckhouse/pull/8704)

Chore


- **[deckhouse]** Invoke modules' requirements checks only for enabled modules. [8688](https://github.com/deckhouse/deckhouse/pull/8688)


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.61.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.61.0).

1.61.1

Know before update


- `dhctl mirror` is deprecated. All mirroring-related functionality has been moved into the Deckhouse CLI and will be completely removed from dhctl in Deckhouse Kubernetes Platform v1.64.

Fixes


- **[ingress-nginx]** Add missing `severity_level` for NginxIngressConfigTestFailed rule. [8661](https://github.com/deckhouse/deckhouse/pull/8661)
- **[istio]** Fixed Istio module release requirements checker. [8678](https://github.com/deckhouse/deckhouse/pull/8678)

Chore


- **[dhctl]** `dhctl mirror` is deprecated in favour of Deckhouse CLI. [8682](https://github.com/deckhouse/deckhouse/pull/8682)
`dhctl mirror` is deprecated. All mirroring-related functionality has been moved into the Deckhouse CLI and will be completely removed from dhctl in Deckhouse Kubernetes Platform v1.64.


For more information, see the [changelog](https://github.com/deckhouse/deckhouse/blob/main/CHANGELOG/CHANGELOG-v1.61.md) and minor version [release changes](https://github.com/deckhouse/deckhouse/releases/tag/v1.61.0).

Page 7 of 72

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.