Kubernetes - v1.23.5

Changelog since v1.23.4

Changes by Kind

API Change

• Fixes a regression in v1beta1 PodDisruptionBudget handling of "strategic merge patch"-type API requests for the selector field. Prior to 1.21, these requests would merge matchLabels content and replace matchExpressions content. In 1.21, patch requests touching the selector field started replacing the entire selector. This is consistent with server-side apply and the v1 PodDisruptionBudget behavior, but should not have been changed for v1beta1. (#108139, @liggitt) [SIG Auth and Testing]

Feature

• Kubernetes is now built with Golang 1.17.8 (#108559, @cpanato) [SIG Cloud Provider, Instrumentation, Release and Testing]

Bug or Regression

• Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client to v0.0.30, fixing goroutine leaks in kube-apiserver. (#108438, @andrewsykim) [SIG API Machinery, Auth and Cloud Provider]
• Fix kubectl config flags incorrectly setting burst and discovery limits (#108401, @ulucinar) [SIG CLI]
• Fix static pod restarts in cases where the container is not present. (#108164, @rphillips) [SIG Node]
• Fixes a bug where a partial EndpointSlice update could cause node name information to be dropped from endpoints that were not updated. (#108201, @robscott) [SIG Network]
• Fixes a regression in the kubelet restarting static pods. (#107931, @rphillips) [SIG Node and Testing]
• Fixes error handling in a kubectl method used in downstream packages. (#107938, @heybronson) [SIG CLI]
• Increase Azure ACR credential provider timeout (#108209, @andyzhangx) [SIG Cloud Provider]
• Kube-apiserver: removed apf_fd from server logs (added in 1.23.0) which could contain data identifying the requesting user (#108634, @jupblb) [SIG API Machinery and Scalability]

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.27 → v0.0.30

Removed

Nothing has changed.