KOTS Release Notes

This topic contains release notes for the Replicated KOTS installer. The release notes list new features, improvements, bug fixes, known issues, and breaking changes.

Kubernetes Compatibility

The following table lists the versions of Kubernetes that are compatible with each version of KOTS:

KOTS Versions	Kubernetes Compatibility
1.117.0 and later	1.31, 1.30, 1.29
1.109.1 to 1.116.1	1.30, 1.29, 1.28
1.105.2 to 1.109.0	1.29, 1.28

1.124.11

Released on April 2, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Updates images to resolve several CVEs.

1.124.10

Released on March 27, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes an issue where extracting Helm charts failed on deploy if duplicate files were found in the chart. This error often looked like this: failed to deploy helm charts: failed to find removed charts: failed to find current matching v1beta2 charts: failed to find chart name and version in /tmp/helm2856031708/curr-v1beta2/helm/mychart: failed to unarchive: reading file in tar archive: file already exists: /tmp/kots1381434460/charts/mychart/Chart.yaml.

1.124.9

Released on March 24, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Updates to support custom domains for Embedded Cluster.

1.124.8

Released on March 20, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Updates to support custom domains for Embedded Cluster.

1.124.7

Released on March 17, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Updates to support custom domains for Embedded Cluster.

1.124.6

Released on March 13, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Improvements for Embedded Cluster upgrades.

1.124.5

Released on March 11, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes SBOM generation and signing issue. A properly signed SBOM is now included in the release artifacts.

1.124.4

Released on February 14, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Improves error visibility by displaying the actual error message in the UI instead of a generic one when an upgrade fails to start.

Bug Fixes

Fixes an issue when installing with a provided license, that can cause the installer not to respect the custom domain in the license and instead make a request to https://replicated.app.

1.124.3

Released on February 5, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Updates images to resolve CVE-2024-45337 with critical severity and CVE-2024-45338 with high severity.

1.124.2

Released on February 4, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Improvements for Embedded Cluster upgrades.

1.124.1

Released on January 29, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Improves an unclear error message that could occur when rewriting private images.

1.124.0

Released on January 24, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

New Features

You can migrate Helm charts that were installed with HelmChart v1beta1 and useHelmInstall: false to HelmChart v1beta2 by passing the --take-ownership flag to the helmUpgradeFlags field in HelmChart custom resource as shown below:
```
# HelmChart v1 beta2
apiVersion: kots.io/v1beta2
kind: HelmChart
metadata:
  name: samplechart
spec:
   helmUpgradeFlags:
     - --take-ownership
```
This flag allows Helm to take ownership of existing resources that were installed without Helm, like resources deployed with HelmChart v1beta1 and useHelmInstall: false.

For information about how to migrate an existing installation to KOTS HelmChart v1beta2, see Migrating Existing Installations to HelmChart v2.

1.123.1

Released on January 13, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes an issue where the navigation menu was not visible on the Config page.

1.123.0

Released on January 2, 2025

Support for Kubernetes: 1.29, 1.30, and 1.31

New Features

Adds the --tolerations flag to kots install to supply additional tolerations to the KOTS pods.

1.122.1

Released on December 20, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes a bug that could result in instance being reported as unavailable if application includes an Ingress resource.

1.122.0

Released on December 12, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

New Features

Adds support for the kots.io/keep annotation, which prevents KOTS from deleting resources during an upgrade if the resource is no longer present in the new release. This annotation is useful when migrating existing KOTS installations to the KOTS HelmChart v2 installation method. For more information, see Migrating Existing Installations to HelmChart v2.

1.121.2

Released on November 27, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Various updates for Embedded Cluster.

1.121.1

Released on November 26, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Various fixes for Embedded Cluster.

1.121.0

Released on November 12, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

New Features

Adds the ability to download the application archive for any version, including the currently deployed version, by using the --sequence and --current flags for the kots download command.

1.120.3

Released on November 7, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Various updates for Embedded Cluster.

1.120.2

Released on November 5, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes an issue where generating a support bundle in air gap kURL environments took a really long time.

1.120.1

Released on November 4, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes an issue where generating support bundles failed in air gap and minimal RBAC installations.
Fixes an issue where pushing images from an air gap bundle could time out due to the host's environment variables interfering with the temporary registry used by the KOTS CLI.

1.120.0

Released on October 30, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

New Features

Various new features to support Replicated Embedded Cluster.

1.119.1

Released on October 22, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes an issue where proxy settings was removed when upgrading the Admin Console with kubectl kots admin-console upgrade.
Fixes an issue where --strict-security-context was removed when upgrading the Admin Console with kubectl kots admin-console upgrade.

1.119.0

Released on October 18, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes an issue where the Replicated SDK failed to deploy if a private CA was provided to the installation but the SDK was installed into a different namespace than KOTS.
If an application includes the Replicated SDK, the SDK will be deployed with the same ClusterRole as the Admin Console.

1.118.0

Released on October 15, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Improves the flexibility of configuring the Cluster Resources collector in support bundle specs by limiting KOTS's default collection to its own namespace.

Bug Fixes

Fixes an issue where you could not upgrade Embedded Cluster instances if the new version didn't include config and preflight checks.

1.117.5

Released on October 8, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Adds support for specifying an alternative data directory in Embedded Cluster.

1.117.4

Released on October 8, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Various improvements for surfacing errors in Embedded Cluster upgrades.

1.117.3

Released on September 23, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

New Features

If the Replicated SDK is deployed by KOTS as part of an application, the SDK will automatically be configured with any additional CA certificates provided to --private-ca-configmap flag for the kots install command.

1.117.2

Released on September 20, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Improvements

Improvements to support specifying ports in Embedded Cluster.

1.117.1

Released on September 17, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

Bug Fixes

Fixes an issue where the values provided to the --http-proxy, --https-proxy, and --no-proxy flags for the kots install command were not propagated to the Replicated SDK when running an automated install.

1.117.0

Released on September 13, 2024

Support for Kubernetes: 1.29, 1.30, and 1.31

New Features

Adds the --private-ca-configmap flag to the install and generate-manifests commands. The contents of the provided ConfigMap are used as additional trusted certificate authorities.
Adds the PrivateCACert template function to return the name of a ConfigMap containing additional trusted CA certificates provided by the end user.

Bug Fixes

Fixes an issue where dropdown Config items did not respect the when property.

1.116.1

Released on September 12, 2024

Support for Kubernetes: 1.28, 1.29, and 1.30

Bug Fixes

KOTS now uses the fully qualified .svc.cluster.local address when making requests to the kotsadm-rqlite and kotsadm-minio services for simplified HTTP proxy configuration using NO_PROXY=.cluster.local.

1.116.0

Released on September 9, 2024

Support for Kubernetes: 1.28, 1.29, and 1.30

New Features

Adds the ability to specify additional annotations (--additional-annotations) and labels (--additional-labels) that will be applied to kotsadm pods.

1.115.2

Released on September 5, 2024

Support for Kubernetes: 1.28, 1.29, and 1.30

Improvements

Available updates and the check for updates button are shown on the Dashboard page of the Admin Console for Embedded Cluster. These were removed in a previous version.
When nodes need to be added to the cluster during an Embedded Cluster restore operation, the join command is more clearly shown in the Admin Console.
Improves messaging when the requested channel slug is not allowed by the provided license.

Bug Fixes

Fixes an issue where the values provided to the --http-proxy, --https-proxy, and --no-proxy flags for the kots install command were not propagated to the Replicated SDK.
Hides a banner on the View Files page in Embedded Cluster that told users to use kubectl kots commands that are not intended for Embedded Cluster.

1.115.1

Released on August 22, 2024

Support for Kubernetes: 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue where the default nodeMetrics analyzer did not run.

1.115.0

Released on August 20, 2024

Support for Kubernetes: 1.28, 1.29, and 1.30

Improvements

The Nodes page displays guidance and easier access to the node join command during initial install of Embedded Cluster.
Adds back the check for updates button on the Version history page in Embedded Cluster, so you can check for updates without refreshing the page.

1.114.0

Released on August 12, 2024

Support for Kubernetes: 1.28, 1.29, and 1.30

New Features

Adds support for the dropdown config item type, which creates a dropdown on the config screen. See dropdown in Config.
Adds the radio config item type, which is functionally equivalent to the select_one item type but is more clearly named. The select_one config item type is deprecated in favor of radio but is still fully functional. See radio in Config.

1.113.0

important

In KOTS 1.113.0 and later, an installation error can occur if you use the kots install command without specifying a channel slug and the license used to install does not have access to the Stable channel. For more information, see Breaking Change below.

Released on August 9, 2024

Support for Kubernetes: 1.28, 1.29, and 1.30

New Features

Adds support for multi-channel licenses. This allows each license to be assigned to more than one channel.

With the introduction of multi-channel licenses, an installation error can occur if you use the kots install command without specifying a channel slug and the license used to install does not have access to the Stable channel. For more information, see Breaking Change below.

Bug Fixes

Fixes an issue in Embedded Cluster where going back to the Nodes page during the installation and then clicking continue did not work.

Breaking Change

In KOTS 1.113.0 and later, the following error will occur during installation if the kots install command lacks a channel slug and the license does not have access to the Stable channel: "failed to verify and update license: requested channel not found in latest license". This can break existing automation and documentation that includes a kots install command without a channel slug.

This error occurs because, when the channel slug is omitted from the kots install command (for example, kots install app), KOTS defaults to pulling metadata like the application icon and minimal RBAC configurations from the Stable channel. With the introduction of multi-channel licenses in KOTS 1.113.0, only licenses with access to a channel can pull metadata and download releases from that channel. This means that only licenses with access to the Stable channel can install without specifying the channel slug in the kots install command.

Previously, any license regardless of its assigned channel could install by excluding the channel slug from the kots install command. This could cause mismatches in deployment settings such as icons and minimal RBAC configurations because KOTS would pull metadata from the Stable channel and then install the release from the channel where the license was assigned.

Solution: To install a release from a channel other than Stable, specify the channel slug in the kots install command (for example, kots install app/beta). Also, ensure that the license has access to the specified channel. Refer to the Vendor Portal installation instructions or use the replicated channel inspect CHANNEL_ID command in the Replicated CLI for the correct commands.

To avoid breaking changes, update automation that uses the kots install command accordingly. Also, update documentation as needed so that the documented installation commands include the channel slug.

If you cannot update your KOTS installation command immediately, temporarily revert to KOTS 1.112.4 or earlier.

1.112.4

Released on July 31, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue in Embedded Cluster upgrades where preflights did not rerun when the config was re-edited.
Fixes an issue that caused K8s minor version parsing errors to be logged repeatedly.

1.112.3

Released on July 30, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue where the Admin Console vVersion history page for Embedded Cluster had to be refreshed to show a newly available version after uploading an air gap bundle.

1.112.2

Released on July 26, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue in Embedded Cluster upgrades where rendering Helm charts that utilize Helm capabilities could fail.

1.112.1

Released on July 16, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue where reporting information wasn't sent for Embedded Cluster in some cases.

1.112.0

Released on June 27, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

New Features

Changes the workflow for upgrading to newly available versions in the Admin Console for Embedded Cluster only. When upgrading to new versions, users are taken through a wizard where the license is sycned, config can be edited, and preflight checks are run before deploying.

1.111.0

Released on July 9, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue where the Troubleshoot button on the Resource status modal didn't take you to the Troubleshoot page.

1.110.0

Released on June 27, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

New Features

Adds the ability to specify a custom storage class for the KOTS Admin Console components when installing to an existing cluster.

1.109.14

Released on June 21, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue where required releases were enforced in air gapped mode when changing between channels that didn't have semantic versioning enabled

1.109.13

Released on June 20, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Changes to support Embedded Cluster.

1.109.12

Released on June 10, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Updates to enable high availability support for embedded cluster.

Bug Fixes

Fixes an issue where air gap uploads could incorrectly fail with an error indicating the version being uploaded matches the current version. This occurred because the version labels matched and were valid semantic versions. Comparing version labels is intentional for channels with semantic versioning enabled, but was unintentional for channels without semantic versioning enabled.

1.109.11

Released on June 7, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Minor UI improvements for the air gap bundle upload progress bar.

Bug Fixes

Fixes an issue where the --skip-preflights flag would not work if all strict preflights passed but a non-strict preflight failed.

1.109.10

Released on June 6, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Various updates to enable high availability support for embedded cluster.

1.109.9

Released on May 31, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Various updates to enable high availability support for embedded cluster.

Bug Fixes

An incorrect CLI command for generating support bundles is no longer shown on the Troubleshoot page in embedded clusters.

1.109.8

Released on May 30, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Updates to enable high-availability support for Embedded Cluster.

1.109.7

Released on May 29, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Updates to enable high-availability support for embedded cluster.

1.109.6

Released on May 24, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Updates to enable disaster recovery support for embedded cluster.

1.109.5

Released on May 23, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Updates to enable disaster recovery support for embedded cluster.

1.109.4

Released on May 21, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fix kubectl kots port-forward for high-latency network connections.

1.109.3

Released on May 15, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Bug Fixes

Fixes an issue where the Distribution template function returned k0s instead of embedded-cluster for embedded clusters.

1.109.2

Released on May 15, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Updates images to resolve CVE-2024-33599 with high severity; and CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 with medium severity.

1.109.1

Released on May 15, 2024

Support for Kubernetes: 1.27, 1.28, 1.29, and 1.30

Improvements

Displays the volume name, Pod name, and namespace of snapshotted volumes in the snapshot details page.

Bug Fixes

Fixes an issue where the Config and View files tabs did not display as active when clicked.
Fixes an issue where KOTS failed to process Helm charts with required values that were configured with the v1beta2 HelmChart custom resource.

1.109.0

Released on May 9, 2024

Support for Kubernetes: 1.27, 1.28, and 1.29

New Features

Adds the ability to detect embedded cluster with the Distribution template function.

1.108.13

Released on May 6, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Updates the snapshot settings page to clarify that the retention policy applies to all snapshots, not just scheduled snapshots.

1.108.12

Released on May 3, 2024

Support for Kubernetes: 1.27, 1.28, and 1.29

Bug Fixes

Fixes an issue where the snapshot settings card on the admin console dashboard contained an extra slash in the object store bucket path.

1.108.11

Released on May 1, 2024

Support for Kubernetes: 1.27, 1.28, and 1.29

Improvements

Various updates to enable disaster recovery support for embedded cluster.
Updates Troubleshoot to v0.91.0.

1.108.10

Released on April 26, 2024

Support for Kubernetes: 1.27, 1.28, and 1.29

Improvements

Various updates to enable disaster recovery support for embedded cluster.

1.108.9

Released on April 24, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Updates images to resolve CVE-2024-3817 with critical severity.

Bug Fixes

Fixes an issue where the Edit config link on the dashboard didn't work.

1.108.8

Released on April 18, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Various updates to improve air gap and multi-node support for embedded cluster.

1.108.7

Released on April 16, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Various updates to enable air gap and multi-node support for embedded cluster.

1.108.6

Released on April 11, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Provide a progress indicator to users when pushing images and embedded cluster artifacts during an installation.

1.108.5

Released on April 8, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Various updates to enable air gap support for embedded cluster.

1.108.4

Released on April 3, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Re-builds the kotsadm image with the latest Wolfi base image to mitigate CVE-2024-3094.

1.108.3

Released on March 26, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Updates to enable air gap support for embedded cluster.

1.108.2

Released on March 25, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Various updates to enable air gap support for embedded cluster.

1.108.1

Released on March 19, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Prevents application rollback in Embedded Cluster installations.

Bug Fixes

Fixes an issue in Embedded Cluster where forward slashes were replaced with dashes in custom role labels.

1.108.0

Released on March 5, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

New Features

Adds the ability to get the config values of the currently deployed app version via the CLI by passing the --current flag to the kubectl kots get config CLI command.
Adds the ability to update the config values of the currently deployed app version via the CLI by passing the --current flag to the kubectl kots set config CLI command.
Adds the ability to update the config values of any app version via the CLI by providing the target sequence with the --sequence flag in the kubectl kots set config CLI command.
Adds the ability to update the config values for any app version using the admin console.

Improvements

Hides the Application and Cluster Management tabs on the admin console navbar during the initial installation flow with Replicated embedded cluster (Beta). For more information, see Using Embedded Cluster.

Bug Fixes

Fixes an issue where the license upload page flashed briefly before being redirected to the login page.
Fixes an issue in embedded cluster (Beta) where the cluster upgrade modal occasionally failed to display during upgrades.

1.107.8

Released on February 27, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Resolves the false positive CVEs with critical severity in the kotsadm image which stemmed from the Dex Go library.

1.107.7

Released on February 23, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Bug Fixes

Fixes an issue where the "Ignore Preflights" button was not displayed on the preflights page when preflights were running.
Fixes an issue where the LicenseFieldValue template function did not return the new value when syncing the license.

1.107.6

Released on February 22, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

UI improvements when running in an embedded cluster (Alpha)

1.107.5

Released on February 20, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Bug Fixes

Fixes an issue in kURL clusters where images from Helm charts configured using the v1beta2 HelmChart custom resource were incorrectly removed from the in-cluster registry, potentially leading to failed deployments.

1.107.4

Released on February 16, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Bug Fixes

Fixes an issue where processing images from Helm charts configured using the v1beta2 HelmChart custom resource may fail in air gapped mode.

1.107.3

Released on February 12, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Bug Fixes

Fixes an issue where the preflights page was not displayed during initial installation if the preflight spec was included in a Secret or ConfigMap in the Helm chart templates.

1.107.2

Released on February 2, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Removes the rqlite DB data dump from support bundles generated by KOTS.
Updates the minio, rqlite, dex, and local-volume-provider images to resolves CVE-2023-6779, CVE-2023-6246, CVE-2024-21626 with high severity; and CVE-2023-6780 with medium severity.

1.107.1

Released on February 1, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Updates the kotsadm, kotsadm-migrations, and kurl-proxy images to resolves CVE-2023-6779, CVE-2023-6246, CVE-2024-21626 with high severity; and CVE-2023-6780 with medium severity.

1.107.0

Released on January 30, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

New Features

Adds support for running KOTS on ARM64 nodes. For air gap installations, the KOTS air gap bundle has an updated format and also now includes images for both AMD64 and ARM64 architectures. When updating KOTS in air gap environments, ensure the CLI version you use matches the version of the KOTS air gap bundle because earlier KOTS versions are not compatible with the new air gap bundle format. For more information about KOTS installation requirements, see Installation Requirements.

Improvements

Removes support kubectlVersion and kustomizeVersion in the KOTS Application custom resource. One version of kubectl and one version of kustomize are now included in KOTS and will always be used.

1.106.0

Released on January 23, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

New Features

Adds support for an experimental air gap bundle feature that allows KOTS to process partial air gap bundles that only include the images needed to update to the desired version.

1.105.5

Released on January 18, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Adds the namespace to the password reset command that is displayed when the admin console is locked after hitting the limit of unsuccessful login attempts.

1.105.4

Released on January 16, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Bug Fixes

Fixes an issue where Pods associated with KOTS components could be incorrectly scheduled on a non-AMD64 node.
Fixes an issue where configuring snapshots to use internal storage failed in kURL clusters with HA MinIO and OpenEBS.

1.105.3

Released on January 10, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Improvements

Upgrades the github.com/cloudflare/circl go module from 1.3.3 to 1.3.7 to resolve GHSA-9763-4f94-gfch with high severity.

1.105.2

Released on January 9, 2024

Support for Kubernetes: 1.26, 1.27, 1.28, and 1.29

Bug Fixes

Fixes an issue where rendering KOTS custom resources could fail if there are required configuration items that don't have defaults.
Fixes an issue where the kotsadm-rqlite and kotsadm-minio Pods could be incorrectly scheduled on Arm nodes.

1.105.1

Released on December 29, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

Bug Fixes

Fixes an issue where the minKotsVersion and targetKotsVersion fields in the Application custom resource would not be enforced if it was part of a multi-doc yaml file.

1.105.0

Released on December 28, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

New Features

Adds the ability to template the entire values field in the HelmChart custom resource.

Bug Fixes

Fixes an issue where the namespace field in HelmChart custom resources was not rendered when uninstalling the corresponding chart.
Fixes an issue where KOTS failed to parse the Preflight custom resource if template functions were used for non-string fields.

1.104.7

Released on December 14, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

Improvements

Uses Chainguard to build the local-volume-provider image to resolve CVE-2019-8457 and CVE-2023-45853 with critical severity; and CVE-2022-3715, CVE-2021-33560, CVE-2022-4899, CVE-2022-1304, CVE-2020-16156, CVE-2023-31484, CVE-2023-47038 with high severity; and CVE-2023-4806, CVE-2023-4813, CVE-2023-5981, CVE-2023-5678, CVE-2023-4039, CVE-2023-50495, CVE-2023-4641 with medium severity; and TEMP-0841856-B18BAF, CVE-2016-2781, CVE-2017-18018, CVE-2022-3219, CVE-2011-3374, CVE-2010-4756, CVE-2018-20796, CVE-2019-1010022, CVE-2019-1010023, CVE-2019-1010024, CVE-2019-1010025, CVE-2019-9192, CVE-2018-6829, CVE-2011-3389, CVE-2018-5709, CVE-2022-41409, CVE-2017-11164, CVE-2017-16231, CVE-2017-7245, CVE-2017-7246, CVE-2019-20838, CVE-2021-36084, CVE-2021-36085, CVE-2021-36086, CVE-2021-36087, CVE-2007-6755, CVE-2010-0928, CVE-2013-4392, CVE-2020-13529, CVE-2023-31437, CVE-2023-31438, CVE-2023-31439, CVE-2007-5686, CVE-2013-4235, CVE-2019-19882, CVE-2023-29383, TEMP-0628843-DBAD28, CVE-2011-4116, CVE-2023-31486, TEMP-0517018-A83CE6, CVE-2005-2541, CVE-2022-48303, CVE-2023-39804, TEMP-0290435-0B57B5, CVE-2022-0563 with low severity.

1.104.6

Released on December 13, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

Improvements

Uses Chainguard to build the kotsadm-migrations image to resolve CVE-2023-45853 with critical severity; CVE-2023-31484, CVE-2023-47038, and CVE-2023-39325 with high severity; CVE-2023-5981, CVE-2023-4039, CVE-2023-5678, CVE-2023-4641, and CVE-2023-44487 with medium severity; and TEMP-0841856-B18BAF, CVE-2022-0563, CVE-2016-2781, CVE-2017-18018, CVE-2022-27943, CVE-2022-3219, CVE-2011-3374, CVE-2010-4756, CVE-2018-20796, CVE-2019-1010022, CVE-2019-1010023, CVE-2019-1010024, CVE-2019-1010025, CVE-2019-9192, CVE-2018-6829, CVE-2011-3389, CVE-2013-4392, CVE-2023-31437, CVE-2023-31438, CVE-2023-31439, CVE-2007-6755, CVE-2010-0928, CVE-2007-5686, CVE-2019-19882, CVE-2023-29383, TEMP-0628843-DBAD28, CVE-2011-4116, CVE-2023-31486, TEMP-0517018-A83CE6, CVE-2005-2541, CVE-2022-48303, CVE-2023-39804, and TEMP-0290435-0B57B5 with low severity.
Uses Chainguard to build the rqlite image to resolve CVE-2023-5363, CVE-2023-39325, and GHSA-m425-mq94-257g with high severity; and CVE-2023-5678, CVE-2023-3978, and CVE-2023-44487 with medium severity.
Uses Chainguard to build the MinIO image to resolve CVE-2022-27943 and CVE-2022-29458 with low severity.
Uses Chainguard to build the dex image to resolve CVE-2022-48174 with critical severity; CVE-2023-5363, CVE-2023-39325, and GHSA-m425-mq94-257g with high severity; and CVE-2023-2975, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678, GHSA-2c7c-3mj9-8fqh, CVE-2023-3978, and CVE-2023-44487 with medium severity.

Bug Fixes

Fixes an issue where preflights could hang indefinitely when rerun, if the sequence was created by KOTS versions earlier than 1.96.0.

1.104.5

Released on December 8, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

Improvements

Uses Chainguard to build the kurl-proxy image to resolve CVE-2023-45853 with critical severity; CVE-2023-25652, CVE-2023-29007 CVE-2023-5981, CVE-2023-2953, CVE-2023-44487, CVE-2023-31484, and CVE-2023-47038 with high severity; CVE-2023-4039, CVE-2023-5678, and CVE-2023-4641 with medium severity; CVE-2011-3374, TEMP-0841856-B18BAF, CVE-2022-0563, CVE-2016-2781, CVE-2017-18018, CVE-2022-27943, CVE-2018-1000021, CVE-2022-24975, CVE-2023-25815, CVE-2022-3219, CVE-2010-4756, CVE-2018-20796, CVE-2019-1010022, CVE-2019-1010023, CVE-2019-1010024, CVE-2019-1010025, CVE-2019-9192, CVE-2018-6829, CVE-2011-3389, CVE-2018-5709, CVE-2015-3276, CVE-2017-14159, CVE-2017-17740, CVE-2020-15719, CVE-2011-4116, CVE-2023-31486, CVE-2007-6755, CVE-2010-0928, CVE-2013-4392, CVE-2023-31437, CVE-2023-31438, CVE-2023-31439, CVE-2007-5686, CVE-2019-19882, CVE-2023-29383, TEMP-0628843-DBAD28, TEMP-0517018-A83CE6, CVE-2005-2541, CVE-2022-48303, and TEMP-0290435-0B57B5 with low severity.

Bug Fixes

Fixes an issue that stripped the port from the argument passed to the --kotsadm-registry flag. This could result in an error when validating the registry when installing, upgrading, or pushing admin console images.

1.104.4

Released on December 1, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

Improvements

Uses Chainguard to build the kotsadm image to resolve CVE-2023-45853 with critical severity; CVE-2023-25652, CVE-2023-29007, CVE-2023-5981, CVE-2023-2953, CVE-2023-44487, CVE-2023-31484, CVE-2023-47038, CVE-2023-24329, CVE-2023-41105, and CVE-2023-2253 with high severity; CVE-2023-4039, CVE-2023-27043, CVE-2023-40217, CVE-2023-5678, and CVE-2023-4641 with medium severity; and CVE-2011-3374, TEMP-0841856-B18BAF, CVE-2022-0563, CVE-2016-2781, CVE-2017-18018, CVE-2022-3219, CVE-2022-27943, CVE-2018-1000021, CVE-2022-24975, CVE-2023-25815, CVE-2010-4756, CVE-2018-20796, CVE-2019-1010022, CVE-2019-1010023, CVE-2019-1010024, CVE-2019-1010025, CVE-2019-9192, CVE-2018-6829, CVE-2011-3389, CVE-2018-5709, CVE-2015-3276, CVE-2017-14159, CVE-2017-17740, CVE-2020-15719, CVE-2011-4116, CVE-2023-31486, CVE-2023-24535, CVE-2021-45346, CVE-2007-6755, CVE-2010-0928, CVE-2013-4392, CVE-2023-31437, CVE-2023-31438, CVE-2023-31439, CVE-2007-5686, CVE-2019-19882, CVE-2023-29383, TEMP-0628843-DBAD28, TEMP-0517018-A83CE6, CVE-2005-2541, CVE-2022-48303, and TEMP-0290435-0B57B5 with low severity.

Bug Fixes

Fixes an issue on the admin console Cluster Management page where a secondary node join command was displayed when the primary node type was selected.

1.104.3

Released on November 29, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

Improvements

Upgrades the github.com/go-jose/go-jose/v3 go module to 3.0.1 to resolve GHSA-2c7c-3mj9-8fqh with medium severity.

1.104.2

Released on November 17, 2023

Support for Kubernetes: 1.26, 1.27, and 1.28

Improvements

Upgrades the golang.org/x/net go module to 0.17.0 in kurl_proxy to resolve CVE-2023-39325 with high severity, and CVE-2023-3978 and CVE-2023-44487 with medium severity.
Upgrades the minio/minio image to RELEASE.2023-11-11T08-14-41Z to resolve CVE-2023-46129 and GHSA-m425-mq94-257g with high severity, and CVE-2023-44487 with medium severity.

1.104.1

Released on November 10, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

Improvements

Adds support for OKE (Oracle Kubernetes Engine) to the Distribution template function.
The CLI now surfaces preflight check errors that are due to insufficient RBAC permissions.
Upgrades the kotsadm base image to debian:bookworm-slim to resolve CVE-2023-23914 with critical severity, and CVE-2022-42916 and CVE-2022-43551 with high severity.
Upgrades the Helm binary in the kotsadm image to 3.13.2 to resolve CVE-2023-39325 and GHSA-m425-mq94-257g with high severity and CVE-2023-44487 and GHSA-jq35-85cj-fj4p with medium severity.
Upgrades the google.golang.org/grpc go module to v1.59.0 to resolve GHSA-m425-mq94-257g with high severity and CVE-2023-44487 with medium severity.
Upgrades the github.com/docker/docker go module to v24.0.7 to resolve GHSA-jq35-85cj-fj4p with medium severity.

Bug Fixes

Fixes an issue where the reporting data stored in Secrets in air gapped installations could exceed the size of the secret (1MB).

1.104.0

Released on November 6, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

New Features

Releases that include version 1.0.0-beta.12 or later of the Replicated SDK can now be installed by KOTS. When KOTS deploys a release that includes the SDK, the SDK and KOTS both operate in the environment and independently report telemetry. Replicated recommends that everyone--not just vendors that support Helm CLI installations--include the SDK in their application for access to the latest features from Replicated!

Improvements

Upgrades the replicated/local-volume-provider image to v0.5.5 to resolve CVE-2023-45128 with critical severity, CVE-2023-4911, CVE-2023-29491, CVE-2023-45141, and GHSA-m425-mq94-257g with high severity, and CVE-2023-36054, CVE-2023-3446, CVE-2023-3817, CVE-2023-41338, CVE-2023-39325, CVE-2023-3978, and CVE-2023-44487 with medium severity.
Upgrades the replicated/schemahero image to 0.16.0 to resolve CVE-2023-4911 with high severity, CVE-2023-2603, CVE-2023-29491, CVE-2023-2650, CVE-2023-31484, and CVE-2023-3978 with medium severity.
Upgrades the minio/minio image to RELEASE.2023-10-25T06-33-25Z to resolve CVE-2023-4911 and CVE-2023-44487 with high severity, CVE-2023-4527, CVE-2023-4806, CVE-2023-4813, CVE-2023-39325, and CVE-2023-44487 with medium severity.
Upgrades the minio/mc image to RELEASE.2023-10-14T01-57-03Z to resolve CVE-2023-4911 with high severity, and CVE-2023-4527, CVE-2023-4806, CVE-2023-4813, and CVE-2023-39325 with medium severity.

Bug Fixes

Fixes an issue where KOTS didn't discover specs with the troubleshoot.sh/kind=support-bundle label when generating support bundles.

1.103.3

Released on October 25, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

Improvements

Updates the kubectl binary in the kotsadm image to resolve CVE-2023-39325, CVE-2023-3978, and CVE-2023-44487 with medium severity.
Updates the golang.org/x/net go module to version 0.17.0 to resolve CVE-2023-39325 and CVE-2023-44487 with medium severity.

1.103.2

Released on October 9, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

Improvements

Upgrades the minio/minio and minio/mc images to versions RELEASE.2023-09-23T03-47-50Z and RELEASE.2023-09-22T05-07-46Z, respectively, to resolve CVE-2023-29491 with high severity.
Upgrades the Helm binary in the kotsadm image to 3.13.0 to resolve CVE-2023-28840 with high severity and CVE-2023-28841, CVE-2023-28842, and GHSA-6xv5-86q9-7xr8 with medium severity.
Log preflight checks to the CLI and kotsadm logs whenever there are checks that fail leading to a failed deployment.

Bug Fixes

Fixes a bug that caused no status code to be returned from the custom metrics API requests.

1.103.1

Released on September 29, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

Improvements

Adds clarifying language that configured automatic update checks use the local server time.

Bug Fixes

Fixes an issue where Helm charts that were previously deployed with the Replicated HelmChart kots.io/v1beta2 installation method were not uninstalled as expected after making configuration changes to exclude the chart.
Fixes an issue where image pull secrets and hook informers were not applied for dynamically created namespaces if the kotsadm pod/API restarts.
Fixes an issue where the applications dropdown for automatic partial snapshots settings showed no options or applications to select.

1.103.0

Released on September 20, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

New Features

Adds support for Lookup template function.

1.102.2

Released on September 15, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

Improvements

The custom metrics API no longer requires authorization header.

Bug Fixes

Fixes an issue where updating the registry settings would not always display the loading indicator and status messages in the UI.
Fixes an issue where deployments or diffing could fail after upgrading from KOTS 1.95 or earlier to KOTS 1.101.2-1.102.1 if versions contained empty Kustomize bases.

1.102.1

Released on September 8, 2023

Support for Kubernetes: 1.25, 1.26, 1.27, and 1.28

Bug Fixes

Fixes an issue where uploading the application air gap bundle could fail due to a permissions issue when creating files under the /tmp directory inside the kotsadm pod/container. This is only applicable to embedded cluster installations with Replicated kURL.

1.102.0

Released on September 6, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

New Features

Adds support for sending custom application metrics using the /api/v1/app/custom-metrics endpoint. For more information, see Configuring Custom Metrics (Beta).

1.101.3

Released on August 18, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

Improvements

Updates the MinIO image to RELEASE.2023-08-09T23-30-22Z to resolve CVE-2023-27536, CVE-2023-28321, CVE-2023-34969, CVE-2023-2603, CVE-2023-28484, CVE-2023-29469 with medium severity and CVE-2023-2602 with low severity.

Bug Fixes

Removes the distinction between gke and gke-autopilot from Kubernetes distribution reporting as this check was not working as intended and potentially displaying inconsistent information. All Standard and Autopilot GKE clusters are now reported as gke.
Fixes an issue where the admin console was not correctly processing multi-doc yaml files containing windows line endings.

1.101.2

Released on August 4, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

Improvements

Upgrades the Helm binary in the kotsadm image to 3.12.2 to resolve CVE-2023-2253 with high severity.

Bug Fixes

Fixes an issue where parsing invalid KOTS kinds failed silently.

1.101.1

Released on July 31, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

Bug Fixes

Fixes an issue where defaults were not used for repeatable config items when doing an automated install with the kots CLI.
Fixes an issue where processing Helm charts or sub-charts that have -charts as a suffix failed.

1.101.0

Released on July 19, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

New Features

KOTS now supports running preflight checks defined in a Helm chart. If any Helm charts in a release contain preflight specifications, KOTS runs those. If no Helm charts exist or no preflights are defined in any Helm charts, KOTS uses the previous behavior and runs any preflights defined in a kind: Preflight file in the root of the release. For more information about preflights in Helm charts, see Define Preflight Checks for Helm Installations .

Improvements

Updates the replicated/local-volume-provider image to v0.5.4 to resolve CVE-2023-0464 with high severity.
Updates the kotsadm/dex image to v2.37.0 to resolve CVE-2022-4450, CVE-2023-0215, CVE-2023-0464, CVE-2023-2650 with high severity and CVE-2022-4304, CVE-2023-0465, CVE-2023-0466, CVE-2023-1255 with medium severity.
Updates the MinIO image to RELEASE.2023-06-29T05-12-28Z to resolve CVE-2020-24736, CVE-2023-1667, CVE-2023-2283, and CVE-2023-26604 with medium severity.
Upgrades webpack to 5.88.1 to resolve CVE-2023-28154 with critical severity.

Bug Fixes

Fixes an issue where the rendered directory was not created for airgap application updates.

1.100.3

Released on June 20, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

Improvements

Updates the github.com/dexidp/dex module to v2.36.0 (git hash v0.0.0-20230320125501-2bb4896d120e) to resolve CVE-2020-26290 with critical severity.
Updates the github.com/sigstore/rekor module to v1.2.0 to resolve CVE-2023-30551 with high severity and CVE-2023-33199 with medium severity.
Updates the github.com/gin-gonic/gin module to v1.9.1 in the kurl-proxy to resolve CVE-2023-26125 and CVE-2023-29401 with medium severity.

Bug Fixes

Fixes an issue where repeatable items did not work as expected on the Config page.

1.100.2

Released on June 7, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

Bug Fixes

Fixes an issue where the Config values were not saved when a release contained a multiple-document YAML file.
Fixes an issue where the Config specification was missing from the rendered release in the kotsKinds folder if the release contained a multiple-document YAML file.
Fixes an issue that allowed users to edit readonly Config items.

1.100.1

Released on June 2, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

Improvements

Updates the way custom domains for the Replicated registry and proxy registry are used. If a default or channel-specific custom domain is configured, that custom domain is associated with a release when it is promoted to a channel. KOTS will rewrite images using that custom domain. The replicatedRegistryDomain and proxyRegistryDomain fields in the Application custom resource are deprecated but continue to work to give time to migrate to the new mechanism.
Updates the rqlite/rqlite image to 7.19.0 to resolve CVE-2023-1255 with medium severity.

1.100.0

Released on May 26, 2023

Support for Kubernetes: 1.24, 1.25, 1.26 and 1.27

New Features

Adds support for kots.io/creation-phase and kots.io/deletion-phase annotations to control the order in which native Kubernetes resources are created and deleted, respectively. See Deployment Phases in Orchestrating Resource Deployment.
Adds support for a kots.io/wait-for-ready annotation, which causes KOTS to wait for a native Kubernetes resource to be ready before continuing with the deployment. See Waiting for a Resource to be Ready in Orchestrating Resource Deployment.
Adds support for a kots.io/wait-for-properties annotation, which causes KOTS to wait for one or more properties to match a desired value before continuing with the deployment. See Wait for Resource Properties in Orchestrating Resource Deployment.

Improvements

Updates the github.com/cloudflare/circl module to v1.3.3 to resolve CVE-2023-1732 with medium severity.

Bug Fixes

Fixes an issue where Helm charts deployed using the native Helm installation method were uninstalled then reinstalled when the chart version changed or was updated.
Fixes an issue in embedded clusters where images from native Helm v2 (Beta) charts were incorrectly removed from the in-cluster registry, potentially leading to failed deployments.
Bumps the Helm version used by KOTS to 3.12.0 to fix an issue where native Helm installations were failing on Kubernetes 1.27.

1.99.0

Released on May 18, 2023

Support for Kubernetes: 1.24, 1.25, and 1.26

New Features

Adds a new native Helm v2 installation method (Beta) that leverages the kots.io/v1beta2 HelmChart custom resource. This v2 installation method does a Helm installation or upgrade of your Helm chart without modifying the chart with Kustomize. This is an improvement to the v1 installation method because it results in Helm installations that can be reproduced outside of the app manager, and it enables the use of additional Helm functionality that was not available in v1. See HelmChart v2 (Beta) in the Custom Resources section.

Improvements

Applies application status informers before deploying the actual resources. This is helpful in cases where deployments take a long time, because the statuses are now available while the deployment happens.
Updates the replicated/local-volume-provider image to v0.5.3 to resolve CVE-2022-4415 and CVE-2022-3821 with high severity.
Replace the misleading call-to-action button on the instance snapshot restore modal, which could have mistakenly lead the user to believe the instance restore was initiated.
Enhances formatting to accommodate lengthy strings for fields such as the application name and config item names.

Bug Fixes

Fixes a bug where the rqlite collector was unable to collect a data dump if the name of the rqlite container changed.
Fixes an issue where re-running preflights during the initial installation could cause the UI to incorrectly show a status of "Currently pending version".
Fixes an issue where re-running preflights during the initial installation could cause the application to be re-deployed.

1.98.3

Released on May 5, 2023

Support for Kubernetes: 1.24, 1.25, and 1.26

Improvements

The JSON Web Token (JWT) is stored in an HttpOnly cookie to prevent cross-site scripting (XSS) attacks.
The Cluster Management page shows by default the command for joining a primary node instead of a secondary node for high availability clusters.
The resource status modal displays the time the data was last fetched automatically.
Introduces a deterministic order for applying and deleting Kubernetes manifests based on the resource kind.
Uses the weight field from the HelmChart custom resource to determine the order in which to uninstall charts that have useHelmInstall: true. Charts are uninstalled by weight in descending order, with higher weights uninstalled first.
Application Helm charts are uninstalled first, then other Kubernetes manifests are uninstalled.
Improvements to the Version history page include truncating long version labels, removing unnecessary preflight icons, and improving the content layout.
The kots admin-console push-images command now returns an error if the provided air gap bundle file is missing.
Adds a Back button to the Preflights page.

Bug Fixes

Fixes an issue where snapshot restores hung if RabbitMQ cluster custom resources were used.
Fixes an issue where Helm releases were not uninstalled when undeploying an application using the kots remove command and passing the --undeploy flag.
Fixes an issue where Helm charts that were deployed with native Helm to a different namespace than KOTS were not uninstalled when they were removed from subsequent application releases.
Fixes an issue where uploading an air gap bundle through the admin console might have failed due to issues getting layers for OCI images.
Fixes an issue where canceling a restore of an application (partial) snapshot sometimes did not work if multiple applications were installed in the same admin console.
The Config page now shows the correct error message if errors other than regex validation occurred.
Fixes an issue where the Config page incorrectly displayed "Edit the currently deployed config" when there was no application deployed.
Fixes an issue where installations and upgrades could fail when checking if the cluster was a kURL cluster, if the user running the command was not authorized to list ConfigMaps in the kube-system namespace.
Fixes an issue where air gapped application pods could fail to pull images from the kURL registry due to the image names being rewritten incorrectly, if the application was upgraded using the kots upstream upgrade command.
Fixes an issue where the Version history page could incorrectly show a Deployed button if an application version was deployed while preflight checks were running.

1.98.2

Released on April 26, 2023

Support for Kubernetes: 1.24, 1.25, and 1.26

Bug Fixes

Fixes an issue where quotes were stripped from fields in HelmChart custom resources, which led to unexpected behavior and failed deployments.
Fixes an issue where invalid Kustomize patches were generated for Helm charts with deeply nested dependencies.
Fixes an issue where processing application manifests occasionally failed if null values were encountered after rendering.

1.98.1

Released on April 21, 2023

Support for Kubernetes: 1.24, 1.25, and 1.26

Bug Fixes

Fixes an issue where multiple copies of the same Kubernetes resource (for example, the same kind and name) were deduplicated even if they had a different namespace. This deduplication resulted in the app manager deploying only one of the resources to the cluster.
Fixes an issue that caused config updates to fail when the user did not provide a value for a required config item with a default value, even if the item was hidden.
Fixes an issue where switching the license to a different channel did not fetch the current release on that channel if the number of releases was the same on both channels.

1.98.0

Released on April 19, 2023

Support for Kubernetes: 1.24, 1.25, and 1.26

New Features

Adds support for validating config items with type text, textarea, password, or file by matching the item's values against a regex pattern. For more information, see validation in Config.
Adds a new kotsKinds directory to the application archive that includes the rendered KOTS custom resources.

Improvements

Sorts multi-application installations in the admin console by their creation date with the most recently installed application at the top.
Updates spacing and font sizes to improve visual grouping of items on admin console Config page.
Updates Kustomize from v4.5.7 to v5.0.1 which resolves CVE-2022-27664, CVE-2022-41723, CVE-2022-41723, and CVE-2022-28948 with high severity and CVE-2022-41717 with medium severity.
Updates the Helm binary included in the kotsadm image from 3.11.0 to 3.11.3 to resolve CVE-2022-41723 and CVE-2023-25173 with high severity and CVE-2023-25153 with medium severity.
Updates the github.com/opencontainers/runc module to v1.1.5 to resolve CVE-2023-27561 with high severity.
Updates the minio/minio image to RELEASE.2023-04-13T03-08-07Z to resolve CVE-2023-0361 with medium severity.
Updates the minio/mc image to RELEASE.2023-04-12T02-21-51Z to resolve CVE-2023-0361 with medium severity.
Adds support for template functions to the namespace and helmUpgradeFlags fields of the HelmChart custom resource.

Bug Fixes

Fixes an issue where strict security context configurations were not applied in OpenShift environments when the --strict-security-context flag was passed to the kots install or kots admin-console upgrade commands.

1.97.0

Released on April 7, 2023

Support for Kubernetes: 1.24, 1.25, and 1.26

New Features

Allows users to unmask passwords on various forms in the admin console.

Improvements

Simplifies the wording on the air gap bundle upload page.
Updates the log in page to say Log in to APP_NAME admin console instead of Log in to APP_NAME.
Upgrades the MinIO image to RELEASE.2023-03-24T21-41-23Z to resolve CVE-2023-0286 with high severity, and CVE-2022-4304, CVE-2022-4450, and CVE-2023-0215 with medium severity.

1.96.3

Released on March 29, 2023

Support for Kubernetes: 1.24, 1.25, and 1.26

Improvements

Wraps the logs in the deploy logs modal to increase readability by eliminating the need to scroll horizontally.
Removes support for cipher suites that use the CBC encryption algorithm or SHA-1 from the kurl_proxy service that runs in embedded cluster installations.

Bug Fixes

Fixes a bug that caused application upgrades to fail because the app manager attempted to migrate the Helm release secret when the release secret already existed in the release namespace.

1.96.2

Released on March 24, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

Improvements

Updates the kotsadm/dex image to v2.36.0 to resolve CVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2022-41721, CVE-2022-41723, and CVE-2022-32149 with high severity, and CVE-2022-4304 and CVE-2022-41717 with medium severity.
Updates the MinIO image to RELEASE.2023-03-13T19-46-17Z to resolve CVE-2023-23916 with medium severity.
Updates the kubectl binary in the kotsadm image to resolve CVE-2022-41723 with high severity and CVE-2022-41717 with medium severity.
Updates the golang.org/x/net module in the kurl-proxy to resolve CVE-2022-41723 with high severity.
Upgrades the schemahero image tag to v0.14.0 and replicated/local-volume-provider image to v0.5.2 to resolve CVE-2022-41723 with high severity.

Bug Fixes

Fixes a bug where multi-node embedded cluster installations hang indefinitely with the KOTS add-on.
Increases the time for displaying the slow loading indicator to two minutes to prevent the admin console from continuously reloading when the internet connection is slow.
Removes hardcoded application name on the Troubleshoot page when a community license is used.
Fixes a known issue that was introduced in v1.95.0 that causes application upgrades to fail for Helm charts that are deployed using the native Helm installation method. See the known issue in the v1.95.0 release notes, and see useHelmInstall in the HelmChart reference.

1.96.1

important

The app manager v1.96.1 has a known issue that causes application upgrades to fail for Helm charts that are deployed using the native Helm installation method. This issue is resolved in the app manager v1.96.2. See Known Issue in 1.95.0 below.

Released on March 16, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

Improvements

Refreshes the design of the preflights page in the admin console to improve usability and match the style of other pages.
Updates the helm.sh/helm/v3 module to v3.11.2 to resolve CVE-2023-25165 with medium severity.
If the application's port is not available when the user enables access to the admin console with kubectl kots admin-console, failure messages print one time and retry silently.

1.96.0

important

The app manager v1.96.0 has a known issue that causes application upgrades to fail for Helm charts that are deployed using the native Helm installation method. This issue is resolved in the app manager v1.96.2. See Known Issue in 1.95.0 below.

Released on March 9, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

New Features

Adds the deployable, rendered application manifests to the version archive. This increases the transparency of what KOTS deploys by showing the exact manifests that are deployed as part of this version on the View Files page. For more information, see Rendered in Patching with Kustomize.

Improvements

Updates the replicated/local-volume-provider image to v0.5.1 to resolve CVE-2023-0361, CVE-2022-4450, CVE-2023-0215, and CVE-2023-0286 with high severity, and CVE-2022-2097 and CVE-2022-4304 with medium severity.
Improves the performance of creating, diffing, configuring, and deploying application versions by retrieving the rendered application manifests when they are available, instead of rendering them on the fly.
Improves the performance of creating application versions by running private image checks concurrently.

Bug Fixes

Resolves a clickjacking vulnerability that was present in the kurl_proxy service that runs in embedded cluster installations.
Adds a Rerun button on the preflights page when an application is initially installed.
Fixes an issue where the selected subnavigation tab was not underlined.
Fixes an issue where CRDs from subcharts were included in the Secret that Helm stores the release information in. In some cases, this issue could dramatically increase the Secret's size.

1.95.0

important

The app manager v1.95.0 has a known issue that causes application upgrades to fail for Helm charts that are deployed using the native Helm installation method. This issue is resolved in the app manager v1.96.2. See Known Issue below.

Released on March 1, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

New Features

Adds an --undeploy flag to the kots remove command that allows you to completely undeploy the application and delete its resources from the cluster.
Adds support for Azure Container Registry (ACR). For a full list of supported registries, see Private Registry Requirements.
Status informers now support DaemonSets. See Resource Statuses.
When using custom branding for the admin console, you can more easily change the color of groups of elements in the admin console (Beta).

Improvements

The kots install, kots upstream upgrade, and kots admin-console push-images commands now validate the provided registry information before processing the air gap bundle.
Upgrades the MinIO image to RELEASE.2023-02-22T18-23-45Z to resolve CVE-2022-42898, CVE-2022-47629, and CVE-2022-41721 with high severity and CVE-2022-2509, CVE-2022-1304, CVE-2021-46848, CVE-2016-3709, CVE-2022-40303, CVE-2022-40304, CVE-2020-35527, CVE-2022-35737, CVE-2022-3821, CVE-2022-4415, CVE-2022-37434, and CVE-2022-41717 with medium severity.
The kots admin-console generate-manifests command now supports OpenShift and GKE Autopilot, if it is executed with a Kubernetes cluster context.
Support bundles generated from the admin console include a copy of rqlite data for debugging purposes.

Bug Fixes

Fixes an issue where the namespace field in the HelmChart custom resource was not respected when useHelmInstall was set to true.

Known Issue

There is a known issue in the app manager v1.95.0 that causes application upgrades to fail for Helm charts that are deployed using the native Helm installation method. For more information about native Helm, see How Replicated Deploys Helm Charts in About Packaging with Helm.

The upgrade failure occurs for a Helm chart when the following conditions are met:

The Helm chart in the application has been installed previously using the app manager v1.94.2 or earlier.
In the HelmChart custom resource for the Helm chart:
- useHelmInstall is set to true. See useHelmInstall in HelmChart.
- namespace is set to a value different than the namespace where the app manager is installed. See namespace in HelmChart.

To avoid this known issue, Replicated recommends that you do not upgrade to v1.95.0. To work around this issue in v1.95.0, manually uninstall the affected Helm chart using the Helm CLI, and then redeploy the application using the app manager. See Helm Uninstall in the Helm documentation.

1.94.2

Released on February 17, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

Improvements

Updates kurl_proxy go mod gopkg.in/yaml.v3 to resolve CVE-2022-28948 with high severity.
Support bundles generated from the admin console now include collectors and analyzers from all support bundle specifications found in the cluster. This includes support bundle specifications found in Secret and ConfigMap objects. For more information about how to generate support bundles using discovery, see Generating Support Bundles.

Bug Fixes

Fixes a bug that didn't properly display config items that had the affix property.
Fixes an issue where the button to rerun preflights did not show if preflights failed during an air gapped installation.
Fixes a bug where Velero backups failed due to pods in the Shutdown state.

1.94.1

Released on February 14, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

Improvements

Adds support for Velero 1.10.

Bug Fixes

Fixes an issue where errors related to parsing and rendering HelmChart custom resources were silently ignored.

1.94.0

Released on February 7, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

New Features

Updates the kots velero configure-nfs and kots velero configure-hostpath commands to remove required manual steps and better automate the workflow. Users are now given a command to install Velero without a backup storage location. Then the user reruns the configure command to automatically configure the storage destination.
Updates the kots velero subcommands for configuring storage destinations, with instructions on how to install Velero if it is not yet installed.
The instructions displayed in the admin console for configuring an NFS or host path snapshot storage destination no longer use the kots velero print-fs-instructions command. Instead they use the kots velero configure-nfs and kots velero configure-hostpath commands to instruct the user to install Velero and configure the storage destination.

Improvements

Updates the golang.org/x/net module in the kurl-proxy image to resolve CVE-2022-41721 with high severity.
Updates github.com/dexidp/dex go mod to resolve CVE-2022-39222 with medium severity.
Updates the rqlite/rqlite image to 7.13.1 to resolve CVE-2022-41721 with high severity and CVE-2022-41717 with medium severity.
Updates the replicated/local-volume-provider image to v0.4.4 to resolve CVE-2022-41721 with high severity.
Deprecates the kots velero print-fs-instructions command because its functionality is replaced by the improved kots velero configure-hostpath and kots velero configure-nfs commands.
Improves the layout of deploy and redeploy network errors.

Bug Fixes

Fixes an issue where the Edit Config icon was visible on the dashboard for application versions that did not include config.
Fixes an issue where a user had to refresh the page to generate a new support bundle after deleting a support bundle that was still being generated.
Fixes a regression where the text wasn't colored for certain status informer states.
Fixes a bug where the app icon for latest version was shown instead of the icon for the currently deployed version.
Fixes an issue where backup logs failed to download if a log line exceeded the default bufio.Scanner buffer size of 64KB. This limit is increased to 1MB in the admin console.

1.93.1

Released on January 27, 2023

Support for Kubernetes: 1.23, 1.24, 1.25, and 1.26

Improvements

Updates the Helm binary included in the kotsadm image from 3.9.3 to 3.11.0 to resolve CVE-2022-27664 and CVE-2022-32149 with high severity.
Updates the golang.org/x/net module to resolve CVE-2022-41721 with high severity.
Public and private SSH keys are deleted when GitOps is disabled and the keys are not in use by another application.

Bug Fixes

Fixes a bug where the snapshots page showed no snapshots for a moment after starting a snapshot.
Fixes a bug where a warning related to kubectl apply displayed during embedded cluster installations.
Fixes an issue where registry.replicated.com images were rewritten to proxy.replicated.com when the application version specified a custom domain for the Replicated registry.
Fixes an issue where the Edit Config icon was visible on the version history page for application versions that did not include config.

1.93.0

Released on January 19, 2023

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

New Features

Adds the ability to delete support bundles from the Troubleshoot page of the admin console.
Config navigation links are highlighted as the user scrolls.

Improvements

Updates the helm.sh/helm/v3 module to v3.10.3 to resolve CVE-2022-23524, CVE-2022-23525, and CVE-2022-23526 with high severity.

Bug Fixes

Fixes an issue where the Cluster Management tab does not show up in Kubernetes installer clusters.
Fixes an issue where the description for generating a support bundle used a hard coded application name.
Fixes an issue on the Version History page where the row layout broke when displaying preflight check warnings.
Fixes an issue where an error occurred when uploading a PKCS #12 certificate with the private key listed first.

1.92.1

Released on December 29, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

Improvements

Preflight checks run and support bundles generate at least twice as fast as before.
Updates the kubectl binary in the kotsadm image to resolve CVE-2022-27664 and CVE-2022-32149 with high severity.
Updates the replicated/local-volume-provider image to v0.4.3 to resolve CVE-2021-46848 with critical severity.

Bug Fixes

Fixes an issue that caused the license upload to fail for applications that include Helm charts with required values missing from configuration.

1.92.0

Released on December 16, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

New Features

The app manager uses the replicatedRegistryDomain domain to rewrite images stored in the Replicated registry, when the replicatedRegistryDomain field is provided in the Application custom resource.
Adds the KubernetesVersion, KubernetesMajorVersion, and KubernetesMinorVersion template functions.

Improvements

Standardizes classes used for branding the admin console.
Pins the config navigation so that it does not disappear when scrolling.
The LicenseDockerCfg template function in the License Context now utilizes the replicatedRegistryDomain and proxyRegistryDomain values from the Application custom resource, if specified.

Bug Fixes

Disables image garbage collection when an external registry is enabled.
Fixes a bug where the rqlite headless service manifest was not generated.
Fixes an issue where labels displayed as config items in the config navigation.
Fixes a bug where the kots get config command always decrypted passwords, even when the --decrypt flag wasn't passed.

1.91.3

Released on December 10, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

Bug Fixes

Fixes an issue where air gap uploads failed for applications containing required configuration without default values.
Fixes errors when generating support bundles in existing clusters via the CLI.

1.91.2

important

The app manager v1.91.2 has a known issue that affects the use of required configuration items in air gapped environments. See Known Issue below.

Released on December 8, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

Improvements

Improved the TLS certificate flow to make it clearer which fields are needed when using a self-signed certificate or uploading your own.
Adds the proxyRegistryDomain field to the Application custom resource. When this field is provided, the app manager will rewrite proxied private images using that domain instead of proxy.replicated.com.

Bug Fixes

Fixes overlapping labels on TLS configuration page.
Fixes an issue that caused the login button to be stuck in the "Logging in" state in Helm-managed mode (Beta). For more information on Helm-managed mode, see Supporting helm CLI Installations (Beta).
Fixes an issue where snapshots to NFS storage locations failed due to file permission issues in environments running without MinIO.
Fixes an issue that caused the license upload to fail for applications that include Helm charts with required values missing from configuration.
Fixes an issue where release notes did not display when the release notes icon was clicked on the dashboard.
Fixes an issue where no tab was selected by default when opening the View Logs modal in Helm-managed mode.
Fixes an issue that prevented image garbage collection from being enabled or disabled.
Fixes an issue where DockerHub credentials provided to the admin console via the kots docker ensure-secret CLI command did not increase the rate limit.
Fixes an issue that prevented Helm render errors from being surfaced to the user when running kots upload commands.
Fixes leaked goroutines.
Increases the memory limit for rqlite to 1Gi to fix an issue where rqlite was OOM killed during the migration from Postgres when there was a very large number of versions available in the admin console.

Known Issue

There is a known issue in the app manager v1.91.2 that causes air gap uploads to fail when there are configuration items with the required property set to true and no default value specified.

To avoid this known issue, Replicated recommends that you do not upgrade to v1.91.2. To work around this issue in v1.92.2, ensure that all required configuration items in the Config custom resource have a default value. For more information about adding default values to configuration items, see default and value in Config.

1.91.1

Released on November 18, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

Improvements

Updates the Snapshots page to standardize the look of admin console.
Updates the schemahero image to v0.13.8 to resolve CVE-2022-32149 with high severity.
Updates the kotsadm-migrations base image to debian:bullseye to resolve CVE-2022-29458 with high severity.
Updates the kurl-proxy base image to debian:bullseye-slim to resolve CVE-2022-29458 with high severity.
Updates the github.com/mholt/archiver module to v3.5.1 to resolve CVE-2019-10743 with medium severity.
Updates the replicated/local-volume-provider image to v0.4.1 to resolve CVE-2022-29458 with high severity.
Updates the Helm dependency from 3.9.0 to 3.9.4 to resolve CVE-2022-36055 with medium severity.

Bug Fixes

Fixes a bug that could result in invalid status code from registry 400 error when pushing images from an air gap bundle into a private registry.
Fixes an issue where configuring snapshot schedules in Firefox didn't work.
Fixes an issue where installing or upgrading the app manager failed for GKE Autopilot clusters.
Fixes an issue where the existing cluster snapshot onboarding flow did not work when using the local volume provider plugin.

1.91.0

Released on November 14, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

New Features

Updates the Troubleshoot and Config pages to standardize the look of admin console.

Improvements

Updates the kotsadm base image to debian:bullseye-slim to resolve CVE-2022-29458 with high severity.
Shows password complexity rules when setting the admin console password with the CLI. Passwords must be at least six characters long.

Bug Fixes

Fixes an issue where the admin console automatically redirected to the login page after a snapshot was restored successfully, which could have prevented users from knowing the outcome of the restore.

1.90.0

Released on November 4, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

New Features

Adds the ability to remove registry info from the Registry settings page.
Adds the ability to use status informers for Helm charts when running in Helm-managed mode (Beta). For more information on Helm-managed mode, see Supporting helm CLI Installations (Beta).

Improvements

Updates the golang.org/x/text module in the kurl-proxy image used for embedded cluster installations, to resolve CVE-2022-32149 with high severity.
The file explorer now includes rendered values.yaml files for each Helm chart that is deployed by the app manager.

Bug Fixes

Updates the Prometheus query to show disk usage by instance and mount point.
Fixes an issue where checking for updates failed with the message "License is expired", but the License tab indicated that the license was not expired.
Fixes an issue where the admin console could restart during the migration from Postgres to rqlite due to a short timeout.

1.89.0

Released on October 28, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

New Features

Automatically migrates data from Postgres to rqlite and removes Postgres. Also introduces a new kubectl kots enable-ha command that runs rqlite as three replicas for higher availability. This command should only be run on clusters with at least three nodes. Now multiple node clusters deployed with the Kubernetes installer can use OpenEBS local PV, because data will be replicated across all three replicas of rqlite, allowing the app manager to run on any node in the cluster without requiring distributed storage like Rook provides.

Bug Fixes

Fixes an issue that causes the Released timestamp to be the same for all releases on the version history page in Helm managed mode (Alpha).
Allows kots CLI commands to use the kubeconfig namespace by default if a flag is not provided.
Fixes an issue where installing, updating, or configuring applications that have many images defined in KOTS custom resources (such as collectors, preflights, and analyzers) hangs or takes a long time.
Fixes an issue that could cause the preflight progress bar to be stuck at nearly 100% but never complete.
Fixes an issue where unused Host Path and NFS volumes were not being cleaned up when changing snapshot storage locations in clusters without MinIO.
Fixes the issue that caused Sequence template function to return 1 instead of 0 during initial configuration.

1.88.0

Released on October 19, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, and 1.25

New Features

Adds ability to deploy an application with new values after syncing license from admin console in Helm-managed mode (Alpha). For more information on Helm-managed mode, see Supporting helm CLI Installations (Alpha).

Improvements

Updates the kotsadm/dex image to v2.35.3 to resolve CVE-2022-27664 with high severity.
Updates the golang.org/x/net module to resolve CVE-2022-27664 with high severity.
Updates the schemahero image to v0.13.5 to resolve CVE-2022-37434 with critical severity and CVE-2022-27664 with high severity.
Updates the replicated/local-volume-provider image to v0.3.10 to resolve CVE-2022-37434 with critical severity and CVE-2022-27664 with high severity.

Bug Fixes

Fixes an issue where the cluster management page was blank when the pod capacity for a node was defined with an SI prefix (e.g., 1k).
Fixes an issue where the admin console occasionally would not redirect to the dashboard after preflight checks were skipped.
Fixes an issue where the application icon did not show on the login page until the application was deployed.

1.87.0

Released on October 12, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, 1.24, 1.25

New Features

Uses Ed25519 SSH keys for GitOps when integrating with Github Enterprise. See Pushing Updates to a GitOps Workflow.

Improvements

Adds support for template functions to the spec.graphs field of the Application custom resource. See Application.

Bug Fixes

Fixes an issue where log tabs for Helm installs were hidden.
Fixes a bug that caused pre-existing rows on the version history page in Helm-managed mode (Alpha) to be highlighted as newly available versions when the page is opened. For more information on Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Fixes an issue that could cause embedded installations to fail with error "yaml: did not find expected node content" when installing behind an HTTP_PROXY.
Fixes an issue where APIs that require an auth token were called while the client was logged out.
Fixes an issue that caused the Troubleshoot page to display the support bundle collection progress bar even when a support bundle was not being collected.
Sorts the entitlements returned in the /license endpoint to ensure that they display consistently in the admin console.

Known Issue

There is a known issue in the app manager v1.87.0 that causes a KOTS icon, instead of the application icon, to display on the login page before the application is deployed. After the application is deployed, the application icon shows on the login screen.

1.86.2

Released on October 7, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

Improvements

Changes the way CSS and font files are included for custom admin console branding (Alpha). If you have early access to this feature, see the Alpha documentation for more information.

Bug Fixes

Fixes an issue where large font files for custom admin console branding (Alpha) caused the admin console to fail to create a new application version.
Fixes an issue where the identity service login redirected to the login page after a successful login.
Fixes an issue in the Cluster Management tab where the button for adding a primary node stopped working if the original join token expired.
Fixes a bug that allowed the identity service route to be accessed even if the feature was not enabled.
Fixes a bug that caused the admin console Pod to terminate with an error due to a panic when checking for application updates in Helm-managed mode (Alpha). For more information on Helm-managed mode, see Supporting helm CLI Installations (Alpha).

1.86.1

Released on September 30, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

Improvements

Only show relevant tabs on the deployment logs modal depending on whether or not the admin console is in Helm-managed mode.
Standardizes all page titles using the format Page Name | App Slug | Admin Console. The page title is the text that shows in the browser tab.

Bug Fixes

Fixes an issue where automatic update checks failed when the interval is too short for pending updates to be fetched.
Fixes an issue where the automatic update checks modal didn't show custom schedules after they were saved. See Configure Automatic Updates.
Fixes an issue in Helm-managed mode where checking for updates from the version history page did not show the "License is expired" error when the check failed due to an expired license. For more information on Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Fixes an issue where some icons displayed in a very large size on Firefox. See Known Issue under 1.86.0.
Fixes an issue where the specified registry namespace was sometimes ignored for KOTS images if the specified registry hostname already included a namespace.

1.86.0

important

The app manager v1.86.0 contains a known issue that affects the use of the Replicated admin console in Firefox browsers. This issue is resolved in the app manager v1.86.1. See Known Issue below.

Released on September 27, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Allows icon colors to be changed with the CSS when branding the admin console (Alpha). To enable this feature on your account, log in to your vendor portal account. Select Support > Request a feature, and submit a feature request for "admin console branding".

Improvements

Removes the license upload page when the admin-console Helm chart is installed without installing a Replicated application.
Makes port forward reconnections faster.

Bug Fixes

Fixes the message alignment when a strict preflight check fails.
Fixes a bug where versions with pending_download status were shown incorrectly on the version history page.
Fixes a bug where versions with pending_download status caused the View files tab to navigate to a version that had not been downloaded yet, resulting in a UI error.
Fixes a bug where downloading an application version that is incompatible with the current admin console version made it impossible to check for updates until the admin console pod was restarted.
Fixes a bug that caused CLI feedback spinners to spin indefinitely.
Fixes an issue that caused config templates to be applied to the wrong values.yaml file in Helm-managed mode (Alpha). For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Fixes an issue where the license was not synced when checking for application updates in Helm-managed mode (Alpha).
Fixes a bug in Helm-managed mode (Alpha) that required you to visit the config screen to deploy a new version with required config items, even if all of the config values had been set in a previously deployed version.
Fixes a bug that caused the currently deployed version to temporarily appear as a newly available version when an update check ran in Helm-managed mode (Alpha).
Fixes styling on <pre> elements in the Helm install modals (Alpha) so that their heights match the content.

Known Issue

This issue is resolved in the app manager v1.86.1.

There is a known issue in the app manager v1.86.0 that causes certain icons in the Replicated admin console to display incorrectly in Firefox browsers. The icons display in a very large size, making it difficult for users to access the fields on several of the admin console screens.

To use the admin console on v1.86.0, users should open the admin console in a supported browser other than Firefox, such as Google Chrome. For more information about supported browsers, see Supported Browsers in Installation Requirements.

If users are unable to use a browser other than Firefox to access the admin console, Replicated recommends that they do not upgrade to the app manager v1.86.0.

1.85.0

Released on September 19, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds the ability to automatically check for new chart versions that are available when running in Helm-managed mode (Alpha). For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).
In Helm-managed mode, new Helm chart versions that introduce a required configuration value must be configured before they can be deployed.

Improvements

Improves how license fields display in the admin console, especially when there are multiple license fields or when the value of a field is long.
Updates the replicated/local-volume-provider image to v0.3.8 to resolve CVE-2022-2509 with high severity.
Updates the github.com/open-policy-agent/opa module to resolve CVE-2022-36085 with critical severity.
Updates the kotsadm/dex image to v2.34.0 to resolve CVE-2022-37434 with critical severity and CVE-2021-43565, CVE-2022-27191, and CVE-2021-44716 with high severity.

Bug Fixes

Fixes an issue in embedded clusters where image garbage collection deletes images that are still in use by the application.
Increases the memory limit for the kotsadm-minio StatefulSet from 200Mi to 512Mi.
Fixes an issue where headless/unattended installations hang in embedded clusters with recent Kubernetes versions.
Fixes an issue that caused values to be missing on the Config page for pending updates in Helm-managed mode (Alpha).
Fixes checkbox alignment on the Config page.
Fixes a bug that did not display errors on the Config page when values for required config items were missing in Helm-managed mode (Alpha).

1.84.0

Released on September 12, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds the ability to configure and deploy new Helm chart versions when the admin console is running in Helm-managed mode (Alpha).
Adds support for including custom font files in an application release, which can be used when branding the admin console (Alpha). To enable this feature on your account, log in to your vendor portal account. Select Support > Request a feature, and submit a feature request for "admin console branding".

Improvements

Updates the MinIO image to address CVE-2022-2526 with high severity.
Updates the github.com/gin-gonic/gin module in the kurl-proxy image used for embedded cluster installations, to resolve CVE-2020-28483 with high severity.
Updates SchemaHero to v0.13.2 to resolve CVE-2022-21698.

Bug Fixes

Updates the support-bundle CLI command provided in the admin console to use the generated Kubernetes resources instead of the raw upstream specification when running in Helm-managed mode (Alpha).
Fixes an issue that caused Secrets and ConfigMaps created by the admin console to be left in the namespace after a Helm chart is uninstalled in Helm-managed mode (Alpha).
Fixes an issue where application status informers did not update if the admin console Pod was restarted.
Fixes an issue where a user that is logged in could navigate to the login page instead of being redirected to the application dashboard.
Fixes an issue where the app manager failed to render Helm charts that have subcharts referenced as local file repositories.

1.83.0

Released on September 1, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds support for custom branding of the admin console using CSS (Alpha). To enable this feature on your account, log in to your vendor portal account. Select Support > Request a feature, and submit a feature request for "admin console branding".

Improvements

Icons supplied in the icon field of the Application custom resource can be square or circular.

Bug Fixes

Fixes an issue that could cause inadvertent application upgrades when redeploying or updating the config of the currently installed revision in Helm-managed mode (Alpha). For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Fixes an issue where the namespace was omitted from helm upgrade commands displayed in the admin console in Helm-managed mode (Alpha). For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Removes the checkbox to automatically deploy updates in Helm-managed mode, because this is unsupported. For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Fixes an issue where updating the registry settings fails due to permission issues even when the provided credentials have access to the registry.
Fixes an issue in Helm-managed mode that could cause Replicated templates to show on the config page instead of the rendered values. For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Fixes an issue where trailing line breaks were removed during Helm chart rendering.

1.82.0

Released on August 25, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds support for a new air gap bundle format that supports image digests and deduplication of image layers shared across images in the bundle. The new air gap bundle format is in Beta. To enable this feature on your account, log in to your vendor portal account. Select Support > Request a feature, and submit a feature request for "new air gap bundle format".
Adds support for deploying images that are referenced by digest or by digest and tag, rather than by tag alone, in online installations that have a private registry configured.
Adds support for displaying the config values for each revision deployed in Helm-managed mode (Alpha). For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).

Improvements

Updates the local-volume-provider image to address CVE-2021-44716, CVE-2021-33194, and CVE-2022-21221 with high severity.
Updates the configuration pages for the GitOps workflow, making it easier to set up.

Bug Fixes

Fixes an issue that prevented you from typing in the Path field when Other S3-Compatible Storage was set as the snapshot storage destination.
Fixes an issue where the LicenseFieldValue template function always returned an empty string for the isSnapshotSupported value. For more information about the LicenseFieldValue template function, see LicenseFieldValue.

1.81.1

Released on August 22, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

Improvements

Show deploy logs for Helm charts when running in Helm-managed mode (Alpha). For more information about Helm-managed mode, see Supporting helm CLI Installations (Alpha).
Updates the Helm binary included in the kotsadm image from 3.8.2 to 3.9.3 to resolve CVE-2022-21698 and CVE-2022-27191 with high severity.
Updates the golang.org/x/net module in the kurl-proxy image used for embedded cluster installations, to resolve CVE-2021-44716 with high severity.
Updates the dex image from 2.32.0 to 2.33.0 to resolve CVE-2022-30065, CVE-2022-2097, and CVE-2022-27191 with high severity.

Bug Fixes

Fixes an issue where starting a manual snapshot resulted in an error dialog when using Firefox or Safari.
Fixes an issue that caused images formatted as docker.io/image:tag to not be rewritten when upgrading applications in airgapped environments. For more information about rewriting images, see Patching the Image Location with Kustomize in Connecting to an Image Registry.

1.81.0

Released on August 12, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds support for the alias field in Helm chart dependencies.
Adds support for image tags and digests to be used together for most online installations. For more information, see Support for Image Tags and Digests in Connecting to an Image Registry.

Improvements

Helm v2 will only be used if helmVersion is set to v2 in the HelmChart custom resource. Support for Helm v2, including security patches, ended on November 13, 2020, and support for Helm v2 in the app manager will be removed in the near future. For more information about the HelmChart custom resource, see HelmChart.
Improves the UI responsiveness on the Config page.

Bug Fixes

Fixes an issuse where the license tab did not show for Helm-managed installations.
Fixes an issue that could cause Namespace manifests packaged in Helm charts to be excluded from deployment, causing namespaces to not be created when useHelmInstall is set to true and namespace is an empty string. For more information about these fields, see useHelmInstall and namespace in HelmChart.
Fixes an issue where GitOps was enabled before the deploy key was added to the git provider.
Hides copy commands on modals in the admin console when clipboard is not available.

1.80.0

Released on August 8, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Displays the helm rollback command when deploying previous revisions from the version history page in Helm-managed mode (Alpha). For more information about Helm-managed mode, see Using Helm to Install an Application (Alpha).

Improvements

Password complexity rules will now be shown when changing the password in the admin console.
Updates Kustomize from 3.5.4 to 4.5.7. Note that Kustomize v4.5.7 does not allow duplicate YAML keys to be present in your application manifests, whereas v3.5.4 did. Kustomize v4.5.7 is a bit slower than v3.5.4, so fetching and deploying new versions takes a bit more time. Our benchmarking did not show this performance degradation to be significant. Updating Kustomize resolves several critical and high severity CVEs, and unblocks additional feature work in the app manager.

Bug Fixes

Fixes an issue where an ambiguous error message was shown when the endpoint field was modified in the license.
Fixes a bug that caused values from the HelmChart custom resource that did not use KOTS template functions to be rendered into the downloaded values.yaml file after updating the configuration in Helm-managed mode. For more information about Helm-managed mode, see Using Helm to Install an Application (Alpha).
Fixes an issue in Helm-managed mode that caused an error when clicking the Analyze application button on the Troubleshoot page in the admin console for an application that did not include a support bundle specification. For more information about Helm-managed mode, see Helm-managed mode (Alpha). For more information about analyzing an application, see Create a Support Bundle Using the Admin Console in Troubleshooting an Application.

1.79.0

Released on August 4, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds an HTTPSProxy template function to return the address of the proxy that the Replicated admin console is configured to use.
Dynamically adds collectors, analyzers, and custom redactors when collecting support bundles from the troubleshoot page in Helm-managed mode (Alpha).

Improvements

Removes the "Add new application" option when running the admin console in Helm-managed mode (Alpha).

Bug Fixes

Fixes an issue that caused the affix property of config items to be ignored.
Fixes an issue that caused the help_text property of config items to be ignored.
Fixes an issue that caused the license card to not be updated when switching applications in the admin console.
Fixes the ordering of versions on the version history page in Helm-managed mode (Alpha).
Fixes the display of node statistics in the Cluster Management tab.
Fixes an issue where legacy encryption keys were not loaded properly during snapshot restores.
Fixes an issue where snapshots would fail if a wildcard ("*") was listed in the additionalNamespaces field of an Application manifest.
Fixes an issue where the diff fails to generate for a version that excludes a Helm chart that was previously included.

1.78.0

Released on July 28, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

The analyze application button on the Troubleshoot tab now works in Helm managed mode (Alpha).
Adds a deploy modal for versions on the version history page in Helm managed mode (Alpha).

Improvements

Upgrades the internal database (Postgres) used by the admin console from 10.21-alpine to 14.4-alpine.

Bug Fixes

Fixes an issue where all dashboard links were rewritten to use the admin console hostname instead of the hostname provided in the application manifest.
Fixes a bug that caused errors when trying to generate helm upgrade commands from the config page in Helm managed mode (Alpha).
Fixes a bug where the same version could be listed twice on the version history page in Helm managed mode (Alpha).

1.77.0

Released on July 22, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Displays version history information for Helm charts when running in Helm-managed mode (Alpha). For more information, see Using Helm to Install an Application (Alpha)
License information can now be synced from the admin console's Dashboard and License pages for Helm charts when running in Helm-managed mode (Alpha). For more information, see Using Helm to Install an Application (Alpha)
Admin console now supports limited RBAC mode when running in Helm-managed mode (Alpha). For more information, see Using Helm to Install an Application (Alpha)

Improvements

Better handling for network errors on the Helm install modal in Helm-managed mode (Alpha).
Helm install command now includes authentication in Helm-managed mode (Alpha).
Adresses the following high severity CVEs: CVE-2022-28946, CVE-2022-29162, and CVE-2022-1996.

Bug Fixes

Fixes an issue that caused automatic deployments not to work on channels where semantic versioning was disabled, unless the version labels were valid semantic versions.
Fixes an issue that caused errors after the admin console pod restart until the Dashboard tab is visited in Helm-managed mode (Alpha).
Begins using a temp directory instead of the current directory, to avoid file permissions issues when generating the helm upgrade command after editing the config. For more information, see Using Helm to Install an Application (Alpha).

1.76.1

Released on July 15, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

Bug Fixes

Fixes an issue that caused private images in some collectors to not be rewritten during preflight checks.
Fixes an issue where the Distribution template function returns an empty string in minimal RBAC installations running on OpenShift clusters.
Updates the golang.org/x/text go module to address CVE-2021-38561 with high severity.
Updates the local-volume-provider image to address CVE-2021-38561 with high severity.
Updates the MinIO image to address CVE-2022-1271 with high severity.

1.76.0

Released on July 12, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Displays license information on the admin console Dashboard and License page for Helm charts when running in Helm-managed mode (Alpha). For more information, see Using Helm to Install an Application (Alpha)

Bug Fixes

Fixes a bug that causes links defined in the SIG Application custom resource to not be rewritten to the hostname used in the browser.

1.75.0

Released on July 5, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds a helmUpgradeFlags parameter to the HelmChart custom resource when Installing with Native Helm. The specified flags are passed to the helm upgrade command. Note that the Replicated app manager uses helm upgrade for all installations, including initial installations, and not just when the application is upgraded.

Bug Fixes

Addresses the following critical severity CVEs: CVE-2022-26945, CVE-2022-30321, CVE-2022-30322, and CVE-2022-30323.
Fixes a bug that causes the push-images command to fail when --registry-password and --registry-username are not specified for use with anonymous registries.

1.74.0

Released on July 1, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds the ability to use a preflight check to compare the Kubernetes installer included in particular application version against the installer that is currently deployed. For more information, see Include a Supporting Preflight Check in Creating a Kubernetes Installer Specification.

Bug Fixes

Fixes an issue where you could not deploy valid application releases if the previously deployed version resulted in a kustomize error.
Fixes an issue where kustomize would fail if a Helm chart and one of its sub-charts had the same name.
Fixes an issue that caused Velero pods to be stuck in a Pending state when using the Internal Storage snapshot setting in Kubernetes installer-created clusters.
Fixes an issue where the admin console would crash if a Helm chart with optional values but no values provided was included in a release.

1.73.0

Released on June 24, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds a releaseName parameter to the HelmChart custom resource when Installing with Native Helm. Defaults to the chart name. Specifying a releaseName also allows you to deploy multiple instances of the same Helm chart, which was previously impossible.

Improvements

Improved UX on the version history page when the application is up to date or when there are new available versions.

Bug Fixes

Fixes an issue where the preflight screen was displayed even if no analyzers were run.
Fixes an issue that prevented you from excluding a Helm chart that was previously included when Installing with Native Helm.

1.72.2

Released on June 22, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

Bug Fixes

Fixed a bug that would cause duplicate Helm installations to be shown when running in helm-managed mode in clusters with open permissions.

1.72.1

Released on June 17, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

Improvements

Config values are now stored in a secret when the admin console runs in Helm-managed mode (Alpha), so that the values can be rerendered when a user returns to the Config page.

Bug Fixes

The dashboard "Disk Usage" graph now reports metrics for Prometheus deployments using the kubernetes-service-endpoints job.
The configured Prometheus address now shows as the placeholder in the "Configure Prometheus address" modal.
Fixes a bug that prevented an application from being deployed if a strict preflight check existed but was excluded.
Fixes a bug that was caused when a top-level templates folder is not present in a Helm chart that also has subcharts and top-level charts.
Fixes a bug where Kubernetes installer manifests included as part of an application release were applied when deploying the release.
Updates the MinIO image to address the following critical and high severity CVEs: CVE-2021-42836, CVE-2021-41266, CVE-2020-26160, CVE-2018-25032, CVE-2022-0778, CVE-2022-25235, CVE-2022-25236, CVE-2022-25315, CVE-2022-24407.
Updates the Dex image to address the following critical and high severity CVEs: CVE-2020-14040, CVE-2021-42836, CVE-2020-36067, CVE-2020-36066, CVE-2020-35380, CVE-2020-26521, CVE-2020-26892, CVE-2021-3121, CVE-2020-26160, CVE-2021-28831, CVE-2020-11080, CVE-2021-3450, CVE-2021-23840, CVE-2020-1967, CVE-2020-8286, CVE-2020-8285, CVE-2020-8231, CVE-2020-8177, CVE-2020-8169, CVE-2021-30139, CVE-2021-36159.
Updates the local-volume-provider image to address CVE-2022-1664 with critical severity.

1.72.0

Released on June 14, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

The admin console now shows the chart version and icon for the currently deployed Helm chart when running in Helm-managed mode (Alpha).

Improvements

Moves Change password, Add new application, and Log out functionality into a new menu in the top right of the navigation bar.
Shows a meaningful error message when the license is expired on the dashboard version card.

Bug Fixes

Fixes a bug that caused the deploy confirmation modal on the dashboard to always show "Redeploy" even if the version was not already deployed.
Fixes a discrepancy between the license expiry date in the vendor portal and the expiry date in the admin console.
Sets the User-Agent to the KOTS version string in outgoing HTTP requests where missing.
Removes the Registry settings tab when running in Helm-managed mode (Alpha).
Removes Diff versions links from the application dashboard and version history page when running in Helm-managed mode (Alpha).
Removes the instructions on how to edit files on the View files tab when running in Helm-managed mode (Alpha).

1.71.0

Released on June 1, 2022

Support for Kubernetes: 1.21, 1.22, 1.23, and 1.24

New Features

Adds a --port flag to the kots install and kots admin-console commands to allow for overriding the local port on which to access the admin console.

Improvements

A temporary success message is displayed if preflight checks pass for a version.

Bug Fixes

Fixes a nil pointer panic when checking for updates if a file in the new release contains incomplete metadata information.

1.70.1

Released on May 19, 2022

Support for Kubernetes: 1.21, 1.22, and 1.23

Improvements

When enabling GitOps, the initial commit properly translates all labeled secrets to SealedSecrets.
Improves the application dashboard and version history pages when GitOps is enabled.
Prevents a user from generating a support bundle while another support bundle is being generated, and lets the user return to the /troubleshoot/generate route to see the progress of the current support bundle generation.
Improves editing for scheduling automatic snapshots by making the cron expression input always visible.
Adds a collector and analyzer for cases when NFS configuration fails because the mount.nfs binary is missing on the host.
Cleans up failed kotsadm-fs-minio-check pods after the NFS backend for snapshots has been configured successfully.
Supports Helm v3.8.2 in the app manager.
Shows Helm installations when running in Helm managed mode (alpha).

Bug Fixes

Fixes an issue where uploading the airgap bundle using the admin console hangs at 0%.
Fixes an issue where applications using semantic versioning did not receive updates when --app-version-label was used in the kots install command.
Fixes an issue where the application was re-deployed when the admin console restarted.
Fixes an issue where existing Host Path and NFS snapshots did not show up after migrating away from MinIO. Note that this fix is only applicable to new migrations. Users who have already migrated away from MinIO can continue to take new snapshots, but pre-migration snapshots will be missing.
Fixes an issue where changing the API version for a native Kubernetes object caused that object to be deleted and recreated instead of updated.
Fixes an issue where image pull secrets were not created in additional namespaces when only Helm charts were used by the application.
Fixes an issue where custom icons did not show on the TLS/cert page on Safari and Chrome.
Fixes an issue where the admin console loaded resources from the internet.
Fixes critical and high CVEs found in the KOTS Go binaries.

1.70.0

Released on May 2, 2022

Support for Kubernetes: 1.21, 1.22, and 1.23

New Features

Adds a weight parameter to the Helm custom resource when Installing with Native Helm. Charts are applied by weight in ascending order, with lower numbered weights applied first.
Adds the ability to change the admin console password from the Change Password link in the admin console page footer.
Adds the ability to download Config file types for a given application sequence.
Adds a template function YamlEscape to escape a string for inclusion in a YAML file.
Adds the ability to allow uploading new TLS certificates used by kURL proxy with the reset-tls command.
Adds the ability to dynamically set the number of results per page when browsing the application version history.

Improvements

When preflight checks are skipped during an initial installation, the application is still deployed.
License and preflight errors are now displayed when performing an automated installation using the CLI.
When changing the password using the kubectl kots reset-password, all active sessions are terminated and new sessions can be established with the new password.

Bug Fixes

Fixes an issue where ingress status informers always reported as "Missing" in Kubernetes 1.22+.
Fixes an issue that caused image garbage collection in Kubernetes installer-created clusters (embedded clusters) to remove images outside of the application's dedicated registry namespace.
Fixes an issue where a newer version might not have a Deploy button after the configuration is updated for the currently deployed version.
Fixes an issue where the legends on the dashboard graphs were blank.
Fixes an issue where hovering on a graph the tooltip showed "LLL" instead of a formatted date.

1.69.1

Released on April 19, 2022

Support for Kubernetes: 1.21, 1.22, and 1.23

Improvements

Updates local-volume-provider to v0.3.3.

Bug Fixes

Fixes an issue where links and text within the app.k8s.io/v1beta1 Application kind were not templated.

1.69.0

Released on April 8, 2022

Support for Kubernetes: 1.21, 1.22, and 1.23

New Features

Adds the ability to switch from a community license to a different license for the same application. See Changing a Community License.

Improvements

The ensure-secret command now creates a new application version, based on the latest version, that adds the Docker Hub image pull secret to all Kubernetes manifests that have images. This avoids Docker Hub's rate limiting.
CA certificates for snapshot storage endpoints can now be uploaded on the snapshot page of the admin console.
User sessions expire after 12 hours of inactivity.
Removes expired sessions from the store in a daily cleanup job.
Adds a Beta option for vendors to exclude MinIO images from app manager air gap bundles from the download portal. For more information, see MinIO from Air Gap Bundles in the documentation.

Bug Fixes

Fixes an issue where the registry image pull secrets were not applied in the additional namespaces specified by the application in minimal RBAC installations.
Fixes an issue where some releases could be missed if they were promoted while other releases were being downloaded and semantic versioning was enabled.
Fixes an issue where the "Select a different file" link did not allow the user to change the selected file on the config page.

1.68.0

Released on April 4, 2022

Support for Kubernetes: 1.21, 1.22, and 1.23

New Features

Adds the ability to make a KOTS application version required. Required version cannot be skipped during upgrades. See Managing Releases with the Vendor Portal.
Adds the supportMinimalRBACPrivileges field to the Application custom resource, and adds the --use-minimal-rbac flag to the kots install command. supportMinimalRBACPrivileges indicates that the application supports minimal RBAC, but it will not be used unless the --use-minimal-rbac flag is passed to the kots install command. See supportMinimalRBACPrivileges in the Application custom resource.

Improvements

Adds pagination to the version history page and improves the admin console API performance.
Displays on the cluster management page of the admin console the labels applied to nodes in a Kubernetes installer-created cluster.
The default Troubleshoot analyzers will now specifically call out issues with Envoy/Contour if detected.

Bug Fixes

Fixes a bug with automatic updates where new versions would be deployed automatically regardless of preflight outcomes. When automatic updates are configured, new versions will now only be deployed automatically if the preflights succeed.
Fixes an issue where NFS snapshots could not be configured when MinIO is enabled in the cluster.
Fixes an issue where updating the snapshot storage location to NFS or Host Path would incorrectly display a dialog indicating that Velero was not installed and configured properly.
Fixes an issue that caused wrong metadata to be used at application install time when installing a specific version of an application with the --app-version-label flag.
Fixes an issue that caused the support bundle analysis and/or redactions to not show up in the Troubleshoot page in the admin console in some cases.
Fixes an issue where deployments weren't blocked when strict preflight analyzers failed due to parse/process errors.
Fixes a style bug that caused the grid of metric graphs to be broken when there were more than three graphs.
Fixes an issue on the config editor page that caused an element to be hidden under the navbar when the corresponding config item was clicked on from the sidebar.
Fixes an issue where a version that was pulled in via automatic checks and deployed via automatic deployments would not be properly updated on the dashboard version card.
Fixes an issue where two versions could show as being currently deployed on the version history page when using automatic deployments.
Fixes an issue where AWS IAM instance roles could not be used when configuring the snapshot storage destination.

1.67.0

Released on March 21, 2022

Support for Kubernetes: 1.21, 1.22, and 1.23

New Features

Adds support for installing a specific application version. For more information about installing a specific application version, see [Online Installation in Existing Clusters](/enterprise/installing-existing-cluster and Online Installation with the Kubernetes Installer.
Extends the ability of status informers to detect if the application is being updated.
Adds the ability to provide a strict preflight, which cannot be skipped and must not have any failure outcomes. Any failure outcomes will prevent the user from deploying the application. For more information on strict preflights, see Define KOTS Preflight Checks.
New versions can automatically be deployed in the admin console, regardless of whether the vendor uses semantic versioning. For more information about automatically deploying new versions, see Configure Automatic Updates in Updating an Application.

Bug Fixes

Fixes an issue that could cause images that are still used by the application to be deleted from the private registry in a Kubernetes installer-created cluster during image garbage collection.
Fixes an issue where the same license could be installed more than once in some cases.
Fixes an issue where the Cluster Management tab was not always initially present for Kubernetes installer-created clusters.
Fixes an issue where attempting to re-download a pending application version would fail after upgrading the admin console from KOTS 1.65.
Fixes an issue where the application icon in the metadata did not show as the favicon on the TLS pages.

1.66.0

Released on March 8, 2022

Support for Kubernetes: 1.21, 1.22, and 1.23

New Features

Adds the ability to exclude the applications or the admin console from full snapshot restores using the kots restore command.
Adds the ability to display the command to restore only the admin console from a full snapshot on the Full Snapshots page in the admin console.

Improvements

Adds the --no-port-forward flag to the kots install command to disable automatic port-forwarding. The old --port-forward flag has been deprecated.

Bug Fixes

Corrects the placeholder Prometheus URL in the admin console dashboard so that it is accurate for embedded installations.
Fixes a bug where the warning message sometimes printed incorrectly when a mismatch was detected between the kots CLI version and the version of the admin console that was running in the cluster.
Fixes a bug where the See details button on the support bundle analysis page did not show any information about an unhealthy pod.
Allows a user to re-upload a license if the application is not yet installed.
Allows GitOps to be disabled when it is enabled but has an invalid configuration. Previously, you were required to fix the configuration before disabling GitOps.

1.65.0

Released on February 25, 2022

Support for Kubernetes: 1.20, 1.21, 1.22, and 1.23

New Features

Permanently enables the redesigned admin console app dashboard and version history pages introduced in KOTS 1.60.0.
Application versions that fail to download now appear in the version history. A new button is also present with the version to allow the download to be retried. Previously, these failures were lost when a newer version was downloaded successfully.
Introduces the kots upstream download command to retry downloading a failed update of the upstream application.

Improvements

The port-forward initiated to access the admin console will continually retry when it is disconnected. If a new kotsadm pod comes up, the port forward will switch and forward to the new pod.
If the kots CLI version doesn't match the KOTS API version in the cluster, a warning message is displayed advising the user to update the kots CLI to the appropriate version.

Bug Fixes

Fixes uploading preflight results from the CLI.
Fixes a bug where the app icon in the metadata would not show as the favicon in Google Chrome.

1.64.0

Released on February 18, 2022

Support for Kubernetes: 1.20, 1.21, 1.22, and 1.23

Improvements

A MinIO image will no longer be present in new deployments when MinIO is not specified as an add-on in the Kubernetes installer specification.
Enables an alternative that does not use MinIO for hostPath snapshots if the MinIO image is not present on the instance.

Bug Fixes

Fixes a bug that showed an incorrect diff on the version history page.
Fixes deploy log errors for PVCs when using OpenEBS with Kubernetes 1.19 through 1.21.

1.63.0

Released on February 11, 2022

Supported on Kubernetes: 1.20, 1.21, 1.22, and 1.23

New Features

Changes the kots upstream upgrade command to be synchronous by default and exposes error messages for it.

Improvements

Sets the Native Helm timeout to 60 minutes instead of 5 minutes.

1.62.0

Released on February 4, 2022

Supported on Kubernetes: 1.20, 1.21, 1.22, and 1.23

New Features

Adds targetKotsVersion as a field in the application spec. This field allows you to set a target version of KOTS for a release. The initial installation of an application will fail if the currently installed KOTS version is greater than the target version. When a target version is set, end users will receive a notification in the admin console if their currently deployed version of KOTS is less than the target version. For more informaiton, see the documentation.
Adds minKotsVersion (Beta) as a field in the application spec. This allows you to specify the minimum supported KOTS version for a release. An application cannot be installed if the currently deployed KOTS version is less than the minimum KOTS version specified for a release. See the minKotsVersion documentation for caveats since this is a Beta feature.

Improvements

Defaults kubectl kots get config --appslug to the app slug of the deployed application if there is only one in the namespace.
Defaults kubectl kots get config --sequence to the sequence of the latest available version.

Bug Fixes

Fixes a bug that caused the "Details" link, which shows the application status, to be not visible in the new dashboard UI.
Fixes the omission of certain password values from the rendered YAML file when using kubectl kots pull.
Fixes an issue that caused the license file included in a support bundle to contain a long array of integers instead of a string in the signature field.
Fixes an issue which caused setting up a host path as a snapshot storage destination to fail.

1.61.0

Released on February 1, 2022

Supported on Kubernetes: 1.20, 1.21, 1.22, and 1.23

New Features

Adds a CLI command to get all available versions for an application from the app manager.
Adds the ability to block installing or upgrading an application if the current KOTS version is incompatible with the KOTS version required by the application. This feature is experimental and is only available to vendors who have requested access.

Bug Fixes

Fixes a bug that caused images to be pushed to a private registry multiple times during an air gap installation.
Fixes a bug that erroneously displays a message to edit the current config when performing a new installation.
Fixes an issue that caused image garbage collection to only remove images with the "latest" tag.

1.60.0

Released on January 25, 2022

Supported on Kubernetes: 1.20, 1.21, and 1.22

New Features

The admin console app dashboard and version history pages have been redesigned! This redesign improves the aesthetics of these pages and brings key functionality directly to the app dashboard. See this blog for more details.

Improvements

Updates MinIO to RELEASE.2022-01-08T03-11-54Z (resolves CVE-2021-43858 CVE).
Updates Postgres to version 10.19.

Bug Fixes

Fixes an issue that caused images to be pushed multiple times during an airgap installation when the Native Helm feature is enabled.
Fixes an issue that prevented the deployment status labels from breaking into multiple lines on small displays.

1.59.3

Released on January 21, 2022

Supported on Kubernetes: 1.20, 1.21, and 1.22

Improvements

Updates the kubectl patch versions and added kubectl version 1.22.x.

Bug Fixes

Fixes an issue that caused the load balancer services to regenerate, resulting in downtime.

1.59.2

Release on January 18, 2022

Supported on Kubernetes: 1.19, 1.20, and 1.21

Bug Fixes

Adds a more descriptive error message to the KOTS CLI when the provided host path does not exist for snapshots storage.
Fixes a bug that caused the "Send bundle to vendor" link to display when this feature is not enabled.
Resolves CSS style issues.
Fixes a bug where excluded Helm charts could not change between UseHelmInstall: true and UseHelmInstall: false without errors.
Fixes a problem where the "Internal Storage" option was not selected by default in kURL clusters with the disableS3 option set.
Fixes a bug when Helm dependencies are aliased for Helm-native releases.

1.59.1

Released on December 29, 2021

Supported on Kubernetes: 1.19, 1.20, and 1.21

Bug Fixes

Fixes a panic: runtime error that occurs when the kots upstream upgrade command is run.

1.59.0

Released on December 22, 2021

Supported on Kubernetes: 1.19, 1.20, and 1.21

New Features

Adds the kubectl kots get config command to export config values. This includes a --decrypt flag to decrypt sensitive values.
The internal storage location for snapshots now uses a persistent volume instead of object storage when the disableS3 flag is set to true for embedded clusters. For more information about removing KOTS use of object storage, see the kURL add-on documentation.

Improvements

Adds version output for current and new releases to the upstream upgrade CLI command.

Bug Fixes

Fixes a bug that caused analyzers to surface errors in namespaces not used by the application when the admin console has cluster access in existing cluster installations.
Fixes an issue that caused image pull secrets to be rendered in the admin console namespace instead of the namespace specified in the kots.io/v1beta1.HelmChart when using useHelmInstall.
Fixes the kots pull CLI command to properly inject imagePullSecrets when using Helm Charts with useHelmInstall set to true.
Fixes a bug that causes application images to not be deleted from a private registry.
Fixes a bug that causes images included in support bundle's run collector to not be deleted from a private registry.

1.58.2

Released on December 14, 2021

Supported on Kubernetes: 1.19, 1.20, and 1.21

Bug Fixes

Fixes a bug that caused config updates to take a long time.

1.58.1

Released on December 1, 2021

Supported on Kubernetes: 1.19, 1.20, and 1.21

Bug Fixes

Fixes a bug that caused Native Helm to skip deploying some Helm resources on automated installations.

1.58.0

Released on December 1, 2021

Supported on Kubernetes: 1.19, 1.20, and 1.21

New Features

Adds support for the semantic versioning of releases when the version labels are valid. To use this feature, enable semantic versioning for the channel that the license is currently on.
Adds the ability to automatically deploy new patch, minor, or major valid semantic versions when semantic versioning is enabled. This new capability can be configured from the Version History page under the 'Configure automatic updates' option.

1.57.0 and earlier

For release notes for app manager versions earlier than 1.58.0, see the Replicated App Manager Release Notes v1.9.0 - v1.65.0 PDF.

Kubernetes Compatibility​

1.124.11​

Improvements​

1.124.10​

Bug Fixes​

1.124.9​

Improvements​

1.124.8​

Improvements​

1.124.7​

Improvements​

1.124.6​

Improvements​

1.124.5​

Bug Fixes​

1.124.4​

Improvements​

Bug Fixes​

1.124.3​

Improvements​

1.124.2​

Improvements​

1.124.1​

Bug Fixes​

1.124.0​

New Features​

1.123.1​

Bug Fixes​

1.123.0​

New Features​

1.122.1​

Bug Fixes​

1.122.0​

New Features​

1.121.2​

Improvements​

1.121.1​

Bug Fixes​

1.121.0​

New Features​

1.120.3​

Improvements​

1.120.2​

Bug Fixes​

1.120.1​

Bug Fixes​

1.120.0​

New Features​

1.119.1​

Bug Fixes​

1.119.0​

Bug Fixes​

1.118.0​

Improvements​

Bug Fixes​

1.117.5​

Improvements​

1.117.4​

Improvements​

1.117.3​

New Features​

1.117.2​

Improvements​

1.117.1​

Bug Fixes​

1.117.0​

New Features​

Bug Fixes​

1.116.1​

Bug Fixes​

1.116.0​

New Features​

1.115.2​

Improvements​

Bug Fixes​

1.115.1​

Bug Fixes​

1.115.0​

Improvements​

1.114.0​

Kubernetes Compatibility

1.124.11

Improvements

1.124.10

Bug Fixes

1.124.9

Improvements

1.124.8

Improvements

1.124.7

Improvements

1.124.6

Improvements

1.124.5

Bug Fixes

1.124.4

Improvements

Bug Fixes

1.124.3

Improvements

1.124.2

Improvements

1.124.1

Bug Fixes

1.124.0

New Features

1.123.1

Bug Fixes

1.123.0

New Features

1.122.1

Bug Fixes

1.122.0

New Features

1.121.2

Improvements

1.121.1

Bug Fixes

1.121.0

New Features

1.120.3

Improvements

1.120.2

Bug Fixes

1.120.1

Bug Fixes

1.120.0

New Features

1.119.1

Bug Fixes

1.119.0

Bug Fixes

1.118.0

Improvements

Bug Fixes

1.117.5

Improvements

1.117.4

Improvements

1.117.3

New Features

1.117.2

Improvements

1.117.1

Bug Fixes

1.117.0

New Features

Bug Fixes

1.116.1

Bug Fixes

1.116.0

New Features

1.115.2

Improvements

Bug Fixes

1.115.1

Bug Fixes

1.115.0

Improvements

1.114.0