KubeOps 2.1.0

Tags:
Categories:

KubeOps 2.1.0 - Release Date 16.06.2026

Changelog KubeOpsCtl 2.1.0

What’s new?

- Added Single Sign-On (SSO) with Keycloak for Rook-Ceph
- Added Single Sign-On (SSO) with Keycloak for Harbor
- Added Single Sign-On (SSO) with Keycloak for Grafana
- Added Single Sign-On (SSO) with Keycloak for KubeOps Dashboard
- Added Single Sign-On (SSO) with Keycloak for OpenSearch Dashboard
- Added Traefik for manual installation
- Added CloudNativePG operator for manual installation
- Added command kubeopsctl check-connections -f cluster-values.yaml
- Added check-connections before kubeopsctl apply
- Improved cert-manager package to install lets-encrypt-staging as inital CA for SSO support
- Improved harbor backup by adding pre.hook.backup.velero.io in harbor package
- Improved keycloak backup by adding pre.hook.backup.velero.io in harbor package
- Improved kubeopsctl apply no longer throws an exception when cluster-values.yaml is missing.
- Added Kubernetes 1.35 support

Fixes

- Implemented fixes for the following CVEs affecting the `rook-ceph` package:
    - CVE-2025-68121
    - CVE-2026-33186
- Implemented fixes for the following CVEs affecting the `ingress-nginx` package:
    - CVE-2025-68121
- Implemented fixes for the `keycloak` package:
    - A Keycloak bug has been fixed where the database was not persistent
- Implemented fixes for the `opensearch-os` package:
    - A bug has been fixed that prevented usernames and passwords from being retained after the upgrade

Versions KubeOps 2.1.0

Tool App Version Chart Version Package Version Package Version SHA256 Checksum
calico 3.29.1 3.29.1 kubeops/calico:v3.29.1 kubeops/calico:v3.29.1 023f1b1e11253ab70589cb4e9c5a5d292059de7a7a905e932d3c9b0d90bb3127
cilium 1.18.2 1.18.2 kubeops/cilium:v1.18.2 kubeops/cilium:v1.18.2 b839b0afbe0b194134fba1948e805e8356d2297ed55bf09f47e739174b021210
multus snapshot-thick kubeops/multus:snapshot-thick kubeops/multus:snapshot-thick a5a0760916e6656beb4970fd9f3fa5484449e4e28d26a2335cae0d65ebbd3ae0
ingress-nginx 1.15.6 4.15.6 kubeops/ingress-nginx:2.1.0_Beta0 kubeops/ingress-nginx:2.1.0 4b2d3ffc940873794be63354c56a1c5641cfeb57d962fb88394024451b60916f
cert-manager 1.18.2 1.18.2 kubeops/cert-manager:2.1.0_Beta0 kubeops/cert-manager:2.1.0 e2e8f3a37d134b0af3571328d657d39c04f18188ffe3d59095089d06f9f0a1ee
opa-gatekeeper 3.17.1 3.17.1 kubeops/opa-gatekeeper:2.1.0_Beta0 kubeops/opa-gatekeeper:2.1.0 43223ba76981d3a9de55830dbf20579c5048279311e7976d0380532cf5015fbf
velero 1.16.2 10.1.0 kubeops/velero:2.1.0_Beta0 kubeops/velero:2.1.0 86a4b333c0c31b870b9affcde72a472c086ebf223b91d9668caac4f63e45f53e
rook-ceph 1.15.6 1.15.6 kubeops/rook-ceph:2.1.0_Beta0 kubeops/rook-ceph:2.1.0 cbf0e6b797f9789405650dff04d0db37bb98aac8c617b79b8ffd8e0772afb243
harbor 2.14.0 1.18.0 kubeops/harbor:2.1.0_Beta0 kubeops/harbor:2.1.0 0d85a7e41d6605484b3e4522af4c557478c145016e6834b7e6b6b8db92bc5a60
kube-prometheus-stack 0.85.0 77.0.2 kubeops/kube-prometheus-stack:2.1.0_Beta0 kubeops/kube-prometheus-stack:2.1.0 1f5329359e6a1ec8dcc8765ccbde110278ae7837afec86085cbf34641745b7a3
keycloak 26.1.0 1.1.0 kubeops/keycloak:2.1.0_Beta0 kubeops/keycloak:2.1.0 443a678db05c0d8721fe7783a978126a862537b4a7699fcaa48499822593dae8
kubeops-dashboard 0.26.0 0.26.0 kubeops/kubeops-dashboard:2.1.0_Beta0 kubeops/kubeops-dashboard:2.1.0 ca6d057649f2cb101d79cc154ad7debee2e6bf8492e3574496c4b2cd896b3333
filebeat-os 8.5.1 8.5.1 kubeops/filebeat-os:2.1.0_Beta0 kubeops/filebeat-os:2.1.0 9895b4fa6a3ea52d3fea660edf83e0de6b3b597d819294e4ec13faa2a4e5ef06
logstash-os 8.4.0 8.5.1 kubeops/logstash-os:2.1.0_Beta0 kubeops/logstash-os:2.1.0 73b435a3e0d8f08f310a629504eb9be28c32a09143710811c0f0951a3253656c
opensearch-os 3.4.0 3.4.0 kubeops/opensearch-os:2.1.0_Beta0 kubeops/opensearch-os:2.1.0 9f7994400e0cd4f04fff9b72ee35d1e9031f4f4dbb238da4849e413ebe1716d4
opensearch-dashboards 3.4.0 3.4.0 kubeops/opensearch-dashboards:2.1.0_Beta0 kubeops/opensearch-dashboards:2.1.0 218c437c4776ff7360ac07699b0801018258392a266f1d65b05c15377f3f5b4c
traefik 3.6.7 39.0.0 kubeops/traefik:2.1.0 kubeops/traefik:2.1.0 172533bca8794382ec00557804ae4b3d3d80828f5ba7921d045df06a9d814c54