Release Notes

tip

Are you looking for the release notes for a specific version of Palette? Use the version selector below to navigate to the release notes of the desired version.

Select...

March 28, 2025 - Release 4.6.18

Bug Fixes

• Fixed an issue where users could not connect to Edge hosts using remote shell in VerteX SaaS environments.
• Fixed an issue that prevented host machines from automatically rebooting after installing the Palette agent.
• Fixed an issue that prevented AWS clusters with tags containing certain special characters from being provisioned or deleted.
• Fixed an issue where Edge native clusters remained stuck in the bootstrapping phase during deployment.

Security Notices

• On March 24, 2025, a security vulnerability regarding certain versions of ingress-nginx was reported. The vulnerable versions were used in Palette's and VerteX's management planes and were also available as packs for workload clusters. On March 26, 2025, all managed Palette and VerteX deployments were patched and the affected component was upgraded to a secure version, 1.11.5. On March 28, 2025, connected Palette Enterprise and VerteX versions 4.4 - 4.6 were patched. Currently, airgapped Palette Enterprise and VerteX installations must manually upgrade their ingress-nginx controllers to version 1.11.5.

  All workload clusters across all Palette and VerteX installations must be updated manually. All users should review their cluster profiles and workload clusters and upgrade the Nginx pack to version 1.11.5. For more information, refer to our Security Advisory.

March 20, 2025 - Release 4.6.13

Bug Fixes

• Fixed an issue where AWS EKS clusters using the AWS VPC CNI (Helm) pack assigned incorrect IP addresses to pods.
• Fixed an issue where OIDC configuration failed when using Microsoft Entra ID.

Automation

Features

• Terraform version 0.23.2 of the Spectro Cloud Terraform provider is available. For more details, refer to the Terraform provider release page.
• Crossplane version 0.23.2 of the Palette Crossplane provider is available. For more details, refer to the Crossplane provider release page.

March 15, 2025 - Release 4.6.12

Security Notices

• Review the Security Bulletins page for the latest security advisories.

Palette Enterprise

Features

• The Palette UI has been updated with a new color scheme and logo. These new elements are displayed on the login page, left Main Menu, and product tour. Check out the Welcome to the fold: meet the new Spectro Cloud brand blog post to learn more.
• Palette and VerteX emails have been updated with a new color scheme and logo. The visual elements match the changes made to the Palette UI.
• Azure IaaS clusters now support autoscaling functionality. This functionality allows Palette to scale the worker pool horizontally based on its per-node workload counts. Autoscaling can be enabled during cluster creation or by changing the worker node pool configuration. Refer to the Create and Manage Azure IaaS Cluster guide for further information.
• Agent mode feature has now exited Tech Preview and is ready to use for production workloads. Check out the Install Palette Agent guide for further details.

Improvements

• The cluster filtering functionality of the Palette UI has been modified to add the Deleted option under the Status filter. This improvement provides a simplified process of managing and filtering cluster views.
• Palette's internal database, MongoDB, has been upgraded to version 7.0.

Deprecations and Removals

• The PROXY_CERT_PATH variable is no longer available in the CanvOS build process. Use the certs folder in the root of the project directory to store proxy certificates. The certs folder is automatically included in the CanvOS build process. Refer to the Build Provider Images for guidance on using the certs folder to pass proxy certificates to the CanvOS build process.
• Palette's internal message communication between components transitioned from NATS to gRPC. The previous usage of NATS has been removed. This change primarily affects customers using Palette agents on versions older than 4.0, and the NATS namespace must be manually removed from affected clusters. To learn more about Palette's internal network architecture, refer to the Network Ports page. If you are using network proxies, we recommend you review the gRPC and Proxies documentation for potential issues.

Edge

Features

• Palette introduces a remote shell capability for troubleshooting remote edge hosts. This new feature allows direct shell access via Palette without depending on user credentials or an active Kubernetes cluster. Refer to the Remote Shell guide for further information.

Improvements

• Edge clusters now support automatic certificate renewal for clusters that are not connected to Palette. Auto-renewal ensures that certificates are updated with minimal downtime.

VerteX

Features

• Includes all Palette features, improvements, breaking changes, and deprecations in this release. Refer to the Palette section for more details.

Automation

info

Check out the Downloads and Compatibility Matrix pages to find the compatible version of the Palette CLI.

Features

• Terraform version 0.23.1 of the Spectro Cloud Terraform provider is available. For more details, refer to the Terraform provider release page.
• A new Terraform resource, spectrocloud_platform_setting, is now available for platform settings such as session timeout, agent upgrade, and cluster remediation. For more information, refer to the Spectro Cloud Terraform provider documentation.
• A new Terraform resource, spectrocloud_registration_token, is now available for the creation of registration tokens. For more information, refer to the Spectro Cloud Terraform provider documentation.
• A new Terraform resource, spectrocloud_developer_setting, is now available for setting tenant developer user quotas. For more information, refer to the Spectro Cloud Terraform provider documentation.

Docs and Education

• The Spectro Cloud Documentation site UI has been updated with a new color scheme and logo. The visual elements match the changes made to the Palette UI.

Packs

Kubernetes

Pack Name	New Version
Palette eXtended Kubernetes (PXK)	1.32.2
Palette eXtended Kubernetes (PXK)	1.31.6
Palette eXtended Kubernetes (PXK)	1.30.10
Palette eXtended Kubernetes (PXK)	1.29.14
Palette eXtended Kubernetes - Edge (PXK-E)	1.31.6
Palette eXtended Kubernetes - Edge (PXK-E)	1.30.10
Palette eXtended Kubernetes - Edge (PXK-E)	1.29.14

CNI

Pack Name	New Version
Calico	3.29.2
Calico (Azure)	3.29.2
Cilium	1.16.6

CSI

Pack Name	New Version
Longhorn	1.8.0
Rook-Ceph (Helm)	1.16.3

Add-on Packs

Pack Name	New Version
External Secrets Operator	0.13.0
Harbor	1.16.2
KubeArmor	1.4.6
Longhorn	1.8.0
Prometheus - Grafana	68.4.4
Registry Connect	0.1.0
Rook-Ceph (Helm)	1.16.3
Zot	0.1.66

FIPS Packs

Pack Name	New Version
Calico	3.29.2
Calico (Azure)	3.29.2
Cilium	1.16.6
Palette eXtended Kubernetes (PXK)	1.32.2
Palette eXtended Kubernetes (PXK)	1.31.6
Palette eXtended Kubernetes (PXK)	1.30.10
Palette eXtended Kubernetes (PXK)	1.29.14
Palette eXtended Kubernetes - Edge (PXK-E)	1.31.6
Palette eXtended Kubernetes - Edge (PXK-E)	1.30.10
Palette eXtended Kubernetes - Edge (PXK-E)	1.29.14

March 3, 2025 - Release 4.6.9

Bug Fixes

• Fixed an issue that caused Local UI to incorrectly show the configuration status of healthy edge hosts as "Not Configured." This issue did not affect any other edge cluster operations.

February 28, 2025 - Release 4.6.8

Bug Fixes

• Fixed an issue that caused TLS 1.0 and 1.1 to be incorrectly enabled by internal Local UI services. All services are now using TLS 1.2.
• Fixed an issue that caused the metrics server deployment to be created without any resource limits. Resource quotas are now correctly applied, preventing the server from interfering with critical cluster functions.
• Fixed an issue that caused edge nodes to pull images from external registries instead of the local image cache. Cluster deployment now progresses with local images.
• Fixed an issue that K3s certificate renewals to be incorrectly applied to Two-node Edge clusters.
• Fixed an issue that caused signed images to fail to be loaded by K3s edge clusters.
• Fixed an issue that allowed Local UI to start updates on inaccessible clusters, resulting in inconsistent configurations. Updates are now allowed only on accessible clusters.
• Fixed an issue that allowed concurrent NTP updates to be triggered from the Local UI and API. Only one update can be in progress now.
• Fixed an issue where installing a Palette pack through a Helm chart incorrectly sets the Helm install version.

Features

Edge

• Certificate renewal periods can now be configured for edge clusters using a ConfigMap. You can configure the renewal period using the cert-renewal-day field in the palette-edge-config ConfigMap.

Documentation & Education Updates

• The Documentation & Education team is enabling a new Q&A bot functionality on the Spectro Cloud official documentation site. Click the Ask AI widget in the bottom right corner or use the Ctrl + I (Cmd + I on macOS) keyboard shortcut to bring up the chat interface.

  The Q&A bot is only trained on the latest version of the Spectro Cloud documentation. It is unable to answer version-specific questions. As with all generative AI-powered services, its responses may not be accurate. Always verify answers using the documentation for important updates.

Packs

Kubernetes

Pack Name	New Version
RKE2	1.32.1
RKE2	1.31.5
RKE2	1.30.9
RKE2	1.29.13

FIPS

Pack Name	New Version
RKE2	1.32.1
RKE2	1.31.5
RKE2	1.30.9
RKE2	1.29.13

February 19, 2025 - Release 4.6.7

Bug Fixes

• Fixed an issue that caused incorrect validation errors when users select the AWS US Gov partition. Refer to the AWS GovCloud Account (US) section for further details.

February 16, 2025 - Release 4.6.0 - 4.6.6

Security Notices

• Review the Security Bulletins page for the latest security advisories.

Palette Enterprise

Features

• Palette now supports edit and delete operations on Cluster Profile Variables in non-Edge and connected Edge clusters. Additionally, you can now review and edit the values of Cluster Profile Variables when they are applied to existing clusters. This feature has now exited Tech Preview and is ready to use for production workloads. Check out the Cluster Profile Variables guide to learn more about this feature.

• Self-hosted Palette installations now offer complete brand customization. System operators can apply custom logos and color schemes to the instances they manage by using the Customize interface tab in the Administration panel of the system console. Refer to the Customize Interface guide to learn more.

Improvements

• The rate limit for Palette API endpoints with a prefix of /v1/cloudconfigs has been increased to 50 requests per second per IP address, and the maximum burst has been increased to 250 requests per second per IP address.

• The propagation of Azure cloud credentials has been improved to ensure that Palette automatically updates cluster secrets. This improvement ensures that clusters with expired credentials are updated immediately to prevent disruptions.

Edge

Features

• Palette now supports a two-node architecture, which provides a High Availability (HA) mode. Users can enable this feature by toggling the high availability mode during cluster configuration. In HA mode, etcd is replaced with Postgres and Kine. Refer to the Two-Node Architecture page for further details.

VerteX

Features

• Includes all Palette features, improvements, breaking changes, and deprecations in this release. Refer to the Palette section for more details.

• Palette VerteX now offers complete brand customization. System operators can apply custom logos and color schemes to the instances they manage by using the Customize interface tab in the Administration panel in the system control. Refer to the Customize Interface guide to learn more.

Automation

Features

• Terraform version 0.23.0 of the Spectro Cloud Terraform provider is available. For more details, refer to the Terraform provider release page.

• All Terraform cluster resources now support Cluster Profile Variables management in non-Edge and connected Edge clusters. For more information, refer to the Spectro Cloud Terraform provider documentation.

• A new Terraform resource, spectrocloud_resource_limit, is now available for managing Palette resource limits. By default, a resource limit is configured in Palette with default values. Users can now update the limits with Terraform. For more information, refer to the Spectro Cloud Terraform provider documentation.

Improvements

• Palette will now automatically use the most recent Pack version when no version is specified in Terraform resources. This improvement streamlines the user process of identifying and pulling the latest pack versions directly. Versions can still be defined explicitly. For more information, refer to the Spectro Cloud Terraform provider documentation.

• The --validate flag of the Palette EC command now supports validation of airgapped environments. Previously, only environments that had internet access were supported. Refer to the Validate Environment section for further information.

• The Terraform OCI registry resource, spectrocloud_registry_oci, now supports Zarf and Pack OCI Registry types. Previously, only Helm registries were supported. For more information, refer to the Spectro Cloud Terraform provider documentation.

Virtual Machine Orchestrator (VMO)

Improvements

• The Virtual Machine Migration Assistant now allows TLS configuration for ingress resources, enhancing security through HTTPS access. This capability provides a unified and secure setup experience for users managing virtual machine migrations. Refer to the Create a VM Migration Assistant Profile guide to learn more.

• The KubeVirt version in use is now v1.4.0. Other minor maintenance updates in support of Kubevirt 1.4.0 are also included.

Packs

Pack Notes

• Palette's support for MicroK8s 1.29 and 1.30 has been enhanced to provide airgap support, as well as deployments on MAAS and AWS. Additionally, this update validates multi-node control planes.

• Due to Google's decision to deprecate the gcr.io container registry, we have added a new image registry that Palette agents will use to pull images. The new registry is us-docker.pkg.dev. This was announced as part of the Palette 4.5.3 release. If you have network restrictions in place, ensure that the new registry is allowed. The migration of images to this new registry is now complete. Redirects from the old registry to the new registry are in place, so no user actions are required at this time. Refer to the Proxy Requirements for a complete list of domains that must be allowed.

• The Palette eXtended Kubernetes (PXK) version 1.32.1 pack does not currently support AWS and GCP cluster deployments.

Kubernetes

Pack Name	New Version
K3s	1.32.1
K3s	1.31.5
K3s	1.30.9
K3s	1.29.13
Kubernetes EKS	1.32
Palette eXtended Kubernetes (PXK)	1.32.1
Palette eXtended Kubernetes (PXK)	1.31.5
Palette eXtended Kubernetes (PXK)	1.30.9
Palette eXtended Kubernetes (PXK)	1.29.13
Palette eXtended Kubernetes - Edge (PXK-E)	1.31.5
Palette eXtended Kubernetes - Edge (PXK-E)	1.31.4
Palette eXtended Kubernetes - Edge (PXK-E)	1.30.9
Palette eXtended Kubernetes - Edge (PXK-E)	1.29.13
RKE2 - Edge	1.32.1
RKE2 - Edge	1.31.5
RKE2 - Edge	1.30.9
RKE2 - Edge	1.29.13
MicroK8s	1.30
MicroK8s	1.29

CNI

Pack Name	New Version
AWS VPC CNI (Helm)	1.19.2
Calico	3.29.2
Calico (Azure)	3.29.2

CSI

Pack Name	New Version
Amazon EBS CSI	1.39.0
Amazon EFS	2.1.4
Azure Disk CSI Driver	1.31.2
GCE Persistent Disk CSI	1.15.3
Rook-Ceph	1.16.2

Add-on

Pack Name	New Version
AWS Cluster Autoscaler	1.31.0
Cilium Tetragon	1.3.0
Istio	1.24.0
Open Policy Agent	3.18.1
Volume Snapshot Controller	8.2.0
ExternalDNS	0.15.1
External Secrets Operator	0.12.1
Kong	2.47.0
Nvidia GPU Operator	24.9.2

Community

Pack Name	New Version
Piraeus Operator	2.7.1

FIPS Packs

Pack Name	New Version
Azure Disk CSI Driver	1.31.2
Azure Disk CSI Driver	1.30.5
Cilium	1.16.0
Cilium	1.16.3
Flannel	0.26.1
Longhorn	1.7.2
Palette eXtended Kubernetes (PXK)	1.32.1
Palette eXtended Kubernetes (PXK)	1.31.5
Palette eXtended Kubernetes (PXK)	1.30.9
Palette eXtended Kubernetes (PXK)	1.29.13
Palette eXtended Kubernetes - Edge (PXK-E)	1.31.5
Palette eXtended Kubernetes - Edge (PXK-E)	1.31.4
Palette eXtended Kubernetes - Edge (PXK-E)	1.30.9
Palette eXtended Kubernetes - Edge (PXK-E)	1.29.13
RKE2	1.32.1
RKE2	1.31.5
RKE2	1.30.9
RKE2	1.29.13
RKE2 - Edge	1.32.1
RKE2 - Edge	1.31.5
RKE2 - Edge	1.30.9
RKE2 - Edge	1.29.13