The release versioning is now calendar-based (Year.Month.Patch). Around two base releases are planned per year with optional patch releases. The best-effort only community support is roughly 6 months and there is commercial support available from multiple vendors. Please update regularly as explained in our upgrading and extending section to benefit also from security and performance improvements.

Note: Please check out the breaking dashboard changes upgrade steps

Highlights:

• Kind 0.32+ and Kubernetes 1.36 CI tests
• Kubeflow Pipelines 2.16.1, Spark operator 2.5.0 Model registry v0.3.9, Kserve Web Application v0.18.0
• Trainer 2.2.0
• Kserve 0.18.0
• Kubeflow/notebooks v1 update and workspaces (v2) beta
• Kubeflow/dashboard v2
• Enable model registry and catalog
• Knative 1.22.0, cert-manager 1.20.2, Oauth2-proxy v7.15.2, Dex 2.45.1
• Istio 1.30.1 with hostUsers: false support
• CI, PSS restricted and network policies for the optional knative-eventing
• Restructure Upgrading section with version-specific upgrade notes

Planned for the next release:

• PSS restricted also for user namespaces in our CI
• Evaluate hostUsers: false for workloads with Istio compatibility
• Reenable trivy
• Milestone: https://github.com/kubeflow/manifests/milestone/4

Changes

• Update kubeflow/trainer manifests from v2.2.0 by @juliusvonkohout in #3413
• Refine .yamllint.yaml configuration settings by @juliusvonkohout in #3418
• fix: update kserve models web application for PR #163 restructure by @danish9039 in #3393
• chore(ci): Remove trivy - Manifests by @sameerdattav in #3424
• Update Kind to v0.31.0 for Kubernetes 1.35 by @danish9039 in #3438
• fix(tests): modernize trainer test to use Kubeflow SDK by @Raakshass in #3421
• align kserve web appLICATION helm parity by @danish9039 in #3437
• chore: align GHA job IDs with workflow filenames by @Copilot in #3439
• chore: update Istio from 1.28.0/1.29.0 to 1.29.1 by @Copilot in #3440
• Update kubeflow/model-registry manifests from v0.3.8 by @pboyd in #3433
• synchronize kubeflow dashboard kubeflow dashboard manifests v2.0.0 rc.1 by @christian-heusel in #3432
• Update kubeflow/notebooks manifests from v1.11.0-rc.1 by @christian-heusel in #3429
• fix: Use released registry images for JobSet and LeaderWorkerSet by @christian-heusel in #3448
• chore: update Helm image tags for model-registry and notebook-controller by @danish9039 in #3449
• synchronize kubeflow workspaces manifests v2.0.0 alpha.1 by @christian-heusel in #3430
• Enable model-registry with UI by default by @Raakshass in #3318
• dex: run 2 replicas without sticky service by @danish9039 in #3376
• Synchronize kubeflow pipelines manifests 2.16.1 by @juliusvonkohout in #3453
• Update kserve/kserve manifests from v0.18.0 by @christian-heusel in #3406
• knative: add eventing security overlay by @danish9039 in #3419
• documentation(kserve): add upgrade notes for v0.16.x to v0.17.0 migration by @abdullahpathan22 in #3420
• istio: update to 1.29.2 by @danish9039 in #3456
• Rename kubeflow/model-registry to kubeflow/hub by @pboyd in #3450
• fix: separate cert-manager overlay from base by @GfxKai in #3462
• test: group dashboard and notebooks installations by @danish9039 in #3452
• Enforce rules on modifying upstream files by @juliusvonkohout in #3464
• Update kubeflow/notebooks manifests from v2.0.0-alpha.2 by @christian-heusel in #3455
• Update istio/istio manifests to 1.30.0 by @Raakshass in #3467
• docUMENTATION: restructure Upgrading section with version-specific upgrade notes by @Raakshass in #3474
• fix(hub): deploy model registry to user profile namespace instead of default by @Raakshass in #3475
• syncHRONIZE models web appLICATION 0.18.0 by @Copilot in #3477
• helm: synCHRONIZE kserve models web app chart by @danish9039 in #3481
• fix(hub): split model catalog into kubeflow namespace as cluster-wide singleton by @Raakshass in #3476
• Synchronize Knative manifests to v1.22.0 by @danish9039 in #3485
• Synchronize Dex manifests to v2.45.1 by @danish9039 in #3483
• Synchronize cert-manager manifests to v1.20.2 by @danish9039 in #3482
• Synchronize oauth2-proxy manifests to v7.15.2 by @danish9039 in #3484
• fix(networkpolicy): align model-catalog podSelector with upstream deployment labels by @Raakshass in #3486
• Revise Tests folder README by @juliusvonkohout in #3488
• Update kubeflow/dashboard manifests from v2.0.0 by @christian-heusel in #3489
• test: update Kind bootstrap to Kubernetes 1.36 by @danish9039 in #3490
• chore: Update the name of the Slack channel by @christian-heusel in #3495
• Update kubeflow/notebooks manifests to v1.11.0 by @christian-heusel in #3494
• Update Kubeflow Workspaces manifests to v2.0.0-alpha.3 by @christian-heusel in #3492
• Update Istio from 1.30.0 to 1.30.1 by @Copilot in #3493
• feat: Add dependabot to kubeflow/manifests and SHA-pin all action references by @christian-heusel in #3496

New Contributors

• @sameerdattav made his first contribution in #3424
• @pboyd made his first contribution in #3433
• @abdullahpathan22 made his first contribution in #3420
• @GfxKai made his first contribution in #3462

Full Changelog: 26.03...26.03.1-rc.2

Contributors

• @pboyd
• @GfxKai
• @christian-heusel
• @juliusvonkohout
• @abdullahpathan22
• @danish9039
• @sameerdattav
• @Raakshass

The release versioning is now calendar-based (Year.Month.Patch). Around two base releases are planned per year with optional patch releases. The best-effort only community support is roughly 6 months and there is commercial support available from multiple vendors. Please update regularly as explained in our upgrading and extending section to benefit also from security and performance improvements.

Highlights:

• Kind 0.31+ and Kubernetes 1.35 CI tests
• Kubeflow Pipelines 2.16.1, Spark operator 2.5.0 Model registry v0.3.9, Kserve Web Application v0.18.0
• Trainer 2.2.0
• Kserve 0.18.0
• Kubeflow/notebooks v1 update and workspaces (v2) beta
• Kubeflow/dashboard v2
• Enable model registry and catalog
• Knative 1.20, cert-manager 1.19.4, Oauth2-proxy v7.14.3, Dex 2.45.0
• Istio 1.30.0 with hostUsers: false support
• CI, PSS restricted and network policies for the optional knative-eventing
• Restructure Upgrading section with version-specific upgrade notes

Planned for the next release:

• PSS restricted also for user namespaces in our CI
• Evaluate hostUsers: false for workloads with Istio compatibility
• Reenable trivy
• Milestone: https://github.com/kubeflow/manifests/milestone/4

Changes

• Update kubeflow/trainer manifests from v2.2.0 by @juliusvonkohout in #3413
• Refine .yamllint.yaml configuration settings by @juliusvonkohout in #3418
• fix: update kserve models web application for PR #163 restructure by @danish9039 in #3393
• chore(ci): Remove trivy - Manifests by @sameerdattav in #3424
• Update Kind to v0.31.0 for Kubernetes 1.35 by @danish9039 in #3438
• fix(tests): modernize trainer test to use Kubeflow SDK by @Raakshass in #3421
• align kserve web appLICATION helm parity by @danish9039 in #3437
• chore: align GHA job IDs with workflow filenames by @Copilot in #3439
• chore: update Istio from 1.28.0/1.29.0 to 1.29.1 by @Copilot in #3440
• Update kubeflow/model-registry manifests from v0.3.8 by @pboyd in #3433
• synchronize kubeflow dashboard kubeflow dashboard manifests v2.0.0 rc.1 by @christian-heusel in #3432
• Update kubeflow/notebooks manifests from v1.11.0-rc.1 by @christian-heusel in #3429
• fix: Use released registry images for JobSet and LeaderWorkerSet by @christian-heusel in #3448
• chore: update Helm image tags for model-registry and notebook-controller by @danish9039 in #3449
• synchronize kubeflow workspaces manifests v2.0.0 alpha.1 by @christian-heusel in #3430
• Enable model-registry with UI by default by @Raakshass in #3318
• dex: run 2 replicas without sticky service by @danish9039 in #3376
• Synchronize kubeflow pipelines manifests 2.16.1 by @juliusvonkohout in #3453
• Update kserve/kserve manifests from v0.18.0 by @christian-heusel in #3406
• knative: add eventing security overlay by @danish9039 in #3419
• documentation(kserve): add upgrade notes for v0.16.x to v0.17.0 migration by @abdullahpathan22 in #3420
• istio: update to 1.29.2 by @danish9039 in #3456
• Rename kubeflow/model-registry to kubeflow/hub by @pboyd in #3450
• fix: separate cert-manager overlay from base by @GfxKai in #3462
• test: group dashboard and notebooks installations by @danish9039 in #3452
• Enforce rules on modifying upstream files by @juliusvonkohout in #3464
• Update kubeflow/notebooks manifests from v2.0.0-alpha.2 by @christian-heusel in #3455
• Update istio/istio manifests to 1.30.0 by @Raakshass in #3467
• docUMENTATION: restructure Upgrading section with version-specific upgrade notes by @Raakshass in #3474
• fix(hub): deploy model registry to user profile namespace instead of default by @Raakshass in #3475
• syncHRONIZE models web appLICATION 0.18.0 by @Copilot in #3477
• helm: synCHRONIZE kserve models web app chart by @danish9039 in #3481
• fix(hub): split model catalog into kubeflow namespace as cluster-wide singleton by @Raakshass in #3476

New Contributors

• @sameerdattav made his first contribution in #3424
• @pboyd made his first contribution in #3433
• @abdullahpathan22 made his first contribution in #3420
• @GfxKai made his first contribution in #3462

Full Changelog: 26.03...26.03.1-rc.1

Contributors

• @pboyd
• @GfxKai
• @christian-heusel
• @juliusvonkohout
• @abdullahpathan22
• @danish9039
• @sameerdattav
• @Raakshass

The release versioning is now calendar-based (Year.Month.Patch). Around two base releases are planned per year with optional patch releases. The best-effort only community support is roughly 6 months and there is commercial support available from multiple vendors. Please update regularly as explained in our upgrading and extending section to benefit also from security and performance improvements.

Highlights:

• Kubernetes 1.34+
• Kubeflow Pipelines 2.16.0, Spark operator 2.5.0 Model registry v0.3.5, Kserve Web Application v0.16.1
• Compatibility of Kubeflow Pipelines v1 and v2 with PSS restricted
• Extended Kserve test with authentication and authorization from inside and outside the cluster as well as non-knative / raw deployments
• Simplified installation and automatic installation of the right Kustomize and Kubectl versions
• Installation steps tested and based on our CI, easier in-place updates (optimized PDBs)
• Cleanup of all synchronization steps for faster releases / updates of dependencies
• Knative 1.20, cert-manager 1.19.4, Oauth2-proxy v7.14.3, Dex 2.45.0
• Fix networkpolicies for cert-manager, knative-serving, istio-system, dex, oauth2-proxy

Planned for the next release:

• Kubeflow/dashboard update https://github.com/kubeflow/dashboard/releases/tag/v2.0.0-rc.0
• Kubeflow/notebooks update for notebooks v1 https://github.com/kubeflow/notebooks/releases/tag/v1.11.0-rc.0 and workspaces (v2)
• Enable model registry and catalog #3318
• Trainer 2.2.0 #3413 and #3415
• Kserve 0.17.0 #3406
• PSS restricted also for user namespaces in our CI
• Remove knative-eventing or add network policies and PSS restricted for it
• Evaluate hostUsers: false for workloads and test Istio compatibility
• Kind 0.31+ and Kubernetes 1.35 CI tests

Changes

• chore: add welcome workflow for new contributors by @aniketpati1121 in #3297
• Synchronize knative manifests v1.20.0 by @juliusvonkohout in #3312
• docs: fix Dex Keycloak OIDC config parameters by @sksingh2005 in #3299
• documentation: use server-side apply in README by @Denyme24 in #3326
• Add tarekabouzeid as reviewer by @tarekabouzeid in #3333
• Update kubeflow/model-registry manifests from v0.3.5 by @tarilabs in #3320
• docs: remove experimental/seaweedfs installation from readme by @Roxxas96 in #3334
• Change ml-pipeline-api-server image reference by @akorolyov in #3294
• Update kubeflow/model-registry manifests from v0.3.6 by @Al-Pragliola in #3339
• fix(knative): update PDBs to allow node drain by @aniketpati1121 in #3317
• docUMENTATION: replace raw kustomize commands with CI-tested installATION scripts by @Raakshass in #3341
• chore: Add SHA256 verification for KinD and Kustomize installation by @christian-heusel in #3347
• Rebase: Update kserve/kserve manifests from v0.16.0 by @Raakshass in #3349
• refactor(tests): consolidate KServe test infrastructure into two-file pattern by @Raakshass in #3352
• cert-manager 1.19.4 by @juliusvonkohout in #3358
• Upgrade istio to v.1.29.0 by @juliusvonkohout in #3359
• Synchronize kubeflow pipelines manifests 2.16.0 by @juliusvonkohout in #3360
• fix: variable namespaces for networkpolicies by @danish9039 in #3342
• Add clean coding standards to copilot instructions by @juliusvonkohout in #3362
• sync(knative): bump serving/net-istio/eventing manifests by @danish9039 in #3365
• test(ci): harden Kustomize checksum verification by @danish9039 in #3368
• synchronize(oauth2-proxy): bump manifests to v7.14.3 by @danish9039 in #3366
• test(spark): harden webhook readiness checks by @danish9039 in #3367
• Add cert-manager synchronization script and switch README to script-based update by @danish9039 in #3361
• Consolidate KinD and tests by @Copilot in #3369
• Update common/cert-manager manifests to v1.19.4 by @juliusvonkohout in #3370
• Standardize scripts by @Copilot in #3371
• block-impersonating-serviceaccounts by @juliusvonkohout in #3372
• synchronize(dex): bump Dex manifests to v2.45.0 by @danish9039 in #3364
• make scripts executable by @juliusvonkohout in #3373
• scripts: fix follow-up issues from #3371 by @danish9039 in #3375
• update spark operator by @Copilot in #3379
• knative: drop dead configmap filters by @danish9039 in #3378
• Move releases from community to manifests by @tarekabouzeid in #3377
• Update README.md by @juliusvonkohout in #3383
• simplify readme by @juliusvonkohout in #3385
• Update kubeflow/model-registry manifests from v0.3.7 by @Al-Pragliola in #3384
• dex: split upstream and local resources by @danish9039 in #3374
• chore: Minor readMe typo fix by @harxhist in #3387
• test(kserve): add raw deployment test, trim authentication and authorization documentation, print prediction output by @Raakshass in #3354
• Synchronize kserve models web application manifests v0.16.0 by @juliusvonkohout in #3390
• docs: Add ARM64/aarch64 architecture support note and issue tracking by @iknowmaaz-mz in #3392
• fix(istio): replace PreferClose with PreferSameZone for Kubernetes v1.34 by @iknowmaaz-mz in #3394
• test: name KinD cluster "kubeflow" by @christian-heusel in #3402
• chore: Update the github issue template for the upcoming release by @christian-heusel in #3401
• Update kubeflow/spark-operator manifests from v2.5.0 by @tarekabouzeid in #3410
• fix-trivy-helm GHA by @juliusvonkohout in #3411
• KFP support for pss restricted by @Copilot in #3412
• Change pod security enforcement to baseline by @juliusvonkohout in #3414
• Synchronize Helm charts with Kustomize manifests (katib v0.19.0, model-registry v0.3.7, kserve-models-web-application 0.16.0) by @kunal-511 in #3416
• Synchronize kserve models web application manifests v0.16.1 by @juliusvonkohout in #3417

New Contributors

• @aniketpati1121 made his first contribution in #3297
• @sksingh2005 made his first contribution in #3299
• @Denyme24 made his first contribution in #3326
• @Roxxas96 made his first contribution in #3334
• @akorolyov made his first contribution in #3294
• @danish9039 made his first contribution in #3342
• @Copilot made his first contribution in #3369
• @harxhist made his first contribution in #3387
• @iknowmaaz-mz made his first contribution in #3392

Full Changelog: v1.11.0...26.03

Contributors

• @akorolyov
• @tarilabs
• @tarekabouzeid
• @Roxxas96
• @christian-heusel
• @juliusvonkohout
• @Al-Pragliola
• @kunal-511
• @danish9039
• @Raakshass
• @sksingh2005
• @Denyme24
• @aniketpati1121
• @iknowmaaz-mz
• @harxhist

This release supports Kubernetes 1.34+

TODO Highlights:

• Simplified installation
• ...

TODO:

• kubeflow/dashboard update
• kubeflow/notebooks update for notebooks v1 and workspaces
• Enable model registry and catalog
• kserve models web application
• spark operator final release

Changes

• chore: add welcome workflow for new contributors by @aniketpati1121 in #3297
• Synchronize knative manifests v1.20.0 by @juliusvonkohout in #3312
• docs: fix Dex Keycloak OIDC config parameters by @sksingh2005 in #3299
• documentation: use server-side apply in README by @Denyme24 in #3326
• Add tarekabouzeid as reviewer by @tarekabouzeid in #3333
• Update kubeflow/model-registry manifests from v0.3.5 by @tarilabs in #3320
• docs: remove experimental/seaweedfs installation from readme by @Roxxas96 in #3334
• Change ml-pipeline-api-server image reference by @akorolyov in #3294
• Update kubeflow/model-registry manifests from v0.3.6 by @Al-Pragliola in #3339
• fix(knative): update PDBs to allow node drain by @aniketpati1121 in #3317
• docUMENTATION: replace raw kustomize commands with CI-tested installATION scripts by @Raakshass in #3341
• chore: Add SHA256 verification for KinD and Kustomize installation by @christian-heusel in #3347
• Rebase: Update kserve/kserve manifests from v0.16.0 by @Raakshass in #3349
• refactor(tests): consolidate KServe test infrastructure into two-file pattern by @Raakshass in #3352
• cert-manager 1.19.4 by @juliusvonkohout in #3358
• Upgrade istio to v.1.29.0 by @juliusvonkohout in #3359
• Synchronize kubeflow pipelines manifests 2.16.0 by @juliusvonkohout in #3360
• fix: variable namespaces for networkpolicies by @danish9039 in #3342
• Add clean coding standards to copilot instructions by @juliusvonkohout in #3362
• sync(knative): bump serving/net-istio/eventing manifests by @danish9039 in #3365
• test(ci): harden Kustomize checksum verification by @danish9039 in #3368
• synchronize(oauth2-proxy): bump manifests to v7.14.3 by @danish9039 in #3366
• test(spark): harden webhook readiness checks by @danish9039 in #3367
• Add cert-manager synchronization script and switch README to script-based update by @danish9039 in #3361
• Consolidate KinD and tests by @Copilot in #3369
• Update common/cert-manager manifests to v1.19.4 by @juliusvonkohout in #3370
• Standardize scripts by @Copilot in #3371
• block-impersonating-serviceaccounts by @juliusvonkohout in #3372
• synchronize(dex): bump Dex manifests to v2.45.0 by @danish9039 in #3364
• make scripts executable by @juliusvonkohout in #3373
• scripts: fix follow-up issues from #3371 by @danish9039 in #3375
• update spark operator by @Copilot in #3379
• knative: drop dead configmap filters by @danish9039 in #3378
• Move releases from community to manifests by @tarekabouzeid in #3377
• Update README.md by @juliusvonkohout in #3383
• simplify readme by @juliusvonkohout in #3385
• Update kubeflow/model-registry manifests from v0.3.7 by @Al-Pragliola in #3384
• dex: split upstream and local resources by @danish9039 in #3374

New Contributors

• @aniketpati1121 made his first contribution in #3297
• @sksingh2005 made his first contribution in #3299
• @Denyme24 made his first contribution in #3326
• @Roxxas96 made his first contribution in #3334
• @akorolyov made his first contribution in #3294
• @danish9039 made his first contribution in #3342

Full Changelog: v1.11.0...26.03-rc.1

Contributors

• @akorolyov
• @tarilabs
• @tarekabouzeid
• @Roxxas96
• @christian-heusel
• @juliusvonkohout
• @Al-Pragliola
• @danish9039
• @Raakshass
• @sksingh2005
• @Denyme24
• @aniketpati1121

This release supports Kubernetes 1.33+ and transparently switches from MinIO to Seaweedfs as S3 storage. Please backup and restore any data that you have on MinIO if needed. Please be aware of the tested and recommended Kustomize version 5.7.1.

Video: https://www.youtube.com/watch?v=OV1RurEBISA
Blogpost: https://blog.kubeflow.org/kubeflow-1.11-release/

Highlights:

• Massive scalability improvements that should allow you to scale to 1000+ users/profiles/namespaces
• By default namespaces/profiles have zero pod overhead now, so you save 2x number of namespaces pods.
• By default the Istio service mesh is pruned to save Terabytes of Istio sidecar memory and network traffic on very large clusters #3206
• S3 storage with hard multi-tenancy and per namespace credentials. Limitations of kubeflow/pipelines#12373 and kubeflow/pipelines#9889 still apply. See also https://blog.kubeflow.org/gsoc/community/kubeflow/2025/09/06/kubeflow-and-gsoc2025.html#project-1-kubeflow-platform-enhancements for more information.
• PodSecurityStandards restricted is enforced for all system namespaces. PodSecurityStandards baseline is enforced for user namespaces https://kubernetes.io/docs/concepts/security/pod-security-standards/
• Automatic tests/documentation for exposing Kserve inference services with authentication inside and outside of the cluster https://github.com/kubeflow/manifests/blob/v1.11-branch/.github/workflows/katib_test.yaml
• Experimental helm charts development has started https://github.com/kubeflow/manifests/tree/v1.11-branch/experimental/helm/charts
• Typical resource consumption per component https://github.com/kubeflow/manifests/tree/v1.11-branch#kubeflow-version-master
• KFP 2.15.0 (still supports V1 pipelines and the 1.8.23 SDK), Trainer 2.1.0, Training Operator 1.9.2, Katib 0.19.0, KServe 0.15.2, Kserve models web application 0.15.0, Spark operator 2.4.0, Model Registry 0.3.4, Istio 1.28.0, DEX 2.44, OAuth2-Proxy 7.13
• Network Policies for the namespaces knative-serving oauth2-proxy cert-manager istio-system auth by @kunal-511 in #3228
• Massive test improvements across repositories which should lead to significantly higher quality releases.
• So far this release has been tested on Kind, AKS and GKE (with GKE specific istio overlay), but should also work on EKS, Rancher and many other Kubernetes clusters.

Candidates for 1.11.1 / 1.12.0:

• enable model-registry by default
• kubeflow/dashboard update after repository migration kubeflow/dashboard#125
• kubeflow/notebooks update for v1 kubeflow/notebooks#572 or v2 preview
• Kserve 0.16.0 https://github.com/kserve/kserve/releases/tag/v0.16.0, #3290
• Potential Katib regression kubeflow/katib#2597

Changes

• Fix PSS restricted warnings for kubeflow components by @akagami-harsh in #3050
• Helm Charts Katib by @kunal-511 in #3168
• Switch to large oracle runners by @juliusvonkohout in #3189
• Update dex manifests v2.43.1 by @kunal-511 in #3193
• Update oauth2 proxy manifests v7.10.0 by @kunal-511 in #3194
• add architecture by @juliusvonkohout in #3192
• kserve enforce authentication by @madmecodes in #3180
• Update kubeflow/spark-operator manifests to 2.3.0 by @juliusvonkohout in #3201
• PSS restricted for static namespaces by @juliusvonkohout in #3190
• Update test.sh by @juliusvonkohout in #3202
• dynamic PSS baseline by @juliusvonkohout in #3204
• Update kubeflow/model-registry manifests from v0.2.21 by @tarilabs in #3195
• kfp 1.8.23 by @juliusvonkohout in #3210
• Synchronize kubeflow pipelines manifests 2.14.0 by @juliusvonkohout in #3211
• Helm charts Kserve Models Web App by @kunal-511 in #3183
• Synchronize trainer manifests 2.0 by @kunal-511 in #3181
• Update trivy_scan.py by @juliusvonkohout in #3218
• Add missing resource constraint for training operator by @kunal-511 in #3222
• Update kubeflow/model-registry manifests from v0.2.22 by @tarilabs in #3216
• TrainJob support to Katib Trial Templates by @ram4444 in #3199
• Limit Istio Sidecar Scope to reduce memory usage by @madmecodes in #3206
• Update kserve_test.yaml by @juliusvonkohout in #3221
• Add documentation for Kubeflow Pipelines Kubernetes Native API mode by @VaniHaripriya in #3209
• doc: fix ordering of individual install steps by @andyatmiami in #3226
• Merge PSS_baseline and PSS_restricted by @kunal-511 in #3220
• Update cluster-roles.yaml by @juliusvonkohout in #3229
• Deny All Network Policies for the namespaces knative-serving oauth2-proxy cert-manager istio-system auth by @kunal-511 in #3228
• Update istio to 1.27.0 by @kunal-511 in #3230
• Update kubeflow/model-registry manifests from v0.3.0 by @tarilabs in #3231
• Make Helm Comparision Tests Non Blocking by @kunal-511 in #3234
• bitnami deprecation by @juliusvonkohout in #3235
• Default to SeaweedFS instead of MinIO by @akagami-harsh in #3240
• fix-ml-pipeline-ui-mtls by @jholt96 in #3236
• Update kubeflow/pipelines manifests from 2.14.0 to 2.14.3 by @akagami-harsh in #3242
• Add Katib Test File by @kunal-511 in #3243
• Remove the unnecessary step from end to end test by @kunal-511 in #3249
• Notebook Controller Helm Charts by @kunal-511 in #3219
• Synchronize kserve models web app manifests v0.15.0 by @juliusvonkohout in #3250
• Add VirtualService conflict troubleshooting for KServe path-based Routing by @madmecodes in #3247
• kserve models web app helm charts v0.15.0 by @kunal-511 in #3252
• feat: GitHub Actions workflow to test the KServe Models Web Application by @LogicalGuy77 in #3253
• Update doc for Dex Known Issues by @NJ3rsey in #3256
• Tests for Model Catalog by @kunal-511 in #3262
• Update kubeflow/model-registry manifests from v0.3.2 by @tarilabs in #3259
• Modify version options in issue-report.yml by @juliusvonkohout in #3267
• update troubleshooting for kserve path based routing by @hahahannes in #3264
• Update deprecated MinIO Image by @juliusvonkohout in #3271
• Update kubeflow/model-registry manifests from v0.3.3 by @Al-Pragliola in #3273
• Feature: Add Istio Ambient Mode Support via Overlay Method by @madmecodes in #3246
• Fix: consolidate multiple kserve test workflows into a single job by @madmecodes in #3254
• Update synchronize istio to include ztunnel support by @kunal-511 in #3274
• Update Dex Login Test by @kunal-511 in #3277
• Upgrade istio to v.1.28.0 by @juliusvonkohout in #3276
• Add fsGroup to seaweedfs by @juliusvonkohout in #3279
• Synchronize kubeflow pipelines manifests 2.15.0 by @juliusvonkohout in #3283
• Synchronize trainer manifests v2.1.0 by @juliusvonkohout in #3282
• update kfp sdk to 2.15.1 by @juliusvonkohout in #3285
• Add fsGroup and fsGroupChangePolicy to deployment by @juliusvonkohout in #3286
• Update kubeflow/spark-operator manifests to 2.4.0 by @juliusvonkohout in #3289
• Synchronize katib manifests v0.19.0 by @juliusvonkohout in #3288
• Update kserve/kserve manifests from v0.15.2 by @juliusvonkohout in #3291
• update dex and oauth2-proxy by @juliusvonkohout in #3292
• KFP SDK 2.15.2 by @juliusvonkohout in #3295
• kustomize fixes by @juliusvo...

Contributors

• @tarilabs
• @ram4444
• @hbelmiro
• @andyatmiami
• @jholt96
• @andreyvelich
• @hahahannes
• @juliusvonkohout
• @Al-Pragliola
• @VaniHaripriya
• @NJ3rsey
• @kunal-511
• @akagami-harsh
• @madmecodes
• @LogicalGuy77

This pre-release supports Kubernetes 1.33+ and transparently switches from Minio to seaweedfs as S3 storage. Please backup and restore any data that you have on MinIO if needed. Please try it out and provide development feedback.

Highlights:

• Massive scalability improvements that should allow you to scale to 1000+ users/profies/namespaces
• By default namespaces/profiles have zero pod overhead now, so you save 2x number of namespaces pods.
• By default the Istio service mesh is pruned to save Terabytes of Istio sidecar memory and network traffic on very large clusters #3206
• S3 storage with hard multi-tenancy and per namespace credentials. Limitations of kubeflow/pipelines#12373 and kubeflow/pipelines#9889 still apply. See also https://blog.kubeflow.org/gsoc/community/kubeflow/2025/09/06/kubeflow-and-gsoc2025.html#project-1-kubeflow-platform-enhancements for more information.
• PodSecurityStandards restricted is enforced for all system namespaces. PodSecurityStandards baseline is enforced for user namespaces https://kubernetes.io/docs/concepts/security/pod-security-standards/
• Automatic tests/documentation for exposing Kserve inference services with authentication inside and outside of the cluster https://github.com/kubeflow/manifests/blob/v1.11-branch/.github/workflows/katib_test.yaml
• Experimental helm charts development has started https://github.com/kubeflow/manifests/tree/v1.11-branch/experimental/helm/charts
• Typical resource consumption per component https://github.com/kubeflow/manifests/tree/v1.11-branch#kubeflow-version-master
• KFP 2.15.0 (still supports V1 pipelines and the 1.8.23 SDK), Trainer 2.1.0, Training Operator 1.9.2, Katib 0.19.0, KServe 0.15.2, Kserve models web application 0.15.0, Spark operator 2.4.0, Istio 1.28.0, DEX 2.44, OAuth2-Proxy 7.13
• Network Policies for the namespaces knative-serving oauth2-proxy cert-manager istio-system auth by @kunal-511 in #3228
• Massive test improvements across repositories which should lead to significantly higher quality releases.
• So far this release was tested on Kind and GKE (with GKE specific istio overlay), but should also work on AKS, EKS, Rancher and many other Kubernetes clusters.

TODO: Kserve 0.16.0 https://github.com/kserve/kserve/releases/tag/v0.16.0, #3290

Probably 1.11.1 / 1.12.0:

• enable model-registry by default
• default to trainer instead of training-operator
• kubeflow/dashboard update after repository migration kubeflow/dashboard#125
• kubeflow/notebooks update for v1 kubeflow/notebooks#572 or v2 preview

Changes

• Fix PSS restricted warnings for kubeflow components by @akagami-harsh in #3050
• Helm Charts Katib by @kunal-511 in #3168
• Switch to large oracle runners by @juliusvonkohout in #3189
• Update dex manifests v2.43.1 by @kunal-511 in #3193
• Update oauth2 proxy manifests v7.10.0 by @kunal-511 in #3194
• add architecture by @juliusvonkohout in #3192
• kserve enforce authentication by @madmecodes in #3180
• Update kubeflow/spark-operator manifests to 2.3.0 by @juliusvonkohout in #3201
• PSS restricted for static namespaces by @juliusvonkohout in #3190
• Update test.sh by @juliusvonkohout in #3202
• dynamic PSS baseline by @juliusvonkohout in #3204
• Update kubeflow/model-registry manifests from v0.2.21 by @tarilabs in #3195
• kfp 1.8.23 by @juliusvonkohout in #3210
• Synchronize kubeflow pipelines manifests 2.14.0 by @juliusvonkohout in #3211
• Helm charts Kserve Models Web App by @kunal-511 in #3183
• Synchronize trainer manifests 2.0 by @kunal-511 in #3181
• Update trivy_scan.py by @juliusvonkohout in #3218
• Add missing resource constraint for training operator by @kunal-511 in #3222
• Update kubeflow/model-registry manifests from v0.2.22 by @tarilabs in #3216
• TrainJob support to Katib Trial Templates by @ram4444 in #3199
• Limit Istio Sidecar Scope to reduce memory usage by @madmecodes in #3206
• Update kserve_test.yaml by @juliusvonkohout in #3221
• Add documentation for Kubeflow Pipelines Kubernetes Native API mode by @VaniHaripriya in #3209
• doc: fix ordering of individual install steps by @andyatmiami in #3226
• Merge PSS_baseline and PSS_restricted by @kunal-511 in #3220
• Update cluster-roles.yaml by @juliusvonkohout in #3229
• Deny All Network Policies for the namespaces knative-serving oauth2-proxy cert-manager istio-system auth by @kunal-511 in #3228
• Update istio to 1.27.0 by @kunal-511 in #3230
• Update kubeflow/model-registry manifests from v0.3.0 by @tarilabs in #3231
• Make Helm Comparision Tests Non Blocking by @kunal-511 in #3234
• bitnami deprecation by @juliusvonkohout in #3235
• Default to SeaweedFS instead of MinIO by @akagami-harsh in #3240
• fix-ml-pipeline-ui-mtls by @jholt96 in #3236
• Update kubeflow/pipelines manifests from 2.14.0 to 2.14.3 by @akagami-harsh in #3242
• Add Katib Test File by @kunal-511 in #3243
• Remove the unnecessary step from end to end test by @kunal-511 in #3249
• Notebook Controller Helm Charts by @kunal-511 in #3219
• Synchronize kserve models web app manifests v0.15.0 by @juliusvonkohout in #3250
• Add VirtualService conflict troubleshooting for KServe path-based Routing by @madmecodes in #3247
• kserve models web app helm charts v0.15.0 by @kunal-511 in #3252
• feat: GitHub Actions workflow to test the KServe Models Web Application by @LogicalGuy77 in #3253
• Update doc for Dex Known Issues by @NJ3rsey in #3256
• Tests for Model Catalog by @kunal-511 in #3262
• Update kubeflow/model-registry manifests from v0.3.2 by @tarilabs in #3259
• Modify version options in issue-report.yml by @juliusvonkohout in #3267
• update troubleshooting for kserve path based routing by @hahahannes in #3264
• Update deprecated MinIO Image by @juliusvonkohout in #3271
• Update kubeflow/model-registry manifests from v0.3.3 by @Al-Pragliola in #3273
• Feature: Add Istio Ambient Mode Support via Overlay Method by @madmecodes in #3246
• Fix: consolidate multiple kserve test workflows into a single job by @madmecodes in #3254
• Update synchronize istio to include ztunnel support by @kunal-511 in #3274
• Update Dex Login Test by @kunal-511 in #3277
• Upgrade istio to v.1.28.0 by @juliusvonkohout in #3276
• Add fsGroup to seaweedfs by @juliusvonkohout in #3279
• Synchronize kubeflow pipelines manifests 2.15.0 by @juliusvonkohout in #3283
• Synchronize trainer manifests v2.1.0 by @juliusvonkohout in #3282
• update kfp sdk to 2.15.1 by @juliusvonkohout in #3285
• Add fsGroup and fsGroupChangePolicy to deployment by @juliusvonkohout in #3286
• Update kubeflow/spark-operator manifests to 2.4.0 by @juliusvonkohout in #3289
• Synchronize katib manifests v0.19.0 by @juliusvonkohout in #3288
• Update kserve/kserve manifests from v0.15.2 by @juliusvonkohout in #3291
• update dex and oauth2-proxy by @juliusvonkohout in #3292

New Contributors

• @ram4444 made his first contribution in #3199
• @VaniHaripriya made her first contribution in #3209
• @andyatmiami made his first contribution in #3226...

Contributors

• @tarilabs
• @ram4444
• @andyatmiami
• @jholt96
• @hahahannes
• @juliusvonkohout
• @Al-Pragliola
• @VaniHaripriya
• @NJ3rsey
• @kunal-511
• @akagami-harsh
• @madmecodes
• @LogicalGuy77

This pre-release supports Kubernetes 1.33+ and transparently switches from Minio to seaweedfs as S3 storage. Please backup and restore any data that you have on MinIO if needed. Please try it out and provide development feedback.

Highlights:

• Massive scalability improvements that should allow you to scale to 1000+ users/profies/namespaces
• By default namespaces/profiles have zero pod overhead now, so you save 2x number of namespaces pods.
• By default the Istio service mesh is pruned to save Terabytes of Istio sidecar memory and network traffic on very large clusters #3206
• S3 storage with hard multi-tenancy and per namespace credentials. Limitations of kubeflow/pipelines#12373 and kubeflow/pipelines#9889 still apply. See also https://blog.kubeflow.org/gsoc/community/kubeflow/2025/09/06/kubeflow-and-gsoc2025.html#project-1-kubeflow-platform-enhancements for more information.
• PodSecurityStandards restricted is enforced for all system namespaces. PodSecurityStandards baseline is enforced for user namespaces https://kubernetes.io/docs/concepts/security/pod-security-standards/
• Automatic tests/documentation for exposing Kserve inference services with authentication inside and outside of the cluster https://github.com/kubeflow/manifests/blob/v1.11-branch/.github/workflows/katib_test.yaml
• Experimental helm charts development has started https://github.com/kubeflow/manifests/tree/v1.11-branch/experimental/helm/charts
• Typical resource consumption per component https://github.com/kubeflow/manifests/tree/v1.11-branch#kubeflow-version-master
• KFP 2.15.0 (still supports V1 pipelines and the 1.8.23 SDK), Trainer 2.1.0, Training Operator 1.9.2, KServe 0.15.0, Kserve models web application 0.15.0, Spark operator 2.3.0, Istio 1.28, DEX 2.43, OAuth2-Proxy 7.10
• Network Policies for the namespaces knative-serving oauth2-proxy cert-manager istio-system auth by @kunal-511 in #3228
• Massive test improvements across repositories which should lead to significantly higher quality releases.
• So far this release was tested on Kind and GKE (with GKE specific istio overlay), but should also work on AKS, EKS, Rancher and many other Kubernetes clusters.

TODO: Spark-operator 2.4 https://github.com/kubeflow/spark-operator/releases/tag/v2.4.0, Kserve 0.16.0 https://github.com/kserve/kserve/releases/tag/v0.16.0, Katib 0.19.0

Probably 1.11.1 / 1.12.0:

• enable model-registry by default
• kubeflow/dashboard update after repository migration kubeflow/dashboard#125
• kubeflow/notebooks update for v1 kubeflow/notebooks#572 or v2 preview

Changes

• Fix PSS restricted warnings for kubeflow components by @akagami-harsh in #3050
• Helm Charts Katib by @kunal-511 in #3168
• Switch to large oracle runners by @juliusvonkohout in #3189
• Update dex manifests v2.43.1 by @kunal-511 in #3193
• Update oauth2 proxy manifests v7.10.0 by @kunal-511 in #3194
• add architecture by @juliusvonkohout in #3192
• kserve enforce authentication by @madmecodes in #3180
• Update kubeflow/spark-operator manifests to 2.3.0 by @juliusvonkohout in #3201
• PSS restricted for static namespaces by @juliusvonkohout in #3190
• Update test.sh by @juliusvonkohout in #3202
• dynamic PSS baseline by @juliusvonkohout in #3204
• Update kubeflow/model-registry manifests from v0.2.21 by @tarilabs in #3195
• kfp 1.8.23 by @juliusvonkohout in #3210
• Synchronize kubeflow pipelines manifests 2.14.0 by @juliusvonkohout in #3211
• Helm charts Kserve Models Web App by @kunal-511 in #3183
• Synchronize trainer manifests 2.0 by @kunal-511 in #3181
• Update trivy_scan.py by @juliusvonkohout in #3218
• Add missing resource constraint for training operator by @kunal-511 in #3222
• Update kubeflow/model-registry manifests from v0.2.22 by @tarilabs in #3216
• TrainJob support to Katib Trial Templates by @ram4444 in #3199
• Limit Istio Sidecar Scope to reduce memory usage by @madmecodes in #3206
• Update kserve_test.yaml by @juliusvonkohout in #3221
• Add documentation for Kubeflow Pipelines Kubernetes Native API mode by @VaniHaripriya in #3209
• doc: fix ordering of individual install steps by @andyatmiami in #3226
• Merge PSS_baseline and PSS_restricted by @kunal-511 in #3220
• Update cluster-roles.yaml by @juliusvonkohout in #3229
• Deny All Network Policies for the namespaces knative-serving oauth2-proxy cert-manager istio-system auth by @kunal-511 in #3228
• Update istio to 1.27.0 by @kunal-511 in #3230
• Update kubeflow/model-registry manifests from v0.3.0 by @tarilabs in #3231
• Make Helm Comparision Tests Non Blocking by @kunal-511 in #3234
• bitnami deprecation by @juliusvonkohout in #3235
• Default to SeaweedFS instead of MinIO by @akagami-harsh in #3240
• fix-ml-pipeline-ui-mtls by @jholt96 in #3236
• Update kubeflow/pipelines manifests from 2.14.0 to 2.14.3 by @akagami-harsh in #3242
• Add Katib Test File by @kunal-511 in #3243
• Remove the unnecessary step from end to end test by @kunal-511 in #3249
• Notebook Controller Helm Charts by @kunal-511 in #3219
• Synchronize kserve models web app manifests v0.15.0 by @juliusvonkohout in #3250
• Add VirtualService conflict troubleshooting for KServe path-based Routing by @madmecodes in #3247
• kserve models web app helm charts v0.15.0 by @kunal-511 in #3252
• feat: GitHub Actions workflow to test the KServe Models Web Application by @LogicalGuy77 in #3253
• Update doc for Dex Known Issues by @NJ3rsey in #3256
• Tests for Model Catalog by @kunal-511 in #3262
• Update kubeflow/model-registry manifests from v0.3.2 by @tarilabs in #3259
• Modify version options in issue-report.yml by @juliusvonkohout in #3267
• update troubleshooting for kserve path based routing by @hahahannes in #3264
• Update deprecated MinIO Image by @juliusvonkohout in #3271
• Update kubeflow/model-registry manifests from v0.3.3 by @Al-Pragliola in #3273
• Feature: Add Istio Ambient Mode Support via Overlay Method by @madmecodes in #3246
• Fix: consolidate multiple kserve test workflows into a single job by @madmecodes in #3254
• Update synchronize istio to include ztunnel support by @kunal-511 in #3274
• Update Dex Login Test by @kunal-511 in #3277
• Upgrade istio to v.1.28.0 by @juliusvonkohout in #3276
• Add fsGroup to seaweedfs by @juliusvonkohout in #3279
• Synchronize kubeflow pipelines manifests 2.15.0 by @juliusvonkohout in #3283
• Synchronize trainer manifests v2.1.0 by @juliusvonkohout in #3282
• update kfp sdk to 2.15.1 by @juliusvonkohout in #3285
• Add fsGroup and fsGroupChangePolicy to deployment by @juliusvonkohout in #3286

New Contributors

• @ram4444 made his first contribution in #3199
• @VaniHaripriya made her first contribution in #3209
• @andyatmiami made his first contribution in #3226
• @jholt96 made his first contribution in #3236
• @LogicalGuy77 made his first contribution in #3253
• @NJ3rsey made their his contribution in #3256
• @hahahannes made his first contribution in #3264

Full Changelog: v1.10.2...v1.11.0-rc.0

Contributors

• @tarilabs
• @ram4444
• @andyatmiami
• @jholt96
• @hahahannes
• @juliusvonkohout
• @Al-Pragliola
• @VaniHaripriya
• @NJ3rsey
• @kunal-511
• @akagami-harsh
• @madmecodes
• @LogicalGuy77

Milestones:
1.11.0 Milestone

Our support target is Kubernetes 1.31-1.33+

New Contributors

• @kitsuyaazuma made his first contribution in #3149
• @emmanuel-ferdman made his first contribution in #3147
• @ActionsPerMinute made his first contribution in #3170

Changes since 1.10.1

• Apply pss labels from diectly PSS enable scripts by @akagami-harsh in #3132
• istio namespace missing by @juliusvonkohout in #3134
• The test_pipeline.py has been changed to test_pipeline_v2.py by @madmecodes in #3136
• Adding OpenSSF Best Practices and build status by @tarekabouzeid in #3138
• Update kubeflow/model-registry manifests from v0.2.18 by @tarilabs in #3137
• Add SeaweedFS namespace isolation security test to CI by @akagami-harsh in #3141
• Switch to Istio CNI by default by @madmecodes in #3135
• Remove static PSS files and apply security labels directly in enable PSS scripts by @akagami-harsh in #3130
• Updated tests file naming scheme by @kunal-511 in #3144
• Fix seaweedfs PSS warnings by @akagami-harsh in #3152
• Fix sed pattern in spark-operator script by @kunal-511 in #3151
• Correct Dex's issuer in README config example by @kitsuyaazuma in #3149
• Update kubeflow/spark-operator manifests to 2.2.0 by @juliusvonkohout in #3146
• Add namespace isolation to V1 pipeline workflows with SeaweedFS integration by @akagami-harsh in #3145
• test: Kserve test fail reason by @madmecodes in #3155
• Apply PSS baseline for profiles namespaces in CI by @akagami-harsh in #3150
• Modernize logger interface by @emmanuel-ferdman in #3147
• Move dynamic PSS baseline patch to apps/profiles/ by @akagami-harsh in #3157
• Update README.md by @juliusvonkohout in #3156
• Unduplicated the Trivy file by @kunal-511 in #3158
• Update trivy_scan.py by @juliusvonkohout in #3159
• KServe Path-Based Routing Implementation by @madmecodes in #3148
• Add swfs test to full_kubeflow_integration_test.yaml by @akagami-harsh in #3160
• update: 60s from 300s by @madmecodes in #3162
• Update install_KinD_create_KinD_cluster_install_kustomize.sh by @juliusvonkohout in #3165
• Update kubeflow/model-registry manifests from v0.2.19 by @tarilabs in #3163
• Feat: Migrated to Istio 1.26.1 and merged istio and istio cni by @madmecodes in #3153
• knative and cluster-local-gateway confusion by @madmecodes in #3169
• Moved from Apps to Applications by @kunal-511 in #3167
• Added the GHA permissions by @kunal-511 in #3172
• fix pipeline application command by @ActionsPerMinute in #3170
• Update: move test auth file in test GHA workflow for istio insecure overlay by @madmecodes in #3173
• feat: check resource usage in full_kubeflow_integration_test and add section of resource utilization of each component in README by @milinddethe15 in #3091
• Migrate busybox image to ghcr by @akagami-harsh in #3174
• Helm Charts Model Registry by @kunal-511 in #3175
• Simplified the metrics by @kunal-511 in #3182
• security and contributors.md by @juliusvonkohout in #3187
• Live PVC storage by @kunal-511 in #3188

Full Changelog: v1.10.1...v1.10.2

Contributors

• @tarilabs
• @tarekabouzeid
• @ActionsPerMinute
• @emmanuel-ferdman
• @juliusvonkohout
• @kitsuyaazuma
• @milinddethe15
• @kunal-511
• @akagami-harsh
• @madmecodes

Milestones:
1.10.1 Milestone
1.11.0 Milestone

Our support target is Kubernetes 1.31-1.33+, although it should run as well on Kubernetes 1.29/1.30 (#3059).

New Contributors

• @christian-heusel made his first contribution in #3081

Full Changelog: v1.10.0...v1.10.1

Changes since 1.10.0

• documentation: Explain PodDisruptionBudget workaround by @christian-heusel in #3081
• fix: Fixes issue where service account tokens fail with: "Jwt issuer is not configured" error. by @madmecodes in #3079
• Fix: Added example.com in knative serving patch, to solve 404 error by @madmecodes in #3084
• end-to-end integration tests by @kunal-511 in #3077
• Updated the gha workflows to use new install_katib, made changes as s... by @kunal-511 in #3092
• Update kubeflow/model-registry manifests from v0.2.16 by @tarilabs in #3087
• Removed KServe DNS patches from GitHub Actions tests by @madmecodes in #3086
• Update readme and todos by @juliusvonkohout in #3088
• Fix: flaky Dex login test by improving authentication flow handling by @madmecodes in #3082
• fix: disable GHA in forked repo by @milinddethe15 in #3096
• Synchronize kserve web appplication manifests v0.14.0 by @juliusvonkohout in #3097
• improve the tests with real KF profile namespaces by @kunal-511 in #3093
• Improving gha's to make them consistent by @kunal-511 in #3099
• Update kubeflow/spark-operator manifests to 2.1.1 by @juliusvonkohout in #3102
• Fixed the cert manager readiness for kserve by @kunal-511 in #3103
• Synchronize kserve manifests v0.15.0 and update tests by @juliusvonkohout in #3101
• Fix PSS warning for cluster-local-gateway by @akagami-harsh in #3108
• Update issue-report.yml by @juliusvonkohout in #3114
• Enforce failure on PSS baseline test violations by @kunal-511 in #3106
• ci: remove triage_issues action by @milinddethe15 in #3116
• PSS test for knative-serving by @kunal-511 in #3117
• Integrate profiles with seaweedfs by @pschoen-itsc in #3051
• Fix knative-serving PSS warnings by @akagami-harsh in #3118
• Making the synchronize scripts consistent by @kunal-511 in #3115
• Synchronize kubeflow pipelines manifests 2.5.0 by @juliusvonkohout in #3121
• Update README.md by @juliusvonkohout in #3123
• refactor: move KServe tests from apps to tests/gh-actions by @madmecodes in #3120
• Synchronize training operator manifests v1.9.2 by @juliusvonkohout in #3126
• fix: make again script runnable on Mac OSX by @tarilabs in #3125
• Add KFP V1 Pipeline Test to CI Workflow by @kunal-511 in #3127
• Update kubeflow/model-registry manifests from v0.2.17 by @tarilabs in #3122
• Use istio cni in pipelines gha by @akagami-harsh in #3128
• Enable Spark Operator by default by @kunal-511 in #3131
• Fix Istio sidecar injection by moving from annotations to labels by @madmecodes in #3044
• Updated the V2 pipeline test to be more robust #3129 by @kunal-511 in #3129

Contributors

• @tarilabs
• @christian-heusel
• @juliusvonkohout
• @milinddethe15
• @kunal-511
• @akagami-harsh
• @pschoen-itsc
• @madmecodes

Milestones:
1.10.0 Milestone
1.10.1 Milestone

Our support target is Kubernetes 1.31-1.33+, although it should run as well on Kubernetes 1.29/1.30 (#3059).

• Release Page
• Blogpost with details
• TODO link to release presentation

New Contributors

• @varodrig made her first contribution in #2906
• @mahdikhashan made his first contribution in #2924
• @utsumi-fj made his first contribution in #2946
• @biswassri made her first contribution in #2939
• @warjiang made his first contribution in #2971
• @akagami-harsh made his first contribution in #2972
• @ederign made his first contribution in #2989
• @lucferbux made his first contribution in #3000
• @wooyoung85 made his first contribution in #3012
• @jbronn made his first contribution in #3021
• @anishasthana made his first contribution in #2994
• @milinddethe15 made his first contribution in #3045
• @madmecodes made his first contribution in #3048
• @shaikmoeed made his first contribution in #3063
• @kunal-511 made his first contribution in #3070

Changes since 1.9.1

• Remove the old tekton version by @hansinikarunarathne in #2772
• update Readme file to fix Kustomize links and Tekton pipelines information by @varodrig in #2906
• Upgrade istio to v.1.23.2 by @tarekabouzeid in #2890
• Upgrade istio-cni to v.1.23.2 by @tarekabouzeid in #2903
• Synchronize kserve manifests v0.14.0 by @juliusvonkohout in #2908
• feat: synchronize kubeflow model registry manifests to v0.2.10 by @Al-Pragliola in #2913
• Dex,oauth2-proxy and k8s token documentation by @juliusvonkohout in #2911
• Update Dex and oauth2-proxy to 2.41.1 and 7.7.1 by @juliusvonkohout in #2916
• Use $HOME .docker/config.json by @diegolovison in #2918
• Synchronize knative manifests v1.16.0 by @juliusvonkohout in #2917
• update cert-manager to 1.16.1 and move the upstream manifests to the upstream folder by @juliusvonkohout in #2919
• update cert-manager and kubernetes version information according to o... by @juliusvonkohout in #2921
• remove seldon, bentoml and metacontroller (included in upstream KFP) by @juliusvonkohout in #2920
• fix cert-manager wrong path in standalone installation section by @mahdikhashan in #2924
• kustomize 5.4.3 and documentation updates by @juliusvonkohout in #2929
• update oauth2-proxy readme by @juliusvonkohout in #2930
• Kubernetes 1.32 and kind 0.26 by @juliusvonkohout in #2935
• Fix command for PVC Viewer Controller in README.md by @utsumi-fj in #2946
• Added a PSS patch for cluster-jwks-proxy deployment by @biswajit-9776 in #2944
• Fix typo in README.md by @utsumi-fj in #2947
• Upgrade Istio to v1.24.2 by @biswajit-9776 in #2950
• Synchronize kubeflow model registry manifests v0.2.12 by @juliusvonkohout in #2956
• Synchronize kserve manifests v0.14.1 by @juliusvonkohout in #2955
• Synchronize kubeflow training operator manifests v1.9.0 rc.0 by @juliusvonkohout in #2954
• Disable init container injection for ray by @juliusvonkohout in #2957
• chore: Add securitycontext for PSS PoC (rootless Kubeflow) by @biswassri in #2939
• update spark to 2.1.0 by @juliusvonkohout in #2962
• Update kubeflow/training-operator manifests from v1.9.0 by @tarekabouzeid in #2965
• Update sparkapplication_example.yaml by @juliusvonkohout in #2966
• Synchronize kubeflow pipelines manifests 2.4.0 by @juliusvonkohout in #2953
• fix: update kind config by @warjiang in #2971
• Refactor: Extract pipeline_test.py into a shared file for reuse across workflows by @akagami-harsh in #2972
• Update oauth2-proxy README.md by @juliusvonkohout in #2977
• Synchronize kubeflow training operator manifests 778cd72 by @juliusvonkohout in #2979
• Fix raycluster Readme by @akagami-harsh in #2976
• Update kubeflow/model-registry manifests from 5d8ed91 by @tarilabs in #2973
• Improve documentation and CI/CD by @juliusvonkohout in #2987
• Add model registry ui network policy by @ederign in #2989
• fix warnings after kustomize build in contrib by @mahdikhashan in #2992
• Synchronize kubeflow katib manifests v0.18.0 rc.0 by @juliusvonkohout in #2993
• Synchronize kubeflow kubeflow manifests v1.10.0 rc.0 by @juliusvonkohout in #2995
• Synchronize kubeflow model registry manifests v0.2.14 by @tarilabs in #2998
• Synchronize kserve web app manifests v0.14.0 rc.0 by @juliusvonkohout in #3003
• feat: Add pre-commit hooks for automated code quality checks by @akagami-harsh in #3001
• Synchronize kubeflow kubeflow manifests v1.10.0 rc.1 by @juliusvonkohout in #3008
• Add Model Registry UI Integration Test by @lucferbux in #3000
• chore: Removing PSS patches by @biswassri in #2986
• Add a section for pre-commit in README.md by @akagami-harsh in #3009
• Upgrading metacontroller to v4.11.22 by @tarekabouzeid in #2988
• docs: Add guide for Dex and Keycloak by @wooyoung85 in #3012
• Update common/knative manifests to v1.16.2/v1.16.4. by @jbronn in #3021
• Pipelines MySQL volume permissions fix by @jbronn in #3019
• Update knative README.md by @juliusvonkohout in #3024
• docs: Add information about KEP process by @anishasthana in #2994
• Refactoring by @juliusvonkohout in #3025
• Update kubeflow/pipelines manifests from 2.4.1 by @varodrig in #3029
• Test PSS baseline/restricted for Notebooks, Katib and Kserve by @akagami-harsh in #3026
• Dummy PR for integration tests by @juliusvonkohout in #3014
• Migrate Istio images from DockerHub to GCR by @akagami-harsh in #3022
• Delete experimental/security/PSS/patches/kubeflow-pipelines-profile-controller.yaml by @juliusvonkohout in #3036
• istio: generate istio-ingressgateway by @fraenkel in #3039
• PSS baseline / restricted also for Notebooks, Katib, Kserve and istio-ingressgateway by @akagami-harsh in #3042
• Cleanup istio by @juliusvonkohout in #3043
• fix(pipeline): minio filesystem permission access error by @milinddethe15 in #3045
• restructuring by @juliusvonkohout in #3046
• istio proxy version 1.24.3 by @juliusvonkohout in #3049
• Update kubeflow/model-registry manifests from v0.2.15 by @tarilabs in #3053
• Add synchronization script for Spark Operator manifests by @madmecodes in #3048
• Synchronize kubeflow kubeflow manifests v1.10.0 rc.2 by @juliusvonkohout in #3058
• U...

Contributors

• @jbronn
• @ederign
• @diegolovison
• @fraenkel
• @tarilabs
• @warjiang
• @anishasthana
• @tarekabouzeid
• @lucferbux
• @shaikmoeed
• @wooyoung85
• @juliusvonkohout
• @biswassri
• @mahdikhashan
• @varodrig
• @utsumi-fj
• @Al-Pragliola
• @milinddethe15
• @hansinikarunarathne
• @biswajit-9776
• @kunal-511
• @akagami-harsh
• @madmecodes