IBM Cloud Docs
1.35 version change log

1.35 version change log

View information of version changes for major, minor, and patch updates that are available for your IBM Cloud® Kubernetes Service clusters that run this version. Changes include updates to Kubernetes and IBM Cloud Provider components.

Overview

In Kubernetes, most new beta features are disabled by default. Alpha features, which are subject to change, are disabled in all versions. For more information, see the Default service settings for Kubernetes components and the feature gates for each version.

For more information about major, minor, and patch versions and preparation actions between minor versions, see Kubernetes versions.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect IBM Cloud Kubernetes Service. You can filter the results to view only Kubernetes Cluster security bulletins that are relevant to IBM Cloud Kubernetes Service. Change log entries that address other security vulnerabilities but don't also refer to an IBM security bulletin are for vulnerabilities that are not known to affect IBM Cloud Kubernetes Service in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Some change logs are for worker node fix packs, and apply only to worker nodes. You must apply these patches to ensure security compliance for your worker nodes. These worker node fix packs can be at a higher version than the master because some build fix packs are specific to worker nodes. Other change logs are for master fix packs, and apply only to the cluster master. Master fix packs might not be automatically applied. You can choose to apply them manually. For more information about patch types, see Update types.

Version 1.35

Change log for Master fix pack 1.35.3_1523, released 25 March 2026

The following table shows the changes that are in the master fix pack 1.35.3_1523. Master patch updates are applied automatically.

Changes since version 1.35.1-1520
Component Previous Current Description
Cluster health control-plane operator v0.1.15 v0.1.20 N/A
Cluster health image v1.6.14 v1.6.15 New version contains updates and security fixes.
etcd v3.5.26 v3.5.27 See the etcd release notes.
IBM Cloud Block Storage driver and plug-in v2.5.24 v2.5.25 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.35.0-7 v1.35.2-2 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor v453 v454 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher v1.1.9 v1.1.11 New version contains updates and security fixes.
IBM Cloud RBAC Operator 8a12251 6212368 New version contains updates and security fixes.
Key Management Service provider v2.10.21 2.10.22 New version contains updates and security fixes.
Kubernetes v1.35.1 v1.35.3 See the Kubernetes release notes.
Kubernetes Metrics Server v0.8.0 v0.8.1 See the Kubernetes Metrics Server release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 3347 3563 New version contains updates and security fixes.
Portieris admission controller v0.13.35 v0.13.36 See the Portieris admission controller release notes.

Worker node fix pack 1.35.3_1523, released 24 March 2026

The following table shows the components included in the worker node fix pack 1.35.3_1523. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

1.35.3_1523 fix pack.
Component Version Description
UBUNTU 24 (VPC) 6.8.0-101-generic Resolves the following CVEs: CVE-2025-0167, CVE-2025-15366, CVE-2025-15367, CVE-2026-23865, CVE-2026-25749, CVE-2026-26007, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-3497, and CVE-2026-3731.
UBUNTU 24 (Classic) 6.8.0-101-generic Resolves the following CVEs: CVE-2025-0167, CVE-2025-15366, CVE-2025-15367, CVE-2026-23865, CVE-2026-25749, CVE-2026-26007, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-3497, and CVE-2026-3731.
Kubernetes 1.35.3 For more information, see the change logs.
containerd 2.2.2 For more information, see the change logs.
HAProxy 10c8639e6b5829d0af51a22755e13756f34630cf Resolves the following CVEs: CVE-2025-15281, and CVE-2026-0915.
GPU Device Plug-in and Installer 1c4faba733bd6bce95c85ead9a63e1ff0bbce86b Resolves the following CVEs: CVE-2026-0915, CVE-2026-25749, and CVE-2025-15281.

Worker node fix pack 1.35.1_1521, released 11 March 2026

The following table shows the components included in the worker node fix pack 1.35.1_1521. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

1.35.1_1521 fix pack.
Component Version Description
UBUNTU 24 (VPC) 6.8.0-100-generic Resolves the following CVEs: CVE-2025-10148, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2025-22037, CVE-2025-37899, and CVE-2026-2781.
UBUNTU 24 (Classic) 6.8.0-100-generic Resolves the following CVEs: CVE-2025-10148, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2025-22037, CVE-2025-37899, and CVE-2026-2781.
Kubernetes 1.35.1 For more information, see the change logs.
containerd 2.2.1 For more information, see the change logs.
HAProxy 965c403695b15b3410d87a3772002edbc5ed2569 Resolves the following CVEs: CVE-2025-69419.
GPU Device Plug-in and Installer dc588cffda45a3831875a9236f7c34eb4aadb71c Resolves the following CVEs: CVE-2025-69419.

Worker node fix pack 1.35.1_1520, released 5 March 2026

The following table shows the components included in the worker node fix pack 1.35.1_1520. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

1.34.3_1542 fix pack.
Component Previous Current Description
Calico v3.29.6 v3.30.6 See the Calico release notes.
Cluster health image v1.6.10 v1.6.14 New version contains updates and security fixes.
CoreDNS v1.12.2 v1.12.4 See the CoreDNS release notes.
etcd v3.5.23 v3.5.27 See the etcd release notes.
IBM Cloud Block Storage driver and plug-in v2.5.20 v2.5.24 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.34.1-1 v1.35.1-1 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 452 v453 New version contains updates and security fixes.
Key Management Service provider v2.10.17 2.10.21 New version contains updates and security fixes.
Konnectivity agent and server v0.33.0 v0.34.0 See the Konnectivity release notes.
Kubernetes v1.34.3 v1.35.1 See the Kubernetes release notes.
Kubernetes Metrics Server v0.8.0 v0.8.1 See the Kubernetes Metrics Server release notes.
Portieris admission controller v0.13.30 v0.13.35 See the Portieris admission controller release notes
Tigera Operator v1.36.14 v1.38.11 See the Tigera Operator release notes.