Merge pull request #5770 from juanluisvaladas/v1.32.4-m

juanluisvaladas · web-flow · commit a97e38b78760 · 2025-04-24T17:41:40.000+02:00
Bump kubernetes to 1.32.4
diff --git a/cncf/GTR.md b/cncf/GTR.md
@@ -329,17 +329,17 @@ k0s project follows closely the upstream Kubernetes release cycle. The only diff
 The k0s version string consists of the Kubernetes version and the k0s version. For example:
 
 ```text
-v1.32.3+k0s.0
+v1.32.4+k0s.0
 ```
 
-The Kubernetes version (1.32.3) is the first part, and the last part (k0s.0) reflects the k0s version, which is built on top of the certain Kubernetes version.
+The Kubernetes version (1.32.4) is the first part, and the last part (k0s.0) reflects the k0s version, which is built on top of the certain Kubernetes version.
 
 ## Installation
 
 Here’s an example of how to set a single node cluster:
 
 ```console
-# export K0S_VERSION=v1.32.3+k0s.0
+# export K0S_VERSION=v1.32.4+k0s.0
 # curl -sSfL https://github.com/k0sproject/k0s/releases/download/$K0S_VERSION/k0s-$K0S_VERSION-amd64 -o k0s
 # chmod u+x k0s
 # ./k0s install controller --single && ./k0s start
diff --git a/cncf/security-self-assessment.md b/cncf/security-self-assessment.md
@@ -9,7 +9,7 @@ This document serves as the k0s project [CNCF security self-assessment](https://
 | Software | https://github.com/k0sproject/k0s |
 | Security Provider | No |
 | Languages | Golang |
-| SBOM | [https://github.com/k0sproject/k0s/releases/download/v1.32.3%2Bk0s.0/spdx.json](https://github.com/k0sproject/k0s/releases/download/v1.32.3%2Bk0s.0/spdx.json)  |
+| SBOM | [https://github.com/k0sproject/k0s/releases/download/v1.32.4%2Bk0s.0/spdx.json](https://github.com/k0sproject/k0s/releases/download/v1.32.4%2Bk0s.0/spdx.json)  |
 
 ## Security links
 
diff --git a/embedded-bins/Makefile.variables b/embedded-bins/Makefile.variables
@@ -22,7 +22,7 @@ containerd_build_shim_go_cgo_enabled = 0
 #containerd_build_go_ldflags =
 containerd_build_go_ldflags_extra = "-w -s -extldflags=-static"
 
-kubernetes_version = 1.32.3
+kubernetes_version = 1.32.4
 helm_version = 3.11.1
 kubernetes_buildimage = $(golang_buildimage)
 kubernetes_build_go_tags = "providerless"
diff --git a/go.mod b/go.mod
@@ -63,21 +63,21 @@ require (
 
 // Kubernetes
 require (
-	k8s.io/api v0.32.3
-	k8s.io/apiextensions-apiserver v0.32.3
-	k8s.io/apimachinery v0.32.3
-	k8s.io/cli-runtime v0.32.3
-	k8s.io/client-go v0.32.3
-	k8s.io/cloud-provider v0.32.3
-	k8s.io/cluster-bootstrap v0.32.3
-	k8s.io/component-base v0.32.3
-	k8s.io/component-helpers v0.32.3
-	k8s.io/cri-api v0.32.3
-	k8s.io/kube-aggregator v0.32.3
-	k8s.io/kubectl v0.32.3
-	k8s.io/kubelet v0.32.3
-	k8s.io/kubernetes v1.32.3
-	k8s.io/mount-utils v0.32.3
+	k8s.io/api v0.32.4
+	k8s.io/apiextensions-apiserver v0.32.4
+	k8s.io/apimachinery v0.32.4
+	k8s.io/cli-runtime v0.32.4
+	k8s.io/client-go v0.32.4
+	k8s.io/cloud-provider v0.32.4
+	k8s.io/cluster-bootstrap v0.32.4
+	k8s.io/component-base v0.32.4
+	k8s.io/component-helpers v0.32.4
+	k8s.io/cri-api v0.32.4
+	k8s.io/kube-aggregator v0.32.4
+	k8s.io/kubectl v0.32.4
+	k8s.io/kubelet v0.32.4
+	k8s.io/kubernetes v1.32.4
+	k8s.io/mount-utils v0.32.4
 	k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738
 	sigs.k8s.io/controller-runtime v0.20.4
 	sigs.k8s.io/yaml v1.4.0
@@ -272,12 +272,12 @@ require (
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiserver v0.32.3 // indirect
-	k8s.io/controller-manager v0.32.3 // indirect
+	k8s.io/apiserver v0.32.4 // indirect
+	k8s.io/controller-manager v0.32.4 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kms v0.32.3 // indirect
+	k8s.io/kms v0.32.4 // indirect
 	k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f // indirect
-	k8s.io/metrics v0.32.3 // indirect
+	k8s.io/metrics v0.32.4 // indirect
 	oras.land/oras-go v1.2.5 // indirect
 	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.32.0 // indirect
 	sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
@@ -289,36 +289,36 @@ require (
 
 // Replacements duplicated from upstream Kubernetes
 replace (
-	// https://github.com/kubernetes/kubernetes/blob/v1.32.3/go.mod#L225-L257
-	k8s.io/api => k8s.io/api v0.32.3
-	k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.32.3
-	k8s.io/apimachinery => k8s.io/apimachinery v0.32.3
-	k8s.io/apiserver => k8s.io/apiserver v0.32.3
-	k8s.io/cli-runtime => k8s.io/cli-runtime v0.32.3
-	k8s.io/client-go => k8s.io/client-go v0.32.3
-	k8s.io/cloud-provider => k8s.io/cloud-provider v0.32.3
-	k8s.io/cluster-bootstrap => k8s.io/cluster-bootstrap v0.32.3
-	k8s.io/code-generator => k8s.io/code-generator v0.32.3
-	k8s.io/component-base => k8s.io/component-base v0.32.3
-	k8s.io/component-helpers => k8s.io/component-helpers v0.32.3
-	k8s.io/controller-manager => k8s.io/controller-manager v0.32.3
-	k8s.io/cri-api => k8s.io/cri-api v0.32.3
-	k8s.io/cri-client => k8s.io/cri-client v0.32.3
-	k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.32.3
-	k8s.io/dynamic-resource-allocation => k8s.io/dynamic-resource-allocation v0.32.3
-	k8s.io/endpointslice => k8s.io/endpointslice v0.32.3
-	k8s.io/externaljwt => k8s.io/externaljwt v0.32.3
-	k8s.io/kms => k8s.io/kms v0.32.3
-	k8s.io/kube-aggregator => k8s.io/kube-aggregator v0.32.3
-	k8s.io/kube-controller-manager => k8s.io/kube-controller-manager v0.32.3
-	k8s.io/kube-proxy => k8s.io/kube-proxy v0.32.3
-	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.3
-	k8s.io/kubectl => k8s.io/kubectl v0.32.3
-	k8s.io/kubelet => k8s.io/kubelet v0.32.3
-	k8s.io/metrics => k8s.io/metrics v0.32.3
-	k8s.io/mount-utils => k8s.io/mount-utils v0.32.3
-	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.3
-	k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.32.3
-	k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.32.3
-	k8s.io/sample-controller => k8s.io/sample-controller v0.32.3
+	// https://github.com/kubernetes/kubernetes/blob/v1.32.4/go.mod#L225-L257
+	k8s.io/api => k8s.io/api v0.32.4
+	k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.32.4
+	k8s.io/apimachinery => k8s.io/apimachinery v0.32.4
+	k8s.io/apiserver => k8s.io/apiserver v0.32.4
+	k8s.io/cli-runtime => k8s.io/cli-runtime v0.32.4
+	k8s.io/client-go => k8s.io/client-go v0.32.4
+	k8s.io/cloud-provider => k8s.io/cloud-provider v0.32.4
+	k8s.io/cluster-bootstrap => k8s.io/cluster-bootstrap v0.32.4
+	k8s.io/code-generator => k8s.io/code-generator v0.32.4
+	k8s.io/component-base => k8s.io/component-base v0.32.4
+	k8s.io/component-helpers => k8s.io/component-helpers v0.32.4
+	k8s.io/controller-manager => k8s.io/controller-manager v0.32.4
+	k8s.io/cri-api => k8s.io/cri-api v0.32.4
+	k8s.io/cri-client => k8s.io/cri-client v0.32.4
+	k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.32.4
+	k8s.io/dynamic-resource-allocation => k8s.io/dynamic-resource-allocation v0.32.4
+	k8s.io/endpointslice => k8s.io/endpointslice v0.32.4
+	k8s.io/externaljwt => k8s.io/externaljwt v0.32.4
+	k8s.io/kms => k8s.io/kms v0.32.4
+	k8s.io/kube-aggregator => k8s.io/kube-aggregator v0.32.4
+	k8s.io/kube-controller-manager => k8s.io/kube-controller-manager v0.32.4
+	k8s.io/kube-proxy => k8s.io/kube-proxy v0.32.4
+	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.4
+	k8s.io/kubectl => k8s.io/kubectl v0.32.4
+	k8s.io/kubelet => k8s.io/kubelet v0.32.4
+	k8s.io/metrics => k8s.io/metrics v0.32.4
+	k8s.io/mount-utils => k8s.io/mount-utils v0.32.4
+	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.4
+	k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.32.4
+	k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.32.4
+	k8s.io/sample-controller => k8s.io/sample-controller v0.32.4
 )
diff --git a/go.sum b/go.sum
@@ -828,48 +828,48 @@ helm.sh/helm/v3 v3.17.3 h1:3n5rW3D0ArjFl0p4/oWO8IbY/HKaNNwJtOQFdH2AZHg=
 helm.sh/helm/v3 v3.17.3/go.mod h1:+uJKMH/UiMzZQOALR3XUf3BLIoczI2RKKD6bMhPh4G8=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
-k8s.io/api v0.32.3 h1:Hw7KqxRusq+6QSplE3NYG4MBxZw1BZnq4aP4cJVINls=
-k8s.io/api v0.32.3/go.mod h1:2wEDTXADtm/HA7CCMD8D8bK4yuBUptzaRhYcYEEYA3k=
-k8s.io/apiextensions-apiserver v0.32.3 h1:4D8vy+9GWerlErCwVIbcQjsWunF9SUGNu7O7hiQTyPY=
-k8s.io/apiextensions-apiserver v0.32.3/go.mod h1:8YwcvVRMVzw0r1Stc7XfGAzB/SIVLunqApySV5V7Dss=
-k8s.io/apimachinery v0.32.3 h1:JmDuDarhDmA/Li7j3aPrwhpNBA94Nvk5zLeOge9HH1U=
-k8s.io/apimachinery v0.32.3/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
-k8s.io/apiserver v0.32.3 h1:kOw2KBuHOA+wetX1MkmrxgBr648ksz653j26ESuWNY8=
-k8s.io/apiserver v0.32.3/go.mod h1:q1x9B8E/WzShF49wh3ADOh6muSfpmFL0I2t+TG0Zdgc=
-k8s.io/cli-runtime v0.32.3 h1:khLF2ivU2T6Q77H97atx3REY9tXiA3OLOjWJxUrdvss=
-k8s.io/cli-runtime v0.32.3/go.mod h1:vZT6dZq7mZAca53rwUfdFSZjdtLyfF61mkf/8q+Xjak=
-k8s.io/client-go v0.32.3 h1:RKPVltzopkSgHS7aS98QdscAgtgah/+zmpAogooIqVU=
-k8s.io/client-go v0.32.3/go.mod h1:3v0+3k4IcT9bXTc4V2rt+d2ZPPG700Xy6Oi0Gdl2PaY=
-k8s.io/cloud-provider v0.32.3 h1:WC7KhWrqXsU4b0E4tjS+nBectGiJbr1wuc1TpWXvtZM=
-k8s.io/cloud-provider v0.32.3/go.mod h1:/fwBfgRPuh16n8vLHT+PPT+Bc4LAEaJYj38opO2wsYY=
-k8s.io/cluster-bootstrap v0.32.3 h1:AqIpsUhB6MUeaAsl1WvaUw54AHRd2hfZrESlKChtd8s=
-k8s.io/cluster-bootstrap v0.32.3/go.mod h1:CHbBwgOb6liDV6JFUTkx5t85T2xidy0sChBDoyYw344=
-k8s.io/component-base v0.32.3 h1:98WJvvMs3QZ2LYHBzvltFSeJjEx7t5+8s71P7M74u8k=
-k8s.io/component-base v0.32.3/go.mod h1:LWi9cR+yPAv7cu2X9rZanTiFKB2kHA+JjmhkKjCZRpI=
-k8s.io/component-helpers v0.32.3 h1:9veHpOGTPLluqU4hAu5IPOwkOIZiGAJUhHndfVc5FT4=
-k8s.io/component-helpers v0.32.3/go.mod h1:utTBXk8lhkJewBKNuNf32Xl3KT/0VV19DmiXU/SV4Ao=
-k8s.io/controller-manager v0.32.3 h1:jBxZnQ24k6IMeWLyxWZmpa3QVS7ww+osAIzaUY/jqyc=
-k8s.io/controller-manager v0.32.3/go.mod h1:out1L3DZjE/p7JG0MoMMIaQGWIkt3c+pKaswqSHgKsI=
-k8s.io/cri-api v0.32.3 h1:E8VXbXNn4yAgmuKTeNzg0C1MFSxzTdlHSwUvjuYlPTY=
-k8s.io/cri-api v0.32.3/go.mod h1:DCzMuTh2padoinefWME0G678Mc3QFbLMF2vEweGzBAI=
+k8s.io/api v0.32.4 h1:kw8Y/G8E7EpNy7gjB8gJZl3KJkNz8HM2YHrZPtAZsF4=
+k8s.io/api v0.32.4/go.mod h1:5MYFvLvweRhyKylM3Es/6uh/5hGp0dg82vP34KifX4g=
+k8s.io/apiextensions-apiserver v0.32.4 h1:IA+CoR63UDOijR/vEpow6wQnX4V6iVpzazJBskHrpHE=
+k8s.io/apiextensions-apiserver v0.32.4/go.mod h1:Y06XO/b92H8ymOdG1HlA1submf7gIhbEDc3RjriqZOs=
+k8s.io/apimachinery v0.32.4 h1:8EEksaxA7nd7xWJkkwLDN4SvWS5ot9g6Z/VZb3ju25I=
+k8s.io/apimachinery v0.32.4/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
+k8s.io/apiserver v0.32.4 h1:Yf7sd/y+GOQKH1Qf6wUeayZrYXe2SKZ17Bcq7VQM5HQ=
+k8s.io/apiserver v0.32.4/go.mod h1:JFUMNtE2M5yqLZpIsgCb06SkVSW1YcxW1oyLSTfjXR8=
+k8s.io/cli-runtime v0.32.4 h1:5O9eC50+yFFODAan3QXeTJHtoe69ie/A9vWBITIn+KM=
+k8s.io/cli-runtime v0.32.4/go.mod h1:Zn7nvBY625sEEYGtTMMPS619nrmVxabGssHyAKFK7RA=
+k8s.io/client-go v0.32.4 h1:zaGJS7xoYOYumoWIFXlcVrsiYioRPrXGO7dBfVC5R6M=
+k8s.io/client-go v0.32.4/go.mod h1:k0jftcyYnEtwlFW92xC7MTtFv5BNcZBr+zn9jPlT9Ic=
+k8s.io/cloud-provider v0.32.4 h1:se7sCVBKVpaSV5IJh5ep7BBuxs77982Vl9vVACLteG0=
+k8s.io/cloud-provider v0.32.4/go.mod h1:ht1l2mdgYjvyEwvlWRDZflZyGgomlJE3zJMLlFMHIKA=
+k8s.io/cluster-bootstrap v0.32.4 h1:QO2rZ1KDLHaa3WKgpF3P26/5AKLFViMt0jUJptylCgs=
+k8s.io/cluster-bootstrap v0.32.4/go.mod h1:+O5BK2t/VxGXcPPOn+SlpFrC0x78nnW6jnPI2MRhdz8=
+k8s.io/component-base v0.32.4 h1:HuF+2JVLbFS5GODLIfPCb1Td6b+G2HszJoArcWOSr5I=
+k8s.io/component-base v0.32.4/go.mod h1:10KloJEYw1keU/Xmjfy9TKJqUq7J2mYdiD1VDXoco4o=
+k8s.io/component-helpers v0.32.4 h1:pZ7LYWpyqqg4j5cWqpGSgenXYWF2JXe6dgdy7MZufqU=
+k8s.io/component-helpers v0.32.4/go.mod h1:p9iLmy15AWoh3TM+B0g7rRuNk68ZSByLxtgm3uYI84I=
+k8s.io/controller-manager v0.32.4 h1:d28eOhPJyK+dBNpx1hTnuLBpAoXBjCknDAiajaK2hKk=
+k8s.io/controller-manager v0.32.4/go.mod h1:WCczuc0Npi1EsS4adruBaeknzhXQ/DhFZe5zII7RpUc=
+k8s.io/cri-api v0.32.4 h1:Qa+KKknvf1widc4oZRFegrmdsdumqfkKOB6CEG7enUA=
+k8s.io/cri-api v0.32.4/go.mod h1:DCzMuTh2padoinefWME0G678Mc3QFbLMF2vEweGzBAI=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
-k8s.io/kms v0.32.3 h1:HhHw5+pRCzEJp3oFFJ1q5W2N6gAI7YkUg4ay4Z0dgwM=
-k8s.io/kms v0.32.3/go.mod h1:Bk2evz/Yvk0oVrvm4MvZbgq8BD34Ksxs2SRHn4/UiOM=
-k8s.io/kube-aggregator v0.32.3 h1:j+lUE4V1sMANYv/wCdU2E8SgnSLJksaJ+6bNnoV6Pfs=
-k8s.io/kube-aggregator v0.32.3/go.mod h1:aAl5az9Rlq4sPPSf8/ckpDGSYit75g4g1dp6rKInXZM=
+k8s.io/kms v0.32.4 h1:nC9NhpuHDyiq8I/ryn9rRDckYtbqBI9h80446QEMKxY=
+k8s.io/kms v0.32.4/go.mod h1:Bk2evz/Yvk0oVrvm4MvZbgq8BD34Ksxs2SRHn4/UiOM=
+k8s.io/kube-aggregator v0.32.4 h1:4ma+w6nwvc2nsMohZtVcEGWCI8ro4tVKbuxCx3qBMbI=
+k8s.io/kube-aggregator v0.32.4/go.mod h1:2mtQeDk9CUqFDCNRn+dBLVzIR2a2eJ9KnEwqfTkxpJU=
 k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f h1:GA7//TjRY9yWGy1poLzYYJJ4JRdzg3+O6e8I+e+8T5Y=
 k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f/go.mod h1:R/HEjbvWI0qdfb8viZUeVZm0X6IZnxAydC7YU42CMw4=
-k8s.io/kubectl v0.32.3 h1:VMi584rbboso+yjfv0d8uBHwwxbC438LKq+dXd5tOAI=
-k8s.io/kubectl v0.32.3/go.mod h1:6Euv2aso5GKzo/UVMacV6C7miuyevpfI91SvBvV9Zdg=
-k8s.io/kubelet v0.32.3 h1:B9HzW4yB67flx8tN2FYuDwZvxnmK3v5EjxxFvOYjmc8=
-k8s.io/kubelet v0.32.3/go.mod h1:yyAQSCKC+tjSlaFw4HQG7Jein+vo+GeKBGdXdQGvL1U=
-k8s.io/kubernetes v1.32.3 h1:2A58BlNME8NwsMawmnM6InYo3Jf35Nw5G79q46kXwoA=
-k8s.io/kubernetes v1.32.3/go.mod h1:GvhiBeolvSRzBpFlgM0z/Bbu3Oxs9w3P6XfEgYaMi8k=
-k8s.io/metrics v0.32.3 h1:2vsBvw0v8rIIlczZ/lZ8Kcqk9tR6Fks9h+dtFNbc2a4=
-k8s.io/metrics v0.32.3/go.mod h1:9R1Wk5cb+qJpCQon9h52mgkVCcFeYxcY+YkumfwHVCU=
-k8s.io/mount-utils v0.32.3 h1:ZPXXHblfBhYP89OnaozpFg9Ojl6HhDfxBLcdWNkaxW8=
-k8s.io/mount-utils v0.32.3/go.mod h1:Kun5c2svjAPx0nnvJKYQWhfeNW+O0EpzHgRhDcYoSY0=
+k8s.io/kubectl v0.32.4 h1:PhiS4JgnJE6/JcksIJHAQI41F4hwJ270UopbcDsutF0=
+k8s.io/kubectl v0.32.4/go.mod h1:XYFDrC1l3cpjWRj7UfS0LDAMlK+6eTema28NeUYFKD8=
+k8s.io/kubelet v0.32.4 h1:aYjgRQYIsogtBFu+9BzJGKCT5iw8b7vg5BNkV39H+5c=
+k8s.io/kubelet v0.32.4/go.mod h1:IHKF2BECx8V36b0T/IFg6Y1omKaFgbcUHoSMnIvA2iE=
+k8s.io/kubernetes v1.32.4 h1:fRZeSjwVE+dMMSS7Qi6LxOOKpVL+1CPAT/b1Cuo4kns=
+k8s.io/kubernetes v1.32.4/go.mod h1:GvhiBeolvSRzBpFlgM0z/Bbu3Oxs9w3P6XfEgYaMi8k=
+k8s.io/metrics v0.32.4 h1:R5mFVB7479sY/3+ioi2pPWC5mNu3TKEE/FpP5l+5P6c=
+k8s.io/metrics v0.32.4/go.mod h1:7RJ/A8hHSVY3LZvRzYSLqcl/0Xe1WbEkxt8zE/RzfYs=
+k8s.io/mount-utils v0.32.4 h1:Tgvgr70qGXY8zRftMAHHGVUky51NN7wvNyTBbMOMEsE=
+k8s.io/mount-utils v0.32.4/go.mod h1:Kun5c2svjAPx0nnvJKYQWhfeNW+O0EpzHgRhDcYoSY0=
 k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 h1:M3sRQVHv7vB20Xc2ybTt7ODCeFj6JSWYFzOFnYeS6Ro=
 k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 oras.land/oras-go v1.2.5 h1:XpYuAwAb0DfQsunIyMfeET92emK8km3W4yEzZvUbsTo=
diff --git a/hack/tool/go.mod b/hack/tool/go.mod
@@ -1,4 +1,4 @@
-module tool
+module github.com/k0sproject/k0s/hack/tool
 
 go 1.23.2
 
@@ -85,8 +85,8 @@ require (
 	golang.org/x/time v0.10.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
-	k8s.io/apimachinery v0.32.3 // indirect
-	k8s.io/client-go v0.32.3 // indirect
+	k8s.io/apimachinery v0.32.4 // indirect
+	k8s.io/client-go v0.32.4 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
diff --git a/hack/tool/go.sum b/hack/tool/go.sum
@@ -323,12 +323,12 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.32.3 h1:Hw7KqxRusq+6QSplE3NYG4MBxZw1BZnq4aP4cJVINls=
-k8s.io/api v0.32.3/go.mod h1:2wEDTXADtm/HA7CCMD8D8bK4yuBUptzaRhYcYEEYA3k=
-k8s.io/apimachinery v0.32.3 h1:JmDuDarhDmA/Li7j3aPrwhpNBA94Nvk5zLeOge9HH1U=
-k8s.io/apimachinery v0.32.3/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
-k8s.io/client-go v0.32.3 h1:RKPVltzopkSgHS7aS98QdscAgtgah/+zmpAogooIqVU=
-k8s.io/client-go v0.32.3/go.mod h1:3v0+3k4IcT9bXTc4V2rt+d2ZPPG700Xy6Oi0Gdl2PaY=
+k8s.io/api v0.32.4 h1:kw8Y/G8E7EpNy7gjB8gJZl3KJkNz8HM2YHrZPtAZsF4=
+k8s.io/api v0.32.4/go.mod h1:5MYFvLvweRhyKylM3Es/6uh/5hGp0dg82vP34KifX4g=
+k8s.io/apimachinery v0.32.4 h1:8EEksaxA7nd7xWJkkwLDN4SvWS5ot9g6Z/VZb3ju25I=
+k8s.io/apimachinery v0.32.4/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
+k8s.io/client-go v0.32.4 h1:zaGJS7xoYOYumoWIFXlcVrsiYioRPrXGO7dBfVC5R6M=
+k8s.io/client-go v0.32.4/go.mod h1:k0jftcyYnEtwlFW92xC7MTtFv5BNcZBr+zn9jPlT9Ic=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
 k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f h1:GA7//TjRY9yWGy1poLzYYJJ4JRdzg3+O6e8I+e+8T5Y=
diff --git a/inttest/sonobuoy/README.md b/inttest/sonobuoy/README.md
@@ -61,7 +61,7 @@ spec:
       user: "ubuntu"
     uploadBinary: true
   k0s:
-    version: "1.32.3+k0s.0"
+    version: "1.32.4+k0s.0"
 ```
 
 To deploy a k0s cluster on the AWS machine, run:
@@ -98,9 +98,9 @@ INFO ==> Running phase: Gather host facts
 .
 .
 .
-INFO [ssh] 3.250.52.147:22: uploading k0s binary from /home/ubuntu/.cache/k0sctl/k0s/linux/amd64/k0s-v1.32.3+k0s.0
-INFO [ssh] 63.32.21.232:22: uploading k0s binary from /home/ubuntu/.cache/k0sctl/k0s/linux/amd64/k0s-v1.32.3+k0s.0
-INFO [ssh] 54.216.71.108:22: uploading k0s binary from /home/ubuntu/.cache/k0sctl/k0s/linux/amd64/k0s-v1.32.3+k0s.0
+INFO [ssh] 3.250.52.147:22: uploading k0s binary from /home/ubuntu/.cache/k0sctl/k0s/linux/amd64/k0s-v1.32.4+k0s.0
+INFO [ssh] 63.32.21.232:22: uploading k0s binary from /home/ubuntu/.cache/k0sctl/k0s/linux/amd64/k0s-v1.32.4+k0s.0
+INFO [ssh] 54.216.71.108:22: uploading k0s binary from /home/ubuntu/.cache/k0sctl/k0s/linux/amd64/k0s-v1.32.4+k0s.0
 INFO ==> Running phase: Configure k0s
 WARN [ssh] 63.32.21.232:22: generating default configuration
 INFO [ssh] 63.32.21.232:22: validating configuration
@@ -124,7 +124,7 @@ INFO [ssh] 3.250.52.147:22: waiting for node to become ready
 INFO ==> Running phase: Release exclusive host lock
 INFO ==> Running phase: Disconnect from hosts
 INFO ==> Finished in 1m42s
-INFO k0s cluster version v1.32.3+k0s.0 is now installed
+INFO k0s cluster version v1.32.4+k0s.0 is now installed
 INFO Tip: To access the cluster you can now fetch the admin kubeconfig using:
 INFO      k0sctl kubeconfig
 ```
@@ -152,7 +152,7 @@ Example Output:
 /home/ubuntu/k0s/inttest/bin/sonobuoy run --wait=1200 \
         --mode=certified-conformance \
         --plugin-env=e2e.E2E_EXTRA_ARGS="--ginkgo.v" \
-        --kubernetes-version=v1.32.3
+        --kubernetes-version=v1.32.4
 INFO[0000] create request issued                         name=sonobuoy namespace= resource=namespaces
 INFO[0000] create request issued                         name=sonobuoy-serviceaccount namespace=sonobuoy resource=serviceaccounts
 INFO[0000] create request issued                         name=sonobuoy-serviceaccount-sonobuoy namespace= resource=clusterrolebindings
diff --git a/inttest/update-server/html/unstable/index.yaml b/inttest/update-server/html/unstable/index.yaml
@@ -1,5 +1,5 @@
 name: unstable
-version: v1.32.3+k0s.0
+version: v1.32.4+k0s.0
 downloadURLs:
   k0s:
     linux-amd64: ..../k0s-amd64
diff --git a/pkg/apis/k0s/v1beta1/kubeproxy.go b/pkg/apis/k0s/v1beta1/kubeproxy.go
@@ -49,7 +49,7 @@ type KubeProxy struct {
 }
 
 // KubeProxyIPTablesConfiguration contains iptables-related kube-proxy configuration
-// @see https://github.com/kubernetes/kube-proxy/blob/v0.32.3/config/v1alpha1/types.go#L27-L48
+// @see https://github.com/kubernetes/kube-proxy/blob/v0.32.4/config/v1alpha1/types.go#L27-L48
 type KubeProxyIPTablesConfiguration struct {
 	MasqueradeBit      *int32          `json:"masqueradeBit,omitempty"`
 	MasqueradeAll      bool            `json:"masqueradeAll,omitempty"`
@@ -59,7 +59,7 @@ type KubeProxyIPTablesConfiguration struct {
 }
 
 // KubeProxyIPVSConfiguration contains ipvs-related kube-proxy configuration
-// @see https://github.com/kubernetes/kube-proxy/blob/v0.32.3/config/v1alpha1/types.go#L52-L78
+// @see https://github.com/kubernetes/kube-proxy/blob/v0.32.4/config/v1alpha1/types.go#L52-L78
 type KubeProxyIPVSConfiguration struct {
 	SyncPeriod    metav1.Duration `json:"syncPeriod,omitempty"`
 	MinSyncPeriod metav1.Duration `json:"minSyncPeriod,omitempty"`
@@ -72,7 +72,7 @@ type KubeProxyIPVSConfiguration struct {
 }
 
 // KubeProxyNFTablesConfiguration contains nftables-related kube-proxy configuration
-// @see https://github.com/kubernetes/kube-proxy/blob/v0.32.3/config/v1alpha1/types.go#L82-L97
+// @see https://github.com/kubernetes/kube-proxy/blob/v0.32.4/config/v1alpha1/types.go#L82-L97
 type KubeProxyNFTablesConfiguration struct {
 	SyncPeriod    metav1.Duration `json:"syncPeriod,omitempty"`
 	MasqueradeBit *int32          `json:"masqueradeBit,omitempty"`
diff --git a/pkg/component/worker/kubelet.go b/pkg/component/worker/kubelet.go
diff --git a/pkg/constant/constant.go b/pkg/constant/constant.go
diff --git a/static/_crds/k0s/k0s.k0sproject.io_clusterconfigs.yaml b/static/_crds/k0s/k0s.k0sproject.io_clusterconfigs.yaml
