Charmed Kubeflow 1.11

Note

Release date: April 13th, 2026

This page contains the release notes for Charmed Kubeflow (CKF) 1.11.

See Kubeflow 1.11.0 for details on the upstream Kubeflow release notes. In comparison with the upstream Kubeflow project, CKF:

• Uses OIDC-Authservice for authentication.

• Does not include the Model registry and Spark operator components.

The Charmed Kubeflow 1.11 release has been validated on K8s versions 1.32, 1.33 and 1.34, also validating GPU acceleration on NVIDIA A10 and Tesla GPU architectures.

What’s new

• Enabled the configuration of user workloads security policies. See Configure user workloads to run unprivileged for more information.

• Enabled backup of control plane data and user workloads using Charmed Velero. See Back up for more information.

• Introduced Kubeflow Trainer V2, working alongside Kubeflow Trainer V1.

Highlights

• Charms and workloads now run as unprivileged in the cluster.

Upgrades

• Argo upgraded to 3.7.3 (previously 3.5.14).

• Istio upgraded to 1.28 (previously 1.24).

• KServe upgraded to 0.15.2 (previously 0.14.1).

• Pipelines upgraded to 2.15.0 (previously 2.5.0).

• Support for Kubernetes 1.32-1.33.

Features

• Enhanced security by running the following charms and workloads as unprivileged:

  • Admission webhook (#230, #239)

  • Argo (#300)

  • Dashboard (#307)

  • Dex (#291)

  • Envoy (#192, #200)

  • Istio (#665)

  • Jupyter Notebooks (#522, #537)

  • Katib (#362, #390)

  • Knative (#393)

  • Metacontroller (#201)

  • Minio (#279)

  • ML Metadata (#159, #167)

  • OIDC-Authservice (#232)

  • Pipelines (#809, #851, #852, #853, #856)

  • Profiles (#277)

  • PVC Viewer (#119)

  • Tensorboards (#226)

  • Trainer (#284)

  • Training operator (#282)

  • Volumes (#227, #235)

Bug fixes

• Fixed an issue in argo charm alert rules causing an alert to be always fired in transient conditions (#310)

• Fixed an issue in kserve charm preventing its graceful removal (#414)

Deprecated

• The use of Kubeflow Pipelines SDK v1 is deprecated. Please migrate your existing v1 pipelines to v2 following the migration instructions. SDK v1 can still be used but Canonical does not provide support, patches or fixes related to its use.

• Removed create-profile and initialise-profile actions from kubeflow-profiles (#210). For managing profiles in CKF 1.11, see Manage profiles.