Mirantis k0rdent Enterprise v1.3.1 Release Notes#
Released: April 22, 2026
Mirantis k0rdent Enterprise builds on the upstream, community-driven k0rdent OSS project to provide a commercially supported, enterprise-grade environment for managing Kubernetes clusters, services, and observability. While the open source k0rdent delivers core functionality under the Apache 2.0 license, Mirantis k0rdent Enterprise adds hardened components, tested integrations, and enterprise-only features—including a fully-featured UI, the ability to add a custom certificate authority, and bare metal provisioning.
Component & Provider Versions#
| Provider Name | Version |
|---|---|
| Cluster API | v1.12.3 |
| Cluster API Provider AWS | v2.10.0 |
| Cluster API Provider Azure | v1.21.1 |
| Cluster API Provider Docker | v1.12.3 |
| Cluster API Provider GCP | v1.11.0 |
| Cluster API Provider Infoblox | v0.1.0 |
| Cluster API Provider IPAM | v1.1.0-rc.1 |
| Cluster API Provider k0smotron | v1.10.3 |
| Cluster API Provider Kubevirt | v0.11.0 |
| Cluster API Provider OpenStack (ORC) | v0.13.0-mirantis.0 (v2.1.0) |
| Cluster API Provider vSphere | v1.15.1 |
| Projectsveltos | v1.1.1 |
| k0s (control plane runtime) | 1.35.1 |
| cert-manager (charts) | v1.19.3 |
Grafana not Included#
Effective immediately, Mirantis will no longer distribute Grafana as part of its products or services. This change is being made to proactively avoid potential licensing, redistribution, or compliance considerations related to third-party software.
Grafana dashboards and grafana-operator (for installation and lifecycle management of Grafana on the k0rdent Enterprise management cluster or on child clusters) will still be shipped as part of k0rdent Observability & FinOps (KOF), an optional component of k0rdent Enterprise. For more information, please contact Mirantis.
For instructions on how to install Grafana locally and integrate with Mirantis Grafana dashboards and grafana-operator, please see Grafana in KOF.
Highlights#
-
Gateway API Adoption for Observability and FinOps This release is focused on the change in k0rdent Observability and Finops from NGINX Ingress to Gateway API, replacing a controller-specific, annotation-heavy model with a standardized, role-based networking API that separates infrastructure (Gateways) from application routing (Routes). This gives users more consistent and portable configuration, stronger multi-tenant and multi-cluster support, and access to richer traffic management features without relying on custom extensions—while aligning with the future direction of Kubernetes networking.
-
Stronger security posture out of the box This release adopts distroless images for Envoy, reducing the runtime attack surface and aligning with modern container hardening practices. By eliminating unnecessary OS-level components, the platform minimizes exposure to common vulnerabilities while maintaining production-grade functionality. This is particularly relevant for organizations with strict security and compliance requirements.
-
More reliable platform behavior under real-world conditions Fixes to dependency resolution address recursion issues that could previously lead to unstable or unpredictable behavior during deployments. The system now handles invalid or complex dependency graphs more deterministically, reducing the risk of silent failures and improving confidence in automated workflows.
-
Greater control over ingress and cost observability Enhancements to Envoy Gateway configuration and expanded OpenCost overrides provide more precise control over how traffic is routed and how infrastructure costs are measured. These changes enable teams to better tune ingress behavior and align cost visibility with real usage patterns, supporting more effective operational and financial management.
-
Platform consistency across lifecycle, observability, and networking Coordinated upgrades to kcm, kof, and istio ensure that core platform components remain compatible and aligned. This reduces version drift across lifecycle management, observability, and networking layers, lowering integration risk and simplifying ongoing maintenance. The result is a more predictable and stable platform foundation for production environments.
❗ Upgrade Notes ❗#
k0rdent Observability and FinOps (KOF)#
KOF Enterprise v1.3.1 replaces Nginx Ingress with Envoy Gateway by introducing Gateway API support, requiring users to update their Helm values to disable ingress-nginx and enable envoy-gateway before upgrading. This change may cause temporary downtime due to DNS propagation unless a parallel regional cluster migration is used to avoid disruption. The upgrade process involves exporting current Helm values, modifying them for the new gateway configuration, handling DNS updates (automatically or manually), and then performing a Helm upgrade with the updated configuration and registry settings.
For full information on upgrading to KOF 1.8.1, see the full documentation.
Known Issues#
No known issues.
Release Metadata#
| Key | Value |
|---|---|
| Helm Charts | kcm: 1.3.1, kof: 1.8.1 |
| OCI Registry | registry.mirantis.com/k0rdent-enterprise/ |
| SBOM | Included |
| OCI Signature Support | Included |
| Release Tags | v1.3.1 across all components |
Resources#
Try It Out#
QuickStart guide: https://docs.mirantis.com/k0rdent-enterprise/1.3.1/quickstarts