KubeEdge v1.21.2

A stability and security-focused patch release that prioritizes the hardening of edge node management. This update significantly mitigates risks associated with remote command execution and path traversal, while improving the reliability of node upgrade workflows and the communication layer within the KubeEdge ecosystem.

Security Hardening for Node and Configuration Management — This patch addresses critical security vulnerabilities including command injection risks and path traversal during file extraction, which are vital for maintaining the integrity of edge nodes in remote or untrusted environments.

Improved Reliability for Node Lifecycle Operations — Critical bug fixes in NodeUpgradeJob and the task runner registration ensure more reliable automated updates for edge nodes, reducing the risk of nodes becoming unresponsive or stuck during lifecycle operations.

Communication Security: Viaduct Payload Limits — By limiting the allowed size of data packets, KubeEdge is now better protected against potential denial-of-service (DoS) attacks that could overwhelm edge communication channels.

Tooling and Mapper Framework Stability Improvements — Updates to keadm and the mapper-framework improve the toolset used to configure edge nodes and integrate physical devices, ensuring numeric configurations are correctly handled.