kubernetes · kubernetes-prow · Jul 30, 2026 · Jul 30, 2026 · Jul 30, 2026 · Jul 30, 2026
diff --git a/pkg/apis/nodeup/config.go b/pkg/apis/nodeup/config.go
@@ -137,10 +137,7 @@ type Config struct {
 	Openstack *kops.OpenstackSpec `json:",omitempty"`
 
 	// Discovery methods
-	// UsesLegacyGossip is retained for nodeup config wire compatibility.
-	// Deprecated: gossip DNS support was removed in kOps 1.37.
-	UsesLegacyGossip bool `json:"usesLegacyGossip"`
-	UsesNoneDNS      bool `json:"usesNoneDNS"`
+	UsesNoneDNS bool `json:"usesNoneDNS"`
 
 	// DiscoveryService implements discovery using a hosted discovery service.
 	DiscoveryService *DiscoveryServiceOptions `json:"discoveryServiceWithUniverse,omitempty"`
@@ -249,7 +246,6 @@ func NewConfig(cluster *kops.Cluster, instanceGroup *kops.InstanceGroup) (*Confi
 		VolumeMounts:         instanceGroup.Spec.VolumeMounts,
 		FileAssets:           append(filterFileAssets(instanceGroup.Spec.FileAssets, role), filterFileAssets(cluster.Spec.FileAssets, role)...),
 		Hooks:                [][]kops.HookSpec{igHooks, clusterHooks},
-		UsesLegacyGossip:     cluster.UsesLegacyGossip(),
 		UsesNoneDNS:          cluster.UsesNoneDNS(),
 	}
 

diff --git a/pkg/assets/mirrors.go b/pkg/assets/mirrors.go
@@ -60,8 +60,6 @@ func (m *mirrorConfig) findMirrors(u string) ([]string, bool) {
 			suffix = strings.ReplaceAll(suffix, "/", "-")
 			suffix = strings.ReplaceAll(suffix, "linux-amd64-nodeup", "nodeup-linux-amd64")
 			suffix = strings.ReplaceAll(suffix, "linux-arm64-nodeup", "nodeup-linux-arm64")
-			suffix = strings.ReplaceAll(suffix, "linux-amd64-protokube", "protokube-linux-amd64")
-			suffix = strings.ReplaceAll(suffix, "linux-arm64-protokube", "protokube-linux-arm64")
 		}
 
 		mirrors = append(mirrors, mirror+suffix)

diff --git a/pkg/model/tests/data/bootstrapscript_0.txt b/pkg/model/tests/data/bootstrapscript_0.txt
@@ -140,7 +140,7 @@ cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 CloudProvider: aws
 InstanceGroupName: testIG
 InstanceGroupRole: ControlPlane
-NodeupConfigHash: fAxvqbU++fBpT6SIjMMeXWlQ4oHqL/M8N7AaaJkOPOM=
+NodeupConfigHash: PAsanfC0j/cnB+GgX3aV1aXBGFK7vYddRpJ2ZBTotO0=
 
 __EOF_KUBE_ENV
 

diff --git a/pkg/model/tests/data/bootstrapscript_1.txt b/pkg/model/tests/data/bootstrapscript_1.txt
@@ -140,7 +140,7 @@ cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 CloudProvider: aws
 InstanceGroupName: testIG
 InstanceGroupRole: ControlPlane
-NodeupConfigHash: N0d3Il7CeGYFi32ZDb4i3iftzUD6swJ3F/tZf8d1bZY=
+NodeupConfigHash: /xicRZCxNOwNU9MLpHkw2F+ehPH1Sb6ZTdADbaK5SK8=
 
 __EOF_KUBE_ENV
 

diff --git a/pkg/model/tests/data/bootstrapscript_2.txt b/pkg/model/tests/data/bootstrapscript_2.txt
@@ -140,7 +140,7 @@ cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 CloudProvider: aws
 InstanceGroupName: testIG
 InstanceGroupRole: ControlPlane
-NodeupConfigHash: N0d3Il7CeGYFi32ZDb4i3iftzUD6swJ3F/tZf8d1bZY=
+NodeupConfigHash: /xicRZCxNOwNU9MLpHkw2F+ehPH1Sb6ZTdADbaK5SK8=
 
 __EOF_KUBE_ENV
 

diff --git a/pkg/model/tests/data/bootstrapscript_3.txt b/pkg/model/tests/data/bootstrapscript_3.txt
@@ -140,7 +140,7 @@ cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 CloudProvider: aws
 InstanceGroupName: testIG
 InstanceGroupRole: Node
-NodeupConfigHash: X6Di6WM7EcwYaitdtxqgDgb2VjQuX4gHgLLPBZUb6Hw=
+NodeupConfigHash: YON2zMNoXwpE+lTFwFYUD/m0YDM1OK3dZg0CrkiDwOk=
 
 __EOF_KUBE_ENV
 

diff --git a/pkg/model/tests/data/bootstrapscript_4.txt b/pkg/model/tests/data/bootstrapscript_4.txt
@@ -140,7 +140,7 @@ cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 CloudProvider: aws
 InstanceGroupName: testIG
 InstanceGroupRole: Node
-NodeupConfigHash: FOtsEbu1CrMgt9fSSoK3X+UvdHnVKS4MmNRxjGmd40c=
+NodeupConfigHash: QM7lk2xF0ReCBa8G5hnxrxZUVSK9nnCTZLSAc+YPXlw=
 
 __EOF_KUBE_ENV
 

diff --git a/pkg/model/tests/data/bootstrapscript_5.txt b/pkg/model/tests/data/bootstrapscript_5.txt
@@ -140,7 +140,7 @@ cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 CloudProvider: aws
 InstanceGroupName: testIG
 InstanceGroupRole: Node
-NodeupConfigHash: FOtsEbu1CrMgt9fSSoK3X+UvdHnVKS4MmNRxjGmd40c=
+NodeupConfigHash: QM7lk2xF0ReCBa8G5hnxrxZUVSK9nnCTZLSAc+YPXlw=
 
 __EOF_KUBE_ENV
 

diff --git a/pkg/model/tests/data/nodeupconfig_0.txt b/pkg/model/tests/data/nodeupconfig_0.txt
@@ -42,5 +42,4 @@ UpdatePolicy: automatic
 configStore: {}
 containerdConfig:
   logLevel: info
-usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/pkg/model/tests/data/nodeupconfig_1.txt b/pkg/model/tests/data/nodeupconfig_1.txt
@@ -60,5 +60,4 @@ UpdatePolicy: automatic
 configStore: {}
 containerdConfig:
   logLevel: info
-usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/pkg/model/tests/data/nodeupconfig_2.txt b/pkg/model/tests/data/nodeupconfig_2.txt
@@ -60,5 +60,4 @@ UpdatePolicy: automatic
 configStore: {}
 containerdConfig:
   logLevel: info
-usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/pkg/model/tests/data/nodeupconfig_3.txt b/pkg/model/tests/data/nodeupconfig_3.txt
@@ -26,5 +26,4 @@ Networking:
 UpdatePolicy: automatic
 containerdConfig:
   logLevel: info
-usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/pkg/model/tests/data/nodeupconfig_4.txt b/pkg/model/tests/data/nodeupconfig_4.txt
@@ -44,5 +44,4 @@ Networking:
 UpdatePolicy: automatic
 containerdConfig:
   logLevel: info
-usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/pkg/model/tests/data/nodeupconfig_5.txt b/pkg/model/tests/data/nodeupconfig_5.txt
@@ -44,5 +44,4 @@ Networking:
 UpdatePolicy: automatic
 containerdConfig:
   logLevel: info
-usesLegacyGossip: false
 usesNoneDNS: false
diff --git a/pkg/nodemodel/nodeupconfigbuilder.go b/pkg/nodemodel/nodeupconfigbuilder.go
@@ -32,7 +32,6 @@ import (
 	"k8s.io/kops/pkg/apis/nodeup"
 	"k8s.io/kops/pkg/assets"
 	"k8s.io/kops/pkg/model"
-	"k8s.io/kops/pkg/nodemodel/wellknownassets"
 	"k8s.io/kops/pkg/wellknownports"
 	"k8s.io/kops/pkg/wellknownservices"
 	"k8s.io/kops/upup/pkg/fi"
@@ -47,7 +46,6 @@ type nodeUpConfigBuilder struct {
 	cluster                    *kops.Cluster
 	etcdManifests              map[string][]string
 	images                     map[kops.InstanceGroupRole]map[architectures.Architecture][]*nodeup.Image
-	protokubeAsset             map[architectures.Architecture][]*assets.MirroredAsset
 	encryptionConfigSecretHash string
 }
 
@@ -62,15 +60,6 @@ func NewNodeUpConfigBuilder(cluster *kops.Cluster, assetBuilder *assets.AssetBui
 
 	etcdManifests := map[string][]string{}
 	images := map[kops.InstanceGroupRole]map[architectures.Architecture][]*nodeup.Image{}
-	protokubeAsset := map[architectures.Architecture][]*assets.MirroredAsset{}
-
-	for _, arch := range architectures.GetSupported() {
-		asset, err := wellknownassets.ProtokubeAsset(assetBuilder, arch)
-		if err != nil {
-			return nil, err
-		}
-		protokubeAsset[arch] = append(protokubeAsset[arch], asset)
-	}
 
 	for _, role := range kops.AllInstanceGroupRoles {
 		isMaster := role.HasControlPlane()
@@ -177,7 +166,6 @@ func NewNodeUpConfigBuilder(cluster *kops.Cluster, assetBuilder *assets.AssetBui
 		cluster:                    cluster,
 		etcdManifests:              etcdManifests,
 		images:                     images,
-		protokubeAsset:             protokubeAsset,
 		encryptionConfigSecretHash: encryptionConfigSecretHash,
 	}
 
@@ -371,16 +359,6 @@ func (n *nodeUpConfigBuilder) BuildConfig(ig *kops.InstanceGroup, wellKnownAddre
 		}
 	}
 
-	// Keep protokube in control-plane nodeup configs temporarily to avoid changing
-	// their config hashes. No nodeup model task installs or runs the binary.
-	if isMaster {
-		for _, arch := range architectures.GetSupported() {
-			for _, asset := range n.protokubeAsset[arch] {
-				config.Assets[arch] = append(config.Assets[arch], asset.CompactString())
-			}
-		}
-	}
-
 	useConfigServer := !ig.HasAPIServer()
 	if useConfigServer {
 		bootConfig.ConfigServer = buildConfigServerOptions(cluster.ObjectMeta.Name, config.CAs[fi.CertificateIDCA], bootConfig.APIServerIPs)

diff --git a/pkg/nodemodel/wellknownassets/kopsassets.go b/pkg/nodemodel/wellknownassets/kopsassets.go
@@ -37,9 +37,6 @@ var kopsBaseURL *url.URL
 // nodeUpAsset caches the nodeup binary download url/hash
 var nodeUpAsset map[architectures.Architecture]*assets.MirroredAsset
 
-// protokubeAsset caches the protokube binary download url/hash.
-var protokubeAsset map[architectures.Architecture]*assets.MirroredAsset
-
 // BaseURL returns the base url for the distribution of kops - in particular for nodeup & docker images
 func Baseurl() (*url.URL, error) {
 	// returning cached value
@@ -106,26 +103,6 @@ func NodeUpAsset(assetsBuilder *assets.AssetBuilder, arch architectures.Architec
 	return nodeUpAsset[arch], nil
 }
 
-// ProtokubeAsset returns the URL and hash of the protokube binary.
-func ProtokubeAsset(assetsBuilder *assets.AssetBuilder, arch architectures.Architecture) (*assets.MirroredAsset, error) {
-	if protokubeAsset == nil {
-		protokubeAsset = make(map[architectures.Architecture]*assets.MirroredAsset)
-	}
-	if protokubeAsset[arch] != nil {
-		klog.V(8).Infof("Using cached protokube binary location for %s: %v", arch, protokubeAsset[arch].Locations)
-		return protokubeAsset[arch], nil
-	}
-
-	asset, err := KopsFileurl(/sitelet?url=https%3A%2F%2Fgithub.com%2Fkubernetes%2Fkops%2Fpull%2F18650%2Ffmt.Sprintf%28%26quot%3Blinux%2F%25s%2Fprotokube%26quot%3B%2C%2520arch), assetsBuilder)
-	if err != nil {
-		return nil, err
-	}
-	protokubeAsset[arch] = assets.BuildMirroredAsset(asset)
-	klog.V(8).Infof("Using default protokube location for %s: %q", arch, asset.DownloadURL.String())
-
-	return protokubeAsset[arch], nil
-}
-
 // KopsFileURL returns the base url for the distribution of kops - in particular for nodeup & docker images
 func KopsFileurl(/sitelet?url=https%3A%2F%2Fgithub.com%2Fkubernetes%2Fkops%2Fpull%2F18650%2Ffile%2520string%2C%2520assetBuilder%2520*assets.AssetBuilder) (*assets.FileAsset, error) {
 	base, err := Baseurl()

diff --git a/tests/e2e/scenarios/upgrade-ab-gossip/run-test.sh b/tests/e2e/scenarios/upgrade-ab-gossip/run-test.sh
diff --git a/tests/integration/create_cluster/gossip-aws/expected-v1alpha2.yaml b/tests/integration/create_cluster/gossip-aws/expected-v1alpha2.yaml
diff --git a/tests/integration/create_cluster/gossip-aws/options.yaml b/tests/integration/create_cluster/gossip-aws/options.yaml