v1.65.2

New Features

• Azure VMs now support setting securityProfile with securityType TrustedLaunch or Standard in the cloud provider spec, enabling the use of Compute Gallery images that require TrustedLaunch (#2020)

Bugfixes

• MachineDeployments can now be deleted even when the provider image is invalid or unresolvable. Previously, such MachineDeployments would get stuck in Terminating because the admission webhook blocked OSM from removing its cleanup finalizer (#2017)

Miscellaneous

• Add the defaultVMInstanceType function, which attempts to resolve a VirtualMachineInstancetype in the given namespace and falls back to a VirtualMachineClusterInstancetype if not found. This ensures that the correct instance type is always selected based on scope (#2031)
• Tinkerbell provisioning now pulls all container images from quay.io/kubermatic-mirror instead of upstream registries, eliminating dependency on third-party registry availability (#2035)
• Azure: upgrade Flatcar to version 4459.2.3 (#2021)

Updates

• Update golang.org/x/crypto v0.52.0 (#2025)
• Update golang.org/x/net v0.55.0 (#2025)