We’re excited to announce Kubermatic Virtualization (KubeV) 1.2. This release introduces three of the most requested capabilities from our community: built-in identity and access management (IAM), dashboard-driven networking, and a more reliable operational foundation that powers the entire platform.
Behind the scenes, KubeV 1.2 improves how the platform manages its own resources. Networking, IAM, and other platform objects now follow a consistent reconciliation model, allowing the platform to automatically detect and correct drift while keeping resources aligned with their desired state. This translates into greater reliability today and a stronger foundation for future features.
What’s New in KubeV 1.2
Advanced Networking from the Dashboard
Managing virtual networks no longer requires editing YAML or using the CLI. KubeV 1.2 lets you create and manage both overlay and underlay networking directly from the dashboard.
Platform networking resources-including VPCs, subnets, security groups, NAT gateways, and elastic IPs-are now reconciled by the new dedicated controller manager. This means networking changes are declarative, resilient, and automatically brought back to the desired state whenever necessary.
Built-In IAM & Fine-Grained Access Control
KubeV now includes a native Identity and Access Management system with a built-in Administration panel. Administrators can manage users, roles, and permissions without leaving the platform. Two system roles are available out of the box:
- admin - full administrative access
- viewer - read-only access
Beyond these defaults, you can define custom roles with fine-grained permissions based on resource groups and allowed actions, then assign them through role bindings.
Like networking, IAM is built on the new controller-manager architecture. Roles, bindings, and permissions are stored as Kubernetes resources and continuously reconciled, allowing permission changes to take effect immediately without requiring users to restart sessions or log in again.
IAM is fully supported when KubeV is configured with OIDC authentication.
Permission-Aware Kubeconfigs
Users can now download a personal kubeconfig that’s automatically tied to a dedicated ServiceAccount. The permissions available through kubectl directly mirror the permissions assigned through the KubeV IAM system, eliminating the need to manually configure Kubernetes RBAC separately and ensuring consistent access across both the UI and CLI.
Smoother Installation & Upgrades
We’ve streamlined both installation and upgrade workflows to improve reliability and reduce the operational effort required to keep clusters up to date.
More Reliable Live Migration
We’ve addressed several issues affecting virtual machine live migration, significantly improving migration success rates while increasing overall cluster stability during maintenance and workload movement.
Secure-by-Default Network Policies
KubeV now ships with sensible default network policies that enforce workload isolation from the moment a cluster is created, providing a stronger security posture without additional configuration.
Simplified Node-Level Kubelet Configuration
Host kubelet configuration can now be managed directly through configuration files, making it easier to operate and standardize larger node fleets.
Why it Matters
Managing a virtualization platform shouldn’t require choosing between operational simplicity and enterprise-grade security. KubeV 1.2 delivers both.
Built-in IAM and permission-aware kubeconfigs provide a consistent security model across the dashboard and kubectl. Dashboard-based networking simplifies infrastructure management without sacrificing flexibility. Underneath these capabilities, the new controller manager continuously reconciles platform resources, making the platform more resilient, self-healing, and easier to operate as your environment grows.
This controller-based architecture also lays the groundwork for future platform capabilities, allowing new resource types and services to integrate into the same declarative management model.
Whether you’re building a private cloud from scratch or modernizing an existing virtualization platform, Kubermatic Virtualization gives you the tools to deploy, secure, and scale workloads with confidence.
Get Started Today
Learn more about Kubermatic Virtualization 1.2 and start deploying today by visiting the documentation.
