Posts in 2022
Current State: 2019 Third Party Security Audit of Kubernetes
Wednesday, October 05, 2022 in Blog
Authors (in alphabetical order): Cailyn Edwards (Shopify), Pushkar Joglekar (VMware), Rey Lejano (SUSE) and Rory McCune (DataDog) We expect the brand new Third Party Security Audit of Kubernetes will be published later this month (Oct 2022). In …
Introducing Kueue
Tuesday, October 04, 2022 in Blog
Authors: Abdullah Gharaibeh (Google), Aldo Culquicondor (Google) Whether on-premises or in the cloud, clusters face real constraints for resource usage, quota, and cost management reasons. Regardless of the autoscalling capabilities, clusters have …
Kubernetes 1.25: alpha support for running Pods with user namespaces
Monday, October 03, 2022 in Blog
Authors: Rodrigo Campos (Microsoft), Giuseppe Scrivano (Red Hat) Kubernetes v1.25 introduces the support for user namespaces. This is a major improvement for running secure workloads in Kubernetes. Each pod will have access only to a limited subset …
Enforce CRD Immutability with CEL Transition Rules
Thursday, September 29, 2022 in Blog
Author: Alexander Zielenski (Google) Immutable fields can be found in a few places in the built-in Kubernetes types. For example, you can't change the .metadata.name of an object. Specific objects have fields where changes to existing objects are …
Kubernetes 1.25: Kubernetes In-Tree to CSI Volume Migration Status Update
Monday, September 26, 2022 in Blog
Author: Jiawei Wang (Google) The Kubernetes in-tree storage plugin to Container Storage Interface (CSI) migration infrastructure has already been beta since v1.17. CSI migration was introduced as alpha in Kubernetes v1.14. Since then, SIG Storage and …
Kubernetes 1.25: CustomResourceDefinition Validation Rules Graduate to Beta
Friday, September 23, 2022 in Blog
Authors: Joe Betz (Google), Cici Huang (Google), Kermit Alexander (Google) In Kubernetes 1.25, Validation rules for CustomResourceDefinitions (CRDs) have graduated to Beta! Validation rules make it possible to declare how custom resources are …
Kubernetes 1.25: Use Secrets for Node-Driven Expansion of CSI Volumes
Wednesday, September 21, 2022 in Blog
Author: Humble Chirammal (Red Hat), Louis Koo (deeproute.ai) Kubernetes v1.25, released earlier this month, introduced a new feature that lets your cluster expand storage volumes, even when access to those volumes requires a secret (for example: a …
Kubernetes 1.25: Local Storage Capacity Isolation Reaches GA
Monday, September 19, 2022 in Blog
Author: Jing Xu (Google) Local ephemeral storage capacity isolation was introduced as a alpha feature in Kubernetes 1.7 and it went beta in 1.9. With Kubernetes 1.25 we are excited to announce general availability(GA) of this feature. Pods use …
Kubernetes 1.25: Two Features for Apps Rollouts Graduate to Stable
Thursday, September 15, 2022 in Blog
Authors: Ravi Gudimetla (Apple), Filip Křepinský (Red Hat), Maciej Szulik (Red Hat) This blog describes the two features namely minReadySeconds for StatefulSets and maxSurge for DaemonSets that SIG Apps is happy to graduate to stable in Kubernetes …
Kubernetes 1.25: PodHasNetwork Condition for Pods
Wednesday, September 14, 2022 in Blog
Author: Deep Debroy (Apple) Kubernetes 1.25 introduces Alpha support for a new kubelet-managed pod condition in the status field of a pod: PodHasNetwork. The kubelet, for a worker node, will use the PodHasNetwork condition to accurately surface the …