Author:Jordan Liggitt (Google)

The problem

Since v1.19 (released in 2020), the Kubernetes project provides 12-14 months of patch releases for each minor version.This enables users to qualify and adopt Kubernetes versions in an annual upgrade cycle and receive security fixes for a year. The Go project releases new minor versions twice a year, and provides security fixes for the last two minor versions, resulting in about a year of support for each Go version.Even though each new Kubernetes minor version is built

Just published by Kubernetes: Read more

Authors:Craig Box (ARMO), Ben Hirschberg (ARMO) Admission control is an important part of the Kubernetes control plane, with several internal features depending on the ability to approve or change an API object as it is submitted to the server.It is also useful for an administrator to be able to define business logic, or policies, regarding what objects can be admitted into a cluster.To better support that use case, Kubernetes introduced external admission control in v1.7. In addition to countless custom, internal implementations, many open source projects and

Just published by Kubernetes: Read more

Author:Harshita Sao As Kubernetes develops and matures, features may be deprecated, removed, or replaced with better ones for the project's overall health.Based on the information available at this point in the v1.27 release process, which is still ongoing and can introduce additional changes, this article identifies and describes some of the planned changes for the Kubernetes v1.27 release. A note about the k8s.gcr.io redirect to registry.k8s.io To host its container images, the Kubernetes project uses a community-owned image registry called registry.k8s.io.On March

Just published by Kubernetes: Read more

Authors:Bob Killen (Google), Davanum Srinivas (AWS), Chris Short (AWS), Frederico Muñoz (SAS Institute), Tim Bannister (The Scale Factory), Ricky Sadowski (AWS), Grace Nguyen (Expo), Mahamed Ali (Rackspace Technology), Mars Toktonaliev (independent), Laura Santamaria (Dell), Kat Cosgrove (Dell)

On Monday, March 20th, the k8s.gcr.io registry will be redirected to the community owned registry, registry.k8s.io .

TL;DR:What you need to know about this change

On Monday, March 20th, traffic from the older k8s.gcr.io registry will be redirected to registry.k8s.io with the eventual goal of sunsetting k8s.gcr.io.

Just published by Kubernetes: Read more

Authors: Adrian Reber (Red Hat) In my previous article, Forensic container checkpointing in Kubernetes, I introduced checkpointing in Kubernetes and how it has to be setup and how it can be used.The name of the feature is Forensic container checkpointing, but I did not go into any details how to do the actual analysis of the checkpoint created by Kubernetes.In this article I want to provide details how the checkpoint can be analyzed. Checkpointing is still an alpha feature in Kubernetes and this article wants to provide a preview how

Just published by Kubernetes: Read more