Posts in 2022

  • Kubernetes Removals, Deprecations, and Major Changes in 1.26

    Friday, November 18, 2022 in Blog

    Author: Frederico Muñoz (SAS) Change is an integral part of the Kubernetes life-cycle: as Kubernetes grows and matures, features may be deprecated, removed, or replaced with improvements for the health of the project. For Kubernetes v1.26 there are …

    Read more

  • Live and let live with Kluctl and Server Side Apply

    Friday, November 04, 2022 in Blog

    Author: Alexander Block This blog post was inspired by a previous Kubernetes blog post about Advanced Server Side Apply. The author of said blog post listed multiple benefits for applications and controllers when switching to server-side apply (from …

    Read more

  • Server Side Apply Is Great And You Should Be Using It

    Thursday, October 20, 2022 in Blog

    Author: Daniel Smith (Google) Server-side apply (SSA) has now been GA for a few releases, and I have found myself in a number of conversations, recommending that people / teams in various situations use it. So I’d like to write down some of those …

    Read more

  • Current State: 2019 Third Party Security Audit of Kubernetes

    Wednesday, October 05, 2022 in Blog

    Authors (in alphabetical order): Cailyn Edwards (Shopify), Pushkar Joglekar (VMware), Rey Lejano (SUSE) and Rory McCune (DataDog) We expect the brand new Third Party Security Audit of Kubernetes will be published later this month (Oct 2022). In …

    Read more

  • Introducing Kueue

    Tuesday, October 04, 2022 in Blog

    Authors: Abdullah Gharaibeh (Google), Aldo Culquicondor (Google) Whether on-premises or in the cloud, clusters face real constraints for resource usage, quota, and cost management reasons. Regardless of the autoscalling capabilities, clusters have …

    Read more

  • Kubernetes 1.25: alpha support for running Pods with user namespaces

    Monday, October 03, 2022 in Blog

    Authors: Rodrigo Campos (Microsoft), Giuseppe Scrivano (Red Hat) Kubernetes v1.25 introduces the support for user namespaces. This is a major improvement for running secure workloads in Kubernetes. Each pod will have access only to a limited subset …

    Read more

  • Enforce CRD Immutability with CEL Transition Rules

    Thursday, September 29, 2022 in Blog

    Author: Alexander Zielenski (Google) Immutable fields can be found in a few places in the built-in Kubernetes types. For example, you can't change the of an object. Specific objects have fields where changes to existing objects are …

    Read more

  • Kubernetes 1.25: Kubernetes In-Tree to CSI Volume Migration Status Update

    Monday, September 26, 2022 in Blog

    Author: Jiawei Wang (Google) The Kubernetes in-tree storage plugin to Container Storage Interface (CSI) migration infrastructure has already been beta since v1.17. CSI migration was introduced as alpha in Kubernetes v1.14. Since then, SIG Storage and …

    Read more

  • Kubernetes 1.25: CustomResourceDefinition Validation Rules Graduate to Beta

    Friday, September 23, 2022 in Blog

    Authors: Joe Betz (Google), Cici Huang (Google), Kermit Alexander (Google) In Kubernetes 1.25, Validation rules for CustomResourceDefinitions (CRDs) have graduated to Beta! Validation rules make it possible to declare how custom resources are …

    Read more

  • Kubernetes 1.25: Use Secrets for Node-Driven Expansion of CSI Volumes

    Wednesday, September 21, 2022 in Blog

    Author: Humble Chirammal (Red Hat), Louis Koo ( Kubernetes v1.25, released earlier this month, introduced a new feature that lets your cluster expand storage volumes, even when access to those volumes requires a secret (for example: a …

    Read more