Posts in 2022

  • Introducing Kueue

    By Abdullah Gharaibeh (Google), Aldo Culquicondor (Google) | Tuesday, October 04, 2022 in Blog

    Whether on-premises or in the cloud, clusters face real constraints for resource usage, quota, and cost management reasons. Regardless of the autoscalling capabilities, clusters have finite capacity. As a result, users want an easy way to fairly and …

    Read more

  • Kubernetes 1.25: alpha support for running Pods with user namespaces

    By Rodrigo Campos (Microsoft), Giuseppe Scrivano (Red Hat) | Monday, October 03, 2022 in Blog

    Kubernetes v1.25 introduces the support for user namespaces. This is a major improvement for running secure workloads in Kubernetes. Each pod will have access only to a limited subset of the available UIDs and GIDs on the system, thus adding a new …

    Read more

  • Enforce CRD Immutability with CEL Transition Rules

    By Alexander Zielenski (Google) | Thursday, September 29, 2022 in Blog

    Immutable fields can be found in a few places in the built-in Kubernetes types. For example, you can't change the .metadata.name of an object. Specific objects have fields where changes to existing objects are constrained; for example, the …

    Read more

  • Kubernetes 1.25: Kubernetes In-Tree to CSI Volume Migration Status Update

    By Jiawei Wang (Google) | Monday, September 26, 2022 in Blog

    The Kubernetes in-tree storage plugin to Container Storage Interface (CSI) migration infrastructure has already been beta since v1.17. CSI migration was introduced as alpha in Kubernetes v1.14. Since then, SIG Storage and other Kubernetes special …

    Read more

  • Kubernetes 1.25: CustomResourceDefinition Validation Rules Graduate to Beta

    By Joe Betz (Google), Cici Huang (Google), Kermit Alexander (Google) | Friday, September 23, 2022 in Blog

    In Kubernetes 1.25, Validation rules for CustomResourceDefinitions (CRDs) have graduated to Beta! Validation rules make it possible to declare how custom resources are validated using the Common Expression Language (CEL). For example: apiVersion: …

    Read more

  • Kubernetes 1.25: Use Secrets for Node-Driven Expansion of CSI Volumes

    By Humble Chirammal (Red Hat), Louis Koo (deeproute.ai) | Wednesday, September 21, 2022 in Blog

    Kubernetes v1.25, released earlier this month, introduced a new feature that lets your cluster expand storage volumes, even when access to those volumes requires a secret (for example: a credential for accessing a SAN fabric) to perform node expand …

    Read more

  • Kubernetes 1.25: Local Storage Capacity Isolation Reaches GA

    By Jing Xu (Google) | Monday, September 19, 2022 in Blog

    Local ephemeral storage capacity isolation was introduced as a alpha feature in Kubernetes 1.7 and it went beta in 1.9. With Kubernetes 1.25 we are excited to announce general availability(GA) of this feature. Pods use ephemeral local storage for …

    Read more

  • Kubernetes 1.25: Two Features for Apps Rollouts Graduate to Stable

    By Ravi Gudimetla (Apple), Filip Křepinský (Red Hat), Maciej Szulik (Red Hat) | Thursday, September 15, 2022 in Blog

    This blog describes the two features namely minReadySeconds for StatefulSets and maxSurge for DaemonSets that SIG Apps is happy to graduate to stable in Kubernetes 1.25. Specifying minReadySeconds slows down a rollout of a StatefulSet, when using a …

    Read more

  • Kubernetes 1.25: PodHasNetwork Condition for Pods

    By Deep Debroy (Apple) | Wednesday, September 14, 2022 in Blog

    Kubernetes 1.25 introduces Alpha support for a new kubelet-managed pod condition in the status field of a pod: PodHasNetwork. The kubelet, for a worker node, will use the PodHasNetwork condition to accurately surface the initialization state of a pod …

    Read more

  • Announcing the Auto-refreshing Official Kubernetes CVE Feed

    By Pushkar Joglekar (VMware) | Monday, September 12, 2022 in Blog

    A long-standing request from the Kubernetes community has been to have a programmatic way for end users to keep track of Kubernetes security issues (also called "CVEs", after the database that tracks public security issues across different …

    Read more