Kubernetes 1.19 Highlights: Year‑Long Support, Storage Updates & New APIs
Version 1.19 of Kubernetes, released after a 20‑week cycle, introduces a year‑long support window, storage capacity tracking, generic ephemeral volumes, CSI health monitoring, GA Ingress, structured logging with klog, kubelet TLS certificate rotation, plus numerous features graduating to stable and major enhancements across scheduling, security, and API design.
Kubernetes Support Window Extended to One Year
Long‑term support (LTS) surveys showed many users could not upgrade within the 9‑month window; extending patch support to 12‑14 months would keep about 80% of users on supported versions versus the current 50‑60%.
Storage Capacity Tracking
Traditionally the scheduler assumed unlimited persistent storage; the new Alpha feature adds a CSI driver API that reports storage capacity to the scheduler for pod placement, enabling dynamic provisioning for local volumes and other large‑capacity volume types.
Generic Ephemeral Volumes
Kubernetes now offers volume plugins whose lifecycle is bound to a pod, usable as temporary space (e.g., emptyDir) or to load data into a pod via configMap or secret. The Alpha feature allows any storage driver that supports dynamic provisioning to be used as an ephemeral volume, supporting all StorageClass parameters and PVC features such as snapshots, restores, and resizing.
CSI Volume Health Monitoring
An Alpha version released with Kubernetes 1.19 lets CSI drivers share abnormal volume conditions as events on PVCs or Pods, forming the basis for programmatic detection and remediation of individual volume health issues.
Ingress Graduates to GA
The Ingress API, long present in Beta, has reached de‑facto GA status. The community will continue to support the V1 API while developing V2 or a superset API.
Structured Logging
Prior to v1.19, control‑plane logs lacked a uniform structure, making parsing and analysis difficult. The new klog library adds structured logging methods (InfoS, ErrorS) that accept a message followed by key‑value pairs, enabling gradual adoption without breaking existing code.
Kubelet Client TLS Certificate Rotation
Kubelet authenticates to the API server using a client certificate. Since v1.8 a beta rotation flow existed; in v1.19 this feature stabilizes. On startup, kubelet loads existing certificates or generates a bootstrap certificate to request a signed certificate from the API server, and automatically rotates certificates as they near expiration.
Other Updates
Features reaching stable: Seccomp, Kubelet client TLS certificate rotation, node‑to‑API access restrictions, redesigned Event API, Ingress V1 stable, CertificateSigningRequest API, Docker‑less Kubelet build.
Major changes: Node Topology Manager, new Endpoint API, extended Kubernetes support cycle to one year.
Additional important changes: multiple scheduling profiles, immutable Secrets and ConfigMaps.
For the full changelog, see the official release notes on GitHub.
Signed-in readers can open the original source through BestHub's protected redirect.
This article has been distilled and summarized from source material, then republished for learning and reference. If you believe it infringes your rights, please contactand we will review it promptly.
MaGe Linux Operations
Founded in 2009, MaGe Education is a top Chinese high‑end IT training brand. Its graduates earn 12K+ RMB salaries, and the school has trained tens of thousands of students. It offers high‑pay courses in Linux cloud operations, Python full‑stack, automation, data analysis, AI, and Go high‑concurrency architecture. Thanks to quality courses and a solid reputation, it has talent partnerships with numerous internet firms.
How this landed with the community
Was this worth your time?
0 Comments
Thoughtful readers leave field notes, pushback, and hard-won operational detail here.
