Kubernetes v1.33 Fixes a Decade-Old Image Pull Loophole

Kubernetes v1.33 introduces the KubeletEnsureSecretPulledImages feature gate, which forces credential verification for cached private images, closing a ten‑year‑old security loophole that allowed Pods to reuse unauthorized images across namespaces regardless of imagePullPolicy settings.

Feature GatesImagePullPolicyv1.33

0 likes · 6 min read

Kubernetes v1.33 Fixes a Decade-Old Image Pull Loophole

Cloud Native Technology Community

Aug 29, 2023 · Cloud Native

Mixed Version Proxy in Kubernetes 1.28: Overview, Operation, and Enablement

The mixed version proxy, introduced as an alpha feature in Kubernetes 1.28, enables correct handling of HTTP requests across clusters with multiple API server versions by routing requests to a compatible peer, preventing 404 errors during upgrades and providing flags for configuration and security.

API ServerFeature GatesKubernetes

0 likes · 6 min read

Mixed Version Proxy in Kubernetes 1.28: Overview, Operation, and Enablement

Cloud Native Technology Community

Mar 29, 2023 · Cloud Native

Kubernetes v1.27 Deprecations, API Removals, and Feature Gate Changes

Version 1.27 of Kubernetes introduces numerous deprecations and removals, including the migration of k8s.gcr.io to registry.k8s.io, the elimination of several API versions and feature gates such as CSIStorageCapacity, seccomp annotations, and various volume expansion options, with guidance for maintainers on required updates.

API RemovalFeature GatesKubernetes

0 likes · 12 min read

Kubernetes v1.27 Deprecations, API Removals, and Feature Gate Changes