OpenKruise v1.2 introduces the PersistentPodState CRD for stateful pod retention, improves CloneSet partition logic and status fields, adds markPodNotReady to lifecycle hooks, and expands PodUnavailableBudget to protect custom workloads, with detailed YAML examples and usage notes.
This article explains how OpenKruise extends Kubernetes with PodUnavailableBudget to protect application availability during voluntary disruptions, compares it with native PodDisruptionBudget, and provides practical YAML examples for stateless, stateful, and single‑instance workloads.
OpenKruise v0.10.0 introduces major enhancements such as WorkloadSpread for flexible topology-aware pod distribution, PodUnavailableBudget that extends PDB protection to voluntary disruptions, CloneSet scaling rules based on topology, and Advanced StatefulSet’s maxUnavailable-driven streaming scale-out, all configurable via feature-gates.
This article explains the inherent security risks of cloud‑native Kubernetes deployments—such as workload, namespace, and CRD cascading deletions and concurrent pod updates—and presents practical OpenKruise‑based protection techniques like label‑driven cascade‑deletion blocking, pod‑deletion flow control, and automatic PUB/PDB generation to ensure runtime stability.
