Back to updates

K8s - 3

2025 (12)

December (6)

k8s: Kubernetes v1.35: Fine-grained Supplemental Groups Control Graduates to GA

Kubernetes Official Blog

2025-12-23

Kubernetes v1.35 graduates fine-grained supplemental groups control to GA via a new Pod field, supplementalGroupsPolicy, letting clusters choose whether to merge group memberships from the container image (/etc/group) or enforce only groups declared in the Pod (Strict) to reduce implicit, hard-to-audit GIDs and improve security (especially for volume access).

k8s: Kubernetes v1.35: Kubelet Configuration Drop-in Directory Graduates to GA

Kubernetes Official Blog

2025-12-22

Kubernetes v1.35 graduates the kubelet configuration drop-in directory to GA: the --config-dir kubelet flag is now production-ready and automatically merges drop-in files with the main kubelet configuration. This simplifies managing different kubelet settings across heterogeneous node pools and supports staged rollouts and targeted overrides without complex tooling.

k8s: Avoiding Zombie Cluster Members When Upgrading to etcd v3.6

Kubernetes Official Blog

2025-12-21

Upgrade to etcd v3.5.26 or later before moving to v3.6 to let etcd auto-sync membership data (v3store) from the legacy v2store and prevent removed nodes from reappearing as "zombie" members that can make the cluster inoperable.

k8s: Kubernetes 1.35: In-Place Pod Resize Graduates to Stable

Kubernetes Official Blog

2025-12-19

Kubernetes 1.35 graduates In-Place Pod Resize (In-Place Pod Vertical Scaling) to stable (GA). The feature makes CPU and memory requests and limits mutable on a running Pod (via a resize subresource), often without restarting containers. This enables non-disruptive resource adjustments, more powerful autoscaling (e.g., VPA InPlaceOrRecreate), transient boosts like CPU startup boost, and better resource efficiency. The release also adds prioritized retries, allows memory limit decreases (best-effort OOM protection), alpha support for Pod Level Resources, and new kubelet metrics/events. Work remains on runtime support, scheduler/kubelet races, expanded feature support, and integrations with autoscalers and other projects.

k8s: Kubernetes v1.35: Job Managed By Goes GA

Kubernetes Official Blog

2025-12-18

Kubernetes v1.35 promotes .spec.managedBy for Jobs to GA, enabling external controllers (e.g., MultiKueue) to take full responsibility for Job reconciliation and enabling multi-cluster batch scheduling patterns while leaving built-in Job controller behavior intact for other Jobs.

k8s: Kubernetes v1.35: Timbernetes (The World Tree Release)

Kubernetes Official Blog

2025-12-17

Kubernetes v1.35 ("Timbernetes / World Tree" release) ships 60 enhancements (17 stable, 19 beta, 22 alpha), focused on smoother nondisruptive scaling, native pod certificate-based workload identity, improved scheduling correctness, storage and topology improvements, and several important deprecations/removals. The release emphasizes stability, performance, and security hardening (notable GA features, new betas/alphas, and migration guidance for cgroup and containerd).

November (5)

k8s: Kubernetes v1.35 Sneak Peek

Kubernetes Official Blog

2025-11-26

Kubernetes v1.35 (planned 2025-12-17) introduces several deprecations and new/advanced features. Major removals/deprecations include cgroup v1 support removal, deprecation of kube-proxy ipvs mode, and final support for containerd v1.x (users must move to containerd 2.0+). Notable enhancements likely in v1.35 include node declared features (alpha), in-place Pod resource updates (GA), pod certificates (beta), numeric taint comparisons, continued progress on user namespaces, and image volumes becoming default.

k8s: Kubernetes Configuration Good Practices

Kubernetes Official Blog

2025-11-25

This article collects practical Kubernetes configuration best practices: prefer current stable APIs, keep manifests minimal and version-controlled, write YAML carefully (watch boolean values), group related objects, favor controllers (Deployments/Jobs) over naked Pods, use Services and DNS properly, avoid hostNetwork/hostPort unless necessary, apply semantic/common labels, add helpful annotations, and use kubectl features like applying directories, label selectors and server-side apply to simplify management.

k8s: Ingress NGINX Retirement: What You Need to Know

Kubernetes Official Blog

2025-11-11

Kubernetes SIG Network and the Security Response Committee announced the retirement of Ingress NGINX. Best-effort maintenance will continue until March 2026; after that there will be no further releases, bug fixes, or security updates. Users are advised to migrate to Gateway API or another Ingress controller.

k8s: Announcing the 2025 Steering Committee Election Results

Kubernetes Official Blog

2025-11-09

The 2025 Kubernetes Steering Committee election concluded. Four of seven seats were up for election; the incoming members begin two-year terms immediately. The post announces the newly elected members, continuing members, election officers, emeritus members, and gives ways for the community to follow and participate in Steering Committee work.

k8s: Gateway API 1.4: New Features

Kubernetes Official Blog

2025-11-06

Gateway API v1.4.0 (released Oct 6, 2025) advances Kubernetes service networking with three features promoted to Standard (BackendTLSPolicy, supportedFeatures in GatewayClass status, and named rule fields for Routes) and several experimental additions (Mesh/XMesh, default Gateways, and an ExternalAuth filter for HTTPRoute). The release also adds per-port TLS/client-certificate configuration to address connection coalescing security, introduces a couple of breaking validation changes, improves CI/docs, and is usable on Kubernetes >=1.26.

October (1)

k8s: 7 Common Kubernetes Pitfalls (and How I Learned to Avoid Them)

Kubernetes Official Blog

2025-10-20

The article outlines seven common Kubernetes pitfalls the author encountered—missing resource requests/limits, inadequate liveness/readiness probes, overreliance on kubectl logs, treating dev and prod identically, leaving stale resources, jumping into advanced networking too early, and weak security/RBAC—and gives pragmatic, experience-based advice to avoid each one.