Back to updates

Kubernetes - 4

2025 (12)

December (9)

azure: [Launched] Generally Available: Cloud-native apps on Kubernetes pricing calculator scenario

Azure Updates

2025-12-31

Microsoft announced the general availability of a new 'Cloud-native apps on Kubernetes' pricing calculator scenario that helps teams estimate total cost of ownership for a production-ready Azure Kubernetes Service (AKS) cluster and associated Azure services.

k8s: Kubernetes 1.35: Enhanced Debugging with Versioned z-pages APIs

Kubernetes Official Blog

2025-12-31

Kubernetes 1.35 adds opt-in, versioned, machine-parseable JSON responses for the existing /statusz and /flagz z-pages used by control plane components. The endpoints remain backward compatible (plain text by default); consumers request structured output by sending an Accept header with a versioned media type. Structured responses enable easier automation for health checks, config validation, and debugging tools. The feature is alpha, requires feature gates and proper RBAC/authentication, and is intended for debugging rather than production-critical automation.

k8s: Kubernetes v1.35: Watch Based Route Reconciliation in the Cloud Controller Manager

Kubernetes Official Blog

2025-12-30

Kubernetes v1.35 introduces an alpha feature gate (CloudControllerManagerWatchBasedRoutesReconciliation) in k8s.io/cloud-provider that changes the CCM route controller from a fixed-interval reconciliation to a watch/informer-based trigger model. The change reduces unnecessary cloud API calls by reconciling routes only when relevant node or CIDR/address fields change, with an additional randomized periodic reconcile every 12–24 hours. The reconciliation logic itself is unchanged and the feature is enabled via --feature-gate.

k8s: Kubernetes v1.35: Introducing Workload Aware Scheduling

Kubernetes Official Blog

2025-12-29

Kubernetes v1.35 introduces workload-aware scheduling with a new Workload API (scheduling.k8s.io/v1alpha1) to describe multi-Pod scheduling requirements, an initial gang scheduling implementation for all-or-nothing placement, and opportunistic batching (Beta) to speed scheduling of identical Pods. Gang scheduling uses podGroups, a workloadRef on Pods, and a Permit gate with a 5-minute timeout; opportunistic batching reuses feasibility checks for identical Pods but has strict identical-field restrictions. The release also outlines a broader roadmap (workload-level preemption, autoscaling integration, topology-aware scheduling) and explains required feature gates and how to test and give feedback.

k8s: Kubernetes v1.35: Fine-grained Supplemental Groups Control Graduates to GA

Kubernetes Official Blog

2025-12-23

Kubernetes v1.35 graduates fine-grained supplemental groups control to GA via a new Pod field, supplementalGroupsPolicy, letting clusters choose whether to merge group memberships from the container image (/etc/group) or enforce only groups declared in the Pod (Strict) to reduce implicit, hard-to-audit GIDs and improve security (especially for volume access).

k8s: Avoiding Zombie Cluster Members When Upgrading to etcd v3.6

Kubernetes Official Blog

2025-12-21

Upgrade to etcd v3.5.26 or later before moving to v3.6 to let etcd auto-sync membership data (v3store) from the legacy v2store and prevent removed nodes from reappearing as "zombie" members that can make the cluster inoperable.

k8s: Kubernetes 1.35: In-Place Pod Resize Graduates to Stable

Kubernetes Official Blog

2025-12-19

Kubernetes 1.35 graduates In-Place Pod Resize (In-Place Pod Vertical Scaling) to stable (GA). The feature makes CPU and memory requests and limits mutable on a running Pod (via a resize subresource), often without restarting containers. This enables non-disruptive resource adjustments, more powerful autoscaling (e.g., VPA InPlaceOrRecreate), transient boosts like CPU startup boost, and better resource efficiency. The release also adds prioritized retries, allows memory limit decreases (best-effort OOM protection), alpha support for Pod Level Resources, and new kubelet metrics/events. Work remains on runtime support, scheduler/kubelet races, expanded feature support, and integrations with autoscalers and other projects.

k8s: Kubernetes v1.35: Job Managed By Goes GA

Kubernetes Official Blog

2025-12-18

Kubernetes v1.35 promotes .spec.managedBy for Jobs to GA, enabling external controllers (e.g., MultiKueue) to take full responsibility for Job reconciliation and enabling multi-cluster batch scheduling patterns while leaving built-in Job controller behavior intact for other Jobs.

k8s: Kubernetes v1.35: Timbernetes (The World Tree Release)

Kubernetes Official Blog

2025-12-17

Kubernetes v1.35 ("Timbernetes / World Tree" release) ships 60 enhancements (17 stable, 19 beta, 22 alpha), focused on smoother nondisruptive scaling, native pod certificate-based workload identity, improved scheduling correctness, storage and topology improvements, and several important deprecations/removals. The release emphasizes stability, performance, and security hardening (notable GA features, new betas/alphas, and migration guidance for cgroup and containerd).

November (3)

k8s: Kubernetes v1.35 Sneak Peek

Kubernetes Official Blog

2025-11-26

Kubernetes v1.35 (planned 2025-12-17) introduces several deprecations and new/advanced features. Major removals/deprecations include cgroup v1 support removal, deprecation of kube-proxy ipvs mode, and final support for containerd v1.x (users must move to containerd 2.0+). Notable enhancements likely in v1.35 include node declared features (alpha), in-place Pod resource updates (GA), pod certificates (beta), numeric taint comparisons, continued progress on user namespaces, and image volumes becoming default.

k8s: Kubernetes Configuration Good Practices

Kubernetes Official Blog

2025-11-25

This article collects practical Kubernetes configuration best practices: prefer current stable APIs, keep manifests minimal and version-controlled, write YAML carefully (watch boolean values), group related objects, favor controllers (Deployments/Jobs) over naked Pods, use Services and DNS properly, avoid hostNetwork/hostPort unless necessary, apply semantic/common labels, add helpful annotations, and use kubectl features like applying directories, label selectors and server-side apply to simplify management.

azure: [Launched] Generally Available: Cluster-wide Cilium network policy with Azure CNI powered by Cilium for AKS

Azure Updates

2025-11-20

Azure announced General Availability of cluster-wide Cilium network policy for AKS clusters using Azure CNI powered by Cilium. The feature enables consistent, cluster-scoped network policy enforcement across Kubernetes namespaces, addressing a common challenge for platform teams and multi-tenant environments.