Running Kubernetes Node Components as a Non-Root User

FEATURE STATE: Kubernetes v1.22 [alpha] This document describes how to run Kubernetes Node components such as kubelet, CRI, OCI, and CNI without root privileges, by using a user namespace.This technique is also known as rootless mode.Note: This document describes how to run Kuber … | Continue reading


@kubernetes.io | 1 year ago

Multi-Tenancy in Kubernetes

This page provides an overview of available configuration options and best practices for cluster multi-tenancy.Sharing clusters saves costs and simplifies administration. However, sharing clusters also presents challenges such as security, fairness, and managing noisy neighbors.C … | Continue reading


@kubernetes.io | 1 year ago

Current State: 2019 Third Party Security Audit of Kubernetes

Authors (in alphabetical order): Cailyn Edwards (Shopify), Pushkar Joglekar (VMware), Rey Lejano (SUSE) and Rory McCune (DataDog)We expect the brand new Third Party Security Audit of Kubernetes will be published later this month (Oct 2022).In preparation for that, let's look at t … | Continue reading


@kubernetes.io | 1 year ago

Kubernetes 1.24

Kubernetes 1.24 Authors: Kubernetes 1.24 Release TeamWe are excited to announce the release of Kubernetes 1.24, the first release of 2022!This release consists of 46 enhancements: fourteen enhancements have graduated to stable, fifteen enhancements are moving to beta, and thirtee … | Continue reading


@kubernetes.io | 1 year ago

Kubernetes Removals and Deprecations in 1.24

Author: Mickey Boxell (Oracle)As Kubernetes evolves, features and APIs are regularly revisited and removed. New features may offer an alternative or improved approach to solving existing problems, motivating the team to remove the old approach. Old APIs are first deprecated and t … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes Is Moving on from Dockershim: Commitments and Next Steps

Authors: Sergey Kanzhelev (Google), Jim Angel (Google), Davanum Srinivas (VMware), Shannon Kularathna (Google), Chris Short (AWS), Dawn Chen (Google)Kubernetes is removing dockershim in the upcoming v1.24 release. We're excited to reaffirm our community values by supporting open … | Continue reading


@kubernetes.io | 2 years ago

Using Admission Controllers to Detect Container Drift at Runtime

Author: Saifuding Diliyaer (Box) Illustration by Munire Aireti At Box, we use Kubernetes (K8s) to manage hundreds of micro-services that enable Box to stream data at a petabyte scale. When it comes to the deployment process, we run kube-applier as part of the GitOps workflows … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes-in-Kubernetes and the WEDOS PXE bootable server farm

Author: Andrei Kvapil (WEDOS)When you own two data centers, thousands of physical servers, virtual machines and hosting for hundreds of thousands sites, Kubernetes can actually simplify the management of all these things. As practice has shown, by using Kubernetes, you can declar … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes 1.23: Dual-Stack IPv4/IPv6 Networking Reaches GA

Author: Bridget Kromhout (Microsoft)"When will Kubernetes have IPv6?" This question has been asked with increasing frequency ever since alpha support for IPv6 was first added in k8s v1.9. While Kubernetes has supported IPv6-only clusters since v1.18, migration from IPv4 to IPv6 w … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes 1.23

Authors: Kubernetes 1.23 Release TeamWe’re pleased to announce the release of Kubernetes 1.23, the last release of 2021!This release consists of 47 enhancements: 11 enhancements have graduated to stable, 17 enhancements are moving to beta, and 19 enhancements are entering alpha. … | Continue reading


@kubernetes.io | 2 years ago

Dockershim removal is coming. Are you ready?

Author: Sergey Kanzhelev, Google. With reviews from Davanum Srinivas, Elana Hashman, Noah Kantrowitz, Rey Lejano.Last year we announced that Dockershim is being deprecated: Dockershim Deprecation FAQ. Our current plan is to remove dockershim from the Kubernetes codebase soon. We … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes 1.22: Reaching New Peaks

Authors: Kubernetes 1.22 Release TeamWe’re pleased to announce the release of Kubernetes 1.22, the second release of 2021!This release consists of 53 enhancements: 13 enhancements have graduated to stable, 24 enhancements are moving to beta, and 16 enhancements are entering alpha … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes 1.22: Reaching New Peaks

Authors: Kubernetes 1.22 Release TeamWe’re pleased to announce the release of Kubernetes 1.22, the second release of 2021!This release consists of 53 enhancements: 13 enhancements have graduated to stable, 24 enhancements are moving to beta, and 16 enhancements are entering alpha … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes Release Cadeance Changes to 3 Times Annualy

Authors: Celeste Horgan, Adolfo García Veytia, James Laverack, Jeremy RickardOn April 23, 2021, the Release Team merged a Kubernetes Enhancement Proposal (KEP) changing the Kubernetes release cycle from four releases a year (once a quarter) to three releases a year.This blog post … | Continue reading


@kubernetes.io | 2 years ago

Kubernetes API and Feature Removals in 1.22: Here’s What You Need to Know

Authors: Krishna Kilari (Amazon Web Services), Tim Bannister (The Scale Factory)As the Kubernetes API evolves, APIs are periodically reorganized or upgraded. When APIs evolve, the old APIs they replace are deprecated, and eventually removed. See Kubernetes API removals to read mo … | Continue reading


@kubernetes.io | 2 years ago

Evolving-Kubernetes-networking-with-the-gateway-API

Authors: Mark Church (Google), Harry Bagdi (Kong), Daneyon Hanson (Red Hat), Nick Young (VMware), Manuel Zapf (Traefik Labs)The Ingress resource is one of the many Kubernetes success stories. It created a diverse ecosystem of Ingress controllers which were used across hundreds of … | Continue reading


@kubernetes.io | 3 years ago

Kubernetes Third Party Device Metrics Reaches GA

Authors: Renaud Gaubert (NVIDIA), David Ashpole (Google), and Pramod Ramarao (NVIDIA)With Kubernetes 1.20, infrastructure teams who manage large scale Kubernetes clusters, are seeing the graduation of two exciting and long awaited features: The Pod Resources API (introduced in 1. … | Continue reading


@kubernetes.io | 3 years ago

Kubernetes 1.20

Authors: Kubernetes 1.20 Release TeamWe’re pleased to announce the release of Kubernetes 1.20, our third and final release of 2020! This release consists of 42 enhancements: 11 enhancements have graduated to stable, 15 enhancements are moving to beta, and 16 enhancements are ente … | Continue reading


@kubernetes.io | 3 years ago

Don't Panic: Kubernetes and Docker

Authors: Jorge Castro, Duffie Cooley, Kat Cosgrove, Justin Garrison, Noah Kantrowitz, Bob Killen, Rey Lejano, Dan “POP” Papandrea, Jeffrey Sica, Davanum “Dims” SrinivasKubernetes is deprecating Docker as a container runtime after v1.20.You do not need to panic. It’s not as dramat … | Continue reading


@kubernetes.io | 3 years ago

Kubernetes 1.19 Released

Authors: Kubernetes 1.19 Release TeamFinally, we have arrived with Kubernetes 1.19, the second release for 2020, and by far the longest release cycle lasting 20 weeks in total. It consists of 33 enhancements: 12 enhancements are moving to stable, 18 enhancements in beta, and 13 e … | Continue reading


@kubernetes.io | 3 years ago

Extending Ingress with and replacing a deprecated annotation with IngressClass

v1.18.0 DocumentationDownloads for v1.18.0 filename sha512 hash kubernetes.tar.gz cd5b86a3947a4f2cea6d857743ab2009be127d782b6f2eb4d37d88918a5e433ad2c7ba34221c34089ba5ba13701f58b657f0711401e51c86f4007cb78744dee7 kubernetes-src.tar.gz fb42cf133355ef18f67c8c4bb555aa1f284906 … | Continue reading


@kubernetes.io | 3 years ago

Cluster API v1alpha3 Delivers New Features and an Improved User Experience

Author: Daniel Lipovetsky (D2IQ)The Cluster API is a Kubernetes project to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management. It provides optional, additive functionality on top of core Kubernetes to manage the lifecycle of a Kubernetes c … | Continue reading


@kubernetes.io | 4 years ago

Kubernetes Topology Manager Moves to Beta – Align Up – Kubernetes

Authors: Kevin Klues (NVIDIA), Victor Pickard (Red Hat), Conor Nolan (Intel)This blog post describes the TopologyManager, a beta feature of Kubernetes in release 1.18. The TopologyManager feature enables NUMA alignment of CPUs and peripheral devices (such as SR-IOV VFs and GPUs), … | Continue reading


@kubernetes.io | 4 years ago

Kubectl Plugins

Author: Cornelius Weig (TNG Technology Consulting GmbH)kubectl is the most critical tool to interact with Kubernetes and has to address multiple user personas, each with their own needs and opinions. One way to make kubectl do what you need is to build new functionality into kube … | Continue reading


@kubernetes.io | 4 years ago

KubeInvaders – Gamified Chaos Engineering Tool for Kubernetes

Authors Eugenio Marzo, SourcesenseSome months ago, I released my latest project called KubeInvaders. The first time I shared it with the community was during an Openshift Commons Briefing session. Kubenvaders is a Gamified Chaos Engineering tool for Kubernetes and Openshift and h … | Continue reading


@kubernetes.io | 4 years ago

Kubernetes 1.17.0 Release

Authors: Kubernetes 1.17 Release TeamWe’re pleased to announce the delivery of Kubernetes 1.17, our fourth and final release of 2019! Kubernetes v1.17 consists of 22 enhancements: 14 enhancements have graduated to stable, 4 enhancements are moving to beta, and 4 enhancements are … | Continue reading


@kubernetes.io | 4 years ago

Kubernetes 1.16 Is Released

Authors: Kubernetes 1.16 Release TeamWe’re pleased to announce the delivery of Kubernetes 1.16, our third release of 2019! Kubernetes 1.16 consists of 31 enhancements: 8 enhancements moving to stable, 8 enhancements in beta, and 15 enhancements in alpha.Major Themes Custom resour … | Continue reading


@kubernetes.io | 4 years ago

Announcing Etcd 3.4.0

Authors: Gyuho Lee (Amazon Web Services, @gyuho), Jingyi Hu (Google, @jingyih)etcd 3.4 focuses on stability, performance and ease of operation, with features like pre-vote and non-voting member and improvements to storage backend and client balancer.Please see CHANGELOG for full … | Continue reading


@kubernetes.io | 4 years ago

Kubernetes Gatekeeper 3.0 for policy enforcement

Authors: Rita Zhang (Microsoft), Max Smythe (Google), Craig Hooper (Commonwealth Bank AU), Tim Hinrichs (Styra), Lachie Evenson (Microsoft), Torin Sandall (Styra)The Open Policy Agent Gatekeeper project can be leveraged to help enforce policies and strengthen governance in your K … | Continue reading


@kubernetes.io | 4 years ago

Get Started with Kubernetes (Using Python)

Author: Jason Haley (Independent Consultant)So, you know you want to run your application in Kubernetes but don’t know where to start. Or maybe you’re getting started but still don’t know what you don’t know. In this blog you’ll walk through how to containerize an application and … | Continue reading


@kubernetes.io | 4 years ago

Volume Cloning Alpha for Kubernetes

Author: John Griffith (Red Hat)Kubernetes v1.15 introduces alpha support for volume cloning. This feature allows you to create new volumes using the contents of existing volumes in the user’s namespace using the Kubernetes API.What is a Clone? Many storage systems provide the abi … | Continue reading


@kubernetes.io | 4 years ago

Future of CRDs: Structural Schemas

Authors: Stefan Schimanski (Red Hat)CustomResourceDefinitions were introduced roughly two years ago as the primary way to extend the Kubernetes API with custom resources. From the beginning they stored arbitrary JSON data, with the exception that kind, apiVersion and metadata had … | Continue reading


@kubernetes.io | 4 years ago

Kubernetes 1.15: Extensibility and Continuous Improvement

Authors: The 1.15 Release TeamWe’re pleased to announce the delivery of Kubernetes 1.15, our second release of 2019! Kubernetes 1.15 consists of 25 enhancements: 2 moving to stable, 13 in beta, and 10 in alpha. The main themes of this release are: Continuous Improvement Project … | Continue reading


@kubernetes.io | 4 years ago

Kyma – extend and build on Kubernetes with ease

Authors: Lukasz Gornicki (SAP)According to this recently completed CNCF Survey, the adoption rate of Cloud Native technologies in production is growing rapidly. Kubernetes is at the heart of this technological revolution. Naturally, the growth of cloud native technologies has bee … | Continue reading


@kubernetes.io | 4 years ago

Kubernetes 1.14

Authors: The 1.14 Release TeamWe’re pleased to announce the delivery of Kubernetes 1.14, our first release of 2019!Kubernetes 1.14 consists of 31 enhancements: 10 moving to stable, 12 in beta, and 7 net new. The main themes of this release are extensibility and supporting more wo … | Continue reading


@kubernetes.io | 5 years ago

Production-Ready Kubernetes Cluster Creation with Kubeadm

Authors: Lucas Käldström (CNCF Ambassador) and Luc Perkins (CNCF Developer Advocate)kubeadm is a tool that enables Kubernetes administrators to quickly and easily bootstrap minimum viable clusters that are fully compliant with Certified Kubernetes guidelines. It’s been under acti … | Continue reading


@kubernetes.io | 5 years ago

Kubernetes 1.13 released

Author: The 1.13 Release TeamWe’re pleased to announce the delivery of Kubernetes 1.13, our fourth and final release of 2018!Kubernetes 1.13 has been one of the shortest releases to date at 10 weeks. This release continues to focus on stability and extensibility of Kubernetes wit … | Continue reading


@kubernetes.io | 5 years ago

GRPC Load Balancing on Kubernetes Without Tears

Author: William Morgan (Buoyant)Many new gRPC users are surprised to find that Kubernetes’s default load balancing often doesn’t work out of the box with gRPC. For example, here’s what happens when you take a simple gRPC Node.js microservices app and deploy it on Kubernetes:While … | Continue reading


@kubernetes.io | 5 years ago

Contribute to Kubernetes without writing code

Author: Noah Abrahams (InfoSiftr), Jonas Rosland (VMware), Ihor Dvoretskyi (CNCF)It was May 2018 in Copenhagen, and the Kubernetes community was enjoying the contributor summit at KubeCon/CloudNativeCon, complete with the first run of the New Contributor Workshop. As a time of tr … | Continue reading


@kubernetes.io | 5 years ago

KubeDirector: The easy way to run complex stateful applications on Kubernetes

Author: Thomas Phelan (BlueData)KubeDirector is an open source project designed to make it easy to run complex stateful scale-out application clusters on Kubernetes. KubeDirector is built using the custom resource definition (CRD) framework and leverages the native Kubernetes API … | Continue reading


@kubernetes.io | 5 years ago

Topology-Aware Volume Provisioning in Kubernetes

Author: Michelle Au (Google)The multi-zone cluster experience with persistent volumes is improving in Kubernetes 1.12 with the topology-aware dynamic provisioning beta feature. This feature allows Kubernetes to make intelligent decisions when dynamically provisioning volumes by g … | Continue reading


@kubernetes.io | 5 years ago

Kubernetes v1.12: Introducing RuntimeClass

Author: Tim Allclair (Google)Kubernetes originally launched with support for Docker containers running native applications on a Linux host. Starting with rkt in Kubernetes 1.3 more runtimes were coming, which lead to the development of the Container Runtime Interface (CRI). Since … | Continue reading


@kubernetes.io | 5 years ago

Introducing Volume Snapshot Alpha for Kubernetes

Author: Jing Xu (Google) Xing Yang (Huawei), Saad Ali (Google)Kubernetes v1.12 introduces alpha support for volume snapshotting. This feature allows creating/deleting volume snapshots, and the ability to create new volumes from a snapshot natively using the Kubernetes API.What is … | Continue reading


@kubernetes.io | 5 years ago

Health checking gRPC servers on Kubernetes

Author: Ahmet Alp Balkan (Google)gRPC is on its way to becoming the lingua franca for communication between cloud-native microservices. If you are deploying gRPC applications to Kubernetes today, you may be wondering about the best way to configure health checks. In this article, … | Continue reading


@kubernetes.io | 5 years ago

Kubernetes 1.12

Author: The 1.12 Release TeamWe’re pleased to announce the delivery of Kubernetes 1.12, our third release of 2018!Today’s release continues to focus on internal improvements and graduating features to stable in Kubernetes. This newest version graduates key features such as securi … | Continue reading


@kubernetes.io | 5 years ago

Hands on with Linkerd 2.0

Author: Thomas Rampelberg (Buoyant)Linkerd 2.0 was recently announced as generally available (GA), signaling its readiness for production use. In this tutorial, we’ll walk you through how to get Linkerd 2.0 up and running on your Kubernetes cluster in a matter seconds.But first, … | Continue reading


@kubernetes.io | 5 years ago

The Machines Can Do the Work: Testing, CI, Automating the Contributor Experience

Author: Aaron Crickenberger (Google) and Benjamin Elder (Google)“Large projects have a lot of less exciting, yet, hard work. We value time spent automating repetitive work more highly than toil. Where that work cannot be automated, it is our culture to recognize and reward all ty … | Continue reading


@kubernetes.io | 5 years ago

Introducing Kubebuilder: An SDK for Building Kubernetes APIs Using CRDs

Introducing Kubebuilder: an SDK for building Kubernetes APIs using CRDs | Continue reading


@kubernetes.io | 5 years ago