Posts in 2020
-
Kubernetes 1.20: Pod Impersonation and Short-lived Volumes in CSI Drivers
By Shihang Zhang (Google) | Friday, December 18, 2020 in Blog
Typically when a CSI driver mounts credentials such as secrets and certificates, it has to authenticate against storage providers to access the credentials. However, the access to those credentials are controlled on the basis of the pods' identities …
-
Third Party Device Metrics Reaches GA
By Renaud Gaubert (NVIDIA), David Ashpole (Google), Pramod Ramarao (NVIDIA) | Wednesday, December 16, 2020 in Blog
With Kubernetes 1.20, infrastructure teams who manage large scale Kubernetes clusters, are seeing the graduation of two exciting and long awaited features: The Pod Resources API (introduced in 1.13) is finally graduating to GA. This allows Kubernetes …
-
Kubernetes 1.20: Granular Control of Volume Permission Changes
By Hemant Kumar (Red Hat), Christian Huffman (Red Hat) | Monday, December 14, 2020 in Blog
Kubernetes 1.20 brings two important beta features, allowing Kubernetes admins and users alike to have more adequate control over how volume permissions are applied when a volume is mounted inside a Pod. Allow users to skip recursive permission …
-
Kubernetes 1.20: Kubernetes Volume Snapshot Moves to GA
By Xing Yang (VMware), Xiangqian Yu (Google) | Thursday, December 10, 2020 in Blog
The Kubernetes Volume Snapshot feature is now GA in Kubernetes v1.20. It was introduced as alpha in Kubernetes v1.12, followed by a second alpha with breaking changes in Kubernetes v1.13, and promotion to beta in Kubernetes 1.17. This blog post …
-
Kubernetes 1.20: The Raddest Release
By Kubernetes 1.20 Release Team | Tuesday, December 08, 2020 in Blog
We’re pleased to announce the release of Kubernetes 1.20, our third and final release of 2020! This release consists of 42 enhancements: 11 enhancements have graduated to stable, 15 enhancements are moving to beta, and 16 enhancements are entering …
-
GSoD 2020: Improving the API Reference Experience
By Philippe Martin | Friday, December 04, 2020 in Blog
Editor's note: Better API references have been my goal since I joined Kubernetes docs three and a half years ago. Philippe has succeeded fantastically. More than a better API reference, though, Philippe embodied the best of the Kubernetes community …
-
Don't Panic: Kubernetes and Docker
By Jorge Castro, Duffie Cooley, Kat Cosgrove, Justin Garrison, Noah Kantrowitz, Bob Killen, Rey Lejano, Dan “POP” Papandrea, Jeffrey Sica, Davanum “Dims” Srinivas | Wednesday, December 02, 2020 in Blog
Update: Kubernetes support for Docker via dockershim is now removed. For more information, read the removal FAQ. You can also discuss the deprecation via a dedicated GitHub issue. Kubernetes is deprecating Docker as a container runtime after v1.20. …
-
Dockershim Deprecation FAQ
Wednesday, December 02, 2020 in Blog
Update: There is a newer version of this article available. This document goes over some frequently asked questions regarding the Dockershim deprecation announced as a part of the Kubernetes v1.20 release. For more detail on the deprecation of Docker …
-
Cloud native security for your clusters
By Pushkar Joglekar | Wednesday, November 18, 2020 in Blog
Over the last few years a small, security focused community has been working diligently to deepen our understanding of security, given the evolving cloud native infrastructure and corresponding iterative deployment practices. To enable sharing of …
-
Remembering Dan Kohn
By Kubernetes Steering Committee | Monday, November 02, 2020 in Blog
Dan Kohn was instrumental in getting Kubernetes and CNCF community to where it is today. He shared our values, motivations, enthusiasm, community spirit, and helped the Kubernetes community to become the best that it could be. Dan loved getting …