Kubernetes v1.29: Mandala
…For highly sensitive data, maybe only one user is allowed to read and write data but nobody else. Before v1.22, Kubernetes offered three access modes for PVs and PVCs: ReadWriteOnce – the…
Search
Announcing the Checkpoint/Restore Working Group
…CRIU - A tool for checkpointing and restoring running applications and containers checkpointctl - A tool for in-depth analysis of container checkpoints criu-coordinator - A tool for coordinated checkpoint/restore of distributed applications…
Experimenting with Gateway API using kind
…elevated privileges to access the Docker socket. Verify that cloud-provider-kind is running: docker ps --filter name = cloud-provider-kind You should see the container listed and in a running state…
Kubernetes v1.26: Electrifying
…using cosign , and both binary artifacts and images can be verified . Support for Windows privileged containers graduates to stable Privileged container support allows containers to run with similar access to the host…
Kubernetes v1.32: Penelope
…For example, the admin can choose to only allow anonymous access to health endpoints like /healthz , /livez , and /readyz while making sure preventing anonymous access to other cluster endpoints or resources even…
Kubernetes v1.27: Chill Vibes
…true and the volume has Access Mode ReadWriteOncePod , then it will ask the CSI driver to mount the volume with mount option context= and it will tell the container runtime not to…
The Invisible Rewrite: Modernizing the Kubernetes Image Promoter
…In early 2019, the code moved to kubernetes-sigs/k8s-container-image-promoter and grew quickly. Over the next few years, Stephen Augustus consolidated multiple tools ( cip , gh2gcs , krel promote-images , promobot…
Kubernetes 1.20: The Raddest Release
…ephemeral container. (Ephemeral containers are an alpha feature that are not enabled by default.) Troubleshoot on a node by creating a container running in the host namespaces and with access to the…
Spotlight on WG Device Management
…That requirement involves the scheduler (place the pods on the right nodes), the kubelet (configure the devices and expose them to the container), and potentially autoscaling (provision the right node type if…
Kubernetes v1.36: Moving Volume Group Snapshots to GA
…This is extremely useful for applications that contain multiple volumes. For example, an application may have data stored in one volume and logs stored in another. If snapshots for these volumes are…