Kubernetes 1.30 "Uwubernetes": 45 enhancements, including stable CEL admission policies

2024-04-17 · Publisher : Kubernetes · Domain : Cloud & DevOps

On 17 April 2024, Kubernetes 1.30 ships 45 enhancements (17 stable, 18 beta, 10 alpha): per-container autoscaling, CEL admission control, AppArmor, scheduling gates and structured authentication configuration.

### What changes On 17 April 2024, the release team announces **Kubernetes 1.30**, named "Uwubernetes". The release has **45 enhancements**: 17 move to stable, 18 to beta and 10 start in alpha. The cycle lasted 14 weeks, from 8 January to 17 April, with contributions from 863 companies and 1,391 individuals. ### Key facts - Moving to stable: horizontal autoscaling based on each container's resources, CEL for admission control, AppArmor support, pod scheduling readiness (scheduling gates), API server tracing and aggregated discovery. - Moving to beta: structured authentication and authorization configuration, which allows, for example, chaining several authorization webhooks. - Starting in alpha: a Job success policy, the Service `trafficDistribution` field (value `PreferClose`) and a storage version migration API. - Removal of the `SecurityContextDeny` admission plugin, deprecated since 1.27: the documentation recommends Pod Security Admission instead. ### Why it matters For teams running clusters, 1.30 reduces dependence on external admission webhooks thanks to policies written in CEL, which are faster and easier to audit. Scheduling gates also help control costs with a node autoscaler, by avoiding starting machines for pods that cannot be scheduled. To plan: removing `SecurityContextDeny` requires checking pod security policies before upgrading. The release team notes that most contributors are not paid for this work. ### Takeaway Kubernetes 1.30 moves part of security policy into the API server itself, with CEL now stable.

Tags : Kubernetes, Cloud natif, Sécurité, Open Source