Kubernetes 1.31 "Elli": AppArmor stable, in-tree cloud provider code gone

2024-08-13 · Publisher : Kubernetes · Domain : Cloud & DevOps

On 13 August 2024, Kubernetes 1.31 ships 45 enhancements (11 stable, 22 beta, 12 alpha): AppArmor reaches stable and the last in-tree cloud provider code is removed, along with the CephFS and Ceph RBD plugins.

### Background On 13 August 2024, Kubernetes releases version **1.31 "Elli"**: 45 enhancements, including 11 stable, 22 beta and 12 alpha. The 14-week cycle (7 May to 13 August) involved 113 companies and 528 individuals; the wider cloud native ecosystem counts 379 and 2,268. ### Key facts - AppArmor reaches stable: profiles are set with the `appArmorProfile.type` security-context field instead of annotations. - Other stable graduations: PersistentVolume last phase transition time, kube-proxy ingress connectivity reliability, cgroup v1 moved to maintenance mode. - The last cloud provider integration code, which remained in the main repository (in-tree), is removed from the release. - The CephFS and Ceph RBD volume plugins are removed; volumes of these types stop working. - The node `kubeProxyVersion` field is deprecated, because its value was not reliable. ### Why it matters This is mostly a clean-up release, with concrete consequences for operators: anyone still using native CephFS or Ceph RBD volumes must migrate to CSI drivers before upgrading. Removing in-tree cloud provider code also means checking that external controllers are in place. Stable AppArmor simplifies hardening on distributions that use it. The release also deprecates the scheduler's old volume-limit plugins (AzureDiskLimits, EBSLimits, GCEPDLimits): the NodeVolumeLimits plugin replaces them, and scheduler configurations that name them must be checked. ### Takeaway Kubernetes 1.31 forces the move to CSI for Ceph and completes the extraction of cloud provider code.

Tags : Kubernetes, Cloud natif, Sécurité, Conteneurs