1 views collected around this technical thread.
Kubernetes v1.33 introduces the KubeletEnsureSecretPulledImages feature gate, which forces credential verification for cached private images, closing a ten‑year‑old security loophole that allowed Pods to reuse unauthorized images across namespaces regardless of imagePullPolicy settings.
The mixed version proxy, introduced as an alpha feature in Kubernetes 1.28, enables correct handling of HTTP requests across clusters with multiple API server versions by routing requests to a compatible peer, preventing 404 errors during upgrades and providing flags for configuration and security.
Version 1.27 of Kubernetes introduces numerous deprecations and removals, including the migration of k8s.gcr.io to registry.k8s.io, the elimination of several API versions and feature gates such as CSIStorageCapacity, seccomp annotations, and various volume expansion options, with guidance for maintainers on required updates.