github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-21 10:51:29 +00:00
Code Issues Projects Releases Wiki Activity

Add distroless change into changelog

Browse Source
This commit is contained in:
Ricardo Katz 2022-08-23 21:37:45 -03:00
parent 15a5136c26
commit e14d2e8796
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGELOG/CHANGELOG-1.25.md
View File

@ -21,6 +21,7 @@
- [Promoted CSI Ephemeral Volume to Stable](#promoted-csi-ephemeral-volume-to-stable)
- [Promoted CRD Validation Expression Language to Beta](#promoted-crd-validation-expression-language-to-beta)
- [Promoted Server Side Unknown Field Validation to Beta](#promoted-server-side-unknown-field-validation-to-beta)
- [Kube-proxy images are now based in distroless](#kube-proxy-images-are-now-based-in-distroless)
- [Introduced KMS v2](#introduced-kms-v2)
- [Urgent Upgrade Notes](#urgent-upgrade-notes)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade)
@ -275,6 +276,10 @@ Promoted the `ServerSideFieldValidation` feature gate to beta (on by default). T
Introduce KMS v2alpha1 API to add performance, rotation, and observability improvements. Encrypt data at rest (ie Kubernetes `Secrets`) with DEK using AES-GCM instead of AES-CBC for kms data encryption. No user action is required. Reads with AES-GCM and AES-CBC will continue to be allowed. See the guide [Using a KMS provider for data encryption](https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/) for more information.
### Kube-proxy images are now based in distroless
In previous releases, kube-proxy docker images were built using Debian as the base image. Starting with this release the images are now built using [distroless](https://github.com/GoogleContainerTools/distroless). This change reduced image size by almost 50% and reduced the number of installed packages and files to only the strict required to kube-proxy do its job.
## Urgent Upgrade Notes
### (No, really, you MUST read this before you upgrade)