Release Spotlight: containerd 2.0.0
containerd, a well-known container runtime (a CNCF Graduated project), has released its second major version. It brought numerous new features, both stable and experimental. Now, the Transfer service and Sandbox service are stable; NRI (Node Resource Interface), CDI (Container Device Interface), and sandboxed CRI (Container Runtime Interface) are enabled by default.
containerd v2 also features image verifier plugins (for policy enforcement at the image’s pull time), OpenTelemetry environment variable configuration support for built-in tracing plugin, CRI support for user namespaces and recursive read-only mounts. Find more details on the release in the docs and a basic migration guide in this article.
Other significant updates in the Cloud Native space:
1. Open Policy Agent (OPA), a general-purpose policy engine (a CNCF Graduated project), released its v0.70.0, featuring a new optimised read mode for the default in-memory store and a few other improvements.
2. Crossplane, a framework for building Cloud Native control planes (a CNCF Incubating project), delivered v1.18.0 last week. It came with two new alpha features, dependency version upgrade support and package image signature verification with cosign, as well as support for package installation with digests, authenticating private registries, converting to
function-environment-configs, and passing credentials to functions in the render function.3. Envoy Gateway (a CNCF Graduated project) v1.2.0 was released last week, bringing full compatibility with Gateway API v1.2.0. It also introduced the experimental standalone (host deployment) mode, active-passive failover,
Response Override and RequestTimeout in BackendTrafficPolicy, session persistence in HTTPRoute, direct response and path regex rewrites in HTTPRouteFilter, JWT claims-based authorisation, a Prometheus metrics endpoint, and more.4. Istio (a CNCF Graduated project) 1.24.0 arrived with general availability of the ambient mode. It got various enhancements while its core features (ztunnel, waypoints, and APIs) were declared stable. This release also improved the automatic retries, which are now available not only on the client sidecar but on the server sidecar as well.
5. Rook, a Cloud Native storage orchestrator for Kubernetes (a CNCF Graduated project), v1.15.5 introduced an experimental support for pool placements, allowing you to override where bucket data will be stored. Other changes include scheduling OSDs on unschedulable nodes and key rotation support for Vault KMS.
P.S. As a small bonus, the "Sneak peek of Kubernetes v1.32" article was published recently, covering the changes we can expect in the next K8s release (scheduled for December 11th).
#news #releases