1. Argo Workflows, a workflow engine for orchestrating parallel jobs on Kubernetes (a part of Argo, a CNCF Graduated project), released its 4.1, which added 31 new features. They cover OpenTelemetry traces for the controller and executor, Kubernetes DRA support, Pod-level requests and limits, initless Pods, streaming save path for artifact drivers, database authentication via AWS RDS IAM and Azure PostgreSQL Entra ID, MariaDB support, workflow-level executor plugin configuration, and more.
2. Prometheus (a CNCF Graduated project) released 3.14.0 with PromQL duration expressions enabled by default and
first_over_time promoted to stable, Oracle Cloud Infrastructure compute service discovery, and experimental support for encoding start timestamps in histograms.3. Crossplane (a CNCF Graduated project) released 2.4.0, which added watching the resources required by each XR, zero replicas for just-launched safe-start provider runtimes (until they become active), vulnerability-scannable container images, hardening across composition and package paths, and version-aware documentation search
4. Strimzi, a Kafka operator for Kubernetes (a CNCF Incubating project), has seen its 1.2.0 with Apache Kafka 4.3.1 support, templated (per Pod) additional volumes, eliminated auto-mounting of Service Account tokens into Pods, server-side apply becoming GA, and more updates.
5. Open Policy Agent (a CNCF Graduated project) released v1.20.0, featuring new Rego keywords (
and and or) for combining conditions inside a single rule body as well as dozens of other improvements across the project's whole ecosystem.6. Istio (a CNCF Graduated project) reached 1.31.0. This release added a GatewayClass for deploying agentgateway as a waypoint proxy, Gateway API
AllowInsecureFallback feature implementation for client certificate validation, weighted waypoint canaries, zone-aware load balancing, mesh-wide default traffic policy, FIPS 140-3 compliance policy, ztunnel CPU-aware worker threads, multi-target Prometheus scraping, and many more new features.7. Inspektor Gadget, a set of tools and framework for inspecting Kubernetes clusters and Linux hosts using eBPF (a CNCF Sandbox project), was updated to v0.56.0. It introduced experimental support for Kubernetes multi-tenancy (based on namespaces), rootless
ig image commands, and switching to kubelet's /сonfigz for container runtime socket auto-detection.#news #releases