Kubernetes 1.23 (“The Next Frontier”) was released on 7 December 2021.
| Change | Notes |
|---|---|
HPA autoscaling/v2 is GA |
Multiple and custom metrics via a stable API |
| IPv4/IPv6 dual-stack is GA | Pods and services can have both families |
| Pod Security Admission (beta) | Built-in replacement for PodSecurityPolicy, enabled by default |
| Ephemeral containers (beta) | kubectl debug into running pods |
| FlexVolume deprecated | Move to CSI drivers |
PodSecurityPolicy, deprecated since 1.21, is scheduled for removal in 1.25. Start moving to Pod Security Standards by labelling namespaces:
kubectl label ns shop pod-security.kubernetes.io/enforce=baseline \
pod-security.kubernetes.io/warn=restricted
kubectl debug -it web-6d4f --image=busybox:1.34 --target=web
As always, read the release notes and test upgrades on a non-production cluster. Managed services such as EKS will lag by a few months.