Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add distroless change into changelog #111983

Merged
merged 2 commits into from
Aug 25, 2022
Merged

Add distroless change into changelog #111983

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e14d2e8
Add distroless change into changelog
rikatz Aug 24, 2022
6657ee9
Update CHANGELOG/CHANGELOG-1.25.md
rikatz Aug 24, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
5 changes: 5 additions & 0 deletions CHANGELOG/CHANGELOG-1.25.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@
- [Promoted CSI Ephemeral Volume to Stable](#promoted-csi-ephemeral-volume-to-stable)
- [Promoted CRD Validation Expression Language to Beta](#promoted-crd-validation-expression-language-to-beta)
- [Promoted Server Side Unknown Field Validation to Beta](#promoted-server-side-unknown-field-validation-to-beta)
- [Kube-proxy images are now based in distroless](#kube-proxy-images-are-now-based-in-distroless)
- [Introduced KMS v2](#introduced-kms-v2)
- [Urgent Upgrade Notes](#urgent-upgrade-notes)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade)
Expand Down Expand Up @@ -275,6 +276,10 @@ Promoted the `ServerSideFieldValidation` feature gate to beta (on by default). T

Introduce KMS v2alpha1 API to add performance, rotation, and observability improvements. Encrypt data at rest (ie Kubernetes `Secrets`) with DEK using AES-GCM instead of AES-CBC for kms data encryption. No user action is required. Reads with AES-GCM and AES-CBC will continue to be allowed. See the guide [Using a KMS provider for data encryption](https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/) for more information.

### Kube-proxy images are now based in distroless

In previous releases, kube-proxy docker images were built using Debian as the base image. Starting with this release the images are now built using [distroless](https://github.com/GoogleContainerTools/distroless). This change reduced image size by almost 50% and reduced the number of installed packages and files to only to those strictly required for kube-proxy do its job.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(nit / for future reference)
I tend to write “container images” rather than “docker images”, assuming that everyone will know that we mean https://github.com/opencontainers/image-spec or something reasonably compatible.


## Urgent Upgrade Notes

### (No, really, you MUST read this before you upgrade)
Expand Down