| Re: [tractusx-dev] Action Required: Kubernetes New Release (1.33.0) |
|
Dear DevSecOps Team,
we would like to postpone the Kubernetes upgrade for our AKS unless there are compelling technical or operational reasons to proceed immediately. We prefer waiting until our current test phase is completed. This would allow us to carry out the upgrade in a
more controlled and low-risk manner.
Currently, Kubernetes version 1.33 is not supported by Azure, and no official release date has been announced. As such, the highest available version for upgrade is 1.32.
It is advisable to perform the upgrade first in the integration environment before rolling it out to the other stages. Since a direct upgrade is not possible, the cluster must be updated sequentially through several versions (1.29 → 1.30 → 1.31 → 1.32). This
process carries the risk of hitting the Docker pull rate limit, potentially leading to downtime. In such cases, the cluster would need to be shut down until the rate limit reset is reached.
Additional arguments in favor of postponement are the significant changes introduced between versions 1.30 and 1.32:
Identified risks:
* Removal of deprecated APIs (e.g. PodSecurityPolicy, batch/v1beta1), which could lead to service disruptions if still referenced in legacy deployments or custom resource definitions.
* Changes in the admission and scheduling logic (e.g. webhooks, PDBs) could cause unexpected side effects.
* Network changes (kube-proxy, DNS) that could impact production workloads if not thoroughly tested in advance.
Why a delay is currently justifiable:
* Our current version (v1.29.10) is fully supported by Azure Kubernetes Service and includes the latest security patches.
* While the new features in versions 1.30 through 1.32 (e.g., scheduler enhancements, container lifecycle hooks, debugging APIs) offer technical improvements, they are not critical for our current operational needs.
* Delaying the upgrade ensures we can validate compatibility in a non-critical environment and roll out changes more reliably across all stages.
Please let us know if there are considerations that would warrant a more urgent timeline.
Best regards,
DevOps on behalf of Catena-X Automotive Network e.V.
-----------------------------------------------------------------------------------------------------
Stefan Di Leo Softwareentwickler doubleSlash Net-Business GmbH Otto-Lilienthal-Str. 16 D-88046 Friedrichshafen
Fon: +49 7541 / 70078-145 Fax: +49 7541 / 70078-111 Stefan.DiLeo@xxxxxxxxxxxxxx ------------------------------------------------------------------------------------------------------ doubleSlash Net-Business GmbH Geschäftsführung: Konrad Krafft, Andreas Strobel, Patrick Schmerbach Sitz, Registergericht: Friedrichshafen, Amtsgericht Ulm HRB 631718 ------------------------------------------------------------------------------------------------------
From: tractusx-dev on behalf of eclipse.tractusx--- via tractusx-dev
Sent: Thursday, April 24, 2025 03:35 To: tractusx-dev@xxxxxxxxxxx Cc: eclipse.tractusx@xxxxxxxxx Subject: [tractusx-dev] Action Required: Kubernetes New Release (1.33.0)
|