Author: ACK

Version 1.22 is the second release of Kubernetes in 2021. The release contains 53 enhancements that are considered by the Kubernetes development team and community to take Kubernetes to new heights.

As one of the first container services to pass the Kubernetes consistency certification in the world, Aliyun Container Service Kubernetes edition (ACK) always strictly follows the community consistency, and timely provides component upgrades, optimization and more enhanced capabilities for the new version, to ensure that users can provide reliable seamless biochem and stable services. Kubernetes V1.22 updates and enhancements are available in ACK.

If you want to see the full ACK changes for Kubernetes version 1.22, click on the bottom of the article to read the original article.

FAQ

【Q1】 What new features are introduced in Kubernetes 1.22?

[A1] New features introduced include:

  • PersistentVolume Health Monitor feature
  • Cgroups V2 is used to ensure the Quality of Service (QOS) of memory resources
  • Implement the features of Windows Privileged containers based on HostProcess containers
  • Workload can use the node swap memory feature (Linux nodes only)
  • Configure the default SECCOMp configuration feature for the workload (Linux nodes only)

[Q2] Which components did ACK upgrade and optimize for Kubernetes 1.22?

[A2] The core components of this ACK update and optimization include Kubernetes, ETCD, CoreDNS, CRI, CSI, CNI, NVIDIA Container Runtime, Ingress Controller

[Q3] What new enhancements does ACK provide for Kubernetes 1.22?

[A3] Enhancements provided include:

observability

  • It enriches the indicator information of APIServer for accessing requests, improving the observability of APIServer.
  • For ACK Pro version, ASK Pro version or edge Pro version cluster, the core indicators of the managed surface components can be revealed to improve the observability of the managed surface core components.

The stability of

For all cluster types:

  • Added protection for storage tiers to reduce the impact on etCD during cold startup.
  • You can enable traffic limiting for APIServer based on the source, type, or route combination of requests to reduce the impact on APIServer during cold startup.

Performance optimization

  • Kubelet: Upgrade Kubelet in place without restarting the container as much as possible.
  • KubeProxy: compatible with Aliyun Linux 2 (kernel-4.19.91-23) and earlier versions. When IPVS mode is enabled, conn_reuse_mode is not set to 0.
  • ASK cluster: Do not actively expel ECI Pod when Virtual Node is not ready to reduce business loss.
  • ACK Pro or Edge Pro: Scheduler enhancement, supporting Gang Scheduling, CPU topology awareness, GPU topology awareness and other Scheduling enhancements.

【Q4】 What are the precautions for upgrading Kubernetes version 1.22?

[A4] Some points to note include:

Kubernetes 1.22 deprecates a large number of Beta versions of the API, please note before operating on cluster upgrades:

  • Resources created using the API of the test version (existing resources in the cluster) are not affected by the upgrade. After the upgrade, you can interact with the stable version API.
  • The controller or application that interacts with the API of the test version must be adjusted before the cluster upgrade. Otherwise, the controller or application cannot work properly after the cluster upgrade.

Dockershim has been deprecated since Kubernetes 1.20. It is planned to be removed in Kubernetes 1.24. Currently, it is still available.

  • It is recommended that new nodes use ContainerD as the container runtime.
  • Because of ContainerD’s Limited Windows capabilities, it is recommended that you continue to use Docker EE if you use a Windows container.
  • Before upgrading to version 1.24, adjust the node running time.

The Container Group SecurityPolicy (PodSecurityPolicy) has been deprecated since Kubernetes 1.21 and is scheduled to be removed in Kubernetes 1.25. It is still available. Container Group Security access (PodSecurity) is recommended instead.

Click here to learn the full contents of this upgrade.

The recent hot

Cloud native and new possibilities for the future of the cloud

Copy and go to the link below to download the ebook for free

Developer.aliyun.com/topic/downl…

Release the latest information of cloud native technology, collect the most complete content of cloud native technology, hold cloud native activities and live broadcast regularly, and release ali products and user best practices. Explore the cloud native technology with you and share the cloud native content you need.

Pay attention to [Alibaba Cloud native] public account, get more cloud native real-time information!