CCE Release of Kubernetes v1_28 History
Updated at:2025-10-27
Baidu AI Cloud Container Engine (CCE) fully complies with community conformance certification standards. This document outlines the major updates introduced in Kubernetes 1.28 by CCE, compared to version 1.26.
Resource changes and deprecations
-
Starting from version 1.27, the CSIStorageCapacity feature in the storage.k8s.io/v1beta1 API version is no longer supported.
- Since version 1.24, migration manifests and API clients have used the storage.k8s.io/v1 API version
- All existing persistent objects can be accessed through the new API
- No additional changes require special attention
- In version 1.27, resource.k8s.io/v1alpha1 is replaced with resource.k8s.io/v1alpha2, including resources such as PodScheduling, ResourceClaim, ResourceClaimTemplate, ResourceClass, and Status. Among these, PodScheduling is renamed to PodSchedulingContext
- In version 1.27, pods remove seccomp annotations, including seccomp.security.alpha.kubernetes.io/pod and container.seccomp.security.alpha.kubernetes.io; use .spec.securityContext.seccompProfile instead
- In version 1.27, the service.kubernetes.io/topology-aware-hints annotation is removed; use service.kubernetes.io/topology-mode instead
- In version 1.27, resource/v1alpha1/DynamicResourceManagement is replaced with resource/v1alpha2/DynamicResourceManagement
- In version 1.28, .status.resizeStatus of PersistentVolumeClaim is replaced with .status.allocatedResourceStatuses
- In version 1.28, NetworkPolicy removes the .status field
- In version 1.28, kubescheduler.config.k8s.io/v1beta2 is removed; use kubescheduler.config.k8s.io/v1 instead
Other changes and deprecations
- In version 1.27, kube-apiserver removes the --master-service-namespace option
- In version 1.27, kube-controller-manager removes the --enable-taint-manager option
- In version 1.27, kube-controller-manager removes the --pod-eviction-timeout option
- In version 1.27, kubelet removes the --container-runtime option
- In version 1.28, kube-controller-manager deprecates the --volume-host-cidr-denylist and --volume-host-allow-local-loopback options
- In version 1.28, kube-scheduler removes the --lock-object-namespace and --lock-object-name options; use --leader-elect-resource-namespace, --leader-elect-resource-name, or ComponentConfig instead
- In version 1.28, kubelet deprecates the --azure-container-registry-config option; use --image-credential-provider-config and --image-credential-provider-bin-dir instead
Reference link
For a detailed comparison between Kubernetes 1.28 and other versions, please refer to:
