# Kubernetes v1.33 Published articles for Kubernetes v1.33. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## A Persistent Security Hole in Kubernetes Finally Addressed DevFeed: [A Persistent Security Hole in Kubernetes Finally Addressed]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-06-23T00:00:00Z Content type: news Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33]() Tags: [kubernetes](), [kubernetes-v1-33](), [security]() ### AI overview CVE-2025-1767 can expose root-level node access through a deprecated volume plugin. Kubernetes 1.33 will disable the plugin by default. ### Source excerpt CVE-2025-1767 exposes root-level access on nodes via a deprecated volume plugin; Kubernetes 1.33 will disable it by default ## Smarter Pod Scheduling with MatchLabelKeys in Pod Affinity DevFeed: [Smarter Pod Scheduling with MatchLabelKeys in Pod Affinity]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-06-20T00:00:00Z Content type: tutorial Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes](), [Multi-tenancy](), [tenant data protection]() Tags: [kubernetes](), [kubernetes-v1-33]() ### AI overview This article explains how Kubernetes matchLabelKeys and mismatchLabelKeys enable dynamic pod affinity for safer rollouts and tenant isolation. ### Source excerpt Enhance Kubernetes pod scheduling with dynamic affinity using matchLabelKeys and mismatchLabelKeys for safer rollouts and tenant isolation. ## Kubernetes Fixes Leaked Volumes with HonorPVReclaimPolicy DevFeed: [Kubernetes Fixes Leaked Volumes with HonorPVReclaimPolicy]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-06-10T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33]() Tags: [drivers](), [kubernetes](), [kubernetes-v1-33](), [storage]() ### AI overview Kubernetes 1.33 honors PV reclaim policies even when persistent volumes are deleted before their claims, preventing storage leaks across CSI and in-tree drivers. ### Source excerpt Kubernetes 1.33 ensures PV reclaim policies are honored even if PVs are deleted before PVCs, preventing storage leaks across CSI and in-tree drivers. ## Kubernetes Introduces /statusz for Debugging Components DevFeed: [Kubernetes Introduces /statusz for Debugging Components]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-26T00:00:00Z Content type: news Language: en Sources: [Abhimanyu Saharan]() Topics: [debugging]() Tags: [debugging](), [kubernetes](), [kubernetes-v1-33](), [metrics](), [observability]() ### AI overview Kubernetes is introducing a /statusz endpoint intended to improve component debugging and observability without changing the metrics stack. ### Source excerpt A new /statusz endpoint is coming to Kubernetes. Find out how it boosts debugging and observability without touching your metrics stack. ## Custom Stop Signals for Containers in Kubernetes v1.33 DevFeed: [Custom Stop Signals for Containers in Kubernetes v1.33]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-20T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33]() Tags: [containers](), [kubernetes](), [kubernetes-v1-33]() ### AI overview Kubernetes v1.33 allows container stop signals to be configured through PodSpec, avoiding image rebuilds solely to change shutdown behavior. ### Source excerpt Kubernetes v1.33 lets you configure container stop signals via PodSpec, no more rebuilding images just to change shutdown behavior. ## Kubelet Gets a New /flagz Endpoint DevFeed: [Kubelet Gets a New /flagz Endpoint]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-17T00:00:00Z Content type: release Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33]() Tags: [debug](), [kubernetes](), [kubernetes-v1-33]() ### AI overview Kubernetes v1.33 adds a /flagz endpoint to Kubelet for runtime introspection of component flags. ### Source excerpt Discover how Kubernetes v1.33 introduces a new /flagz endpoint in Kubelet for runtime introspection of component flags, debug like never before. ## CrashLoopBackOff Just Got Smarter DevFeed: [CrashLoopBackOff Just Got Smarter]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-16T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33]() Tags: [containers](), [feature](), [kubernetes](), [kubernetes-v1-33]() ### AI overview Kubernetes 1.33 introduces configurable restart backoff behavior, with a 1-second initial delay and 60-second maximum backoff, enabled through a feature gate. ### Source excerpt Kubernetes 1.33 speeds up recovery with a 1s initial delay and 60s max backoff for restarts, opt-in via feature gate for faster handling of failing containers. ## InPlacePodVerticalScaling: Scale Pods Without Restarting DevFeed: [InPlacePodVerticalScaling: Scale Pods Without Restarting]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-16T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33](), [Kubernetes](), [cpu]() Tags: [cpu](), [kubernetes](), [kubernetes-v1-33](), [memory](), [scale]() ### AI overview This article examines how Kubernetes v1.33 enables pods to scale CPU and memory resources without restarting. It also discusses situations where this capability may not be sufficient. ### Source excerpt Pods that grow with your workload? Discover how Kubernetes v1.33 lets you scale CPU and memory without a restart, and when it still might not be enough. ## Kubernetes v1.33 Fixes a 10-Year-Old Image Pull Loophole DevFeed: [Kubernetes v1.33 Fixes a 10-Year-Old Image Pull Loophole]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-15T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33]() Tags: [images](), [kubernetes](), [kubernetes-v1-33](), [secrets](), [security]() ### AI overview Kubernetes v1.33 enforces image pull secrets for cached images, closing a long-standing multi-tenant cluster security loophole. ### Source excerpt Kubernetes v1.33 finally enforces image pull secrets even for cached images, closing a 10-year-old loophole in multi-tenant cluster security. ## Fine-Grained Control with Configurable HPA Tolerance DevFeed: [Fine-Grained Control with Configurable HPA Tolerance]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-05T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33](), [Kubernetes]() Tags: [kubernetes](), [kubernetes-v1-33](), [scale]() ### AI overview Kubernetes v1.33 introduces per-HPA configurable tolerance, providing finer control over the sensitivity of scale-up and scale-down decisions. ### Source excerpt Kubernetes v1.33 adds per-HPA configurable tolerance, allowing fine-tuned scaling sensitivity for both scale-up and scale-down decisions. ## Kubernetes v1.33: Image Volumes Graduate to Beta DevFeed: [Kubernetes v1.33: Image Volumes Graduate to Beta]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-04T00:00:00Z Content type: release Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33]() Tags: [kubernetes](), [kubernetes-v1-33](), [mount]() ### AI overview Kubernetes v1.33 promotes Image Volumes to beta, enabling OCI artifacts to be mounted directly into pods as read-only volumes. ### Source excerpt Kubernetes v1.33 promotes Image Volumes to beta, letting OCI artifacts mount directly into pods as read-only volumes, boosting portability and efficiency. ## Kubernetes v1.33: Major Upgrades to DRA DevFeed: [Kubernetes v1.33: Major Upgrades to DRA]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-05-04T00:00:00Z Content type: article Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes v1.33](), [Kubernetes](), [Hardware](), [Network]() Tags: [hardware](), [kubernetes](), [kubernetes-v1-33](), [network](), [upgrades]() ### AI overview Kubernetes v1.33 brings major upgrades to Dynamic Resource Allocation (DRA), improving device scheduling for GPUs, FPGAs, and network hardware. ### Source excerpt Kubernetes v1.33 introduces powerful upgrades to Dynamic Resource Allocation (DRA), streamlining device scheduling for GPUs, FPGAs, and network hardware.