To install or upgrade to the old version, see installation doc.

Change log since v1.6.3

Key Features

• When CloneSet volumeClaimTemplates changed, always recreate pods and related volumes. (#1561, @ABNER-1)
• Bump K8s dependency to 1.28, and OpenKruise still works with Kubernetes Version >= 1.18. (#1598, @ABNER-1)
• SidecarSet support k8s 1.28 Sidecar Containers(initContainers[x].restartPolicy=Always), and significantly improves the lifecycle management of Sidecar containers, refer to the community documentation for details. (#1613, @zmberg)
• ImagePullJob support for credential provider plugin, e.g. aws. (#1383, @Kuromesi)
• Advanced StatefulSet support start ordinal. (#1643, @ABNER-1)
• Support webhook CA injection using external certification management tool, e.g. cert-manager. (#1665, @Kuromesi)
• Kruise-daemon support cri-docker.sock for kubernetes clusters that use docker runtime. (#1631, @BraceCY)
• Advanced StatefulSet add pod index label statefulset.kubernetes.io/pod-index. (#1667, @cr7258)
• Add Structured logging support. (#1565, @MajLuu); (#1629, @jairuigou); (#1669, @AiRanthem)

Performance Enhancement

• Optimizing Pod SidecarSet webhook and controller performance when lots of namespace scoped sidecarSet exists (#1547, @ls-2018)
• Pod readiness controller use Patch instead of Update, thus reducing updating conflict when creating a large number of Pods. (#1560, @BruceAko)

Bug fixes

• Multi-domain Management
• Fixes workloadSpread validation message when using adaptive strategy type. (#1553, @voron)
• When feature-gate WorkloadSpread=false, the WorkloadSpread Controller is no longer started and the creation of workloadSpread CR is not allowed. (#1566, @ls-2018)
• Application Protection
• In some extreme scenarios, fix PodUnavailableBudget blocking KCM recycling Pods. (#1567, @Spground)
• Sidecar Container
• Fix SidecarSet invalid update status. (#1641, @Spground)
• Advanced Workload
• Fix potential nil panic in CloneSet validating webhook when Pod's controller owner ref is nil. (#1678, @Spground)

Misc (cleanup and Flake)

• Optimized Advanced StatefulSet code structure based on upstream community code(k8s 1.28). (#1648, @ABNER-1)
• Reduce github workflow action permission. (#1523, @furykerry)
• Bug fix for Makefile envtest failed. (#1548, @BH4AWS)
• Fix UT TestRevisionManage. (#1555, @furykerry)
• Upgrade opencontainers/runc (1.1.12) and controller-gen (0.14.0). (#1562, @ppbits)
• Remove vendor directory. (#1554, @liangyuanpeng)
• Add dependabot config for auto-update github-actions. (#1570, @liangyuanpeng)
• Add permission of security-events write for ghaction golangci-lint. (#1582, @liangyuanpeng)
• Fix vendor error while running command make docker-multiarch. (#1601, @MichaelRren)
• Change e2e centos image from 6.7 to 7, then e2e can work on arm node. (#1623, @Colvin-Y)
• Fix slice declarations that are not initialized with zero length. (#1628, @alingse)
• Fix UT TestMatchRegistryAuths failed. (#1583, @ABNER-1)
• Changes the scorecard badge link from old format to the Standard human-readable OpenSSF Scorecard Report. (#1657, @harshitasao)