Dockershim gone from the kubelet
Built-in Docker support, deprecated since 1.20, is removed. Use a supported CRI runtime like containerd or CRI-O, or cri-dockerd if you must keep Docker Engine.
Kubernetes minor release · “Stargazer”
Kubernetes 1.24
The release that took dockershim out of the kubelet, so nodes need a CRI runtime such as containerd or CRI-O (or cri-dockerd for Docker Engine). New beta APIs also stopped being switched on by default.
End of life
End of life since 28 Jul 2023 (3.3 years ago). No more patches upstream.
Released3 May 2022
Maintenance mode—
End of life28 Jul 2023
Latest patch1.24.1724 Aug 2023
Patch releases17
Support span14.8 months
Release team note: 1.24.17 was released in August 2023 (after the EOL date) to fix CVE-2023-3676 and CVE-2023-3955
What 1.24 brought
New beta APIs disabled by default
Beta APIs introduced from now on are not enabled automatically. Beta APIs that already existed, and new versions of them, stay on by default.
Storage capacity tracking and volume expansion
CSIStorageCapacity objects report free storage to help schedule late-binding CSI volumes, and resizing existing persistent volumes is now stable.
gRPC probes
Liveness, readiness and startup probes can check a gRPC service directly, enabled by default, without an HTTP endpoint or helper binary.
Kubelet image credential providers
The kubelet can fetch registry credentials on demand through exec plugins instead of keeping them in files on the node.
Signed release artifacts
Release artifacts carry cosign signatures, with experimental support for verifying image signatures, as part of supply-chain hardening.
Summarised in our own words from the official “Kubernetes 1.24: Stargazer” announcement (46 tracked enhancements), © The Kubernetes Authors, CC BY 4.0.
APIs that stopped being served in 1.24
Only alpha or off-by-default beta APIs were removed: they matter only if you switched them on with --runtime-config.
| Kind | API version | Stops being served | Use instead |
|---|---|---|---|
| CSIStorageCapacity | storage.k8s.io/v1alpha1 alpha · off |
1.24 | storage.k8s.io/v1 |
| VolumeAttachment | storage.k8s.io/v1alpha1 alpha · off |
1.24 | storage.k8s.io/v1 |
Other removals and deprecations
Removed
- Dockershim was removed from the kubelet; Docker Engine users need cri-dockerd or a move to another CRI runtime.
- Dynamic Kubelet Configuration was removed from the kubelet (deprecated in 1.22); removal from the API server was planned for 1.26.
- The VolumeSnapshot v1beta1 CRD, deprecated in 1.20, is no longer supported; use the v1 snapshot API.
- kubeadm stops adding the node-role.kubernetes.io/master label to control-plane nodes in new clusters; only the control-plane label is applied.
Deprecated
- With CSIStorageCapacity reaching stable, its storage.k8s.io/v1beta1 version enters deprecation.
From the release announcement; our wording.
API versions deprecated in 1.24
Still served in 1.24, but the API server answers with a deprecation warning and a removal is scheduled.
| Kind | API version | Stops being served | Use instead |
|---|---|---|---|
| CSIStorageCapacity | storage.k8s.io/v1beta1 | 1.27 | storage.k8s.io/v1 |
Stable (GA) API kinds new in 1.24
CSIStorageCapacity storage.k8s.io/v1
Upgrading
Version skew with a 1.24 API server
- kubelet, kube-proxy: 1.22 to 1.24
- kube-controller-manager, scheduler: 1.23 to 1.24
- kubectl: 1.23 to 1.25
From the official version skew policy as it stands today.
One minor at a time
The API server must not skip minor versions.
Patch releases
18 releases, newest first
1.24.1724 Aug 20231.24.1619 Jul 20231.24.1514 Jun 20231.24.1417 May 20231.24.1312 Apr 20231.24.1217 Mar 20231.24.1128 Feb 20231.24.1019 Jan 20231.24.98 Dec 20221.24.810 Nov 20221.24.713 Oct 20221.24.621 Sep 20221.24.514 Sep 20221.24.417 Aug 20221.24.313 Jul 20221.24.217 Jun 20221.24.126 May 20221.24.03 May 2022