Volume mode conversion blocked on restore
Changing a volume's mode when restoring a snapshot is refused unless explicitly permitted. Check the external-provisioner 4.0.0 and external-snapshotter 7.0.0 upgrade notes first.
Kubernetes minor release · “Uwubernetes”
Kubernetes 1.30
A release heavy on stable graduations (17), including pod scheduling readiness, CEL admission control and AppArmor support. Structured authentication and authorization configuration both reached beta.
End of life
End of life since 15 Jul 2025 (16 months ago). No more patches upstream.
Released17 Apr 2024
Maintenance mode—
End of life15 Jul 2025
Latest patch1.30.1418 Jun 2025
Patch releases14
Support span14.9 months
What 1.30 brought
Pod scheduling readiness
schedulingGates keep pods out of scheduling until resources are ready, cutting scheduler load and avoiding unnecessary autoscaler scale-ups.
CEL admission control and AppArmor
CEL-based admission control, CEL match conditions for admission webhooks, and AppArmor support are all in this release's stable list.
Structured authentication and authorization config
The API server can be configured from files, allowing multiple JWT authenticators and multiple authorization webhooks.
LoadBalancer IP mode
The LoadBalancerIPMode gate is enabled by default, letting load-balancer Services report how their ingress IP behaves through status.loadBalancer.ingress.ipMode.
Service traffic distribution
A new spec.trafficDistribution field with value PreferClose asks for traffic to go to topologically closer endpoints.
Summarised in our own words from the official “Kubernetes v1.30: Uwubernetes” announcement (45 tracked enhancements), © The Kubernetes Authors, CC BY 4.0.
APIs that stopped being served in 1.30
No API versions were removed in 1.30.
Other removals and deprecations
Removed
- The SecurityContextDeny admission plugin, deprecated since 1.27, was removed; Pod Security Admission is the recommended replacement.
From the release announcement; our wording.
API versions deprecated in 1.30
Still served in 1.30, but the API server answers with a deprecation warning and a removal is scheduled.
| Kind | API version | Stops being served | Use instead |
|---|---|---|---|
| SelfSubjectReview | authentication.k8s.io/v1beta1 beta · off by default | 1.33 | authentication.k8s.io/v1 |
Stable (GA) API kinds new in 1.30
ValidatingAdmissionPolicy admissionregistration.k8s.io/v1ValidatingAdmissionPolicyBinding admissionregistration.k8s.io/v1
Upgrading
Version skew with a 1.30 API server
- kubelet, kube-proxy: 1.27 to 1.30
- kube-controller-manager, scheduler: 1.29 to 1.30
- kubectl: 1.29 to 1.31
From the official version skew policy as it stands today.
One minor at a time
The API server must not skip minor versions.
1.30 on managed Kubernetes
| Service | Available | End of standard support | End of extended support |
|---|---|---|---|
| Upstream Kubernetes | 17 Apr 2024 | 15 Jul 2025 | — |
| Azure Kubernetes Service | 2024-07 | 22 Aug 2025 | 31 Jul 2026 |
As published by each provider; see managed Kubernetes support for what “extended” means on each and when we last checked.