Auto-delete StatefulSet PVCs
PersistentVolumeClaims created by a StatefulSet can be removed automatically once they are no longer needed, while data survives updates and node maintenance, reducing orphaned volumes.
Kubernetes minor release · “Penelope”
Kubernetes 1.32
Penelope closes Kubernetes' tenth-anniversary year. It centres on Dynamic Resource Allocation, whose structured parameters reach beta, plus tighter API server authorization, automatic StatefulSet PVC cleanup, and the removal of the flowcontrol v1beta3 API.
End of life
End of life since 28 Feb 2026 (8 months ago). No more patches upstream.
Released11 Dec 2024
Maintenance mode—
End of life28 Feb 2026
Latest patch1.32.1326 Feb 2026
Patch releases13
Support span14.6 months
What 1.32 brought
Structured authorization configuration
The API server can chain several authorizers defined in a configuration file, and webhook authorizers can use CEL match conditions.
Custom resource field selectors
Custom resources can declare field selectors, so clients filter them on the server just as they do built-in objects.
Anonymous access only on chosen endpoints
Admins can allow unauthenticated requests only on listed paths such as /healthz, /livez and /readyz, so an RBAC mistake cannot open the rest of the cluster.
DRA structured parameters
The core of Dynamic Resource Allocation moves to beta: the scheduler and Cluster Autoscaler can simulate device allocation themselves, without a third-party driver.
Mutating admission policies with CEL
The API server can apply mutations written in CEL, such as setting labels, defaulting fields or adding sidecars, as an in-process alternative to mutating webhooks.
Summarised in our own words from the official “Kubernetes v1.32: Penelope” announcement (44 tracked enhancements), © The Kubernetes Authors, CC BY 4.0.
APIs that stopped being served in 1.32
Upgrading to 1.32 breaks any manifest, Helm chart or client that still uses these API versions. Move them to the version in the last column before you upgrade the control plane.
| Kind | API version | Stops being served | Use instead |
|---|---|---|---|
| FlowSchema | flowcontrol.apiserver.k8s.io/v1beta3 | 1.32 | flowcontrol.apiserver.k8s.io/v1 |
| PriorityLevelConfiguration | flowcontrol.apiserver.k8s.io/v1beta3 | 1.32 | flowcontrol.apiserver.k8s.io/v1 |
| ValidatingAdmissionPolicy | admissionregistration.k8s.io/v1alpha1 alpha · off |
1.32 | admissionregistration.k8s.io/v1 |
| ValidatingAdmissionPolicyBinding | admissionregistration.k8s.io/v1alpha1 alpha · off |
1.32 | admissionregistration.k8s.io/v1 |
| SelfSubjectReview | authentication.k8s.io/v1alpha1 alpha · off |
1.32 | authentication.k8s.io/v1 |
Other removals and deprecations
Removed
- flowcontrol.apiserver.k8s.io/v1beta3 (FlowSchema, PriorityLevelConfiguration) is no longer served; move manifests and clients to flowcontrol.apiserver.k8s.io/v1, available since v1.29.
- The original DRA implementation introduced in v1.26 is withdrawn; the structured-parameter model replaces it.
From the release announcement; our wording.
API versions deprecated in 1.32
Still served in 1.32, but the API server answers with a deprecation warning and a removal is scheduled.
| Kind | API version | Stops being served | Use instead |
|---|---|---|---|
| VolumeAttributesClass | storage.k8s.io/v1alpha1 alpha · off |
1.35 | storage.k8s.io/v1 |
Upgrading
Version skew with a 1.32 API server
- kubelet, kube-proxy: 1.29 to 1.32
- kube-controller-manager, scheduler: 1.31 to 1.32
- kubectl: 1.31 to 1.33
From the official version skew policy as it stands today.
One minor at a time
The API server must not skip minor versions.
1.32 on managed Kubernetes
| Service | Available | End of standard support | End of extended support |
|---|---|---|---|
| Upstream Kubernetes | 11 Dec 2024 | 28 Feb 2026 | — |
| Amazon EKS | 23 Jan 2025 | 23 Mar 2026 | 23 Mar 2027 |
| Google Kubernetes Engine | 11 Feb 2025 | 27 Apr 2026 | 11 Feb 2027 |
| Azure Kubernetes Service | 2025-04 | 31 Mar 2026 | 31 Mar 2027 |
As published by each provider; see managed Kubernetes support for what “extended” means on each and when we last checked.