containerd
api/v1.11.1Kubernetes CorePatch release fixing sandbox task API endpoints broken for non-runc shims — critical for anyone running alternative runtimes like Kata Containers or gVisor.
breakingUpgrade if you run non-runc runtimes in sandbox mode
The bug in api/v1.11.0 caused sandbox task API endpoints to malfunction for any shim that isn't runc — think Kata Containers, gVisor, or custom shims. If your cluster uses these runtimes and you're on 1.11.0, task operations against sandboxed workloads may silently fail or misbehave. Update to api/v1.11.1 immediately and verify task lifecycle operations (create, delete, exec) work correctly post-upgrade.
enhancementValidate your shim compatibility after upgrading
The fix adds the task API address to CreateTaskRequest at the proto level. If you maintain a custom shim, review whether your implementation reads this field — it's now populated where it wasn't before. No action needed for standard runc workloads, but non-standard shim authors should test task creation flows against this API version.
Key changes (3)
- Task API address is now included in CreateTaskRequest, fixing routing for non-runc shims
- No dependency changes — safe, minimal patch
- Only 4 commits; scope is narrow and targeted