This release combines operator-facing additions with enforced defaults and restrictions, defect fixes, and dependency and image updates. New support includes native sidecar injection, ThinRuntime metadata configuration, and additional storage client types.
Action needed (1)
breakingRestricted service account permissions
Service account permissions are restricted. The sample file
samples/juicefs/read_job.is included.yaml
Check if affected (1)
breakingRemoval of the redundant
SYS_ADMINcapability from runtime enginesApplies if you use runtime engines.
The redundant
SYS_ADMINcapability is removed from runtime engines.