Knative
knative-v1.22.1Orchestration & ManagementKnative Serving v1.22.1 is a focused patch fixing an idle connection leak in the network prober, a memory leak in webhook matchers, and adding a 3MiB webhook request body size limit.
securityApply the 3MiB webhook body limit immediately
The new hard cap on webhook request body size closes a potential vector for memory exhaustion via oversized payloads. If you run Knative Serving in a multi-tenant or externally-exposed environment, upgrade to v1.22.1 now — don't wait for your next maintenance window.
breakingWebhook requests larger than 3MiB will now be rejected
If any of your workloads submit unusually large objects to Knative's admission webhooks (e.g., Services or Configurations with very large env var blocks or annotations), those requests will start failing after this upgrade. Audit object sizes before rolling out, and trim any oversized metadata or spec fields.
enhancementUpgrade to stop slow memory and connection accumulation
The prober connection leak and the expired-matcher memory leak are both cumulative — they degrade pod health gradually over time rather than causing immediate crashes. Clusters that have been running v1.22.0 for a while may already be affected. After upgrading, watch activator and webhook pod memory trends to confirm they stabilize.
主な変更 (3)
- Fixed idle connection leak in the networking prober component
- Fixed memory leak caused by expired matchers in knative/pkg
- Webhook request body size is now capped at 3MiB to prevent unbounded memory consumption