RATATOSKRATATOSK
ログイン

Kubeflow

v1.11.0AI & ML
2025年12月15日

日本語 準備中Kubeflow v1.11.0 is a major feature release with several operator-facing changes: the default storage backend moves from MinIO to Seaweedfs, PodSecurityStandards enforcement tightens for both system and user namespaces, and Istio sidecar scope is pruned by default to reduce resource use on large clusters. Multiple component versions are bumped and Kubernetes 1.33+ with Kustomize 5.7.1 is now required, so plan for data migration and PSS compliance checks before upgrading.

  • breakingMinIO to Seaweedfs migration required

    The default S3 storage backend switches from MinIO to Seaweedfs. Existing MinIO data is not migrated automatically: back up and restore anything stored there before upgrading.

  • breakingStricter PodSecurityStandards enforcement

    System namespaces now enforce PodSecurityStandards 'restricted', and user namespaces enforce 'baseline'. Review workloads for compliance before upgrading, since pods violating these policies will be blocked.

  • breakingIstio sidecar scope pruned by default

    Istio sidecars are now pruned/limited by default instead of using full mesh scope, cutting sidecar memory and network overhead on large clusters. Cross-namespace service calls that relied on the previous full mesh visibility may need explicit configuration.

  • breakingNamespace pod overhead defaults to zero

    Namespaces/profiles now default to zero pod overhead instead of a nonzero reservation, roughly doubling the effective pod capacity per namespace. Check any capacity planning or quota assumptions tied to the old overhead value.

  • breakingKubernetes 1.33+ and Kustomize 5.7.1 required

    This release targets Kubernetes 1.33+ and the tested Kustomize version is 5.7.1. Running older Kubernetes or a different Kustomize version is degraded/unsupported and may cause manifest build or deployment issues.

  • breakingBitnami dependency deprecated

    Bitnami-based components are now deprecated in favor of other sources. Plan to migrate off Bitnami images/charts as they may be removed in a future release.

主な変更 (8)

  • Default S3 storage backend switches from MinIO to Seaweedfs; back up MinIO data before upgrading
  • PodSecurityStandards tightened: 'restricted' for system namespaces, 'baseline' for user namespaces
  • Istio sidecar scope pruned/limited by default to cut memory and network overhead on large clusters
  • Namespace/profile pod overhead defaults to zero, roughly doubling usable pod capacity per namespace
  • Requires Kubernetes 1.33+ and Kustomize 5.7.1; Bitnami dependency deprecated
  • Scalability work targeting 1000+ users/profiles/namespaces, plus S3 hard multi-tenancy with per-namespace credentials
  • Component bumps: KFP 2.15.0, Trainer 2.1.0, Training Operator 1.9.2, Katib 0.19.0, KServe 0.15.2, Istio 1.28.0, DEX 2.44, OAuth2-Proxy 7.13
  • Added deny-all NetworkPolicies for key system namespaces and experimental Istio Ambient Mode (ztunnel) support