TL;DR

Kubernetes v1.35 will remove legacy cgroup v1 support and deprecate the ipvs mode in kube-proxy. It also marks the final release supporting containerd v1.y. New features include node declared features, in-place Pod resource updates, pod certificates for mTLS, numeric taints, user namespaces, and OCI image volumes.

What happened

Kubernetes v1.35 is set to remove support for cgroup v1 on Linux nodes and deprecate the ipvs mode in kube-proxy, ending support for containerd v1.y. The release will introduce new features such as node declared features, pod certificates, numeric taints, user namespaces, and mounting OCI images as volumes.

Why it matters for ops

Assess operational impact and mitigation requirements across systems and teams.

Action items

  • Validate if affected services or versions exist in your environment.
  • Apply available mitigations and patch plans with rollback safeguards.
  • Update observability checks and on-call runbooks for this scenario.

Source link

https://kubernetes.io/blog/2025/11/26/kubernetes-v1-35-sneak-peek/