Kubernetes v1.36: Deprecation and removal of Service ExternalIPs
- Kubernetes: 16 events in the last 90 days
What happened
The .spec.externalIPs field for Service was an early attempt to provide cloud-load-balancer-like functionality for non-cloud clusters. Unfortunately, the API assumes that every user in the cluster is fully trusted, and in any situation where that is not the case, it enables various security exploits, as described in CVE-2020-8554. Since Kubernetes 1.21, the Kubernetes project has recommended that all users disable .…
Summary assembled by rule from the sources below