diff --git a/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md b/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md index f62428559f0..c7dca49ec84 100644 --- a/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md +++ b/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md @@ -85,6 +85,10 @@ Promoted the `ServerSideFieldValidation` feature gate to beta (on by default). T Introduce KMS v2alpha1 API to add performance, rotation, and observability improvements. Encrypt data at rest (ie Kubernetes `Secrets`) with DEK using AES-GCM instead of AES-CBC for kms data encryption. No user action is required. Reads with AES-GCM and AES-CBC will continue to be allowed. See the guide [Using a KMS provider for data encryption](https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/) for more information. +### Kube-proxy images are now based in distroless + +In previous releases, kube-proxy container images were built using Debian as the base image. Starting with this release the images are now built using [distroless](https://github.com/GoogleContainerTools/distroless). This change reduced image size by almost 50% and reduced the number of installed packages and files to only to those strictly required for kube-proxy do its job. + ## Other Updates ### Graduations to Stable