Releasing Kubernetes Less Often and More Secure – The SIG Release Update
summary
SIG Release reduces cadence from four to three releases per year after a community survey, reinstates automated fast‑forwarding of release branches to avoid manual cherry‑pick overload, and adapts the image promoter for impersonation tokens. Kubernetes v1.24 ships with images signed with Sigstore as an MVP (about 55 PRs across SIG Release and infra), SBOM tooling gains adopters like Istio, and the project reaches SLSA level 1 and aims for level 2 once binaries and remaining SBOM/signing gaps finish. Branch rename to main targets v1.25 pending survey results.
AI-written summary · about
chapters (9)
- 0:00SIG Release update
- 1:37Release cadence changes
- 3:28Fast-forwarding branches
- 5:12Supply chain security
- 9:28SBOMs and compliance tools
- 10:29SLSA level 2 compliance
- 11:53Renaming master to main
- 13:17SIG Release roadmap
- 16:29Q&A on branch renaming
