Skip to content
NEW:   SOS: Block SSE-C Encryption per Bucket

SKS Enhancements – Now Supporting Kubernetes 1.30 to 1.33 with Improved Security Defaults

May 22, 2025 
Improvement

We're excited to announce that Exoscale Scalable Kubernetes Service (SKS) now supports the following Kubernetes versions:

  • 1.30.13

  • 1.31.9

  • 1.32.5

  • 1.33.1

What's New

🔐 User Namespaces Enabled by Default in 1.33.1

Kubernetes 1.33.1 introduces user namespaces as a default feature in SKS. This critical security enhancement provides an extra isolation layer between containers and the host system, helping you run workloads more securely in multi-tenant and zero-trust environments.

User namespaces have been stable since Kubernetes 1.30.0, but with 1.33.1, we're enabling them out of the box.

Action required: To benefit from this security improvement, please upgrade your cluster nodes to version 1.33.1.

Learn more: Kubernetes Documentation on User Namespaces

🛡️ AppArmor Enforcement Introduced

We've also introduced explicit AppArmor compatibility checks starting with this release.

While AppArmor has been usable in most past SKS versions, a recent regression highlighted the need for stricter validation. We now enforce prerequisites to ensure AppArmor is consistently available across all future Kubernetes versions on SKS.

Learn more about our Kubernetes offering

LinkedIn Bluesky