Kubernetes 1.35 introduces significant changes to its security features, including the removal of cgroup v1 support and enhanced image pull verification. Users will need to review their RBAC policies and ensure proper credentials are in place to avoid potential issues during upgrades.

Airbnb has successfully implemented seamless upgrades of Istio across tens of thousands of pods and numerous Kubernetes clusters by utilizing a canary upgrade model and a custom mutation framework named Krispr. This approach allows independent workload upgrades with zero downtime, gradual rollouts, and the ability to revert changes without requiring coordination among diverse teams. The article details the architecture and processes that enable these upgrades for both Kubernetes and virtual machine environments.