By Kubernetes version 1.33, codenamed “Octarine,” has arrived, bringing a wave of significant enhancements and long-awaited features to the cloud-native ecosystem. Named after the magical color in Terry Pratchett’s Discworld series, this release reflects the collaborative magic the Kubernetes community conjures. With 64 enhancements, it’s a larger release than its predecessors, packed with features graduating to stable, moving into beta, and entering alpha.
We sat down with Nina Polshakova, Kubernetes maintainer and the Release Lead for 1.33 and a contributor to projects like Istio and KServe, to get an insider’s look at what makes this release special.
📹 Going on record for 2026? We're recording the TFiR Prediction Series through mid-February. If you have a bold take on where AI Infrastructure, Cloud Native, or Enterprise IT is heading—we want to hear it. [Reserve your slot
Stable Standouts: Sidecars and Networking
Native Sidecar Containers Graduate: One of the most anticipated features, native support for sidecar containers, is now stable. This pattern, commonly used by service meshes like Istio and Linkerd for abstracting functions like observability and security, previously lacked native Kubernetes lifecycle management. Now, Kubernetes guarantees sidecars start before main application containers and terminate after, reducing friction and improving reliability for this widespread pattern. Nina mentioned this was closely tied to her work with Istio and a feature that followed her through several release cycles.
nftables Backend for kube-proxy: Performance and scalability get a boost with the graduation of the NFtables-based backend for Kube-proxy to stable. While IPtables remains the default for compatibility, users can now opt for NFtables, which aligns Kubernetes more closely with modern Linux networking practices and offers potential performance improvements, especially in large clusters, due to its ability to handle incremental rule updates.
Exciting Betas: Security and Resource Management
User Namespaces for Enhanced Security: A feature years in the making, user namespace support, has reached its second beta. This allows processes within a container to run with root privileges internally but map to unprivileged user IDs on the host. This significantly improves security posture, especially in multi-tenant environments, by limiting the blast radius if a container is compromised, enforcing the principle of least privilege. Achieving this required extensive changes across the ecosystem, including container runtimes and even the Linux kernel.
In-Place Resource Resizing: Addressing another long-standing need, in-place resource resizing for pods is now in beta. Previously, changing CPU or memory allocations required a pod restart. This feature allows dynamic adjustments without disruption, crucial for stateful applications like databases or long-running ML jobs that cannot easily tolerate restarts.
OCI Image Volume Support: Kubernetes continues to align with broader ecosystem standards. Beta support for using OCI images as a volume source allows mounting data directly from standardized container images, improving portability.
Future Focus: Dynamic Resource Allocation & Community Health
Nina highlighted the significant progress around Dynamic Resource Allocation (DRA). Introduced recently to replace older device plugin mechanisms for resources like GPUs and FPGAs, DRA saw numerous smaller enhancements in 1.33, including device tainting and RBAC support. This focus indicates a strong community push towards better handling of specialized hardware and diverse workloads.
Reflecting on the community itself, Nina noted that while the number of enhancements grew, the contributor count remained steady, suggesting that efforts to onboard new contributors in previous cycles are paying off. The delivery of long-requested features alongside new innovations demonstrates the community’s health and commitment to addressing both legacy needs and future challenges. She emphasized the welcoming culture, particularly within the release team’s shadowing program, which prioritizes mentorship, clear expectations, and work-life balance.
The Magic of “Octarine”
Kubernetes 1.33 “Octarine” delivers substantial improvements across the board – from fundamental networking and security enhancements to better resource management and support for modern patterns like sidecars. It’s a testament to the vibrant CNCF community that continues to evolve this foundational cloud-native technology.
