Kubernetes v1.33.4-0 and v1.32.8-0: Security Fixes and Component Updates

kubernetes security
2025-08-14
By Thalassa Cloud
We’re excited to announce the release of two new Kubernetes versions in Thalassa Cloud: v1.33.4-0 and v1.32.8-0. These releases bring security fixes, component updates, and enhanced stability for your Kubernetes workloads. Security Fixes Both releases address a medium security vulnerability: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference A vulnerability exists in the NodeRestriction admission controller where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource.

Topics

Latest Posts

Introducing the Thalassa Public Cloud

A modern European cloud platform – built from the ground up to put control, automation, and sovereignty back in your hands. At Thalassa Cloud, we believe infrastructure should be modern, flexible, and sovereign – without the complexity or lock-in of hyperscalers. That’s why we’ve launched the Thalassa Public Cloud: a high quality and API first Cloud Services platform designed for DevOps-first teams who want more control and better APIs, without giving up performance or compliance and still want to run their services in Dutch Datacenters.
2025-05-26

Creating an organisation on the Thalassa Cloud Platform

The Thalassa Cloud Platform gives you full control over your cloud infrastructure, running in your own datacenter or hosted environment. It combines the flexibility of public cloud APIs with the control of private infrastructure. Before you can start deploying workloads, you need to create an organisation. This is the main structure for managing your cloud environment, users, quotas, and billing. In this blog post, we’ll guide you through the full process.

Introduction into Load Balancers on Thalassa Cloud

Introduction into Load Balancers on Thalassa Cloud Load balancers play a critical role in any cloud infrastructure. They ensure that incoming traffic is reliably routed to healthy services, distributing load across multiple backend targets. On Thalassa Cloud, load balancers are designed from the ground up to be fast, flexible, and API-driven. Built on top of Envoy Proxy, our load balancer implementation provides high performance with a strong focus on automation and self-service.

Announcing Thalassa Cloud's Go SDK

We’ve just released the first version of thalassa-cloud/client-go, our Go SDK for integrating with the Thalassa Cloud API. This SDK is intended for engineers and teams looking to interact with Thalassa Cloud programmatically. It provides a native Go interface to our API and will be the base for upcoming tools like our CLI, Terraform provider, Kubernetes CCM, and other integrations. What’s included The initial release includes support for core primitives such as VPCs, Subnets, Organizations, basic compute functionality.

VPC Networking Upgrade with Custom Route Tables

Introducing Custom Route Tables for VPCs Networking is at the core of any cloud infrastructure, and Thalassa Cloud’s Virtual Private Clouds (VPCs) provide secure, isolated environments for deploying workloads. Until now, our VPC networking was fully automated—when a NAT Gateway or other networking component was created, routing rules were automatically assigned. While this made deployment seamless, it limited flexibility for advanced networking use cases. With the introduction of custom route tables, users now have full control over how traffic moves within their VPCs, enabling:

Understanding Digital Sovereignty

Understanding Digital Sovereignty Digital sovereignty has become essential for organizations in Europe looking to maintain control over their digital infrastructure and operations. With increasing reliance on external platforms, the ability to secure and manage data independently is critical for compliance, resilience, and growth. By prioritizing digital sovereignty, businesses can safeguard their operations, ensure alignment with European regulatory compliance, and build a foundation for sustainable success. What is Digital Sovereignty? Digital sovereignty means having complete control over your organization’s data, infrastructure, and cloud environments.

Why Thalassa Cloud Chose Cilium as the Default CNI

Why We Chose Cilium as the Default CNI for Thalassa Cloud When we set out to build the Kubernetes platform for Thalassa Cloud, we knew that every component we selected had to align with our vision: a platform that prioritizes performance, security, and flexibility. One of the most critical choices we faced was selecting the right Container Network Interface (CNI). Networking is the backbone of any Kubernetes deployment—get it right, and your platform thrives.