RepoJournal
Kubernetes

@kubernetes

Container orchestration - what platform teams ship on

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Fri 19 jun
  2. Sat 27 jun
  3. Sun 28 jun
  4. Mon 29 jun
  5. Tue 30 jun
  6. Wed 1 jul
  7. Thu 2 jul
  8. Fri 3 jul
  9. Sat 4 jul
  10. Sun 5 jul
  11. Mon 6 jul
  12. Tue 7 jul
  13. Wed 8 jul
  14. Thu 9 jul
  15. Fri 10 jul
  16. Sat 11 jul
  17. Sun 12 jul
  18. Mon 13 jul
  19. Tue 14 jul
  20. Wed 15 jul
  21. Thu 16 jul
  22. Fri 17 jul
  23. Sat 18 jul
  24. Sun 19 jul
  25. Mon 20 jul
  26. Tue 21 jul
  27. Wed 22 jul
  28. Thu 23 jul
  29. Fri 24 jul
  30. Today 25 jul
Topics: Go Infrastructure Full archive →

The Wire · Showcase

FEATURE GATES DROPPED, VALIDATION COVERAGE EXPANDS ACROSS K8S CORE

By RepoJournal · Filed · About Kubernetes

Kubernetes core stripped two legacy authorization feature gates [ref:3] while validation-gen tooling tightened test coverage for zero-value and optional field handling [ref:2].

The auth subsystem is shedding cruft: `AuthorizeNodeWithSelectors` and `AuthorizeWithSelectors` feature gates are gone [1], clearing the path for stricter RBAC validation without toggle overhead. Meanwhile, validation-gen now has comprehensive tests [2] ensuring minimum constraints don't break optional and required field interactions—critical for API evolution without validator surprises. Circuit breaker behavior documentation landed in KEP-5647 [3], solidifying how kube-apiserver handles overload scenarios. In supporting infrastructure, kubelet tests cleaned up unused mocks , and storage encryption (KEP-5538) moved to implemented status [4]. Resource string validation got stricter with new eachVal + maxBytes rules for validation-gen [5], tightening what makes it through the API gate.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Drop AuthorizeNodeWithSelectors and AuthorizeWithSelectors feature gates
  2. [2] Add tests for minimum with required and optional validation tags
  3. [3] KEP-5647: Add section on circuit breaking behavior
  4. [4] docs(kep): update KEP-5538 status to implemented
  5. [5] feat(validation-gen): add eachVal + maxBytes validation for resource string values

Quick answers

What shipped in Kubernetes on May 1, 2026?
Kubernetes core stripped two legacy authorization feature gates [ref:3] while validation-gen tooling tightened test coverage for zero-value and optional field handling [ref:2]. In total, 19 commits and 14 pull requests landed.

More from @kubernetes

Kubernetes @kubernetes

SCHEDULER GAINS PREQUEUING FILTER, KUBELET USER NAMESPACES MOVE TO BETA

Kubernetes tackles the pod requeue bottleneck that's been choking large clusters, while user namespacing ships closer to production.

geetasg AkihiroSuda gauravkghildiyal DigitalVeer +2
go 19 shipped 1-min read
Kubernetes @kubernetes

CLUSTER-AUTOSCALER PATCHES HIT ALL RELEASE BRANCHES AS DRA AND VOLUMEMOUNT BIND OPTIONS LAND

Cluster-autoscaler shipped four patch releases across versions 1.33 through 1.36 fixing ProvisioningRequest condition application and Scaleway node detection, while Kubernetes core merged DRA node operations and volumeMount bind mount options.

troychiu Argh4k marosset nispriha +7
go 89 shipped 1-min read
Kubernetes @kubernetes

DRA GETS SMARTER RESOURCE ACCOUNTING, CLUSTER-AUTOSCALER ROLLS OUT FOUR PATCHES

Dynamic Resource Allocation fixed device accounting across its resource pool controller while cluster-autoscaler shipped maintenance releases across four versions.

Rajalakshmi Girish kubernetes-prow[bot] geewynn Jack Francis +2
go 52 shipped 1-min read
Kubernetes @kubernetes

DRA GRADUATES TO STABLE, KUBELET METRICS BYPASS CADVISOR, NAMESPACE LIFECYCLE UNBLOCKED

Three critical production fixes ship across core scheduler, metrics, and admission layers while DRA resource tracking stabilizes after surfacing a crash bug in the informer.

pohly dgrisonnet sanchezl mortent +9
go 129 shipped 1-min read

Daily updates, in your inbox

Follow Kubernetes

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

github-actions[bot] hntrl dependabot ak684 +6
ai-agents 28 shipped 1-min read
Local LLMs Local LLMs

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.

dhiltgen ParthSareen Xuan-Son Nguyen Johannes Gäßler +11
llms 210 shipped 2-min read
CachyOS @CachyOS

HYPRLAND V0.56 FIXES LAND, PACKAGE ECOSYSTEM ROLLS FORWARD

Hyprland configuration updated for v0.56 compatibility across multiple desks, while the AUR-derived ecosystem locked in four automated package bumps.

cantosun99 Jinra Aarrayy Valeri +7
infra 85 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

LIVEVIEW ASYNC CLEANUP FIX SHIPS ALONGSIDE RANGE OPTIMIZATIONS

Phoenix LiveView closes a critical async task test failure while Elixir cuts unnecessary abs calls from Range operations.

Barna Kovacs Alexander Gubarev SteffenDE José Valim +1
elixir 19 shipped 1-min read
Want every project, not just this one?