Who contributed to Kubernetes on May 4, 2026?

5 developers shipped this update, including BrunoChauvet, rifelpet, hakman, my-git9, and Caesarsage.

What were the notable Kubernetes updates?

Fix CVEs and update builder image to golang:1.25.9, Fix Grype CVEs: update logrus and prometheus/prometheus, and Disable nm-cloud-setup on RHEL 9 for AWS VPC CNI.

@kubernetes

Container orchestration - what platform teams ship on

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

KOPS CLOSES VPC CNI GAP ON RHEL 9, NODE-PROBLEM-DETECTOR PATCHES HIGH-SEVERITY LOGRUS CVE

By RepoJournal · Filed 06:01 UTC on May 4, 2026 · About Kubernetes

5 people shipped this

BrunoChauvet @BrunoChauvet 1 cited

rifelpet @rifelpet 1 cited

hakman @hakman 1 cited

my-git9 @my-git9 1 cited

Caesarsage @Caesarsage 1 cited

Kubernetes is shipping critical networking fixes for production deployments while closing two high and medium severity vulnerabilities in core observability tooling.

Node-problem-detector merged fixes for a high-severity CVE in logrus [1] and a medium-severity Prometheus vulnerability [2], upgrading the builder image to golang:1.25.9 to ensure the detector runs hardened on every node. This matters: logrus is everywhere in Go observability stacks, and this patch closes GHSA-4f99-4q7p-p3gh before it becomes a chain vector. On the infrastructure side, kops landed a critical fix disabling NetworkManager's cloud-setup service on RHEL 9 [3], which was breaking AWS VPC CNI deployments by installing conflicting source-routing rules that hijacked pod traffic. The same team also fixed VPC CNI support on Debian 11 [4], unblocking two major distro combinations that were previously untested in presubmit. Kops bumped k8s.io dependencies and Go to v1.26.2 [5], keeping the cluster provisioner in sync with the runtime your clusters will run. Documentation updates across the website synced Chinese translations for event-v1 and lease-v1 APIs [6], while enum value fixes landed across the API reference [7] to keep generated docs accurate.

Action items

→ Merge node-problem-detector CVE fixes into your monitoring deployment before next rollout kubernetes/node-problem-detector [immediate]
→ If running kops on RHEL 9 with AWS VPC CNI, update to the latest and redeploy nodes kubernetes/kops [immediate]
→ Pin kops to v1.26.2+ for Go 1.26 compatibility across your fleet kubernetes/kops [plan]

References

[1] Fix CVEs and update builder image to golang:1.25.9 ↗ kubernetes/node-problem-detector
[2] Fix Grype CVEs: update logrus and prometheus/prometheus kubernetes/node-problem-detector
[3] Disable nm-cloud-setup on RHEL 9 for AWS VPC CNI kubernetes/kops
[4] Fix support for VPC CNI + Debian 11 ↗ kubernetes/kops
[5] Update k8s.io dependencies and Go to v1.26.2 ↗ kubernetes/kops
[6] [zh-cn]sync event-v1 lease-v1 ↗ kubernetes/website
[7] Update API resource reference enum values ↗ kubernetes/website

Quick answers

What shipped in Kubernetes on May 4, 2026?: Kubernetes is shipping critical networking fixes for production deployments while closing two high and medium severity vulnerabilities in core observability tooling. In total, 16 commits and 8 pull requests landed.
Who contributed to Kubernetes on May 4, 2026?: 5 developers shipped this update, including BrunoChauvet, rifelpet, hakman, my-git9, and Caesarsage.
What were the notable Kubernetes updates?: Fix CVEs and update builder image to golang:1.25.9, Fix Grype CVEs: update logrus and prometheus/prometheus, and Disable nm-cloud-setup on RHEL 9 for AWS VPC CNI.

SCHEDULER GAINS PREQUEUING FILTER, KUBELET USER NAMESPACES MOVE TO BETA

Kubernetes tackles the pod requeue bottleneck that's been choking large clusters, while user namespacing ships closer to production.

go 19 shipped 1-min read

@kubernetes 1 day ago

CLUSTER-AUTOSCALER PATCHES HIT ALL RELEASE BRANCHES AS DRA AND VOLUMEMOUNT BIND OPTIONS LAND

Cluster-autoscaler shipped four patch releases across versions 1.33 through 1.36 fixing ProvisioningRequest condition application and Scaleway node detection, while Kubernetes core merged DRA node operations and volumeMount bind mount options.

go 89 shipped 1-min read

@kubernetes 2 days ago

DRA GETS SMARTER RESOURCE ACCOUNTING, CLUSTER-AUTOSCALER ROLLS OUT FOUR PATCHES

Dynamic Resource Allocation fixed device accounting across its resource pool controller while cluster-autoscaler shipped maintenance releases across four versions.

go 52 shipped 1-min read

@kubernetes 3 days ago

DRA GRADUATES TO STABLE, KUBELET METRICS BYPASS CADVISOR, NAMESPACE LIFECYCLE UNBLOCKED

Three critical production fixes ship across core scheduler, metrics, and admission layers while DRA resource tracking stabilizes after surfacing a crash bug in the informer.

go 129 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.