RepoJournal
Kubernetes @kubernetes
126 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-04
stories 24
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

KOPS CLOSES VPC CNI GAP ON RHEL 9, NODE-PROBLEM-DETECTOR PATCHES HIGH-SEVERITY LOGRUS CVE

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

BrunoChauvet rifelpet hakman my-git9 Caesarsage
5 people shipped this
BrunoChauvet @BrunoChauvet 1 cited rifelpet @rifelpet 1 cited hakman @hakman 1 cited my-git9 @my-git9 1 cited Caesarsage @Caesarsage 1 cited

Kubernetes is shipping critical networking fixes for production deployments while closing two high and medium severity vulnerabilities in core observability tooling.

Node-problem-detector merged fixes for a high-severity CVE in logrus [1] and a medium-severity Prometheus vulnerability [2], upgrading the builder image to golang:1.25.9 to ensure the detector runs hardened on every node. This matters: logrus is everywhere in Go observability stacks, and this patch closes GHSA-4f99-4q7p-p3gh before it becomes a chain vector. On the infrastructure side, kops landed a critical fix disabling NetworkManager's cloud-setup service on RHEL 9 [3], which was breaking AWS VPC CNI deployments by installing conflicting source-routing rules that hijacked pod traffic. The same team also fixed VPC CNI support on Debian 11 [4], unblocking two major distro combinations that were previously untested in presubmit. Kops bumped k8s.io dependencies and Go to v1.26.2 [5], keeping the cluster provisioner in sync with the runtime your clusters will run. Documentation updates across the website synced Chinese translations for event-v1 and lease-v1 APIs [6], while enum value fixes landed across the API reference [7] to keep generated docs accurate.

Action items

References

  1. [1] Fix CVEs and update builder image to golang:1.25.9 ↗ kubernetes/node-problem-detector
  2. [2] Fix Grype CVEs: update logrus and prometheus/prometheus ↗ kubernetes/node-problem-detector
  3. [3] Disable nm-cloud-setup on RHEL 9 for AWS VPC CNI ↗ kubernetes/kops
  4. [4] Fix support for VPC CNI + Debian 11 ↗ kubernetes/kops
  5. [5] Update k8s.io dependencies and Go to v1.26.2 ↗ kubernetes/kops
  6. [6] [zh-cn]sync event-v1 lease-v1 ↗ kubernetes/website
  7. [7] Update API resource reference enum values ↗ kubernetes/website

$ ls kubernetes/reviews/ # the step-back reads

the week in review Master drops containerd 1.7 over RuntimeConfig RPC the month in review August Ships Kubernetes 1.37 RC and kOps 1.37 Beta
Topics: Go Infrastructure Full archive → Weekly reviews →

Quick answers

What shipped in Kubernetes on May 4, 2026?
Kubernetes is shipping critical networking fixes for production deployments while closing two high and medium severity vulnerabilities in core observability tooling. In total, 16 commits and 8 pull requests landed.
Who contributed to Kubernetes on May 4, 2026?
5 developers shipped this update, including BrunoChauvet, rifelpet, hakman, my-git9, and Caesarsage.
What were the notable Kubernetes updates?
Fix CVEs and update builder image to golang:1.25.9, Fix Grype CVEs: update logrus and prometheus/prometheus, and Disable nm-cloud-setup on RHEL 9 for AWS VPC CNI.
♥

$ log @kubernetes --recent

Minikube drops pre-1.28 test fixtures, golang.org/x bumps land across the tree 87 shipped kubectl explain gains shell completion, kubelet threads real contexts 80 shipped Vultr autoscaling fixes, LimitRanger stops re-rejecting PVC updates 64 shipped DRA feature gate removed, code-generator learns multi-doc extensions files 69 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.