RepoJournal
Kubernetes

@kubernetes

Container orchestration - what platform teams ship on

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

KUBE-OPENAPI FIXES JSON-POINTER BUG, PROMO-TOOLS GAINS ARTIFACT REGISTRY SUPPORT

By RepoJournal · Filed · About Kubernetes

Kubernetes core shipped a critical kube-openapi fix that corrects type lookups for resources with special characters in their names—the kind of bug that silently breaks schema generation for custom resources.

The kube-openapi update [1] lands a builder fix that uses proper JSON-Pointer escaping when keying definition names, resolving incorrect lookups for types containing '/' or '~' characters. This cascades across all staging modules and vendors the fix everywhere it matters. Parallel to that, promo-tools v4.5.0 [2] adds the --staging-repo flag for kpromo pr, enabling Artifact Registry staging repos—a quality-of-life upgrade for release engineering pipelines [3]. On the infrastructure side, cloud-provider-aws resolved a critical security group leak when CLB services are updated with bring-your-own SG annotations [4], fixing a controller bug that left managed security groups dangling. The DRA test suite cleaned house: etcd lifecycle management [5] now runs directly instead of through shell proxies, and unnecessary killall etcd calls [6] got dropped since etcd is now a regular managed component. kops migrated protobuf handling to google.golang.org/protobuf [7], aligning with upstream Go ecosystem standards. The AnonymousAuthConfigurableEndpoints feature gate was dropped [8], cutting another legacy surface from the codebase.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] bump k8s.io/kube-openapi to v0.0.0-20260502001324-b7f5293f4787 ↗ kubernetes/kubernetes
  2. [2] Bump sigs.k8s.io/promo-tools/v4 from 4.4.1 to 4.5.0 ↗ kubernetes/release
  3. [3] Merge pull request #4393 from kubernetes/dependabot/go_modules/sigs.k8s.io/promo-tools/v4-4.5.0 kubernetes/release
  4. [4] Fix leak managed/owned security group on Service update with BYO SG on CLB ↗ kubernetes/cloud-provider-aws
  5. [5] DRA upgrade/downgrade: control etcd lifecycle directly ↗ kubernetes/kubernetes
  6. [6] test/e2e_dra: remove killall etcd from run.sh kubernetes/kubernetes
  7. [7] protobuf: Migrate to google.golang.org/protobuf ↗ kubernetes/kops
  8. [8] Merge pull request #138723 from aramase/aramase/c/rm_anonymous_auth_fg kubernetes/kubernetes

Quick answers

What shipped in Kubernetes on May 5, 2026?
Kubernetes core shipped a critical kube-openapi fix that corrects type lookups for resources with special characters in their names—the kind of bug that silently breaks schema generation for custom resources. In total, 33 commits and 20 pull requests landed.
Who contributed to Kubernetes on May 5, 2026?
5 developers shipped this update, including dims, dependabot[bot], mtulio, pohly, and hakman.
What were the notable Kubernetes updates?
bump k8s.io/kube-openapi to v0.0.0-20260502001324-b7f5293f4787, Bump sigs.k8s.io/promo-tools/v4 from 4.4.1 to 4.5.0, and Merge pull request #4393 from kubernetes/dependabot/go_modules/sigs.k8s.io/promo-tools/v4-4.5.0.

More from @kubernetes

Daily updates, in your inbox

Follow Kubernetes

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?