126 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-05
stories 53

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

KUBE-OPENAPI FIXES JSON-POINTER BUG, PROMO-TOOLS GAINS ARTIFACT REGISTRY SUPPORT

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

Kubernetes core shipped a critical kube-openapi fix that corrects type lookups for resources with special characters in their names—the kind of bug that silently breaks schema generation for custom resources.

The kube-openapi update [1] lands a builder fix that uses proper JSON-Pointer escaping when keying definition names, resolving incorrect lookups for types containing '/' or '~' characters. This cascades across all staging modules and vendors the fix everywhere it matters. Parallel to that, promo-tools v4.5.0 [2] adds the --staging-repo flag for kpromo pr, enabling Artifact Registry staging repos—a quality-of-life upgrade for release engineering pipelines [3]. On the infrastructure side, cloud-provider-aws resolved a critical security group leak when CLB services are updated with bring-your-own SG annotations [4], fixing a controller bug that left managed security groups dangling. The DRA test suite cleaned house: etcd lifecycle management [5] now runs directly instead of through shell proxies, and unnecessary killall etcd calls [6] got dropped since etcd is now a regular managed component. kops migrated protobuf handling to google.golang.org/protobuf [7], aligning with upstream Go ecosystem standards. The AnonymousAuthConfigurableEndpoints feature gate was dropped [8], cutting another legacy surface from the codebase.

Action items

References

  1. [1] bump k8s.io/kube-openapi to v0.0.0-20260502001324-b7f5293f4787 ↗ kubernetes/kubernetes
  2. [2] Bump sigs.k8s.io/promo-tools/v4 from 4.4.1 to 4.5.0 ↗ kubernetes/release
  3. [3] Merge pull request #4393 from kubernetes/dependabot/go_modules/sigs.k8s.io/promo-tools/v4-4.5.0 ↗ kubernetes/release
  4. [4] Fix leak managed/owned security group on Service update with BYO SG on CLB ↗ kubernetes/cloud-provider-aws
  5. [5] DRA upgrade/downgrade: control etcd lifecycle directly ↗ kubernetes/kubernetes
  6. [6] test/e2e_dra: remove killall etcd from run.sh kubernetes/kubernetes ↗
  7. [7] protobuf: Migrate to google.golang.org/protobuf ↗ kubernetes/kops
  8. [8] Merge pull request #138723 from aramase/aramase/c/rm_anonymous_auth_fg kubernetes/kubernetes ↗

Quick answers

What shipped in Kubernetes on May 5, 2026?
Kubernetes core shipped a critical kube-openapi fix that corrects type lookups for resources with special characters in their names—the kind of bug that silently breaks schema generation for custom resources. In total, 33 commits and 20 pull requests landed.
Who contributed to Kubernetes on May 5, 2026?
5 developers shipped this update, including dims, dependabot[bot], mtulio, pohly, and hakman.
What were the notable Kubernetes updates?
bump k8s.io/kube-openapi to v0.0.0-20260502001324-b7f5293f4787, Bump sigs.k8s.io/promo-tools/v4 from 4.4.1 to 4.5.0, and Merge pull request #4393 from kubernetes/dependabot/go_modules/sigs.k8s.io/promo-tools/v4-4.5.0.