RepoJournal
Kubernetes

@kubernetes

Container orchestration - what platform teams ship on

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

KOPS KILLS DEPRECATED KUBELET FLAGS, TEST INFRA CUTS JOB BLOAT

By RepoJournal · Filed · About Kubernetes

Kops migrated the kubelet away from CLI flags to config files [ref:14], while test infrastructure dropped unnecessary source checkouts that were slowing every periodic job by a minute.

The kubelet deprecation move [1] marks a major cleanup in kops—deprecated flags now live in `/var/lib/kubelet/kubelet.conf` instead of DAEMON_ARGS, with each kops field toggled to `flag:"-"` to prevent the old flags from reappearing. Test infrastructure made the surgical cut [2] to strip `skip_checkout` from periodics that don't need source code, reclaiming ~1 minute per run and cutting network overhead, though dashboards still get the labels they need via extra_refs.

Jobset landed release-0.12 presubmit and periodic coverage [3], mirroring the 1.33-1.35 test matrix already proven on release-0.11. Kops test expansion [4] adds 899 new jobs (18,138 runs/week now vs 13,079) after dropping 1.32 tests and re-enabling jobs that were broken on that version. The API layer [5] finished its declarative validation migration for ClusterTrustBundle.SignerName—moving from imperative `ValidateImmutableField` calls to `+k8s:immutable` tags across both v1alpha1 and v1beta1 [6].

JobPodReplacementPolicy shipped to GA in 1.34 and is now dropped from the codebase [7], while authorization work [8] began the multi-part KEP-5071 series renaming all `authorizer.Authorizer` interfaces to `authorizer.UnconditionalAuthorizer`. Client-side v2beta1 aggregated discovery support is gone [9]—servers still serve it, but client-go and kube-aggregator no longer request it.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Migrate deprecated kubelet flags to config file kubernetes/kops
  2. [2] add skip_checkout to periodics which don't need source code ↗ kubernetes/test-infra
  3. [3] Add jobset release-0.12 presubmit and periodic jobs ↗ kubernetes/test-infra
  4. [4] Kops - Remove 1.32 tests, add 1.35 ↗ kubernetes/test-infra
  5. [5] Migrate ClusterTrustBundle.Spec.SignerName to +k8s:immutable declarative validation ↗ kubernetes/kubernetes
  6. [6] Merge pull request #137095 from apoorvdarshan/dv/clustertrustbundle-signername-immutable kubernetes/api
  7. [7] Drop JobPodReplacementPolicy after the feature GA-ed in 1.34 kubernetes/kubernetes
  8. [8] Conditional Authz [0/5]: Rename all usages of the `authorizer.Authorizer` interface to `authorizer.UnconditionalAuthorizer` ↗ kubernetes/kubernetes
  9. [9] Remove v2beta1 aggregated discovery support from clients ↗ kubernetes/kubernetes

Quick answers

What shipped in Kubernetes on May 8, 2026?
Kops migrated the kubelet away from CLI flags to config files [ref:14], while test infrastructure dropped unnecessary source checkouts that were slowing every periodic job by a minute. In total, 75 commits and 42 pull requests landed.
Who contributed to Kubernetes on May 8, 2026?
6 developers shipped this update, including pohly, kannon92, rifelpet, apoorvdarshan, luxas, and Jefftree.
What were the notable Kubernetes updates?
Migrate deprecated kubelet flags to config file, add skip_checkout to periodics which don't need source code, and Add jobset release-0.12 presubmit and periodic jobs.

More from @kubernetes

Daily updates, in your inbox

Follow Kubernetes

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?