The Wire · Showcase
KOPS KILLS DEPRECATED KUBELET FLAGS, TEST INFRA CUTS JOB BLOAT
By RepoJournal · Filed · About Kubernetes
Kops migrated the kubelet away from CLI flags to config files [ref:14], while test infrastructure dropped unnecessary source checkouts that were slowing every periodic job by a minute.
The kubelet deprecation move [1] marks a major cleanup in kops—deprecated flags now live in `/var/lib/kubelet/kubelet.conf` instead of DAEMON_ARGS, with each kops field toggled to `flag:"-"` to prevent the old flags from reappearing. Test infrastructure made the surgical cut [2] to strip `skip_checkout` from periodics that don't need source code, reclaiming ~1 minute per run and cutting network overhead, though dashboards still get the labels they need via extra_refs.
Jobset landed release-0.12 presubmit and periodic coverage [3], mirroring the 1.33-1.35 test matrix already proven on release-0.11. Kops test expansion [4] adds 899 new jobs (18,138 runs/week now vs 13,079) after dropping 1.32 tests and re-enabling jobs that were broken on that version. The API layer [5] finished its declarative validation migration for ClusterTrustBundle.SignerName—moving from imperative `ValidateImmutableField` calls to `+k8s:immutable` tags across both v1alpha1 and v1beta1 [6].
JobPodReplacementPolicy shipped to GA in 1.34 and is now dropped from the codebase [7], while authorization work [8] began the multi-part KEP-5071 series renaming all `authorizer.Authorizer` interfaces to `authorizer.UnconditionalAuthorizer`. Client-side v2beta1 aggregated discovery support is gone [9]—servers still serve it, but client-go and kube-aggregator no longer request it.
Action items
- → Review kubelet flag migration in kops if you run on-prem clusters or build custom images kubernetes/kops [plan]
- → Pin kops test jobs to release-0.12 if testing against that branch kubernetes/test-infra [plan]
- → Monitor authorization interface renaming work if you have custom authorizers kubernetes/kubernetes [monitor]
References
- [1] Migrate deprecated kubelet flags to config file kubernetes/kops
- [2] add skip_checkout to periodics which don't need source code ↗ kubernetes/test-infra
- [3] Add jobset release-0.12 presubmit and periodic jobs ↗ kubernetes/test-infra
- [4] Kops - Remove 1.32 tests, add 1.35 ↗ kubernetes/test-infra
- [5] Migrate ClusterTrustBundle.Spec.SignerName to +k8s:immutable declarative validation ↗ kubernetes/kubernetes
- [6] Merge pull request #137095 from apoorvdarshan/dv/clustertrustbundle-signername-immutable kubernetes/api
- [7] Drop JobPodReplacementPolicy after the feature GA-ed in 1.34 kubernetes/kubernetes
- [8] Conditional Authz [0/5]: Rename all usages of the `authorizer.Authorizer` interface to `authorizer.UnconditionalAuthorizer` ↗ kubernetes/kubernetes
- [9] Remove v2beta1 aggregated discovery support from clients ↗ kubernetes/kubernetes
FAQ
- What changed in Kubernetes on May 8, 2026?
- Kops migrated the kubelet away from CLI flags to config files , while test infrastructure dropped unnecessary source checkouts that were slowing every periodic job by a minute.
- What should Kubernetes teams do about it?
- Review kubelet flag migration in kops if you run on-prem clusters or build custom images • Pin kops test jobs to release-0.12 if testing against that branch • Monitor authorization interface renaming work if you have custom authorizers
- Which Kubernetes repositories shipped on May 8, 2026?
- kubernetes/kops, kubernetes/test-infra, kubernetes/kubernetes, kubernetes/api