RepoJournal
Kubernetes

@kubernetes

Container orchestration - what platform teams ship on

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Sun 28 jun
  2. Mon 29 jun
  3. Tue 30 jun
  4. Wed 1 jul
  5. Thu 2 jul
  6. Fri 3 jul
  7. Sat 4 jul
  8. Sun 5 jul
  9. Mon 6 jul
  10. Tue 7 jul
  11. Wed 8 jul
  12. Thu 9 jul
  13. Fri 10 jul
  14. Sat 11 jul
  15. Sun 12 jul
  16. Mon 13 jul
  17. Tue 14 jul
  18. Wed 15 jul
  19. Thu 16 jul
  20. Fri 17 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: Go Infrastructure Full archive →

The Wire · Showcase

WATCHCACHE REFACTOR LANDS ALONGSIDE KOPS 1.36 BETA AND SERVICE NAME RELAXATION

By RepoJournal · Filed · About Kubernetes

hakman serathius Jefftree adrianmoisey nirs
5 people shipped this
hakman @hakman 2 cited serathius @serathius 1 cited Jefftree @Jefftree 1 cited adrianmoisey @adrianmoisey 1 cited nirs @nirs 1 cited

The apiserver watchCache got a major internal refactor to fix concurrent mutation bugs, while kops shipped its first beta release of 1.36 and Kubernetes promoted relaxed service naming rules to GA.

The watchCache changes [1] [2] [3] are the heaviest lift across the stack. A race condition where the indexer was being mutated outside its lock has now been fixed [5], and the immutable configuration fields have been extracted into a dedicated struct to decouple history and storage logic further. These aren't user-facing, but they tighten the apiserver's internal consistency guarantees heading into the next release cycle. The JSON streaming encoder also got optimized to avoid per-item output copies [4], which compounds with the watchCache work to improve list performance. Over on the kops side, version 1.36.0-beta.1 shipped [6] alongside support for etcd 3.7.0-rc.0 [7], allowing scalability jobs to soak the next etcd release before it goes final. Azure node identity just got hardened to use IMDS-attested PKCS7-signed metadata documents instead of raw tokens [8], a significant security improvement for cloud clusters. In core Kubernetes, KEP-5311 [9] promotes relaxed validation for service names to GA, meaning you can now use uppercase letters and hyphens in service names without feature gates. Minikube consolidated duplicated DHCP lease polling across all macOS drivers [10] into a single shared handler, fixing several bugs in the process and making future improvements to the waiting strategy much easier.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Merge pull request #139658 from serathius/watchcache-snapshot-clone kubernetes/apiserver
  2. [2] Merge pull request #139676 from serathius/watchcache-config kubernetes/apiserver
  3. [3] Extract immutable watchCache configuration fields to ImmutableWatchCacheConfig kubernetes/apiserver
  4. [4] Merge pull request #139617 from jpbetz/opt/json-collections-encoder kubernetes/apiserver
  5. [5] Fix indexer being mutated from outside the lock ↗ kubernetes/kubernetes
  6. [6] Release 1.36.0-beta.1 ↗ kubernetes/kops
  7. [7] Support etcd 3.7.0-rc.0 and allow overriding the etcd version in the scalability scenario ↗ kubernetes/kops
  8. [8] azure: Use IMDS attested metadata document for node identity ↗ kubernetes/kops
  9. [9] KEP-5311 Promote relaxed validation for Services names to GA ↗ kubernetes/kubernetes
  10. [10] drivers: Deduplicate DHCP lease handling on macOS ↗ kubernetes/minikube

Quick answers

What shipped in Kubernetes on June 13, 2026?
The apiserver watchCache got a major internal refactor to fix concurrent mutation bugs, while kops shipped its first beta release of 1.36 and Kubernetes promoted relaxed service naming rules to GA. In total, 56 commits, 30 pull requests, and 5 releases landed.
Who contributed to Kubernetes on June 13, 2026?
5 developers shipped this update, including serathius, hakman, Jefftree, adrianmoisey, and nirs.
What were the notable Kubernetes updates?
Merge pull request #139658 from serathius/watchcache-snapshot-clone, Merge pull request #139676 from serathius/watchcache-config, and Extract immutable watchCache configuration fields to ImmutableWatchCacheConfig.

More from @kubernetes

Kubernetes @kubernetes

VERTICAL POD AUTOSCALER 1.7.1 FIXES PROMETHEUS HISTORY REGRESSION

VPA's recommender was silently ignoring metric flags when querying Prometheus history, causing recommendations to restart from scratch instead of building on past data.

aryanputta eminaktas kubernetes-prow[bot] shurup +6
go 28 shipped 1-min read
Kubernetes @kubernetes

OPENSTACK CLOUD CONTROLLER MANAGER 2.36.1 SHIPS AS MANILA CSI GETS PROBE RETRY FIX

The OpenStack cloud provider released version 2.36.1 of its Helm chart while engineers fix critical snapshot deletion bugs in Cinder that could silently leak backups.

kubernetes-prow[bot] reylejano shurup TineoC +4
go 15 shipped 1-min read
Kubernetes @kubernetes

SCHEDULER GAINS PREQUEUING FILTER, KUBELET USER NAMESPACES MOVE TO BETA

Kubernetes tackles the pod requeue bottleneck that's been choking large clusters, while user namespacing ships closer to production.

geetasg AkihiroSuda gauravkghildiyal DigitalVeer +2
go 19 shipped 1-min read
Kubernetes @kubernetes

CLUSTER-AUTOSCALER PATCHES HIT ALL RELEASE BRANCHES AS DRA AND VOLUMEMOUNT BIND OPTIONS LAND

Cluster-autoscaler shipped four patch releases across versions 1.33 through 1.36 fixing ProvisioningRequest condition application and Scaleway node detection, while Kubernetes core merged DRA node operations and volumeMount bind mount options.

troychiu Argh4k marosset nispriha +7
go 89 shipped 1-min read

Daily updates, in your inbox

Follow Kubernetes

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.