RepoJournal
Kubernetes @kubernetes
176 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-19
stories 47
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

KOPS SHIPS APISERVER-ONLY NODES, KUBE-OPENAPI FIXES STDLIB JSON COLLISION

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

cheftako liggitt Jefftree rifelpet
4 people shipped this
cheftako @cheftako 1 cited liggitt @liggitt 1 cited Jefftree @Jefftree 1 cited rifelpet @rifelpet 1 cited

Kops now lets you run dedicated API server nodes separate from control plane workers, solving a years-old load balancer problem that sent traffic to both when you only wanted one.

Kops landed three related changes that reshape how you can distribute control plane work across nodes [1] [2] [3]. The issue: when you had both APIServer and Control Plane nodes, the load balancer sent traffic to both, forcing your core controllers to share resources with API traffic. Now with the new --api-server-size flag and DNS None routing, traffic routes only to APIServer nodes, protecting controller capacity. This is the topology you've been asking for. Over in kube-openapi, a critical fix landed to insulate go-json-experiment from stdlib JSON packages [4] [5]. Without this, Go 1.27's changing json/v2 prerelease behavior was causing unit test failures. The fix drops aliases to json/v1 and json/v2, ensuring go-json-experiment stays self-contained until the actual stdlib migration. Test-infra cleaned up benchmark noise by removing yaml, table, and json-pretty LIST benchmark jobs [6], keeping only JSON, proto, and cbor for cleaner signal on scalability regressions. Kops also hardened RHEL 10+ support by loading the ip_set kernel module and disabling firewalld on ForceNftables distros [7], unblocking Calico e2e failures across the grid.

Action items

References

  1. [1] API only CLI ↗ kubernetes/kops
  2. [2] Fixing LB behavior when you have both APIServer and Control Plane. ↗ kubernetes/kops
  3. [3] Adding flag to enable machine type for APIServer only. ↗ kubernetes/kops
  4. [4] Insulate go-json-experiment from stdlib ↗ kubernetes/kube-openapi
  5. [5] Merge pull request #616 from liggitt/insulate-stdlib ↗ kubernetes/kube-openapi
  6. [6] Remove yaml, table, and json-pretty LIST benchmark jobs ↗ kubernetes/test-infra
  7. [7] nodeup: load ip_set module and disable firewalld on RHEL10 ↗ kubernetes/kops

$ ls kubernetes/reviews/ # the step-back reads

the week in review Kubernetes release v0.23.0 adds trixie kube-cross variant the month in review node-problem-detector 1.37.0 patches three CVEs
Full archive → Weekly reviews →

Quick answers

What shipped in Kubernetes on June 19, 2026?
Kops now lets you run dedicated API server nodes separate from control plane workers, solving a years-old load balancer problem that sent traffic to both when you only wanted one. In total, 30 commits and 17 pull requests landed.
Who contributed to Kubernetes on June 19, 2026?
4 developers shipped this update, including cheftako, liggitt, Jefftree, and rifelpet.
What were the notable Kubernetes updates?
API only CLI, Fixing LB behavior when you have both APIServer and Control Plane, and Adding flag to enable machine type for APIServer only.
♥

$ log @kubernetes --recent

Control plane cleanups: watchcache context prep, RecursiveReadOnlyMounts gate removed 90 shipped Consistent get backed out when etcd transforms are on 121 shipped Admission webhook metrics go beta; watch cache gets a minheap freshness waiter 103 shipped ML-DSA support for service account tokens 7 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.