Kubernetes

@kubernetes

Container orchestration โ€” what platform teams ship on

Pick a date

The Wire ยท Showcase

KOPS FIXES DNS-CONTROLLER ORPHAN BUG, PROW GAINS CLOUD METADATA INJECTION

By RepoJournal ยท Filed ยท About Kubernetes

Kops now automatically cleans up dns-controller deployments when clusters migrate away from gossip DNS, solving a manual deletion problem that's plagued operators for releases.

The dns-controller fix [1] addresses a real operational headache: when clusters switch from gossip to dns=none topology or external-dns providers, the addon channel never prunes the orphaned deployment, forcing manual cleanup. Now it applies an empty manifest with prune directives instead, letting the normal reconciliation flow handle deletion. In parallel, the test infrastructure got smarter. Prow's mutation system [2] now injects cloud metadata into test containers (PROW_CLOUD_PROVIDER, PROW_NODE_REGION, PROW_NODE_ZONE) via a new namespaced Kyverno policy, and switched to JSON logging for better Datadog observability. The fix also resolves argocd sync errors by following Kyverno platform notes. Etcd-manager got a point bump to v3.0.20260707 [4], and Karpenter nodes now support SSH access via EC2 Instance Connect [5]. On the API side, declarative validation continues its march. CSIDriver's volumeLifecycleModes field migrated to the +k8s:immutable marker [3], replacing hand-written ValidateCSIDriverUpdate checks with parity-tested generated validation. Code-generator itself gained the ability to generate validators into multiple packages [6], letting one input type have self-contained validators spread across outputs. ObjectMeta got DV configuration [7], and a new monotonic counter validation tag shipped [8].

Action items

References

  1. [1] dns-controller: always apply the addon, empty when unused โ†— kubernetes/kops
  2. [2] fix a bug with pod mutation and insert cloud metadata into the test container โ†— kubernetes/k8s.io
  3. [3] storage: migrate volumeLifecycleModes to declarative validation kubernetes/api
  4. [4] etcd-manager: upgrade to v3.0.20260707 โ†— kubernetes/kops
  5. [5] dump: grant SSH access to Karpenter nodes via EC2 Instance Connect โ†— kubernetes/kops
  6. [6] validation-gen: generate validation into multiple packages kubernetes/code-generator
  7. [7] Merge pull request #139505 from lalitc375/configure-dv-part1 kubernetes/api
  8. [8] Merge pull request #137881 from itzPranshul/monotonic kubernetes/code-generator

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • โ€ข14 famous open source orgs
  • โ€ขOne wire per day
  • โ€ขPublic, generic
  • โ€ขRead on the web, when you remember

Your wire

  • โ†’Up to 1,500 of your repos - orgs, deps, vendors
  • โ†’Morning and evening briefs
  • โ†’Action items routed to your team
  • โ†’Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.