126 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-10
stories 39

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

KOPS FIXES DNS-CONTROLLER ORPHAN BUG, PROW GAINS CLOUD METADATA INJECTION

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

Kops now automatically cleans up dns-controller deployments when clusters migrate away from gossip DNS, solving a manual deletion problem that's plagued operators for releases.

The dns-controller fix [1] addresses a real operational headache: when clusters switch from gossip to dns=none topology or external-dns providers, the addon channel never prunes the orphaned deployment, forcing manual cleanup. Now it applies an empty manifest with prune directives instead, letting the normal reconciliation flow handle deletion. In parallel, the test infrastructure got smarter. Prow's mutation system [2] now injects cloud metadata into test containers (PROW_CLOUD_PROVIDER, PROW_NODE_REGION, PROW_NODE_ZONE) via a new namespaced Kyverno policy, and switched to JSON logging for better Datadog observability. The fix also resolves argocd sync errors by following Kyverno platform notes. Etcd-manager got a point bump to v3.0.20260707 [4], and Karpenter nodes now support SSH access via EC2 Instance Connect [5]. On the API side, declarative validation continues its march. CSIDriver's volumeLifecycleModes field migrated to the +k8s:immutable marker [3], replacing hand-written ValidateCSIDriverUpdate checks with parity-tested generated validation. Code-generator itself gained the ability to generate validators into multiple packages [6], letting one input type have self-contained validators spread across outputs. ObjectMeta got DV configuration [7], and a new monotonic counter validation tag shipped [8].

Action items

References

  1. [1] dns-controller: always apply the addon, empty when unused ↗ kubernetes/kops
  2. [2] fix a bug with pod mutation and insert cloud metadata into the test container ↗ kubernetes/k8s.io
  3. [3] storage: migrate volumeLifecycleModes to declarative validation kubernetes/api ↗
  4. [4] etcd-manager: upgrade to v3.0.20260707 ↗ kubernetes/kops
  5. [5] dump: grant SSH access to Karpenter nodes via EC2 Instance Connect ↗ kubernetes/kops
  6. [6] validation-gen: generate validation into multiple packages kubernetes/code-generator ↗
  7. [7] Merge pull request #139505 from lalitc375/configure-dv-part1 kubernetes/api ↗
  8. [8] Merge pull request #137881 from itzPranshul/monotonic kubernetes/code-generator ↗

Quick answers

What shipped in Kubernetes on July 10, 2026?
Kops now automatically cleans up dns-controller deployments when clusters migrate away from gossip DNS, solving a manual deletion problem that's plagued operators for releases. In total, 29 commits and 10 pull requests landed.
Who contributed to Kubernetes on July 10, 2026?
2 developers shipped this update, including hakman and upodroid.
What were the notable Kubernetes updates?
dns-controller: always apply the addon, empty when unused, fix a bug with pod mutation and insert cloud metadata into the test container, and storage: migrate volumeLifecycleModes to declarative validation.