RepoJournal
Kubernetes

@kubernetes

Container orchestration - what platform teams ship on

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

KOPS FIXES DNS-CONTROLLER ORPHAN BUG, PROW GAINS CLOUD METADATA INJECTION

By RepoJournal · Filed · About Kubernetes

Kops now automatically cleans up dns-controller deployments when clusters migrate away from gossip DNS, solving a manual deletion problem that's plagued operators for releases.

The dns-controller fix [1] addresses a real operational headache: when clusters switch from gossip to dns=none topology or external-dns providers, the addon channel never prunes the orphaned deployment, forcing manual cleanup. Now it applies an empty manifest with prune directives instead, letting the normal reconciliation flow handle deletion. In parallel, the test infrastructure got smarter. Prow's mutation system [2] now injects cloud metadata into test containers (PROW_CLOUD_PROVIDER, PROW_NODE_REGION, PROW_NODE_ZONE) via a new namespaced Kyverno policy, and switched to JSON logging for better Datadog observability. The fix also resolves argocd sync errors by following Kyverno platform notes. Etcd-manager got a point bump to v3.0.20260707 [4], and Karpenter nodes now support SSH access via EC2 Instance Connect [5]. On the API side, declarative validation continues its march. CSIDriver's volumeLifecycleModes field migrated to the +k8s:immutable marker [3], replacing hand-written ValidateCSIDriverUpdate checks with parity-tested generated validation. Code-generator itself gained the ability to generate validators into multiple packages [6], letting one input type have self-contained validators spread across outputs. ObjectMeta got DV configuration [7], and a new monotonic counter validation tag shipped [8].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] dns-controller: always apply the addon, empty when unused ↗ kubernetes/kops
  2. [2] fix a bug with pod mutation and insert cloud metadata into the test container ↗ kubernetes/k8s.io
  3. [3] storage: migrate volumeLifecycleModes to declarative validation kubernetes/api
  4. [4] etcd-manager: upgrade to v3.0.20260707 ↗ kubernetes/kops
  5. [5] dump: grant SSH access to Karpenter nodes via EC2 Instance Connect ↗ kubernetes/kops
  6. [6] validation-gen: generate validation into multiple packages kubernetes/code-generator
  7. [7] Merge pull request #139505 from lalitc375/configure-dv-part1 kubernetes/api
  8. [8] Merge pull request #137881 from itzPranshul/monotonic kubernetes/code-generator

Quick answers

What shipped in Kubernetes on July 10, 2026?
Kops now automatically cleans up dns-controller deployments when clusters migrate away from gossip DNS, solving a manual deletion problem that's plagued operators for releases. In total, 29 commits and 10 pull requests landed.
Who contributed to Kubernetes on July 10, 2026?
2 developers shipped this update, including hakman and upodroid.
What were the notable Kubernetes updates?
dns-controller: always apply the addon, empty when unused, fix a bug with pod mutation and insert cloud metadata into the test container, and storage: migrate volumeLifecycleModes to declarative validation.

More from @kubernetes

Daily updates, in your inbox

Follow Kubernetes

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.