The Wire · Showcase
KUBERNETES SCRUBS DEAD CODE: WEAVE NET AND ROMANA REMOVED FROM DOCS
By RepoJournal · Filed · About Kubernetes
The Kubernetes website purged references to two unmaintained network providers archived since 2024 and 2019 respectively, closing a security guidance gap before they could mislead operators.
The docs team yanked Weave Net and Romana from the Install a Network Policy Provider section [1], removing stale alternatives that left clusters vulnerable to unpatched security issues. Weave was archived in 2024 [1], while Romana hasn't shipped updates in five years. In parallel, kops dropped stale test fixtures for privateweave [2] and bumped AWS CNI to 1.23.0 [3], signaling a broader shift away from deprecated networking layers. The CI infrastructure team meantime culled a shared SSH key from 1,647 AWS test jobs [4], replacing it with ephemeral per-cluster keypairs that kubetest2-kops now generates on the fly. In kube-state-metrics, a fix prevents deployment metric collection from panicking when rollingUpdate values are unset [5], hardening metric scrape reliability. All moves trace to operational hygiene: kill dead code, rotate secrets, harden metrics collection.
One email a day. Unsubscribe in one click.
Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Review your Network Policy Provider setup; if using Weave Net or Romana, migrate immediately to maintained alternatives kubernetes/website [immediate]
- → Upgrade kops clusters and regenerate CI SSH keypairs to use ephemeral per-cluster keys kubernetes/kops [plan]
- → Update kube-state-metrics to 2.x if running deployment metric scrape on clusters with unset rollingUpdate specs kubernetes/kube-state-metrics [monitor]
References
- [1] Remove unmaintained Weave Net and Romana network policy provider pages ↗ kubernetes/website
- [2] Merge pull request #18689 from hakman/remove-privateweave-fixtures kubernetes/kops
- [3] chore(networking): bump aws-cni to version 1.23.0 ↗ kubernetes/kops
- [4] kops: drop preset-aws-ssh from all AWS jobs ↗ kubernetes/test-infra
- [5] Merge pull request #3083 from mrueg/deployment-rollingupdate-no-panic kubernetes/kube-state-metrics