Who contributed to Kubernetes on August 16, 2026?

5 developers shipped this update, including mrueg, kubernetes-prow[bot], Peter Rifel, moshevayner, and upodroid.

What were the notable Kubernetes updates?

digitalocean: delete SSH keys when deleting a cluster, kops: drop preset-do-ssh from DigitalOcean jobs, and return 404s very early.

@kubernetes

Container orchestration - what platform teams ship on

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

KOPS PLUGS DIGITALOCEAN SSH KEY LEAK, REGISTRY CUTS 404 NOISE

By RepoJournal · Filed 06:56 UTC on August 16, 2026 · About Kubernetes

5 people shipped this

upodroid @upodroid 4 cited

Peter Rifel @rifelpet 2 cited

mrueg @mrueg 1 cited

moshevayner @moshevayner 1 cited

kubernetes-prow[bot] @kubernetes-prow[bot]

DigitalOcean clusters were leaving orphaned SSH keys behind on teardown. kops shipped the fix [ref:6], test-infra is ready to land it [ref:4], and registry.k8s.io rolled out early 404 rejection to slash CloudFront noise [ref:12].

The kops fix [1] adds SSH key cleanup to the DigitalOcean resource deleter, matching what AWS and OpenStack already do. kops names each key after the cluster and fingerprint, uploads it via `dotasks/sshkey.go createKeypair`, but never tore it down. Test-infra's pending change [2] drops the preset-do-ssh label from 8 DigitalOcean e2e jobs and switches to throwaway keypairs per cluster, but it's blocked until kops lands the deletion logic. Over in registry.k8s.io, v0.7.0 shipped [4] with a dedicated Cloud Build service account and AWS CDN support, followed by an aggressive 404 rejection layer [3] that returns failures early instead of letting CloudFront existence checks drain budget. Kube-state-metrics fixed a race condition in config reload serialization [5] where three separate viper watchers were unsynchronized on the same context, and kops patched Akamai instance tag filters to use `+contains` predicates instead of rejected equality checks [6]. The k8s.io infrastructure bumped archeio to 0.7.0 [7] with BQ analytics datasets and ASN capture from GCP [8].

Action items

→ Merge kops DigitalOcean SSH key deletion [ref:6] before test-infra lands the job changes [ref:4] kubernetes/kops [immediate]
→ Monitor registry.k8s.io 404 rates post-deployment to validate CloudFront savings [ref:12] kubernetes/registry.k8s.io [monitor]
→ Verify kube-state-metrics config reload fix [ref:1] in canary before prod rollout kubernetes/kube-state-metrics [plan]

References

[1] digitalocean: delete SSH keys when deleting a cluster ↗ kubernetes/kops
[2] kops: drop preset-do-ssh from DigitalOcean jobs kubernetes/test-infra
[3] return 404s very early ↗ kubernetes/registry.k8s.io
[4] v0.7.0 ↗ kubernetes/registry.k8s.io
[5] fix: serialize config reloads so one does not strand the other ↗ kubernetes/kube-state-metrics
[6] fix(akamai): Fix Akamai (Linode) Instance tag filter function ↗ kubernetes/kops
[7] bump archeio to v0.7.0 ↗ kubernetes/k8s.io
[8] create bq dataset and pass asn values to archeio ↗ kubernetes/k8s.io

Quick answers

What shipped in Kubernetes on August 16, 2026?: DigitalOcean clusters were leaving orphaned SSH keys behind on teardown. kops shipped the fix [ref:6], test-infra is ready to land it [ref:4], and registry.k8s.io rolled out early 404 rejection to slash CloudFront noise [ref:12]. In total, 13 commits, 8 pull requests, and 1 releases landed.
Who contributed to Kubernetes on August 16, 2026?: 5 developers shipped this update, including mrueg, kubernetes-prow[bot], Peter Rifel, moshevayner, and upodroid.
What were the notable Kubernetes updates?: digitalocean: delete SSH keys when deleting a cluster, kops: drop preset-do-ssh from DigitalOcean jobs, and return 404s very early.

KOPS EXPANDS AKAMAI VOLUMES, TIGHTENS SSH USER DISCOVERY ACROSS CLOUDS

Kops merged volume management for Akamai while fixing SSH user detection gaps that affect Rocky Linux and GCE testing, as the project stabilizes its distro matrix and hardens test infrastructure.

go 48 shipped

@kubernetes Aug 15

KUBERNETES SCRUBS DEAD CODE: WEAVE NET AND ROMANA REMOVED FROM DOCS

The Kubernetes website purged references to two unmaintained network providers archived since 2024 and 2019 respectively, closing a security guidance gap before they could mislead operators.

go 68 shipped

@kubernetes Aug 14

KUBERNETES SHIPS GO 1.26.6 ACROSS CORE AND METRICS

Production Kubernetes binaries now compile with Go 1.26.6, which patches CVE fixes that hit the Go security release.

go 36 shipped

@kubernetes Aug 13

KUBERNETES STEERING ELECTION OPENS VOTER REGISTRATION; KOPS CLEANUP BEGINS

The Kubernetes Steering Committee expanded eligible voters for the 2026 election to include all org members across five repositories, addressing a four-month data gap while maintainers pushed through test infrastructure and metrics refinements across the ecosystem.

go 79 shipped

Elsewhere on the wire

AI Agents Aug 17

LANGCHAIN REFRESHES MODEL PROFILES AS OPENHANDS HARDENS LLM VALIDATION

LangChain's automated model profile system added DeepSeek-V4-Pro support while OpenHands deployed pre-flight LLM validation to catch misconfigured profiles before they ship.

ai-agents 8 shipped

Local LLMs Aug 17

LLAMA.CPP SHIPS MODEL OPTIMIZATIONS WHILE VLLM AND SGLANG CHASE MEMORY AND SCHEDULING GAINS

Across 87 commits and 5 releases, the local LLM stack is grinding through the unglamorous work that makes inference faster: killing dead code, fixing kernel launches, and removing synchronization bottlenecks.

llms 178 shipped

@CachyOS Aug 17

CACHYOS PACKAGES ROLL FORWARD, NANJING MIRROR GOES DARK

Python 3.11.16 and asusctl 6.4.0 ship across the stack as the China Nanjing mirror drops offline, signaling infrastructure pressure.

infra 64 shipped

Elixir & Phoenix Aug 17

ELIXIR CORE SHIPS CALENDAR SPEED SWEEP, PHOENIX LIVE VIEW FIXES UI STALLS

Three precision optimizations land in Elixir core with 1.75x speedups on date and time comparisons, while Phoenix Live View plugs a bug that was freezing UI for 200ms on zero-duration transitions.