RepoJournal
Kubernetes @kubernetes
113 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-05
stories 37
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

kOps drops legacy keyset aliases, mirroring deeper Kubernetes dependency shifts

By RepoJournal · Filed · About Kubernetes

Joe Betz Kubernetes Publisher hakman Jordan Liggitt kubernetes-prow[bot] dependabot
6 people shipped this
Joe Betz @jpbetz 3 cited Kubernetes Publisher @k8s-publishing-bot 2 cited hakman @hakman 1 cited Jordan Liggitt @liggitt 1 cited kubernetes-prow[bot] @kubernetes-prow[bot] dependabot @dependabot

kOps removes legacy PKI fallbacks that could wrongly trigger CA recreation, while Kubernetes publishing repos roll forward on structured-merge-diff v7, kube-openapi, and Go 1.27.

kOps removed legacy keyset fallbacks and obsolete LegacyFormat migration code [1]. This drops fallbacks that "could mask transient read errors and cause kOps to propose recreating an existing CA," and it addresses issue #18680. Operators on older clusters with legacy key formats should upgrade carefully: the removed aliases were the safety net that let kOps read pre-migration keysets.

Meanwhile, Jordan Liggitt landed a coordinated dependency bump across the Kubernetes codebase: structured-merge-diff/v7, latest kube-openapi, and dropping json-iterator [2]. This lands in code-generator, endpointslice, and kube-scheduler as a single vendoring wave [3]. The same work also updates those repos to Go 1.27 [4]. For downstream consumers, this means schema-merge behavior and JSON handling will shift to the newer stack with the next Kubernetes release.

In the same generator space, validation-gen is now importable: it was split into generator and args packages [5], the tag prefix is configurable (no longer hard-coded to "k8s:") [6], and a worked custom-prefix example was added [7]. Third-party projects that wanted to reuse validation-gen with their own tags can now build their own binary on the same code.

Action items

References

  1. [1] fix(pki): drop legacy keyset aliases ↗ kubernetes/kops
  2. [2] Merge pull request #141664 from liggitt/smd-json-v2 ↗ kubernetes/endpointslice
  3. [3] Vendor smd/v7, latest kube-openapi ↗ kubernetes/endpointslice
  4. [4] Merge pull request #141663 from liggitt/go127 ↗ kubernetes/endpointslice
  5. [5] validation-gen: split the generator into importable packages ↗ kubernetes/code-generator
  6. [6] validation-gen: make the tag prefix configurable ↗ kubernetes/code-generator
  7. [7] validation-gen: add a worked custom-prefix example ↗ kubernetes/code-generator

$ ls kubernetes/reviews/ # the step-back reads

the week in review Declarative validation for Condition.Message lands, graduates stable the month in review August Ships Kubernetes 1.37 RC and kOps 1.37 Beta
Topics: Go Infrastructure Full archive →

Quick answers

What shipped in Kubernetes on September 5, 2026?
kOps removes legacy PKI fallbacks that could wrongly trigger CA recreation, while Kubernetes publishing repos roll forward on structured-merge-diff v7, kube-openapi, and Go 1.27. In total, 29 commits and 8 pull requests landed.
Who contributed to Kubernetes on September 5, 2026?
6 developers shipped this update, including hakman, kubernetes-prow[bot], Kubernetes Publisher, Joe Betz, dependabot, and Jordan Liggitt.
What were the notable Kubernetes updates?
fix(pki): drop legacy keyset aliases, Merge pull request #141664 from liggitt/smd-json-v2, and Vendor smd/v7, latest kube-openapi.
♥

$ log @kubernetes --recent

Docs drive the day: Spanish SIG Docs page lands, plus maintenance merges 15 shipped VPA chart 0.12.0 syncs CRDs on upgrade; kOps gains Amazon Linux 2027 coverage 49 shipped Declarative validation graduates to stable in discovery API 77 shipped Declarative validation for Condition.Message lands across apimachinery consumers 5 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.