RepoJournal
Kubernetes @kubernetes
126 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-12
stories 75
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Service CIDR feature gates retired, grpc bumped to 1.82.2

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

Kubernetes Publisher kubernetes-prow[bot] Patrick Ohly thc1006 Divyanshu Prakash kfess my-git9
8 people shipped this
Kubernetes Publisher @k8s-publishing-bot 3 cited kubernetes-prow[bot] @kubernetes-prow[bot] 2 cited Patrick Ohly @pohly 1 cited thc1006 @thc1006 1 cited Divyanshu Prakash @divyanshuprakas-h 1 cited kfess @kfess my-git9 @my-git9 Josh Berkus @jberkus

Kubernetes removed the MultiCIDRServiceAllocator and DisableAllocatorDualWrite feature gates and bumped google.golang.org/grpc to v1.82.2 across three staged repos, while DRA got an allocation failure fix.

Service CIDR allocation has shed two feature gates. MultiCIDRServiceAllocator and DisableAllocatorDualWrite are both gone [1], which means anything still setting those flags in a kube-apiserver or kube-controller-manager config will need them removed, and operators who never enabled dual-write no longer have a fallback path back.

The grpc bump to v1.82.2 landed first in kubernetes/kubernetes [2] and was carried by the publishing bot into pod-security-admission [3] and dynamic-resource-allocation [4]. It is tagged against CVE-2026-84445 in the branch name, so treat this as a security-driven dependency move rather than routine housekeeping.

On the DRA side, allocation failures now get classified correctly. An invalid all-device allocation is marked as a per-node failure instead of failing the whole claim [5][6], so one bad node no longer masks a workable allocation elsewhere in the claim.

Two smaller items. kubeadm's OpenRC enablement check matched the service name against the entire output of rc-update show default, so an unrelated service containing that name could answer for it [7]. And ktesting was reorganized into doc.go, tcontext.go, assert.go, signal*.go, contexthelper.go, and ktesting.go, a pure copy-and-paste move, quote, "with one exception" [8].

Action items

References

  1. [1] Merge pull request #141762 from danwinship/service-cidr-cleanup ↗ kubernetes/kubernetes
  2. [2] Merge pull request #141976 from harshitgupta31415/codex/grpc-cve-2026-84445 ↗ kubernetes/kubernetes
  3. [3] Merge pull request #141976 from harshitgupta31415/codex/grpc-cve-2026-84445 ↗ kubernetes/pod-security-admission
  4. [4] Merge pull request #141976 from harshitgupta31415/codex/grpc-cve-2026-84445 ↗ kubernetes/dynamic-resource-allocation
  5. [5] Merge pull request #141898 from divyanshuprakas-h/fix-dra-allocation-per-node ↗ kubernetes/dynamic-resource-allocation
  6. [6] fix(dra): mark invalid all-device allocation as per-node failure ↗ kubernetes/dynamic-resource-allocation
  7. [7] kubeadm: match the service and runlevel columns for OpenRC enablement ↗ kubernetes/kubernetes
  8. [8] ktesting: reorganize implementation code ↗ kubernetes/kubernetes

$ ls kubernetes/reviews/ # the step-back reads

the week in review Master drops containerd 1.7 over RuntimeConfig RPC the month in review August Ships Kubernetes 1.37 RC and kOps 1.37 Beta
Topics: Go Infrastructure Full archive → Weekly reviews →

Quick answers

What shipped in Kubernetes on September 12, 2026?
Kubernetes removed the MultiCIDRServiceAllocator and DisableAllocatorDualWrite feature gates and bumped google.golang.org/grpc to v1.82.2 across three staged repos, while DRA got an allocation failure fix. In total, 45 commits and 30 pull requests landed.
Who contributed to Kubernetes on September 12, 2026?
8 developers shipped this update, including kubernetes-prow[bot], Patrick Ohly, thc1006, kfess, my-git9, Kubernetes Publisher, Divyanshu Prakash, and Josh Berkus.
What were the notable Kubernetes updates?
Merge pull request #141762 from danwinship/service-cidr-cleanup, Merge pull request #141976 from harshitgupta31415/codex/grpc-cve-2026-84445, and Merge pull request #141976 from harshitgupta31415/codex/grpc-cve-2026-84445.
♥

$ log @kubernetes --recent

Minikube drops pre-1.28 test fixtures, golang.org/x bumps land across the tree 87 shipped kubectl explain gains shell completion, kubelet threads real contexts 80 shipped Vultr autoscaling fixes, LimitRanger stops re-rejecting PVC updates 64 shipped DRA feature gate removed, code-generator learns multi-doc extensions files 69 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.