RepoJournal
Kubernetes @kubernetes
139 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-25
stories 37
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Post-quantum certs reach client-go, managedFields gets a server-side opt-out

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

Kubernetes Publisher kubernetes-prow[bot] hakman Anant Kumar Mykhailo Bobrovskyi Yongrui Lin
6 people shipped this
Kubernetes Publisher @k8s-publishing-bot 2 cited kubernetes-prow[bot] @kubernetes-prow[bot] 1 cited hakman @hakman 1 cited Anant Kumar @antcybersec 1 cited Mykhailo Bobrovskyi @mbobrovskyi Yongrui Lin @yongruilin

Kubernetes' post-quantum work pushed deeper into the stack today, while kOps picked up 1.37 and the apiserver's watch cache picked up new correctness testing.

client-go/util/cert: let callers choose the self-signed key algorithm kubernetes/client-go

by Anant Kumar

GenerateSelfSignedCertKeyWithOptions previously hardcoded a 2048-bit RSA key for both the CA and the serving certificate, so the apiserver's --cert-dir and loopback certificates could not be post-quantum even once the rest of the stack could. A new GenerateKey option defaults to the existing RSA key, so current output is unchanged, and key encipherment is now asserted only for RSA since ECDSA a...

Merge pull request #139561 from yongruilin/managedfields-opt-out kubernetes/apiserver

by Kubernetes Publisher

KEP-5958 lands as a server-side opt-out for metadata.managedFields, giving clusters a supported way to stop emitting the field. The companion changes guard Unstructured lists and extend the drop tests across Table, protobuf and CRD responses.

chore(channels): add Kubernetes 1.37 and September patch releases kubernetes/kops

by hakman

The alpha and stable channels now carry Kubernetes 1.37 at 1.37.1, with the alpha channel bumped to 1.36.5, 1.35.9 and 1.34.12 and asset hashes added for v1.34.12 through v1.37.1. Separately, the AWS pod-identity-webhook moves to v0.6.17 pulled from ECR Public, because upstream stopped publishing releases to Docker Hub after v0.6.7; the new version supports ConfigMap entries with a "*" namespac...

Merge pull request #142117 from serathius/watchcache-correctness-watch kubernetes/apiserver

by Kubernetes Publisher

Watch validation was added to the correctness testing suite, and the benchmarking exemplar pod now uses strict decode with corev1 Pods after the old one proved broken. On the cacher path, the ShardedListAndWatch gate is now checked once per list rather than repeatedly.

Merge pull request #9965 from kahirokunn/add-kahirokunn-as-sig-ui-lead kubernetes/k8s.io

by kubernetes-prow[bot]

In smaller news: kahirokunn was added as sig UI lead, and the k8s.io site promoted Kueue v0.18.10 and v0.19.6.

$ ls kubernetes/reviews/ # the step-back reads

the week in review v1.38 KEPs stack up: WebSockets GA, WAS and CRI streaming to beta the month in review Kubernetes patches SSH DoS CVE as 1.38 KEPs line up
Topics: Go Infrastructure Full archive → Weekly reviews →

Quick answers

What shipped in Kubernetes on September 25, 2026?
Kubernetes' post-quantum work pushed deeper into the stack today, while kOps picked up 1.37 and the apiserver's watch cache picked up new correctness testing. In total, 28 commits and 9 pull requests landed.
Who contributed to Kubernetes on September 25, 2026?
6 developers shipped this update, including kubernetes-prow[bot], Mykhailo Bobrovskyi, hakman, Yongrui Lin, Kubernetes Publisher, and Anant Kumar.
What were the notable Kubernetes updates?
client-go/util/cert: let callers choose the self-signed key algorithm, Merge pull request #139561 from yongruilin/managedfields-opt-out, and chore(channels): add Kubernetes 1.37 and September patch releases.
♥

$ log @kubernetes --recent

Watch cache streaming, kubectl kuberc fixes 59 shipped Quantity becomes a value type, HPA overflow fixed 86 shipped GCP provider learns to skip firewall rules, metis gets non-reusable CIDRs 18 shipped DRA capacity requests, in-place node resize, and weighted load balancing head to KEP review 119 shipped

$ log --all # elsewhere on the wire

@openclaw OpenClaw 2026.8.35 ships critical security fixes, Bun patches NODE_OPTIONS and worker ports Agentic Coding Codex drops the tool-namespace capability gate, Goose ships 1.53.0

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.