$ the-wire · showcase
Kubelet stops leaking unusable link-local nameservers into pods
By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology
Two API-level fixes headline the day: kubelet now filters scoped IPv6 link-local nameservers out of Default-policy pod resolv.conf files, and the CEL cidr() function gains isMask.
[KUBELET]: Filter scoped link-local DNS servers kubernetes/kubernetes
kubelet used to copy the node's nameserver entries verbatim, so a scoped entry like fe80::29c:2ff:fea9:fdd0%3 landed in the pod's /etc/resolv.conf and broke resolution. Those entries are now filtered before they reach pods using dnsPolicy: Default.
Add cidr().isMask, clarify docs a bit kubernetes/kubernetes
cidr().isMask joins the CEL API, syncing Kubernetes to the version in cel-go. The motivation is the common mistake of writing isCIDR(val) when you mean isCIDR(val) && cidr(val).isMask, since isCIDR matches non-mask prefixes.
Merge pull request #37813 from Champbreed/bump-tempelis-image kubernetes/test-infra
Tempelis picks up a --validate-only mode for the merge PR titled "feat: bump Tempelis image to include --validate-only feature".
Fix WatchList HTTP benchmark snapshot flag kubernetes/test-infra
The WatchList HTTP benchmark presubmit had a broken snapshot flag; it now passes the correct one.
[ko] Add content/ko/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md kubernetes/website
Korean localization adds the kubeadm dual-stack support page, matching the existing English production-environment docs; the website repo also corrected a wrong instance label in the MySQL StatefulSet example, and kubernetes/release took routine dependabot bumps of sigs.k8s.io/release-utils to 0.12.5 and google.golang.org/api to 0.300.0.
