176 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-22
stories 86

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

kubectl drops OpenAPI v2, client-go extracts from v3

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

kubectl's apply and diff patcher no longer fall back to OpenAPI v2, and client-go now builds its UnstructuredExtractor from v3, finishing the client-side migration the deprecation started.

kubectl: remove OpenAPI v2 fallback from apply and diff patcher kubernetes/kubernetes

by Sean Sullivan

kubectl apply and the diff patcher no longer fall back to OpenAPI v2 when fetching schemas for the patch calculation. Clusters or tooling that only expose a v2 discovery document will lose that path, so anything serving schemas only via v2 needs a v3 endpoint before this lands in a kubectl you use.

Merge pull request #142048 from seans3/client-go-extract-openapi-v3 kubernetes/kubernetes

by kubernetes-prow[bot]

client-go's UnstructuredExtractor is now built from OpenAPI v3 instead of the deprecated v2. Code consuming status and spec fields through that extractor follows the v3 schema source, which is the client-side half of the same migration.

Merge pull request #142051 from antcybersec/remove-kep4193-serviceaccount-token-gates kubernetes/kubernetes

by kubernetes-prow[bot]

KEP-4193's ServiceAccount token feature gates, now GA, are removed from the tree. Manifests or admission configs still setting those flags have nothing left to toggle.

Extract pod group hierarchy traversal to plugins/helper kubernetes/kubernetes

by tosi3k

traverseHierarchyUp moves out of the preemption package to plugins/helper as TraverseHierarchyUp, beside its downward counterpart GetPodGroupStates. A missing group, an unsupported key type, a cycle, or exceeding WorkloadMaxTreeDepth now ends traversal with a yielded error rather than a silent stop.

containerd: add release/2.3 and release/2.4 build jobs kubernetes/test-infra

by chrishenzie

The quieter tail: test-infra adds amd64-only containerd release/2.3 and release/2.4 build jobs to k8s-staging-cri-tools, adds prow config for the apiextensions-api staging repo, and the release repo bumps step-security/harden-runner from 2.22.1 to 2.22.2.

Quick answers

What shipped in Kubernetes on October 22, 2026?
kubectl's apply and diff patcher no longer fall back to OpenAPI v2, and client-go now builds its UnstructuredExtractor from v3, finishing the client-side migration the deprecation started. In total, 54 commits and 32 pull requests landed.
Who contributed to Kubernetes on October 22, 2026?
7 developers shipped this update, including Sean Sullivan, kubernetes-prow[bot], tosi3k, elmiko, Kubernetes Publisher, chrishenzie, and Christoph Blecker.
What were the notable Kubernetes updates?
kubectl: remove OpenAPI v2 fallback from apply and diff patcher, Merge pull request #142048 from seans3/client-go-extract-openapi-v3, and Merge pull request #142051 from antcybersec/remove-kep4193-serviceaccount-token-gates.