$ the-wire · showcase
DeepCopy revert lands, client-go leader election gets a recovery mode
By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology
![kubernetes-prow[bot]](https://avatars.githubusercontent.com/in/992787?v=4)
The apiserver's attempt to drop redundant DeepCopyObject calls in Store validation hooks was reverted the same cycle it merged, leaving the optimization unshipped while client-go and kops moved real behavior forward.
Merge pull request #143448 from Jefftree/revert-142743 kubernetes/apiserver
The apiserver commit that removed redundant DeepCopyObject calls in Store validation hooks was backed out, so validation paths behave exactly as before and the optimization does not appear in a build. The revert carries the original merge it undoes in the same history, which makes it a clean pair to track if you were expecting the saving.
Merge pull request #143289 from michaelasp/leader-election-recovery kubernetes/client-go
client-go/leaderelection gains a recovery mode and a write gate, a structural change to how lock holders handle the window where leadership is uncertain. Worth reading the diff before pinning a new client-go against controllers that depend on leader election for singleton work.
aws: update pod-identity-webhook to v0.6.19 kubernetes/kops
kops re-derives the pod-identity-webhook manifest from upstream deploy/ at v0.6.19, which adds the eks.amazonaws.com/skip-pod-identity-webhook objectSelector entry. authman keeps admissionReviewVersions at v1beta1 deliberately: the maintainer notes that switching to v1 together with the image would reject responses from old v0.6.17 pods mid-rollout. Story 10 is the same change arriving through ...
Update aws-iam-authenticator to v0.7.24 kubernetes/kops
The authentication.aws addon image moves from v0.6.20-eks-1-30-7 to v0.7.24-cvefix-eks-1-37-4, still pulled from eks-distro because the upstream ECR image problem behind #16615 was never fixed. Note the behavior change arriving with it: aws-iam-authenticator moved to aws-sdk-go v2 in v0.7.3, and without --region set the server now takes its region from IMDS.
sig-network: rename wg-ai-gateway repo and teams to ai-gateway kubernetes/org
kubernetes-sigs/wg-ai-gateway was renamed to kubernetes-sigs/ai-gateway on GitHub and peribolos started 404ing when it tried to set team permissions on the old name, having already removed wg-ai-gateway-maintainers from the new repo. The fix updates repo references, renames the teams using the previous-name mechanism to preserve them, and updates the restrictions allowlist. Story 14 covers the ...
Merge pull request #142394 from Jefftree/patch-prune-smp kubernetes/apiserver
Elsewhere the apiserver work continues quietly: strategic merge patch now converts only patched top-level fields, watchers carry a selector, and getCurrentState drops to a plain function, with no interface guarantee for callers. Also in the long tail, autoscaler bumped actions/checkout from 7.0.0 to 7.0.1.
